last executing test programs:

12.672853301s ago: executing program 2 (id=5963):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c2d94f90324fc602f1a0b000a7401", 0x1b}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c1c1273e370e0c11", 0x27}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

12.383995847s ago: executing program 2 (id=5968):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000002c0)=0x5, 0x12)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="ebc8000000000e00"/20, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="04000000000000000400"/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5d31, 0x98406, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0xfd, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11.838523168s ago: executing program 2 (id=5973):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext, 0x1080ea, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c00)='GPL\x00', 0xffff}, 0x94) (async)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xb6, 0x3, 0xe, 0xa1, 0x0, 0xab, 0x2c, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x9}, 0xc0, 0x9, 0x9, 0x7, 0x3, 0xdbcb, 0x800, 0x0, 0x3d, 0x0, 0xfffffffffffffb71}, 0xffffffffffffffff, 0x3, r3, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x5, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4010, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x0, 0xb, 0x0, 0x2, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x5, 0x0, 0x5c35, 0x8000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x81}, 0x100c, 0x3, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0300000000004000058b433ab835620b904af7a1f000000000000000d015cd0f62b676922617d1411e456f97e135eb24cc107655a4a279124ed0bb139b818415d2c3b6099a1ec9ec3de6c5"], 0x50) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0xa) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01000000d75a32a0000000020018001200"/30], 0x0, 0x1a}, 0x28) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400c84c) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async)
gettid() (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0, 0x4d}, 0x28) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r9) (async)
socket$kcm(0x1e, 0x1, 0x0)

11.619130423s ago: executing program 2 (id=5978):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x800})
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000880))
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x3, 0xb, 0xa, 0x0, 0x80000001, 0x11, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x200, 0xfffffffffffffffd}, 0x10421, 0x800000000000, 0xe20, 0x9, 0x8, 0x50, 0x1, 0x0, 0x101, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="282000000000000071114f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'pids'}, {0x2b, 'memory'}, {0x2d, 'net_prio'}, {0x0, 'net_cls'}]}, 0x21)

11.430587607s ago: executing program 2 (id=5983):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

11.110646243s ago: executing program 2 (id=5984):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x5, 0x8401, 0xffffffffffffffff, 0x3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000580), 0x9}, 0x108282, 0x6, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x23}, 0xffffffffffffffff, 0x40000000000003, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="4c6f00000000000000000000000000000018110096a54d1ecfcf21c16ab47de89681292aab85279ece3fb1e3ad5414c08c231c4f81d124bfc690066e577f9e409cda8cd1283f630631b8aea2f674ae07003e08547891e067972363ad57f1c8bf46083786e8c8d42a7cfd108087fdae6cbd0bdc5c692eae97d08d195e9bef69a5a9acc706336d092698819e341d58cee3ecbf861535304a1ec2e2459b7504f87cf7e03260a0f4733dead294b1ce7de0fe344ee6096655fa2f4ea6f5dfdc16edc22d8041e2705905d065731d48f3428b172593a94b04c9caae7e7fcb2d96e0394366d5696fd469583e52ce398192a505753ce02378237b846ca370d4343c385299ff77927596a0097b21ab868595f5bdf4c0261a0c09d43944fdbed603980bee", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000080004000000000084eaa88cd64a680700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="c018030029000b12d27480648c2594f90124fce8174673d913abb79ad1d1f91860100248078000f01700d1bd2b55c8323b07f333559453cca17508220d8f5718a01ac230d5b6f567c0855f3bd5efcd5887f41973e018571a791240de99356c9a883e1095d9c3b3e8c9611bb1f6ea3526ec35a14ff8831b3cc5bcb00950830afee872932c1283c7", 0x87}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x1d)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x1)
r11 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f0000000500)=r10, 0x4)

9.914082178s ago: executing program 1 (id=5990):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f00000000c0), 0x42)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000)
socket$kcm(0x2, 0x922000000001, 0x106)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18002cc919b5ae70db0b660000f3ff00004210966286009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000000000fff80000", @ANYRES32=r3, @ANYBLOB="f10bffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000009bd63f0c83c4aed537000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000066000000866f000018000000000000000000000000000000950000000000000064030000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
socket$kcm(0x29, 0x7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20)
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8)
r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcc, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x1f76a, 0x6f5f, 0x8000, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r7, 0x0)

6.768124712s ago: executing program 1 (id=5997):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @empty}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x73)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
close(r2)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000001140)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001200), 0x0, &(0x7f0000000140)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x4c, 0x0, 0x0, [0x8]}, @noop, @ra={0x94, 0x4}, @noop]}}}, @ip_tos_u8={{0x11, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}], 0x58}, 0x0)

6.613694065s ago: executing program 1 (id=6000):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x3, 0x4, 0x1000, 0x0, r4, 0x0, '\x00', 0x0, r3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, &(0x7f0000000200)="def2b252b5206af632d2caf8a8bb4d8fafaf99d9f6a2c141b78b1199dced67ac19253dd0f11d12537652b1b59f1775dca2d1bca0f6c390698233ec66af9980562522989b04f2f2e335c9e21eeba865ae9b4f35dc8c927f841d75635d3358a15bc511ec087261910940533f312f529b57d296d0c977bce2e52afa15970877ee04905a76860e5d824addadaabe82c41f2fa4c799f3d24b272f5401d5f6105fd22d39a9cc3048e3a6a6e93c514fd56c93f06d76aa9709e9600f7f4a01aec34be5b879e58975f31847adeabda11426edfc3a61e80e0b2e140ac40c69437af515a2b4d639b4898c9fc5bceea642", &(0x7f0000000300)=""/231}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

6.264015032s ago: executing program 1 (id=6002):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000000000000000000000000000f537000000000000699886edab91344c1263a6524ce6ca5ff6f7cf67bf6ae48524cae48f00feafd7977184a975a47df0f3b9c8852d"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x40}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x49, &(0x7f0000000180)}, 0x1e)
socket$kcm(0xa, 0x3, 0x73)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYRES16], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000002c0)=r7, 0x4)
sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x20008840)
sendmsg$inet(r6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20000840)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x2, 0x0, 0xba, 0x37a0d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000440), 0xa}, 0x1207c, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8)

6.087772916s ago: executing program 0 (id=6005):
socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

5.187877064s ago: executing program 0 (id=6007):
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

4.89422302s ago: executing program 0 (id=6010):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r2}, 0x38)

4.622438856s ago: executing program 4 (id=6012):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x8a60, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf8ffffff}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.491270489s ago: executing program 4 (id=6014):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r3) (async, rerun: 64)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc6058000240", 0x18}], 0x1}, 0x0) (rerun: 32)

4.476490298s ago: executing program 1 (id=6015):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d00000003000000040000000010000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000000000000000000000000000005e84df52dd4732140c01bb378c98d532fb9bbcb9515cfe3970d37036c1fc2bab28430b69d5d2166cd1def300d019afd782", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$kcm(0x23, 0x7, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffdfffffd, r5, 0x1a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f00000006c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)="ce26", 0x2}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4812)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="23c65d54f4c5b2babf5c69a185dbff810f38fd90ca899adb0f5f20000000000000005ccad8c230f11b3f1d4db7d6d15136901ae9b5630dde5ae4617eab63a73595bac8332292e02cbc98162455420f9435aa727b090260f7c68e06e1e54e2bcfe9e4210d9ba263e2000000f8a49f102874d2fe80fec28e0b84552470f43e45c508dae05d842d28101ce992cfb22754e81de7e2ba70efceb435946b644796b2ed7d909371b5094bfbce2c8861f0597561c7440814ee2ce467eb3193558b1c454e6c4ada2d4c4c0671485a7c6b5c13a498e261835b6f1ecd6f513d85eac1c619f77ea9c8b1c4f73a37c398569e780bb5b5d0856030e64da2575e2b5e072c4061c1631d5ee88067f249a3ec00343ff37914226422d33a143ec733c66ba2619c4fea5ee9ff07374ea98620e5cca892997b11bdd7c7e0ea553e207c38df29a5ae58d0ef611a1460bc5b03a63a728eff9b1ce98885a6497033d54486cc939bb92c5d292a37fe9ac2f5e7d3913612ca91dcf2d137f90aab571907673a4399680acec5cc8b5b87ecc14223c95a65c95dda1f227a9db02cca68a4a157c9da8e5dacdab0cd9d3df0f055b8a2c99f1eced693fa46525e21f651fee85f47c6f3fd6acb1e51e5542c1212508a72c7e79a7cb8eeae7aca7bba4b4d9d74c2b7c5cb111f0d716d57ae21b8abda1658abfd250e9be722c37e886d5fb073c39f", 0x2, 0x0, 0x7ffc}, 0x21)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
write$cgroup_pressure(r4, 0x0, 0xeaff)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x2d15}, 0x0, 0x8000000, 0x0, 0x0, 0x3, 0x3, 0xfffe}, 0x0, 0x1000, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)

4.476010129s ago: executing program 0 (id=6016):
socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

4.180119415s ago: executing program 4 (id=6017):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}, {0x10, 0x29, 0x9}], 0x38}, 0x20000000) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6ca, 0x0, 0x0, 0x0, 0x10001}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x5, 0xb7, &(0x7f00000001c0)=""/183, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x4, 0x4}, {0x3, 0x3, 0x4, 0xb}], 0x10, 0x684}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18)

4.144055506s ago: executing program 1 (id=6019):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x20000004, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x5a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='#]*-\'/)!o@$]{]\\\x92}\\+))\x00')
r3 = socket$kcm(0x2c, 0x3, 0x0)
recvmsg$kcm(r3, &(0x7f0000000980)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000540)=""/174, 0xae}, {0x0}], 0x3, &(0x7f00000009c0)=""/217, 0xd9}, 0x40010002)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

4.036638068s ago: executing program 4 (id=6020):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdir(0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x41bc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

3.674597125s ago: executing program 3 (id=6022):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x9, 0x7, 0xd6, 0x1b000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x8, @value, @void, @value=r1}, 0x7e)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, 0x0, 0x0, 0xfe}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18d, 0x2, @perf_bp={0x0, 0x3}, 0xc088, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x84010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xffff, 0x80}, 0x100c, 0x7, 0x1, 0x9, 0xfff, 0x7, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0x2, 0x200000000000006, 0x0)
recvmsg$kcm(r9, 0x0, 0x40000142)
r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0)
write$cgroup_devices(r11, &(0x7f0000000080)=ANY=[@ANYBLOB='b\x00\x00\x00\x00\x00@'], 0x9)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f00000021c0), 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="10000000050000000100010001000000"], 0x10}, 0x24004800)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33)

892.753382ms ago: executing program 3 (id=6023):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x0, 0x9b, 0x1}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

785.090785ms ago: executing program 0 (id=6024):
r0 = socket$kcm(0x10, 0x7, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7ff, '\x00', 0x0, r5, 0x2, 0x1, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r7, 0x2, r2, 0x1)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r7, 0x12)
r9 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r9, 0x29, 0x13, &(0x7f0000000100), 0x120)
r10 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12)
mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff)
r11 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r11, &(0x7f00000000c0)='THAWED\x00', 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)

679.891946ms ago: executing program 4 (id=6025):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe93, 0x8100000001}, 0x0, 0x4, 0x1, 0x3, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x27, 0x1e, 0x0, &(0x7f0000000100)="01aae100106300b45645c258b558dff118c6c10b52c85fd430f5cd078bad", 0x0, 0x7c, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001)

566.884259ms ago: executing program 3 (id=6026):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000edc600000000000001000000790083000000000018000000000000000000000000000000950000b9f30000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000007b8af8ff0000020000f8ffffffb703000008000000b70400000000000085000000030000009500"/61], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000181100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420})
socket$kcm(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

450.787541ms ago: executing program 4 (id=6027):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0})
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0)

288.051044ms ago: executing program 0 (id=6028):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000edc600000000000001000000790083000000000018000000000000000000000000000000950000b9f30000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000007b8af8ff0000020000f8ffffffb703000008000000b70400000000000085000000030000009500"/61], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x14, &(0x7f0000001340)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000006fc777f545a19d71572dc1736e9200bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085008c22fb95b553ecdf37041cba689b11dedff0efe63cdfa1f2affcaa904fd3566ce2d1e0b6f757531d284b062dca4bc365f646b9d0d07f4dc5e18ef59f628ec95ccdcb"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r4, 0x0, 0x9f, 0x95, &(0x7f0000000d00)="3243f7af9481d9362fdc2fd8f1cce8335d7d0ee2e6389153d49438caa2e65ad49059b2593eb55425682c3c33b4d19e6af308f54c6f27573b43cece6b0be0e7e94d3a84185dd3b238d46bbdd5d59b5fa329452e7ca5ed1481d373d4e6ce7c572850540fe8d76483c7c343f4bf63e1e66db7f40401bc1f27cb373cc456fbb799bb08aecb1754c60a684a432ad310fb4779b261f619d137990317ff1196fe6546", &(0x7f0000000dc0)=""/149, 0x80000000, 0x0, 0xdb, 0x8e, &(0x7f0000000e80)="bdc6d3f4f5bd512a1dd5c41fa2f98982b8a1031b06202406771a5ce7bc87a48b6d23a54597f772debf018b99fd6b8efa9f88b2b2aa56ed85d65691f6fa45869abb7728cb19d3eda8f3e93312cddbe6824abcda0dd73c2985cf88b0a93cb2ea587a13321c385fb3a5d348167cbf3dff2d875399fd50356a2352458f98d558a9726b083ee19a2732c51c6762007953f01653e80732657fb34d97656b95e6ab0b45c3b1ad7d58417afbf787ef06c36726f7e0d16a50b390097d33995f55af93b153c4d5b4b837c943030c9268b4571e3026c6a01ad83ec0d51d4f07ea", &(0x7f0000000f80)="9c320a10cc871809ce8f590cf3299932a710f545f6ebd19398ef7a61a4fcd64c04279b7f9c87ac975d9aa343959302d02b39f075e53200881b446c56b52b974d4b870db120bd05d57f849126346412b0c5c5065204cbaf6b92def90cfd36dea20db3532f2717995ec7a2a9f4c5282580e3600590fc363de290b3c0444f7fc007461b39d8a9081b885ea2f5a67d1a", 0x0, 0x0, 0x7}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r3}, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x420})
socket$kcm(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
r8 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x111ba, 0x7, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730109"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x3d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000840), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r11)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xba4ee230eabac5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3ab, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1}, 0x0, 0x1, r11, 0x0)
ioctl$TUNGETVNETLE(r11, 0x8955, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRES16=r10, @ANYRES8=r0, @ANYRES8=r2, @ANYBLOB="6b6268149ff26ae4d42137beea0ea18eef81f15091dad0081b484fb204fe1f9a1accf5169ced99beb5b95cd6f5885323afbcb9ae09050533f843e2b851b3a6bbd3a73f96d54a2588790b4106cf0d6610640847de331c1d971c5f22fc95a1098f15b6b273f88df50697b4981fa61fe5895f218dd8074621712e888cbdba90be5a365e70564e902cb07f7fae1e049f888861b901dab4ad1363a0d3feb2bfe2a4e715f570766c9a67e903ba6429e668884f7122d02e10fef280b7b101e7c37b72d17a2fcd65d67a5742a1dde7b1091a91b58c5348e7718c94c1df323321b4a0ca5449360203d6642c5518ac7325d20d", @ANYRES64=r0, @ANYRES16=r5, @ANYRES64=r9, @ANYRES64=r1, @ANYRESDEC, @ANYRES64=r0, @ANYRES32=r9, @ANYRES16=r10, @ANYBLOB="bb412f277de4aa142be0c8f3dea583d411e355931e7adac1f1ea69a7bd43317edcc6772090f93eee6c9e79f9cb91be05599265bc3c4f171a41be11b16a82f2264afec46411dee8ddf3f459a91bc16fc2377bb8e41e2280acee4503dede9545069c8959dafb71316ac4fa6d5e495442ffacc7e72133fe684c92", @ANYRES64=r7], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)

281.748195ms ago: executing program 3 (id=6029):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5}, 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) (async)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)
socketpair(0x8, 0x80000, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/185, 0xb9}], 0x1, &(0x7f00000001c0)=""/209, 0xd1}, 0x40002100)

