last executing test programs:

3.230980563s ago: executing program 3 (id=2127):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x20, 0x2, 0x40, 0x0, 0x7fffffffffffffff, 0x8, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2ee8, 0x4}, 0x108208, 0x4, 0x4, 0x4, 0x7, 0x1, 0x6, 0x0, 0x5, 0x0, 0x7fffffffffffffff}, 0x0, 0x4, r1, 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r3)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10022)
recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

1.802410907s ago: executing program 3 (id=2128):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3, 0x6, 0x4, 0x9, 0x0, 0x6, 0x88003, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x140, 0x7, 0xffff0001, 0x7, 0x9, 0xf, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x2, 0x1, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000223a148cb54200002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180119a405096a20a8a69061e960e361d33631e8caf498492a5827151bafb610a6642c8aa90cc76a2f22db5d59bbb3c948cd2953df64c1c2f8ca77a7d3c7ddafe13363a087adf6e503e924e0b710954f10b89699c8c2c072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r3)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r7 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
close(r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x81, 0x2, 0x0, 0x9, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x8, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r9 = socket$kcm(0x10, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0)
close(r9)

1.800350216s ago: executing program 2 (id=2138):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000280), 0x0}, 0xffe1)

1.715469621s ago: executing program 1 (id=2129):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x12)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r1], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06"], 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="1703db7b1f67dedff1d934dc54d535b737fd41d45608910612bf08c0d7c8ea1fb598e1de9a4f70676ed16b482b46d2021f97316b4c770f1125da6114c32967d2927a622c3ff1aa6d5145d8f54273c866c32bd49dcc23f4aad79a5eaa718154e14b5bd45fd094088032d0258ea2563feb93a3c12fcd6556e2a1b3870d0cdcbef06d86dafe3fc37d3093b63ff39ea1fab4e9fa8d7dd793d0d834c5ebfdbecf7e8153fbb28e3d90bdeede116eeae72aa919b43c371743f349dfe5", 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1.557314069s ago: executing program 2 (id=2131):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010203507d25a806f8c6394f903", 0x11}], 0x1}, 0x8000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
close(r2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80581, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r3, 0x16, 0x0, 0x3d, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r3}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r7, r5, 0x8, 0x14, 0x0, @void, @value=r5, @void, @void, r6}, 0x20)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r9=>0x0})
setsockopt$sock_attach_bpf(r9, 0x10f, 0x8a, 0x0, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x9a)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x1e00, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x1f, 0x0, 0x0, @void, @value=0x0}, 0x20)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0)
close(r11)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x200c, 0x81, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

1.555762169s ago: executing program 1 (id=2132):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000018000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000099f600008500000015000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

1.533189621s ago: executing program 0 (id=2133):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x8}}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x2aa2a604995c582e)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x8}}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x2aa2a604995c582e) (async)

1.459660124s ago: executing program 3 (id=2134):
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.395344337s ago: executing program 0 (id=2137):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x50, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x105b4, <r5=>0x0}, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x11, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4f}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x80, 0x31, &(0x7f0000000880)=""/49, 0x41000, 0x16, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f00000008c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x7, 0x1ff, 0x80000000}, 0x10, r5, r6, 0x3, &(0x7f0000000b80)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x0, 0x5, 0x7, 0x4}, {0x1, 0x5, 0x2, 0x1}, {0x5, 0x2, 0x9, 0x4}], 0x10, 0x1}, 0x94)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0xfffffffc, 0x8}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7, 0x1, 0x3ff, 0x10000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x30}, [@ldst={0x0, 0x2, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x5b, &(0x7f0000000380)=""/91, 0x41100, 0x1a, '\x00', r3, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x6, 0x2, 0x43da}, 0x10, r5, 0xffffffffffffffff, 0x8, &(0x7f0000000880)=[0x1, r7, r9, r10], &(0x7f00000008c0)=[{0x3, 0x4, 0x6, 0x6}, {0x1, 0x2, 0xf, 0xc}, {0x2, 0x5, 0x7, 0x5}, {0x2, 0x3, 0x3, 0x4}, {0x2, 0x2, 0x1, 0xa}, {0x3, 0x2, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x4}, {0x5, 0x1, 0x2, 0x9}], 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080))

1.394899728s ago: executing program 3 (id=2139):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4) (async)
r1 = socket$kcm(0x10, 0x3, 0x10) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$kcm(0x10, 0x3, 0x1f) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f00000000c0)}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @volatile={0x10, 0x0, 0x0, 0x9, 0x3}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x3, [{0xe, 0x0, 0xffffc20d}]}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x8e, [{0x9, 0x0, 0x62d}, {0x2, 0x3, 0x5}]}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0xf2, [{0x9, 0x0, 0x3}, {0xd, 0x2, 0x1}, {0x2, 0x3, 0x2cb}]}, @var={0xc, 0x0, 0x0, 0xe, 0x3, 0x2}, @restrict={0x10}]}, {0x0, [0x5f, 0x0, 0x2e, 0x0]}}, &(0x7f00000003c0)=""/250, 0xca, 0xfa, 0x1, 0x8, 0x10000}, 0x28) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r5) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x80, 0x0}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="1dc0b697a30b"}) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)=ANY=[], 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0xff}, 0x28)
write$cgroup_subtree(r4, &(0x7f0000000240)={[{0x2b, 'rlimit'}, {0x2d, 'rdma'}]}, 0xe) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001840)={r0, &(0x7f0000000740)="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", &(0x7f0000001740)=""/229}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

972.25083ms ago: executing program 2 (id=2140):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000800000000008100200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000810000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x8, 0x3a, &(0x7f00000007c0)=""/58, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

909.080343ms ago: executing program 0 (id=2141):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000049"], 0xfe33)
socket$kcm(0x10, 0x3, 0x10) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe33) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000049"], 0xfe33) (async)

859.660366ms ago: executing program 1 (id=2142):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0xc8}, 0x8000, 0x8000000000000005, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x8, 0xb}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x980)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x2, 0x6, 0xff, 0x0, 0x0, 0x5d31, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1ff, 0x148}, 0x40a, 0x23a, 0x2, 0x8, 0x5, 0x0, 0xfff5, 0x0, 0xffff, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r2, &(0x7f0000000cc0)={0x0, 0x2f, &(0x7f0000000280)=[{&(0x7f0000000100)="461b20f2d90c6d356b8b28b890f2bf7e512e94791118b8e5e38bd3e6b1fb220c6eab98201faa5adeb761a78cec5f459e543172ffe9996f8db3aec41cc02d4a6a64db9ee0b2b220402cc3b1360dcba92a5f6c12fa0e8a250cf562e6ac1cbfaad141fd8636be7e863aa959ceae19a2a99ec56cd2c9904df4d65b5d78c055e58d", 0x7f}, {&(0x7f00000001c0)="6ed3f624437404b50904e10dcb9fae792c23e7f75953f55d7791da2e69b3e44d1ee5dbcc2fe07805c7bf088b03cc245403365ea82282a4b9ab051e8e01731e382c251000c3b1b421776f2046b7ff39efc381d6a488303c73dea1d4c1e157202e03ac5244f4f729b01af2dd824d79c7e869", 0x71}, {&(0x7f0000000240)="83a4d7ccbf04888d5073fbf0a4767671070000005899225567ef909aacf177e5fbe8", 0x22}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x338}, 0x4000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000002000006000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33)

834.247027ms ago: executing program 3 (id=2143):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9, <r2=>0x0}, 0x8) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4)
openat$cgroup_procs(r3, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x3b)

821.345908ms ago: executing program 2 (id=2144):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x4f, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x0, 0x0, 0x5f, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000080)=""/68, 0x33, 0x44, 0x0, 0x4, 0x10000}, 0x28) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x57, 0x2, 0x1, 0x0, 0x7, 0x20800, 0x10, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000001c0), 0x6}, 0x0, 0x12, 0x3fd, 0xc, 0x81, 0x5, 0x4, 0x0, 0x3, 0x0, 0x7fff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="d3b07543d8afd52a817efb9eaf42adc6435ff2b15ad3db3ad00fdf6adad5f98a45385e536c652b75629a58820a61562be51c7bfd0a45cfada72c4538dc6ebe8fb92022226e43aeae244cb1bbd631d32b2af6099eaddda298273c90d4d0e274f34be1ab5a837881eb335cdf22169d277b024befdd0846558497659134707a9e9ed6d49f73eedec9c73a7b1cb94606d3e7f345d71f400f27a2624c6581dc57ab880149acdeea92b11be9c9aeee0ea55d14d6a61fb42152ae833c3a819da934df46e849273c0007473b7822bf4100be535a18b1aaad5550", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r0}, 0x94)

747.503252ms ago: executing program 1 (id=2145):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000400000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x40, 0x20, 0x10, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x4, @perf_config_ext={0x1, 0x4}, 0x119843, 0x7, 0x0, 0x9, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x800}, r5, 0x3, r2, 0xa) (async)
close(r1) (async)
socket$kcm(0x29, 0x7, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8982, &(0x7f0000000040))
write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)

742.272532ms ago: executing program 0 (id=2146):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x20000002}, 0x50)
write$cgroup_pid(r2, &(0x7f0000000380), 0x12)

649.107456ms ago: executing program 2 (id=2147):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0], 0x0, 0xf9, &(0x7f0000000e00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000500000000000000030000001eb801046ad400002085670001000000036d018000f0ffff85100000ffffffff85100000f9ffffff95000000000000008520000003000000"], &(0x7f0000000c00)='syzkaller\x00', 0xd, 0xf8, &(0x7f0000000c40)=""/248, 0x40f00, 0x16, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000001080)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0x9, 0x0, 0x1c0}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001100)=[{0x2, 0x4, 0xa, 0xa}, {0x1, 0x2, 0x5, 0x2}, {0x5, 0x1, 0xd, 0x6}, {0x4, 0x1, 0x9, 0x9}], 0x10, 0x400}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a00"/157], 0xf}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = syz_clone(0x20100, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000580), &(0x7f00000007c0)="4f68a76700ca60b21b9ef4ba89d16d37da28beec3ccc0d61f9cf40349920ed03ea0a429725c4e9350b7e8503db692c943dc106f88b5d5e7cd009c6f4637c108bb07fa225")
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x3, 0x1, 0x5, 0x0, 0x2, 0x400, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x2}, 0x101000, 0x1, 0x5, 0x3, 0x5, 0x8d70, 0xf001, 0x0, 0x6, 0x0, 0x1000}, r7, 0x8, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

543.318062ms ago: executing program 3 (id=2148):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x1}, 0x11c905, 0x2, 0x0, 0x2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a00380040001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000d112000004000000410094727e9a53264938aa9c3f46710daea72971852701bc39924f6d8c159821e1031b117c66f5819829ab1bc1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r5, &(0x7f00000005c0), 0x0}, 0x20)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001080)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/222, 0xde}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000b00)=""/172, 0xac}, {&(0x7f0000000240)=""/165, 0xa5}, {0x0}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000005c0)=""/146, 0x92}], 0xa}, 0x2000)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0a8100bae53dca2b007ea23e163ec40028e82fccdc09da157ef6a608649e7531765f0ef82e3c0073a705259a3651f607004b000000000098cae3ac8afd030047345ac6be8037e70e4509c5bb0c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000004)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
socket$kcm(0x10, 0x3, 0x10)
r7 = socket$kcm(0x15, 0x5, 0x0)
recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000)
r8 = perf_event_open$cgroup(&(0x7f0000004e40)={0x4, 0x80, 0x0, 0x9, 0x40, 0x5, 0x0, 0x5, 0x888, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff9}, 0x0, 0xfffffffffffffff7, 0x5, 0x5, 0x4, 0x8, 0x5190, 0x0, 0xe26, 0x0, 0xffffffffffffff01}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = socket$kcm(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d0800100700000002000000aaf0ff9a01020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000140)='syzkaller\x00')
sendmsg$inet(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

488.181875ms ago: executing program 0 (id=2149):
socket$kcm(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33)
bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4)
close(0xffffffffffffffff)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000040), 0x4)
close(r2)

464.666476ms ago: executing program 1 (id=2150):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB=',\nN'], 0x6a)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x0)
socket$kcm(0xa, 0x1, 0x106) (async)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9, 0x0, 0x1}, r3, 0x0, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9, 0x0, 0x1}, r3, 0x0, 0xffffffffffffffff, 0x9)
bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x20, 0x2, 0x40, 0x0, 0x7fffffffffffffff, 0x8, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2ee8, 0x4}, 0x108208, 0x4, 0x4, 0x4, 0x7, 0x1, 0x6, 0x0, 0x5, 0x0, 0x7fffffffffffffff}, r3, 0x4, r2, 0x9)
socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d493", 0x51}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d493", 0x51}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000620164a0dd955f6d8feb2dbc20a54b75d965cf907f9ccc8986c680ce175319c7607b2938120368f7deb2bf1a4de8b3b194911910bfb46d8ba14e733e3033a9d1e56b7eb6968083", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000620164a0dd955f6d8feb2dbc20a54b75d965cf907f9ccc8986c680ce175319c7607b2938120368f7deb2bf1a4de8b3b194911910bfb46d8ba14e733e3033a9d1e56b7eb6968083", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{r6}, &(0x7f0000001440), &(0x7f0000001480)='%pB    \x00'}, 0x20)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r5)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)
r7 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000080)) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000080))
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r8 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffffffffffffc, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

