last executing test programs:

43.4630683s ago: executing program 2 (id=2817):
r0 = socket$kcm(0x1e, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
close(r3)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x2, 0x4, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x301002, 0x0)
close(r4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x3, 0x84)

42.879972904s ago: executing program 2 (id=2818):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socket$kcm(0x1e, 0x5, 0x0) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x8000009, 0x11, &(0x7f0000000040)=""/17, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

42.326213618s ago: executing program 2 (id=2822):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000240)={r6})
r7 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)="5c0000007a006bcd9e3fe3dc6e081700070010131310db586ab96e23f468a9b603001d489868aa43bf33b823f924d78828a0043d4e82949a3651f6239787ed0800000057249063bf2f68c3664402682fb6b1c6f16e3f5f06d1dba91f", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dvmrp0\x00', @broadcast})
r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x1)
syz_clone(0xc800d00, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1)

41.514210918s ago: executing program 2 (id=2824):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33) (async)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbcc1ae000000000000005e0c0000000000000e0013001400000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffca7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) (async)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8a71, 0xc21}, 0x108a04, 0xffffffff, 0x0, 0x0, 0x7, 0x3, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)

40.389024776s ago: executing program 2 (id=2830):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa010, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x6d8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x80000000001, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'netdevsim0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x2a002, 0x0)
close(r7)
recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/182, 0xb6}], 0x1}, 0x40) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) (async)
write$cgroup_int(r3, &(0x7f0000000040)=0x2000000000009237, 0x12)

38.949941371s ago: executing program 2 (id=2834):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f70dd3a7"], 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$sock(r2, 0x0, 0x20000810)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="63204dc86776bb8d3cdec5c9c1be2a3a0c2072776d00"], 0xa)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)

23.801172184s ago: executing program 32 (id=2834):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f70dd3a7"], 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$sock(r2, 0x0, 0x20000810)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="63204dc86776bb8d3cdec5c9c1be2a3a0c2072776d00"], 0xa)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)

6.268798005s ago: executing program 3 (id=2981):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="00e097d863064c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="00e097d863064c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0xc0045878, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096", 0xbe}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) (async)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096", 0xbe}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
r9 = perf_event_open(0x0, 0x0, 0xb, r1, 0x0)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x2, 0x7, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x2, 0x7, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.781895747s ago: executing program 1 (id=2984):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x20})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0xfff, 0x8001, 0xf8, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x1, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x27, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xbd}, @call={0x85, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0xd, 0xade6, 0x6d}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[r2], 0x0, 0x10, 0xfffffff7}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x1b, &(0x7f0000001440)=@raw=[@alu={0x4, 0x0, 0x9, 0x4, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000001540)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x3, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001600)=[r0, r0, 0x1, r2], &(0x7f0000001640)=[{0x1, 0x2, 0x7, 0xb}, {0x4, 0x3, 0x8, 0xa}, {0x2, 0x3, 0xb, 0x2}, {0x4, 0x5, 0x0, 0x6}, {0x4, 0x4, 0xf, 0x1}, {0x4, 0x2, 0x10, 0x3}, {0x1, 0x4, 0x4}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0x8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001800)={r1, 0x58, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x3, 0x5, 0x357, 0x1, r0, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xe}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={r3, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001900)=[0x0, 0x0], &(0x7f0000001940)=[0x0], <r8=>0x0, 0x51, &(0x7f0000001980)=[{}], 0x8, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001bc0), 0x8)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', r7, r9, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c80)={@map=r2, r9, 0x28, 0x8, 0x0, @void, @value=r3}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002dc0)={r6, &(0x7f0000001cc0)="b3ba0f4cb646c1d29b05e0ee78fe2a3fb2bfaf09bf1367e64aca8796a4b8c9eca2e6226d0b0b0da2736500aa81ac12c4468a2cb6543c5e6c3de0fa9d5a0b44d1a94d1693ca891cd4b081a27371b5f8246f5a4a99871943e4d252fee94f5624e0866c30ecaa925942863027429b7cd291b174a90063feeed90405cad7f40cb9aa742358437c40793f264dcdc5339bae22c97696a4667189da2b8f026e0e1a5e0d32844a6f5d98e108a7fc3e40dfa6b552a29b67f59d6605bd07c09da183208c65041a40437c3a36fb4c419494249e6dfb052afad2a713e64f49af470e82f7c5d4c68916ad66da0e0f0d3e31f09c716a407c90b54d8afb", &(0x7f0000001dc0)=""/4096}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002e00)=@base={0x11, 0x0, 0x8, 0xff, 0x10, 0x1, 0x70, '\x00', r5, r9, 0x3, 0x5, 0x5}, 0x50)
ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x5)
r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002ec0)=@o_path={&(0x7f0000002e80)='./file0\x00', 0x0, 0x4010, r4}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r12)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x608, '\x00', r5, r9, 0x3, 0x5, 0x1}, 0x50)
close(r10)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002f80)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x3, '\x00', r7, r9, 0x3, 0x1, 0x4}, 0x50)
write$cgroup_pressure(r9, &(0x7f0000003000)={'some', 0x20, 0x3, 0x20, 0x6}, 0x2f)
sendmsg$unix(r9, &(0x7f0000003540)={&(0x7f0000003040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003480)=[{&(0x7f00000030c0)="f400d7170c8118070f", 0x9}, {&(0x7f0000003100)="4af86ebeb49b8809b632648e22a109592914fbed34851ac37fa107c39dc2c2e6426f6e34b2118d0bdace386503abcf965ea751ab2a1f384346f6d298c34dacf269e8f126fae6df76027254d074c862f552c5fa8a388e", 0x56}, {&(0x7f0000003180)="0fbe6b96f63ea9b181cb0310e8a73933a23e9f18e756009198dba0d00c829716d190240e0b75c6ca2840396083a642ac6b73839bebdd5ec3bcfb1b62791d23d89eecc467f53688cd87461be96859cf3d888baa30afa840e54f622128adb1113e9cdc59e86540e9f40acef29dd0dbac7517af62ca2e98e951", 0x78}, {&(0x7f0000003200)="c296a9266fbc618b2c6825a8ffaf93e58da8a92f64b4eba4809fcdb193788c00aaa7617edcb269313a5a2820b543de8b7a5822af8db3971d56c7042b6483618d4007d01f08bcfee29fa75919704a3fce7417e2c989d96703e1e83a0b8dd3a652f47ae0b770dcbb10e8088d179fc4e287969e4497ee42facd55a532a4b7a6f07aeabd12e5233c58976c", 0x89}, {&(0x7f00000032c0)="53e6ee3ad252c022aa71226458ccb80ba4757ee46cac672bd8118ca58addf4ff68ec6cd5f88de6477d0402848e7b44367555a6548825116e9619e04e0c8d39d88159e9d00725ced39fc7f46ac4eb59ea8e9dfd80a059256568762fea2705b13ead77050f968d3f3832051306c607342be94fc59c463de1df2a5b4c", 0x7b}, {&(0x7f0000003340)="31b743e9886e41e15407d0b7ea1fc668f4195af5fa8e4357bb37e867d0b4fe78d4", 0x21}, {&(0x7f0000003380)="a874ddf45ce7add0c0c162151002fe0b6f4425a93d83116483a896a19217fa49972344764fadada29f99ee5e4f723a5fa71b", 0x32}, {&(0x7f00000033c0)="fa889beb73c0d1cfb73522dddb61f4f56e91e09dbb5052593ae63eced7886eb65118064a0ad6b4fb7d9d2564a51572c6c91888cb7b3976ea3b904ed322c0ed153fc3b134c0261ab2fa7b12a931f6fab742fa10778f505a7453a6b99896f431d02d3d509dc5d23a6dad1f667ca03a679b14e1ebe954176e828c9e7ce3215f9e5b46e25d338b6103950b6c59a00e6848925808a71547d27e0642d78817d61b18245509c22921123ccdff5329882620", 0xae}], 0x8, &(0x7f0000003500)=[@rights={{0x18, 0x1, 0x1, [r2, r10]}}, @rights={{0x18, 0x1, 0x1, [r6, r13]}}], 0x30}, 0x24040811)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003600)={{r2}, &(0x7f0000003580), &(0x7f00000035c0)='%+9llu \x00'}, 0x20)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003640)=r8, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003780)={r14, 0x20, &(0x7f0000003740)={&(0x7f0000003680)=""/98, 0x62, <r15=>0x0, &(0x7f0000003700)=""/34, 0x22}}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003a40)={&(0x7f00000037c0)="11d71579720e7dc5ca482faa1d4305af24a1d2dae05f01ffb2a4ace692cf85176b6a2293905b85cf1d483aa2b69f192ab516a860263fce21659eacd7b2281eb5216098de71141789412e3539c8be70381ef36b05df255410e1675d4d4dbf50398256e528ead5728cb7b6731fc006b705c18b57190e3a80eb3e0dbad0736b6a944ca025c67d6e2f435d10630160a25a0c46b89c57734354fa7e104b325c16a72aecea74ba38014e5d0f0c10b632a3f49b27413e6fe77f5f9e21b13d1b028f6eee5e390716e566302a75e95e60c7379f9691f1af5bcee853d26a434af7e0800de756496e08e6cfcde5ea143b0ef46d77542ef434f72c61441d5b888b", &(0x7f00000038c0)=""/8, &(0x7f0000003900)="3ee4e7638694d936007cdfaa20a2e1bc73ed257c7019ed09f0f26d2e2ea78858bb4264f1daa99922", &(0x7f0000003940)="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", 0x56a1, r11}, 0x38)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003a80)=r15, 0x4)
r16 = bpf$ITER_CREATE(0x21, &(0x7f0000003ac0)={r9}, 0x8)
ioctl$TUNSETCARRIER(r16, 0x400454e2, &(0x7f0000003b00)=0x1)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003c00)=@o_path={&(0x7f0000003b40)='./file0\x00', r10}, 0x18)

5.711258219s ago: executing program 3 (id=2987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000010000004200000040000000c2000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)="31140f62", &(0x7f0000000bc0), 0x4, r0}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94)
r7 = syz_clone(0x2016000, &(0x7f0000000340), 0x0, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="f58b99a58cefdc2ebf245fe4704a778871ea6b476fd2d64131d57d82f3fffa11a8328030be528f50fbdaad0593b3de89e959f85fbfc33c")
r8 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)
close(r8)
syz_open_procfs$namespace(r7, &(0x7f0000000580)='ns/user\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500000000bf9becf1ec000011000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000500"/28], 0x50)

5.614627341s ago: executing program 1 (id=2988):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x7, &(0x7f0000000000), 0x4)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
close(r1)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=r7, 0x4)
setsockopt$sock_attach_bpf(r4, 0x6, 0x18, &(0x7f0000000200)=r7, 0x4)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r0, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYRES8=r9, @ANYBLOB="124cd208"], 0x12)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="238f000000000000090000000380000014100000", @ANYRES32, @ANYBLOB="ffff0800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r14 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff020037153e370248018000f01700d1bd", 0x2e}, {&(0x7f00000005c0)="ac619f4ea6102a37e63fdc99264cb38eaab30dd8048c4903072ad93c2c7fdc45ccfbb1b9e6bbc3f5282590168a6dbacf8339be23581a9e58a0427e7a938faeab14b2a4090f49eafcf261787613836edffde58a522d54c3a875224bcd7d4b8b34943c5aa6d0051d2bf31f983d8fc38a226151382105c9b9100f0d7348c3039cf4ec31e3d558b8d0e084490acb72327929939514037a9c25c63a30c8ea52427dbffcb8b989bd51d23dec96d1ac0a6128f3aed93d5328f2c7540bb6ec7d1595fe198f9389ec652dcb3b9081ea19f91fe58d9e46c989183100657c0528b5ddaf4d02b25e20372aaf22b7cc4f1f371864762aaf1f456101", 0xf5}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="b676c7d6f0ba4836871c3294a637880089ac06110a27544ef0b94e6c87829e23811a13bd198b016d750345f96ea8fcb2193966f6096a877b64f9f31d69276aed43c5b0e0a214d8fc02cd6d044057b1adcc4dee88416a7eb9a6da07f483a44a83c087a8994d3ac44b5b9071f990a99bb786f62f0c40c87f3319429daa408845bc95eca1d06409722209", 0x89}, {&(0x7f0000000340)="ad5f0027c6b4519924a7b812a1b4f9319a230837d303a38eefc4c0843f9dd6472462312ce894a8a54438936d00cb6235bb1162e3e670a3c7d375437b1f0fc73198c7d0fe1ac362165397ad3636ec72125f685159e9", 0x55}], 0x5}, 0x0)
r15 = socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x7fff, 0x0, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1)
close(r15)
r16 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r16)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r13, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

5.554693403s ago: executing program 4 (id=2989):
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005"], 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg$unix(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000880}, 0x60800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000000), 0x800, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r6=>0x0, <r7=>0x0})
close(r6)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
close(r8)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES32], 0x50)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r10=>0x0})
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)

5.447477045s ago: executing program 3 (id=2990):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r1 = socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x9, &(0x7f0000000000), 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000012c0)="48000000140081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x20000000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

5.350198038s ago: executing program 1 (id=2992):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5.133923004s ago: executing program 4 (id=2994):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x9, 0x7, 0x1, 0x0, 0x10, 0x20010, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x0, 0x1, 0x1, 0x50, 0x10000, 0x8, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)

5.085819155s ago: executing program 1 (id=2995):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc8a9, 0x18000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f00000002c0), 0xa}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0xfffffffa}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4, <r8=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000500)=r1}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x4) (rerun: 32)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x801, 0x3, 0xffffffff, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a00100000", 0x27}], 0x1}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x6, 0x0, r8, 0x5, '\x00', 0x0, r4, 0x2, 0x1, 0x2}, 0x50) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x10\x04/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10)

5.084409865s ago: executing program 3 (id=2996):
r0 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1e3f}, 0x210, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000009000000000000000000500000000000000000"])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000003, 0x9}, {0x10000002, 0x5, 0x4, 0xc}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x21, &(0x7f0000000a40)}, 0x42)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000100)="5c00000011006bcc9e09000000000000006b876c1d0000007ea608640850a9f814001ac07c3504459b4774d400020254785194b8b96766c06fdbe6d6e308f486a6d01772c6c9530bb990b4d774ba5ef071bd185e45949175cbc701b7baad3b57", 0x60}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x541b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x100000, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r9, 0xa)
r10 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x20}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x3, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRESOCT=r7, @ANYRESOCT=r6, @ANYRES8=r2], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r12, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)

4.990339377s ago: executing program 4 (id=2998):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x711}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6873e747a7d941b56d12f6ba03ffb406f519394b9783e78cc0dd80cf7", 0x53}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0xffd1}], 0x1}, 0xc9)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r8, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000180), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xffffff19}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

4.87379715s ago: executing program 1 (id=2999):
socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x90, 0x7, 0x7f, 0x0, 0xfffffffffffffff6, 0x28010, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xff, 0x5}, 0x508, 0x6, 0x3d, 0x9, 0xffffffff, 0x1, 0x1, 0x0, 0x3d2af391, 0x0, 0xf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd)
ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x1, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000680)=""/30, 0x1e, <r9=>0x0, &(0x7f00000006c0)=""/26, 0x1a}}, 0x10)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x9, 0xffffff64, 0x4, 0x8, 0x200, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0xff}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000400)=ANY=[@ANYBLOB="31000000ff010000000000000001000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184f000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000910b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008894cdfe08000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x5, 0x59, &(0x7f0000000540)=""/89, 0x41000, 0x13, '\x00', r7, 0x1b, r8, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xf, 0x7, 0x4}, 0x10, r9, 0x0, 0xa, &(0x7f0000000940)=[0xffffffffffffffff, r10, r11, r12, 0xffffffffffffffff, r13], &(0x7f0000000980)=[{0x4, 0x3, 0xf, 0x6}, {0x3, 0x2, 0xf, 0x3}, {0x3, 0x4, 0x2}, {0x2, 0x1, 0x8, 0x6}, {0x0, 0x5, 0x9, 0x4}, {0x3, 0x3, 0x10001, 0xa}, {0x3, 0x3, 0x9, 0x2}, {0x1, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x6, 0x7}, {0x1, 0x2, 0x7, 0x3}], 0x10, 0x5}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)

