last executing test programs:

6m15.953109009s ago: executing program 3 (id=6158):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)

6m15.587859794s ago: executing program 3 (id=6160):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0})
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8000000100081044e81f782db44b904021df07010000000e8fe55a1180015000600142603fd09000000000000000000a80016000a63ba15c1f7fb66a9e09be2c1ccaa507c26cb6c54c31e98", 0x4c}], 0x22}, 0x20004000) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8000000100081044e81f782db44b904021df07010000000e8fe55a1180015000600142603fd09000000000000000000a80016000a63ba15c1f7fb66a9e09be2c1ccaa507c26cb6c54c31e98", 0x4c}], 0x22}, 0x20004000)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) (async)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4)
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x9}, 0x8)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000440)=r2) (async)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000440)=r2)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x33fe0)

6m15.279585276s ago: executing program 3 (id=6163):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="660a00000000000061113400000100000000000080d9d001a5f700000000000000000000000095002a39470505ab10ba255bc2e4c582cda419d5ca583fcee2d22c58e3f7b549"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="a8034091f600000000", @ANYRES64=0x0], 0x20)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x4a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg(0xffffffffffffffff, 0x0, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)
close(r8)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0xc008744c, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe, 0x3}, 0x10, r6, r7}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r4}, 0x8)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000680))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100906, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x13, &(0x7f0000000800), 0x4)

6m14.301267893s ago: executing program 3 (id=6167):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d62696b696fa0"], 0x7)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, &(0x7f0000000140), 0x4)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004084)
socket$kcm(0x2, 0x200000000000001, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100)=0x8000000000000000, 0x12)
ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0xc, 0x212}, 0x50)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0)

6m11.726857772s ago: executing program 3 (id=6178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'macvtap0\x00', @random="00f600"})
close(r0)

6m10.817604985s ago: executing program 3 (id=6181):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x4, 0x0, 0x2005}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000002000001d85000000ba0000009500000000000053a791fde61aa20100"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
r5 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r6 = syz_clone(0x40043000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x9, 0x9, 0x4, 0x2, 0x0, 0x9, 0x51002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc, @perf_bp={&(0x7f0000000100), 0x1}, 0x8080, 0x5, 0xe, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x8}, r6, 0xc, 0xffffffffffffffff, 0x8)
write$cgroup_pid(r5, &(0x7f0000000180)=r6, 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x0, 0x2b, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000340)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x5, 0x0, 0x41000, 0xc}, 0x94)
socket$kcm(0x2, 0x0, 0x84)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))

5m56.454151024s ago: executing program 32 (id=6181):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x4, 0x0, 0x2005}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000002000001d85000000ba0000009500000000000053a791fde61aa20100"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
r5 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r6 = syz_clone(0x40043000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x9, 0x9, 0x4, 0x2, 0x0, 0x9, 0x51002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc, @perf_bp={&(0x7f0000000100), 0x1}, 0x8080, 0x5, 0xe, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x8}, r6, 0xc, 0xffffffffffffffff, 0x8)
write$cgroup_pid(r5, &(0x7f0000000180)=r6, 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x0, 0x2b, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000340)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x5, 0x0, 0x41000, 0xc}, 0x94)
socket$kcm(0x2, 0x0, 0x84)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))

4.728147851s ago: executing program 2 (id=8094):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
close(0x3)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, 0x0, 0x0)

2.894992558s ago: executing program 2 (id=8099):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
close(r0)

2.794716205s ago: executing program 1 (id=8101):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000a600ead8ed0a96"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xb, 0x1, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r0, r1, r1, r0, r1, r1], 0x0, 0x10, 0x3ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360, 0x0, 0x0, 0x0, 0x34}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) (async)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0) (async)
close(0x3)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="180812c60000b0ff2000000000000000a2d39755f1f04994c45fddfe803b4f222af7978a", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1b, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x5e, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400000000000000000000000200000007000000000000001400000000000000000000000100000002000000000000001c000000000000000000000008000000f325ce9136f23cf8a1cbec6ededefb1adb78f2da33", @ANYRES32, @ANYBLOB="e0000001ffffffff0000000038000000000000000000000007000000890b14ffffffffac1414bb940401004418f290000000000000b1920000000200000200fffffff9001400000000000000000000000200000000020000000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1414aaac1414bb00000000"], 0xc0}, 0x20000080) (async)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00 \x00'], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) (async)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x1c70}, {0x1000e, 0xade7, 0x400}, {0x1, 0x8001, 0x3}, {0x4, 0x6, 0x9}, {0xb, 0x7fffffff, 0x6}, {0x8, 0x8, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x3ff}}]}, {0x0, [0x2e, 0x0, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/194, 0x96, 0xc2, 0x5, 0x10000, 0x10000, @value=r0}, 0x28)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000d00)=0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xff5, 0x9, 0xb120, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xa, @value=r11}, 0x50) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x28, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x0, 0x6, 0x8, 0x6, 0xfffffffffffffffe}, @alu={0x4, 0x1, 0x4, 0x8, 0xb, 0x10, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000100000f031200000200000001000000030000ec4394a5000000000000000f010000000000002e5f"], &(0x7f00000014c0)=""/2, 0x45, 0x2, 0x1}, 0x28) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, r3}, 0xc)