159.289387ms ago: executing program 3 (id=6030):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

0s ago: executing program 3 (id=6031):
socket$kcm(0x10, 0x2, 0x4) (async)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002d006bcd9e3f17aa04001b0000010000ffffffff000000000000ff7f00000002", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002d006bcd9e3f17aa04001b0000010000ffffffff000000000000ff7f00000002", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000d200, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

3.4166': attribute type 21 has an invalid length.
[  761.106049][T19022] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4166'.
[  761.714595][T19039] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4180'.
[  761.812235][T19044] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4172'.
[  762.098184][T19051] netlink: 'syz.4.4174': attribute type 21 has an invalid length.
[  762.106119][T19051] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4174'.
[  762.561119][T19065] netlink: 'syz.2.4179': attribute type 21 has an invalid length.
[  762.581632][T19065] netlink: 'syz.2.4179': attribute type 1 has an invalid length.
[  762.601387][T19065] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4179'.
[  762.987403][T19080] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4184'.
[  763.512202][T19098] netlink: 'syz.1.4191': attribute type 1 has an invalid length.
[  763.520220][T19098] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.4191'.
[  763.651464][T19100] Ÿë
: port 1(gretap0) entered blocking state
[  763.670159][T19100] Ÿë
: port 1(gretap0) entered disabled state
[  763.705678][T19100] device gretap0 entered promiscuous mode
[  763.744846][T19110] Ÿë
: port 2(veth0_to_team) entered blocking state
[  763.767736][T19110] Ÿë
: port 2(veth0_to_team) entered disabled state
[  763.833609][T19110] device veth0_to_team entered promiscuous mode
[  763.876398][T19100] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4192'.
[  764.203923][T19116] netlink: 'syz.1.4196': attribute type 1 has an invalid length.
[  764.799457][T19130] device syzkaller0 entered promiscuous mode
[  764.826693][T19131] delete_channel: no stack
[  765.585325][T19139] netlink: 'syz.1.4203': attribute type 21 has an invalid length.
[  765.593479][T19139] netlink: 'syz.1.4203': attribute type 1 has an invalid length.
[  765.603142][T19139] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4203'.
[  765.725372][T19133] device syzkaller0 entered promiscuous mode
[  766.105541][T19151] device syzkaller0 entered promiscuous mode
[  767.857040][T19158] netlink: 'syz.4.4208': attribute type 13 has an invalid length.
[  767.865158][T19158] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4208'.
[  767.884945][T19158] erspan0: refused to change device tx_queue_len
[  767.906339][T19163] netlink: 'syz.3.4210': attribute type 39 has an invalid length.
[  768.046955][T19166] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4211'.
[  768.069015][T19168] netlink: 'syz.0.4212': attribute type 10 has an invalid length.
[  768.114854][T19168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4212'.
[  768.144580][T19168] device team0 entered promiscuous mode
[  768.177307][T19168] device team_slave_0 entered promiscuous mode
[  768.199182][T19168] device team_slave_1 entered promiscuous mode
[  768.214075][T19168] bridge0: port 3(team0) entered blocking state
[  768.225394][T19168] bridge0: port 3(team0) entered disabled state
[  768.245160][T19168] bridge0: port 3(team0) entered blocking state
[  768.252035][T19168] bridge0: port 3(team0) entered forwarding state
[  768.268677][T19166] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  768.660880][T19193] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.4220'.
[  768.696297][T19193] netlink: zone id is out of range
[  768.730043][T19195] netlink: 'syz.1.4222': attribute type 13 has an invalid length.
[  768.751990][T19193] netlink: zone id is out of range
[  768.766284][T19195] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4222'.
[  768.772463][T19193] netlink: zone id is out of range
[  768.807027][T19204] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4223'.
[  768.856883][T19193] netlink: zone id is out of range
[  768.897296][T19193] netlink: zone id is out of range
[  768.903646][T19207] netlink: 'syz.0.4224': attribute type 21 has an invalid length.
[  768.911706][T19193] netlink: zone id is out of range
[  768.922043][T19207] netlink: 'syz.0.4224': attribute type 1 has an invalid length.
[  768.937969][T19193] netlink: zone id is out of range
[  768.945317][T19207] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4224'.
[  768.966830][T19193] netlink: zone id is out of range
[  769.002080][T19193] netlink: zone id is out of range
[  769.007408][T19193] netlink: zone id is out of range
[  769.115135][T19219] delete_channel: no stack
[  769.175564][T19219] device syzkaller0 entered promiscuous mode
[  769.207454][T19219] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  771.820292][T19251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4241'.
[  772.489922][T19274] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.4246'.
[  772.879356][T19295] netlink: 'syz.1.4251': attribute type 10 has an invalid length.
[  772.937201][T19295] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  772.959673][T19299] netlink: 'syz.3.4254': attribute type 21 has an invalid length.
[  772.967627][T19299] netlink: 'syz.3.4254': attribute type 1 has an invalid length.
[  772.982752][T19299] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4254'.
[  773.218953][T19311] netlink: 'syz.1.4257': attribute type 29 has an invalid length.
[  773.227366][T19311] netlink: 'syz.1.4257': attribute type 29 has an invalid length.
[  773.242836][T19311] netlink: 'syz.1.4257': attribute type 29 has an invalid length.
[  773.274574][T19311] netlink: 'syz.1.4257': attribute type 2 has an invalid length.
[  773.312266][T19311] device 0 entered promiscuous mode
[  773.510255][T19316] device syzkaller0 entered promiscuous mode
[  774.147384][T19341] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4267'.
[  774.156900][T19341] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4267'.
[  774.169292][T19341] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4267'.
[  774.179796][T19341] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4267'.
[  776.036399][T19345] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4268'.
[  776.188044][T19365] netlink: 'syz.4.4273': attribute type 21 has an invalid length.
[  776.199136][T19365] netlink: 'syz.4.4273': attribute type 1 has an invalid length.
[  776.206905][T19365] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4273'.
[  776.217790][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'.
[  776.281330][T19371] netlink: 'syz.2.4274': attribute type 10 has an invalid length.
[  776.694596][T19387] device veth1_macvtap left promiscuous mode
[  776.927090][T19393] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.953395][T19393] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.163067][T19400] __nla_validate_parse: 3 callbacks suppressed
[  777.163099][T19400] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4287'.
[  777.626812][T19423] FAULT_INJECTION: forcing a failure.
[  777.626812][T19423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  777.676663][T19423] CPU: 1 PID: 19423 Comm: syz.2.4294 Not tainted syzkaller #0
[  777.684198][T19423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  777.694284][T19423] Call Trace:
[  777.697596][T19423]  <TASK>
[  777.700553][T19423]  dump_stack_lvl+0x188/0x24e
[  777.705281][T19423]  ? show_regs_print_info+0x12/0x12
[  777.710545][T19423]  ? load_image+0x410/0x410
[  777.715097][T19423]  ? __lock_acquire+0x7c40/0x7c40
[  777.720178][T19423]  ? ktime_get+0x7b/0x270
[  777.724544][T19423]  should_fail_ex+0x390/0x4c0
[  777.729255][T19423]  _copy_from_user+0x2c/0x170
[  777.733967][T19423]  __sys_bpf+0x2ea/0x780
[  777.738248][T19423]  ? bpf_link_show_fdinfo+0x380/0x380
[  777.743665][T19423]  ? lock_chain_count+0x20/0x20
[  777.748545][T19423]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  777.754566][T19423]  __x64_sys_bpf+0x78/0x90
[  777.759016][T19423]  do_syscall_64+0x4c/0xa0
[  777.763472][T19423]  ? clear_bhb_loop+0x60/0xb0
[  777.768197][T19423]  ? clear_bhb_loop+0x60/0xb0
[  777.772906][T19423]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.778829][T19423] RIP: 0033:0x7f52d079e019
[  777.783275][T19423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.802915][T19423] RSP: 002b:00007f52d15db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  777.811367][T19423] RAX: ffffffffffffffda RBX: 00007f52d0a25fa0 RCX: 00007f52d079e019
[  777.819374][T19423] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  777.827368][T19423] RBP: 00007f52d15db090 R08: 0000000000000000 R09: 0000000000000000
[  777.835363][T19423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.843358][T19423] R13: 00007f52d0a26038 R14: 00007f52d0a25fa0 R15: 00007ffea37cfa58
[  777.843697][T19427] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4297'.
[  777.851361][T19423]  </TASK>
[  778.723882][T19469] FAULT_INJECTION: forcing a failure.
[  778.723882][T19469] name failslab, interval 1, probability 0, space 0, times 0
[  778.738123][T19469] CPU: 0 PID: 19469 Comm: syz.3.4308 Not tainted syzkaller #0
[  778.745622][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  778.755701][T19469] Call Trace:
[  778.759002][T19469]  <TASK>
[  778.761978][T19469]  dump_stack_lvl+0x188/0x24e
[  778.766689][T19469]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  778.772883][T19469]  ? show_regs_print_info+0x12/0x12
[  778.778132][T19469]  ? load_image+0x410/0x410
[  778.782690][T19469]  should_fail_ex+0x390/0x4c0
[  778.787407][T19469]  should_failslab+0x5/0x20
[  778.792039][T19469]  slab_pre_alloc_hook+0x59/0x300
[  778.797114][T19469]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  778.802692][T19469]  __kmem_cache_alloc_node+0x4f/0x270
[  778.808103][T19469]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  778.813689][T19469]  __kmalloc+0xa3/0x240
[  778.817891][T19469]  bpf_prog_test_run_skb+0x23e/0x18e0
[  778.823301][T19469]  ? __fget_files+0x28/0x460
[  778.827965][T19469]  ? __fget_files+0x3fc/0x460
[  778.832689][T19469]  ? cpu_online+0xa0/0xa0
[  778.837048][T19469]  bpf_prog_test_run+0x31c/0x390
[  778.842032][T19469]  __sys_bpf+0x62b/0x780
[  778.846329][T19469]  ? bpf_link_show_fdinfo+0x380/0x380
[  778.851764][T19469]  ? lock_chain_count+0x20/0x20
[  778.856661][T19469]  __x64_sys_bpf+0x78/0x90
[  778.861107][T19469]  do_syscall_64+0x4c/0xa0
[  778.865558][T19469]  ? clear_bhb_loop+0x60/0xb0
[  778.870264][T19469]  ? clear_bhb_loop+0x60/0xb0
[  778.874990][T19469]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  778.880914][T19469] RIP: 0033:0x7f61cc79e019
[  778.885375][T19469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.905004][T19469] RSP: 002b:00007f61cd6a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  778.913446][T19469] RAX: ffffffffffffffda RBX: 00007f61cca25fa0 RCX: 00007f61cc79e019
[  778.921448][T19469] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  778.929448][T19469] RBP: 00007f61cd6a2090 R08: 0000000000000000 R09: 0000000000000000
[  778.937457][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.945476][T19469] R13: 00007f61cca26038 R14: 00007f61cca25fa0 R15: 00007ffcf5676118
[  778.953494][T19469]  </TASK>
[  779.006980][T19472] validate_nla: 5 callbacks suppressed
[  779.006993][T19472] netlink: 'syz.0.4309': attribute type 3 has an invalid length.
[  779.054485][T19472] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4309'.
[  779.071162][T19474] netlink: 'syz.2.4310': attribute type 10 has an invalid length.
[  779.945567][T19490] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4316'.
[  780.028627][T19489] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4316'.
[  780.059105][T19490] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  780.119126][T19490] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  780.167989][T19490] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  780.526080][T19507] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.4323'.
[  780.562439][T19509] netlink: 'syz.0.4324': attribute type 1 has an invalid length.
[  780.597779][T19509] netlink: 'syz.0.4324': attribute type 3 has an invalid length.
[  780.607927][T19509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4324'.
[  780.776919][T19524] sctp: [Deprecated]: syz.1.4329 (pid 19524) Use of int in max_burst socket option deprecated.
[  780.776919][T19524] Use struct sctp_assoc_value instead
[  781.453489][T19559] delete_channel: no stack
[  781.676728][T19563] netlink: 'syz.4.4341': attribute type 1 has an invalid length.
[  781.752573][T19563] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4341'.
[  782.020928][T19572] netlink: 'syz.2.4345': attribute type 29 has an invalid length.
[  782.130376][T19572] netlink: 'syz.2.4345': attribute type 29 has an invalid length.
[  782.200351][T19574] netlink: 'syz.2.4345': attribute type 29 has an invalid length.
[  782.377439][T19574] netlink: 'syz.2.4345': attribute type 2 has an invalid length.
[  782.603595][T16078] device syz_tun left promiscuous mode
[  782.620888][T16078] ¥: port 1(syz_tun) entered disabled state
[  782.719103][T19574] device 0 entered promiscuous mode
[  782.761285][T19588] netlink: 'syz.1.4350': attribute type 27 has an invalid length.
[  782.770312][T19588] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4350'.
[  783.058109][T19594] sctp: [Deprecated]: syz.2.4353 (pid 19594) Use of int in maxseg socket option.
[  783.058109][T19594] Use struct sctp_assoc_value instead
[  783.116758][T19594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  783.263644][T19594] team0: Port device team_slave_0 removed
[  783.292131][T19591] delete_channel: no stack
[  783.557300][T19607] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4357'.
[  783.828034][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  783.842840][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  783.851266][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  783.859541][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  783.867070][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  783.874366][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  784.340343][T19648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4369'.
[  784.411924][T19622] chnl_net:caif_netlink_parms(): no params data found
[  784.639465][T19622] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.646725][T19622] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.657343][T19622] device bridge_slave_0 entered promiscuous mode
[  784.666393][T19622] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.673843][T19622] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.682969][T19622] device bridge_slave_1 entered promiscuous mode
[  784.760043][T19622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  784.793532][T19661] validate_nla: 3 callbacks suppressed
[  784.793547][T19661] netlink: 'syz.1.4372': attribute type 29 has an invalid length.
[  784.812905][T19622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  784.846461][T19661] netlink: 'syz.1.4372': attribute type 29 has an invalid length.
[  784.927146][T19622] team0: Port device team_slave_0 added
[  784.945019][T19669] netlink: 'syz.3.4373': attribute type 7 has an invalid length.
[  784.953307][T19622] team0: Port device team_slave_1 added
[  785.049190][T19622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  785.056178][T19622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  785.134704][T19622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  785.157670][T19622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  785.170728][T19622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  785.247483][T19622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  785.288644][T19672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  785.297533][T19672] IPv6: NLM_F_CREATE should be set when creating new route
[  785.392088][T19681] netlink: 'syz.4.4376': attribute type 21 has an invalid length.
[  785.464556][T19681] netlink: 'syz.4.4376': attribute type 1 has an invalid length.
[  785.476338][T19681] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4376'.
[  785.538933][T19622] device hsr_slave_0 entered promiscuous mode
[  785.556095][T19622] device hsr_slave_1 entered promiscuous mode
[  785.588324][T19622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  785.625938][T19622] Cannot create hsr debugfs directory
[  785.636302][T19675] netlink: 'syz.3.4375': attribute type 10 has an invalid length.
[  785.970318][T14332] Bluetooth: hci2: command 0x0409 tx timeout
[  786.516319][T19622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.719757][T19622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.935410][T19622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.188407][T19622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.574802][T19622] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  787.617224][T19622] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  787.666697][T19724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  787.738732][T19724] net_ratelimit: 7330 callbacks suppressed
[  787.738753][T19724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  787.814643][T19622] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  787.844620][T19622] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  787.896899][T19732] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4390'.