4.556704558s ago: executing program 4 (id=3001):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)}, 0x40e4804)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x200000032, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)

4.230130696s ago: executing program 3 (id=3002):
r0 = socket$kcm(0x10, 0x5, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8}, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0x8000, 0x10000, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x33, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="010000887895c2aa228f975c98e100000000beb365c0f69336dfa33b785c46c55e321f729edca71cc26fb3229ffdb009e8f67ac235fdad7871d12e04b3d299f5d17108a0858d3573734597f90f3c55dcdd14e680800d7b2fc8b007726e22533eec3146a6fec1742408bfd40554f2ddc8e116a32d2b45c3119c616b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x2, 0x3, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r7}, 0x8)
write$cgroup_int(r8, &(0x7f00000001c0), 0xfffffdef)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
ioctl$SIOCSIFHWADDR(r10, 0x541b, &(0x7f0000000180)={'ip_vti0\x00', @random="1365d939d6db"})
sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)='%pB    \x00'}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x22109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x2, 0x6, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.216324826s ago: executing program 4 (id=3003):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x21) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x2000}) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000002d008188a7480e0000e3bd6efb440009000434ffe200"/46, 0x2e}], 0x1}, 0x0)

4.178267027s ago: executing program 0 (id=3004):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff9}}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t')
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10)

4.015787791s ago: executing program 0 (id=3005):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20)
close(0x3)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00')

3.843042955s ago: executing program 0 (id=3006):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x3, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x3, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c') (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c')
sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, &(0x7f0000000340)=[{&(0x7f0000000200)="b3", 0x1}, {0x0}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB="deffffffffffffff0000005154ba36c57051527b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB="deffffffffffffff0000005154ba36c57051527b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%pK    \x00'}, 0x20)

3.540394643s ago: executing program 0 (id=3007):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x200000000000004, 0x3bf9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) (async, rerun: 64)
r3 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001740)={&(0x7f00000003c0)="a925c942af2ea0b751d1e5d3fa2adb1575b0a8bda5a7fc467960ac4d7b700146187c11829c0997b8574df7d94e369335d86946192de8410fdfd3a20bb8b396521e82aa4ab4dbb53f9602c619e8f421a284b9af1175b169868dacd7b5b5ec2964c4b51e8e8bdbb02492731f5b2f128bbcba181047327611ed918a61701138a27439a49671867882ecac5bdd842e455a4fa48308c67238ba9301439b589cf5c4700bcaa9ca242e90e780ce98423d425e7a907ed8ecab82c7bb871404c6a4359d8ac96fcf51af4e3424e864c565ceb6da126513ba18b10c897c2b1a87ed01c5a756ff6fb65ea8d49bba69cfa2", &(0x7f00000004c0)=""/194, &(0x7f00000005c0)="09c1aa1aa0e7f76e4b51abb424e2fc01a515ce1fdb0e5656572d1dc636752ad85384d651baf97931bba32c0d5a0c514f274a57b5464f6e9434d73da528bdea1fac968d1adc4a2c3c18d067187db626", &(0x7f00000006c0)="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", 0x0, r4, 0x4}, 0x38) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x2, 0xa, 0x4, 0x0, 0xfffffffffffffff9, 0x20400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x1, 0x7f, 0x4, 0x7ff, 0xa6a, 0x1, 0x0, 0xffffffff, 0x0, 0x6}, r5, 0xc, r2, 0x0) (async)
r6 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x8, &(0x7f0000000000), 0x8)
sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) (async)
sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000006c0)='&', 0x1}], 0x1}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001780)={r7})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33)

3.273960589s ago: executing program 0 (id=3008):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x8, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000)
sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='E', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000800000018", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095acf82cacfff0952827a8fb86eff42945381634aea7012273c2dee21a0cd75babf9824c228426ef5185c90fa9352b2c3289e55aa313afe5d92dd318bd33044eddcbbf110ac312051f14f50107d4c3fb9d7b5d0df5d6d2218e32dbd1e82a111a2d3ae5fb11357f03a880a1580ed7a9c5627c8e6570b10fb73eb9d34b2bb5abba234e686ca0c19eddbb71e74d7b61576cc72098c64bce30dbbc3272fb80c8f10bb1766e52000049947aaba86280d6aecd0be6af1f9e39e0be6c5cb69e0a8576fd91ad5d61a5048eefeefced"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r7 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x0, 0x485, 0x0, 0x0)
socketpair(0x28, 0x4, 0x28, 0x0)
socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='Gb', 0x2}, {&(0x7f0000001440)="22003cda65a8fae2ab1eeacaf4c6b1145ff0", 0x12}], 0x2}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x1c, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11)

2.753037232s ago: executing program 0 (id=3009):
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x6, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f01000000000000000000000000000000990000000000000004c9d920c1926c72310afac149cd6b0c00000000000000000000000c00000000000000000100000f03000000000000000000de92fd95439d8e1360cd27affea9a60fd175e469fc8614637792fd723662be3ce48d75218da08682cc379178e7f65dbeb50bb60f164c4cf40f1819c905fc48a927c6162a6599e4287a430237631361ada20db458d7128b8db339af5d6057633bc3898ec07d900134813ba40171482700"/256], 0x0, 0x82, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8940, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18)
close(r6)

112.463337ms ago: executing program 4 (id=3010):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000208500000071"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000020000000feffffff85000000a800000095000000000000002e78459fe09e3896299c8de03f958e718027f6a3a24b5aefe8b27df9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000001880)=""/134, 0x86}], 0x3, 0x0, 0x0, 0x8000000}, 0x20)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000100)={r10})
close(r8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2000000000000035, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x7fe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

38.020159ms ago: executing program 3 (id=3011):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122f00", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0x1, 0x2, 0x4, 0x0, 0x8001, 0x3000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff5cba, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x438, 0xfffffffffffffc99, 0x522, 0x6, 0x7fffffff, 0xe, 0x257, 0x0, 0xe98, 0x0, 0xff8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, 0xffffffffffffffff)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122f00", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async)
close(r1) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0x1, 0x2, 0x4, 0x0, 0x8001, 0x3000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff5cba, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x438, 0xfffffffffffffc99, 0x522, 0x6, 0x7fffffff, 0xe, 0x257, 0x0, 0xe98, 0x0, 0xff8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) (async)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, 0xffffffffffffffff) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) (async)

0s ago: executing program 1 (id=3012):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000080000000000000c050000000400060000000000000000000e00000000000010020000000000"], 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x20000000000000a, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xd, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x41)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010003000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x11efa, 0x4, 0x9b, 0x4, 0x1d, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000240)="1400000033000b2f1bdc0f13b67e58c316920fd2", 0x14}], 0x1}, 0x448d0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33)

kernel console output (not intermixed with test programs):