179.426771ms ago: executing program 2 (id=2151):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e12080016", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=<r2=>0x0, 0x2b, 0x1, 0x6, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r4, 0x4) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r1, r1, 0x15, 0x2020, 0x0, @void, @void, @value=r4, @void, r3}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f00000029c0)={&(0x7f0000000300)=@ll={0x11, 0x1b, r2, 0x1, 0x5, 0x6, @remote}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000380)="8634ffaff68ea5df10a535554dafa935c5f532df002a052168bd5194820652f7a8e37118de920c66623e76820e9fa0f84ad9338e465132922da81307acad46e0af7fd972c0c7398106fbbc838dfb47be95457a187391b5e6d40c2e0af6b563f049367316cc15c9e6f52433d8724a4bd9dfa55321d1e77388d35c3a64f88ad26d7be4293319eba8fd8081222548bca3ba741addbe63eb82f22ac780d971b6be617618e56d18a599d817dec4fdc03f3d5d06095f0aa56fc5598ade27393ef2198ee634f0b777736630a4ae31f83ab70f7ee6100a5857414caab238c2e0ddb1681bd1c8f34384eb", 0xe6}, {&(0x7f0000000480)="a6b7c701a4f7b26d5bf8cba2083d587eafd32964cd1f75f7cc59233f872670fbea600f472f3847c50aeb68ba3d57da562efe48bc6aabd7298f7082fb", 0x3c}, {&(0x7f00000004c0)="b89fd7fa015e73645f66994fd46149dc15d7417040596c81fd2f2ada252e9b8736ae9078d7a34ea8b93d460fcb71785e43ee397beb11359746467057393b21", 0x3f}, {&(0x7f0000001980)="b3169a5a08a4e1fdb54994be4ae3c398609f68e6a5825cdc2656db9602fb64f17a768ccfcd58ef9bd4186b557080d0650827f0a8a1e7ed098a3ec5747cfa17ef651017e941cb948c1a5127f52f4a95bb8b9b5d30e75bf126f9ef83451295d5b90dfb7f91ab2907a702cb25f2919ec38f7ddb3e40116cb9917ca0613a3e7e443a0307e5dbad4021d686cd7a6e164d8b87f08cec4d94dff6b93d37e227973b239dc86a3a2d1d98ad950ae70504723ca54a294a38fd2f49e4f6170f3a4cead0045777dc20cb8317bf9639fe62086a8ba9a7c1791f79260d6b171606150d9c4247ddca038906ec1a6c071de651580b8e169513ef29a38ad4ddb8ed3c9d715189037844862b9447fa8c782670813e5d8afc3595361ced51b087521594dba124ad213a1b6f3f08deef5c906b6da80d292fa378f82723d3b07cd7c80e94e0a4d6777c8ce995223866372d6821fed07a5a510646f95cc57ada8a0208a2e766f1db246fc994fee5a809c6004448cbd7f7cee6f2101d068652fe270d30db1bb7cef0111fe5b4c697e1fa85879650e08ce32c6945c41474bda43d245906439f7313462d2c4f84b0cb2aaa9ae956c3e3a7a88022194ad6065d53bc04cc9e4d815b6b3417ebd6436301487c155aef4f6f5086f69c08c638558e88e655dfb3dabeeaff3ba732616fc21d172c936963e2b90e52661af11b072fd0a87be4e6c62a5c6e78c8077877a55a1f61ea4fdec821a87af54ba7b702c000f1d76b7189fdfb2224237d1529d33097958f51b01621a2eaf5257d3a8563aa5cc8ac8adc1f866a909c43945fde34f0cfcb717c6aba1dd8d90559021966b608d5a658cfac7e9dbf5a3af2b83d53ba5d94b6ce1ebb88b75137a5b1d49fbdd069fce48b2b65a2279b2361d9f232d76d86aad654aaedc3e1494670284fc077270ca56e39c9e88f11d5155409dd4458aad52b5eff6fd1b173576b94a25edbe9b7ebe2e0b2859cc0e3454728ba3d56db26465697097cc3acce6a7374ec0af8a668b281a312b435a7d78fb0a98f043ad60bce1d303bc9082b6680542d004dc62e22ed5b0fb1f7224da79bc5e0a68d89b8ba85415cee412879f1ad3061e1b46e51a2c1de584eabcf46f6d75bf464c54fff2edfe1cb75ee2a07c3fc5d2b8faf27bdea4c4f11bb9dbdc82d28b7f79168c5174f673362b4c6f6e33c6dbce9a7d1aaf4f124197255465923a85a754b56e20691aa3c3469ed525c25a50e4199977cb473e8f17982077ea60e9e4b2dd8ca5ef6d9d93fa805c37a87f50d9543308a0996aad094a97e86d081b6d17529eb469fcb4d61bd2fddd470f650b110a58fae5ae48b52069aa5398a71da535abe5c6fc6cda57eb5d08bea7886e009ae1c3ef6a02f66f92dcca8963189f487ea224165fe29de5b2e49639e983bcbf7b71c93d6f94affeb808cc16d5f220e6f05f368732e7916b3d2b885ba4ce079108a426d61c8a6d48ec0e29419f30ec7c673089c96f8a0459505c226d46406be956628e2eb01ce1637846d6ab2cacedde182e65c6636e1882cac6a673d4f0720aae637095eac59e01f7e38dcdd98acbd0e98dc34b2ae4a229a4c437b5da424224450d56a96fe9a0952aa2e0bd55fdc5a20c8326417ada588a3808609d3b895c8b08841535604e35a83350855909f990d609e3187c5e9e8ca9aa05f1bfaf18b9f8eab7b82ee60058156366387ad81ee940f0c4a9848ecad9ee8e7bd68c4f512292c8b0070310e849e0e7b9a5bb64f1bad7b2c0ff63128789ceca403205283f46a3dce5b4a90267651ea009d822c86274da10d0c25711b51f5d416df8b313f109666da9995c74f18300196b36a0b560dc3be58b2fcabb7a4cd1ae458eb10dc9fdd3139e7f5a68e9f08f717a8d5db090bdd4e4510b8e726d8dae555b4a833bbf6345e36afe7a92c65037588bc1c5e609caebb6fc7dd97e864136660db261e06129e6a3ef9bde92000ece378a492262dea1bfaa0453930e6fdc9e83376a3f9ff669f567df3c2143e6a8fd5f39142a79180c2f06880d2bb1c1c33c1b798bd1b8683d67a1d88d85870dedaefb412b461541433fa04f6d265f5f1b0be8aa051d90aa793a350a5e114fd60968f6269c4e76a03b0755a63cace27e85edeb7805dd63d452942bf5c9affc7d34831962389f1d43ac6e067baa2e95c73d70e1ade72f323d6d85e479dbb8056a6a4fc6fbc1815a31a64f12437085c95f497e6d1219de392371672db96a89ddb1d9efae68cee1c99d127c7537b4cf3d06cfa37417a466e17d503956ad9e6b13126c35a7117220856c96539519f2215234219d62d0e77683fd9ad39fedd28a53dbcf2d448f4f4192ccdd91173db8fb6896695f1a69e79f62ceb80822282313bfefc354d559d296ec7dd47213cda59f8f6c6973c405acf92afb12ba82772de7f14fd3bb2f9937656c843916e57513b87a3927826332f705986765884cf6e8dd1fffe445aec9575b0b564c85bd6b5bc8eb9860316166c3d7d7c33b438b6adbaceb2826b94e60c10fd704ba6c874462284e7916ee890b11d7a7c73c9715beaa902efddca0d72a18cf4e1b8e6e5a8dfe5a82df58e8cb9d8800d28cc46f0f1956817e1330212802dd7edff3fb34282d1c7d115780a43fd07df7211040ff5239d0b726a2157fbd5c3a7cd95647610a2904b020327fad93afc486219ed3040d3e766722e5344af8a9819cd76039805ebfb88df4a0bd6d72c3405d1b909ff12f969811e55925dac9a7c7982020a3ac592da6a5713d8e18a01fed1e464fc3b7ed02384865efa3c20f95cb92f2e5e6d9b6f0509c6e428639b8d20b27c6866aed068143b5b889075f1cbc5569d44a270f8c9099e73cfc8e777d1908f751755bb464f98cafbf9495bf6a85814cefd3e231cb88968d6eae644232ca327978046c6c3504c9f9262c18122fb4413718faf6ecd682e4f9ef49f9c55aec37b979b755c378a8af3e308c485f1f67dbfeb11d841a054bc6390ff3f11ba93de0315332882739f1cd18ea55ea9a16687f8b3add7e476afc58768e6413071da47b7caa36ec2bead5d10a1a9a7236a955312eb7c7ede5578dc43fb67c53a15d0287cab058c75739c949863fde806bd641b509fa3e0d1528d455d518a4fca9e27e1ea915806a0a59e798b9c7dd63353a2240727aeca368d1df339a7c977d06a2e70c5f909dc976c7898ab4782d7fcab90823ade4a417722abf8cbc5c21e821c8f44bc8389c424937bfa449d6f04153d15fbff57525f77f820a991c0c191869c5177eac38028e74b8f97087dd326983eb7a2f9efdb12b51d158bd44224dbe8b4526c9e9ae7e7333d3cf5ff4e9d38fa89eb237431fc63d132ec4718ad690bdb9b5d33fb3b1ec511f84e0e8b16136bd3f8c6a4db7361d9f0f7b9c1a1b92013473953830274277649406159c77645b14fa212663b988389546b9d93053e973734dc4216603ab8c26fd0eae1f3252f6ad7ba42a7167bebb9cef7456366aedb082c03c4438d62a3b2d5f4f099b8c773e24b9f62ceae80f6cf174235ea7b8fc378b06e4fea862114de0b0974846567fb0d265b02483e3bfca1e182670077f55259ae29e09654f3e84954708b2d16205720cb1c9809c6bf8ec489b76de5525776518f173be6df64538edd481ba52fefbafdb17ff90aa71921eec35750985eeda536c2265e691f62568ae31d3250e75cd29accb37aa909e23c58e0fd46db68ce1685b0cc1a7a988b86b7a920cbb74212f7c50283f47102f87a42e2c981b6e576fc578e009ced3c5bba279c40435853037ba236437e66f591249544b16eb0f8bc16e206fd658efed70edfc0def591760d021c292a5a02017213f963c38c4e72f36441246b9846bd49a36e2c6e1416f20b0d84a9928bbdf73a39882985ba77019f08a35325e71a9952efb88dc5a0458b2436e6e346c162d602a0f33383e5b880cc2d3523f6847ff443c871157e17006475de581712443135f7d3b99ce1b6e87fa17022bff2fe839a1ec62e692830f982d02eaaa4313b430d8d2e891cfb3b554cf9668b68e0efbf03b0f5b95a3ceffbe0e1c4a2e252a8984769a4cdac8e15fd15a97b54b65cf7372c93a661eb5cf88a78d8d32bc2c5c719d1ebeafeafcac95d7704a37d6153fbde358321628d71618a33b89c949545a296dd176e6f45b1cc189b77df635788af1c00dd7958d380a66eff95f4116bf221dabffa3bdf12ad260e3fe019deb7865d553d1f3724f1b1d21864855e383aea0f74ba1e229365e52fb5d0131e54befc168e321eb182c88ade81ee47515845668c23b31cdc43242b58a683225c6bc2255c229c8ec50fc31e64d8ddb03604f0669e9afae0fc97695ae27dae3f7d0a5cdb56d293d8aaa9ae8c7b6faff283bbc121c0ac0391eedd719f12ac884549de18f41cc164226c3993907fa1bd48068ce76a292dfa0052d73bc13d67f1333a73cbc2e9fd8c2fb3f83e37bc2b1d6dc946714f66bef7bb57301859424ae2ef2a6242feaba67d257ac746cb6ff94c320255fd5b5ea2f85671e5bade0abf77d9ef5ebaf4aec1f833a2518c7702b3756e12ac17d131b9ff3d355a551a5b0f3c151ba4dd856cb96546b1e400de64682037a51b61acf7604eb86119ee7368b78e60dced38d6d74bd07445bfd4a93e82b94bb654983d630b2057b4f533373ad63e05295855abf48afac1fb9c211abdcfb4863f85951d275d94af8829d2506cd6cc42f15b7089ac5be39e4f28057d71d489bcc4279ce8994d0dcc61d32f68047d0fb895d7e1a93c5afff2497ba212e49ed1bf2c2c24d956f2c40415a0bd7849ff6eea7e2a826bea1d71c371675553c2a1dccf8c518610f31ef55fe94fdaf5203bcd8e8f88386fd301ddbdeac0594853c41b1099ce947e41b934acaf96c28220bcf2b2be6a35ed1a6253ed0fcb21a9daeba03c7bd2b1638cf62b9c014ee0a274175df0c3c9080e095e4ca59e21b74da5d4e71041dd69a49f3ea54f4461afca3bdc6dc4b5076f5d8a2ce36f1bef8b4ffd9b702af57232da6db5633ee38a71a1c1dafa98af0ddd475a64e89aaf8875daa5396c3216954a7685b38535a10e4a4828fcb0cd64f70cf372657dcbd47adaa468d05c2a7a2c457ffd67790632b50e343242e8a8118323b376cc6cbf4f295d0eeaf2c46010db3d6eccef76db356ea6fbb868c12e2aee5281fbf3808913d9be215127afa5ef6f902005e4fe6e5adbc237d171e15adae92ddce387f79f0997dc5565d02d504a50aaf91cd692cb9a5c5f6bf4db0a65efb1c3b03fa5dba1e642274223de04f93fa6d55e1a1462a5c54b8d5e11cc1edbaf47959a611926de9540869ccd9284273634186fcd001aa3d6b67af99887c3117384db154b1d6420178b2d1ec3870f6f19b262cdff82835454d5ce960e74745f88b067e19c65e9058f7002735437480d45c6de0f0159a11ef404a2d1eae24f88d7f31bb730eafa371aa2ecafb0493355e9c6a30453c01edee5c2ed435bf6313818b2021dcacedbbfc5065e4cb7ec8d9efda9c086be972321b4836198e528f7eeb9668632f9c7b07277578863cb6dee00b3c00c7ade8fa309b2e6292af81d69a1005ff83d7ce9824d965f58340c5a2da68177d1c729f15358733800e0d37489c3272bf9e6531bc9dc463d6e440ac69b3691148b19a304aaf141a3ba714192c98223c211bf7c8cd8d40d1b9f4fffee9baa2c355789b956780f2e6f35a7d79a2013b06fa4eb70aabd04642ffecdbeb3975ce007031dce80ca13b7d90d4edab53aced94f9f7c2f53709320767fa981afb0f0323913f4d7c802ea547012778bb2270bd64dd4e8", 0x1000}], 0x4}, 0x40000000) (async)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)

40.165098ms ago: executing program 1 (id=2152):
socket$kcm(0x11, 0x3, 0x0) (async)
socketpair(0xb, 0x6, 0x8, &(0x7f0000000280))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 64)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) (async)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) (async)
close(r0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14", 0x6c}], 0x1}, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async, rerun: 32)
r3 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94)
sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async, rerun: 64)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) (async, rerun: 64)
socket$kcm(0x29, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x218003, 0x0)

0s ago: executing program 0 (id=2153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r10}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = gettid()
sendmsg$unix(r12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee01, 0xee00}}}], 0x40}, 0x40000)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r15 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r15, 0x1, 0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}]}, &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