[  787.980758][T19733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4390'.
[  788.056304][T14332] Bluetooth: hci2: command 0x041b tx timeout
[  788.297408][T19732] netlink: 'syz.4.4390': attribute type 10 has an invalid length.
[  788.328243][T19733] netlink: 'syz.4.4390': attribute type 25 has an invalid length.
[  788.365072][T19733] netlink: 'syz.4.4390': attribute type 25 has an invalid length.
[  788.440231][T19748] netlink: 'syz.3.4395': attribute type 21 has an invalid length.
[  788.476773][T19738] device syzkaller0 entered promiscuous mode
[  788.478434][T19748] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4395'.
[  789.880964][T19781] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4406'.
[  790.132019][T14332] Bluetooth: hci2: command 0x040f tx timeout
[  791.473683][T19622] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.481782][T19770] validate_nla: 1 callbacks suppressed
[  791.481796][T19770] netlink: 'syz.4.4403': attribute type 10 has an invalid length.
[  791.567682][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  791.592428][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  791.632045][T19622] 8021q: adding VLAN 0 to HW filter on device team0
[  791.665180][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  791.678755][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  791.702844][T11734] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.710019][T11734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.948309][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  791.957151][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  791.966420][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  791.975630][T11734] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.982824][T11734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  792.048773][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  792.089510][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  792.135300][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  792.204582][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  792.206498][T19810] netlink: 'syz.2.4414': attribute type 29 has an invalid length.
[  792.221821][T14332] Bluetooth: hci2: command 0x0419 tx timeout
[  792.267172][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  792.279558][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  792.291946][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  792.302802][T19810] netlink: 'syz.2.4414': attribute type 29 has an invalid length.
[  792.417015][T19811] netlink: 'syz.2.4414': attribute type 29 has an invalid length.
[  792.629832][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  792.659981][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  792.732466][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  792.773974][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  792.983832][T19622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  793.287710][T19818] device syzkaller0 entered promiscuous mode
[  793.298865][ T4283] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[  793.472250][T19837] netlink: 'syz.3.4419': attribute type 21 has an invalid length.
[  793.508091][T19837] netlink: 'syz.3.4419': attribute type 1 has an invalid length.
[  793.539869][T19837] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4419'.
[  795.577100][T19858] device syzkaller0 entered promiscuous mode
[  795.900954][T19872] netlink: 'syz.4.4429': attribute type 29 has an invalid length.
[  798.565605][T19872] netlink: 'syz.4.4429': attribute type 29 has an invalid length.
[  798.620314][ T4283] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  798.847672][T19883] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4431'.
[  799.039464][T19885] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4432'.
[  800.588131][T19885] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  800.621910][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  800.640898][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  800.662843][T19622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.743997][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  800.782187][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  800.827878][T19897] netlink: 'syz.2.4436': attribute type 27 has an invalid length.
[  800.840532][T19897] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4436'.
[  800.898500][T19897] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  801.035129][T19905] netlink: 'syz.4.4435': attribute type 10 has an invalid length.
[  801.094726][T19910] netlink: 'syz.3.4438': attribute type 21 has an invalid length.
[  801.113893][T19910] netlink: 'syz.3.4438': attribute type 1 has an invalid length.
[  801.126956][T19622] device veth0_vlan entered promiscuous mode
[  801.139319][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  801.154126][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  801.163843][T19910] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4438'.
[  801.185938][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  801.229625][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  801.354163][T19622] device veth1_vlan entered promiscuous mode
[  801.434010][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  801.449505][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  801.470373][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  801.500169][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  801.522683][T19919] netlink: 'syz.1.4441': attribute type 3 has an invalid length.
[  801.531283][T19919] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4441'.
[  801.544612][T19622] device veth0_macvtap entered promiscuous mode
[  801.564635][T19622] device veth1_macvtap entered promiscuous mode
[  801.629373][T19622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.661422][T19622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.686137][T19622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.702189][T19622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.715439][T19622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.727469][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  801.745280][T19926] netlink: 'syz.1.4442': attribute type 29 has an invalid length.
[  801.757560][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  801.767509][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  801.778904][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  801.790318][T19922] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4444'.
[  801.821018][T19926] netlink: 'syz.1.4442': attribute type 29 has an invalid length.
[  801.848782][T19930] netlink: 'syz.1.4442': attribute type 29 has an invalid length.
[  801.889474][T19622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.912663][T19622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.939069][T19622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.970275][T19622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.997942][T19622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.029108][T19622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.049486][T19622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.070443][T19622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.091194][T19622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.109674][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  802.127414][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  802.149097][T19622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.178336][T19622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.189025][T19622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.198028][T19622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.379981][ T7023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.402435][ T7023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.438946][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  802.499457][T11735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.507325][T11735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.560947][T11735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  802.680892][T19948] netlink: 'syz.3.4448': attribute type 2 has an invalid length.
[  802.695193][T19948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4448'.
[  805.613256][T19961] validate_nla: 1 callbacks suppressed
[  805.613319][T19961] netlink: 'syz.2.4452': attribute type 16 has an invalid length.
[  805.648199][T19961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4452'.
[  805.775212][T19961] netlink: 'syz.2.4452': attribute type 2 has an invalid length.
[  805.796941][T19961] netlink: 'syz.2.4452': attribute type 1 has an invalid length.
[  805.819708][T19961] netlink: 'syz.2.4452': attribute type 4 has an invalid length.
[  805.841030][T19961] netlink: 'syz.2.4452': attribute type 6 has an invalid length.
[  805.863944][T19961] netlink: 'syz.2.4452': attribute type 7 has an invalid length.
[  805.893690][T19961] netlink: 'syz.2.4452': attribute type 5 has an invalid length.
[  805.942789][T19961] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.4452'.
[  806.128794][T19981] delete_channel: no stack
[  806.477102][T19988] netlink: 'syz.3.4458': attribute type 21 has an invalid length.
[  806.485117][T19988] netlink: 'syz.3.4458': attribute type 1 has an invalid length.
[  806.498922][T19988] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4458'.
[  807.667054][T19977] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4455'.
[  807.728546][T19971] device syzkaller0 entered promiscuous mode
[  808.299722][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  808.306068][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  809.345604][T19985] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4457'.
[  809.358813][T19995] bond0: (slave dummy0): Error: Slave device does not support XDP
[  812.271458][T20041] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.4471'.
[  812.389586][T20044] netlink: 'syz.4.4474': attribute type 27 has an invalid length.
[  812.402283][T20044] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4474'.
[  812.445009][T20050] netlink: 'syz.1.4475': attribute type 21 has an invalid length.
[  812.499463][T20050] netlink: 'syz.1.4475': attribute type 1 has an invalid length.
[  812.507232][T20050] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4475'.
[  812.515097][T20052] netlink: 63579 bytes leftover after parsing attributes in process `syz.4.4474'.
[  812.619747][T20059] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4477'.
[  812.685699][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  812.829564][T20059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  813.973990][T20095] netlink: 'syz.1.4485': attribute type 10 has an invalid length.
[  814.013166][T20095] device hsr0 entered promiscuous mode
[  814.041504][T20095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  814.083646][T20095] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  814.924612][T20119] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4488'.
[  815.103560][T20126] netlink: 'syz.4.4492': attribute type 21 has an invalid length.
[  815.122902][T20126] netlink: 'syz.4.4492': attribute type 1 has an invalid length.
[  815.184315][T20126] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4492'.
[  820.310814][T20234] netlink: 'syz.4.4522': attribute type 21 has an invalid length.
[  820.332635][T20234] IPv6: NLM_F_CREATE should be specified when creating new route
[  820.396793][T20243] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4524'.
[  820.407304][T20244] netlink: 'syz.4.4522': attribute type 1 has an invalid length.
[  820.425092][T20235] netlink: 'syz.4.4522': attribute type 1 has an invalid length.
[  820.439364][T20234] IPv6: Can't replace route, no match found
[  820.455490][T20244] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.4522'.
[  820.463959][T20235] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.4522'.
[  820.582149][T20230] netlink: 'syz.0.4521': attribute type 10 has an invalid length.
[  823.472124][T20230] 8021q: adding VLAN 0 to HW filter on device team0
[  823.511723][T20230] bond0: (slave team0): Enslaving as an active interface with an up link
[  826.257466][T20277] device veth0_vlan left promiscuous mode
[  826.264921][T20277] device veth0_vlan entered promiscuous mode
[  826.307231][T20291] netlink: 'syz.3.4537': attribute type 10 has an invalid length.
[  826.637185][T20295] netlink: 'syz.4.4539': attribute type 10 has an invalid length.
[  826.678025][T20295] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4539'.
[  827.036601][T20329] netlink: 'syz.4.4548': attribute type 21 has an invalid length.
[  827.045370][T20329] netlink: 'syz.4.4548': attribute type 1 has an invalid length.
[  827.061726][T20329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4548'.
[  827.119401][T20332] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4549'.
[  828.613614][T20364] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4556'.
[  829.166226][T20374] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4559'.
[  829.382317][T20386] netlink: 'syz.0.4563': attribute type 9 has an invalid length.
[  829.396406][T20386] netlink: 668 bytes leftover after parsing attributes in process `syz.0.4563'.
[  829.876264][T20384] netlink: 'syz.4.4561': attribute type 21 has an invalid length.
[  829.908640][T20384] netlink: 'syz.4.4561': attribute type 1 has an invalid length.
[  829.923287][T20384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4561'.
[  830.614788][T20414] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4571'.
[  830.706858][T20398] netlink: 'syz.4.4567': attribute type 3 has an invalid length.
[  830.744586][T20398] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4567'.
[  831.464769][T20430] netlink: 'syz.3.4573': attribute type 10 has an invalid length.
[  832.022279][T20430] device veth0_vlan left promiscuous mode
[  832.107474][T20430] device veth0_vlan entered promiscuous mode
[  832.276611][T20430] team0: Device veth0_vlan failed to register rx_handler
[  832.290634][T20462] netlink: 'syz.2.4584': attribute type 3 has an invalid length.
[  832.330840][T20462] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4584'.
[  833.235993][T20442] netlink: 'syz.4.4577': attribute type 21 has an invalid length.
[  833.244246][T20442] netlink: 'syz.4.4577': attribute type 1 has an invalid length.
[  833.263157][T20442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4577'.
[  833.291512][T20456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  833.305337][T20456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  833.329058][T20456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  833.347017][T20456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  833.499243][T20469] netlink: 'syz.2.4586': attribute type 10 has an invalid length.
[  833.519685][T20469] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4586'.
[  833.855823][T20477] netlink: 'syz.0.4587': attribute type 4 has an invalid length.
[  834.192485][T20484] netlink: 'syz.2.4591': attribute type 10 has an invalid length.
[  834.260531][T20484] netlink: 'syz.2.4591': attribute type 19 has an invalid length.
[  834.287761][T20484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4591'.
[  835.140756][T20509] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.4598'.
[  835.844900][T20533] netlink: 'syz.2.4604': attribute type 21 has an invalid length.
[  835.868169][T20533] netlink: 'syz.2.4604': attribute type 1 has an invalid length.
[  835.885649][T20533] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4604'.
[  835.897985][T20529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  835.964420][T20529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.178791][T20539] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4605'.
[  838.386497][T20563] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4611'.
[  838.406407][T20563] validate_nla: 2 callbacks suppressed
[  838.406422][T20563] netlink: 'syz.2.4611': attribute type 21 has an invalid length.
[  838.634084][T20572] netlink: 'syz.0.4616': attribute type 21 has an invalid length.
[  838.659489][T20572] netlink: 'syz.0.4616': attribute type 1 has an invalid length.
[  838.678153][T20572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4616'.
[  838.694137][T20573] netlink: 'syz.2.4617': attribute type 21 has an invalid length.
[  838.718142][T20573] netlink: 'syz.2.4617': attribute type 1 has an invalid length.
[  838.779195][T20573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4617'.
[  841.602595][T20594] netlink: 'syz.0.4620': attribute type 21 has an invalid length.
[  841.612054][T20594] netlink: 'syz.0.4620': attribute type 1 has an invalid length.
[  841.641148][T20594] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4620'.
[  841.892310][T20613] netlink: 'syz.2.4625': attribute type 21 has an invalid length.
[  841.907904][T20613] netlink: 'syz.2.4625': attribute type 1 has an invalid length.
[  841.949222][T20613] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4625'.
[  842.046106][T20608] device syzkaller0 entered promiscuous mode
[  842.406212][T20630] netlink: 'syz.3.4629': attribute type 29 has an invalid length.
[  844.444457][T20630] netlink: 'syz.3.4629': attribute type 29 has an invalid length.
[  844.567659][T20643] netlink: 'syz.4.4631': attribute type 21 has an invalid length.
[  844.598128][T20643] netlink: 'syz.4.4631': attribute type 1 has an invalid length.
[  844.606053][T20643] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4631'.
[  844.679585][T20644] netlink: 'syz.0.4641': attribute type 153 has an invalid length.