adv: batadv0: Adding interface: batadv_slave_1
[  323.888673][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.915315][T11372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.126634][T11372] hsr_slave_0: entered promiscuous mode
[  324.146231][T11372] hsr_slave_1: entered promiscuous mode
[  324.165772][T11372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.191674][T11372] Cannot create hsr debugfs directory
[  324.626037][T11425] FAULT_INJECTION: forcing a failure.
[  324.626037][T11425] name failslab, interval 1, probability 0, space 0, times 0
[  324.646971][T11425] CPU: 0 PID: 11425 Comm: syz.0.1728 Not tainted syzkaller #0
[  324.654509][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  324.664588][T11425] Call Trace:
[  324.667884][T11425]  <TASK>
[  324.670830][T11425]  dump_stack_lvl+0x18c/0x250
[  324.675536][T11425]  ? show_regs_print_info+0x20/0x20
[  324.680760][T11425]  ? load_image+0x420/0x420
[  324.685295][T11425]  ? __might_sleep+0xe0/0xe0
[  324.689911][T11425]  ? __lock_acquire+0x7d80/0x7d80
[  324.694967][T11425]  should_fail_ex+0x394/0x4c0
[  324.699679][T11425]  should_failslab+0x9/0x20
[  324.704210][T11425]  slab_pre_alloc_hook+0x59/0x300
[  324.709256][T11425]  ? __lock_acquire+0x7d80/0x7d80
[  324.714285][T11425]  ? security_sk_alloc+0x4b/0x130
[  324.719305][T11425]  ? security_sk_alloc+0x4b/0x130
[  324.724327][T11425]  __kmem_cache_alloc_node+0x53/0x250
[  324.729715][T11425]  ? security_sk_alloc+0x4b/0x130
[  324.734736][T11425]  __kmalloc+0xa7/0x240
[  324.738897][T11425]  security_sk_alloc+0x4b/0x130
[  324.743763][T11425]  sk_prot_alloc+0x101/0x210
[  324.748385][T11425]  sk_alloc+0x3a/0x350
[  324.752467][T11425]  inet6_create+0x7d3/0x1120
[  324.757056][T11425]  ? inet6_create+0x80/0x1120
[  324.761741][T11425]  __sock_create+0x49e/0x940
[  324.766333][T11425]  mptcp_subflow_create_socket+0x10c/0xad0
[  324.772143][T11425]  ? __mptcp_subflow_connect+0x14d0/0x14d0
[  324.777952][T11425]  ? lock_chain_count+0x20/0x20
[  324.782805][T11425]  __mptcp_nmpc_sk+0x157/0x720
[  324.787572][T11425]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  324.794345][T11425]  mptcp_setsockopt+0x1714/0x3370
[  324.799370][T11425]  ? aa_sk_perm+0x83c/0x970
[  324.803895][T11425]  ? __fget_files+0x28/0x460
[  324.808488][T11425]  ? pm_nl_exit_net+0x230/0x230
[  324.813347][T11425]  ? aa_af_perm+0x330/0x330
[  324.817854][T11425]  ? __fget_files+0x28/0x460
[  324.822447][T11425]  ? aa_sock_opt_perm+0x74/0x100
[  324.827384][T11425]  ? sock_common_setsockopt+0x36/0xc0
[  324.832752][T11425]  ? sock_common_recvmsg+0x190/0x190
[  324.838034][T11425]  do_sock_setsockopt+0x175/0x1a0
[  324.843063][T11425]  __x64_sys_setsockopt+0x182/0x200
[  324.848267][T11425]  do_syscall_64+0x55/0xb0
[  324.852685][T11425]  ? clear_bhb_loop+0x40/0x90
[  324.857367][T11425]  ? clear_bhb_loop+0x40/0x90
[  324.862045][T11425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.867945][T11425] RIP: 0033:0x7f008ab9e0d9
[  324.872361][T11425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.891965][T11425] RSP: 002b:00007f008bb34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  324.900379][T11425] RAX: ffffffffffffffda RBX: 00007f008ae26090 RCX: 00007f008ab9e0d9
[  324.908346][T11425] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000008
[  324.916315][T11425] RBP: 00007f008bb34090 R08: 0000000000000004 R09: 0000000000000000
[  324.924279][T11425] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  324.932245][T11425] R13: 00007f008ae26128 R14: 00007f008ae26090 R15: 00007ffe52260998
[  324.940225][T11425]  </TASK>
[  324.952519][ T5779] Bluetooth: hci3: command tx timeout
[  325.794757][T11444] netlink: 'syz.0.1732': attribute type 2 has an invalid length.
[  325.819962][T11444] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1732'.
[  326.652752][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.974612][ T5779] Bluetooth: hci3: command tx timeout
[  327.294642][   T12] hsr_slave_0: left promiscuous mode
[  327.310982][   T12] hsr_slave_1: left promiscuous mode
[  327.343602][   T12] veth1_macvtap: left promiscuous mode
[  327.349872][   T12] veth0_macvtap: left promiscuous mode
[  327.357646][   T12] veth1_vlan: left promiscuous mode
[  327.363419][   T12] veth0_vlan: left promiscuous mode
[  327.381832][T11485] FAULT_INJECTION: forcing a failure.
[  327.381832][T11485] name failslab, interval 1, probability 0, space 0, times 0
[  327.422825][T11485] CPU: 0 PID: 11485 Comm: syz.2.1740 Not tainted syzkaller #0
[  327.430364][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  327.440459][T11485] Call Trace:
[  327.443769][T11485]  <TASK>
[  327.446730][T11485]  dump_stack_lvl+0x18c/0x250
[  327.451450][T11485]  ? show_regs_print_info+0x20/0x20
[  327.456694][T11485]  ? load_image+0x420/0x420
[  327.461253][T11485]  ? __might_sleep+0xe0/0xe0
[  327.465886][T11485]  ? __lock_acquire+0x7d80/0x7d80
[  327.470962][T11485]  should_fail_ex+0x394/0x4c0
[  327.475700][T11485]  should_failslab+0x9/0x20
[  327.480252][T11485]  slab_pre_alloc_hook+0x59/0x300
[  327.485335][T11485]  ? subflow_ulp_init+0x95/0x530
[  327.490330][T11485]  __kmem_cache_alloc_node+0x53/0x250
[  327.495768][T11485]  ? tcp_set_ulp+0xb1/0x5f0
[  327.500333][T11485]  ? subflow_ulp_init+0x95/0x530
[  327.505330][T11485]  kmalloc_trace+0x2a/0xe0
[  327.509802][T11485]  subflow_ulp_init+0x95/0x530
[  327.514617][T11485]  ? tcp_set_ulp+0xb1/0x5f0
[  327.519169][T11485]  tcp_set_ulp+0x536/0x5f0
[  327.523636][T11485]  mptcp_subflow_create_socket+0x61d/0xad0
[  327.529486][T11485]  ? __mptcp_subflow_connect+0x14d0/0x14d0
[  327.535295][T11485]  ? lock_chain_count+0x20/0x20
[  327.540148][T11485]  __mptcp_nmpc_sk+0x157/0x720
[  327.544926][T11485]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  327.551731][T11485]  mptcp_setsockopt+0x1714/0x3370
[  327.556770][T11485]  ? aa_sk_perm+0x83c/0x970
[  327.561305][T11485]  ? __fget_files+0x28/0x460
[  327.565908][T11485]  ? pm_nl_exit_net+0x230/0x230
[  327.570776][T11485]  ? aa_af_perm+0x330/0x330
[  327.575293][T11485]  ? __fget_files+0x28/0x460
[  327.579891][T11485]  ? aa_sock_opt_perm+0x74/0x100
[  327.584834][T11485]  ? sock_common_setsockopt+0x36/0xc0
[  327.590211][T11485]  ? sock_common_recvmsg+0x190/0x190
[  327.595505][T11485]  do_sock_setsockopt+0x175/0x1a0
[  327.600541][T11485]  __x64_sys_setsockopt+0x182/0x200
[  327.605770][T11485]  do_syscall_64+0x55/0xb0
[  327.610215][T11485]  ? clear_bhb_loop+0x40/0x90
[  327.614911][T11485]  ? clear_bhb_loop+0x40/0x90
[  327.619614][T11485]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.625525][T11485] RIP: 0033:0x7f0e1ff9e0d9
[  327.629950][T11485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.649562][T11485] RSP: 002b:00007f0e20e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.657984][T11485] RAX: ffffffffffffffda RBX: 00007f0e20226090 RCX: 00007f0e1ff9e0d9
[  327.665960][T11485] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000008
[  327.673935][T11485] RBP: 00007f0e20e69090 R08: 0000000000000004 R09: 0000000000000000
[  327.681912][T11485] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  327.689888][T11485] R13: 00007f0e20226128 R14: 00007f0e20226090 R15: 00007fff1e0adf58
[  327.697888][T11485]  </TASK>
[  328.248243][T11494] delete_channel: no stack
[  328.252838][T11494] delete_channel: no stack
[  328.685183][T11499] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1746'.
[  328.932392][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.007196][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.049272][ T5779] Bluetooth: hci3: command tx timeout
[  329.072171][   T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  329.403108][   T12] bond0 (unregistering): Released all slaves
[  329.444323][T11498] netlink: 'syz.2.1746': attribute type 10 has an invalid length.
[  329.459292][T11498] veth1_vlan: left allmulticast mode
[  329.567374][T11372] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  329.622550][T11372] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  329.645651][T11372] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  329.660469][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'.
[  329.739712][T11372] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  329.769434][T11512] FAULT_INJECTION: forcing a failure.
[  329.769434][T11512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  329.806681][T11512] CPU: 1 PID: 11512 Comm: syz.1.1751 Not tainted syzkaller #0
[  329.814216][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  329.824289][T11512] Call Trace:
[  329.827585][T11512]  <TASK>
[  329.830522][T11512]  dump_stack_lvl+0x18c/0x250
[  329.835212][T11512]  ? show_regs_print_info+0x20/0x20
[  329.840416][T11512]  ? load_image+0x420/0x420
[  329.844944][T11512]  ? __might_fault+0xaa/0x120
[  329.849652][T11512]  ? __lock_acquire+0x7d80/0x7d80
[  329.854712][T11512]  should_fail_ex+0x394/0x4c0
[  329.859428][T11512]  _copy_from_user+0x2f/0xe0
[  329.864035][T11512]  sk_setsockopt+0x266/0x2b20
[  329.868739][T11512]  ? sockopt_capable+0x60/0x60
[  329.873535][T11512]  ? __mptcp_nmpc_sk+0x592/0x720
[  329.878486][T11512]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  329.885269][T11512]  mptcp_setsockopt+0x1754/0x3370
[  329.890322][T11512]  ? aa_sk_perm+0x83c/0x970
[  329.894835][T11512]  ? __fget_files+0x28/0x460
[  329.899435][T11512]  ? pm_nl_exit_net+0x230/0x230
[  329.904300][T11512]  ? aa_af_perm+0x330/0x330
[  329.908818][T11512]  ? __fget_files+0x28/0x460
[  329.913425][T11512]  ? aa_sock_opt_perm+0x74/0x100
[  329.918371][T11512]  ? sock_common_setsockopt+0x36/0xc0
[  329.923750][T11512]  ? sock_common_recvmsg+0x190/0x190
[  329.929047][T11512]  do_sock_setsockopt+0x175/0x1a0
[  329.934120][T11512]  __x64_sys_setsockopt+0x182/0x200
[  329.939335][T11512]  do_syscall_64+0x55/0xb0
[  329.943762][T11512]  ? clear_bhb_loop+0x40/0x90
[  329.948448][T11512]  ? clear_bhb_loop+0x40/0x90
[  329.953136][T11512]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.959041][T11512] RIP: 0033:0x7fd78b99e0d9
[  329.963465][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.983085][T11512] RSP: 002b:00007fd78c94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  329.991858][T11512] RAX: ffffffffffffffda RBX: 00007fd78bc25fa0 RCX: 00007fd78b99e0d9
[  329.999834][T11512] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000008
[  330.007811][T11512] RBP: 00007fd78c94e090 R08: 0000000000000004 R09: 0000000000000000
[  330.015791][T11512] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  330.023769][T11512] R13: 00007fd78bc26038 R14: 00007fd78bc25fa0 R15: 00007ffc00260a08
[  330.031772][T11512]  </TASK>
[  330.248970][T11372] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.277588][T11372] 8021q: adding VLAN 0 to HW filter on device team0
[  330.292342][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.299495][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.309830][T11521] netlink: 'syz.1.1753': attribute type 12 has an invalid length.
[  330.326185][T11521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1753'.
[  330.346481][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.353725][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.546393][T11372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.125732][ T5779] Bluetooth: hci3: command tx timeout
[  331.159353][T11561] netlink: 'syz.0.1758': attribute type 25 has an invalid length.
[  331.219025][T11561] netlink: 'syz.0.1758': attribute type 25 has an invalid length.
[  331.356134][T11563] netlink: 'syz.1.1759': attribute type 3 has an invalid length.
[  331.365956][T11563] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1759'.
[  331.370279][T11372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.505329][T11563] ������: renamed from vlan0
[  331.709796][T11372] veth0_vlan: entered promiscuous mode
[  331.778571][T11372] veth1_vlan: entered promiscuous mode
[  331.847373][T11571] netlink: 'syz.0.1760': attribute type 2 has an invalid length.
[  331.875790][T11571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1760'.
[  331.898043][T11571] netlink: 'syz.0.1760': attribute type 2 has an invalid length.
[  331.906388][T11571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1760'.
[  332.162901][T11372] veth0_macvtap: entered promiscuous mode
[  332.226566][T11372] veth1_macvtap: entered promiscuous mode
[  332.260984][T11576] FAULT_INJECTION: forcing a failure.
[  332.260984][T11576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.316130][T11576] CPU: 0 PID: 11576 Comm: syz.2.1761 Not tainted syzkaller #0
[  332.323675][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.333762][T11576] Call Trace:
[  332.337049][T11576]  <TASK>
[  332.339990][T11576]  dump_stack_lvl+0x18c/0x250
[  332.344680][T11576]  ? show_regs_print_info+0x20/0x20
[  332.349889][T11576]  ? load_image+0x420/0x420
[  332.354413][T11576]  ? __lock_acquire+0x7d80/0x7d80
[  332.359459][T11576]  ? snprintf+0xe9/0x140
[  332.363721][T11576]  should_fail_ex+0x394/0x4c0
[  332.368414][T11576]  _copy_to_user+0x2f/0xa0
[  332.372856][T11576]  simple_read_from_buffer+0xe7/0x150
[  332.378242][T11576]  proc_fail_nth_read+0x1e8/0x260
[  332.383281][T11576]  ? proc_fault_inject_write+0x360/0x360
[  332.388931][T11576]  ? fsnotify_perm+0x271/0x5e0
[  332.393711][T11576]  ? proc_fault_inject_write+0x360/0x360
[  332.399356][T11576]  vfs_read+0x298/0x990
[  332.403530][T11576]  ? kernel_read+0x1e0/0x1e0
[  332.408134][T11576]  ? __fget_files+0x28/0x460
[  332.412735][T11576]  ? __fget_files+0x3fc/0x460
[  332.417441][T11576]  ? __fdget_pos+0x2a3/0x330
[  332.422049][T11576]  ? ksys_read+0x74/0x260
[  332.426398][T11576]  ksys_read+0x151/0x260
[  332.430660][T11576]  ? vfs_write+0x9a0/0x9a0
[  332.435090][T11576]  ? lockdep_hardirqs_on+0x98/0x150
[  332.440304][T11576]  do_syscall_64+0x55/0xb0
[  332.444728][T11576]  ? clear_bhb_loop+0x40/0x90
[  332.449409][T11576]  ? clear_bhb_loop+0x40/0x90
[  332.454098][T11576]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  332.460003][T11576] RIP: 0033:0x7f0e1ff5e90e
[  332.464436][T11576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  332.484058][T11576] RSP: 002b:00007f0e20e89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  332.492487][T11576] RAX: ffffffffffffffda RBX: 00007f0e20e8a6c0 RCX: 00007f0e1ff5e90e
[  332.500464][T11576] RDX: 000000000000000f RSI: 00007f0e20e8a0a0 RDI: 000000000000000a
[  332.508453][T11576] RBP: 00007f0e20e8a090 R08: 0000000000000000 R09: 0000000000000000
[  332.516427][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.524406][T11576] R13: 00007f0e20226038 R14: 00007f0e20225fa0 R15: 00007fff1e0adf58
[  332.532415][T11576]  </TASK>
[  332.538709][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.552492][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.562490][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.573075][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.586496][T11372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.675082][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.692133][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.702566][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.713182][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.736561][T11372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.750023][T11372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.774602][T11372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.783374][T11372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.814516][T11372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.995160][T11587] syzkaller0: entered promiscuous mode
[  333.000711][T11587] syzkaller0: entered allmulticast mode
[  336.850285][T11613] netlink: 'syz.1.1768': attribute type 2 has an invalid length.
[  336.860102][T11613] netlink: 'syz.1.1768': attribute type 11 has an invalid length.
[  336.868317][T11613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1768'.
[  336.922165][T10505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.959098][T10505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.065796][T10505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.116034][T10505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.237827][T11630] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  337.259101][T11630] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1771'.
[  337.289243][T11630] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  337.822461][T11647] netlink: 'syz.2.1776': attribute type 4 has an invalid length.
[  337.831663][T11647] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1776'.
[  338.181551][T11663] netlink: 'syz.0.1782': attribute type 3 has an invalid length.
[  338.205564][T11663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1782'.
[  338.664680][T11679] netlink: 'syz.2.1788': attribute type 12 has an invalid length.
[  338.847740][T11685] bridge0: port 3(team0) entered disabled state
[  338.855185][T11685] bridge0: port 1(hsr0) entered disabled state
[  338.862372][T11685] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.876814][T11685] bridge0: entered allmulticast mode
[  338.915463][T11691] bridge0: port 3(team0) entered disabled state
[  338.956623][T11691] hsr0: left allmulticast mode
[  338.961615][T11691] hsr_slave_0: left allmulticast mode
[  338.979230][T11691] hsr_slave_1: left allmulticast mode
[  339.007619][T11691] bridge0: port 1(hsr0) entered disabled state
[  339.017164][T11691] bridge_slave_1: left allmulticast mode
[  339.032781][T11691] bridge_slave_1: left promiscuous mode
[  339.039978][T11691] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.603428][T11713] netlink: 'syz.3.1799': attribute type 4 has an invalid length.
[  339.643216][T11713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1799'.
[  340.097158][T11726] netlink: 'syz.0.1803': attribute type 29 has an invalid length.
[  340.103188][T11725] netlink: 'syz.0.1803': attribute type 29 has an invalid length.
[  340.153588][T11725] syzkaller0: entered promiscuous mode
[  342.099768][T11733] validate_nla: 2 callbacks suppressed
[  342.099783][T11733] netlink: 'syz.1.1804': attribute type 10 has an invalid length.
[  342.114070][T11733] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1804'.
[  342.523540][T11754] delete_channel: no stack
[  343.163306][T11771] netlink: 'syz.3.1819': attribute type 3 has an invalid length.
[  343.186726][T11771] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1819'.
[  346.087297][T11779] netlink: 'syz.3.1821': attribute type 3 has an invalid length.
[  346.120825][T11779] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1821'.
[  346.190866][T11785] netlink: 'syz.0.1824': attribute type 9 has an invalid length.
[  346.239293][T11785] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1824'.
[  346.283820][T11783] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1822'.
[  346.398371][T11794] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1827'.
[  346.407857][T11794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  346.429496][T11788] netlink: 'syz.1.1825': attribute type 21 has an invalid length.
[  346.528001][T11788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  346.535414][T11788] IPv6: NLM_F_CREATE should be set when creating new route
[  346.542807][T11788] IPv6: NLM_F_CREATE should be set when creating new route
[  346.550137][T11788] IPv6: NLM_F_CREATE should be set when creating new route
[  346.663947][T11795] netlink: 'syz.1.1825': attribute type 21 has an invalid length.
[  346.677114][T11795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.323296][T11806] netlink: 'syz.1.1830': attribute type 6 has an invalid length.
[  347.334447][T11806] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1830'.
[  347.466851][T11808] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  347.496021][T11807] delete_channel: no stack