2.783306076s ago: executing program 0 (id=8102):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x7, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0xc04)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x106101, 0x4, 0x0, 0x1, 0x8, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90424fc6010", 0x15}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/233, 0x3f, 0xe9, 0x9}, 0x28)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000012c0)=""/4117, 0x26, 0x1015, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r5, 0x20, &(0x7f0000000680)={0x0, 0x39, 0x0, &(0x7f0000000640)}}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c7a15a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@phonet={0x23, 0x1, 0xfc, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)="5a75408697de0b0e9fcbfff0f40cabd4d3017730f0ac20e29570897a051ad9e1d4ac3e7e83ce5c252972c3568c33b3ba4c140a84aaa8207da0e29ddee5f4a35fd4b72817659ea23371709432fac2e5d5349bd5", 0x53}], 0x1, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0)

2.735087169s ago: executing program 2 (id=8103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000500)=@generic={0x5, "9cd7027e410d79ab2570a9868315f61cb2945e00dcda013610b6d9c19fe3788d1cb9069d382efb3f21dfd7aea495360043252796e7e52bc24a611142e31a8d6584a7bea3f089b01f1c7f4c849c4c345a1ff71eb56db57bea2bd89b7fb7489922434f0935dff5a066c6bfdc26caebfb02ead83f11732597306492d1cc5ef8"}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000200)}, {0x0}, {&(0x7f0000000380)="057b74a078bb0a26eca6", 0xa}, {&(0x7f0000000b80)="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", 0xfb}, {&(0x7f0000001340)="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", 0x729}, {0x0}, {&(0x7f0000000400)="f3cbe51c575d2fa108fd2c23169e91674737c1ad522f902013440431c96740fd9cdefbe459ec1127acd557ad9c21ac725bd8b6311cbadceb6fb216", 0x3b}], 0x7}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000029003000000000000ff00f3ff9400000000000000"], &(0x7f0000000140)='GPL\x00', 0x3, 0x6, &(0x7f0000000180)=""/6, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000080000bb690000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r6, 0x3)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0xa, 0x6, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))

2.503750305s ago: executing program 1 (id=8104):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$tipc(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="c6346d49895c4472a1bd9b", 0xb, 0x48044}, 0x4000800)

2.399775463s ago: executing program 0 (id=8106):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x32, 0x0, 0x0)
socketpair(0x2, 0x2, 0x1, &(0x7f0000002c40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x2, 0xa, 0x3, 0x7, 0x0, 0x100, 0x2004, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x9022, 0x7c, 0x3, 0x5, 0x10, 0x0, 0x2, 0x0, 0x401, 0x0, 0xc9d6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, @alu={0x4, 0x1, 0x5, 0x1, 0x4, 0xffffffffffffffc0}, @ldst={0x3, 0x0, 0x5, 0xa, 0x7, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xab, &(0x7f00000002c0)=""/171, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x9, 0x3, 0x7fff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000001c0)=r6, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800)=r4, 0x4)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62c", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0x713, 0x0, 0x0, 0xffffffffffffffc2}, 0x0, 0xc, 0xffffffffffffffff, 0x3)
r9 = perf_event_open(&(0x7f00000005c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x8001, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x2}, 0x100004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r8)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="f6ecf2d478a86eca2e6bea075d1e9d27080c1ea53cd831d365c43ae12da23b0345166f23598dab804e04", 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000500)="82ffb9e8fd3d614f92f8af78152f8198aa26c8b01e6b86f5e66c50dd762efa5ed45fd52c2cdf54990efa3c4506", 0x0, 0x100, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f3, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x8811)
r12 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r12, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, 0x0}, 0x41)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.103470683s ago: executing program 2 (id=8108):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8900, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))
socket$kcm(0x18, 0x0, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x401, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, r2, 0x1, 0xffffffffffffffff, 0x1)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000008008ae9df82f502b42e9ecd9be07c2a1c1f2af9efe2c721e211aa30856717b6bc671e1975b70697c0702959a3100000000000000011e8de59fde96a77b9d7ccf20a022383758c12746dbc3cfc841fc252b9d8991dfc6bc3ff38e3847cab29c9d107aeda4c9affcb8b6000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r5, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r11 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89ed, 0x0)