[  844.693692][T20644] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.4641'.
[  844.763193][T20650] netlink: 'syz.1.4633': attribute type 21 has an invalid length.
[  844.828824][T20650] netlink: 'syz.1.4633': attribute type 1 has an invalid length.
[  844.836828][T20650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4633'.
[  845.228604][T20672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4639'.
[  845.259601][T20673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4638'.
[  845.342834][T20677] netlink: 'syz.4.4640': attribute type 2 has an invalid length.
[  845.377086][T20677] device 0 entered promiscuous mode
[  845.627002][T20680] netlink: 'syz.1.4642': attribute type 21 has an invalid length.
[  845.635651][T20680] netlink: 'syz.1.4642': attribute type 1 has an invalid length.
[  845.643822][T20680] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4642'.
[  845.691284][T20684] netlink: 'syz.0.4644': attribute type 29 has an invalid length.
[  845.860125][T20690] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.4646'.
[  845.981852][T20693] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4647'.
[  846.377706][T20708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4651'.
[  846.449851][T20711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4652'.
[  847.095040][T20730] device 0 entered promiscuous mode
[  849.096824][T20790] device 1 entered promiscuous mode
[  849.669190][T20816] validate_nla: 23 callbacks suppressed
[  849.669338][T20816] netlink: 'syz.3.4682': attribute type 3 has an invalid length.
[  849.686925][T20816] __nla_validate_parse: 6 callbacks suppressed
[  849.687129][T20816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4682'.
[  849.786359][T20821] netlink: 'syz.1.4684': attribute type 21 has an invalid length.
[  849.816698][T20821] netlink: 'syz.1.4684': attribute type 1 has an invalid length.
[  849.843087][T20821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4684'.
[  849.900049][T20822] tipc: Started in network mode
[  849.907916][T20822] tipc: Node identity 9215a268, cluster identity 4711
[  849.936253][T20822] tipc: Node number set to 2450891368
[  852.346625][T20840] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.4687'.
[  852.357426][T20844] netlink: 'syz.1.4699': attribute type 21 has an invalid length.
[  852.365452][T20844] netlink: 'syz.1.4699': attribute type 1 has an invalid length.
[  852.373527][T20844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4699'.
[  852.525569][T20861] sctp: [Deprecated]: syz.2.4692 (pid 20861) Use of struct sctp_assoc_value in delayed_ack socket option.
[  852.525569][T20861] Use struct sctp_sack_info instead
[  852.566995][T20860] netlink: 'syz.1.4691': attribute type 2 has an invalid length.
[  852.987574][T20860] device 1 entered promiscuous mode
[  853.110264][T20873] netlink: 'syz.4.4695': attribute type 3 has an invalid length.
[  853.157958][T20873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4695'.
[  853.551720][T20877] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.4696'.
[  853.582097][T20877] netlink: zone id is out of range
[  853.595239][T20877] netlink: zone id is out of range
[  853.605107][T20877] netlink: zone id is out of range
[  853.613007][T20886] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4696'.
[  853.640262][T20877] netlink: zone id is out of range
[  853.646567][T20877] netlink: zone id is out of range
[  853.705674][T20877] netlink: zone id is out of range
[  853.724149][T20897] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4701'.
[  853.744653][T20877] netlink: zone id is out of range
[  853.756097][T20896] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4701'.
[  853.776766][T20877] netlink: get zone limit has 8 unknown bytes
[  853.922396][T20902] netlink: 'syz.2.4702': attribute type 21 has an invalid length.
[  853.963969][T20902] netlink: 'syz.2.4702': attribute type 1 has an invalid length.
[  853.998255][T20902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4702'.
[  854.663097][T20922] netlink: 'syz.3.4711': attribute type 2 has an invalid length.
[  854.774471][T20924] validate_nla: 1 callbacks suppressed
[  854.774515][T20924] netlink: 'syz.0.4712': attribute type 3 has an invalid length.
[  854.803197][T20924] __nla_validate_parse: 1 callbacks suppressed
[  854.803228][T20924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4712'.
[  854.886486][T20927] netlink: 'syz.2.4713': attribute type 10 has an invalid length.
[  854.918412][T20927] device syz_tun entered promiscuous mode
[  854.992539][T20936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4713'.
[  855.317677][T20946] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4718'.
[  855.715590][T20957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4722'.
[  855.751928][T20957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4722'.
[  855.848461][T20958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4722'.
[  855.909900][T20960] netlink: 'syz.4.4723': attribute type 21 has an invalid length.
[  855.935448][T20960] netlink: 'syz.4.4723': attribute type 1 has an invalid length.
[  855.968187][T20960] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4723'.
[  856.046700][T20969] delete_channel: no stack
[  856.089810][T20969] delete_channel: no stack
[  857.389992][T21009] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4734'.
[  858.981000][T21029] netlink: 'syz.1.4740': attribute type 21 has an invalid length.
[  859.014552][T21029] netlink: 'syz.1.4740': attribute type 1 has an invalid length.
[  859.113114][T21029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4740'.
[  859.281428][T21034] netlink: 'syz.0.4742': attribute type 21 has an invalid length.
[  859.331591][T21034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4742'.
[  861.921676][T21063] dvmrp1: tun_chr_ioctl cmd 1074025677
[  861.930205][T21063] dvmrp1: linktype set to 768
[  862.264298][T21077] syz.0.4756[21077] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  862.264390][T21077] syz.0.4756[21077] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  862.345920][T21077] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  862.442164][T21077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  862.490605][T21080] netlink: 'syz.2.4757': attribute type 21 has an invalid length.
[  862.519130][T21080] netlink: 'syz.2.4757': attribute type 1 has an invalid length.
[  862.543298][T21080] __nla_validate_parse: 1 callbacks suppressed
[  862.543334][T21080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4757'.
[  862.632068][T21088] netlink: 'syz.4.4758': attribute type 10 has an invalid length.
[  862.649968][T21088] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.666352][T21091] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.4759'.
[  862.676267][T21088] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.706878][T21088] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.735812][T21088] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  863.243745][T21098] netlink: 'syz.0.4760': attribute type 7 has an invalid length.
[  863.278106][T21098] netlink: 'syz.0.4760': attribute type 7 has an invalid length.
[  863.285997][T21098] netlink: 160836 bytes leftover after parsing attributes in process `syz.0.4760'.
[  863.435628][T21106] netlink: 'syz.1.4763': attribute type 3 has an invalid length.
[  863.443788][T21106] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4763'.
[  864.156206][T21122] netlink: 'syz.1.4769': attribute type 30 has an invalid length.
[  864.217508][T21122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4769'.
[  864.586108][T21130] netlink: 'syz.2.4772': attribute type 21 has an invalid length.
[  864.604421][T21130] netlink: 'syz.2.4772': attribute type 1 has an invalid length.
[  864.650396][T21130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4772'.
[  864.954861][T21144] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4774'.
[  865.800686][T21180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4785'.
[  865.847438][T21180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4785'.
[  865.895438][T21180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4785'.
[  866.310350][T21205] netlink: 'syz.2.4792': attribute type 21 has an invalid length.
[  866.612321][T21220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  866.669841][T21220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  867.615813][T21241] validate_nla: 3 callbacks suppressed
[  867.615831][T21241] netlink: 'syz.3.4800': attribute type 29 has an invalid length.
[  867.651409][T21238] can: request_module (can-proto-0) failed.
[  867.682555][T21241] netlink: 'syz.3.4800': attribute type 29 has an invalid length.
[  868.159861][T21262] __nla_validate_parse: 4 callbacks suppressed
[  868.159892][T21262] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4802'.
[  868.239084][T21272] netlink: 'syz.4.4808': attribute type 21 has an invalid length.
[  868.259909][T21272] netlink: 'syz.4.4808': attribute type 1 has an invalid length.
[  868.268621][T21272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4808'.
[  868.324193][T21262] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  868.340639][T21275] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.4809'.
[  868.693284][T21287] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4802'.
[  869.260888][T21303] netlink: 'syz.1.4813': attribute type 21 has an invalid length.
[  869.286635][T21303] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4813'.
[  869.544544][T21310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4814'.
[  869.733383][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  869.739861][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  869.795550][T21314] netlink: 'syz.1.4816': attribute type 21 has an invalid length.
[  869.807202][T21314] IPv6: NLM_F_CREATE should be specified when creating new route
[  869.821194][T21314] IPv6: Can't replace route, no match found
[  870.482818][T21320] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4818'.
[  870.925977][T21330] netlink: 'syz.0.4822': attribute type 21 has an invalid length.
[  870.966003][T21330] netlink: 'syz.0.4822': attribute type 1 has an invalid length.
[  870.987162][T21330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4822'.
[  870.999024][T21327] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4820'.
[  871.079235][T21333] netlink: 'syz.1.4821': attribute type 9 has an invalid length.
[  871.139679][T21333] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4821'.
[  871.710970][T21344] netlink: 'syz.1.4825': attribute type 3 has an invalid length.
[  872.800264][T21382] validate_nla: 1 callbacks suppressed
[  872.800309][T21382] netlink: 'syz.3.4836': attribute type 21 has an invalid length.
[  872.841895][T21382] netlink: 'syz.3.4836': attribute type 1 has an invalid length.
[  873.072861][T21393] netlink: 'syz.0.4838': attribute type 5 has an invalid length.
[  873.629544][ T7014] tipc: Subscription rejected, illegal request
[  873.811669][T21420] sctp: [Deprecated]: syz.3.4848 (pid 21420) Use of struct sctp_assoc_value in delayed_ack socket option.
[  873.811669][T21420] Use struct sctp_sack_info instead
[  873.856962][T21416] __nla_validate_parse: 5 callbacks suppressed
[  873.856979][T21416] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4846'.
[  873.882462][T21418] tap0: tun_chr_ioctl cmd 1074025688
[  874.026061][T21426] netlink: 'syz.1.4851': attribute type 21 has an invalid length.
[  874.064377][T21426] netlink: 'syz.1.4851': attribute type 1 has an invalid length.
[  874.100700][T21426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4851'.
[  875.303940][T21452] Dead loop on virtual device ip6_vti0, fix it urgently!
[  875.314582][T21452] Dead loop on virtual device ip6_vti0, fix it urgently!
[  876.144148][T21468] netlink: 'syz.2.4863': attribute type 5 has an invalid length.
[  876.422606][T21477] netlink: 'syz.0.4865': attribute type 21 has an invalid length.
[  876.440994][T21477] netlink: 'syz.0.4865': attribute type 1 has an invalid length.
[  876.460991][T21477] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4865'.
[  876.580928][T21481] netlink: 'syz.4.4867': attribute type 21 has an invalid length.
[  876.599627][T21481] netlink: 'syz.4.4867': attribute type 1 has an invalid length.
[  876.621443][T21481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4867'.
[  877.835668][T21516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4878'.
[  878.024932][T21528] netlink: 'syz.0.4882': attribute type 21 has an invalid length.
[  878.043065][T21528] netlink: 'syz.0.4882': attribute type 1 has an invalid length.
[  878.080558][T21528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4882'.
[  878.236611][T21542] netlink: 'syz.0.4887': attribute type 21 has an invalid length.
[  878.250485][T21542] netlink: 'syz.0.4887': attribute type 1 has an invalid length.
[  878.262797][T21542] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4887'.
[  878.686932][T21554] delete_channel: no stack
[  882.069998][T21585] netlink: 'syz.3.4897': attribute type 21 has an invalid length.
[  882.105414][T21585] netlink: 'syz.3.4897': attribute type 1 has an invalid length.
[  882.140296][T21585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4897'.
[  882.418107][T21592] syzkaller0: mtu less than device minimum
[  882.696594][T21610] netlink: 'syz.0.4904': attribute type 21 has an invalid length.
[  882.706734][T21610] netlink: 'syz.0.4904': attribute type 1 has an invalid length.
[  882.718846][T21611] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.4903'.
[  882.726919][T21610] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4904'.
[  883.118258][T21634] netlink: 'syz.1.4911': attribute type 21 has an invalid length.
[  883.136740][T21634] netlink: 'syz.1.4911': attribute type 1 has an invalid length.
[  883.145133][T21634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4911'.
[  883.156178][T21636] FAULT_INJECTION: forcing a failure.
[  883.156178][T21636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  883.208821][T21636] CPU: 1 PID: 21636 Comm: syz.3.4912 Not tainted syzkaller #0
[  883.216361][T21636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  883.226451][T21636] Call Trace:
[  883.229760][T21636]  <TASK>
[  883.232724][T21636]  dump_stack_lvl+0x188/0x24e
[  883.237455][T21636]  ? show_regs_print_info+0x12/0x12
[  883.242734][T21636]  ? load_image+0x410/0x410
[  883.247282][T21636]  ? __lock_acquire+0x7c40/0x7c40
[  883.252348][T21636]  ? perf_trace_buf_update+0xa8/0x230
[  883.257851][T21636]  ? perf_tp_event+0xc10/0xc10
[  883.262711][T21636]  should_fail_ex+0x390/0x4c0
[  883.267458][T21636]  _copy_from_user+0x2c/0x170
[  883.272168][T21636]  ___sys_sendmsg+0x1c3/0x360
[  883.276871][T21636]  ? __sys_sendmsg+0x2a0/0x2a0
[  883.281685][T21636]  __se_sys_sendmsg+0x1c3/0x2b0
[  883.286585][T21636]  ? ct_nmi_exit+0x145/0x1c0
[  883.291190][T21636]  ? __x64_sys_sendmsg+0x80/0x80
[  883.296157][T21636]  ? lockdep_hardirqs_on+0x94/0x140
[  883.301375][T21636]  do_syscall_64+0x4c/0xa0
[  883.305803][T21636]  ? clear_bhb_loop+0x60/0xb0
[  883.310501][T21636]  ? clear_bhb_loop+0x60/0xb0
[  883.315207][T21636]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  883.321128][T21636] RIP: 0033:0x7f61cc79e019
[  883.325557][T21636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.345176][T21636] RSP: 002b:00007f61cd6a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  883.353611][T21636] RAX: ffffffffffffffda RBX: 00007f61cca25fa0 RCX: 00007f61cc79e019
[  883.361625][T21636] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  883.369602][T21636] RBP: 00007f61cd6a2090 R08: 0000000000000000 R09: 0000000000000000
[  883.377592][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.385574][T21636] R13: 00007f61cca26038 R14: 00007f61cca25fa0 R15: 00007ffcf5676118
[  883.393565][T21636]  </TASK>
[  883.543595][T21645] netlink: 'syz.4.4913': attribute type 5 has an invalid length.
[  883.750728][T21651] device batadv0 entered promiscuous mode
[  884.146073][T21666] netlink: 'syz.2.4918': attribute type 29 has an invalid length.
[  884.161298][T21666] netlink: 'syz.2.4918': attribute type 29 has an invalid length.
[  884.189256][T21666] netlink: 'syz.2.4918': attribute type 29 has an invalid length.
[  884.236473][T21666] netlink: 'syz.2.4918': attribute type 29 has an invalid length.
[  884.329398][T21676] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4924'.
[  884.432225][T21676] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4924'.
[  884.482396][T21684] FAULT_INJECTION: forcing a failure.
[  884.482396][T21684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  884.514994][T21684] CPU: 1 PID: 21684 Comm: syz.1.4925 Not tainted syzkaller #0
[  884.522519][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  884.532630][T21684] Call Trace:
[  884.535939][T21684]  <TASK>
[  884.538898][T21684]  dump_stack_lvl+0x188/0x24e
[  884.543623][T21684]  ? show_regs_print_info+0x12/0x12
[  884.548875][T21684]  ? load_image+0x410/0x410
[  884.553421][T21684]  should_fail_ex+0x390/0x4c0
[  884.558146][T21684]  _copy_from_user+0x2c/0x170
[  884.562851][T21684]  iovec_from_user+0x143/0x360
[  884.567634][T21684]  __import_iovec+0x6c/0x510
[  884.572260][T21684]  import_iovec+0x6f/0xa0
[  884.576636][T21684]  ___sys_sendmsg+0x252/0x360
[  884.581340][T21684]  ? __sys_sendmsg+0x2a0/0x2a0
[  884.586166][T21684]  __se_sys_sendmsg+0x1c3/0x2b0
[  884.591040][T21684]  ? ct_nmi_exit+0x145/0x1c0
[  884.595654][T21684]  ? __x64_sys_sendmsg+0x80/0x80
[  884.600636][T21684]  ? lockdep_hardirqs_on+0x94/0x140