[  349.037364][T11852] netlink: 'syz.2.1845': attribute type 3 has an invalid length.
[  349.066400][T11852] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1845'.
[  349.372791][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'.
[  349.402237][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'.
[  349.434910][T11861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'.
[  349.459913][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'.
[  349.596599][T11863] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1849'.
[  350.735795][T11875] delete_channel: no stack
[  350.836270][T11883] delete_channel: no stack
[  350.858833][T11883] delete_channel: no stack
[  351.964727][T11906] netlink: 'syz.2.1861': attribute type 6 has an invalid length.
[  352.014176][T11906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1861'.
[  352.447769][T11911] netlink: 'syz.1.1863': attribute type 1 has an invalid length.
[  352.474609][T11911] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1863'.
[  352.514294][T11917] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.1862'.
[  352.677459][ T5779] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  352.719594][T11922] netlink: 'syz.1.1865': attribute type 1 has an invalid length.
[  352.745308][T11922] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1865'.
[  353.599131][T11938] syzkaller0: entered promiscuous mode
[  353.608968][T11938] syzkaller0: entered allmulticast mode
[  355.464836][T11959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'.
[  355.866320][T11985] sit0: entered promiscuous mode
[  356.031223][T11995] netlink: 'syz.1.1885': attribute type 2 has an invalid length.
[  356.047289][T11995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1885'.
[  356.244714][T12005] netlink: 'syz.0.1886': attribute type 10 has an invalid length.
[  356.631372][T12012] syzkaller0: entered promiscuous mode
[  356.637288][T12012] syzkaller0: entered allmulticast mode
[  359.592556][T12043] Dead loop on virtual device ip6_vti0, fix it urgently!
[  361.448958][T12043] bridge_slave_0: left allmulticast mode
[  361.455692][T12043] bridge_slave_0: left promiscuous mode
[  361.461423][T12043] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.794621][T12069] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1903'.
[  361.875500][T12074] netlink: 'syz.3.1904': attribute type 10 has an invalid length.
[  361.913933][T12074] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.922792][T12074] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.994411][T12074] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.001866][T12074] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.010011][T12074] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.017539][T12074] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.130687][T12074] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  362.439572][T12094] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1908'.
[  362.496185][T12094] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1908'.
[  362.794029][T12109] netlink: 'syz.1.1912': attribute type 10 has an invalid length.
[  362.833920][T12109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1912'.
[  362.854958][T12109] ipvlan1: entered promiscuous mode
[  362.860257][T12109] ipvlan1: entered allmulticast mode
[  362.904235][T12109] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  362.925169][T12113] netlink: 'syz.0.1916': attribute type 21 has an invalid length.
[  362.935141][T12113] netlink: 'syz.0.1916': attribute type 13 has an invalid length.
[  362.943602][T12113] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.1916'.
[  362.966390][T12115] netlink: 'syz.1.1912': attribute type 21 has an invalid length.
[  362.977863][T12115] IPv6: NLM_F_CREATE should be specified when creating new route
[  362.995025][T12115] IPv6: Can't replace route, no match found
[  363.079441][T12117] netlink: 'syz.2.1917': attribute type 10 has an invalid length.
[  363.135753][T12117] batman_adv: batadv0: Adding interface: netdevsim0
[  363.151007][T12117] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.180322][T12117] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  363.213013][T12124] netlink: 'syz.3.1920': attribute type 3 has an invalid length.
[  363.234500][T12124] netlink: 'syz.3.1920': attribute type 1 has an invalid length.
[  363.242563][T12124] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1920'.
[  363.358916][T12127] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1921'.
[  364.081165][T12127] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  364.188145][T12138] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1925'.
[  364.199702][T12127] team0: Device ipvlan1 failed to register rx_handler
[  364.241299][T12139] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1924'.
[  364.290989][T12139] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1924'.
[  364.381006][T12134] netlink: 'syz.0.1924': attribute type 10 has an invalid length.
[  364.411719][T12144] syz.3.1926[12144] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  364.412018][T12144] syz.3.1926[12144] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  364.428705][T12134] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  364.459908][T12134] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  366.930307][T12191] netlink: 'syz.2.1941': attribute type 4 has an invalid length.
[  367.066165][T12191] __nla_validate_parse: 4 callbacks suppressed
[  367.066207][T12191] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1941'.
[  367.707970][T12204] tun0: tun_chr_ioctl cmd 35108
[  367.733797][T12204] tun0: tun_chr_ioctl cmd 2147767517
[  367.754166][T12204] tun0: tun_chr_ioctl cmd 1074025684
[  367.766241][T12204] tun0: tun_chr_ioctl cmd 1074025678
[  367.772516][T12204] tun0: group set to 0
[  368.777788][T12234] netlink: 'syz.1.1955': attribute type 21 has an invalid length.
[  368.827340][T12234] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1955'.
[  369.012749][T12242] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1958'.
[  369.052259][T12242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.697313][T12263] netlink: 'syz.1.1964': attribute type 10 has an invalid length.
[  369.724517][T12263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1964'.
[  370.338366][T12284] netlink: 'syz.1.1968': attribute type 3 has an invalid length.
[  370.405197][T12284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1968'.
[  370.852517][T12295] netlink: 'syz.3.1972': attribute type 3 has an invalid length.
[  370.864541][T12295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1972'.
[  370.935912][T12295] syzkaller0: entered allmulticast mode
[  370.997950][T12301] netlink: 'syz.2.1974': attribute type 33 has an invalid length.
[  371.006132][T12301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1974'.
[  371.468745][T12311] syzkaller0: entered allmulticast mode
[  372.138557][T12326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1981'.
[  372.154932][T12326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1981'.
[  372.928893][T12340] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1983'.
[  373.167259][T12351] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.1989'.
[  373.195847][T12349] netlink: 'syz.0.1988': attribute type 21 has an invalid length.
[  373.203746][T12349] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1988'.
[  373.225430][T12349] netlink: 'syz.0.1988': attribute type 5 has an invalid length.
[  373.233233][T12349] netlink: 'syz.0.1988': attribute type 6 has an invalid length.
[  373.284626][T12349] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1988'.
[  373.465833][T12362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.473168][T12362] IPv6: NLM_F_CREATE should be set when creating new route
[  373.480495][T12362] IPv6: NLM_F_CREATE should be set when creating new route
[  373.487783][T12362] IPv6: NLM_F_CREATE should be set when creating new route
[  373.541274][T12358] netlink: 'syz.3.1992': attribute type 10 has an invalid length.
[  373.576706][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1992'.
[  373.605330][T12358] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  374.854177][ T5779] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  374.955087][T12403] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2005'.
[  375.919889][T12434] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2013'.
[  376.444168][T12436] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2014'.
[  376.719718][T12444] netlink: 'syz.1.2017': attribute type 9 has an invalid length.
[  377.146834][T12458] __nla_validate_parse: 2 callbacks suppressed
[  377.146868][T12458] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2022'.
[  377.286580][T12461] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2020'.
[  377.324531][T12461] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2020'.
[  377.354651][T12461] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2020'.
[  377.451040][T12452] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2020'.
[  377.470274][T12461] netlink: 'syz.1.2020': attribute type 10 has an invalid length.
[  377.480085][T12461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2020'.
[  377.493055][T12461] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  377.726069][T12480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2025'.
[  377.746053][T12480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2025'.
[  377.766379][ T5779] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  377.780214][T12470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2025'.
[  377.877670][T12472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2025'.
[  378.654907][T12497] syz.0.2034[12497] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  378.695872][T12497] syz.0.2034[12497] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  378.738672][T12500] netlink: 'syz.0.2034': attribute type 9 has an invalid length.
[  378.811923][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  378.818765][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  379.249324][T12504] netlink: 'syz.1.2035': attribute type 10 has an invalid length.
[  379.268559][T12504] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  379.390483][T12521] netlink: 'syz.0.2038': attribute type 28 has an invalid length.
[  379.417798][T12521] netlink: 'syz.0.2038': attribute type 29 has an invalid length.
[  379.443875][T12519] syzkaller0: entered promiscuous mode
[  379.457786][T12519] syzkaller0: entered allmulticast mode
[  379.855232][ T5779] Bluetooth: hci0: command 0x0406 tx timeout
[  382.778941][T12550] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  382.788103][T12553] netlink: 'syz.1.2049': attribute type 3 has an invalid length.
[  382.796022][T12553] __nla_validate_parse: 5 callbacks suppressed
[  382.796040][T12553] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2049'.
[  382.818234][T12563] netlink: 'syz.0.2053': attribute type 39 has an invalid length.
[  383.040404][T12576] netlink: 'syz.1.2057': attribute type 39 has an invalid length.
[  383.064166][T12576] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  383.876777][T12603] netlink: 'syz.0.2067': attribute type 9 has an invalid length.
[  383.888674][T12603] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2067'.
[  383.895614][T12605] netlink: 'syz.0.2067': attribute type 9 has an invalid length.
[  383.914588][T12605] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2067'.
[  384.269924][T12615] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2070'.
[  384.330858][T12615] netlink: 'syz.0.2070': attribute type 10 has an invalid length.
[  384.376297][T12615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2070'.
[  384.437959][T12615] dummy0: entered promiscuous mode
[  384.463137][T12615] dummy0: entered allmulticast mode
[  384.493849][T12615] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  386.726055][T12638] netlink: 'syz.0.2077': attribute type 21 has an invalid length.
[  386.734350][T12638] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2077'.
[  387.091729][T12644] sit0: entered promiscuous mode
[  387.713947][T12655] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2081'.
[  387.744193][T12660] netlink: 'syz.0.2083': attribute type 27 has an invalid length.
[  387.899466][T12669] netlink: 'syz.1.2085': attribute type 5 has an invalid length.
[  388.037542][T12673] netlink: 'syz.0.2087': attribute type 10 has an invalid length.
[  388.461185][T12687] netlink: 'syz.0.2091': attribute type 6 has an invalid length.
[  388.479727][T12687] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2091'.
[  388.948719][T12707] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  389.435155][T12705] netlink: 'syz.1.2094': attribute type 39 has an invalid length.
[  389.599020][T12701] delete_channel: no stack
[  390.353291][ T5779] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  390.978905][T12763] netlink: 'syz.1.2110': attribute type 21 has an invalid length.
[  391.008656][T12763] netlink: 'syz.1.2110': attribute type 6 has an invalid length.
[  391.017506][T12763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2110'.
[  391.019434][T12766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2108'.
[  391.796102][T12789] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2115'.
[  392.406800][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  392.903006][T12823] syzkaller0: entered promiscuous mode
[  392.914003][T12823] syzkaller0: entered allmulticast mode
[  393.302431][T12839] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2130'.
[  396.804193][T12833] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2128'.
[  396.813620][T12838] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2130'.
[  397.193802][T12856] netlink: 'syz.2.2137': attribute type 9 has an invalid length.
[  397.215644][T12856] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2137'.
[  398.351076][T12871] netlink: set zone limit has 8 unknown bytes
[  398.635913][T12879] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2133'.
[  398.727099][T12886] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2143'.
[  398.784790][T12886] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  398.817083][T12886] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  399.282450][T12893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2146'.
[  399.300970][T12893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2146'.
[  399.313381][T12893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2146'.
[  399.375536][T12893] netlink: 'syz.0.2146': attribute type 10 has an invalid length.
[  399.399094][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2146'.
[  399.795964][T12919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2152'.
[  400.228393][T12939] netlink: 'syz.0.2158': attribute type 21 has an invalid length.
[  400.303448][T12937] sctp: [Deprecated]: syz.2.2157 (pid 12937) Use of int in max_burst socket option deprecated.
[  400.303448][T12937] Use struct sctp_assoc_value instead
[  400.516176][T12947] netlink: 'syz.3.2161': attribute type 29 has an invalid length.
[  400.526086][T12947] netlink: 'syz.3.2161': attribute type 29 has an invalid length.
[  400.576575][T12947] netlink: 'syz.3.2161': attribute type 29 has an invalid length.
[  400.634265][T12947] team0: Port device team_slave_0 removed
[  400.879595][T12952] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  401.556820][T12979] netlink: 'syz.3.2170': attribute type 3 has an invalid length.
[  401.628136][T12984] netlink: 'syz.3.2170': attribute type 3 has an invalid length.
[  402.013508][T12987] __nla_validate_parse: 7 callbacks suppressed
[  402.013529][T12987] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2172'.
[  402.208735][T13005] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  402.231817][T13005] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  402.256051][T13005] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  402.309500][T13003] netlink: 'syz.3.2176': attribute type 21 has an invalid length.
[  402.354655][T13003] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2176'.
[  402.381136][T13005] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  402.412085][T13010] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  402.763910][T13024] netlink: 'syz.0.2182': attribute type 3 has an invalid length.
[  402.799531][T13024] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2182'.
[  403.276887][T13047] netlink: 'syz.1.2189': attribute type 29 has an invalid length.
[  403.356307][T13047] netlink: 'syz.1.2189': attribute type 29 has an invalid length.
[  404.005949][T13061] syzkaller0: entered promiscuous mode
[  404.019809][T13061] syzkaller0: entered allmulticast mode
[  404.308023][T13081] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.2198'.
[  404.328065][T13081] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.2198'.
[  406.338229][T13084] netlink: 'syz.2.2199': attribute type 10 has an invalid length.
[  406.356848][T13084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'.
[  406.366775][T13084] caif0: entered promiscuous mode
[  406.371844][T13084] caif0: entered allmulticast mode
[  406.384509][T13084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.540977][T13099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2203'.
[  406.551497][T13100] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  407.263536][T13118] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2209'.
[  407.303946][T13118] A link change request failed with some changes committed already. Interface b��Y��4��`Ҙ may have been left with an inconsistent configuration, please check.
[  407.407399][T13116] validate_nla: 1 callbacks suppressed
[  407.407441][T13116] netlink: 'syz.0.2208': attribute type 3 has an invalid length.
[  407.435009][T13116] netlink: 'syz.0.2208': attribute type 4 has an invalid length.
[  407.442953][T13116] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.2208'.
[  407.560630][T13131] netlink: 'syz.2.2212': attribute type 29 has an invalid length.
[  407.577126][T13131] netlink: 'syz.2.2212': attribute type 29 has an invalid length.
[  408.363124][T13156] netlink: 'syz.1.2219': attribute type 29 has an invalid length.
[  408.374136][T13156] netlink: 'syz.1.2219': attribute type 29 has an invalid length.
[  408.390482][T13156] netlink: 'syz.1.2219': attribute type 29 has an invalid length.
[  408.403331][T13156] netlink: 'syz.1.2219': attribute type 29 has an invalid length.
[  408.938994][T13178] netlink: 'syz.3.2225': attribute type 10 has an invalid length.
[  408.955860][T13178] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2225'.
[  409.583345][T13204] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2235'.
[  409.601144][T13204] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2235'.
[  409.622902][T13202] netlink: 'syz.1.2233': attribute type 2 has an invalid length.
[  409.631865][T13204] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2235'.
[  409.646453][T13204] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2235'.
[  409.658688][T13204] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2235'.
[  409.671344][T13202] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2233'.
[  409.682884][T13204] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2235'.
[  409.873871][T13212] ��: renamed from lo (while UP)
[  411.306847][T13260] tipc: Started in network mode
[  411.311804][T13260] tipc: Node identity b, cluster identity 73
[  411.334490][T13260] tipc: Node number set to 11
[  411.401338][T13262] syz.0.2252: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  411.457043][T13262] CPU: 1 PID: 13262 Comm: syz.0.2252 Not tainted syzkaller #0