2.100254104s ago: executing program 0 (id=8109):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0xa031, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@ll={0x11, 0xef, 0x0, 0x1, 0x8a, 0x6, @local}, 0x80, 0x0}, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000170000000000faff00000000000000000000fb6ed318c09e804d1b0000000000000000"], 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8e8c5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840)

1.975648642s ago: executing program 4 (id=8110):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5a, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x5, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b8109008cd824"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702f"], 0xffdd) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001c000000080000004000", @ANYBLOB, @ANYRES32], 0x50) (async)
sendmsg$tipc(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="66c1edcd1caa67535c0a7d3f78fc263335e44e00ead55204850b62d13b28dbd1ec7a4ea7b76bd581bd7c32b49e34df1eadf8755a2691ed569dd2437dc8238b83b8dacb534b1376eec0ad548581aed5745ca4314d0e339408ac61643a554936967a8e8444d055eb98b0b6ab9a0a4043f7201da135c26cc5b9e0ff38513d5a5d47af49ca4f345d062c40dc918561bb3ca0e4cb4fa2a701d3793d69f9f1f02a9f1f8c617d9378484f018d98910893a3f27d4a23b78ea54d38b46bf807d2a775e4f7a98fd650b817daad4b16bf49567ff379e85a869bd3dd900fb4", 0xd9}, {&(0x7f0000000640)="cf96aaf3fb91729072f7aae877c9aa02bff31c88ce90eaf0a128b877327d88a500b07b19fb34", 0x26}, {&(0x7f0000000680)="3bf731af4b8e94b28c519e0e335ac4234042765b1269ba24d0fbdcb5be675246", 0x20}, {&(0x7f00000006c0)="f386451f77bc1bc2d61cc89802ab3ebfecf9fc67e82e7ed76797bc771131551301c874372d3bb712de471755246c9d046d", 0x31}], 0x4}, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
ioctl$TUNGETFEATURES(r6, 0x541b, &(0x7f00000013c0))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r5}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44004) (async)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xfffffe2b, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c25949301a3c92b", 0x14}], 0x1}, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)

1.549264952s ago: executing program 1 (id=8111):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
close(r0)

1.315473358s ago: executing program 4 (id=8112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x26, 0xa, 0x2f, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000100)="d8a8c9cbe6269728d6f4bf750e2b9b2ff83df8dea3d18da9280652243b4642a55d50409bbd9fb4fe", 0x28}, {&(0x7f0000000440)="5a5e56c964fe31c8d711ab28e0376a432de6144b771ddc3a58282b2ff9b258113323437a2a259d2ea5c25a78d2162b8abc35973a361b41af7fc57e9b1729822b7700b3760c116e0668ab7af488ca346af20f3aa438f67019276b093a28fafd49abecefa037486e24c2b25f0725", 0x6d}, {&(0x7f00000004c0)="1011cda50686948bd311cb205d9565d1b82a26a8482682b98be2be818fd7e5fe352ce1634ad7c2b339917d15eac56cbba1ec47a9ce6cd1a2ba8316d4b4b48b5a68f4680915c8ec94b4e115d35f47a24b2bd9173cb518de27b2ca163cf94f10e92e41", 0x62}, {&(0x7f00000006c0)="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", 0xf00}, {&(0x7f0000000540)="1591720b2052f6afdb9d251f02b4dff9b46c3a36cae42002c42c7f0452c8188e5592a1d0a84a518f2b176bf51e3c7f6f61", 0x31}], 0x5, 0x0, 0x80}, 0x40)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000)
setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x1, 0x1, 0x2, 0xf345, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00000010000000000000090500000000323000"], &(0x7f0000000140)=""/190, 0x28, 0xbe, 0x1, 0x7ff, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x18, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000f9ffffff000000000000000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8, <r7=>0x0}, 0x8)
r8 = gettid()
syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/pid_for_children\x00')
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r7, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24f86007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={r6, 0x20, &(0x7f0000000680)={&(0x7f0000000380)=""/17, 0x11, 0x0, &(0x7f00000005c0)=""/189, 0xbd}}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, @perf_config_ext={0x0, 0x7ffd}, 0x188100, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0)