d:0kB bounce:0kB free_pcp:20288kB local_pcp:11776kB free_cma:0kB
[  234.292610][ T8306] lowmem_reserve[]: 0 0 0 0 0
[  234.298327][ T8306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.312895][ T8306] Node 0 DMA32: 107*4kB (UM) 1044*8kB (UME) 1294*16kB (UME) 790*32kB (UM) 318*64kB (UME) 72*128kB (UM) 78*256kB (UM) 41*512kB (M) 21*1024kB (UM) 11*2048kB (UME) 317*4096kB (UM) = 1467756kB
[  234.341391][ T8306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  234.361020][ T8306] Node 1 Normal: 248*4kB (UME) 64*8kB (UME) 41*16kB (UME) 98*32kB (UME) 31*64kB (UME) 8*128kB (UME) 2*256kB (ME) 1*512kB (U) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3893360kB
[  234.410589][ T8306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.427023][ T8306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.438159][ T8306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.457499][ T8306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.469911][ T8306] 57180 total pagecache pages
[  234.477807][ T8306] 0 pages in swap cache
[  234.482251][ T8306] Free swap  = 124996kB
[  234.500415][ T8306] Total swap = 124996kB
[  234.506749][ T8306] 2097051 pages RAM
[  234.510738][ T8306] 0 pages HighMem/MovableOnly
[  234.519920][ T8306] 416927 pages reserved
[  234.540769][ T8306] 0 pages cma reserved
[  235.427811][ T8364] netlink: 'syz.0.675': attribute type 21 has an invalid length.
[  238.876229][ T8384] netlink: 'syz.2.680': attribute type 6 has an invalid length.
[  239.002202][ T8388] delete_channel: no stack
[  239.038254][ T8388] delete_channel: no stack
[  240.821522][ T8436] netlink: 176 bytes leftover after parsing attributes in process `syz.2.696'.
[  241.145334][ T8446] netlink: 'syz.2.700': attribute type 10 has an invalid length.
[  241.982868][ T8467] netlink: 'syz.1.706': attribute type 21 has an invalid length.
[  242.005839][ T8467] netlink: 'syz.1.706': attribute type 7 has an invalid length.
[  242.977687][ T8483] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.710'.
[  243.266385][ T8485] syzkaller0: entered promiscuous mode
[  243.272134][ T8485] syzkaller0: entered allmulticast mode
[  245.628940][ T8500] netlink: 'syz.0.713': attribute type 3 has an invalid length.
[  245.639461][ T8500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.713'.
[  246.037937][ T8534] netlink: 'syz.2.719': attribute type 10 has an invalid length.
[  246.061543][ T8532] netlink: 144 bytes leftover after parsing attributes in process `syz.0.721'.
[  246.114438][ T1071] tipc: Subscription rejected, illegal request
[  246.243576][ T8539] netlink: 'syz.1.723': attribute type 10 has an invalid length.
[  246.376793][ T8543] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.725'.
[  246.725301][ T8549] netlink: 'syz.3.728': attribute type 1 has an invalid length.
[  246.746243][ T8549] netlink: 'syz.3.728': attribute type 21 has an invalid length.
[  246.759377][ T8549] netlink: 'syz.3.728': attribute type 1 has an invalid length.
[  246.781397][ T8549] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.728'.
[  246.821263][ T8555] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[  246.830882][ T8555] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.729'.
[  247.005198][ T8560] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.731'.
[  248.018371][ T8598] netlink: 'syz.1.741': attribute type 21 has an invalid length.
[  248.032491][ T8598] netlink: 128 bytes leftover after parsing attributes in process `syz.1.741'.
[  248.045958][ T8598] netlink: 'syz.1.741': attribute type 4 has an invalid length.
[  248.241190][ T8601] netlink: 'syz.1.743': attribute type 8 has an invalid length.
[  248.254896][ T8603] netlink: 'syz.3.742': attribute type 10 has an invalid length.
[  248.271365][ T8601] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.743'.
[  248.602057][ T8614] netlink: 'syz.0.744': attribute type 39 has an invalid length.
[  249.416670][ T8611] syzkaller0: entered promiscuous mode
[  249.422206][ T8611] syzkaller0: entered allmulticast mode
[  251.419819][ T8637] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.751'.
[  252.557055][ T8702] netlink: 763 bytes leftover after parsing attributes in process `syz.1.769'.
[  253.828633][ T8721] netlink: 'syz.1.775': attribute type 21 has an invalid length.
[  253.846473][ T8721] netlink: 128 bytes leftover after parsing attributes in process `syz.1.775'.
[  253.882005][ T8725] bridge0: port 3(veth1_to_hsr) entered blocking state
[  253.902048][ T8725] bridge0: port 3(veth1_to_hsr) entered disabled state
[  253.922493][ T8725] veth1_to_hsr: entered allmulticast mode
[  253.955450][ T8725] veth1_to_hsr: entered promiscuous mode
[  253.975549][ T8725] bridge0: port 3(veth1_to_hsr) entered blocking state
[  253.982683][ T8725] bridge0: port 3(veth1_to_hsr) entered forwarding state
[  254.027353][ T8721] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  254.052224][ T8721] netlink: 55 bytes leftover after parsing attributes in process `syz.1.775'.
[  254.075425][ T8721] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  254.334482][ T8721] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  254.761778][ T8730] netlink: 'syz.0.776': attribute type 10 has an invalid length.
[  254.863193][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.919985][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.984753][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.008568][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.120074][ T8732] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  255.132819][ T8732] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  255.838986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.845817][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.147660][ T8761] netlink: 'syz.3.783': attribute type 33 has an invalid length.
[  256.173758][ T8761] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.783'.
[  256.795101][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[  256.820124][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[  257.507644][ T8798] netlink: 208092 bytes leftover after parsing attributes in process `syz.1.796'.
[  258.004389][ T8815] netlink: 'syz.3.801': attribute type 21 has an invalid length.
[  258.446957][ T8827] netlink: 144 bytes leftover after parsing attributes in process `syz.3.802'.
[  258.458054][ T8827] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  262.341239][ T8876] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.817'.
[  262.668070][ T8897] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.821'.
[  264.070334][ T8919] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  264.077210][ T8919] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  266.306991][ T8935] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  266.315026][ T8935] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.831'.
[  266.517010][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'.
[  266.539218][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'.
[  266.605361][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'.
[  266.710291][ T8952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.836'.
[  266.737092][ T8952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.836'.
[  266.782881][ T8947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.836'.
[  267.064131][ T8962] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.836'.
[  267.396270][ T8951] veth1_macvtap: left promiscuous mode
[  267.403884][ T8951] macsec0: entered promiscuous mode
[  267.419807][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'.
[  267.496457][ T8956] netlink: 152 bytes leftover after parsing attributes in process `syz.2.837'.
[  267.546230][ T8961] veth1_macvtap: entered promiscuous mode
[  267.552289][ T8961] macsec0: entered allmulticast mode
[  267.560441][ T8961] veth1_macvtap: entered allmulticast mode
[  267.572869][ T8963] -: renamed from syzkaller0
[  267.841356][ T8974] netlink: 'syz.0.841': attribute type 10 has an invalid length.
[  267.875440][ T8974] bond0: (slave wlan1): Opening slave failed
[  269.823380][ T8983] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.831124][ T8989] netlink: 'syz.2.844': attribute type 10 has an invalid length.
[  269.839200][ T8999] netlink: 'syz.0.847': attribute type 21 has an invalid length.
[  269.852565][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.847'.
[  269.990523][ T9004] netlink: 'syz.0.849': attribute type 2 has an invalid length.
[  270.007914][ T9004] netlink: 119 bytes leftover after parsing attributes in process `syz.0.849'.
[  270.893428][ T9018] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  271.077637][ T9018] syzkaller0: entered promiscuous mode
[  271.083458][ T9018] syzkaller0: entered allmulticast mode
[  271.101374][ T9024] netlink: 'syz.3.855': attribute type 29 has an invalid length.
[  273.842258][ T9070] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.866'.
[  274.049161][ T9081] netlink: 'syz.2.869': attribute type 1 has an invalid length.
[  274.082983][ T9081] netlink: 'syz.2.869': attribute type 3 has an invalid length.
[  274.151579][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.869'.
[  274.192327][ T9085] netlink: 'syz.2.869': attribute type 10 has an invalid length.
[  274.233738][ T9085] netlink: 168 bytes leftover after parsing attributes in process `syz.2.869'.
[  274.580933][ T9097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.873'.
[  274.606559][ T9099] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.875'.
[  274.987625][ T9119] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.881'.
[  278.111520][ T9143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.408564][ T9152] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.890'.
[  278.466776][ T9152] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  282.179633][ T9193] netlink: 'syz.0.902': attribute type 10 has an invalid length.
[  282.231972][ T9193] veth1_macvtap: left promiscuous mode
[  282.371886][ T9196] �ÿ: renamed from bond_slave_0 (while UP)
[  282.501240][ T9206] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.906'.
[  282.625281][ T9207] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.906'.
[  282.753541][ T9211] netlink: 168 bytes leftover after parsing attributes in process `syz.0.907'.
[  282.822760][ T9213] netlink: 21 bytes leftover after parsing attributes in process `syz.2.908'.
[  282.837908][ T9213] ksmbd: Unknown IPC event: 0, ignore.
[  282.986597][ T9217] netlink: 'syz.1.910': attribute type 3 has an invalid length.
[  283.014610][ T9217] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  283.022336][ T9217] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.910'.
[  283.098197][ T9223] netlink: 'syz.3.912': attribute type 21 has an invalid length.
[  283.144817][ T9230] netlink: 'syz.1.914': attribute type 10 has an invalid length.
[  283.153495][ T9230] hsr0: entered promiscuous mode
[  283.182346][ T9230] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  283.233960][ T9230] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  283.253854][ T9230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  283.296012][ T9230] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  283.409210][ T9240] netlink: 'syz.2.917': attribute type 10 has an invalid length.
[  283.430542][ T9240] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.917'.
[  283.448683][ T9240] openvswitch: netlink: Message has 4 unknown bytes.
[  283.543350][ T9244] netlink: 'syz.1.920': attribute type 9 has an invalid length.
[  283.652888][ T9247] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.921'.
[  284.040319][ T9245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.920'.
[  284.067861][ T9253] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.923'.
[  284.084555][ T9245] netlink: del zone limit has 4 unknown bytes
[  285.715561][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[  287.958373][ T9299] netlink: 'syz.1.935': attribute type 4 has an invalid length.
[  287.996864][ T9299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.935'.
[  288.121757][ T9303] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.936'.
[  289.105298][ T9310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.940'.
[  289.357470][ T9322] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[  289.368074][ T9322] netlink: 'syz.1.941': attribute type 3 has an invalid length.
[  289.522150][ T9322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.941'.
[  289.630444][ T9325] netlink: 'syz.1.941': attribute type 10 has an invalid length.
[  289.630524][ T9325] netlink: 168 bytes leftover after parsing attributes in process `syz.1.941'.
[  290.931647][ T9356] tap0: tun_chr_ioctl cmd 99999999
[  291.051404][ T9359] netlink: 'syz.2.952': attribute type 10 has an invalid length.
[  291.199598][ T9371] netlink: 'syz.2.955': attribute type 21 has an invalid length.
[  292.099576][ T9373] netlink: 'syz.0.956': attribute type 22 has an invalid length.
[  292.108409][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  292.143022][ T9387] netlink: 'syz.1.959': attribute type 10 has an invalid length.
[  292.154683][ T9387] geneve0: entered promiscuous mode
[  292.180712][ T9387] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  292.502452][ T9392] pim6reg1: entered promiscuous mode
[  292.536438][ T9392] pim6reg1: entered allmulticast mode
[  296.384266][ T9409] netlink: 'syz.2.965': attribute type 25 has an invalid length.
[  296.392082][ T9409] netlink: 'syz.2.965': attribute type 28 has an invalid length.
[  296.585947][ T5775] Bluetooth: hci3: Malformed LE Event: 0x02
[  296.618532][ T9435] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.970'.
[  297.672782][ T9470] syzkaller0: entered promiscuous mode
[  297.701981][ T9470] syzkaller0: entered allmulticast mode
[  298.576193][ T9496] netlink: 'syz.3.985': attribute type 10 has an invalid length.
[  298.588113][ T9496] netlink: 212056 bytes leftover after parsing attributes in process `syz.3.985'.
[  298.598390][ T9496] openvswitch: netlink: Message has 4 unknown bytes.
[  300.255951][ T9491] netlink: 'syz.0.983': attribute type 39 has an invalid length.
[  300.638059][ T9498] netlink: 'syz.2.986': attribute type 17 has an invalid length.
[  300.663280][ T9498] netlink: 152 bytes leftover after parsing attributes in process `syz.2.986'.
[  300.692555][ T9498] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  300.855087][ T9514] netlink: 176 bytes leftover after parsing attributes in process `syz.1.991'.
[  301.480731][ T9525] netlink: 10 bytes leftover after parsing attributes in process `syz.3.993'.
[  301.854639][ T9546] syz.1.1001[9546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  301.854882][ T9546] syz.1.1001[9546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  301.878026][ T9543] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.999'.
[  306.299486][ T9605] IPv6: NLM_F_CREATE should be specified when creating new route
[  306.369585][ T9610] syzkaller0: tun_chr_ioctl cmd 35108
[  306.976957][ T9628] netlink: 'syz.3.1023': attribute type 4 has an invalid length.
[  306.980997][ T9624] netlink: 'syz.3.1023': attribute type 11 has an invalid length.
[  306.993907][ T9624] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1023'.
[  307.008891][ T9628] netlink: 174100 bytes leftover after parsing attributes in process `syz.3.1023'.
[  307.218750][ T9624] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  307.283999][ T9624] CPU: 1 PID: 9624 Comm: syz.3.1023 Not tainted syzkaller #0
[  307.291474][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  307.301598][ T9624] Call Trace:
[  307.304930][ T9624]  <TASK>
[  307.307922][ T9624]  dump_stack_lvl+0x18c/0x250
[  307.312683][ T9624]  ? show_regs_print_info+0x20/0x20
[  307.317964][ T9624]  ? load_image+0x420/0x420
[  307.322540][ T9624]  ? memset_orig+0x19/0xac
[  307.327072][ T9624]  sysfs_warn_dup+0x8e/0xa0
[  307.331634][ T9624]  sysfs_do_create_link_sd+0xc0/0x110
[  307.337076][ T9624]  device_add_class_symlinks+0x1cf/0x240
[  307.342778][ T9624]  device_add+0x507/0xc20
[  307.347177][ T9624]  wiphy_register+0x1dad/0x2ae0
[  307.352207][ T9624]  ? cfg80211_event_work+0x40/0x40
[  307.357417][ T9624]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  307.363565][ T9624]  ieee80211_register_hw+0x3464/0x4250
[  307.369119][ T9624]  ? ieee80211_tasklet_handler+0x20/0x20
[  307.374807][ T9624]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  307.380764][ T9624]  ? __debug_object_init+0xec/0x450
[  307.386040][ T9624]  ? __asan_memset+0x22/0x40
[  307.390678][ T9624]  ? __hrtimer_init+0x186/0x270
[  307.395596][ T9624]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  307.401385][ T9624]  ? mac80211_hwsim_free+0x220/0x220
[  307.406715][ T9624]  ? rcu_is_watching+0x15/0xb0
[  307.411528][ T9624]  ? kstrndup+0xbd/0x140
[  307.415836][ T9624]  hwsim_new_radio_nl+0xdc9/0x1a90
[  307.421088][ T9624]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  307.426953][ T9624]  ? mark_lock+0x94/0x320
[  307.431338][ T9624]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  307.437718][ T9624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.443929][ T9624]  ? lockdep_hardirqs_on+0x98/0x150
[  307.449177][ T9624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.455396][ T9624]  genl_family_rcv_msg_doit+0x211/0x310
[  307.460997][ T9624]  ? end_current_label_crit_section+0x170/0x170
[  307.467303][ T9624]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  307.473267][ T9624]  ? bpf_lsm_capable+0x9/0x10
[  307.477997][ T9624]  ? security_capable+0x89/0xb0
[  307.482909][ T9624]  genl_rcv_msg+0x619/0x7a0
[  307.487468][ T9624]  ? genl_bind+0x360/0x360
[  307.491922][ T9624]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  307.497947][ T9624]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  307.504327][ T9624]  ? ref_tracker_free+0x690/0x840
[  307.509412][ T9624]  netlink_rcv_skb+0x241/0x4d0
[  307.514248][ T9624]  ? genl_bind+0x360/0x360
[  307.518744][ T9624]  ? netlink_ack+0x1180/0x1180
[  307.523690][ T9624]  ? __lock_acquire+0x7d40/0x7d40
[  307.528778][ T9624]  ? down_read+0x1ac/0x2e0
[  307.533253][ T9624]  genl_rcv+0x28/0x40
[  307.537284][ T9624]  netlink_unicast+0x751/0x8d0
[  307.542107][ T9624]  netlink_sendmsg+0x8d0/0xbf0
[  307.546951][ T9624]  ? netlink_getsockopt+0x590/0x590
[  307.552208][ T9624]  ? aa_sock_msg_perm+0x94/0x150
[  307.557201][ T9624]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  307.562538][ T9624]  ? security_socket_sendmsg+0x80/0xa0
[  307.568088][ T9624]  ? netlink_getsockopt+0x590/0x590
[  307.573358][ T9624]  ____sys_sendmsg+0x5ba/0x960
[  307.578177][ T9624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.584429][ T9624]  ? __asan_memset+0x22/0x40
[  307.589164][ T9624]  ? __sys_sendmsg_sock+0x30/0x30
[  307.594276][ T9624]  ? __import_iovec+0x5f2/0x850
[  307.599200][ T9624]  ? import_iovec+0x73/0xa0
[  307.603753][ T9624]  ___sys_sendmsg+0x2a6/0x360
[  307.608524][ T9624]  ? __sys_sendmsg+0x2a0/0x2a0
[  307.613438][ T9624]  __se_sys_sendmsg+0x1c2/0x2b0
[  307.618370][ T9624]  ? __x64_sys_sendmsg+0x80/0x80
[  307.623392][ T9624]  ? syscall_enter_from_user_mode+0x2e/0x80
[  307.629359][ T9624]  do_syscall_64+0x55/0xa0
[  307.633836][ T9624]  ? clear_bhb_loop+0x40/0x90
[  307.638565][ T9624]  ? clear_bhb_loop+0x40/0x90
[  307.643290][ T9624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.649250][ T9624] RIP: 0033:0x7fe15219cdd9
[  307.653731][ T9624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.673387][ T9624] RSP: 002b:00007fe153009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.681854][ T9624] RAX: ffffffffffffffda RBX: 00007fe152415fa0 RCX: 00007fe15219cdd9
[  307.689875][ T9624] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  307.697893][ T9624] RBP: 00007fe152232d69 R08: 0000000000000000 R09: 0000000000000000
[  307.705911][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.713991][ T9624] R13: 00007fe152416038 R14: 00007fe152415fa0 R15: 00007fff3d69c4f8
[  307.722039][ T9624]  </TASK>
[  308.798961][ T9657] netlink: 'syz.1.1034': attribute type 3 has an invalid length.
[  308.945711][ T9666] netlink: 'syz.0.1043': attribute type 33 has an invalid length.
[  308.988463][ T9666] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1043'.
[  309.023951][ T9666] `: renamed from ip6tnl0 (while UP)
[  309.132325][ T9666] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  309.300737][ T9668] netlink: 'syz.3.1036': attribute type 10 has an invalid length.