[  884.605865][T21684]  do_syscall_64+0x4c/0xa0
[  884.610310][T21684]  ? clear_bhb_loop+0x60/0xb0
[  884.615045][T21684]  ? clear_bhb_loop+0x60/0xb0
[  884.619757][T21684]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  884.625680][T21684] RIP: 0033:0x7f81c6b9e019
[  884.630117][T21684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  884.649767][T21684] RSP: 002b:00007f81c7a1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  884.658201][T21684] RAX: ffffffffffffffda RBX: 00007f81c6e25fa0 RCX: 00007f81c6b9e019
[  884.666191][T21684] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  884.674194][T21684] RBP: 00007f81c7a1d090 R08: 0000000000000000 R09: 0000000000000000
[  884.682181][T21684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.690164][T21684] R13: 00007f81c6e26038 R14: 00007f81c6e25fa0 R15: 00007ffe25e671f8
[  884.698180][T21684]  </TASK>
[  887.540069][T21700] netlink: 'syz.3.4928': attribute type 5 has an invalid length.
[  887.551612][T21702] netlink: 'syz.0.4929': attribute type 21 has an invalid length.
[  887.610722][T21702] netlink: 'syz.0.4929': attribute type 1 has an invalid length.
[  887.630749][T21702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4929'.
[  887.986797][T21727] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4935'.
[  888.263756][T21723] netlink: 'syz.2.4935': attribute type 4 has an invalid length.
[  888.326528][T21723] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4935'.
[  889.403466][T21746] netlink: 'syz.4.4940': attribute type 1 has an invalid length.
[  889.412253][T21746] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.4940'.
[  890.819828][T21769] netlink: 'syz.3.4947': attribute type 13 has an invalid length.
[  890.863554][T21769] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4947'.
[  893.212629][T21769] erspan0: refused to change device tx_queue_len
[  893.421518][ T7014] device 0 left promiscuous mode
[  895.639266][T21835] netlink: 'syz.4.4969': attribute type 22 has an invalid length.
[  895.680453][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4969'.
[  897.272011][T21902] device syzkaller0 entered promiscuous mode
[  897.279331][T21908] netlink: 'syz.1.4987': attribute type 39 has an invalid length.
[  897.932840][T21924] netlink: 'syz.3.4994': attribute type 2 has an invalid length.
[  897.941084][T21924] netlink: 'syz.3.4994': attribute type 1 has an invalid length.
[  897.952705][T21924] netlink: 'syz.3.4994': attribute type 4 has an invalid length.
[  897.960629][T21924] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.4994'.
[  899.316857][T21918] netlink: 'syz.2.4993': attribute type 21 has an invalid length.
[  899.328468][T21918] netlink: 'syz.2.4993': attribute type 1 has an invalid length.
[  899.336530][T21918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4993'.
[  899.361090][T21921] netlink: 'syz.3.4994': attribute type 16 has an invalid length.
[  899.375320][T21921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4994'.
[  899.451670][ T7014] device hsr_slave_0 left promiscuous mode
[  899.458792][ T7014] device hsr_slave_1 left promiscuous mode
[  899.465297][ T7014] bridge0: port 3(team0) entered disabled state
[  899.475609][ T7014] device bridge_slave_0 left promiscuous mode
[  899.482826][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.539626][ T7014] device veth1_vlan left promiscuous mode
[  899.545476][ T7014] device veth0_vlan left promiscuous mode
[  900.393607][ T7014] device team_slave_1 left promiscuous mode
[  900.407458][ T7014] team0 (unregistering): Port device team_slave_1 removed
[  900.455025][ T7014] device team_slave_0 left promiscuous mode
[  900.467590][ T7014] team0 (unregistering): Port device team_slave_0 removed
[  900.527172][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  900.833811][ T7014] bond0 (unregistering): Released all slaves
[  900.917870][T21945] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4999'.
[  900.937143][T21947] netlink: 'syz.3.5000': attribute type 10 has an invalid length.
[  900.959000][T21947] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.984601][T21947] device bridge_slave_1 left promiscuous mode
[  900.991264][T21947] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.083432][T21953] device syzkaller0 entered promiscuous mode
[  902.842348][T21970] device sit0 entered promiscuous mode
[  902.875846][T21975] netlink: 'syz.3.5007': attribute type 21 has an invalid length.
[  902.909300][T21975] netlink: 'syz.3.5007': attribute type 1 has an invalid length.
[  902.917343][T21975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5007'.
[  903.123339][T21980] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5009'.
[  903.166955][T21982] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  903.305938][T21980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5009'.
[  903.342758][T21982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.544179][T21993] netlink: 'syz.3.5012': attribute type 29 has an invalid length.
[  903.593807][T21993] netlink: 'syz.3.5012': attribute type 29 has an invalid length.
[  903.639761][T21992] netlink: 'syz.3.5012': attribute type 29 has an invalid length.
[  903.733807][T21992] netlink: 'syz.3.5012': attribute type 3 has an invalid length.
[  903.781915][T21992] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5012'.
[  904.112781][T22009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  904.125064][T22009] batman_adv: batadv0: Removing interface: batadv_slave_0
[  904.136454][T22009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  904.149503][T22009] batman_adv: batadv0: Removing interface: batadv_slave_1
[  904.316895][T22006] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5016'.
[  904.932469][T22033] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5025'.
[  904.956505][T22033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  905.552918][T22063] netlink: 'syz.4.5031': attribute type 12 has an invalid length.
[  905.601905][T22063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5031'.
[  905.869094][T22075] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5038'.
[  905.894543][T22075] netlink: 'syz.0.5038': attribute type 25 has an invalid length.
[  905.910353][T22075] netlink: 'syz.0.5038': attribute type 25 has an invalid length.
[  905.992711][T22080] netlink: 'syz.2.5036': attribute type 21 has an invalid length.
[  906.007984][T22080] netlink: 'syz.2.5036': attribute type 6 has an invalid length.
[  906.058074][T22080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5036'.
[  906.132397][T22091] netlink: 'syz.0.5042': attribute type 10 has an invalid length.
[  906.158531][T22091] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5042'.
[  906.305746][T22079] delete_channel: no stack
[  906.747480][T22108] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5047'.
[  906.838760][T22111] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5049'.
[  906.873055][T22111] netlink: 'syz.0.5049': attribute type 10 has an invalid length.
[  906.971827][T22111] bond0: (slave team0): Releasing backup interface
[  907.117586][T14332] Bluetooth: hci1: ISO packet for unknown connection handle 10
[  907.136213][T22119] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.5051'.
[  907.173820][T22111] team0 (unregistering): Port device team_slave_0 removed
[  907.296589][T22111] team0 (unregistering): Port device team_slave_1 removed
[  907.355769][T22121] dvmrp1: tun_chr_ioctl cmd 1074025677
[  907.366518][T22121] dvmrp1: linktype set to 768
[  907.474347][T22124] netlink: 'syz.2.5052': attribute type 21 has an invalid length.
[  907.493788][T22124] netlink: 'syz.2.5052': attribute type 1 has an invalid length.
[  907.513169][T22124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5052'.
[  907.648222][T14332] Bluetooth: hci2: command 0x0406 tx timeout
[  908.744226][T22173] netlink: 'syz.0.5063': attribute type 22 has an invalid length.
[  908.772915][T22173] netlink: 12258 bytes leftover after parsing attributes in process `syz.0.5063'.
[  909.664195][T22194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5071'.
[  910.283348][T22212] netlink: 'syz.4.5075': attribute type 10 has an invalid length.
[  910.334577][T22212] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.5075'.
[  910.508291][T22226] device sit0 left promiscuous mode
[  910.701652][T22230] syz.2.5082[22230] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  910.701774][T22230] syz.2.5082[22230] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  910.950906][T22238] netlink: 'syz.3.5083': attribute type 25 has an invalid length.
[  911.068156][T22238] netlink: 'syz.3.5083': attribute type 3 has an invalid length.
[  911.093892][T22238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5083'.
[  911.110876][T22227] device sit0 entered promiscuous mode
[  911.279076][T22234] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.5082'.
[  911.429527][T22246] netlink: 'syz.0.5085': attribute type 21 has an invalid length.
[  911.460790][T22246] netlink: 'syz.0.5085': attribute type 1 has an invalid length.
[  911.471967][T22246] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5085'.
[  911.574833][T22249] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5085'.
[  911.627406][T22249] netlink: 'syz.0.5085': attribute type 21 has an invalid length.
[  912.150035][T22272] netlink: 'syz.3.5093': attribute type 2 has an invalid length.
[  912.603534][T22288] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.5099'.
[  913.486167][T22306] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5102'.
[  913.515289][T22307] IPv6: Can't replace route, no match found
[  913.542465][T22308] IPv6: Can't replace route, no match found
[  913.575019][T22310] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.5102'.
[  913.950391][T22316] netlink: 'syz.2.5107': attribute type 28 has an invalid length.
[  913.999331][T22316] netlink: 'syz.2.5107': attribute type 3 has an invalid length.
[  914.031418][T22316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5107'.
[  914.185058][T22319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  914.253252][T22319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  914.799967][T22339] netlink: 'syz.2.5113': attribute type 21 has an invalid length.
[  914.838569][T22339] netlink: 'syz.2.5113': attribute type 1 has an invalid length.
[  914.846348][T22339] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5113'.
[  914.994538][T22345] netlink: 'syz.3.5115': attribute type 29 has an invalid length.
[  917.020556][T22424] validate_nla: 10 callbacks suppressed
[  917.020572][T22424] netlink: 'syz.3.5135': attribute type 21 has an invalid length.
[  917.050430][T22424] netlink: 'syz.3.5135': attribute type 1 has an invalid length.
[  917.058483][T22424] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5135'.
[  917.197994][T22430] netlink: 'syz.2.5137': attribute type 10 has an invalid length.
[  918.112859][T22461] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5143'.
[  918.223198][T22461] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  919.354780][T22492] netlink: 'syz.3.5156': attribute type 21 has an invalid length.
[  919.368058][T22492] netlink: 'syz.3.5156': attribute type 1 has an invalid length.
[  919.383363][T22494] netlink: 'syz.4.5154': attribute type 3 has an invalid length.
[  919.407213][T22492] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5156'.
[  919.436016][T22494] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5154'.
[  919.462610][T22491] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  919.799150][T22514] netlink: 'syz.0.5160': attribute type 3 has an invalid length.
[  919.807444][T22514] netlink: 'syz.0.5160': attribute type 1 has an invalid length.
[  919.816201][T22514] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.5160'.
[  920.748473][T22554] netlink: 'syz.2.5171': attribute type 12 has an invalid length.
[  920.850985][T22556] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5173'.
[  921.266023][T22565] IPv6: pim6reg1: Disabled Multicast RS
[  921.336054][T22567] netlink: 'syz.0.5177': attribute type 21 has an invalid length.
[  921.378261][T22567] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5177'.
[  922.504196][T22617] validate_nla: 1 callbacks suppressed
[  922.504208][T22617] netlink: 'syz.4.5191': attribute type 46 has an invalid length.
[  922.517981][T22617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5191'.
[  922.539502][T22617] netlink: 9087 bytes leftover after parsing attributes in process `syz.4.5191'.
[  922.735153][T22626] netlink: 'syz.2.5194': attribute type 10 has an invalid length.
[  922.745113][T22626] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5194'.
[  923.010161][T22641] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5199'.
[  924.586909][T22668] netlink: 'syz.4.5206': attribute type 39 has an invalid length.
[  924.603397][T22673] netlink: 'syz.2.5207': attribute type 2 has an invalid length.
[  924.631010][T22673] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.5207'.
[  924.932816][T22673] netlink: 'syz.2.5207': attribute type 22 has an invalid length.
[  925.161218][T22696] netlink: 'syz.3.5214': attribute type 10 has an invalid length.
[  925.228815][T22696] netlink: 'syz.3.5214': attribute type 4 has an invalid length.
[  925.279226][T22696] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5214'.
[  925.323281][T22696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  925.375518][T22702] netlink: 'syz.0.5217': attribute type 28 has an invalid length.
[  925.413040][T22702] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5217'.
[  925.910033][T22722] sctp: [Deprecated]: syz.3.5220 (pid 22722) Use of struct sctp_assoc_value in delayed_ack socket option.
[  925.910033][T22722] Use struct sctp_sack_info instead
[  926.094541][T22722] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5220'.
[  926.466241][T22734] netlink: 'syz.4.5228': attribute type 16 has an invalid length.
[  926.498966][T22734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5228'.
[  926.730896][T22734] netlink: 'syz.4.5228': attribute type 10 has an invalid length.
[  926.761632][T22734] device macvlan0 left promiscuous mode
[  928.305897][T22785] netlink: 'syz.1.5246': attribute type 21 has an invalid length.
[  928.315654][T22785] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.5246'.
[  928.333573][T22785] netlink: 'syz.1.5246': attribute type 10 has an invalid length.
[  928.342000][T22785] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5246'.
[  929.254217][T22809] netlink: 'syz.4.5251': attribute type 39 has an invalid length.
[  929.299612][T22811] netlink: 'syz.2.5252': attribute type 1 has an invalid length.
[  929.331925][T22811] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5252'.
[  929.381285][T22811] netlink: 'syz.2.5252': attribute type 29 has an invalid length.
[  929.454197][T22816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5252'.
[  929.512673][T22809] device hsr_slave_1 left promiscuous mode
[  929.664841][T22811] netlink: 'syz.2.5252': attribute type 29 has an invalid length.
[  929.723761][T22820] netlink: 'syz.0.5255': attribute type 10 has an invalid length.
[  929.742412][T22820] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.751031][T22820] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.995410][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.123152][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.133242][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.142581][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.153102][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.164248][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.173848][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.183914][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.193251][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.328402][T22828] net_ratelimit: 120 callbacks suppressed
[  930.328424][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.343837][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.353121][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.363299][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.372596][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.383285][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.392600][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.401965][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.412590][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  930.421936][T22828] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  931.169960][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.176400][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  932.149285][T22842] mac80211_hwsim hwsim124 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  932.841380][T22882] netlink: 'syz.3.5275': attribute type 21 has an invalid length.
[  932.852417][T22882] netlink: 'syz.3.5275': attribute type 1 has an invalid length.
[  932.873118][T22882] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5275'.
[  933.139602][T22899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5279'.
[  934.314085][T22936] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.641926][T22943] device bridge_slave_1 left promiscuous mode
[  934.688494][T22943] bridge0: port 2(bridge_slave_1) entered disabled state
[  935.230588][T22944] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5291'.
[  935.333117][T22955] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.5294'.
[  935.401100][T22955] net_ratelimit: 3127 callbacks suppressed
[  935.401116][T22955] openvswitch: netlink: Key type 386 is out of range max 32