1.314561068s ago: executing program 1 (id=8120):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
close(r0)

1.27995231s ago: executing program 2 (id=8113):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0)
socketpair(0x28, 0x2, 0x28, &(0x7f0000001400))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x801, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000080), 0x1003, r3}, 0x38)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r1, 0x4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000000000000008000000000000002fca2a5fa9083bd912e4a83094ab897ab7446b2a23fef09bbb8cb1e47713b171eb8302224800aa7aca75adff0a6895a7b9e9c92a8e9300"])
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x21)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4d, &(0x7f0000000280)=[{&(0x7f0000000040)="a5d956e0df000b63", 0x8}], 0x1}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33)

1.207428616s ago: executing program 1 (id=8114):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180fec0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r1, 0x8, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
socket$kcm(0x2, 0x1, 0x84)
r2 = socket$kcm(0xa, 0x6, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0})

1.059222106s ago: executing program 0 (id=8115):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x2, 0x200000000000006, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1, 0x0, 0x9}, 0x0, 0x1, r0, 0x0)
ioctl$TUNGETVNETLE(r0, 0x8953, &(0x7f0000000040))

1.057063656s ago: executing program 4 (id=8116):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@enum64={0x7, 0x8, 0x0, 0x13, 0x0, 0x1, [{0x3, 0xdc89, 0xf}, {0x8, 0x2, 0xd}, {0xf, 0xbff, 0x8}, {0x7, 0x3, 0x1}, {0x3, 0x5, 0x400}, {0xe, 0xb, 0x7}, {0xa, 0x200, 0x5}, {0xc, 0x0, 0x3}]}]}, {0x0, [0x2e]}}, &(0x7f0000000580)=""/234, 0x87, 0xea, 0x1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@enum64={0x7, 0x8, 0x0, 0x13, 0x0, 0x1, [{0x3, 0xdc89, 0xf}, {0x8, 0x2, 0xd}, {0xf, 0xbff, 0x8}, {0x7, 0x3, 0x1}, {0x3, 0x5, 0x400}, {0xe, 0xb, 0x7}, {0xa, 0x200, 0x5}, {0xc, 0x0, 0x3}]}]}, {0x0, [0x2e]}}, &(0x7f0000000580)=""/234, 0x87, 0xea, 0x1, 0x1}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x3d, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x3d, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x6, 0xe, 0xffff59b2, 0x8031, r3, 0xfffffff7, '\x00', r4, r5, 0x0, 0x3, 0x2, 0x0, @value=r6}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x6, 0xe, 0xffff59b2, 0x8031, r3, 0xfffffff7, '\x00', r4, r5, 0x0, 0x3, 0x2, 0x0, @value=r6}, 0x50)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7, 0x7, 0x9, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7, 0x7, 0x9, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(0x3) (async)
close(0x3)

703.769471ms ago: executing program 4 (id=8117):
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

622.409866ms ago: executing program 0 (id=8118):
socket$kcm(0x2, 0x5, 0x84)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x9, 0x4, 0x56, 0x2, 0x0, 0x5, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2a00, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x87)
socket$kcm(0x15, 0x5, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f00000000c0), 0x4)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, 0x0, 0xfdef)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x40, 0x0, 0x18, 0x6, 0x0, 0x2, 0x800a, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0xfee8}, 0x40c, 0x8, 0x80, 0x1, 0xd89f, 0xffff, 0x2, 0x0, 0x7, 0x0, 0xbad3}, r7, 0x4, r0, 0x8)

133.19168ms ago: executing program 0 (id=8119):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$tipc(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="c6346d49895c4472a1bd9b", 0xb, 0x48044}, 0x4000800)

131.05222ms ago: executing program 1 (id=8121):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f00000000c0)={'macvtap0\x00', @random='\x00\x00\x00\x00\x00 '})