[  309.314852][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1036'.
[  309.365962][ T9668] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  309.391078][ T9668] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.424827][ T9668] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  309.646035][ T9687] netlink: 'syz.0.1039': attribute type 9 has an invalid length.
[  309.673723][ T9687] netlink: 43063 bytes leftover after parsing attributes in process `syz.0.1039'.
[  312.218904][ T9703] netlink: 'syz.3.1045': attribute type 15 has an invalid length.
[  312.227179][ T9703] netlink: 'syz.3.1045': attribute type 7 has an invalid length.
[  314.180575][ T9743] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1056'.
[  314.292602][ T9747] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1057'.
[  314.869497][ T9772] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1066'.
[  314.957559][ T9777] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1068'.
[  315.034024][ T6267] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  317.285671][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.292193][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  319.353519][ T9852] netlink: 'syz.0.1092': attribute type 2 has an invalid length.
[  321.076005][ T9887] netlink: 'syz.2.1099': attribute type 10 has an invalid length.
[  321.117909][ T9891] TCP: TCP_TX_DELAY enabled
[  322.113182][ T9924] netlink: 'syz.2.1109': attribute type 3 has an invalid length.
[  322.131396][ T9924] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1109'.
[  323.388593][ T9928] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1110'.
[  323.578355][ T9937] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.1112'.
[  323.602808][ T9937] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1112'.
[  324.073316][ T9960] netlink: 'syz.0.1118': attribute type 10 has an invalid length.
[  325.176684][ T9998] netlink: 'syz.1.1127': attribute type 6 has an invalid length.
[  325.254723][ T9998] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1127'.
[  325.537078][T10004] netlink: 'syz.0.1129': attribute type 11 has an invalid length.
[  325.555616][T10004] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  325.569246][T10004] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  325.589246][T10004] netlink: 'syz.0.1129': attribute type 2 has an invalid length.
[  325.612789][T10004] netlink: 198140 bytes leftover after parsing attributes in process `syz.0.1129'.
[  325.645651][T10001] netlink: 'syz.2.1128': attribute type 21 has an invalid length.
[  325.653563][T10001] IPv6: NLM_F_CREATE should be specified when creating new route
[  326.167413][T10020] netlink: set zone limit has 8 unknown bytes
[  327.155510][T10036] netlink: 'syz.3.1138': attribute type 8 has an invalid length.
[  328.419505][T10056] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1144'.
[  328.435646][T10056] netlink: 'syz.0.1144': attribute type 1 has an invalid length.
[  328.482666][T10056] netlink: 'syz.0.1144': attribute type 10 has an invalid length.
[  328.490993][T10056] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1144'.
[  328.502550][T10056] veth0_macvtap: left promiscuous mode
[  329.487372][T10077] IPv6: NLM_F_CREATE should be specified when creating new route
[  329.765573][T10081] netlink: 'syz.3.1152': attribute type 4 has an invalid length.
[  329.783943][T10081] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1152'.
[  331.370486][T10117] bridge_slave_1: left allmulticast mode
[  331.383994][T10117] bridge_slave_1: left promiscuous mode
[  331.391592][T10117] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.440049][T10117] bridge_slave_0: left allmulticast mode
[  331.448408][T10117] bridge_slave_0: left promiscuous mode
[  331.455846][T10117] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.812176][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'.
[  331.835549][T10127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1163'.
[  331.854086][T10127] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  331.902281][T10126] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1164'.
[  331.943120][T10126] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  332.347142][T10136] validate_nla: 1 callbacks suppressed
[  332.347160][T10136] netlink: 'syz.3.1168': attribute type 10 has an invalid length.
[  332.380929][T10136] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1168'.
[  332.405871][T10136] openvswitch: netlink: Flow key attr not present in new flow.
[  333.067576][T10154] netlink: 'syz.2.1172': attribute type 10 has an invalid length.
[  333.083747][T10154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1172'.
[  334.326275][T10177] netlink: 'syz.2.1180': attribute type 13 has an invalid length.
[  334.376789][T10177] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1180'.
[  334.501478][T10177] erspan0: refused to change device tx_queue_len
[  334.530116][T10177] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  334.584840][T10185] netlink: 'syz.0.1182': attribute type 10 has an invalid length.
[  334.672883][T10185] 8021q: adding VLAN 0 to HW filter on device team0
[  334.730481][T10185] bond0: (slave team0): Enslaving as an active interface with an up link
[  334.995136][T10190] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  335.013915][T10190] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1184'.
[  335.084755][T10193] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1185'.
[  335.545590][T10214] netlink: 'syz.0.1191': attribute type 1 has an invalid length.
[  336.610457][T10225] netlink: 'syz.3.1193': attribute type 10 has an invalid length.
[  337.342245][T10238] syzkaller0: entered promiscuous mode
[  337.358895][T10238] syzkaller0: entered allmulticast mode
[  337.384911][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'.
[  338.116809][T10251] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1202'.
[  340.456297][T10259] netlink: 'syz.0.1205': attribute type 10 has an invalid length.
[  340.473289][T10259] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.888600][T10259] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.896448][T10259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.930537][T10267] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1207'.
[  340.956420][T10259] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  340.983368][T10267] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1207'.
[  340.993167][T10266] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1207'.
[  341.003829][T10268] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1207'.
[  341.834447][T10290] netlink: 'syz.0.1215': attribute type 10 has an invalid length.
[  341.899050][T10290] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.001319][T10290] bond0: (slave bridge0): Releasing backup interface
[  342.059438][T10290] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.067446][T10290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.292525][T10290] team0: Port device bridge0 added
[  342.333098][T10294] netlink: 'syz.0.1215': attribute type 21 has an invalid length.
[  342.361468][T10294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1215'.
[  342.379608][T10294] netlink: 'syz.0.1215': attribute type 4 has an invalid length.
[  342.497384][T10290] syz.0.1215 (10290) used greatest stack depth: 17672 bytes left
[  342.572539][T10306] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1219'.
[  342.867586][T10315] netlink: 'syz.2.1222': attribute type 2 has an invalid length.
[  342.894998][T10315] netlink: 'syz.2.1222': attribute type 8 has an invalid length.
[  342.906395][T10315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1222'.
[  343.647940][T10328] syzkaller0: entered promiscuous mode
[  343.653500][T10328] syzkaller0: entered allmulticast mode
[  343.810341][T10334] netlink: 'syz.0.1226': attribute type 21 has an invalid length.
[  343.818951][T10334] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1226'.
[  345.992443][T10344] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1230'.
[  346.214487][T10358] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1233'.
[  346.313467][ T5768] cgroup: fork rejected by pids controller in /syz1
[  346.883411][T10376] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  346.890216][T10376] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  347.679151][T10390] netlink: 'syz.3.1246': attribute type 3 has an invalid length.
[  347.688354][T10390] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1246'.
[  347.792342][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  347.802107][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.823916][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  347.840254][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  347.868754][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  347.879694][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  349.356365][ T6062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.483155][T10396] netlink: zone id is out of range
[  349.490613][T10396] netlink: set zone limit has 8 unknown bytes
[  349.516872][ T6062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.597391][ T6062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.678269][ T6062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.914176][   T51] Bluetooth: hci0: command tx timeout
[  349.957269][T10392] chnl_net:caif_netlink_parms(): no params data found
[  350.354509][T10392] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.361970][T10392] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.371999][T10392] bridge_slave_0: entered allmulticast mode
[  350.383395][T10392] bridge_slave_0: entered promiscuous mode
[  350.409435][T10392] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.424951][T10392] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.440117][T10392] bridge_slave_1: entered allmulticast mode
[  350.474028][T10392] bridge_slave_1: entered promiscuous mode
[  350.816772][T10392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.869146][T10392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.935894][T10438] netlink: 'syz.3.1254': attribute type 6 has an invalid length.
[  351.241908][T10392] team0: Port device team_slave_0 added
[  351.375505][T10392] team0: Port device team_slave_1 added
[  351.998022][   T51] Bluetooth: hci0: command tx timeout
[  353.371577][T10392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.390335][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.436400][T10392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.469314][T10392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.489492][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.523955][T10392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.662860][T10392] hsr_slave_0: entered promiscuous mode
[  353.695378][T10392] hsr_slave_1: entered promiscuous mode
[  353.707244][T10392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  353.723250][T10392] Cannot create hsr debugfs directory
[  353.902915][T10459] syzkaller0: entered promiscuous mode
[  353.908771][T10459] syzkaller0: entered allmulticast mode
[  354.078818][   T51] Bluetooth: hci0: command tx timeout
[  354.094599][T10466] netlink: 'syz.0.1261': attribute type 17 has an invalid length.
[  354.102502][T10466] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1261'.
[  354.131005][T10466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.360411][ T6062] hsr_slave_0: left promiscuous mode
[  354.372346][ T6062] hsr_slave_1: left promiscuous mode
[  354.389402][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.403923][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.416581][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.430164][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.439326][ T6062] bridge_slave_1: left allmulticast mode
[  354.445948][ T6062] bridge_slave_1: left promiscuous mode
[  354.453827][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.469846][ T6062] bridge_slave_0: left allmulticast mode
[  354.482582][ T6062] bridge_slave_0: left promiscuous mode
[  354.496669][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.550453][ T6062] veth1_macvtap: left promiscuous mode
[  354.564328][ T6062] veth0_macvtap: left promiscuous mode
[  354.934190][ T6062] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  355.391490][ T6062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.444197][ T6062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.718349][ T6062] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  355.806449][ T6062] bond0 (unregistering): Released all slaves
[  355.932330][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1262'.
[  356.159738][   T51] Bluetooth: hci0: command tx timeout
[  358.954829][T10529] delete_channel: no stack
[  359.007490][T10533] netlink: 'syz.2.1272': attribute type 2 has an invalid length.
[  359.023376][T10533] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  359.031847][T10533] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1272'.
[  359.453300][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1273'.
[  361.050834][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1273'.
[  361.063786][T10543] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1273'.
[  361.707005][T10392] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  361.730314][T10392] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  361.792828][T10392] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  361.819583][T10392] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  361.903156][T10572] netlink: 'syz.3.1281': attribute type 6 has an invalid length.
[  361.917381][T10572] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1281'.
[  362.204553][T10392] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.281490][T10392] 8021q: adding VLAN 0 to HW filter on device team0
[  362.319343][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.326699][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.383085][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.390463][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.847883][T10586] netlink: 'syz.2.1283': attribute type 3 has an invalid length.
[  362.860230][T10586] netlink: 'syz.2.1283': attribute type 1 has an invalid length.
[  362.869280][T10586] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1283'.
[  363.211225][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.423025][T10392] veth0_vlan: entered promiscuous mode
[  363.535611][T10392] veth1_vlan: entered promiscuous mode
[  363.717066][T10392] veth0_macvtap: entered promiscuous mode
[  363.792540][T10392] veth1_macvtap: entered promiscuous mode
[  363.833846][T10600] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1286'.
[  363.870167][T10600] bridge_slave_1: default FDB implementation only supports local addresses
[  363.908995][T10612] netlink: 'syz.0.1289': attribute type 7 has an invalid length.
[  364.061471][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.097117][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.114413][T10392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.158476][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.211373][T10601] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1286'.
[  364.225084][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.247777][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.299163][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.335933][T10392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.581680][T10601] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  364.617043][T10392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.635862][T10392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.650110][T10392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.659922][T10392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.793728][T10611] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1286'.
[  366.847492][T10611] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  366.863923][T10611] CPU: 0 PID: 10611 Comm: syz.3.1286 Not tainted syzkaller #0
[  366.871826][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  366.881943][T10611] Call Trace:
[  366.885282][T10611]  <TASK>
[  366.888265][T10611]  dump_stack_lvl+0x18c/0x250
[  366.893021][T10611]  ? show_regs_print_info+0x20/0x20
[  366.898292][T10611]  ? load_image+0x420/0x420
[  366.902881][T10611]  sysfs_warn_dup+0x8e/0xa0
[  366.907440][T10611]  sysfs_do_create_link_sd+0xc0/0x110
[  366.912876][T10611]  device_add_class_symlinks+0x1cf/0x240
[  366.918582][T10611]  device_add+0x507/0xc20
[  366.922994][T10611]  wiphy_register+0x1dad/0x2ae0
[  366.927918][T10611]  ? cfg80211_event_work+0x40/0x40
[  366.933066][T10611]  ? minstrel_ht_alloc+0x88a/0x990
[  366.938234][T10611]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  366.944781][T10611]  ieee80211_register_hw+0x3464/0x4250
[  366.950302][T10611]  ? ieee80211_tasklet_handler+0x20/0x20
[  366.955969][T10611]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  366.961914][T10611]  ? __debug_object_init+0xec/0x450
[  366.967182][T10611]  ? __asan_memset+0x22/0x40
[  366.971819][T10611]  ? __hrtimer_init+0x186/0x270
[  366.976713][T10611]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  366.982587][T10611]  ? mac80211_hwsim_free+0x220/0x220
[  366.987911][T10611]  ? rcu_is_watching+0x15/0xb0
[  366.992721][T10611]  ? kstrndup+0xbd/0x140
[  366.997019][T10611]  hwsim_new_radio_nl+0xdc9/0x1a90
[  367.002170][T10611]  ? __nla_validate+0x50/0x50
[  367.006978][T10611]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  367.013359][T10611]  ? __nla_parse+0x40/0x50
[  367.017902][T10611]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  367.024276][T10611]  genl_family_rcv_msg_doit+0x211/0x310
[  367.029861][T10611]  ? end_current_label_crit_section+0x170/0x170
[  367.036147][T10611]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  367.042083][T10611]  ? bpf_lsm_capable+0x9/0x10
[  367.046822][T10611]  ? security_capable+0x89/0xb0
[  367.051807][T10611]  genl_rcv_msg+0x619/0x7a0
[  367.056353][T10611]  ? genl_bind+0x360/0x360
[  367.060802][T10611]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  367.067171][T10611]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  367.073811][T10611]  ? perf_trace_lock+0xfc/0x3b0
[  367.078714][T10611]  netlink_rcv_skb+0x241/0x4d0
[  367.083623][T10611]  ? genl_bind+0x360/0x360
[  367.088082][T10611]  ? netlink_ack+0x1180/0x1180
[  367.092900][T10611]  ? __lock_acquire+0x7d40/0x7d40
[  367.098021][T10611]  ? down_read+0x1ac/0x2e0
[  367.102477][T10611]  genl_rcv+0x28/0x40
[  367.106492][T10611]  netlink_unicast+0x751/0x8d0
[  367.111307][T10611]  netlink_sendmsg+0x8d0/0xbf0
[  367.116123][T10611]  ? netlink_getsockopt+0x590/0x590
[  367.121368][T10611]  ? aa_sock_msg_perm+0x94/0x150
[  367.126348][T10611]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  367.131672][T10611]  ? security_socket_sendmsg+0x80/0xa0
[  367.137255][T10611]  ? netlink_getsockopt+0x590/0x590
[  367.142496][T10611]  ____sys_sendmsg+0x5ba/0x960
[  367.147301][T10611]  ? __asan_memset+0x22/0x40
[  367.151938][T10611]  ? __sys_sendmsg_sock+0x30/0x30
[  367.157002][T10611]  ? __import_iovec+0x5f2/0x850
[  367.162009][T10611]  ? import_iovec+0x73/0xa0
[  367.166555][T10611]  ___sys_sendmsg+0x2a6/0x360
[  367.171303][T10611]  ? __sys_sendmsg+0x2a0/0x2a0
[  367.176161][T10611]  __se_sys_sendmsg+0x1c2/0x2b0
[  367.181063][T10611]  ? __x64_sys_sendmsg+0x80/0x80
[  367.186057][T10611]  ? lockdep_hardirqs_on+0x98/0x150
[  367.191302][T10611]  do_syscall_64+0x55/0xa0
[  367.195756][T10611]  ? clear_bhb_loop+0x40/0x90
[  367.200502][T10611]  ? clear_bhb_loop+0x40/0x90
[  367.205413][T10611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  367.211369][T10611] RIP: 0033:0x7fe15219cdd9
[  367.215842][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.235517][T10611] RSP: 002b:00007fe152fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.245398][T10611] RAX: ffffffffffffffda RBX: 00007fe152416180 RCX: 00007fe15219cdd9
[  367.253422][T10611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  367.261434][T10611] RBP: 00007fe152232d69 R08: 0000000000000000 R09: 0000000000000000