[  935.443651][T22957] netlink: 'syz.3.5295': attribute type 4 has an invalid length.
[  935.472411][T22957] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5295'.
[  936.126293][T22979] netlink: 'syz.0.5301': attribute type 5 has an invalid length.
[  936.157456][T22979] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5301'.
[  936.375621][T22995] netlink: 'syz.1.5305': attribute type 39 has an invalid length.
[  936.773215][T22995] device hsr_slave_1 left promiscuous mode
[  937.463191][T23014] mac80211_hwsim hwsim133 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  939.021698][T23038] netlink: 'syz.3.5315': attribute type 1 has an invalid length.
[  939.060506][T23045] netlink: 'syz.0.5318': attribute type 21 has an invalid length.
[  939.088081][T23045] netlink: 'syz.0.5318': attribute type 1 has an invalid length.
[  939.124529][T23045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5318'.
[  939.164396][T23049] netlink: 'syz.3.5315': attribute type 2 has an invalid length.
[  939.424671][T23054] netlink: 'syz.2.5322': attribute type 2 has an invalid length.
[  939.446385][T23038] netlink: 'syz.3.5315': attribute type 9 has an invalid length.
[  939.485686][T23038] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5315'.
[  940.540296][T23076] netlink: 'syz.0.5329': attribute type 29 has an invalid length.
[  940.593645][T23076] netlink: 'syz.0.5329': attribute type 29 has an invalid length.
[  940.646468][T23079] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5329'.
[  942.586698][T23109] netlink: 'syz.3.5336': attribute type 21 has an invalid length.
[  942.692954][T23109] netlink: 'syz.3.5336': attribute type 1 has an invalid length.
[  942.798234][T23109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5336'.
[  943.958765][T23124] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5340'.
[  946.147396][T23188] netlink: 'syz.2.5358': attribute type 3 has an invalid length.
[  946.191206][T23188] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5358'.
[  946.749457][T23200] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5359'.
[  946.943752][T23205] netlink: 'syz.2.5360': attribute type 22 has an invalid length.
[  947.654069][T23220] netlink: 'syz.0.5365': attribute type 21 has an invalid length.
[  948.433977][T23230] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5367'.
[  951.381682][T23236] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5369'.
[  951.422469][T23236] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  951.455326][T23236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  951.781394][T23246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5374'.
[  953.324646][T23308] netlink: 'syz.1.5391': attribute type 29 has an invalid length.
[  953.326491][T23302] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5387'.
[  953.414014][T23308] netlink: 'syz.1.5391': attribute type 29 has an invalid length.
[  953.444078][T23305] netlink: 'syz.1.5391': attribute type 29 has an invalid length.
[  954.343005][T23336] netlink: 'syz.1.5398': attribute type 21 has an invalid length.
[  954.365172][T23336] netlink: 'syz.1.5398': attribute type 1 has an invalid length.
[  954.408587][T23336] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5398'.
[  954.644094][T23347] netlink: 'syz.0.5401': attribute type 19 has an invalid length.
[  954.656970][T23347] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5401'.
[  954.776026][T23351] netlink: 'syz.2.5403': attribute type 10 has an invalid length.
[  954.794470][T23351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5403'.
[  954.814736][T23351] device dummy0 entered promiscuous mode
[  954.833152][T23351] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  955.020372][T23363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5406'.
[  955.050714][T23363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5406'.
[  955.132740][T23363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5406'.
[  955.418423][T23389] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5412'.
[  955.433667][T23387] netlink: 'syz.2.5411': attribute type 1 has an invalid length.
[  955.457699][T23387] netlink: 'syz.2.5411': attribute type 1 has an invalid length.
[  955.713904][T23406] tap0: tun_chr_ioctl cmd 1074025677
[  955.738482][T23406] tap0: linktype set to 1
[  956.395458][T23426] netlink: 'syz.3.5424': attribute type 21 has an invalid length.
[  956.429346][T23426] __nla_validate_parse: 4 callbacks suppressed
[  956.429361][T23426] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5424'.
[  956.799993][T23429] -1: renamed from syzkaller0
[  956.955459][T23446] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5428'.
[  957.479120][T23452] team0 (unregistering): Port device team_slave_1 removed
[  958.581539][T23492] validate_nla: 4 callbacks suppressed
[  958.581555][T23492] netlink: 'syz.1.5440': attribute type 1 has an invalid length.
[  958.641503][T23492] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.5440'.
[  958.693743][T23496] netlink: 'syz.4.5441': attribute type 21 has an invalid length.
[  958.741009][T23496] netlink: 'syz.4.5441': attribute type 1 has an invalid length.
[  958.789452][T23496] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5441'.
[  960.006372][T23541] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.5452'.
[  960.038765][T23541] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  960.104569][T23524] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5447'.
[  960.166128][T23524] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  960.209735][T23552] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5454'.
[  960.236753][T23552] netlink: zone id is out of range
[  960.250868][T23552] netlink: zone id is out of range
[  960.262627][T23552] netlink: zone id is out of range
[  960.277535][T23552] netlink: zone id is out of range
[  960.295983][T23556] netlink: 'syz.1.5454': attribute type 3 has an invalid length.
[  960.313069][T23552] netlink: zone id is out of range
[  960.338352][T23556] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5454'.
[  960.353658][T23552] netlink: zone id is out of range
[  960.401600][T23552] netlink: zone id is out of range
[  960.406963][T23552] netlink: zone id is out of range
[  960.417872][T23524] ieee80211 !!!: Failed to add default virtual iface
[  960.448203][T23552] netlink: zone id is out of range
[  960.563530][T23569] netlink: 'syz.2.5459': attribute type 10 has an invalid length.
[  960.741519][T23579] netlink: 'syz.2.5461': attribute type 2 has an invalid length.
[  960.756053][T23579] netlink: 'syz.2.5461': attribute type 8 has an invalid length.
[  960.770559][T23579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5461'.
[  962.294703][T23656] netlink: 'syz.0.5483': attribute type 6 has an invalid length.
[  962.318360][T23656] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5483'.
[  963.033395][T23670] tap0: tun_chr_ioctl cmd 1074025677
[  963.061487][T23670] tap0: linktype set to 804
[  963.657463][T23694] netlink: 'syz.0.5493': attribute type 21 has an invalid length.
[  963.725415][T23694] netlink: 'syz.0.5493': attribute type 1 has an invalid length.
[  963.748961][T23694] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5493'.
[  964.105317][ T4283] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  964.300286][T23718] dvmrp1: tun_chr_ioctl cmd 1074025677
[  964.363994][T23718] dvmrp1: linktype set to 768
[  964.384183][T23721] netlink: 'syz.4.5504': attribute type 15 has an invalid length.
[  965.247943][T23748] netlink: 'syz.1.5511': attribute type 21 has an invalid length.
[  965.303589][T23748] netlink: 'syz.1.5511': attribute type 1 has an invalid length.
[  965.356707][T23748] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.5511'.
[  965.424921][T23751] : port 1(ip6gretap0) entered blocking state
[  965.458036][T23751] : port 1(ip6gretap0) entered disabled state
[  965.523179][T23751] device ip6gretap0 entered promiscuous mode
[  965.614550][T23743] device ip6gretap0 left promiscuous mode
[  965.656336][T23743] : port 1(ip6gretap0) entered disabled state
[  966.032751][T23777] netlink: 'syz.3.5520': attribute type 21 has an invalid length.
[  966.084593][T23777] netlink: 'syz.3.5520': attribute type 1 has an invalid length.
[  966.118620][T23777] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5520'.
[  966.273254][T23790] netlink: 'syz.2.5523': attribute type 4 has an invalid length.
[  966.307900][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5523'.
[  967.671069][T23845] netlink: 'syz.4.5536': attribute type 7 has an invalid length.
[  967.758009][T23845] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.5536'.
[  967.999901][T23845] netlink: 'syz.4.5536': attribute type 39 has an invalid length.
[  969.362499][T23865] __sock_release: fasync list not empty!
[  969.729191][T23871] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.5541'.
[  969.794012][T23871] net_ratelimit: 6 callbacks suppressed
[  969.794027][T23871] openvswitch: netlink: Flow actions attr not present in new flow.
[  970.156184][T23879] netlink: 'syz.0.5545': attribute type 21 has an invalid length.
[  970.175261][T23879] netlink: 'syz.0.5545': attribute type 1 has an invalid length.
[  970.195466][T23879] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5545'.
[  970.355260][T23889] mac80211_hwsim hwsim141 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  970.403813][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5547'.
[  970.480335][T23891] netlink: 'syz.4.5548': attribute type 2 has an invalid length.
[  970.488976][T23891] netlink: 'syz.4.5548': attribute type 1 has an invalid length.
[  970.569659][T23891] netlink: 'syz.4.5548': attribute type 22 has an invalid length.
[  970.583936][T23891] netlink: 14526 bytes leftover after parsing attributes in process `syz.4.5548'.
[  970.842392][T23903] netlink: 'syz.4.5552': attribute type 2 has an invalid length.
[  970.861785][T23903] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.5552'.
[  972.644908][T23941] netlink: 'syz.2.5563': attribute type 2 has an invalid length.
[  972.655039][T23941] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.5563'.
[  972.698847][T23939] : port 1(ip6gretap0) entered blocking state
[  972.716130][T23939] : port 1(ip6gretap0) entered disabled state
[  972.738590][T23939] device ip6gretap0 entered promiscuous mode
[  972.782851][T23933] device ip6gretap0 left promiscuous mode
[  972.841163][T23933] : port 1(ip6gretap0) entered disabled state
[  973.384180][T23959] netlink: 'syz.1.5569': attribute type 21 has an invalid length.
[  973.421372][T23959] netlink: 'syz.1.5569': attribute type 1 has an invalid length.
[  973.432712][T23959] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5569'.
[  973.766155][T23967] netlink: 'syz.2.5572': attribute type 29 has an invalid length.
[  975.703605][T24056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5600'.
[  975.715216][T24056] device caif0 entered promiscuous mode
[  975.723346][T24056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  977.366272][T24099] mac80211_hwsim hwsim175 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  977.389914][T24099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5612'.
[  977.653587][T24110] »»»»»»: renamed from vlan0
[  977.855353][T24116] FAULT_INJECTION: forcing a failure.
[  977.855353][T24116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  977.886080][T24116] CPU: 0 PID: 24116 Comm: syz.0.5620 Not tainted syzkaller #0
[  977.893610][T24116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  977.903692][T24116] Call Trace:
[  977.906995][T24116]  <TASK>
[  977.909952][T24116]  dump_stack_lvl+0x188/0x24e
[  977.914673][T24116]  ? show_regs_print_info+0x12/0x12
[  977.919905][T24116]  ? load_image+0x410/0x410
[  977.924442][T24116]  ? __lock_acquire+0x7c40/0x7c40
[  977.929513][T24116]  should_fail_ex+0x390/0x4c0
[  977.934269][T24116]  _copy_from_user+0x2c/0x170
[  977.938986][T24116]  __sys_bpf+0x2ea/0x780
[  977.943284][T24116]  ? bpf_link_show_fdinfo+0x380/0x380
[  977.948719][T24116]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  977.954952][T24116]  __x64_sys_bpf+0x78/0x90
[  977.959386][T24116]  do_syscall_64+0x4c/0xa0
[  977.963820][T24116]  ? clear_bhb_loop+0x60/0xb0
[  977.968514][T24116]  ? clear_bhb_loop+0x60/0xb0
[  977.973221][T24116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  977.979128][T24116] RIP: 0033:0x7f37df99e019
[  977.983555][T24116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  978.003169][T24116] RSP: 002b:00007f37e07de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  978.011589][T24116] RAX: ffffffffffffffda RBX: 00007f37dfc25fa0 RCX: 00007f37df99e019
[  978.019566][T24116] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  978.027555][T24116] RBP: 00007f37e07de090 R08: 0000000000000000 R09: 0000000000000000
[  978.035529][T24116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  978.043510][T24116] R13: 00007f37dfc26038 R14: 00007f37dfc25fa0 R15: 00007fffa851c828
[  978.051587][T24116]  </TASK>
[  978.644060][T24149] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.5631'.
[  978.844586][T24157] FAULT_INJECTION: forcing a failure.
[  978.844586][T24157] name failslab, interval 1, probability 0, space 0, times 0
[  978.898331][T24157] CPU: 1 PID: 24157 Comm: syz.3.5634 Not tainted syzkaller #0
[  978.905861][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  978.915939][T24157] Call Trace:
[  978.919239][T24157]  <TASK>
[  978.922195][T24157]  dump_stack_lvl+0x188/0x24e
[  978.926922][T24157]  ? show_regs_print_info+0x12/0x12
[  978.932170][T24157]  ? load_image+0x410/0x410
[  978.936724][T24157]  ? __lock_acquire+0x7c40/0x7c40
[  978.941816][T24157]  should_fail_ex+0x390/0x4c0
[  978.946554][T24157]  should_failslab+0x5/0x20
[  978.951084][T24157]  slab_pre_alloc_hook+0x59/0x300
[  978.956173][T24157]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  978.961758][T24157]  __kmem_cache_alloc_node+0x4f/0x270
[  978.967186][T24157]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  978.972764][T24157]  __kmalloc+0xa3/0x240
[  978.976956][T24157]  bpf_prog_test_run_skb+0x23e/0x18e0
[  978.982361][T24157]  ? __fget_files+0x28/0x460
[  978.986986][T24157]  ? __fget_files+0x3fc/0x460
[  978.991705][T24157]  ? cpu_online+0xa0/0xa0
[  978.996062][T24157]  bpf_prog_test_run+0x31c/0x390
[  979.001039][T24157]  __sys_bpf+0x62b/0x780
[  979.005323][T24157]  ? bpf_link_show_fdinfo+0x380/0x380
[  979.010750][T24157]  ? lock_chain_count+0x20/0x20
[  979.015627][T24157]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  979.021654][T24157]  __x64_sys_bpf+0x78/0x90
[  979.026100][T24157]  do_syscall_64+0x4c/0xa0
[  979.030553][T24157]  ? clear_bhb_loop+0x60/0xb0
[  979.035260][T24157]  ? clear_bhb_loop+0x60/0xb0
[  979.039965][T24157]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  979.045884][T24157] RIP: 0033:0x7f61cc79e019
[  979.050326][T24157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  979.069952][T24157] RSP: 002b:00007f61cd6a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  979.078392][T24157] RAX: ffffffffffffffda RBX: 00007f61cca25fa0 RCX: 00007f61cc79e019
[  979.086416][T24157] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  979.094440][T24157] RBP: 00007f61cd6a2090 R08: 0000000000000000 R09: 0000000000000000
[  979.102439][T24157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  979.110432][T24157] R13: 00007f61cca26038 R14: 00007f61cca25fa0 R15: 00007ffcf5676118
[  979.118448][T24157]  </TASK>
[  979.223566][T24163] validate_nla: 2 callbacks suppressed
[  979.223586][T24163] netlink: 'syz.2.5636': attribute type 3 has an invalid length.
[  979.241088][T24163] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5636'.
[  979.516196][T24169] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5638'.
[  979.546091][T24169] netlink: zone id is out of range
[  979.552700][T24169] netlink: zone id is out of range
[  979.565062][T24169] netlink: get zone limit has 8 unknown bytes
[  979.941887][T24177] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5641'.
[  980.126903][T24181] netlink: 'syz.2.5643': attribute type 10 has an invalid length.
[  980.346884][T24184] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5644'.
[  981.087648][T24197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5646'.
[  981.115006][T24197] device caif0 entered promiscuous mode
[  981.127914][T24197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  981.154450][T24199] device bond_slave_1 entered promiscuous mode
[  981.389438][T24206] FAULT_INJECTION: forcing a failure.
[  981.389438][T24206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  981.415551][T24206] CPU: 1 PID: 24206 Comm: syz.0.5650 Not tainted syzkaller #0
[  981.423080][T24206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  981.433158][T24206] Call Trace:
[  981.436470][T24206]  <TASK>
[  981.439438][T24206]  dump_stack_lvl+0x188/0x24e
[  981.444170][T24206]  ? show_regs_print_info+0x12/0x12
[  981.449411][T24206]  ? load_image+0x410/0x410
[  981.453960][T24206]  ? __lock_acquire+0x7c40/0x7c40
[  981.459050][T24206]  should_fail_ex+0x390/0x4c0
[  981.463782][T24206]  _copy_from_user+0x2c/0x170
[  981.468500][T24206]  bpf_prog_test_run_skb+0x263/0x18e0
[  981.473906][T24206]  ? __fget_files+0x28/0x460
[  981.478531][T24206]  ? __fget_files+0x3fc/0x460
[  981.483255][T24206]  ? cpu_online+0xa0/0xa0
[  981.487623][T24206]  bpf_prog_test_run+0x31c/0x390
[  981.492595][T24206]  __sys_bpf+0x62b/0x780
[  981.496870][T24206]  ? bpf_link_show_fdinfo+0x380/0x380
[  981.502292][T24206]  ? lock_chain_count+0x20/0x20