[  411.464569][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  411.474654][T13262] Call Trace:
[  411.477944][T13262]  <TASK>
[  411.480886][T13262]  dump_stack_lvl+0x18c/0x250
[  411.485706][T13262]  ? show_regs_print_info+0x20/0x20
[  411.491006][T13262]  ? load_image+0x420/0x420
[  411.495554][T13262]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  411.502033][T13262]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  411.508554][T13262]  warn_alloc+0x246/0x340
[  411.512926][T13262]  ? stack_trace_save+0xaa/0x100
[  411.517903][T13262]  ? zone_watermark_ok_safe+0x230/0x230
[  411.523495][T13262]  ? kasan_set_track+0x5f/0x70
[  411.528334][T13262]  ? kasan_set_track+0x4e/0x70
[  411.533121][T13262]  ? __kasan_kmalloc+0x8f/0xa0
[  411.537908][T13262]  ? xsk_init_queue+0xad/0x100
[  411.542816][T13262]  ? xsk_setsockopt+0x4c9/0x750
[  411.547695][T13262]  ? do_sock_setsockopt+0x175/0x1a0
[  411.553071][T13262]  ? __x64_sys_setsockopt+0x182/0x200
[  411.558475][T13262]  __vmalloc_node_range+0x129/0x1320
[  411.563830][T13262]  ? free_vm_area+0x50/0x50
[  411.568379][T13262]  vmalloc_user+0x74/0x80
[  411.572737][T13262]  ? xskq_create+0xbf/0x170
[  411.577256][T13262]  xskq_create+0xbf/0x170
[  411.581610][T13262]  xsk_init_queue+0xad/0x100
[  411.586239][T13262]  xsk_setsockopt+0x4c9/0x750
[  411.591218][T13262]  ? xsk_poll+0x670/0x670
[  411.595625][T13262]  ? __fget_files+0x28/0x460
[  411.600279][T13262]  ? aa_sock_opt_perm+0x74/0x100
[  411.605268][T13262]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  411.610860][T13262]  ? security_socket_setsockopt+0x7e/0xa0
[  411.616633][T13262]  ? xsk_poll+0x670/0x670
[  411.620997][T13262]  do_sock_setsockopt+0x175/0x1a0
[  411.626040][T13262]  ? __fdget+0x180/0x210
[  411.630307][T13262]  __x64_sys_setsockopt+0x182/0x200
[  411.635541][T13262]  do_syscall_64+0x55/0xb0
[  411.640065][T13262]  ? clear_bhb_loop+0x40/0x90
[  411.644813][T13262]  ? clear_bhb_loop+0x40/0x90
[  411.649510][T13262]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  411.655421][T13262] RIP: 0033:0x7f008ab9e0d9
[  411.659855][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.679487][T13262] RSP: 002b:00007f008bb55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  411.688011][T13262] RAX: ffffffffffffffda RBX: 00007f008ae25fa0 RCX: 00007f008ab9e0d9
[  411.696009][T13262] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000029
[  411.704007][T13262] RBP: 00007f008ac35024 R08: 0000000000000004 R09: 0000000000000000
[  411.712010][T13262] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  411.720009][T13262] R13: 00007f008ae26038 R14: 00007f008ae25fa0 R15: 00007ffe52260998
[  411.728022][T13262]  </TASK>
[  411.784755][T13262] Mem-Info:
[  411.787928][T13262] active_anon:24255 inactive_anon:0 isolated_anon:0
[  411.787928][T13262]  active_file:17402 inactive_file:40084 isolated_file:0
[  411.787928][T13262]  unevictable:768 dirty:38 writeback:0
[  411.787928][T13262]  slab_reclaimable:10933 slab_unreclaimable:95566
[  411.787928][T13262]  mapped:33681 shmem:10995 pagetables:592
[  411.787928][T13262]  sec_pagetables:0 bounce:0
[  411.787928][T13262]  kernel_misc_reclaimable:0
[  411.787928][T13262]  free:1322750 free_pcp:7744 free_cma:0
[  411.862903][T13262] Node 0 active_anon:98120kB inactive_anon:0kB active_file:69608kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134924kB dirty:152kB writeback:0kB shmem:43444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10456kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no
[  411.915362][T13262] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  412.009440][T13262] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  412.074543][T13262] lowmem_reserve[]: 0 2521 2522 2522 2522
[  412.101922][T13262] Node 0 DMA32 free:1376140kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:101708kB inactive_anon:0kB active_file:69608kB inactive_file:159304kB unevictable:1536kB writepending:212kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:10288kB local_pcp:1756kB free_cma:0kB
[  412.156801][T13262] lowmem_reserve[]: 0 0 0 0 0
[  412.183457][T13262] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  412.225191][T13262] lowmem_reserve[]: 0 0 0 0 0
[  412.277277][T13262] Node 1 Normal free:3894460kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20380kB local_pcp:10432kB free_cma:0kB
[  412.325738][T13262] lowmem_reserve[]: 0 0 0 0 0
[  412.330781][T13262] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  412.354250][T13262] Node 0 DMA32: 2*4kB (UE) 542*8kB (UE) 283*16kB (UME) 696*32kB (UM) 417*64kB (UME) 232*128kB (UME) 130*256kB (UM) 40*512kB (UM) 28*1024kB (UM) 9*2048kB (UM) 289*4096kB (UME) = 1372136kB
[  412.377432][T13262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  412.390164][T13262] Node 1 Normal: 147*4kB (UME) 42*8kB (UME) 32*16kB (UME) 59*32kB (UME) 19*64kB (UME) 8*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894460kB
[  412.411813][T13262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.421868][T13262] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.431741][T13262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.442258][T13262] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.453202][T13262] 70634 total pagecache pages
[  412.458404][T13262] 0 pages in swap cache
[  412.462629][T13262] Free swap  = 124996kB
[  412.467317][T13262] Total swap = 124996kB
[  412.471524][T13262] 2097051 pages RAM
[  412.475897][T13262] 0 pages HighMem/MovableOnly
[  412.480717][T13262] 416958 pages reserved
[  412.486859][T13262] 0 pages cma reserved
[  412.575440][T13287] __nla_validate_parse: 68 callbacks suppressed
[  412.575477][T13287] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2258'.
[  414.369314][T13336] syzkaller1: tun_chr_ioctl cmd 1074025677
[  414.384307][T13336] syzkaller1: Linktype set failed because interface is up
[  414.401898][   T56] syzkaller1: tun_net_xmit 90
[  414.879082][T13353] delete_channel: no stack
[  415.398721][T13375] validate_nla: 5 callbacks suppressed
[  415.398731][T13375] netlink: 'syz.0.2279': attribute type 21 has an invalid length.
[  415.413515][T13375] IPv6: NLM_F_CREATE should be specified when creating new route
[  415.421767][T13375] IPv6: Can't replace route, no match found
[  415.472076][T13374] netlink: 'syz.0.2279': attribute type 10 has an invalid length.
[  415.623056][T13381] netlink: 'syz.0.2281': attribute type 6 has an invalid length.
[  415.653217][T13381] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2281'.
[  416.177404][T13389] delete_channel: no stack
[  418.790075][T13433] netlink: 'syz.1.2297': attribute type 10 has an invalid length.
[  418.799793][T13433] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  419.534303][T13454] netlink: 'syz.2.2300': attribute type 3 has an invalid length.
[  419.558921][T13454] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2300'.
[  420.950323][T13447] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2302'.
[  420.959679][T13447] bridge_slave_1: default FDB implementation only supports local addresses
[  421.646846][T13497] netlink: 'syz.3.2314': attribute type 29 has an invalid length.
[  421.684775][T13497] netlink: 'syz.3.2314': attribute type 29 has an invalid length.
[  421.705360][T13497] netlink: 'syz.3.2314': attribute type 29 has an invalid length.
[  421.735136][T13497] netlink: 'syz.3.2314': attribute type 29 has an invalid length.
[  421.764735][T13500] netlink: 'syz.0.2316': attribute type 10 has an invalid length.
[  421.772609][T13500] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2316'.
[  422.254873][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.265128][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.287022][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.313545][T13517] netlink: 'syz.0.2320': attribute type 21 has an invalid length.
[  422.336662][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.337494][T13517] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2320'.
[  422.357817][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  422.365831][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  423.014525][T10503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.166684][T10503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.118632][T10503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.206352][T10503] batman_adv: batadv0: Removing interface: netdevsim0
[  424.237414][T10503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.271299][T13558] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2332'.
[  424.414652][ T5783] Bluetooth: hci2: command tx timeout
[  424.439168][T13560] syzkaller0: entered promiscuous mode
[  424.482353][T13560] syzkaller0: entered allmulticast mode
[  426.490086][ T5783] Bluetooth: hci2: command tx timeout
[  427.066033][T13514] chnl_net:caif_netlink_parms(): no params data found
[  427.223396][T10503] tipc: Left network mode
[  427.621179][T13514] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.647613][T13514] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.685144][T13514] bridge_slave_0: entered allmulticast mode
[  427.692515][T13514] bridge_slave_0: entered promiscuous mode
[  427.739835][T13610] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2343'.
[  427.846593][T13608] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2343'.
[  427.996644][T13514] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.010331][T13514] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.033119][T13514] bridge_slave_1: entered allmulticast mode
[  428.066404][T13514] bridge_slave_1: entered promiscuous mode
[  428.218778][T13626] netlink: 'syz.0.2346': attribute type 11 has an invalid length.
[  428.248036][T13626] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2346'.
[  428.303153][T13514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.417975][T13514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.565556][ T5783] Bluetooth: hci2: command tx timeout
[  428.680408][T13514] team0: Port device team_slave_0 added
[  428.713323][T13514] team0: Port device team_slave_1 added
[  428.869200][T13514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.877405][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.906351][T13514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.938078][T13514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.945709][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.981192][T13514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.216404][T13514] hsr_slave_0: entered promiscuous mode
[  429.240888][T13514] hsr_slave_1: entered promiscuous mode
[  429.260586][T13514] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.274444][T13514] Cannot create hsr debugfs directory
[  429.432311][T13643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2351'.
[  429.467235][T13647] netlink: 'syz.3.2351': attribute type 6 has an invalid length.
[  429.494510][T13647] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2351'.
[  430.008120][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.032089][T10503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.041140][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.065701][T10503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.097319][T10503] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  430.109794][T10503] batman_adv: batadv0: Removing interface: veth0_vlan
[  430.162855][T10503] veth1_macvtap: left promiscuous mode
[  430.172116][T10503] veth0_macvtap: left promiscuous mode
[  430.184159][T10503] veth1_vlan: left promiscuous mode
[  430.205029][T10503] veth0_vlan: left promiscuous mode
[  430.522681][T13694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2359'.
[  430.644583][ T5783] Bluetooth: hci2: command tx timeout
[  431.079533][T10503] team0 (unregistering): Port device macvlan1 removed
[  431.658823][T10503] team0 (unregistering): Port device team_slave_1 removed
[  431.800631][T10503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.909885][T10503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.573955][T10503] bond0 (unregistering): (slave team0): Releasing backup interface
[  432.627168][T10503] bond0 (unregistering): Released all slaves
[  432.722684][T13690] netlink: 'syz.3.2357': attribute type 10 has an invalid length.
[  432.764815][T13690] team0: Device ipvlan1 failed to register rx_handler
[  432.813415][T13694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2359'.
[  433.671477][T13514] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  433.685037][T13514] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  433.722805][T13514] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  433.745155][T13514] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  433.920783][T13514] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.964046][T13514] 8021q: adding VLAN 0 to HW filter on device team0
[  433.996618][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.003797][ T8760] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.049066][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.056274][ T8759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.600090][T13514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.725452][T13514] veth0_vlan: entered promiscuous mode
[  434.761943][T13514] veth1_vlan: entered promiscuous mode
[  434.855322][T13775] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2371'.
[  434.867041][T13514] veth0_macvtap: entered promiscuous mode
[  434.897667][T13775] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2371'.
[  434.930768][T13775] tipc: Started in network mode
[  434.940898][T13775] tipc: Node identity b, cluster identity 57
[  434.965200][T13775] tipc: Node number set to 11
[  435.030991][T13514] veth1_macvtap: entered promiscuous mode
[  435.153053][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.193562][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.219948][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.231223][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.255442][T13514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.286170][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.314398][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.344445][T13514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.364620][T13514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.387098][T13514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.434723][T13514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.455968][T13514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.467561][T13514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.476520][T13514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.578383][T13803] syz.1.2375[13803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  435.578611][T13803] syz.1.2375[13803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  435.773053][ T8759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.793840][ T8759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.908780][ T4852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.947183][ T4852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.266202][T13838] can: request_module (can-proto-5) failed.
[  437.829952][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  437.844031][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  437.865176][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  437.884014][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  437.895569][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  437.905084][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  438.018978][ T8760] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.250077][ T8760] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.436873][ T8760] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.600212][T13872] syzkaller0: entered promiscuous mode
[  438.607853][T13872] syzkaller0: entered allmulticast mode
[  438.670094][ T8760] batman_adv: batadv0: Removing interface: netdevsim0
[  438.704337][ T8760] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.020833][ T5779] Bluetooth: hci0: command tx timeout
[  440.250227][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.258168][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  441.620312][T13855] chnl_net:caif_netlink_parms(): no params data found
[  441.768515][ T8760] tipc: Left network mode
[  442.084760][ T5779] Bluetooth: hci0: command tx timeout
[  442.871347][T13855] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.898850][T13855] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.914762][T13855] bridge_slave_0: entered allmulticast mode
[  442.935788][T13855] bridge_slave_0: entered promiscuous mode
[  443.887450][T13855] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.894770][T13855] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.902003][T13855] bridge_slave_1: entered allmulticast mode
[  443.910724][T13855] bridge_slave_1: entered promiscuous mode
[  444.044105][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.072465][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.171073][ T5779] Bluetooth: hci0: command tx timeout
[  444.242419][T13855] team0: Port device team_slave_0 added
[  444.288133][T13855] team0: Port device team_slave_1 added
[  444.363915][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.372370][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.399149][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.443757][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.493067][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.555816][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.069993][T13855] hsr_slave_0: entered promiscuous mode
[  445.152545][T13855] hsr_slave_1: entered promiscuous mode
[  445.165719][T13855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  445.183617][T13855] Cannot create hsr debugfs directory
[  446.187194][T13970] netlink: 'syz.3.2399': attribute type 3 has an invalid length.
[  446.214492][T13970] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2399'.
[  446.255717][ T5779] Bluetooth: hci0: command tx timeout
[  446.265223][T13968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2398'.
[  446.414260][T13968] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.712257][T13968] bridge_slave_0 (unregistering): left allmulticast mode
[  446.741879][T13968] bridge_slave_0 (unregistering): left promiscuous mode
[  446.773455][T13968] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.457869][ T5779] Bluetooth: hci3: command 0x0406 tx timeout
[  450.229198][ T8760] bond0: (slave wlan1): Releasing backup interface
[  450.272091][T13855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  450.287474][T13855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  450.327744][T13855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  450.354774][T13855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  450.577432][T14026] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.2410'.
[  450.597724][ T8760] hsr_slave_0: left promiscuous mode
[  450.615624][ T8760] hsr_slave_1: left promiscuous mode
[  450.627906][ T8760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  450.636792][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.659803][ T8760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.673356][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.688938][ T8760] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  450.709971][ T8760] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  450.713344][T14031] syz.1.2411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  450.722231][ T8760] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  450.727924][T14031] ,cpuset=