[  367.269447][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.277463][T10611] R13: 00007fe152416218 R14: 00007fe152416180 R15: 00007fff3d69c4f8
[  367.285492][T10611]  </TASK>
[  369.933800][T10664] netlink: 'syz.3.1293': attribute type 6 has an invalid length.
[  369.941615][T10664] netlink: 'syz.3.1293': attribute type 3 has an invalid length.
[  369.949574][T10664] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1293'.
[  369.969905][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.996095][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.091041][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.107154][T10685] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1294'.
[  370.118110][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.440488][T10698] netlink: 'syz.1.1297': attribute type 3 has an invalid length.
[  370.451555][T10698] netlink: 'syz.1.1297': attribute type 6 has an invalid length.
[  370.459821][T10698] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1297'.
[  370.566381][T10702] netlink: 'syz.2.1298': attribute type 46 has an invalid length.
[  370.603863][T10702] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1298'.
[  370.813013][T10708] netlink: 'syz.2.1300': attribute type 9 has an invalid length.
[  370.833855][T10708] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1300'.
[  371.489853][T10731] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1308'.
[  371.722381][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'.
[  371.743507][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'.
[  371.772796][T10737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'.
[  372.674681][T10765] netlink: 'syz.0.1315': attribute type 39 has an invalid length.
[  372.990165][T10772] netlink: 'syz.3.1319': attribute type 4 has an invalid length.
[  373.033783][T10772] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1319'.
[  374.257895][T10796] netlink: 'syz.2.1327': attribute type 9 has an invalid length.
[  374.314784][T10796] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1327'.
[  374.618228][T10800] netlink: 'syz.2.1327': attribute type 9 has an invalid length.
[  374.654022][T10800] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1327'.
[  374.800330][T10808] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1330'.
[  375.005545][T10805] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1328'.
[  375.297441][T10812] Dead loop on virtual device ip6_vti0, fix it urgently!
[  376.230030][T10848] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1344'.
[  376.431350][T10862] netlink: 'syz.3.1347': attribute type 10 has an invalid length.
[  376.472903][T10859] netlink: 'syz.2.1346': attribute type 3 has an invalid length.
[  376.480800][T10859] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1346'.
[  377.746397][T10891] delete_channel: no stack
[  378.689423][T10915] netlink: 'syz.1.1363': attribute type 19 has an invalid length.
[  378.701613][T10915] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.1363'.
[  378.870360][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.876847][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.901658][T10909] netlink: 'syz.3.1361': attribute type 39 has an invalid length.
[  378.974207][T10926] netlink: 'syz.2.1366': attribute type 13 has an invalid length.
[  378.982901][T10926] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1366'.
[  378.995813][T10926] erspan0: refused to change device tx_queue_len
[  379.002208][T10926] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  381.124010][ T1071] tipc: Subscription rejected, illegal request
[  381.317214][T10945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1372'.
[  382.032511][T10969] netlink: 'syz.3.1378': attribute type 21 has an invalid length.
[  382.053231][T10969] IPv6: NLM_F_CREATE should be specified when creating new route
[  382.102185][T10969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.110587][T10969] IPv6: NLM_F_CREATE should be set when creating new route
[  382.119200][T10969] IPv6: NLM_F_CREATE should be set when creating new route
[  382.127335][T10969] IPv6: NLM_F_CREATE should be set when creating new route
[  382.430002][T10965] netlink: 'syz.2.1377': attribute type 39 has an invalid length.
[  383.111384][T10990] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1384'.
[  383.122497][T10990] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1384'.
[  383.136487][T10990] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1384'.
[  383.258050][T10995] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1386'.
[  383.327119][T10995] netlink: 'syz.3.1386': attribute type 3 has an invalid length.
[  383.339640][T10995] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1386'.
[  386.389816][T11029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1395'.
[  386.405417][T11030] netlink: 'syz.1.1395': attribute type 21 has an invalid length.
[  386.414501][T11030] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1395'.
[  386.427981][T11033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.877510][   T51] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6
[  386.980597][T11041] syzkaller0: entered promiscuous mode
[  387.001292][T11041] syzkaller0: entered allmulticast mode
[  387.103514][T11053] Dead loop on virtual device ip6_vti0, fix it urgently!
[  387.467031][T11060] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1402'.
[  389.507470][T11057] netlink: 'syz.2.1402': attribute type 4 has an invalid length.
[  389.529808][T11062] netlink: 'syz.3.1403': attribute type 21 has an invalid length.
[  389.540079][T11062] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1403'.
[  389.551339][T11062] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1403'.
[  389.702150][T11076] netlink: 'syz.0.1406': attribute type 25 has an invalid length.
[  389.720671][T11076] netlink: 'syz.0.1406': attribute type 9 has an invalid length.
[  389.842761][T11084] syz.1.1408[11084] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  389.844894][T11084] syz.1.1408[11084] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  390.040004][T11098] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1412'.
[  390.084413][T11098] netlink: zone id is out of range
[  390.095370][T11098] netlink: zone id is out of range
[  390.109858][T11098] netlink: zone id is out of range
[  390.130333][T11098] netlink: zone id is out of range
[  390.145398][T11101] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1413'.
[  390.156170][T11098] netlink: zone id is out of range
[  390.161536][T11098] netlink: zone id is out of range
[  390.167345][T11098] netlink: zone id is out of range
[  390.174562][T11098] netlink: zone id is out of range
[  390.179940][T11098] netlink: zone id is out of range
[  390.191835][T11103] netlink: 'syz.3.1413': attribute type 2 has an invalid length.
[  390.206128][T11101] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1413'.
[  390.232069][T11103] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1413'.
[  390.242357][T11101] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1413'.
[  391.269843][T11145] netlink: 'syz.0.1424': attribute type 2 has an invalid length.
[  391.618208][T11158] __nla_validate_parse: 4 callbacks suppressed
[  391.618222][T11158] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1429'.
[  391.887786][T11165] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1431'.
[  392.471028][T11183] IPv6: Can't replace route, no match found
[  392.741647][T11195] netlink: 'syz.2.1440': attribute type 17 has an invalid length.
[  392.751522][T11195] netlink: 'syz.2.1440': attribute type 16 has an invalid length.
[  392.760135][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1440'.
[  392.775893][T11197] netlink: 'syz.2.1440': attribute type 17 has an invalid length.
[  392.786245][T11197] netlink: 'syz.2.1440': attribute type 16 has an invalid length.
[  392.800285][T11197] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1440'.
[  393.002671][T11202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1443'.
[  393.238112][T11210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1445'.
[  393.262714][T11213] delete_channel: no stack
[  394.227951][T11234] syz.1.1452[11234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  394.228096][T11234] syz.1.1452[11234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  394.350386][T11229] sit0: left promiscuous mode
[  394.521592][T11231] sit0: entered promiscuous mode
[  397.442898][T11256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1456'.
[  397.674956][T11265] IPv6: pim6reg1: Disabled Multicast RS
[  397.685101][T11266] validate_nla: 3 callbacks suppressed
[  397.685116][T11266] netlink: 'syz.2.1458': attribute type 20 has an invalid length.
[  398.315274][T11296] netlink: 'syz.0.1468': attribute type 21 has an invalid length.
[  398.356831][T11296] netlink: 'syz.0.1468': attribute type 6 has an invalid length.
[  398.406831][ T3479] tipc: Subscription rejected, illegal request
[  398.571048][T11303] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.1470'.
[  398.673988][T11303] net_ratelimit: 104 callbacks suppressed
[  398.674007][T11303] netlink: set zone limit has 8 unknown bytes
[  398.817365][T11305] netlink: 'syz.3.1471': attribute type 9 has an invalid length.
[  398.826015][T11305] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1471'.
[  398.919016][T11309] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1473'.
[  399.046220][T11318] netlink: 'syz.3.1471': attribute type 9 has an invalid length.
[  399.074079][T11318] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1471'.
[  399.214614][T11320] netlink: 'syz.2.1475': attribute type 1 has an invalid length.
[  399.223265][T11320] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1475'.
[  399.362444][T11327] netlink: 'syz.2.1476': attribute type 21 has an invalid length.
[  399.392438][T11327] netlink: 'syz.2.1476': attribute type 10 has an invalid length.
[  400.827685][T11355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.844934][T11355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.872452][T11355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.890138][T11355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.975534][T11368] netlink: 'syz.2.1485': attribute type 29 has an invalid length.
[  401.135230][T11368] netlink: 'syz.2.1485': attribute type 29 has an invalid length.
[  404.089519][T11426] syz.3.1502[11426] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.090819][T11426] syz.3.1502[11426] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.380721][T11430] sctp: [Deprecated]: syz.1.1503 (pid 11430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.380721][T11430] Use struct sctp_sack_info instead
[  404.632806][T11431] syzkaller0: entered promiscuous mode
[  404.640509][T11431] syzkaller0: entered allmulticast mode
[  407.282118][T11463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'.
[  407.305201][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  407.320730][T11471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  407.344772][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  407.366317][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  407.396627][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  407.580333][T11479] syzkaller0: entered promiscuous mode
[  407.593818][T11479] syzkaller0: entered allmulticast mode
[  407.662154][T11488] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1520'.
[  407.676431][T11488] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  407.689501][T11488] openvswitch: netlink: Message has 1 unknown bytes.
[  408.439383][T11498] syz.1.1522[11498] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.439533][T11498] syz.1.1522[11498] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  411.110648][T11529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1530'.
[  411.206213][T11533] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  411.235811][T11533] C: renamed from team_slave_0
[  411.249942][T11533] validate_nla: 1 callbacks suppressed
[  411.249958][T11533] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  411.274067][T11533] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1531'.
[  411.769819][T11551] syz.0.1536[11551] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  411.769974][T11551] syz.0.1536[11551] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  411.990143][T11559] syzkaller0: entered promiscuous mode
[  412.023739][T11559] syzkaller0: entered allmulticast mode
[  412.355025][T11568] netlink: 'syz.2.1538': attribute type 25 has an invalid length.
[  412.398023][T11570] netlink: 'syz.1.1540': attribute type 27 has an invalid length.
[  412.414132][T11570] netlink: 'syz.1.1540': attribute type 10 has an invalid length.
[  412.686969][T11570] bond0: (slave bond_slave_0): Releasing backup interface
[  414.726615][T11577] À: port 1(vlan0) entered blocking state
[  414.732712][T11577] À: port 1(vlan0) entered disabled state
[  414.741054][T11577] vlan0: entered allmulticast mode
[  414.750061][T11577] vlan0: entered promiscuous mode
[  414.768565][T11575] netlink: 'syz.3.1543': attribute type 2 has an invalid length.
[  414.786776][T11575] netlink: 'syz.3.1543': attribute type 8 has an invalid length.
[  414.810087][T11575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1543'.
[  414.849460][T11580] netlink: 'syz.3.1543': attribute type 11 has an invalid length.
[  415.066326][T11592] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1547'.
[  416.074899][T11606] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1548'.
[  416.087701][T11606] bridge_slave_1: default FDB implementation only supports local addresses
[  416.139364][T11606] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1548'.
[  416.197390][T11613] netlink: 'syz.0.1550': attribute type 25 has an invalid length.
[  416.389931][T11606] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  416.415039][T11606] CPU: 1 PID: 11606 Comm: syz.3.1548 Not tainted syzkaller #0
[  416.422593][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  416.432698][T11606] Call Trace:
[  416.436021][T11606]  <TASK>
[  416.438996][T11606]  dump_stack_lvl+0x18c/0x250
[  416.443743][T11606]  ? show_regs_print_info+0x20/0x20
[  416.449184][T11606]  ? load_image+0x420/0x420
[  416.453760][T11606]  sysfs_warn_dup+0x8e/0xa0
[  416.458317][T11606]  sysfs_do_create_link_sd+0xc0/0x110
[  416.463744][T11606]  device_add_class_symlinks+0x1cf/0x240
[  416.469442][T11606]  device_add+0x507/0xc20
[  416.473861][T11606]  wiphy_register+0x1dad/0x2ae0
[  416.478783][T11606]  ? cfg80211_event_work+0x40/0x40
[  416.483938][T11606]  ? minstrel_ht_alloc+0x88a/0x990
[  416.489124][T11606]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  416.495250][T11606]  ieee80211_register_hw+0x3464/0x4250
[  416.500808][T11606]  ? ieee80211_tasklet_handler+0x20/0x20
[  416.506516][T11606]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  416.512499][T11606]  ? __debug_object_init+0xec/0x450
[  416.517788][T11606]  ? __asan_memset+0x22/0x40
[  416.522462][T11606]  ? __hrtimer_init+0x186/0x270
[  416.527386][T11606]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  416.533209][T11606]  ? mac80211_hwsim_free+0x220/0x220
[  416.538569][T11606]  ? rcu_is_watching+0x15/0xb0
[  416.543409][T11606]  ? kstrndup+0xbd/0x140
[  416.547747][T11606]  hwsim_new_radio_nl+0xdc9/0x1a90
[  416.552929][T11606]  ? __nla_validate+0x50/0x50
[  416.557671][T11606]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  416.564062][T11606]  ? __nla_parse+0x40/0x50
[  416.568546][T11606]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  416.574936][T11606]  genl_family_rcv_msg_doit+0x211/0x310
[  416.580547][T11606]  ? end_current_label_crit_section+0x170/0x170
[  416.586850][T11606]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  416.592812][T11606]  ? bpf_lsm_capable+0x9/0x10
[  416.597552][T11606]  ? security_capable+0x89/0xb0
[  416.602471][T11606]  genl_rcv_msg+0x619/0x7a0
[  416.607068][T11606]  ? genl_bind+0x360/0x360
[  416.611631][T11606]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  416.618039][T11606]  ? ref_tracker_free+0x690/0x840
[  416.623155][T11606]  netlink_rcv_skb+0x241/0x4d0
[  416.628009][T11606]  ? genl_bind+0x360/0x360
[  416.632490][T11606]  ? netlink_ack+0x1180/0x1180
[  416.637346][T11606]  ? __lock_acquire+0x7d40/0x7d40
[  416.642456][T11606]  ? down_read+0x1ac/0x2e0
[  416.646973][T11606]  genl_rcv+0x28/0x40
[  416.651029][T11606]  netlink_unicast+0x751/0x8d0
[  416.655895][T11606]  netlink_sendmsg+0x8d0/0xbf0
[  416.660758][T11606]  ? netlink_getsockopt+0x590/0x590
[  416.666044][T11606]  ? aa_sock_msg_perm+0x94/0x150
[  416.671064][T11606]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  416.676417][T11606]  ? security_socket_sendmsg+0x80/0xa0
[  416.681941][T11606]  ? netlink_getsockopt+0x590/0x590
[  416.687308][T11606]  ____sys_sendmsg+0x5ba/0x960
[  416.692155][T11606]  ? __asan_memset+0x22/0x40
[  416.696888][T11606]  ? __sys_sendmsg_sock+0x30/0x30
[  416.701960][T11606]  ? __import_iovec+0x5f2/0x850
[  416.706879][T11606]  ? import_iovec+0x73/0xa0
[  416.711452][T11606]  ___sys_sendmsg+0x2a6/0x360
[  416.716202][T11606]  ? __sys_sendmsg+0x2a0/0x2a0
[  416.721115][T11606]  __se_sys_sendmsg+0x1c2/0x2b0
[  416.726031][T11606]  ? __x64_sys_sendmsg+0x80/0x80
[  416.731039][T11606]  ? lockdep_hardirqs_on+0x98/0x150
[  416.736299][T11606]  do_syscall_64+0x55/0xa0
[  416.740768][T11606]  ? clear_bhb_loop+0x40/0x90
[  416.745504][T11606]  ? clear_bhb_loop+0x40/0x90
[  416.750239][T11606]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  416.756186][T11606] RIP: 0033:0x7fe15219cdd9
[  416.760647][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.780309][T11606] RSP: 002b:00007fe152fe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.788786][T11606] RAX: ffffffffffffffda RBX: 00007fe152416090 RCX: 00007fe15219cdd9
[  416.796812][T11606] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  416.804833][T11606] RBP: 00007fe152232d69 R08: 0000000000000000 R09: 0000000000000000
[  416.812934][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.821092][T11606] R13: 00007fe152416128 R14: 00007fe152416090 R15: 00007fff3d69c4f8
[  416.829142][T11606]  </TASK>
[  416.986492][T11620] netlink: 'syz.2.1552': attribute type 10 has an invalid length.
[  417.100347][T11624] netlink: 'syz.1.1553': attribute type 39 has an invalid length.
[  419.439785][T11638] netlink: 'syz.3.1557': attribute type 6 has an invalid length.
[  419.785940][T11652] : renamed from team_slave_1
[  420.049165][T11655] netlink: 'syz.0.1556': attribute type 10 has an invalid length.
[  420.143107][T11655] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.359481][T11655] team0: Port device bridge0 removed
[  420.376108][T11655] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.383392][T11655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.409580][T11655] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  420.925636][T11683] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1570'.
[  421.167060][T11691] netlink: 'syz.0.1573': attribute type 2 has an invalid length.
[  421.177615][T11691] netlink: 'syz.0.1573': attribute type 1 has an invalid length.
[  421.186939][T11691] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1573'.
[  421.479340][T11706] netlink: 'syz.2.1576': attribute type 1 has an invalid length.
[  421.562003][T11708] netlink: 'syz.0.1577': attribute type 1 has an invalid length.
[  421.633749][T11706] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1576'.
[  422.136875][T11694] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1574'.
[  422.339539][T11694] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  422.347884][T11694] CPU: 0 PID: 11694 Comm: syz.3.1574 Not tainted syzkaller #0
[  422.355402][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  422.365503][T11694] Call Trace:
[  422.368818][T11694]  <TASK>
[  422.371763][T11694]  dump_stack_lvl+0x18c/0x250
[  422.376514][T11694]  ? show_regs_print_info+0x20/0x20
[  422.381738][T11694]  ? load_image+0x420/0x420
[  422.386282][T11694]  sysfs_warn_dup+0x8e/0xa0
[  422.390804][T11694]  sysfs_do_create_link_sd+0xc0/0x110
[  422.396201][T11694]  device_add_class_symlinks+0x1cf/0x240
[  422.401886][T11694]  device_add+0x507/0xc20
[  422.406293][T11694]  wiphy_register+0x1dad/0x2ae0
[  422.411251][T11694]  ? cfg80211_event_work+0x40/0x40
[  422.416411][T11694]  ? minstrel_ht_alloc+0x88a/0x990