[  981.507173][T24206]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  981.513206][T24206]  __x64_sys_bpf+0x78/0x90
[  981.517656][T24206]  do_syscall_64+0x4c/0xa0
[  981.522110][T24206]  ? clear_bhb_loop+0x60/0xb0
[  981.526837][T24206]  ? clear_bhb_loop+0x60/0xb0
[  981.531573][T24206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  981.537509][T24206] RIP: 0033:0x7f37df99e019
[  981.541958][T24206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  981.561602][T24206] RSP: 002b:00007f37e07de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  981.570065][T24206] RAX: ffffffffffffffda RBX: 00007f37dfc25fa0 RCX: 00007f37df99e019
[  981.578059][T24206] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  981.586078][T24206] RBP: 00007f37e07de090 R08: 0000000000000000 R09: 0000000000000000
[  981.594076][T24206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  981.602071][T24206] R13: 00007f37dfc26038 R14: 00007f37dfc25fa0 R15: 00007fffa851c828
[  981.610083][T24206]  </TASK>
[  981.668427][T24209] netlink: 'syz.3.5649': attribute type 4 has an invalid length.
[  981.701971][T24209] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5649'.
[  981.837648][T24210] netlink: 'syz.1.5648': attribute type 1 has an invalid length.
[  981.907455][T24210] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.5648'.
[  982.213166][T24227] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5654'.
[  982.422116][T24239] netlink: 'syz.4.5659': attribute type 10 has an invalid length.
[  982.869537][T24259] netlink: 'syz.1.5665': attribute type 4 has an invalid length.
[  982.888214][T24259] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5665'.
[  982.983937][T24268] netlink: 'syz.4.5667': attribute type 3 has an invalid length.
[  983.113310][ T4283] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  983.444716][T24279] netlink: 'syz.2.5671': attribute type 27 has an invalid length.
[  983.913084][T24309] netlink: 'syz.0.5681': attribute type 10 has an invalid length.
[  983.940934][T24305] netlink: 'syz.4.5679': attribute type 4 has an invalid length.
[  983.950894][T24305] __nla_validate_parse: 3 callbacks suppressed
[  983.950909][T24305] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5679'.
[  984.922789][T24365] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5693'.
[  984.987448][T24365] netlink: 'syz.1.5693': attribute type 3 has an invalid length.
[  985.005107][T24365] netlink: 'syz.1.5693': attribute type 1 has an invalid length.
[  985.030936][T24365] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5693'.
[  985.282344][T24371] device sit0 left promiscuous mode
[  985.502899][T24388] netlink: 'syz.3.5702': attribute type 4 has an invalid length.
[  985.524516][T24388] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5702'.
[  986.071505][T24405] netlink: 'syz.4.5709': attribute type 3 has an invalid length.
[  986.090006][T24405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5709'.
[  986.469014][T24428] FAULT_INJECTION: forcing a failure.
[  986.469014][T24428] name failslab, interval 1, probability 0, space 0, times 0
[  986.558044][T24428] CPU: 0 PID: 24428 Comm: syz.2.5712 Not tainted syzkaller #0
[  986.565578][T24428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  986.575660][T24428] Call Trace:
[  986.578959][T24428]  <TASK>
[  986.581916][T24428]  dump_stack_lvl+0x188/0x24e
[  986.586637][T24428]  ? show_regs_print_info+0x12/0x12
[  986.591876][T24428]  ? load_image+0x410/0x410
[  986.596423][T24428]  ? __might_sleep+0xd0/0xd0
[  986.601120][T24428]  ? __lock_acquire+0x7c40/0x7c40
[  986.606190][T24428]  should_fail_ex+0x390/0x4c0
[  986.610930][T24428]  should_failslab+0x5/0x20
[  986.615461][T24428]  slab_pre_alloc_hook+0x59/0x300
[  986.620536][T24428]  ? apparmor_sk_alloc_security+0x74/0x100
[  986.626381][T24428]  __kmem_cache_alloc_node+0x4f/0x270
[  986.631788][T24428]  ? apparmor_sk_alloc_security+0x74/0x100
[  986.637626][T24428]  kmalloc_trace+0x26/0xe0
[  986.642092][T24428]  apparmor_sk_alloc_security+0x74/0x100
[  986.647753][T24428]  security_sk_alloc+0x6a/0xa0
[  986.652555][T24428]  sk_prot_alloc+0x101/0x210
[  986.657189][T24428]  ? sk_alloc+0x20/0x330
[  986.661460][T24428]  sk_alloc+0x36/0x330
[  986.665560][T24428]  ? bpf_ctx_init+0x154/0x190
[  986.670278][T24428]  bpf_prog_test_run_skb+0x36d/0x18e0
[  986.675673][T24428]  ? __fget_files+0x28/0x460
[  986.680294][T24428]  ? __fget_files+0x3fc/0x460
[  986.684993][T24428]  ? cpu_online+0xa0/0xa0
[  986.689342][T24428]  bpf_prog_test_run+0x31c/0x390
[  986.694304][T24428]  __sys_bpf+0x62b/0x780
[  986.698573][T24428]  ? bpf_link_show_fdinfo+0x380/0x380
[  986.703974][T24428]  ? lock_chain_count+0x20/0x20
[  986.708856][T24428]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  986.714868][T24428]  __x64_sys_bpf+0x78/0x90
[  986.719300][T24428]  do_syscall_64+0x4c/0xa0
[  986.723730][T24428]  ? clear_bhb_loop+0x60/0xb0
[  986.728425][T24428]  ? clear_bhb_loop+0x60/0xb0
[  986.733126][T24428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  986.739048][T24428] RIP: 0033:0x7f52d079e019
[  986.743477][T24428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.763087][T24428] RSP: 002b:00007f52d15db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  986.771511][T24428] RAX: ffffffffffffffda RBX: 00007f52d0a25fa0 RCX: 00007f52d079e019
[  986.779491][T24428] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  986.787467][T24428] RBP: 00007f52d15db090 R08: 0000000000000000 R09: 0000000000000000
[  986.795442][T24428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.803419][T24428] R13: 00007f52d0a26038 R14: 00007f52d0a25fa0 R15: 00007ffea37cfa58
[  986.811416][T24428]  </TASK>
[  986.972879][T24433] netlink: 'syz.3.5713': attribute type 6 has an invalid length.
[  987.020244][T24433] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5713'.
[  987.798434][T24465] netlink: 'syz.3.5722': attribute type 29 has an invalid length.
[  987.877303][T24465] netlink: 'syz.3.5722': attribute type 29 has an invalid length.
[  987.948284][T24466] netlink: 'syz.3.5722': attribute type 29 has an invalid length.
[  988.186195][T24470] netlink: 'syz.2.5726': attribute type 21 has an invalid length.
[  989.650788][T24486] FAULT_INJECTION: forcing a failure.
[  989.650788][T24486] name failslab, interval 1, probability 0, space 0, times 0
[  989.755496][T24486] CPU: 1 PID: 24486 Comm: syz.2.5730 Not tainted syzkaller #0
[  989.763024][T24486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  989.773107][T24486] Call Trace:
[  989.776441][T24486]  <TASK>
[  989.779389][T24486]  dump_stack_lvl+0x188/0x24e
[  989.784104][T24486]  ? show_regs_print_info+0x12/0x12
[  989.789341][T24486]  ? load_image+0x410/0x410
[  989.793911][T24486]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  989.800116][T24486]  should_fail_ex+0x390/0x4c0
[  989.804839][T24486]  should_failslab+0x5/0x20
[  989.809378][T24486]  slab_pre_alloc_hook+0x59/0x300
[  989.814456][T24486]  kmem_cache_alloc+0x56/0x2f0
[  989.819293][T24486]  ? __build_skb+0x27/0x3b0
[  989.823839][T24486]  __build_skb+0x27/0x3b0
[  989.828223][T24486]  ? build_skb+0x14/0x230
[  989.832602][T24486]  build_skb+0x1e/0x230
[  989.836793][T24486]  bpf_prog_test_run_skb+0x38d/0x18e0
[  989.842201][T24486]  ? __fget_files+0x28/0x460
[  989.846834][T24486]  ? __fget_files+0x3fc/0x460
[  989.851552][T24486]  ? cpu_online+0xa0/0xa0
[  989.855916][T24486]  bpf_prog_test_run+0x31c/0x390
[  989.860899][T24486]  __sys_bpf+0x62b/0x780
[  989.865183][T24486]  ? bpf_link_show_fdinfo+0x380/0x380
[  989.870611][T24486]  ? lock_chain_count+0x20/0x20
[  989.875497][T24486]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  989.881546][T24486]  __x64_sys_bpf+0x78/0x90
[  989.886014][T24486]  do_syscall_64+0x4c/0xa0
[  989.890465][T24486]  ? clear_bhb_loop+0x60/0xb0
[  989.895200][T24486]  ? clear_bhb_loop+0x60/0xb0
[  989.899921][T24486]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  989.905853][T24486] RIP: 0033:0x7f52d079e019
[  989.910298][T24486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  989.929947][T24486] RSP: 002b:00007f52d15ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  989.938437][T24486] RAX: ffffffffffffffda RBX: 00007f52d0a26090 RCX: 00007f52d079e019
[  989.946438][T24486] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  989.954431][T24486] RBP: 00007f52d15ba090 R08: 0000000000000000 R09: 0000000000000000
[  989.962424][T24486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  989.970418][T24486] R13: 00007f52d0a26128 R14: 00007f52d0a26090 R15: 00007ffea37cfa58
[  989.978476][T24486]  </TASK>
[  991.162130][T24488] netlink: 'syz.3.5731': attribute type 21 has an invalid length.
[  991.192297][T24488] netlink: 'syz.3.5731': attribute type 20 has an invalid length.
[  991.221547][T24488] netlink: 'syz.3.5731': attribute type 21 has an invalid length.
[  991.232713][T24488] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5731'.
[  991.245307][T24488] netlink: 'syz.3.5731': attribute type 4 has an invalid length.
[  991.261207][T24488] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5731'.
[  991.273471][T24491] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5732'.
[  991.615524][T24506] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5737'.
[  992.610774][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  992.617307][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  996.283437][T24567] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5754'.
[  996.338305][T24567] netlink: 'syz.1.5754': attribute type 22 has an invalid length.
[  996.346181][T24567] netlink: 14502 bytes leftover after parsing attributes in process `syz.1.5754'.
[  997.392158][T24587] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.5759'.
[  997.443891][T24587] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.5759'.
[  997.464786][T24587] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  997.682933][T24595] device sit0 left promiscuous mode
[  997.881125][T24598] device sit0 entered promiscuous mode
[  997.992581][T24609] netlink: 'syz.2.5763': attribute type 29 has an invalid length.
[  998.031552][T24606] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5763'.
[  998.080517][T24607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5763'.
[  998.143873][T24609] netlink: 'syz.2.5763': attribute type 29 has an invalid length.
[  998.312590][T24613] netlink: 'syz.0.5766': attribute type 3 has an invalid length.
[  998.344472][T24613] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5766'.
[ 1001.949102][T24672] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5779'.
[ 1001.988208][T24672] device hsr_slave_0 left promiscuous mode
[ 1002.024520][T24672] device hsr_slave_1 left promiscuous mode
[ 1002.425751][T24693] netlink: 'syz.3.5790': attribute type 16 has an invalid length.
[ 1002.436919][T24693] netlink: 'syz.3.5790': attribute type 25 has an invalid length.
[ 1002.445480][T24693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5790'.
[ 1002.504717][T24698] netlink: 'syz.4.5791': attribute type 39 has an invalid length.
[ 1002.519516][T24698] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5791'.
[ 1002.530681][T24698] openvswitch: netlink: Message has 6 unknown bytes.
[ 1002.631766][T24700] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5792'.
[ 1003.121564][T24709] netlink: 826 bytes leftover after parsing attributes in process `syz.1.5789'.
[ 1003.189205][T24709] netlink: 670 bytes leftover after parsing attributes in process `syz.1.5789'.
[ 1003.246002][T24711] netlink: 'syz.0.5805': attribute type 2 has an invalid length.
[ 1003.267825][T24711] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.5805'.
[ 1003.397177][T24714] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5805'.
[ 1003.831159][T24726] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1004.436138][T24736] netlink: 'syz.0.5801': attribute type 21 has an invalid length.
[ 1004.496791][T24736] netlink: 'syz.0.5801': attribute type 10 has an invalid length.
[ 1005.539710][T24767] netlink: 'syz.4.5811': attribute type 1 has an invalid length.
[ 1005.576903][T24767] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5811'.
[ 1006.224333][T24783] netlink: 'syz.4.5815': attribute type 1 has an invalid length.
[ 1006.901128][T24796] netlink: 'syz.0.5818': attribute type 9 has an invalid length.
[ 1006.971812][T24796] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5818'.
[ 1009.450564][T24815] netlink: 'syz.0.5823': attribute type 2 has an invalid length.
[ 1009.623712][T24823] netlink: 'syz.4.5825': attribute type 1 has an invalid length.
[ 1009.650500][T24823] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5825'.
[ 1009.968212][T24826] netlink: 65503 bytes leftover after parsing attributes in process `syz.3.5827'.
[ 1010.415781][T24844] device syzkaller0 entered promiscuous mode
[ 1016.135451][T24854] netlink: 22 bytes leftover after parsing attributes in process `syz.4.5834'.
[ 1016.323920][T24883] netlink: 'syz.2.5843': attribute type 21 has an invalid length.
[ 1016.356459][T24883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5843'.
[ 1016.444295][T24890] netlink: 'syz.0.5844': attribute type 10 has an invalid length.
[ 1016.456260][T24887] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.5845'.
[ 1016.478127][T24890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5844'.
[ 1016.525270][T24890] netlink: 'syz.0.5844': attribute type 10 has an invalid length.
[ 1016.541715][T24896] netlink: 'syz.3.5847': attribute type 21 has an invalid length.
[ 1016.570494][T24896] netlink: 'syz.3.5847': attribute type 1 has an invalid length.
[ 1016.600393][T24896] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5847'.
[ 1016.617831][T24890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5844'.
[ 1016.852930][T24885] netlink: 'syz.0.5844': attribute type 10 has an invalid length.
[ 1016.884027][T24885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5844'.
[ 1018.111833][T24939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5858'.
[ 1018.526074][T24960] netlink: 'syz.2.5867': attribute type 21 has an invalid length.
[ 1018.557980][T24960] netlink: 'syz.2.5867': attribute type 1 has an invalid length.
[ 1018.608024][T24960] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5867'.
[ 1018.723011][ T4283] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[ 1018.777482][T24972] netlink: 'syz.1.5869': attribute type 1 has an invalid length.
[ 1018.800517][T24972] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.5869'.
[ 1019.260356][T25002] netlink: 'syz.0.5877': attribute type 4 has an invalid length.
[ 1019.820858][T25019] netlink: zone id is out of range
[ 1019.878586][T25019] netlink: zone id is out of range
[ 1019.916482][T25019] netlink: zone id is out of range
[ 1020.004674][T25019] netlink: del zone limit has 4 unknown bytes
[ 1021.232532][T25056] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1021.242637][T25056] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1021.573963][T25066] __nla_validate_parse: 11 callbacks suppressed
[ 1021.573981][T25066] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5900'.
[ 1021.646565][T25066] device batadv_slave_1 entered promiscuous mode
[ 1021.741666][T25072] validate_nla: 7 callbacks suppressed
[ 1021.741683][T25072] netlink: 'syz.4.5902': attribute type 7 has an invalid length.
[ 1024.127513][T25115] netlink: 'syz.3.5916': attribute type 21 has an invalid length.
[ 1024.147010][T25115] netlink: 'syz.3.5916': attribute type 1 has an invalid length.
[ 1024.167332][T25115] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5916'.
[ 1024.200707][T25119] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1024.242751][T25119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1024.830696][T25131] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1027.164746][T25140] netlink: 'syz.0.5923': attribute type 21 has an invalid length.
[ 1027.185747][T25141] device veth1_macvtap left promiscuous mode
[ 1027.207263][T25144] netlink: 'syz.0.5923': attribute type 10 has an invalid length.
[ 1027.217592][T25147] device veth1_macvtap entered promiscuous mode
[ 1027.227966][T25147] device macsec0 entered promiscuous mode
[ 1027.258506][T25159] netlink: 'syz.2.5928': attribute type 16 has an invalid length.
[ 1027.279990][T25159] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5928'.
[ 1027.320040][T25159] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1027.387324][T25162] netlink: 'syz.1.5929': attribute type 4 has an invalid length.
[ 1027.419001][T25163] netlink: 'syz.1.5929': attribute type 4 has an invalid length.
[ 1027.439688][T25162] netlink: 'syz.1.5929': attribute type 29 has an invalid length.
[ 1027.526959][T25163] netlink: 'syz.1.5929': attribute type 29 has an invalid length.
[ 1027.527594][T25162] netlink: 'syz.1.5929': attribute type 29 has an invalid length.
[ 1028.989933][T25198] netlink: 'syz.2.5950': attribute type 21 has an invalid length.
[ 1029.153828][T25198] netlink: 'syz.2.5950': attribute type 10 has an invalid length.
[ 1032.347190][T25226] netlink: 'syz.1.5947': attribute type 29 has an invalid length.
[ 1032.667245][T25226] netlink: 'syz.1.5947': attribute type 29 has an invalid length.
[ 1032.767026][T25228] netlink: 'syz.1.5947': attribute type 29 has an invalid length.
[ 1032.854732][T25233] netlink: 'syz.0.5949': attribute type 16 has an invalid length.
[ 1032.911971][T25233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5949'.
[ 1032.912175][T25234] netlink: 'syz.0.5949': attribute type 10 has an invalid length.
[ 1033.020091][T25239] netlink: 'syz.4.5951': attribute type 21 has an invalid length.
[ 1033.053284][T25240] netlink: 'syz.3.5953': attribute type 16 has an invalid length.