[  450.738775][ T8760] batman_adv: batadv0: Removing interface: veth0_vlan
[  450.764519][T14031] syz1,mems_allowed=0-1
[  450.773992][T14031] CPU: 1 PID: 14031 Comm: syz.1.2411 Not tainted syzkaller #0
[  450.781481][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  450.791597][T14031] Call Trace:
[  450.794877][T14031]  <TASK>
[  450.797802][T14031]  dump_stack_lvl+0x18c/0x250
[  450.802482][T14031]  ? show_regs_print_info+0x20/0x20
[  450.807676][T14031]  ? load_image+0x420/0x420
[  450.812182][T14031]  ? __rcu_read_unlock+0x7c/0xd0
[  450.817118][T14031]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  450.823528][T14031]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  450.830027][T14031]  warn_alloc+0x246/0x340
[  450.834356][T14031]  ? stack_trace_save+0xaa/0x100
[  450.839296][T14031]  ? zone_watermark_ok_safe+0x230/0x230
[  450.844843][T14031]  ? kasan_set_track+0x5f/0x70
[  450.849601][T14031]  ? kasan_set_track+0x4e/0x70
[  450.854364][T14031]  ? __kasan_kmalloc+0x8f/0xa0
[  450.859120][T14031]  ? xsk_init_queue+0xad/0x100
[  450.863883][T14031]  ? xsk_setsockopt+0x4c9/0x750
[  450.868763][T14031]  ? do_sock_setsockopt+0x175/0x1a0
[  450.873957][T14031]  ? __x64_sys_setsockopt+0x182/0x200
[  450.879328][T14031]  __vmalloc_node_range+0x129/0x1320
[  450.884630][T14031]  ? free_vm_area+0x50/0x50
[  450.889134][T14031]  vmalloc_user+0x74/0x80
[  450.893461][T14031]  ? xskq_create+0xbf/0x170
[  450.897956][T14031]  xskq_create+0xbf/0x170
[  450.902279][T14031]  xsk_init_queue+0xad/0x100
[  450.906869][T14031]  xsk_setsockopt+0x4c9/0x750
[  450.911545][T14031]  ? xsk_poll+0x670/0x670
[  450.915874][T14031]  ? __fget_files+0x28/0x460
[  450.920460][T14031]  ? aa_sock_opt_perm+0x74/0x100
[  450.925395][T14031]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  450.930939][T14031]  ? security_socket_setsockopt+0x7e/0xa0
[  450.936657][T14031]  ? xsk_poll+0x670/0x670
[  450.940988][T14031]  do_sock_setsockopt+0x175/0x1a0
[  450.946009][T14031]  ? __fdget+0x180/0x210
[  450.950250][T14031]  __x64_sys_setsockopt+0x182/0x200
[  450.955446][T14031]  do_syscall_64+0x55/0xb0
[  450.959856][T14031]  ? clear_bhb_loop+0x40/0x90
[  450.964523][T14031]  ? clear_bhb_loop+0x40/0x90
[  450.969194][T14031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  450.975079][T14031] RIP: 0033:0x7fd78b99e0d9
[  450.979488][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.999089][T14031] RSP: 002b:00007fd78c94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  451.007500][T14031] RAX: ffffffffffffffda RBX: 00007fd78bc25fa0 RCX: 00007fd78b99e0d9
[  451.015467][T14031] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  451.023430][T14031] RBP: 00007fd78ba35024 R08: 0000000000000004 R09: 0000000000000000
[  451.031394][T14031] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  451.039359][T14031] R13: 00007fd78bc26038 R14: 00007fd78bc25fa0 R15: 00007ffc00260a08
[  451.047336][T14031]  </TASK>
[  451.067363][T14031] Mem-Info:
[  451.073206][ T8760] veth1_macvtap: left promiscuous mode
[  451.076684][T14031] active_anon:14856 inactive_anon:0 isolated_anon:0
[  451.076684][T14031]  active_file:18260 inactive_file:40103 isolated_file:0
[  451.076684][T14031]  unevictable:768 dirty:59 writeback:0
[  451.076684][T14031]  slab_reclaimable:11101 slab_unreclaimable:94598
[  451.076684][T14031]  mapped:24913 shmem:1361 pagetables:593
[  451.076684][T14031]  sec_pagetables:0 bounce:0
[  451.076684][T14031]  kernel_misc_reclaimable:0
[  451.076684][T14031]  free:1331957 free_pcp:6914 free_cma:0
[  451.123972][ T8760] veth0_macvtap: left promiscuous mode
[  451.124196][ T8760] veth1_vlan: left promiscuous mode
[  451.124297][ T8760] veth0_vlan: left promiscuous mode
[  451.150403][T14031] Node 0 active_anon:59356kB inactive_anon:0kB active_file:73040kB inactive_file:160212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99604kB dirty:264kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10680kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no
[  451.191840][T14031] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  451.227989][T14031] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  451.259979][T14031] lowmem_reserve[]: 0 2521 2522 2522 2522
[  451.267038][T14031] Node 0 DMA32 free:1418008kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:59216kB inactive_anon:0kB active_file:73040kB inactive_file:159380kB unevictable:1536kB writepending:264kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:7172kB local_pcp:2060kB free_cma:0kB
[  451.308685][T14031] lowmem_reserve[]: 0 0 0 0 0
[  451.313478][T14031] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  451.345035][T14031] lowmem_reserve[]: 0 0 0 0 0
[  451.349889][T14031] Node 1 Normal free:3894460kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20420kB local_pcp:10472kB free_cma:0kB
[  451.385142][T14031] lowmem_reserve[]: 0 0 0 0 0
[  451.389945][T14031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  451.410461][T14031] Node 0 DMA32: 580*4kB (ME) 877*8kB (ME) 930*16kB (UME) 512*32kB (UME) 364*64kB (UME) 321*128kB (UME) 137*256kB (UME) 56*512kB (UME) 34*1024kB (UME) 11*2048kB (UME) 291*4096kB (UM) = 1418008kB
[  451.434265][T14031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  451.449958][T14031] Node 1 Normal: 147*4kB (UME) 42*8kB (UME) 32*16kB (UME) 59*32kB (UME) 19*64kB (UME) 8*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894460kB
[  451.471881][T14031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  451.481576][T14031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  451.491050][T14031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  451.512057][T14031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  451.530162][T14031] 59724 total pagecache pages
[  451.536165][T14031] 0 pages in swap cache
[  451.540366][T14031] Free swap  = 124996kB
[  451.548869][T14031] Total swap = 124996kB
[  451.553079][T14031] 2097051 pages RAM
[  451.557236][T14031] 0 pages HighMem/MovableOnly
[  451.561942][T14031] 416958 pages reserved
[  451.566315][T14031] 0 pages cma reserved
[  452.031218][ T8760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.079275][ T8760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.127298][ T8760] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  452.383355][ T8760] bond0 (unregistering): Released all slaves
[  452.420221][T14015] netlink: 'syz.3.2408': attribute type 17 has an invalid length.
[  452.428319][T14015] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2408'.
[  452.628937][T13855] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.652016][T14049] netlink: 'syz.2.2413': attribute type 21 has an invalid length.
[  452.730237][T13855] 8021q: adding VLAN 0 to HW filter on device team0
[  452.769802][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.777857][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.836032][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.843209][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.713251][T13855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.912753][T14090] netlink: 'syz.2.2420': attribute type 27 has an invalid length.
[  453.959090][T14090] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2420'.
[  454.437611][T14096] netlink: 'syz.3.2421': attribute type 2 has an invalid length.
[  454.465154][T14096] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2421'.
[  454.494570][T14091] tun1: tun_chr_ioctl cmd 1074025675
[  454.500054][T14091] tun1: persist disabled
[  458.867472][T14109] netlink: 'syz.1.2423': attribute type 6 has an invalid length.
[  458.875691][T14109] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2423'.
[  459.293944][T13855] veth0_vlan: entered promiscuous mode
[  459.342214][T13855] veth1_vlan: entered promiscuous mode
[  459.481555][T13855] veth0_macvtap: entered promiscuous mode
[  459.591562][T13855] veth1_macvtap: entered promiscuous mode
[  459.688104][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.699728][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.709771][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.720442][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.732451][T13855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.794247][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.820981][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.841544][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.852409][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.864083][T13855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.935762][T13855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.951256][T13855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.962428][T13855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.977578][T13855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.249429][T14174] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2434'.
[  460.281311][T10503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.294039][T10503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.372055][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.429354][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.682730][T14178] netlink: 'syz.0.2382': attribute type 7 has an invalid length.
[  460.776218][T14183] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2435'.
[  460.849239][T14183] openvswitch: netlink: Flow actions attr not present in new flow.
[  461.359476][T14191] netlink: 'syz.2.2439': attribute type 10 has an invalid length.
[  461.396667][T14191] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2439'.
[  462.032738][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  462.052037][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  462.061036][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  462.083976][ T8760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.095679][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  462.113067][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  462.120617][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  462.352508][ T8760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.593804][ T8760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.674171][T14215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  462.682481][T14215] IPv6: NLM_F_CREATE should be set when creating new route
[  462.690610][T14215] IPv6: NLM_F_CREATE should be set when creating new route
[  462.698159][T14215] IPv6: NLM_F_CREATE should be set when creating new route
[  462.874122][ T8760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.259454][T14202] chnl_net:caif_netlink_parms(): no params data found
[  463.582298][T14202] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.627719][T14202] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.637481][T14202] bridge_slave_0: entered allmulticast mode
[  463.645272][T14202] bridge_slave_0: entered promiscuous mode
[  463.828129][ T8760] ip6gretap0 (unregistering): left allmulticast mode
[  463.848139][ T8760] ip6gretap0 (unregistering): left promiscuous mode
[  463.875963][ T8760] ��
: port 1(ip6gretap0) entered disabled state
[  463.933380][T14202] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.966334][T14202] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.987116][T14202] bridge_slave_1: entered allmulticast mode
[  464.007009][T14202] bridge_slave_1: entered promiscuous mode
[  464.077022][T14249] netlink: 'syz.0.2452': attribute type 21 has an invalid length.
[  464.114594][T14249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2452'.
[  464.164957][ T5779] Bluetooth: hci1: command tx timeout
[  464.371286][T14202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.825541][T14202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.971047][T14202] team0: Port device team_slave_0 added
[  465.027684][T14202] team0: Port device team_slave_1 added
[  465.236783][T14202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.256232][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.327657][T14202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.472961][T14202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.504517][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.570496][T14202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.089155][T14202] hsr_slave_0: entered promiscuous mode
[  466.133514][T14202] hsr_slave_1: entered promiscuous mode
[  466.248346][ T5779] Bluetooth: hci1: command tx timeout
[  466.355183][T14296] syz.2.2459: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  466.397454][T14296] CPU: 0 PID: 14296 Comm: syz.2.2459 Not tainted syzkaller #0
[  466.405092][T14296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.415178][T14296] Call Trace:
[  466.418480][T14296]  <TASK>
[  466.421438][T14296]  dump_stack_lvl+0x18c/0x250
[  466.426130][T14296]  ? show_regs_print_info+0x20/0x20
[  466.431332][T14296]  ? load_image+0x420/0x420
[  466.435839][T14296]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  466.442263][T14296]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  466.448765][T14296]  warn_alloc+0x246/0x340
[  466.453097][T14296]  ? stack_trace_save+0xaa/0x100
[  466.458050][T14296]  ? zone_watermark_ok_safe+0x230/0x230
[  466.463598][T14296]  ? kasan_set_track+0x5f/0x70
[  466.468363][T14296]  ? kasan_set_track+0x4e/0x70
[  466.473127][T14296]  ? __kasan_kmalloc+0x8f/0xa0
[  466.477896][T14296]  ? xsk_init_queue+0xad/0x100
[  466.482665][T14296]  ? xsk_setsockopt+0x4c9/0x750
[  466.487529][T14296]  ? do_sock_setsockopt+0x175/0x1a0
[  466.492733][T14296]  ? __x64_sys_setsockopt+0x182/0x200
[  466.498110][T14296]  __vmalloc_node_range+0x129/0x1320
[  466.503430][T14296]  ? free_vm_area+0x50/0x50
[  466.507945][T14296]  vmalloc_user+0x74/0x80
[  466.512277][T14296]  ? xskq_create+0xbf/0x170
[  466.516777][T14296]  xskq_create+0xbf/0x170
[  466.521105][T14296]  xsk_init_queue+0xad/0x100
[  466.525711][T14296]  xsk_setsockopt+0x4c9/0x750
[  466.530429][T14296]  ? xsk_poll+0x670/0x670
[  466.534782][T14296]  ? __fget_files+0x28/0x460
[  466.539376][T14296]  ? aa_sock_opt_perm+0x74/0x100
[  466.544340][T14296]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  466.550160][T14296]  ? security_socket_setsockopt+0x7e/0xa0
[  466.555907][T14296]  ? xsk_poll+0x670/0x670
[  466.560281][T14296]  do_sock_setsockopt+0x175/0x1a0
[  466.565323][T14296]  ? __fdget+0x180/0x210
[  466.569576][T14296]  __x64_sys_setsockopt+0x182/0x200
[  466.574786][T14296]  do_syscall_64+0x55/0xb0
[  466.579207][T14296]  ? clear_bhb_loop+0x40/0x90
[  466.583882][T14296]  ? clear_bhb_loop+0x40/0x90
[  466.588558][T14296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  466.594494][T14296] RIP: 0033:0x7f8a5579e0d9
[  466.598912][T14296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.618630][T14296] RSP: 002b:00007f8a56714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  466.627044][T14296] RAX: ffffffffffffffda RBX: 00007f8a55a25fa0 RCX: 00007f8a5579e0d9
[  466.635052][T14296] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  466.643043][T14296] RBP: 00007f8a55835024 R08: 0000000000000004 R09: 0000000000000000
[  466.651051][T14296] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  466.659854][T14296] R13: 00007f8a55a26038 R14: 00007f8a55a25fa0 R15: 00007ffe5a2c5a38
[  466.667851][T14296]  </TASK>
[  466.789223][T14296] Mem-Info:
[  466.792404][T14296] active_anon:21898 inactive_anon:0 isolated_anon:0
[  466.792404][T14296]  active_file:18260 inactive_file:40112 isolated_file:0
[  466.792404][T14296]  unevictable:768 dirty:76 writeback:0
[  466.792404][T14296]  slab_reclaimable:10766 slab_unreclaimable:93573
[  466.792404][T14296]  mapped:28668 shmem:8526 pagetables:581
[  466.792404][T14296]  sec_pagetables:0 bounce:0
[  466.792404][T14296]  kernel_misc_reclaimable:0
[  466.792404][T14296]  free:1326420 free_pcp:7062 free_cma:0
[  466.909228][T14296] Node 0 active_anon:77592kB inactive_anon:0kB active_file:73040kB inactive_file:160248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116372kB dirty:304kB writeback:0kB shmem:22468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10676kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no
[  466.957104][T14296] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  466.993844][T14296] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  467.023695][T14296] lowmem_reserve[]: 0 2521 2522 2522 2522
[  467.042787][T14296] Node 0 DMA32 free:1394288kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:79252kB inactive_anon:0kB active_file:73040kB inactive_file:159416kB unevictable:1536kB writepending:300kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:17556kB local_pcp:504kB free_cma:0kB
[  467.166562][T14296] lowmem_reserve[]: 0 0 0 0 0
[  467.185625][T14296] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  467.252180][T14296] lowmem_reserve[]: 0 0 0 0 0
[  467.280919][T14296] Node 1 Normal free:3894460kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20428kB local_pcp:9948kB free_cma:0kB
[  467.351722][T14296] lowmem_reserve[]: 0 0 0 0 0
[  467.369718][T14296] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  467.461344][T14296] Node 0 DMA32: 1*4kB (M) 264*8kB (UME) 950*16kB (UME) 693*32kB (UME) 404*64kB (UME) 345*128kB (UME) 175*256kB (UME) 47*512kB (UME) 11*1024kB (UME) 6*2048kB (UME) 291*4096kB (UM) = 1393860kB
[  467.556588][T14296] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  467.604054][T14296] Node 1 Normal: 147*4kB (UME) 42*8kB (UME) 32*16kB (UME) 59*32kB (UME) 19*64kB (UME) 8*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894460kB
[  467.671488][T14296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  467.707178][T14296] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  467.734809][T14296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  467.750451][T14314] syzkaller0: entered promiscuous mode
[  467.756255][T14314] syzkaller0: entered allmulticast mode
[  467.763095][T14296] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  467.783813][T14296] 67488 total pagecache pages
[  467.791249][T14296] 0 pages in swap cache
[  467.824661][T14296] Free swap  = 124996kB
[  467.828896][T14296] Total swap = 124996kB
[  467.833163][T14296] 2097051 pages RAM
[  467.844915][T14296] 0 pages HighMem/MovableOnly
[  467.860222][T14296] 416958 pages reserved
[  467.870709][T14296] 0 pages cma reserved
[  468.327586][ T5779] Bluetooth: hci1: command tx timeout
[  470.077930][T14323] netlink: 'syz.2.2465': attribute type 21 has an invalid length.
[  470.102393][ T8760] hsr_slave_0: left promiscuous mode
[  470.108779][ T8760] hsr_slave_1: left promiscuous mode
[  470.142057][ T8760] veth1_macvtap: left allmulticast mode
[  470.147949][ T8760] veth1_macvtap: left promiscuous mode
[  470.157214][ T8760] veth0_macvtap: left promiscuous mode
[  470.414724][ T5779] Bluetooth: hci1: command tx timeout
[  470.823080][ T8760] team_slave_1 (unregistering): left promiscuous mode
[  470.830229][ T8760] team_slave_1 (unregistering): left allmulticast mode
[  470.842754][ T8760] team0 (unregistering): Port device team_slave_1 removed
[  470.887771][ T8760] team_slave_0 (unregistering): left promiscuous mode
[  470.894810][ T8760] team_slave_0 (unregistering): left allmulticast mode
[  470.904018][ T8760] team0 (unregistering): Port device team_slave_0 removed
[  471.301925][T14331] netlink: 'syz.3.2467': attribute type 17 has an invalid length.
[  471.312738][T14331] netlink: 'syz.3.2467': attribute type 16 has an invalid length.
[  471.322261][T14331] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2467'.
[  471.484511][T14341] netlink: 'syz.0.2471': attribute type 10 has an invalid length.
[  471.515920][T14341] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2471'.