[  422.421652][T11694]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  422.427847][T11694]  ieee80211_register_hw+0x3464/0x4250
[  422.433365][T11694]  ? ieee80211_tasklet_handler+0x20/0x20
[  422.439014][T11694]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  422.444942][T11694]  ? __debug_object_init+0xec/0x450
[  422.450190][T11694]  ? __asan_memset+0x22/0x40
[  422.454827][T11694]  ? __hrtimer_init+0x186/0x270
[  422.459743][T11694]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  422.465554][T11694]  ? mac80211_hwsim_free+0x220/0x220
[  422.470893][T11694]  ? rcu_is_watching+0x15/0xb0
[  422.475719][T11694]  ? kstrndup+0xbd/0x140
[  422.480045][T11694]  hwsim_new_radio_nl+0xdc9/0x1a90
[  422.485224][T11694]  ? mark_lock+0x94/0x320
[  422.489617][T11694]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  422.496009][T11694]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  422.502227][T11694]  ? lockdep_hardirqs_on+0x98/0x150
[  422.507555][T11694]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  422.513782][T11694]  genl_family_rcv_msg_doit+0x211/0x310
[  422.519396][T11694]  ? end_current_label_crit_section+0x170/0x170
[  422.525748][T11694]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  422.531722][T11694]  ? bpf_lsm_capable+0x9/0x10
[  422.536562][T11694]  ? security_capable+0x89/0xb0
[  422.541491][T11694]  genl_rcv_msg+0x619/0x7a0
[  422.546061][T11694]  ? genl_bind+0x360/0x360
[  422.550505][T11694]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  422.556869][T11694]  ? lockdep_hardirqs_on+0x98/0x150
[  422.562127][T11694]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  422.568347][T11694]  netlink_rcv_skb+0x241/0x4d0
[  422.573186][T11694]  ? genl_bind+0x360/0x360
[  422.577647][T11694]  ? netlink_ack+0x1180/0x1180
[  422.582482][T11694]  ? __lock_acquire+0x7d40/0x7d40
[  422.587577][T11694]  ? down_read+0x1ac/0x2e0
[  422.592040][T11694]  genl_rcv+0x28/0x40
[  422.596070][T11694]  netlink_unicast+0x751/0x8d0
[  422.600903][T11694]  netlink_sendmsg+0x8d0/0xbf0
[  422.605742][T11694]  ? netlink_getsockopt+0x590/0x590
[  422.611008][T11694]  ? aa_sock_msg_perm+0x94/0x150
[  422.616014][T11694]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  422.621372][T11694]  ? security_socket_sendmsg+0x80/0xa0
[  422.626896][T11694]  ? netlink_getsockopt+0x590/0x590
[  422.632179][T11694]  ____sys_sendmsg+0x5ba/0x960
[  422.636997][T11694]  ? __asan_memset+0x22/0x40
[  422.641634][T11694]  ? __sys_sendmsg_sock+0x30/0x30
[  422.646790][T11694]  ? __import_iovec+0x5f2/0x850
[  422.651785][T11694]  ? import_iovec+0x73/0xa0
[  422.656331][T11694]  ___sys_sendmsg+0x2a6/0x360
[  422.661066][T11694]  ? __sys_sendmsg+0x2a0/0x2a0
[  422.665915][T11694]  __se_sys_sendmsg+0x1c2/0x2b0
[  422.670891][T11694]  ? __x64_sys_sendmsg+0x80/0x80
[  422.675880][T11694]  ? lockdep_hardirqs_on+0x98/0x150
[  422.681115][T11694]  do_syscall_64+0x55/0xa0
[  422.685932][T11694]  ? clear_bhb_loop+0x40/0x90
[  422.690643][T11694]  ? clear_bhb_loop+0x40/0x90
[  422.695355][T11694]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  422.701285][T11694] RIP: 0033:0x7fe15219cdd9
[  422.705728][T11694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.725380][T11694] RSP: 002b:00007fe153009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.733826][T11694] RAX: ffffffffffffffda RBX: 00007fe152415fa0 RCX: 00007fe15219cdd9
[  422.741843][T11694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  422.749850][T11694] RBP: 00007fe152232d69 R08: 0000000000000000 R09: 0000000000000000
[  422.757853][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  422.765876][T11694] R13: 00007fe152416038 R14: 00007fe152415fa0 R15: 00007fff3d69c4f8
[  422.773908][T11694]  </TASK>
[  422.933814][T11695] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1574'.
[  422.962109][T11695] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  422.985253][T11695] CPU: 1 PID: 11695 Comm: syz.3.1574 Not tainted syzkaller #0
[  422.992792][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  423.002893][T11695] Call Trace:
[  423.006226][T11695]  <TASK>
[  423.009207][T11695]  dump_stack_lvl+0x18c/0x250
[  423.014126][T11695]  ? show_regs_print_info+0x20/0x20
[  423.019387][T11695]  ? load_image+0x420/0x420
[  423.023969][T11695]  sysfs_warn_dup+0x8e/0xa0
[  423.028530][T11695]  sysfs_do_create_link_sd+0xc0/0x110
[  423.033953][T11695]  device_add_class_symlinks+0x1cf/0x240
[  423.039650][T11695]  device_add+0x507/0xc20
[  423.044044][T11695]  wiphy_register+0x1dad/0x2ae0
[  423.049009][T11695]  ? cfg80211_event_work+0x40/0x40
[  423.054174][T11695]  ? minstrel_ht_alloc+0x88a/0x990
[  423.059363][T11695]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  423.065490][T11695]  ieee80211_register_hw+0x3464/0x4250
[  423.071020][T11695]  ? ieee80211_tasklet_handler+0x20/0x20
[  423.076699][T11695]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  423.082655][T11695]  ? __debug_object_init+0xec/0x450
[  423.087921][T11695]  ? __asan_memset+0x22/0x40
[  423.092573][T11695]  ? __hrtimer_init+0x186/0x270
[  423.097471][T11695]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  423.103264][T11695]  ? mac80211_hwsim_free+0x220/0x220
[  423.108597][T11695]  ? rcu_is_watching+0x15/0xb0
[  423.113422][T11695]  ? kstrndup+0xbd/0x140
[  423.117731][T11695]  hwsim_new_radio_nl+0xdc9/0x1a90
[  423.122899][T11695]  ? __nla_validate+0x50/0x50
[  423.127663][T11695]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  423.134062][T11695]  ? __nla_parse+0x40/0x50
[  423.138551][T11695]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  423.144930][T11695]  genl_family_rcv_msg_doit+0x211/0x310
[  423.150530][T11695]  ? end_current_label_crit_section+0x170/0x170
[  423.156830][T11695]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  423.162784][T11695]  ? bpf_lsm_capable+0x9/0x10
[  423.167521][T11695]  ? security_capable+0x89/0xb0
[  423.172424][T11695]  genl_rcv_msg+0x619/0x7a0
[  423.176971][T11695]  ? genl_bind+0x360/0x360
[  423.181432][T11695]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  423.187825][T11695]  netlink_rcv_skb+0x241/0x4d0
[  423.192679][T11695]  ? genl_bind+0x360/0x360
[  423.197154][T11695]  ? netlink_ack+0x1180/0x1180
[  423.201999][T11695]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  423.208239][T11695]  ? down_read+0x1ac/0x2e0
[  423.212715][T11695]  genl_rcv+0x28/0x40
[  423.216763][T11695]  netlink_unicast+0x751/0x8d0
[  423.221616][T11695]  netlink_sendmsg+0x8d0/0xbf0
[  423.226441][T11695]  ? netlink_getsockopt+0x590/0x590
[  423.231719][T11695]  ? aa_sock_msg_perm+0x94/0x150
[  423.236717][T11695]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  423.242042][T11695]  ? security_socket_sendmsg+0x80/0xa0
[  423.247535][T11695]  ? netlink_getsockopt+0x590/0x590
[  423.252787][T11695]  ____sys_sendmsg+0x5ba/0x960
[  423.257622][T11695]  ? __asan_memset+0x22/0x40
[  423.262374][T11695]  ? __sys_sendmsg_sock+0x30/0x30
[  423.267443][T11695]  ? __import_iovec+0x5f2/0x850
[  423.272352][T11695]  ? import_iovec+0x73/0xa0
[  423.276907][T11695]  ___sys_sendmsg+0x2a6/0x360
[  423.281632][T11695]  ? __sys_sendmsg+0x2a0/0x2a0
[  423.286490][T11695]  __se_sys_sendmsg+0x1c2/0x2b0
[  423.291383][T11695]  ? __x64_sys_sendmsg+0x80/0x80
[  423.296372][T11695]  ? lockdep_hardirqs_on+0x98/0x150
[  423.301611][T11695]  do_syscall_64+0x55/0xa0
[  423.306052][T11695]  ? clear_bhb_loop+0x40/0x90
[  423.310851][T11695]  ? clear_bhb_loop+0x40/0x90
[  423.315574][T11695]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  423.321501][T11695] RIP: 0033:0x7fe15219cdd9
[  423.325949][T11695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.345604][T11695] RSP: 002b:00007fe152fe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  423.354090][T11695] RAX: ffffffffffffffda RBX: 00007fe152416090 RCX: 00007fe15219cdd9
[  423.362201][T11695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  423.370219][T11695] RBP: 00007fe152232d69 R08: 0000000000000000 R09: 0000000000000000
[  423.378232][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.386233][T11695] R13: 00007fe152416128 R14: 00007fe152416090 R15: 00007fff3d69c4f8
[  423.394249][T11695]  </TASK>
[  423.548173][T11742] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1585'.
[  423.664612][T11748] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1586'.
[  423.692407][T11750] netlink: 'syz.0.1583': attribute type 27 has an invalid length.
[  423.700622][T11750] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1583'.
[  423.942662][T11751] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1587'.
[  423.957615][T11753] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1588'.
[  423.974047][T11756] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  423.993146][T11756] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  424.376976][T11767] netlink: 'syz.0.1592': attribute type 21 has an invalid length.
[  424.422077][T11764] netlink: 'syz.2.1591': attribute type 10 has an invalid length.
[  425.072230][T11781] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  425.256859][T11788] netlink: 'syz.3.1600': attribute type 29 has an invalid length.
[  425.294123][T11788] netlink: 'syz.3.1600': attribute type 29 has an invalid length.
[  425.314950][T11793] netlink: 'syz.3.1600': attribute type 29 has an invalid length.
[  426.296829][T11812] __nla_validate_parse: 1 callbacks suppressed
[  426.296850][T11812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1603'.
[  426.412143][T11819] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1604'.
[  427.022274][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1608'.
[  427.713265][ T6047] tipc: Subscription rejected, illegal request
[  428.315806][T11868] netlink: 'syz.0.1618': attribute type 10 has an invalid length.
[  428.672305][T11868] bond0: (slave team0): Releasing backup interface
[  428.716138][T11868] team0 (unregistering): Port device C removed
[  428.732963][   T51] Bluetooth: hci1: ISO packet for unknown connection handle 4
[  428.792100][T11868] team0 (unregistering): Port device team_slave_1 removed
[  428.833274][T11868] team0 (unregistering): Port device geneve1 removed
[  429.190734][T11882] bridge0: port 2(batadv0) entered blocking state
[  429.209203][T11882] bridge0: port 2(batadv0) entered disabled state
[  429.240935][T11882] batadv0: entered allmulticast mode
[  429.263269][T11882] batadv0: entered promiscuous mode
[  429.279838][T11882] bridge0: port 2(batadv0) entered blocking state
[  429.287060][T11882] bridge0: port 2(batadv0) entered forwarding state
[  429.370822][T11887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1625'.
[  429.462486][T11889] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1627'.
[  429.476395][T11889] tc_dump_action: action bad kind
[  429.584241][ T6043] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  429.594042][ T6043] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  429.829315][T11909] netlink: 'syz.3.1632': attribute type 2 has an invalid length.
[  429.839110][T11909] netlink: 'syz.3.1632': attribute type 4 has an invalid length.
[  429.847538][T11909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1632'.
[  429.892036][T11910] netlink: 'syz.2.1631': attribute type 1 has an invalid length.
[  429.908756][T11908] netlink: 'syz.2.1631': attribute type 1 has an invalid length.
[  430.092311][T11916] netlink: 'syz.3.1634': attribute type 3 has an invalid length.
[  430.114003][T11916] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1634'.
[  430.472984][T11932] netlink: 'syz.3.1642': attribute type 10 has an invalid length.
[  431.258910][T11959] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1647'.
[  431.287803][T11961] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1647'.
[  431.636542][T11976] netlink: 'syz.2.1653': attribute type 21 has an invalid length.
[  432.331175][T11990] netlink: 'syz.3.1657': attribute type 21 has an invalid length.
[  432.685144][T11993] Ÿë
: port 1(ip6gretap0) entered blocking state
[  432.713328][T11993] Ÿë
: port 1(ip6gretap0) entered disabled state
[  432.722524][T11993] ip6gretap0: entered allmulticast mode
[  432.740762][T11993] ip6gretap0: entered promiscuous mode
[  433.046621][T12005] netlink: 'syz.1.1660': attribute type 10 has an invalid length.
[  433.145724][T12005] team0: Device hsr_slave_0 failed to register rx_handler
[  433.261682][T12014] netlink: 'syz.3.1662': attribute type 10 has an invalid length.
[  433.272838][T12014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.358671][T12014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.533066][T12014] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  433.861064][T12034] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1670'.
[  433.961419][T12042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.975284][T12042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.990057][T12042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.018161][T12042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.061946][T12042] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  434.075745][T12042] batman_adv: batadv0: Removing interface: veth0_vlan
[  434.110672][T12042] bridge0: port 2(batadv0) entered disabled state
[  434.247960][T12042] batadv0 (unregistering): left allmulticast mode
[  434.264472][T12042] batadv0 (unregistering): left promiscuous mode
[  434.272328][T12042] bridge0: port 2(batadv0) entered disabled state
[  434.313467][T12054] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1674'.
[  434.353245][T12054] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  434.403213][T12054] CPU: 1 PID: 12054 Comm: syz.3.1674 Not tainted syzkaller #0
[  434.411210][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  434.421303][T12054] Call Trace:
[  434.424616][T12054]  <TASK>
[  434.427581][T12054]  dump_stack_lvl+0x18c/0x250
[  434.432844][T12054]  ? show_regs_print_info+0x20/0x20
[  434.438086][T12054]  ? load_image+0x420/0x420
[  434.442643][T12054]  sysfs_warn_dup+0x8e/0xa0
[  434.447183][T12054]  sysfs_do_create_link_sd+0xc0/0x110
[  434.452596][T12054]  device_add_class_symlinks+0x1cf/0x240
[  434.458271][T12054]  device_add+0x507/0xc20
[  434.462645][T12054]  wiphy_register+0x1dad/0x2ae0
[  434.467551][T12054]  ? cfg80211_event_work+0x40/0x40
[  434.472695][T12054]  ? minstrel_ht_alloc+0x88a/0x990
[  434.477862][T12054]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  434.483978][T12054]  ieee80211_register_hw+0x3464/0x4250
[  434.489716][T12054]  ? ieee80211_tasklet_handler+0x20/0x20
[  434.495415][T12054]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.501643][T12054]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  434.507425][T12054]  ? mac80211_hwsim_free+0x220/0x220
[  434.512746][T12054]  ? rcu_is_watching+0x15/0xb0
[  434.517569][T12054]  ? kstrndup+0xbd/0x140
[  434.521861][T12054]  hwsim_new_radio_nl+0xdc9/0x1a90
[  434.527015][T12054]  ? mark_lock+0x94/0x320
[  434.531410][T12054]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  434.537776][T12054]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.543979][T12054]  ? lockdep_hardirqs_on+0x98/0x150
[  434.549227][T12054]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.555432][T12054]  genl_family_rcv_msg_doit+0x211/0x310
[  434.561017][T12054]  ? end_current_label_crit_section+0x170/0x170
[  434.567295][T12054]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  434.573232][T12054]  ? bpf_lsm_capable+0x9/0x10
[  434.577947][T12054]  ? security_capable+0x89/0xb0
[  434.582848][T12054]  genl_rcv_msg+0x619/0x7a0
[  434.587394][T12054]  ? genl_bind+0x360/0x360
[  434.591862][T12054]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  434.598232][T12054]  ? mark_lock+0x94/0x320
[  434.602607][T12054]  netlink_rcv_skb+0x241/0x4d0
[  434.607418][T12054]  ? genl_bind+0x360/0x360
[  434.611866][T12054]  ? netlink_ack+0x1180/0x1180
[  434.616682][T12054]  ? down_read+0x54/0x2e0
[  434.621039][T12054]  ? lc_show+0x1f0/0x1f0
[  434.625320][T12054]  ? down_read+0x1ac/0x2e0
[  434.629769][T12054]  genl_rcv+0x28/0x40
[  434.633794][T12054]  netlink_unicast+0x751/0x8d0
[  434.638620][T12054]  netlink_sendmsg+0x8d0/0xbf0
[  434.643427][T12054]  ? netlink_getsockopt+0x590/0x590
[  434.648669][T12054]  ? aa_sock_msg_perm+0x94/0x150
[  434.653648][T12054]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  434.658971][T12054]  ? security_socket_sendmsg+0x80/0xa0
[  434.664474][T12054]  ? netlink_getsockopt+0x590/0x590
[  434.669800][T12054]  ____sys_sendmsg+0x5ba/0x960
[  434.674610][T12054]  ? __asan_memset+0x22/0x40
[  434.679237][T12054]  ? __sys_sendmsg_sock+0x30/0x30
[  434.684284][T12054]  ? __import_iovec+0x5f2/0x850
[  434.689172][T12054]  ? import_iovec+0x73/0xa0
[  434.693711][T12054]  ___sys_sendmsg+0x2a6/0x360
[  434.698424][T12054]  ? __sys_sendmsg+0x2a0/0x2a0
[  434.703266][T12054]  __se_sys_sendmsg+0x1c2/0x2b0
[  434.708146][T12054]  ? __x64_sys_sendmsg+0x80/0x80
[  434.713129][T12054]  ? syscall_enter_from_user_mode+0x2e/0x80
[  434.719064][T12054]  do_syscall_64+0x55/0xa0
[  434.723543][T12054]  ? clear_bhb_loop+0x40/0x90
[  434.728263][T12054]  ? clear_bhb_loop+0x40/0x90
[  434.732973][T12054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.738908][T12054] RIP: 0033:0x7fe15219cdd9
[  434.743621][T12054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.763356][T12054] RSP: 002b:00007fe153009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.771817][T12054] RAX: ffffffffffffffda RBX: 00007fe152415fa0 RCX: 00007fe15219cdd9
[  434.779823][T12054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  434.787831][T12054] RBP: 00007fe152232d69 R08: 0000000000000000 R09: 0000000000000000
[  434.795828][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.803951][T12054] R13: 00007fe152416038 R14: 00007fe152415fa0 R15: 00007fff3d69c4f8
[  434.812006][T12054]  </TASK>
[  435.291056][T12064] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1677'.
[  435.543958][T12064] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  435.558087][T12064] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  435.621341][T12077] validate_nla: 1 callbacks suppressed
[  435.621359][T12077] netlink: 'syz.1.1680': attribute type 10 has an invalid length.
[  436.032596][T12077] team0: Device veth1_macvtap failed to register rx_handler
[  436.499143][T12112] netlink: 'syz.0.1689': attribute type 8 has an invalid length.
[  436.509571][T12112] netlink: 'syz.0.1689': attribute type 1 has an invalid length.
[  436.519990][T12112] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1689'.
[  436.959065][T12144] netlink: 'syz.2.1699': attribute type 21 has an invalid length.
[  437.097890][T12144] Ÿë
: port 1(ip6gretap0) entered blocking state
[  437.110588][T12144] Ÿë
: port 1(ip6gretap0) entered disabled state
[  437.124916][T12144] ip6gretap0: entered allmulticast mode
[  437.143271][T12144] ip6gretap0: entered promiscuous mode
[  437.174023][T12153] netlink: 'syz.0.1701': attribute type 10 has an invalid length.
[  437.749196][T12172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  437.811643][T12178] netlink: 'syz.0.1710': attribute type 21 has an invalid length.
[  437.822498][T12178] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.131366][T12184] syzkaller0: entered promiscuous mode
[  438.138650][T12184] syzkaller0: entered allmulticast mode
[  438.354302][T12192] netlink: 'syz.0.1715': attribute type 21 has an invalid length.
[  438.373809][T12192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1715'.
[  438.541695][T12203] netlink: 'syz.2.1719': attribute type 21 has an invalid length.
[  438.571137][T12203] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1719'.
[  438.864490][T12217] netlink: 'syz.1.1722': attribute type 21 has an invalid length.
[  438.883855][T12217] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1722'.
[  438.893410][T12217] netlink: 'syz.1.1722': attribute type 39 has an invalid length.
[  439.037788][T12224] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1723'.
[  439.136035][T12232] sock: sock_timestamping_bind_phc: sock not bind to device
[  439.203964][T12236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.499259][T12249] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1730'.
[  439.533444][T12240] syzkaller0: entered promiscuous mode
[  439.559240][T12240] syzkaller0: entered allmulticast mode