[ 1033.058142][T25239] netlink: 'syz.4.5951': attribute type 5 has an invalid length.
[ 1033.069356][T25240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5953'.
[ 1033.135058][T25240] netlink: 'syz.3.5953': attribute type 10 has an invalid length.
[ 1033.164491][T25238] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5952'.
[ 1033.208042][T25240] device macvlan0 left promiscuous mode
[ 1033.217745][T25241] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5952'.
[ 1033.246691][T25238] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1033.292375][T25238] CPU: 0 PID: 25238 Comm: syz.2.5952 Not tainted syzkaller #0
[ 1033.299989][T25238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1033.310097][T25238] Call Trace:
[ 1033.313400][T25238]  <TASK>
[ 1033.316362][T25238]  dump_stack_lvl+0x188/0x24e
[ 1033.321096][T25238]  ? show_regs_print_info+0x12/0x12
[ 1033.326344][T25238]  ? load_image+0x410/0x410
[ 1033.330915][T25238]  sysfs_warn_dup+0x8a/0xa0
[ 1033.335478][T25238]  sysfs_do_create_link_sd+0xc0/0x110
[ 1033.340915][T25238]  device_add+0x83b/0x1050
[ 1033.345382][T25238]  wiphy_register+0x1d8b/0x2aa0
[ 1033.350277][T25238]  ? cfg80211_event_work+0x40/0x40
[ 1033.355414][T25238]  ? minstrel_ht_alloc+0x894/0xa20
[ 1033.360586][T25238]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1033.366678][T25238]  ieee80211_register_hw+0x2d48/0x39f0
[ 1033.372170][T25238]  ? ieee80211_register_hw+0xee1/0x39f0
[ 1033.377743][T25238]  ? ieee80211_register_hw+0xee1/0x39f0
[ 1033.383319][T25238]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1033.389016][T25238]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1033.394946][T25238]  ? __debug_object_init+0xed/0x440
[ 1033.400181][T25238]  ? memset+0x1e/0x40
[ 1033.404183][T25238]  ? __hrtimer_init+0x189/0x270
[ 1033.409059][T25238]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1033.414810][T25238]  ? memcpy+0x3c/0x60
[ 1033.418821][T25238]  hwsim_new_radio_nl+0xab7/0xc90
[ 1033.423885][T25238]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1033.429452][T25238]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1033.435383][T25238]  ? lockdep_hardirqs_on+0x94/0x140
[ 1033.440633][T25238]  ? genl_rcv_msg+0x5d9/0x790
[ 1033.445364][T25238]  genl_rcv_msg+0x601/0x790
[ 1033.449896][T25238]  ? genl_bind+0x360/0x360
[ 1033.454332][T25238]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1033.460685][T25238]  ? lock_chain_count+0x20/0x20
[ 1033.465564][T25238]  netlink_rcv_skb+0x1ef/0x440
[ 1033.470359][T25238]  ? genl_bind+0x360/0x360
[ 1033.474808][T25238]  ? netlink_ack+0x1160/0x1160
[ 1033.479601][T25238]  ? preempt_count_add+0x190/0x190
[ 1033.484789][T25238]  ? down_read+0x1a8/0x2d0
[ 1033.489217][T25238]  genl_rcv+0x24/0x40
[ 1033.493212][T25238]  netlink_unicast+0x7ad/0x920
[ 1033.497997][T25238]  netlink_sendmsg+0x8ad/0xbd0
[ 1033.502796][T25238]  ? netlink_getsockopt+0x550/0x550
[ 1033.508019][T25238]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1033.513591][T25238]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1033.518886][T25238]  ? security_socket_sendmsg+0x7c/0xa0
[ 1033.524381][T25238]  ? netlink_getsockopt+0x550/0x550
[ 1033.529612][T25238]  ____sys_sendmsg+0x5ed/0x9a0
[ 1033.534426][T25238]  ? __sys_sendmsg_sock+0x30/0x30
[ 1033.539478][T25238]  ? __import_iovec+0x306/0x510
[ 1033.544351][T25238]  ? import_iovec+0x6f/0xa0
[ 1033.548898][T25238]  ___sys_sendmsg+0x2a2/0x360
[ 1033.553643][T25238]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1033.558464][T25238]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1033.563342][T25238]  ? ct_nmi_exit+0x145/0x1c0
[ 1033.567953][T25238]  ? __x64_sys_sendmsg+0x80/0x80
[ 1033.572928][T25238]  ? lockdep_hardirqs_on+0x94/0x140
[ 1033.578139][T25238]  do_syscall_64+0x4c/0xa0
[ 1033.582591][T25238]  ? clear_bhb_loop+0x60/0xb0
[ 1033.587292][T25238]  ? clear_bhb_loop+0x60/0xb0
[ 1033.592003][T25238]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1033.597926][T25238] RIP: 0033:0x7f52d079e019
[ 1033.602369][T25238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1033.621991][T25238] RSP: 002b:00007f52d15db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1033.630444][T25238] RAX: ffffffffffffffda RBX: 00007f52d0a25fa0 RCX: 00007f52d079e019
[ 1033.638441][T25238] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[ 1033.646427][T25238] RBP: 00007f52d083500c R08: 0000000000000000 R09: 0000000000000000
[ 1033.654507][T25238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1033.662500][T25238] R13: 00007f52d0a26038 R14: 00007f52d0a25fa0 R15: 00007ffea37cfa58
[ 1033.670496][T25238]  </TASK>
[ 1033.989635][T25263] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5959'.
[ 1034.107370][T25263] netlink: 'syz.1.5959': attribute type 5 has an invalid length.
[ 1034.316907][T25274] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.5963'.
[ 1034.371972][T25274] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5963'.
[ 1034.404391][T25281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5965'.
[ 1034.583336][T25289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5968'.
[ 1034.960397][T25297] device macvlan0 left promiscuous mode
[ 1034.973028][T25301] device macvlan0 entered promiscuous mode
[ 1035.004428][T25306] tap0: tun_chr_ioctl cmd 1074025688
[ 1035.030818][T25308] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.5972'.
[ 1035.205349][T25317] : renamed from caif0
[ 1035.243251][T25317] device  left promiscuous mode
[ 1035.281407][T25317] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1036.301190][T25349] netlink: 'syz.2.5984': attribute type 11 has an invalid length.
[ 1036.358953][T25350] syz.3.5986[25350] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1036.359177][T25350] syz.3.5986[25350] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1036.471343][T25343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1039.782638][T25369] validate_nla: 9 callbacks suppressed
[ 1039.782653][T25369] netlink: 'syz.1.5990': attribute type 10 has an invalid length.
[ 1039.839772][T25369] team0 (unregistering): Port device team_slave_0 removed
[ 1039.877104][T25369] team0 (unregistering): Port device team_slave_1 removed
[ 1039.911649][T25369] team0 (unregistering): Port device wlan1 removed
[ 1040.305158][T25390] netlink: 'syz.3.5998': attribute type 1 has an invalid length.
[ 1040.337274][T25390] __nla_validate_parse: 2 callbacks suppressed
[ 1040.337317][T25390] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5998'.
[ 1040.789828][T25403] device pim6reg1 entered promiscuous mode
[ 1040.888327][T14332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1040.897356][T14332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1040.905330][T14332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1040.916333][T14332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1040.927345][T14332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1040.941287][T14332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1041.209273][T11734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.311200][T11734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.325718][T25420] netlink: 'syz.4.6006': attribute type 10 has an invalid length.
[ 1041.336157][T25420] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6006'.
[ 1041.347942][T25420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.356177][T25420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.442793][T11734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.463535][T25413] chnl_net:caif_netlink_parms(): no params data found
[ 1041.526365][T11734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.562513][T25413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.570364][T25413] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.582082][T25413] device bridge_slave_0 entered promiscuous mode
[ 1041.592932][T25413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.600627][T25413] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.609264][T25413] device bridge_slave_1 entered promiscuous mode
[ 1041.635314][T25413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1041.652145][T25413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1041.723490][T25413] team0: Port device team_slave_0 added
[ 1041.743355][T25413] team0: Port device team_slave_1 added
[ 1041.792584][T25413] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1041.802338][T25413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1041.840242][T25413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1041.853502][T11734] device 0 left promiscuous mode
[ 1041.878187][T25413] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1041.885244][T25413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1041.920574][T25413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1041.936450][T11734] device 1 left promiscuous mode
[ 1042.008251][T25413] device hsr_slave_0 entered promiscuous mode
[ 1042.044139][T25413] device hsr_slave_1 entered promiscuous mode
[ 1042.053437][T25413] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1042.076198][T25413] Cannot create hsr debugfs directory
[ 1042.098117][T11734] tipc: Left network mode
[ 1042.622827][T25454] netlink: 'syz.1.6015': attribute type 1 has an invalid length.
[ 1043.001889][T25480] sock: sock_set_timeout: `syz.3.6021' (pid 25480) tries to set negative timeout
[ 1043.011901][T14332] Bluetooth: hci1: command 0x0409 tx timeout
[ 1043.066616][T11734] device gretap0 left promiscuous mode
[ 1043.072352][T11734] Ÿë
: port 1(gretap0) entered disabled state
[ 1043.126630][T25484] netlink: 'syz.1.6019': attribute type 4 has an invalid length.
[ 1043.372510][T25488] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6022'.
[ 1045.088094][T14332] Bluetooth: hci1: command 0x041b tx timeout
[ 1046.292987][T25413] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1046.335349][T25413] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1046.395492][T25413] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1046.446253][T25413] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1046.945866][T25523] ------------[ cut here ]------------
[ 1046.951571][T25523] WARNING: CPU: 0 PID: 25523 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480
[ 1046.961497][T25523] Modules linked in:
[ 1046.965440][T25523] CPU: 0 PID: 25523 Comm: syz.3.6031 Not tainted syzkaller #0
[ 1046.972979][T25523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1046.983141][T25523] RIP: 0010:perf_pending_task+0x353/0x480
[ 1046.989023][T25523] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[ 1047.008882][T25523] RSP: 0018:ffffc900036d78e8 EFLAGS: 00010293
[ 1047.014996][T25523] RAX: ffffffff81a7add3 RBX: ffff888038e94058 RCX: ffff88801876bc00
[ 1047.023063][T25523] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1047.031108][T25523] RBP: ffff888038e93e20 R08: ffff88801876c603 R09: 1ffff110030ed8c0
[ 1047.039160][T25523] R10: dffffc0000000000 R11: ffffed10030ed8c1 R12: ffff88801876bc00
[ 1047.047164][T25523] R13: ffff88807cb2c560 R14: 0000000000000000 R15: 1ffff110071d27c4
[ 1047.055205][T25523] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1047.064212][T25523] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1047.070886][T25523] CR2: 0000000000000000 CR3: 0000000034458000 CR4: 00000000003506f0
[ 1047.078947][T25523] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1047.086959][T25523] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1047.095001][T25523] Call Trace:
[ 1047.098335][T25523]  <TASK>
[ 1047.101295][T25523]  task_work_run+0x1d0/0x260
[ 1047.106040][T25523]  ? task_work_cancel+0x220/0x220
[ 1047.111136][T25523]  ? do_raw_spin_unlock+0x11d/0x230
[ 1047.116383][T25523]  do_exit+0x9d5/0x2570
[ 1047.120684][T25523]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1047.126717][T25523]  ? put_task_struct+0x80/0x80
[ 1047.131554][T25523]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1047.137774][T25523]  ? lockdep_hardirqs_on+0x94/0x140
[ 1047.143013][T25523]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1047.149277][T25523]  do_group_exit+0x229/0x2e0
[ 1047.153958][T25523]  ? _raw_spin_unlock_irq+0x25/0x40
[ 1047.159228][T25523]  get_signal+0x1259/0x1340
[ 1047.163809][T25523]  arch_do_signal_or_restart+0xc4/0x1310
[ 1047.169600][T25523]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1047.175879][T25523]  ? irqentry_enter+0x33/0x50
[ 1047.180622][T25523]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1047.186642][T25523]  ? get_sigframe_size+0x10/0x10
[ 1047.191683][T25523]  ? lock_chain_count+0x20/0x20
[ 1047.196579][T25523]  ? rcu_is_watching+0x11/0xa0
[ 1047.201446][T25523]  exit_to_user_mode_loop+0x70/0x110
[ 1047.206846][T25523]  exit_to_user_mode_prepare+0xee/0x180
[ 1047.212471][T25523]  syscall_exit_to_user_mode+0x16/0x40
[ 1047.217993][T25523]  do_syscall_64+0x58/0xa0
[ 1047.222454][T25523]  ? clear_bhb_loop+0x60/0xb0
[ 1047.227200][T25523]  ? clear_bhb_loop+0x60/0xb0
[ 1047.231950][T25523]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1047.237906][T25523] RIP: 0033:0x7f61cc79e019
[ 1047.242346][T25523] Code: Unable to access opcode bytes at 0x7f61cc79dfef.
[ 1047.249417][T25523] RSP: 002b:00007f61cd6600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1047.257896][T25523] RAX: fffffffffffffe00 RBX: 00007f61cca26188 RCX: 00007f61cc79e019
[ 1047.265913][T25523] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f61cca26188
[ 1047.273941][T25523] RBP: 00007f61cca26180 R08: 0000000000000000 R09: 0000000000000000
[ 1047.281972][T25523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1047.290000][T25523] R13: 00007f61cca26218 R14: 00007ffcf5676030 R15: 00007ffcf5676118
[ 1047.298052][T25523]  </TASK>
[ 1047.301108][T25523] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1047.308415][T25523] CPU: 0 PID: 25523 Comm: syz.3.6031 Not tainted syzkaller #0
[ 1047.315898][T25523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1047.325981][T25523] Call Trace:
[ 1047.329282][T25523]  <TASK>
[ 1047.332231][T25523]  dump_stack_lvl+0x188/0x24e
[ 1047.336939][T25523]  ? memcpy+0x3c/0x60
[ 1047.340944][T25523]  ? show_regs_print_info+0x12/0x12
[ 1047.346170][T25523]  ? load_image+0x410/0x410
[ 1047.350714][T25523]  panic+0x2d3/0x710
[ 1047.354660][T25523]  ? bpf_jit_dump+0xd0/0xd0
[ 1047.359216][T25523]  __warn+0x2f8/0x4f0
[ 1047.363231][T25523]  ? perf_pending_task+0x353/0x480
[ 1047.368374][T25523]  ? perf_pending_task+0x353/0x480
[ 1047.373537][T25523]  report_bug+0x2ba/0x4f0
[ 1047.377945][T25523]  ? perf_pending_task+0x353/0x480
[ 1047.383093][T25523]  handle_bug+0x3a/0x70
[ 1047.387287][T25523]  exc_invalid_op+0x16/0x40
[ 1047.391834][T25523]  asm_exc_invalid_op+0x16/0x20
[ 1047.396721][T25523] RIP: 0010:perf_pending_task+0x353/0x480
[ 1047.402480][T25523] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[ 1047.422120][T25523] RSP: 0018:ffffc900036d78e8 EFLAGS: 00010293
[ 1047.428206][T25523] RAX: ffffffff81a7add3 RBX: ffff888038e94058 RCX: ffff88801876bc00
[ 1047.436188][T25523] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1047.444161][T25523] RBP: ffff888038e93e20 R08: ffff88801876c603 R09: 1ffff110030ed8c0
[ 1047.452139][T25523] R10: dffffc0000000000 R11: ffffed10030ed8c1 R12: ffff88801876bc00
[ 1047.460119][T25523] R13: ffff88807cb2c560 R14: 0000000000000000 R15: 1ffff110071d27c4
[ 1047.468119][T25523]  ? perf_pending_task+0x353/0x480
[ 1047.473252][T25523]  ? perf_pending_task+0x353/0x480
[ 1047.478378][T25523]  task_work_run+0x1d0/0x260
[ 1047.482988][T25523]  ? task_work_cancel+0x220/0x220
[ 1047.488021][T25523]  ? do_raw_spin_unlock+0x11d/0x230
[ 1047.493233][T25523]  do_exit+0x9d5/0x2570
[ 1047.497408][T25523]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1047.503408][T25523]  ? put_task_struct+0x80/0x80
[ 1047.508186][T25523]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1047.514359][T25523]  ? lockdep_hardirqs_on+0x94/0x140
[ 1047.519577][T25523]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1047.525752][T25523]  do_group_exit+0x229/0x2e0
[ 1047.530367][T25523]  ? _raw_spin_unlock_irq+0x25/0x40
[ 1047.535576][T25523]  get_signal+0x1259/0x1340
[ 1047.540107][T25523]  arch_do_signal_or_restart+0xc4/0x1310
[ 1047.545759][T25523]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1047.552019][T25523]  ? irqentry_enter+0x33/0x50
[ 1047.556729][T25523]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1047.562745][T25523]  ? get_sigframe_size+0x10/0x10
[ 1047.567726][T25523]  ? lock_chain_count+0x20/0x20
[ 1047.572616][T25523]  ? rcu_is_watching+0x11/0xa0
[ 1047.577436][T25523]  exit_to_user_mode_loop+0x70/0x110
[ 1047.582769][T25523]  exit_to_user_mode_prepare+0xee/0x180
[ 1047.588356][T25523]  syscall_exit_to_user_mode+0x16/0x40
[ 1047.593835][T25523]  do_syscall_64+0x58/0xa0
[ 1047.598271][T25523]  ? clear_bhb_loop+0x60/0xb0
[ 1047.602965][T25523]  ? clear_bhb_loop+0x60/0xb0
[ 1047.607664][T25523]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1047.613579][T25523] RIP: 0033:0x7f61cc79e019
[ 1047.618012][T25523] Code: Unable to access opcode bytes at 0x7f61cc79dfef.
[ 1047.625037][T25523] RSP: 002b:00007f61cd6600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1047.633472][T25523] RAX: fffffffffffffe00 RBX: 00007f61cca26188 RCX: 00007f61cc79e019
[ 1047.641456][T25523] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f61cca26188
[ 1047.649436][T25523] RBP: 00007f61cca26180 R08: 0000000000000000 R09: 0000000000000000
[ 1047.657412][T25523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1047.665394][T25523] R13: 00007f61cca26218 R14: 00007ffcf5676030 R15: 00007ffcf5676118
[ 1047.673387][T25523]  </TASK>
[ 1047.676986][T25523] Kernel Offset: disabled
[ 1047.681336][T25523] Rebooting in 86400 seconds..