[  471.636100][T14202] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  471.685854][T14202] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  471.727008][T14202] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  471.792577][T14202] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  472.027458][T14362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2476'.
[  472.044291][T14202] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.102950][T14202] 8021q: adding VLAN 0 to HW filter on device team0
[  472.150271][T10505] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.157508][T10505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.197964][T10505] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.205160][T10505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.520849][T14395] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.2482'.
[  472.693423][T14398] syzkaller0: entered promiscuous mode
[  472.725778][T14398] syzkaller0: entered allmulticast mode
[  472.814985][T14202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.924860][T14419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  474.932213][T14419] IPv6: NLM_F_CREATE should be set when creating new route
[  474.939558][T14419] IPv6: NLM_F_CREATE should be set when creating new route
[  474.946850][T14419] IPv6: NLM_F_CREATE should be set when creating new route
[  474.958910][T14429] syzkaller1: tun_chr_ioctl cmd 1074025677
[  474.965259][T14429] syzkaller1: linktype set to 769
[  475.091270][T14202] veth0_vlan: entered promiscuous mode
[  475.149134][T14202] veth1_vlan: entered promiscuous mode
[  475.175009][T14456] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2491'.
[  475.211049][T14457] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2490'.
[  475.251157][T14202] veth0_macvtap: entered promiscuous mode
[  475.288970][T14202] veth1_macvtap: entered promiscuous mode
[  475.367713][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.404175][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.441892][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.471330][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.488357][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.516820][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.553043][T14202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.620647][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.671028][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.693749][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.725005][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.753998][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.816529][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.876716][T14202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.022048][T14202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.036078][T14202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.049814][T14202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.061945][T14202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.281329][ T4852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.321625][ T4852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.443142][ T8759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.471437][ T8759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.618376][T14483] netlink: 'syz.0.2495': attribute type 10 has an invalid length.
[  476.692370][T14483] geneve0: entered promiscuous mode
[  476.753545][T14483] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  476.776682][T14488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2437'.
[  477.230183][T14508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2501'.
[  477.360038][T14512] netlink: 'syz.2.2504': attribute type 10 has an invalid length.
[  477.595069][T14512] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.630073][T14512] bridge_slave_1: left allmulticast mode
[  477.657991][T14512] bridge_slave_1: left promiscuous mode
[  477.672268][T14512] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.823079][T14512] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  477.970757][T14525] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2506'.
[  479.776504][T14563] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2518'.
[  480.144700][T14574] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2519'.
[  480.197096][T14573] netlink: 'syz.3.2521': attribute type 10 has an invalid length.
[  480.237286][T14573] team0: Device hsr_slave_0 failed to register rx_handler
[  480.985121][T14586] aaaaaaaaaaaaaaa: entered promiscuous mode
[  481.082409][T14589] netlink: 'syz.0.2525': attribute type 21 has an invalid length.
[  481.224993][T14589] netlink: 'syz.0.2525': attribute type 6 has an invalid length.
[  481.349296][T14589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2525'.
[  482.082555][T14589] netlink: 'syz.0.2525': attribute type 10 has an invalid length.
[  482.242323][T14589] team0: Port device virt_wifi0 added
[  482.916479][T14625] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2534'.
[  482.956271][T14625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.252578][T14640] netlink: 'syz.2.2539': attribute type 41 has an invalid length.
[  483.357855][T14638] syzkaller0: entered promiscuous mode
[  483.363456][T14638] syzkaller0: entered allmulticast mode
[  483.426469][T14640] netlink: 'syz.2.2539': attribute type 41 has an invalid length.
[  487.078551][T14673] netlink: 'syz.2.2547': attribute type 2 has an invalid length.
[  487.097519][T14673] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[  487.109731][T14673] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2547'.
[  487.459909][T14685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  487.572842][T14687] netlink: 'syz.2.2552': attribute type 21 has an invalid length.
[  488.413704][T14697] netlink: 'syz.3.2555': attribute type 17 has an invalid length.
[  488.424211][T14697] netlink: 'syz.3.2555': attribute type 16 has an invalid length.
[  488.436151][T14697] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2555'.
[  490.325296][T14704] netlink: 'syz.0.2558': attribute type 39 has an invalid length.
[  490.765229][T14717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2561'.
[  490.831269][T14717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2561'.
[  491.033895][T14720] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2564'.
[  494.132726][T14787] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2587'.
[  494.443521][T14801] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2591'.
[  494.466216][T14801] netlink: 6260 bytes leftover after parsing attributes in process `syz.0.2591'.
[  494.477455][T14801] netlink: 65 bytes leftover after parsing attributes in process `syz.0.2591'.
[  494.731604][T14817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2597'.
[  494.751523][T14817] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2597'.
[  494.769798][T14817] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2597'.
[  494.779312][T14817] openvswitch: netlink: Flow actions attr not present in new flow.
[  495.263863][T14841] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2603'.
[  495.301565][T14843] netlink: 'syz.1.2602': attribute type 17 has an invalid length.
[  495.309932][T14841] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2603'.
[  495.351628][T14843] netlink: 'syz.1.2602': attribute type 16 has an invalid length.
[  495.414507][T14843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2602'.
[  495.484257][T14850] netlink: 'syz.0.2606': attribute type 21 has an invalid length.
[  498.043177][T14902] netlink: 'syz.2.2617': attribute type 10 has an invalid length.
[  498.479517][T14908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  498.487370][T14908] IPv6: NLM_F_CREATE should be set when creating new route
[  498.494909][T14908] IPv6: NLM_F_CREATE should be set when creating new route
[  498.502232][T14908] IPv6: NLM_F_CREATE should be set when creating new route
[  498.556779][T14909] syzkaller0: entered promiscuous mode
[  500.358422][T14916] netlink: 'syz.2.2621': attribute type 39 has an invalid length.
[  500.967588][T14942] netlink: 'syz.2.2630': attribute type 10 has an invalid length.
[  501.333714][T14955] __nla_validate_parse: 8 callbacks suppressed
[  501.333754][T14955] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2635'.
[  501.355787][T14955] netlink: 6260 bytes leftover after parsing attributes in process `syz.1.2635'.
[  501.377297][T14955] netlink: 65 bytes leftover after parsing attributes in process `syz.1.2635'.
[  501.411323][T14957] netlink: 'syz.0.2636': attribute type 10 has an invalid length.
[  501.419647][T14957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2636'.
[  501.438345][T14957] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  501.453393][T14957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  501.686908][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.693359][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  501.755831][T14971] netlink: 'syz.0.2639': attribute type 10 has an invalid length.
[  501.763821][T14971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'.
[  501.892623][T14971] team0: Port device virt_wifi0 removed
[  501.907527][T14971] batman_adv: batadv0: Adding interface: virt_wifi0
[  501.914241][T14971] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.940633][T14971] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  501.955796][T14975] netlink: 'syz.2.2640': attribute type 15 has an invalid length.
[  501.964238][T14975] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.2640'.
[  502.851933][T15006] netlink: 'syz.2.2650': attribute type 10 has an invalid length.
[  502.867733][T15006] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.2650'.
[  502.893183][T15008] syzkaller0: entered promiscuous mode
[  502.914656][T15008] syzkaller0: entered allmulticast mode
[  504.453587][T15033] netlink: 'syz.0.2657': attribute type 1 has an invalid length.
[  504.463121][T15033] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2657'.
[  504.974537][T15017] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2653'.
[  504.983816][T15017] netlink: 6260 bytes leftover after parsing attributes in process `syz.2.2653'.
[  505.172156][T15038] netlink: 'syz.0.2659': attribute type 10 has an invalid length.
[  505.287895][T15038] team0: Port device wlan1 added
[  505.453979][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  505.699376][T15056] netlink: 'syz.1.2664': attribute type 30 has an invalid length.
[  506.061859][T15072] netlink: 'syz.1.2668': attribute type 7 has an invalid length.
[  506.378264][T15081] veth1_to_bond: entered allmulticast mode
[  506.675686][T15102] __nla_validate_parse: 7 callbacks suppressed
[  506.675703][T15102] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2675'.
[  507.602965][T15144] netlink: 'syz.3.2690': attribute type 29 has an invalid length.
[  507.637818][T15144] netlink: 'syz.3.2690': attribute type 29 has an invalid length.
[  507.670172][T15145] netlink: 'syz.3.2690': attribute type 29 has an invalid length.
[  507.690100][T15144] netlink: 'syz.3.2690': attribute type 29 has an invalid length.
[  507.717323][T15144] netlink: 'syz.3.2690': attribute type 29 has an invalid length.
[  508.037407][T15151] netlink: 'syz.1.2692': attribute type 27 has an invalid length.
[  508.078438][T15151] netlink: 'syz.1.2692': attribute type 3 has an invalid length.
[  508.317822][T15155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2694'.
[  508.358638][T15155] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2694'.
[  508.589425][T15165] netlink: 'syz.0.2699': attribute type 10 has an invalid length.
[  508.602138][T15165] syz_tun: entered promiscuous mode
[  508.648308][T15165] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  508.684007][T15168] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2700'.
[  508.945257][T15179] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2704'.
[  509.013710][T15170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2701'.
[  509.052735][T15185] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2704'.
[  509.152871][T15182] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2705'.
[  511.796272][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2717'.
[  512.828605][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2717'.
[  513.365946][T15258] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2724'.
[  513.389675][T15266] validate_nla: 2 callbacks suppressed
[  513.389692][T15266] netlink: 'syz.0.2726': attribute type 10 has an invalid length.
[  513.486811][T15266] 8021q: adding VLAN 0 to HW filter on device team0
[  513.598428][T15266] bond0: (slave team0): Enslaving as an active interface with an up link
[  513.654489][T15271] netlink: 'syz.0.2726': attribute type 27 has an invalid length.
[  513.786060][T15282] netlink: 'syz.2.2730': attribute type 21 has an invalid length.
[  513.793930][T15282] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2730'.
[  513.811878][T15282] netlink: 'syz.2.2730': attribute type 4 has an invalid length.
[  514.600872][T15310] netlink: 'syz.1.2737': attribute type 3 has an invalid length.
[  514.615572][T15310] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2737'.
[  514.726073][T15306] b��Y��4��`Ҙ: renamed from lo (while UP)
[  514.932867][T15314] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2740'.
[  514.962746][T15314] A link change request failed with some changes committed already. Interface b��Y��4��`Ҙ may have been left with an inconsistent configuration, please check.
[  515.390981][T15323] netlink: 'syz.1.2744': attribute type 2 has an invalid length.
[  515.414658][T15323] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.2744'.
[  515.841935][T15335] IPv6: Can't replace route, no match found
[  517.140595][T15350] netlink: 185272 bytes leftover after parsing attributes in process `syz.1.2748'.
[  517.174117][T15350] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  517.337398][T15353] netlink: 'syz.3.2749': attribute type 8 has an invalid length.
[  517.357657][T15353] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2749'.
[  517.592263][T15359] IPv6: Can't replace route, no match found
[  519.694464][T15412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2766'.
[  519.747329][T15412] netlink: del zone limit has 4 unknown bytes
[  521.298829][T15439] netlink: 'syz.2.2773': attribute type 39 has an invalid length.
[  522.392255][T15464] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2783'.
[  522.813687][T15473] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2787'.
[  523.065106][T15475] netlink: 'syz.0.2788': attribute type 41 has an invalid length.
[  524.646648][T15503] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2796'.
[  524.672344][T15503] netlink: zone id is out of range
[  524.684693][T15503] netlink: zone id is out of range
[  524.690072][T15503] netlink: zone id is out of range
[  524.714666][T15503] netlink: zone id is out of range
[  524.720217][T15503] netlink: zone id is out of range
[  524.745033][T15503] netlink: zone id is out of range
[  524.750450][T15503] netlink: zone id is out of range
[  524.775273][T15503] netlink: zone id is out of range
[  524.780694][T15503] netlink: zone id is out of range
[  524.804891][T15503] netlink: zone id is out of range
[  526.264050][T15539] netlink: 'syz.1.2808': attribute type 21 has an invalid length.
[  526.926426][T15562] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2815'.
[  527.087405][T15562] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2815'.
[  528.340130][T15584] netlink: 'syz.0.2820': attribute type 10 has an invalid length.
[  528.384537][T15584] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2820'.
[  528.670597][T15584] batman_adv: batadv0: Removing interface: virt_wifi0
[  529.288898][T15602] netlink: 'syz.2.2824': attribute type 19 has an invalid length.
[  529.423242][T15604] netlink: 'syz.2.2824': attribute type 2 has an invalid length.
[  529.495200][T15604] netlink: 17259 bytes leftover after parsing attributes in process `syz.2.2824'.
[  530.005751][T15612] syz.1.2828[15612] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  530.005928][T15612] syz.1.2828[15612] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  530.660263][T15621] syzkaller0: entered promiscuous mode
[  530.811354][T15621] syzkaller0: entered allmulticast mode
[  531.370337][T15633] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2832'.
[  532.605090][T15652] netlink: 'syz.0.2836': attribute type 10 has an invalid length.
[  532.613033][T15652] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2836'.
[  537.151621][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 62
[  537.215922][T15701] netlink: 'syz.3.2849': attribute type 2 has an invalid length.
[  537.265217][T15701] netlink: 'syz.3.2849': attribute type 4 has an invalid length.
[  537.273196][T15701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2849'.
[  537.623293][T15706] netlink: 'syz.0.2850': attribute type 1 has an invalid length.
[  537.666184][T15706] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2850'.
[  539.050955][T15728] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2855'.
[  539.873615][T15734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.664030][T15734] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.671833][T15734] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.715100][T15734] bridge0: entered allmulticast mode
[  544.669252][T15785] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.2869'.
[  544.725341][T15762] Bluetooth: hci2: command 0x0406 tx timeout
[  544.978844][T15791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.018269][T15791] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.031196][T15791] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.061721][T15791] bridge0: entered allmulticast mode
[  548.449588][T15762] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  548.459792][T15762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  548.468540][T15762] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  548.486250][T15762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  548.499411][T15762] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  548.507270][T15762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  549.197266][T15827] chnl_net:caif_netlink_parms(): no params data found
[  549.450576][T15851] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2886'.
[  549.608146][T15827] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.623350][T15827] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.651445][T15827] bridge_slave_0: entered allmulticast mode
[  549.672357][T15827] bridge_slave_0: entered promiscuous mode
[  549.697517][T15827] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.712316][T15827] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.720436][T15827] bridge_slave_1: entered allmulticast mode
[  549.736802][T15827] bridge_slave_1: entered promiscuous mode
[  549.840524][T15827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.879979][T15827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.108842][T15827] team0: Port device team_slave_0 added
[  550.125236][T15827] team0: Port device team_slave_1 added
[  550.219271][T15827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.226883][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.284449][T15827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.312983][T15827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.329625][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.409737][T15827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.573781][ T5779] Bluetooth: hci4: command tx timeout
[  550.590603][T15827] hsr_slave_0: entered promiscuous mode
[  550.598865][T15827] hsr_slave_1: entered promiscuous mode