[  440.162103][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.168625][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  442.913252][T12268] validate_nla: 3 callbacks suppressed
[  442.913268][T12268] netlink: 'syz.3.1733': attribute type 7 has an invalid length.
[  443.177170][T12300] netlink: 'syz.1.1741': attribute type 10 has an invalid length.
[  443.194518][T12300] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1741'.
[  443.241190][T12300] veth0_macvtap: left promiscuous mode
[  443.578321][T12308] netlink: 'syz.3.1743': attribute type 21 has an invalid length.
[  443.586376][T12308] netlink: 'syz.3.1743': attribute type 1 has an invalid length.
[  443.594410][T12308] netlink: 'syz.3.1743': attribute type 2 has an invalid length.
[  443.602190][T12308] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.1743'.
[  443.997188][T12318] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1746'.
[  444.083917][T12318] netlink: 'syz.1.1746': attribute type 10 has an invalid length.
[  444.112817][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1746'.
[  444.937434][T12333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.973928][T12336] netlink: 'syz.3.1753': attribute type 21 has an invalid length.
[  444.983834][T12336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.027271][T12327] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1749'.
[  445.227454][T12347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1756'.
[  445.495594][ T6062] tipc: Subscription rejected, illegal request
[  445.851523][T12359] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1759'.
[  446.010427][T12364] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1759'.
[  446.054094][T12364] netlink: del zone limit has 8 unknown bytes
[  446.723028][T12374] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1765'.
[  447.169034][T12397] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1771'.
[  447.226344][T12397] netlink: 'syz.2.1771': attribute type 10 has an invalid length.
[  447.263631][T12397] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1771'.
[  447.698306][T12397] vlan0 (unregistering): left allmulticast mode
[  447.707752][T12397] vlan0 (unregistering): left promiscuous mode
[  447.724833][T12397] À: port 1(vlan0) entered disabled state
[  448.196638][T12403] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1770'.
[  448.253661][T12403] tc_dump_action: action bad kind
[  448.725259][T12423] netlink: 'syz.1.1776': attribute type 2 has an invalid length.
[  448.794136][T12423] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  449.062314][T12426] tap0: tun_chr_ioctl cmd 1074025677
[  449.081726][T12426] tap0: linktype set to 6
[  449.112294][T12423] netlink: 'syz.1.1776': attribute type 17 has an invalid length.
[  449.187634][T12423] netlink: 'syz.1.1776': attribute type 16 has an invalid length.
[  449.224107][T12423] __nla_validate_parse: 1 callbacks suppressed
[  449.224131][T12423] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1776'.
[  451.111251][T12453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.118950][T12453] IPv6: NLM_F_CREATE should be set when creating new route
[  451.127305][T12453] IPv6: NLM_F_CREATE should be set when creating new route
[  451.135055][T12453] IPv6: NLM_F_CREATE should be set when creating new route
[  451.331638][T12461] netlink: 'syz.3.1784': attribute type 6 has an invalid length.
[  451.360355][T12461] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1784'.
[  453.095649][T12467] netlink: 'syz.1.1790': attribute type 21 has an invalid length.
[  453.111153][T12467] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1790'.
[  453.132506][T12467] netlink: 'syz.1.1790': attribute type 4 has an invalid length.
[  453.449275][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.484903][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.504622][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.544603][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.590690][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.629300][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.650633][T12480] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1794'.
[  453.701100][T12485] netlink: 'syz.3.1796': attribute type 2 has an invalid length.
[  454.079859][T12491] netlink: 'syz.1.1797': attribute type 21 has an invalid length.
[  454.089004][T12491] netlink: 'syz.1.1797': attribute type 19 has an invalid length.
[  454.246272][T12501] netlink: 'syz.1.1798': attribute type 9 has an invalid length.
[  454.265456][T12501] __nla_validate_parse: 28 callbacks suppressed
[  454.265472][T12501] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1798'.
[  454.333376][T12503] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1798'.
[  454.409119][T12503] netlink: 'syz.1.1798': attribute type 9 has an invalid length.
[  454.427880][T12503] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1798'.
[  454.672794][T12511] netlink: 'syz.3.1801': attribute type 10 has an invalid length.
[  454.737273][T12511] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.773677][T12511] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.803885][T12511] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.833700][T12511] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  455.879059][T12548] pim6reg1: entered promiscuous mode
[  455.899310][T12548] pim6reg1: entered allmulticast mode
[  455.938347][   T51] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[  456.122858][T12564] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  456.158480][T12564] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1815'.
[  457.347632][T12587] netlink: 'syz.0.1821': attribute type 1 has an invalid length.
[  457.355992][T12587] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1821'.
[  457.374556][T12587] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1821'.
[  458.091040][T12607] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1826'.
[  458.119517][T12607] netlink: 'syz.0.1826': attribute type 29 has an invalid length.
[  458.137383][T12607] netlink: 'syz.0.1826': attribute type 29 has an invalid length.
[  458.160802][T12607] netlink: 'syz.0.1826': attribute type 29 has an invalid length.
[  458.459016][T12614] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  460.103221][T12654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1840'.
[  460.181898][T12659] validate_nla: 1 callbacks suppressed
[  460.181916][T12659] netlink: 'syz.3.1840': attribute type 21 has an invalid length.
[  460.277144][T12656] netlink: 'syz.3.1840': attribute type 21 has an invalid length.
[  461.010583][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'.
[  461.238346][T12684] netlink: 'syz.3.1847': attribute type 9 has an invalid length.
[  461.255060][T12684] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1847'.
[  461.281456][T12687] netlink: 'syz.0.1850': attribute type 10 has an invalid length.
[  461.392219][T12691] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  463.263310][T12731] syzkaller0: entered promiscuous mode
[  463.269061][T12731] syzkaller0: entered allmulticast mode
[  465.843110][T12746] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1864'.
[  466.537604][T12766] sctp: [Deprecated]: syz.2.1868 (pid 12766) Use of struct sctp_assoc_value in delayed_ack socket option.
[  466.537604][T12766] Use struct sctp_sack_info instead
[  466.844175][T12770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.769272][   T51] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  467.778088][   T51] Bluetooth: hci0: Invalid handle: 0xf800 > 0x0eff
[  469.288878][T12821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.057143][T12844] netlink: 'syz.2.1890': attribute type 29 has an invalid length.
[  471.159647][T12844] netlink: 'syz.2.1890': attribute type 29 has an invalid length.
[  471.248807][T12846] netlink: 'syz.2.1890': attribute type 29 has an invalid length.
[  471.257220][T12847] netlink: 'syz.2.1890': attribute type 29 has an invalid length.
[  471.376075][T12854] netlink: 'syz.1.1892': attribute type 1 has an invalid length.
[  471.405706][T12854] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1892'.
[  472.069940][T12872] netlink: 'syz.0.1896': attribute type 21 has an invalid length.
[  472.083718][T12872] netlink: 'syz.0.1896': attribute type 20 has an invalid length.
[  472.252506][T12876] netlink: 'syz.2.1898': attribute type 10 has an invalid length.
[  472.271318][T12876] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1898'.
[  472.293773][T12876] batadv_slave_1: entered promiscuous mode
[  472.407258][T12878] netlink: 'syz.1.1899': attribute type 1 has an invalid length.
[  472.986528][ T5775] Bluetooth: hci0: command 0x0406 tx timeout
[  473.031806][T12898] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1905'.
[  473.047552][T12898] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1905'.
[  473.060261][T12898] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  473.069537][T12898] CPU: 0 PID: 12898 Comm: syz.0.1905 Not tainted syzkaller #0
[  473.077073][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  473.087176][T12898] Call Trace:
[  473.090505][T12898]  <TASK>
[  473.093489][T12898]  dump_stack_lvl+0x18c/0x250
[  473.098239][T12898]  ? show_regs_print_info+0x20/0x20
[  473.103516][T12898]  ? load_image+0x420/0x420
[  473.108118][T12898]  sysfs_warn_dup+0x8e/0xa0
[  473.112699][T12898]  sysfs_do_create_link_sd+0xc0/0x110
[  473.118139][T12898]  device_add_class_symlinks+0x1cf/0x240
[  473.123830][T12898]  device_add+0x507/0xc20
[  473.128229][T12898]  wiphy_register+0x1dad/0x2ae0
[  473.133141][T12898]  ? cfg80211_event_work+0x40/0x40
[  473.138342][T12898]  ? minstrel_ht_alloc+0x88a/0x990
[  473.143511][T12898]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  473.149648][T12898]  ieee80211_register_hw+0x3464/0x4250
[  473.155171][T12898]  ? ieee80211_tasklet_handler+0x20/0x20
[  473.160850][T12898]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  473.166797][T12898]  ? __debug_object_init+0xec/0x450
[  473.172050][T12898]  ? __asan_memset+0x22/0x40
[  473.176753][T12898]  ? __hrtimer_init+0x186/0x270
[  473.181662][T12898]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  473.187455][T12898]  ? mac80211_hwsim_free+0x220/0x220
[  473.192793][T12898]  ? rcu_is_watching+0x15/0xb0
[  473.197615][T12898]  ? kstrndup+0xbd/0x140
[  473.201913][T12898]  hwsim_new_radio_nl+0xdc9/0x1a90
[  473.207072][T12898]  ? __nla_validate+0x50/0x50
[  473.211789][T12898]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  473.218166][T12898]  ? __nla_parse+0x40/0x50
[  473.222626][T12898]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  473.229003][T12898]  genl_family_rcv_msg_doit+0x211/0x310
[  473.234583][T12898]  ? end_current_label_crit_section+0x170/0x170
[  473.240877][T12898]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  473.246815][T12898]  ? bpf_lsm_capable+0x9/0x10
[  473.251538][T12898]  ? security_capable+0x89/0xb0
[  473.256440][T12898]  genl_rcv_msg+0x619/0x7a0
[  473.260979][T12898]  ? genl_bind+0x360/0x360
[  473.265429][T12898]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  473.271808][T12898]  netlink_rcv_skb+0x241/0x4d0
[  473.276622][T12898]  ? genl_bind+0x360/0x360
[  473.281112][T12898]  ? netlink_ack+0x1180/0x1180
[  473.285927][T12898]  ? __lock_acquire+0x7d40/0x7d40
[  473.290983][T12898]  ? net_generic+0x1e/0x240
[  473.295530][T12898]  ? down_read+0x1ac/0x2e0
[  473.299983][T12898]  genl_rcv+0x28/0x40
[  473.303996][T12898]  netlink_unicast+0x751/0x8d0
[  473.308807][T12898]  netlink_sendmsg+0x8d0/0xbf0
[  473.313624][T12898]  ? netlink_getsockopt+0x590/0x590
[  473.318862][T12898]  ? aa_sock_msg_perm+0x94/0x150
[  473.323840][T12898]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  473.329162][T12898]  ? security_socket_sendmsg+0x80/0xa0
[  473.334650][T12898]  ? netlink_getsockopt+0x590/0x590
[  473.339895][T12898]  ____sys_sendmsg+0x5ba/0x960
[  473.344704][T12898]  ? __asan_memset+0x22/0x40
[  473.349335][T12898]  ? __sys_sendmsg_sock+0x30/0x30
[  473.354399][T12898]  ? __import_iovec+0x5f2/0x850
[  473.359287][T12898]  ? import_iovec+0x73/0xa0
[  473.363824][T12898]  ___sys_sendmsg+0x2a6/0x360
[  473.368537][T12898]  ? __sys_sendmsg+0x2a0/0x2a0
[  473.373386][T12898]  __se_sys_sendmsg+0x1c2/0x2b0
[  473.378271][T12898]  ? __x64_sys_sendmsg+0x80/0x80
[  473.383251][T12898]  ? lockdep_hardirqs_on+0x98/0x150
[  473.388488][T12898]  do_syscall_64+0x55/0xa0
[  473.392948][T12898]  ? clear_bhb_loop+0x40/0x90
[  473.397685][T12898]  ? clear_bhb_loop+0x40/0x90
[  473.402423][T12898]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  473.408377][T12898] RIP: 0033:0x7fb15fb9cdd9
[  473.412839][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.432502][T12898] RSP: 002b:00007fb160a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  473.440988][T12898] RAX: ffffffffffffffda RBX: 00007fb15fe15fa0 RCX: 00007fb15fb9cdd9
[  473.449172][T12898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  473.457191][T12898] RBP: 00007fb15fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  473.465194][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  473.473197][T12898] R13: 00007fb15fe16038 R14: 00007fb15fe15fa0 R15: 00007ffc68700f48
[  473.481231][T12898]  </TASK>
[  473.820484][T12905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1908'.
[  473.879762][T12905] pimreg0: tun_chr_ioctl cmd 1074025681
[  473.944291][T12909] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1909'.
[  474.572695][T12935] sit0: entered promiscuous mode
[  474.600573][T12935] sit0: entered allmulticast mode
[  479.668291][T13017] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.1938'.
[  479.694952][T13017] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  480.388228][T13016] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1941'.
[  481.030175][T13055] can: request_module (can-proto-3) failed.
[  481.474277][T13074] netlink: 'syz.0.1957': attribute type 39 has an invalid length.
[  481.925387][T13085] netlink: 'syz.2.1958': attribute type 10 has an invalid length.
[  481.960980][T13085] bridge0: port 3(veth1_to_hsr) entered disabled state
[  481.968443][T13085] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.975979][T13085] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.224500][T13093] netlink: 'syz.1.1961': attribute type 21 has an invalid length.
[  482.232712][T13093] netlink: 'syz.1.1961': attribute type 1 has an invalid length.
[  482.241420][T13093] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1961'.
[  482.256356][T13093] netlink: 'syz.1.1961': attribute type 29 has an invalid length.
[  482.283975][T13093] netlink: 'syz.1.1961': attribute type 29 has an invalid length.
[  482.546764][T13099] can: request_module (can-proto-3) failed.
[  482.641166][T13107] netlink: 'syz.1.1965': attribute type 1 has an invalid length.
[  482.693857][T13107] netlink: 'syz.1.1965': attribute type 3 has an invalid length.
[  482.702250][T13107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1965'.
[  482.777875][T13109] netlink: 'syz.3.1966': attribute type 6 has an invalid length.
[  482.786569][T13109] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1966'.
[  482.805413][T13107] netlink: 'syz.1.1965': attribute type 10 has an invalid length.
[  482.823809][T13107] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1965'.
[  483.740550][T13129] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1972'.
[  484.828861][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'.
[  485.797723][   T51] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[  485.800311][T13166] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.1983'.
[  485.825715][T13166] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  486.616132][T13184] validate_nla: 3 callbacks suppressed
[  486.616154][T13184] netlink: 'syz.2.1987': attribute type 2 has an invalid length.
[  486.694970][T13184] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1987'.
[  487.373379][T13218] netlink: 'syz.0.1995': attribute type 3 has an invalid length.
[  487.397774][T13215] veth0_vlan: left promiscuous mode
[  487.409218][T13215] veth0_vlan: entered promiscuous mode
[  487.431874][T13218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1995'.
[  487.759869][T13228] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.1997'.
[  487.788134][T13228] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  489.053108][T13245] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2001'.
[  489.469623][T13263] netlink: 'syz.2.2009': attribute type 11 has an invalid length.
[  489.483756][T13263] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2009'.
[  489.531926][T13264] netlink: 'syz.1.2011': attribute type 10 has an invalid length.
[  489.543977][T13264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2011'.
[  489.578937][T13264] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  489.694001][T13270] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2012'.
[  491.008173][T13297] netlink: 'syz.0.2020': attribute type 29 has an invalid length.
[  491.019879][T13297] netlink: 'syz.0.2020': attribute type 29 has an invalid length.
[  491.096217][T13300] netlink: 'syz.0.2020': attribute type 29 has an invalid length.
[  491.129099][T13297] netlink: 'syz.0.2020': attribute type 9 has an invalid length.
[  491.148059][T13297] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2020'.
[  491.188080][T13300] netlink: 'syz.0.2020': attribute type 2 has an invalid length.
[  491.338910][T13302] netlink: 'syz.0.2020': attribute type 9 has an invalid length.
[  491.375576][T13302] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2020'.
[  492.892562][T13326] netlink: 'syz.1.2029': attribute type 10 has an invalid length.
[  492.901221][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2029'.
[  493.061786][T13334] netlink: 'syz.0.2030': attribute type 9 has an invalid length.
[  493.107657][T13334] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2030'.
[  493.181248][T13337] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2031'.
[  493.273476][T13334] netlink: 'syz.0.2030': attribute type 9 has an invalid length.
[  493.290943][T13334] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2030'.
[  493.427437][T13346] netlink: 'syz.1.2034': attribute type 10 has an invalid length.
[  493.559967][T13346] team0: Port device geneve1 added
[  493.613778][T13351] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2035'.
[  493.764737][T13351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.503712][T13362] netlink: 'syz.0.2037': attribute type 10 has an invalid length.
[  494.673304][T13371] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2040'.
[  494.696640][T13371] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2040'.
[  494.716173][T13371] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2040'.
[  494.865469][T13376] netlink: 'syz.1.2041': attribute type 29 has an invalid length.
[  494.943776][T13376] netlink: 'syz.1.2041': attribute type 29 has an invalid length.
[  495.401241][T13394] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  495.555750][T13396] netlink: 'syz.0.2047': attribute type 21 has an invalid length.
[  495.563710][T13396] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[  495.783823][T13403] netlink: 'syz.2.2050': attribute type 17 has an invalid length.
[  496.698815][T13437] __nla_validate_parse: 4 callbacks suppressed
[  496.698834][T13437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2058'.
[  496.973881][T13445] syzkaller0: entered promiscuous mode
[  496.987912][T13445] syzkaller0: entered allmulticast mode
[  499.356609][T13478] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2066'.
[  499.830684][T13485] validate_nla: 5 callbacks suppressed
[  499.830725][T13485] netlink: 'syz.3.2069': attribute type 29 has an invalid length.
[  499.896565][T13485] netlink: 'syz.3.2069': attribute type 29 has an invalid length.
[  499.919985][T13480] ip6_tunnel: non-ECT from fefd:fff5:0000:0200:875a:6596:9ff5:7b00 with DS=0x31
[  499.936264][T13486] netlink: 'syz.3.2069': attribute type 29 has an invalid length.
[  499.973454][T13480] netlink: 'syz.1.2067': attribute type 27 has an invalid length.
[  499.985748][T13480] netlink: 'syz.1.2067': attribute type 4 has an invalid length.
[  499.997925][T13480] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2067'.
[  500.085948][T13485] netlink: 'syz.3.2069': attribute type 29 has an invalid length.