[  550.605523][T15827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  550.613134][T15827] Cannot create hsr debugfs directory
[  550.741555][T15884] netlink: 'syz.1.2895': attribute type 3 has an invalid length.
[  550.755459][T15884] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2895'.
[  551.198341][T15900] netlink: 142592 bytes leftover after parsing attributes in process `syz.0.2898'.
[  551.237352][T15900] netlink: 'syz.0.2898': attribute type 3 has an invalid length.
[  551.252707][T15827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  551.260499][T15900] netlink: 'syz.0.2898': attribute type 16 has an invalid length.
[  551.274513][T15900] netlink: 'syz.0.2898': attribute type 18 has an invalid length.
[  551.302862][T15827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  551.315511][T15900] netlink: 'syz.0.2898': attribute type 20 has an invalid length.
[  551.338440][T15903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.361019][T15900] netlink: 'syz.0.2898': attribute type 25 has an invalid length.
[  551.377860][T15827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  551.410302][T15827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  551.811770][T15915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2903'.
[  551.822161][T15912] ��
: port 1(ip6gretap0) entered blocking state
[  551.831701][T15912] ��
: port 1(ip6gretap0) entered disabled state
[  551.848075][T15912] ip6gretap0: entered allmulticast mode
[  551.860555][T15912] ip6gretap0: entered promiscuous mode
[  551.920727][T15827] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.009305][T15827] 8021q: adding VLAN 0 to HW filter on device team0
[  552.077400][T15238] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.084633][T15238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.101941][T15238] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.109136][T15238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.367755][T15929] netlink: 'syz.0.2906': attribute type 21 has an invalid length.
[  552.502402][T15827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  552.606028][T15936] syzkaller0: entered promiscuous mode
[  552.611568][T15936] syzkaller0: entered allmulticast mode
[  552.654571][ T5779] Bluetooth: hci4: command tx timeout
[  552.710246][T15943] sit0: entered allmulticast mode
[  552.757930][T15945] netlink: 'syz.3.2908': attribute type 1 has an invalid length.
[  552.797274][T15945] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2908'.
[  552.899419][T15943] sit0: entered promiscuous mode
[  553.081631][T15827] veth0_vlan: entered promiscuous mode
[  553.106740][T15827] veth1_vlan: entered promiscuous mode
[  553.143238][T15827] veth0_macvtap: entered promiscuous mode
[  553.160005][T15827] veth1_macvtap: entered promiscuous mode
[  553.188738][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  553.204223][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.220104][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  553.230912][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.241344][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  553.252190][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.262802][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  553.273674][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.286217][T15827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.297209][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.308767][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.318762][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.329596][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.339860][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.350542][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.360668][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.376926][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.389641][T15827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.416560][T15827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.434600][T15827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.443535][T15827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.453484][T15827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.587624][T15238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.610456][T15238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.673129][T15238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.682722][T15238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.937176][T15985] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2877'.
[  553.956151][T15982] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2877'.
[  554.577319][T15987] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2917'.
[  554.735573][ T5779] Bluetooth: hci4: command tx timeout
[  554.974607][T16004] netlink: 'syz.4.2922': attribute type 10 has an invalid length.
[  555.069729][T16004] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.105820][T16004] team0: Port device bond0 added
[  555.127953][T16015] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2925'.
[  555.197354][T16015] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2925'.
[  555.315692][T16020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2925'.
[  556.175975][T16047] netlink: 'syz.4.2935': attribute type 16 has an invalid length.
[  556.183864][T16047] __nla_validate_parse: 1 callbacks suppressed
[  556.183877][T16047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2935'.
[  556.233993][T16051] netlink: 'syz.3.2938': attribute type 21 has an invalid length.
[  556.253542][T16051] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2938'.
[  556.268493][T16051] netlink: 'syz.3.2938': attribute type 4 has an invalid length.
[  556.277635][T16051] netlink: 'syz.3.2938': attribute type 3 has an invalid length.
[  556.293670][T16051] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2938'.
[  556.806344][ T5779] Bluetooth: hci4: command tx timeout
[  557.043624][T16066] netlink: 'syz.1.2942': attribute type 10 has an invalid length.
[  557.115985][T16066] team0: Port device netdevsim0 added
[  557.218818][T16076] netlink: 'syz.4.2946': attribute type 6 has an invalid length.
[  557.229803][T16076] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2946'.
[  558.146716][T16104] net_ratelimit: 332 callbacks suppressed
[  558.146736][T16104] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  559.132483][T16088] delete_channel: no stack
[  559.138120][T16088] delete_channel: no stack
[  559.144577][T16088] delete_channel: no stack
[  559.150235][T16088] delete_channel: no stack
[  559.165860][T16088] delete_channel: no stack
[  559.170760][T16088] delete_channel: no stack
[  559.180029][T16088] delete_channel: no stack
[  559.185750][T16088] delete_channel: no stack
[  559.192623][T16088] delete_channel: no stack
[  559.198840][T16088] delete_channel: no stack
[  559.203579][T16088] delete_channel: no stack
[  559.208728][T16088] delete_channel: no stack
[  559.213339][T16088] delete_channel: no stack
[  559.240202][T16088] delete_channel: no stack
[  559.275498][T16088] delete_channel: no stack
[  559.280145][T16088] delete_channel: no stack
[  559.310089][T16088] delete_channel: no stack
[  559.347731][T16088] delete_channel: no stack
[  559.352413][T16088] delete_channel: no stack
[  559.387990][T16088] delete_channel: no stack
[  559.392645][T16088] delete_channel: no stack
[  559.437070][T16088] delete_channel: no stack
[  559.467870][T16088] delete_channel: no stack
[  559.472533][T16088] delete_channel: no stack
[  559.561169][T16088] delete_channel: no stack
[  559.644729][T16088] delete_channel: no stack
[  559.685332][T16088] delete_channel: no stack
[  559.690008][T16088] delete_channel: no stack
[  559.770695][T16088] delete_channel: no stack
[  559.811830][T16088] delete_channel: no stack
[  559.833367][T16088] delete_channel: no stack
[  559.865615][T16088] delete_channel: no stack
[  559.891782][T16088] delete_channel: no stack
[  560.086782][T15762] Bluetooth: hci0: command 0x0406 tx timeout
[  562.425831][T16145] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2967'.
[  562.445903][T16145] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2967'.
[  562.451692][T16143] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2964'.
[  562.475539][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'.
[  562.942148][T16169] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2971'.
[  562.995004][T16167] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2971'.
[  563.136540][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  563.142954][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  563.399886][T16172] sit0: entered allmulticast mode
[  563.807436][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'.
[  563.886863][T16188] tap0: tun_chr_ioctl cmd 1074025677
[  563.916844][T16188] tap0: linktype set to 804
[  564.371805][T16204] netlink: 'syz.4.2983': attribute type 12 has an invalid length.
[  564.402673][T16204] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.2983'.
[  564.458719][T16201] netlink: 'syz.3.2981': attribute type 29 has an invalid length.
[  564.488975][T16203] netlink: 'syz.3.2981': attribute type 29 has an invalid length.
[  564.517874][T16201] netlink: 'syz.3.2981': attribute type 29 has an invalid length.
[  564.803271][T16215] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2987'.
[  565.140591][T16237] netlink: 'syz.1.2992': attribute type 29 has an invalid length.
[  565.159025][T16237] netlink: 'syz.1.2992': attribute type 29 has an invalid length.
[  565.485994][T16256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2996'.
[  565.735020][T16256] bridge_slave_0 (unregistering): left allmulticast mode
[  565.742126][T16256] bridge_slave_0 (unregistering): left promiscuous mode
[  565.749394][T16256] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.157812][T16265] syzkaller0: entered promiscuous mode
[  566.195002][T16265] syzkaller0: entered allmulticast mode
[  570.396708][    C1] 
[  570.396717][    C1] ================================
[  570.396722][    C1] WARNING: inconsistent lock state
[  570.396737][    C1] syzkaller #0 Not tainted
[  570.396746][    C1] --------------------------------
[  570.396750][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  570.396757][    C1] syz.3.3011/16307 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  570.396777][    C1] ffffffff8d2978f8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0
[  570.396861][    C1] {INITIAL USE} state was registered at:
[  570.396867][    C1]   lock_acquire+0x19e/0x420
[  570.396887][    C1]   _raw_write_lock_irq+0xaf/0xf0
[  570.396976][    C1]   kernfs_rename_ns+0x5e4/0x830
[  570.396998][    C1]   sysfs_rename_link_ns+0x175/0x1b0
[  570.397014][    C1]   device_rename+0x110/0x1e0
[  570.397056][    C1]   dev_change_name+0x308/0x8e0
[  570.397086][    C1]   do_setlink+0x925/0x3f40
[  570.397137][    C1]   rtnl_newlink+0x1848/0x2170
[  570.397153][    C1]   rtnetlink_rcv_msg+0x843/0xf90
[  570.397171][    C1]   netlink_rcv_skb+0x235/0x4c0
[  570.397227][    C1]   netlink_unicast+0x7b1/0x930
[  570.397277][    C1]   netlink_sendmsg+0x8d0/0xbf0
[  570.397292][    C1]   __sys_sendto+0x4a9/0x6b0
[  570.397307][    C1]   __x64_sys_sendto+0xde/0xf0
[  570.397321][    C1]   do_syscall_64+0x55/0xb0
[  570.397339][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  570.397361][    C1] irq event stamp: 1174
[  570.397366][    C1] hardirqs last  enabled at (1173): [<ffffffff8a8ec2e1>] do_syscall_64+0x61/0xb0
[  570.397388][    C1] hardirqs last disabled at (1174): [<ffffffff8a8ed9bd>] noist_exc_debug+0x4d/0x120
[  570.397412][    C1] softirqs last  enabled at (1032): [<ffffffff8196b9c4>] bpf_prog_load+0x1204/0x1610
[  570.397435][    C1] softirqs last disabled at (1030): [<ffffffff8194b79c>] bpf_ksym_add+0x2c/0x330
[  570.397458][    C1] 
[  570.397458][    C1] other info that might help us debug this:
[  570.397463][    C1]  Possible unsafe locking scenario:
[  570.397463][    C1] 
[  570.397467][    C1]        CPU0
[  570.397470][    C1]        ----
[  570.397473][    C1]   lock(kernfs_rename_lock);
[  570.397484][    C1]   <Interrupt>
[  570.397487][    C1]     lock(kernfs_rename_lock);
[  570.397497][    C1] 
[  570.397497][    C1]  *** DEADLOCK ***
[  570.397497][    C1] 
[  570.397501][    C1] 2 locks held by syz.3.3011/16307:
[  570.397510][    C1]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x26/0x180
[  570.397568][    C1]  #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0
[  570.397610][    C1] 
[  570.397610][    C1] stack backtrace:
[  570.397615][    C1] CPU: 1 PID: 16307 Comm: syz.3.3011 Not tainted syzkaller #0
[  570.397631][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  570.397642][    C1] Call Trace:
[  570.397648][    C1]  <#DB>
[  570.397655][    C1]  dump_stack_lvl+0x18c/0x250
[  570.397675][    C1]  ? show_regs_print_info+0x20/0x20
[  570.397697][    C1]  ? print_usage_bug+0x43d/0x6a0
[  570.397717][    C1]  ? verify_lock_unused+0x15/0x140
[  570.397738][    C1]  lock_acquire+0x2c2/0x420
[  570.397759][    C1]  ? kernfs_path_from_node+0x88/0xbd0
[  570.397783][    C1]  ? read_lock_is_recursive+0x20/0x20
[  570.397804][    C1]  ? trace_event_raw_event_lock+0x240/0x240
[  570.397819][    C1]  ? bsearch+0x8a/0xb0
[  570.397865][    C1]  ? look_up_lock_class+0x75/0x140
[  570.397889][    C1]  _raw_read_lock_irqsave+0xbc/0x100
[  570.397913][    C1]  ? kernfs_path_from_node+0x88/0xbd0
[  570.397936][    C1]  ? _raw_read_lock+0x50/0x50
[  570.397957][    C1]  ? rcu_is_watching+0x15/0xb0
[  570.397979][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[  570.397997][    C1]  ? lock_release+0xb5/0x8c0
[  570.398016][    C1]  ? percpu_ref_tryget+0x15/0x180
[  570.398039][    C1]  kernfs_path_from_node+0x88/0xbd0
[  570.398061][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  570.398088][    C1]  ? lock_release+0xb5/0x8c0
[  570.398105][    C1]  ? kernfs_name+0x140/0x140
[  570.398127][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[  570.398146][    C1]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[  570.398165][    C1]  get_mm_memcg_path+0xb9/0x360
[  570.398191][    C1]  __mmap_lock_do_trace_acquire_returned+0xea/0x300
[  570.398218][    C1]  ? get_mm_memcg_path+0x360/0x360
[  570.398253][    C1]  ? __init_rwsem+0x160/0x160
[  570.398269][    C1]  ? _raw_spin_unlock+0x28/0x40
[  570.398291][    C1]  stack_map_get_build_id_offset+0x5fe/0x720
[  570.398315][    C1]  ? pcpu_freelist_pop+0x12a/0x190
[  570.398337][    C1]  ? __bpf_get_stackid+0x900/0x900
[  570.398354][    C1]  ? perf_prepare_sample+0x1558/0x1db0
[  570.398376][    C1]  __bpf_get_stackid+0x564/0x900
[  570.398400][    C1]  bpf_prog_12712c88fd19bd5b+0x29/0x2d
[  570.398418][    C1]  bpf_overflow_handler+0x1fc/0x510
[  570.398440][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  570.398460][    C1]  ? bpf_overflow_handler+0xde/0x510
[  570.398480][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  570.398506][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  570.398526][    C1]  __perf_event_overflow+0x461/0x660
[  570.398550][    C1]  perf_swevent_event+0x319/0x570
[  570.398569][    C1]  ? perf_tp_event+0x1550/0x1550
[  570.398588][    C1]  ? perf_trace_buf_alloc+0x290/0x290
[  570.398607][    C1]  ? perf_trace_lock+0xfc/0x3b0
[  570.398627][    C1]  perf_bp_event+0x319/0x430
[  570.398648][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  570.398667][    C1]  ? rcu_is_watching+0x15/0xb0
[  570.398686][    C1]  ? trace_call_bpf+0xc3/0x6c0
[  570.398701][    C1]  ? lock_release+0xb5/0x8c0
[  570.398732][    C1]  ? lock_acquire+0x2c2/0x420
[  570.398754][    C1]  hw_breakpoint_exceptions_notify+0x2fb/0x670
[  570.398791][    C1]  notifier_call_chain+0x18f/0x380
[  570.398813][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  570.398835][    C1]  atomic_notifier_call_chain+0xda/0x180
[  570.398857][    C1]  notify_die+0x145/0x1a0
[  570.398878][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  570.398907][    C1]  notify_debug+0x2e/0x50
[  570.398933][    C1]  exc_debug+0xde/0x140
[  570.398953][    C1]  asm_exc_debug+0x1e/0x40
[  570.398970][    C1] RIP: 0010:__get_user_nocheck_8+0xd/0x20
[  570.398991][    C1] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca
[  570.399006][    C1] RSP: 0000:ffffc9000c17f560 EFLAGS: 00040802
[  570.399020][    C1] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff9200182feca
[  570.399033][    C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000
[  570.399044][    C1] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000
[  570.399053][    C1] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: 0000000000000001
[  570.399086][    C1] R13: 1ffff9200182fec8 R14: 000000000000007f R15: dffffc0000000000
[  570.399107][    C1]  </#DB>
[  570.399112][    C1]  <TASK>
[  570.399116][    C1]  perf_callchain_user+0xbdd/0x15d0
[  570.399151][    C1]  ? get_callchain_entry+0x185/0x3c0
[  570.399170][    C1]  get_perf_callchain+0x394/0x510
[  570.399188][    C1]  ? put_callchain_entry+0xb0/0xb0
[  570.399208][    C1]  ? __perf_event_header__init_id+0x3b0/0x470
[  570.399224][    C1]  perf_prepare_sample+0x3c7/0x1db0
[  570.399244][    C1]  ? read_lock_is_recursive+0x20/0x20
[  570.399262][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  570.399282][    C1]  ? perf_callchain+0x220/0x220
[  570.399300][    C1]  ? lock_chain_count+0x20/0x20
[  570.399322][    C1]  perf_event_output_forward+0x187/0x3e0
[  570.399340][    C1]  ? perf_event_output_forward+0xb9/0x3e0
[  570.399357][    C1]  ? perf_prepare_header+0x1e0/0x1e0
[  570.399380][    C1]  ? __schedule+0x15b6/0x4660
[  570.399405][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  570.399424][    C1]  __perf_event_overflow+0x461/0x660
[  570.399446][    C1]  perf_swevent_overflow+0x274/0x340
[  570.399470][    C1]  ? perf_event_switch_output+0x790/0x790
[  570.399497][    C1]  perf_swevent_event+0x45c/0x570
[  570.399517][    C1]  ? perf_tp_event+0x1550/0x1550
[  570.399543][    C1]  perf_bp_event+0x319/0x430
[  570.399562][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[  570.399584][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  570.399604][    C1]  ? verify_lock_unused+0x140/0x140
[  570.399622][    C1]  ? try_to_wake_up+0x6f5/0x10e0
[  570.399658][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  570.399682][    C1]  notifier_call_chain+0x18f/0x380
[  570.399704][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  570.399726][    C1]  atomic_notifier_call_chain+0xda/0x180
[  570.399748][    C1]  notify_die+0x145/0x1a0
[  570.399771][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  570.399799][    C1]  notify_debug+0x2e/0x50
[  570.399815][    C1]  noist_exc_debug+0x77/0x120
[  570.399832][    C1]  ? clear_bhb_loop+0x40/0x90
[  570.399851][    C1]  asm_exc_debug+0x33/0x40
[  570.399868][    C1] RIP: 0033:0x7fba9f77ce7d
[  570.399881][    C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f <c5> fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc
[  570.399894][    C1] RSP: 002b:00007fbaa05ee8a8 EFLAGS: 00000283
[  570.399908][    C1] RAX: 0000000000000300 RBX: 00007fbaa05eede0 RCX: 2f666c65732f636f
[  570.399921][    C1] RDX: 0000200000000300 RSI: 00007fba9f85f7e0 RDI: 0000200000000300
[  570.399932][    C1] RBP: 0000200000000300 R08: 00007fbaa05ef010 R09: 00000000ffffffff
[  570.399943][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  570.399953][    C1] R13: 0000000000000073 R14: 00007fba9f83437d R15: 00007fbaa05eeea0
[  570.399973][    C1]  </TASK>
[  571.397858][T16312] A link change request failed with some changes committed already. Interface b��Y��4��`Ҙ may have been left with an inconsistent configuration, please check.
[  571.437585][T16312] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3012'.