[  500.118867][T13486] netlink: 'syz.3.2069': attribute type 29 has an invalid length.
[  500.769842][T13506] netlink: 'syz.0.2076': attribute type 21 has an invalid length.
[  500.777918][T13506] netlink: 14532 bytes leftover after parsing attributes in process `syz.0.2076'.
[  500.819335][T13506] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2076'.
[  500.829831][T13506] openvswitch: netlink: Key type 29 is not supported
[  500.871507][T13508] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2077'.
[  501.017992][T13508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  501.033076][T13508] bond0 (unregistering): Released all slaves
[  501.713312][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.720042][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.047915][T13516] syzkaller0: entered allmulticast mode
[  502.489201][T13532] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2084'.
[  502.498361][T13532] netlink: get zone limit has 4 unknown bytes
[  502.572498][T13534] netlink: 'syz.0.2085': attribute type 29 has an invalid length.
[  502.581065][T13534] netlink: 'syz.0.2085': attribute type 29 has an invalid length.
[  502.594526][T13530] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2081'.
[  502.976550][T13548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2088'.
[  503.056240][T13522] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2081'.
[  503.145823][T13548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2088'.
[  503.199910][T13555] mac80211_hwsim hwsim25 .3ãc¤±: renamed from wlan1 (while UP)
[  503.369605][T13522] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  503.737492][T13569] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2094'.
[  504.156119][T13590] syz.1.2098: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  504.171507][T13590] CPU: 1 PID: 13590 Comm: syz.1.2098 Not tainted syzkaller #0
[  504.179059][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  504.189193][T13590] Call Trace:
[  504.192537][T13590]  <TASK>
[  504.195548][T13590]  dump_stack_lvl+0x18c/0x250
[  504.200317][T13590]  ? show_regs_print_info+0x20/0x20
[  504.205604][T13590]  ? load_image+0x420/0x420
[  504.210225][T13590]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  504.216720][T13590]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  504.223297][T13590]  warn_alloc+0x246/0x340
[  504.227712][T13590]  ? stack_trace_save+0xaa/0x100
[  504.232707][T13590]  ? zone_watermark_ok_safe+0x230/0x230
[  504.238321][T13590]  ? kasan_set_track+0x5f/0x70
[  504.243158][T13590]  ? kasan_set_track+0x4e/0x70
[  504.247974][T13590]  ? __kasan_kmalloc+0x8f/0xa0
[  504.252787][T13590]  ? xsk_init_queue+0xad/0x100
[  504.257636][T13590]  ? xsk_setsockopt+0x4e5/0x760
[  504.262547][T13590]  ? do_sock_setsockopt+0x175/0x1a0
[  504.267804][T13590]  ? __x64_sys_setsockopt+0x182/0x200
[  504.273244][T13590]  __vmalloc_node_range+0x126/0x1330
[  504.278652][T13590]  ? free_vm_area+0x50/0x50
[  504.283257][T13590]  vmalloc_user+0x74/0x80
[  504.287670][T13590]  ? xskq_create+0xbf/0x170
[  504.292243][T13590]  xskq_create+0xbf/0x170
[  504.296641][T13590]  xsk_init_queue+0xad/0x100
[  504.301316][T13590]  xsk_setsockopt+0x4e5/0x760
[  504.306057][T13590]  ? xsk_poll+0x680/0x680
[  504.310458][T13590]  ? __fget_files+0x28/0x4b0
[  504.315127][T13590]  ? __fget_files+0x28/0x4b0
[  504.319786][T13590]  ? aa_sock_opt_perm+0x74/0x100
[  504.324798][T13590]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  504.330428][T13590]  ? security_socket_setsockopt+0x7e/0xa0
[  504.336200][T13590]  ? xsk_poll+0x680/0x680
[  504.340612][T13590]  do_sock_setsockopt+0x175/0x1a0
[  504.345716][T13590]  ? __fdget+0x180/0x210
[  504.350031][T13590]  __x64_sys_setsockopt+0x182/0x200
[  504.355300][T13590]  do_syscall_64+0x55/0xa0
[  504.359776][T13590]  ? clear_bhb_loop+0x40/0x90
[  504.364514][T13590]  ? clear_bhb_loop+0x40/0x90
[  504.369251][T13590]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  504.375214][T13590] RIP: 0033:0x7f14c819cdd9
[  504.379677][T13590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.399339][T13590] RSP: 002b:00007f14c90ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  504.407917][T13590] RAX: ffffffffffffffda RBX: 00007f14c8415fa0 RCX: 00007f14c819cdd9
[  504.415942][T13590] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a
[  504.423983][T13590] RBP: 00007f14c8232d69 R08: 0000000000000004 R09: 0000000000000000
[  504.432010][T13590] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  504.440066][T13590] R13: 00007f14c8416038 R14: 00007f14c8415fa0 R15: 00007ffc04481bb8
[  504.448155][T13590]  </TASK>
[  504.506992][T13590] Mem-Info:
[  504.510207][T13590] active_anon:16076 inactive_anon:0 isolated_anon:0
[  504.510207][T13590]  active_file:16933 inactive_file:40093 isolated_file:0
[  504.510207][T13590]  unevictable:768 dirty:139 writeback:0
[  504.510207][T13590]  slab_reclaimable:10679 slab_unreclaimable:93671
[  504.510207][T13590]  mapped:24226 shmem:1361 pagetables:556
[  504.510207][T13590]  sec_pagetables:0 bounce:0
[  504.510207][T13590]  kernel_misc_reclaimable:0
[  504.510207][T13590]  free:1330411 free_pcp:10557 free_cma:0
[  504.603148][T13590] Node 0 active_anon:64304kB inactive_anon:0kB active_file:67732kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96904kB dirty:556kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no
[  504.676907][T13590] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  504.763621][T13590] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.852863][T13590] lowmem_reserve[]: 0 2521 2522 2522 2522
[  504.873121][T13590] Node 0 DMA32 free:1409660kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:64268kB inactive_anon:0kB active_file:67732kB inactive_file:159348kB unevictable:1536kB writepending:556kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:25168kB local_pcp:19756kB free_cma:0kB
[  504.905498][T13590] lowmem_reserve[]: 0 0 0 0 0
[  504.911632][T13590] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  504.979806][T13590] lowmem_reserve[]: 0 0 0 0 0
[  504.990274][T13590] Node 1 Normal free:3896176kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17732kB local_pcp:9376kB free_cma:0kB
[  505.037510][T13605] validate_nla: 6 callbacks suppressed
[  505.037526][T13605] netlink: 'syz.2.2102': attribute type 4 has an invalid length.
[  505.074275][T13590] lowmem_reserve[]: 0 0 0 0 0
[  505.079186][T13590] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  505.116156][T13590] Node 0 DMA32: 465*4kB (UM) 251*8kB (UME) 150*16kB (UME) 165*32kB (UME) 1000*64kB (UME) 703*128kB (UME) 233*256kB (UM) 109*512kB (UM) 36*1024kB (UME) 15*2048kB (UM) 259*4096kB (UM) = 1409436kB
[  505.137187][T13590] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  505.153600][T13590] Node 1 Normal: 248*4kB (UME) 64*8kB (UME) 41*16kB (UME) 156*32kB (UME) 46*64kB (UME) 8*128kB (UME) 2*256kB (ME) 1*512kB (U) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3896176kB
[  505.198518][T13590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  505.225827][T13590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  505.235731][T13590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  505.246862][T13590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  505.256605][T13590] 58387 total pagecache pages
[  505.261427][T13590] 0 pages in swap cache
[  505.270144][T13590] Free swap  = 124996kB
[  505.274802][T13590] Total swap = 124996kB
[  505.279004][T13590] 2097051 pages RAM
[  505.282948][T13590] 0 pages HighMem/MovableOnly
[  505.290822][T13590] 416927 pages reserved
[  505.295406][T13590] 0 pages cma reserved
[  505.302640][T13609] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2104'.
[  505.849149][T13632] netlink: 'syz.1.2110': attribute type 29 has an invalid length.
[  505.865665][T13632] netlink: 'syz.1.2110': attribute type 29 has an invalid length.
[  507.063638][T13639] netlink: 'syz.1.2110': attribute type 29 has an invalid length.
[  507.541605][T13672] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2119'.
[  507.946407][T13669] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2118'.
[  507.965641][T13669] bridge_slave_1: default FDB implementation only supports local addresses
[  508.323978][T13671] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2118'.
[  508.348240][T13671] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  508.732015][T13697] netlink: 'syz.2.2125': attribute type 39 has an invalid length.
[  511.587797][T13704] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2135'.
[  511.597827][T13704] bridge_slave_1: default FDB implementation only supports local addresses
[  511.837934][T13704] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2135'.
[  511.880873][T13704] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  511.898841][T13704] CPU: 0 PID: 13704 Comm: syz.0.2135 Not tainted syzkaller #0
[  511.906389][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  511.916591][T13704] Call Trace:
[  511.919930][T13704]  <TASK>
[  511.922912][T13704]  dump_stack_lvl+0x18c/0x250
[  511.927672][T13704]  ? show_regs_print_info+0x20/0x20
[  511.932940][T13704]  ? load_image+0x420/0x420
[  511.937562][T13704]  sysfs_warn_dup+0x8e/0xa0
[  511.942136][T13704]  sysfs_do_create_link_sd+0xc0/0x110
[  511.947594][T13704]  device_add_class_symlinks+0x1cf/0x240
[  511.953293][T13704]  device_add+0x507/0xc20
[  511.957705][T13704]  wiphy_register+0x1dad/0x2ae0
[  511.962671][T13704]  ? cfg80211_event_work+0x40/0x40
[  511.967839][T13704]  ? minstrel_ht_alloc+0x88a/0x990
[  511.973029][T13704]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  511.979168][T13704]  ieee80211_register_hw+0x3464/0x4250
[  511.984724][T13704]  ? ieee80211_tasklet_handler+0x20/0x20
[  511.990393][T13704]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  511.996336][T13704]  ? __debug_object_init+0xec/0x450
[  512.001602][T13704]  ? __asan_memset+0x22/0x40
[  512.006279][T13704]  ? __hrtimer_init+0x186/0x270
[  512.011193][T13704]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  512.016990][T13704]  ? mac80211_hwsim_free+0x220/0x220
[  512.022302][T13704]  ? rcu_is_watching+0x15/0xb0
[  512.027110][T13704]  ? kstrndup+0xbd/0x140
[  512.031419][T13704]  hwsim_new_radio_nl+0xdc9/0x1a90
[  512.036586][T13704]  ? __nla_validate+0x50/0x50
[  512.041335][T13704]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  512.047753][T13704]  ? __nla_parse+0x40/0x50
[  512.052253][T13704]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  512.058627][T13704]  genl_family_rcv_msg_doit+0x211/0x310
[  512.064217][T13704]  ? end_current_label_crit_section+0x170/0x170
[  512.070523][T13704]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  512.076489][T13704]  ? bpf_lsm_capable+0x9/0x10
[  512.081222][T13704]  ? security_capable+0x89/0xb0
[  512.086145][T13704]  genl_rcv_msg+0x619/0x7a0
[  512.090713][T13704]  ? genl_bind+0x360/0x360
[  512.095175][T13704]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  512.101554][T13704]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  512.108297][T13704]  netlink_rcv_skb+0x241/0x4d0
[  512.113104][T13704]  ? genl_bind+0x360/0x360
[  512.117549][T13704]  ? netlink_ack+0x1180/0x1180
[  512.122370][T13704]  ? __lock_acquire+0x7d40/0x7d40
[  512.127432][T13704]  ? net_generic+0x1e/0x240
[  512.131989][T13704]  ? down_read+0x1ac/0x2e0
[  512.136447][T13704]  genl_rcv+0x28/0x40
[  512.140492][T13704]  netlink_unicast+0x751/0x8d0
[  512.145328][T13704]  netlink_sendmsg+0x8d0/0xbf0
[  512.150141][T13704]  ? perf_trace_lock+0x304/0x3b0
[  512.155135][T13704]  ? netlink_getsockopt+0x590/0x590
[  512.160388][T13704]  ? aa_sock_msg_perm+0x94/0x150
[  512.165379][T13704]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  512.170712][T13704]  ? security_socket_sendmsg+0x80/0xa0
[  512.176210][T13704]  ? netlink_getsockopt+0x590/0x590
[  512.181466][T13704]  ____sys_sendmsg+0x5ba/0x960
[  512.186310][T13704]  ? __asan_memset+0x22/0x40
[  512.190975][T13704]  ? __sys_sendmsg_sock+0x30/0x30
[  512.196051][T13704]  ? __import_iovec+0x5f2/0x850
[  512.200963][T13704]  ? import_iovec+0x73/0xa0
[  512.205529][T13704]  ___sys_sendmsg+0x2a6/0x360
[  512.210270][T13704]  ? __sys_sendmsg+0x2a0/0x2a0
[  512.215196][T13704]  __se_sys_sendmsg+0x1c2/0x2b0
[  512.220126][T13704]  ? __x64_sys_sendmsg+0x80/0x80
[  512.225149][T13704]  ? lockdep_hardirqs_on+0x98/0x150
[  512.230421][T13704]  do_syscall_64+0x55/0xa0
[  512.234888][T13704]  ? clear_bhb_loop+0x40/0x90
[  512.239609][T13704]  ? clear_bhb_loop+0x40/0x90
[  512.244358][T13704]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.250301][T13704] RIP: 0033:0x7fb15fb9cdd9
[  512.254766][T13704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.274414][T13704] RSP: 002b:00007fb160a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  512.282902][T13704] RAX: ffffffffffffffda RBX: 00007fb15fe15fa0 RCX: 00007fb15fb9cdd9
[  512.290942][T13704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  512.298949][T13704] RBP: 00007fb15fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  512.306958][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  512.314974][T13704] R13: 00007fb15fe16038 R14: 00007fb15fe15fa0 R15: 00007ffc68700f48
[  512.323015][T13704]  </TASK>
[  512.671316][   T51] Bluetooth: hci3: ISO packet for unknown connection handle 5
[  512.832991][T13739] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2139'.
[  512.874658][T13739] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8
[  513.306270][T13750] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2142'.
[  513.796043][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2148'.
[  513.818325][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2148'.
[  513.828175][T13779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2148'.
[  514.135592][T13789] netlink: 'syz.2.2151': attribute type 21 has an invalid length.
[  514.198027][T13789] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2151'.
[  514.346048][    C0] 
[  514.346057][    C0] ================================
[  514.346064][    C0] WARNING: inconsistent lock state
[  514.346074][    C0] syzkaller #0 Not tainted
[  514.346084][    C0] --------------------------------
[  514.346089][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  514.346097][    C0] syz.0.2153/13792 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  514.346118][    C0] ffff88807b8bb238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0
[  514.346176][    C0] {INITIAL USE} state was registered at:
[  514.346187][    C0]   lock_acquire+0x19e/0x420
[  514.346209][    C0]   _raw_spin_lock_irqsave+0xb4/0x100
[  514.346232][    C0]   trie_update_elem+0xcd/0xea0
[  514.346256][    C0]   bpf_map_update_value+0x660/0x720
[  514.346272][    C0]   map_update_elem+0x57b/0x700
[  514.346291][    C0]   __sys_bpf+0x6b5/0x890
[  514.346308][    C0]   __x64_sys_bpf+0x7c/0x90
[  514.346324][    C0]   do_syscall_64+0x55/0xa0
[  514.346339][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.346361][    C0] irq event stamp: 1900
[  514.346368][    C0] hardirqs last  enabled at (1899): [<ffffffff8a865185>] syscall_enter_from_user_mode+0x25/0x80
[  514.346398][    C0] hardirqs last disabled at (1900): [<ffffffff8a861903>] exc_debug+0x73/0x140
[  514.346451][    C0] softirqs last  enabled at (1774): [<ffffffff81527243>] __irq_exit_rcu+0xd3/0x190
[  514.346474][    C0] softirqs last disabled at (1701): [<ffffffff81527243>] __irq_exit_rcu+0xd3/0x190
[  514.346498][    C0] 
[  514.346498][    C0] other info that might help us debug this:
[  514.346503][    C0]  Possible unsafe locking scenario:
[  514.346503][    C0] 
[  514.346508][    C0]        CPU0
[  514.346512][    C0]        ----
[  514.346515][    C0]   lock(&trie->lock);
[  514.346527][    C0]   <Interrupt>
[  514.346530][    C0]     lock(&trie->lock);
[  514.346541][    C0] 
[  514.346541][    C0]  *** DEADLOCK ***
[  514.346541][    C0] 
[  514.346544][    C0] no locks held by syz.0.2153/13792.
[  514.346553][    C0] 
[  514.346553][    C0] stack backtrace:
[  514.346558][    C0] CPU: 0 PID: 13792 Comm: syz.0.2153 Not tainted syzkaller #0
[  514.346576][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  514.346586][    C0] Call Trace:
[  514.346594][    C0]  <#DB>
[  514.346602][    C0]  dump_stack_lvl+0x18c/0x250
[  514.346647][    C0]  ? show_regs_print_info+0x20/0x20
[  514.346687][    C0]  ? print_usage_bug+0x475/0x690
[  514.346712][    C0]  ? verify_lock_unused+0x18/0x140
[  514.346741][    C0]  lock_acquire+0x2c2/0x420
[  514.346770][    C0]  ? trie_delete_elem+0x96/0x6a0
[  514.346800][    C0]  ? read_lock_is_recursive+0x20/0x20
[  514.346825][    C0]  ? get_user_pages_fast_only+0xa0/0xa0
[  514.346855][    C0]  ? put_callchain_entry+0xb0/0xb0
[  514.346885][    C0]  _raw_spin_lock_irqsave+0xb4/0x100
[  514.346909][    C0]  ? trie_delete_elem+0x96/0x6a0
[  514.346936][    C0]  ? _raw_spin_lock+0x40/0x40
[  514.346961][    C0]  ? perf_prepare_sample+0x156d/0x1df0
[  514.346997][    C0]  trie_delete_elem+0x96/0x6a0
[  514.347024][    C0]  ? __cant_sleep+0x220/0x220
[  514.347053][    C0]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  514.347093][    C0]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  514.347116][    C0]  bpf_overflow_handler+0x1fc/0x510
[  514.347151][    C0]  ? bpf_overflow_handler+0xde/0x510
[  514.347181][    C0]  ? tp_perf_event_destroy+0x20/0x20
[  514.347206][    C0]  ? lock_release+0xb5/0x8c0
[  514.347237][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  514.347265][    C0]  __perf_event_overflow+0x447/0x630
[  514.347298][    C0]  perf_swevent_event+0x319/0x570
[  514.347325][    C0]  ? perf_tp_event+0x1520/0x1520
[  514.347346][    C0]  ? trace_call_bpf+0x5e9/0x6c0
[  514.347376][    C0]  ? trace_call_bpf+0xc3/0x6c0
[  514.347403][    C0]  ? perf_trace_lock+0xfc/0x3b0
[  514.347434][    C0]  perf_bp_event+0x319/0x430
[  514.347466][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  514.347531][    C0]  ? lock_acquire+0x2c2/0x420
[  514.347565][    C0]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  514.347598][    C0]  notifier_call_chain+0x197/0x380
[  514.347629][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  514.347657][    C0]  atomic_notifier_call_chain+0xda/0x180
[  514.347686][    C0]  notify_die+0x145/0x1a0
[  514.347716][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  514.347753][    C0]  ? rcu_is_watching+0x15/0xb0
[  514.347785][    C0]  notify_debug+0x2e/0x50
[  514.347804][    C0]  exc_debug+0xde/0x140
[  514.347829][    C0]  asm_exc_debug+0x1e/0x40
[  514.347853][    C0] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  514.347874][    C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  514.347891][    C0] RSP: 0018:ffffc9000358fd50 EFLAGS: 00050202
[  514.347907][    C0] RAX: ffffffff842a2001 RBX: 0000000000000048 RCX: 0000000000000007
[  514.347920][    C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc9000358fe01
[  514.347933][    C0] RBP: ffffc9000358fee8 R08: ffffc9000358fe07 R09: 1ffff920006b1fc0
[  514.347948][    C0] R10: dffffc0000000000 R11: fffff520006b1fc1 R12: 0000200000000308
[  514.347962][    C0] R13: 0000000000000048 R14: ffffc9000358fdc0 R15: 00002000000002c0
[  514.347993][    C0]  ? rcuref_put_slowpath+0xe1/0x150
[  514.348029][    C0]  </#DB>
[  514.348034][    C0]  <TASK>
[  514.348040][    C0]  _copy_from_user+0x8b/0xe0
[  514.348069][    C0]  __sys_bpf+0x23e/0x890
[  514.348094][    C0]  ? bpf_link_show_fdinfo+0x390/0x390
[  514.348137][    C0]  ? lock_chain_count+0x20/0x20
[  514.348171][    C0]  __x64_sys_bpf+0x7c/0x90
[  514.348194][    C0]  do_syscall_64+0x55/0xa0
[  514.348210][    C0]  ? clear_bhb_loop+0x40/0x90
[  514.348234][    C0]  ? clear_bhb_loop+0x40/0x90
[  514.348261][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.348285][    C0] RIP: 0033:0x7fb15fb9cdd9
[  514.348301][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.348317][    C0] RSP: 002b:00007fb160a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  514.348337][    C0] RAX: ffffffffffffffda RBX: 00007fb15fe15fa0 RCX: 00007fb15fb9cdd9
[  514.348350][    C0] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 0000000000000000
[  514.348363][    C0] RBP: 00007fb15fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  514.348375][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.348386][    C0] R13: 00007fb15fe16038 R14: 00007fb15fe15fa0 R15: 00007ffc68700f48
[  514.348421][    C0]  </TASK>