130.410521ms ago: executing program 2 (id=8122):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x15}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff90, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000221000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

129.41891ms ago: executing program 4 (id=8123):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x4}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x45)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
close(r4)

0s ago: executing program 4 (id=8124):
r0 = socket$kcm(0xa, 0x0, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001e00000000000000200018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x60, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000000)=""/2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0xc0fe, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)

kernel console output (not intermixed with test programs):

ing new route
[ 1071.116548][T28734] IPv6: Can't replace route, no match found
[ 1071.285587][T28741] pim6reg0: tun_chr_ioctl cmd 1074025672
[ 1071.291329][T28741] pim6reg0: ignored: set checksum disabled
[ 1071.555898][T28755] netlink: 'syz.1.6730': attribute type 10 has an invalid length.
[ 1071.581414][T28755] veth0_macvtap: left promiscuous mode
[ 1071.601743][T28755] team0: Port device veth0_macvtap added
[ 1071.888165][T28775] netlink: 'syz.1.6736': attribute type 10 has an invalid length.
[ 1071.978571][T28777] netlink: 'syz.1.6736': attribute type 9 has an invalid length.
[ 1071.995995][T28777] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6736'.
[ 1072.084908][T28775] .`: (slave geneve0): Releasing backup interface
[ 1072.189816][T28776] netlink: 'syz.1.6736': attribute type 9 has an invalid length.
[ 1072.209729][T28776] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6736'.
[ 1072.226826][T28784] 
€Â: renamed from pim6reg1
[ 1072.491781][T28786] sit0: entered promiscuous mode
[ 1072.497404][T28786] sit0: entered allmulticast mode
[ 1072.778690][T28794] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.6740'.
[ 1073.145130][T28799] netlink: set zone limit has 8 unknown bytes
[ 1073.479316][T28804] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1073.513524][T28804] syzkaller0: entered promiscuous mode
[ 1073.519076][T28804] syzkaller0: entered allmulticast mode
[ 1073.890084][T28818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6749'.
[ 1073.919048][T28818] netlink: 'syz.2.6749': attribute type 4 has an invalid length.
[ 1073.953106][T28818] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6749'.
[ 1074.339859][T28825] hsr_slave_1 (unregistering): left promiscuous mode
[ 1074.495951][T28837] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6754'.
[ 1074.510383][T28837] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6754'.
[ 1074.686353][T28844] delete_channel: no stack
[ 1074.781704][T28849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6758'.
[ 1074.839828][T28849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6758'.
[ 1075.579637][T28866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6763'.
[ 1075.690631][T28874] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[ 1075.737645][T28873] validate_nla: 1 callbacks suppressed
[ 1075.737661][T28873] netlink: 'syz.2.6765': attribute type 29 has an invalid length.
[ 1075.764918][T28873] netlink: 'syz.2.6765': attribute type 29 has an invalid length.
[ 1077.466478][T28946] netlink: 'syz.2.6787': attribute type 8 has an invalid length.
[ 1077.474578][T28946] __nla_validate_parse: 9 callbacks suppressed
[ 1077.474590][T28946] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6787'.
[ 1078.210331][T28964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6792'.
[ 1078.222306][T28964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6792'.
[ 1078.485497][T28977] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6795'.
[ 1078.501989][T28978] netlink: 'syz.4.6797': attribute type 21 has an invalid length.
[ 1078.524295][T28978] pimreg0: tun_chr_ioctl cmd 1074025681
[ 1078.711245][T28986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 1078.807451][T28986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 1078.823991][T28987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 1078.919503][T28986] netlink: 'syz.2.6798': attribute type 28 has an invalid length.
[ 1078.966977][T28986] netlink: 'syz.2.6798': attribute type 29 has an invalid length.
[ 1079.001856][T28986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 1079.087944][T27033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.131364][T28981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 1079.251704][T27033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.366424][T27034] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1079.412213][T27033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.627544][T27033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.202560][T29019] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.6808'.
[ 1080.405753][T29013] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1080.448907][T29013] CPU: 1 PID: 29013 Comm: syz.2.6807 Not tainted syzkaller #0
[ 1080.456451][T29013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1080.466547][T29013] Call Trace:
[ 1080.469858][T29013]  <TASK>
[ 1080.472825][T29013]  dump_stack_lvl+0x18c/0x250
[ 1080.477568][T29013]  ? show_regs_print_info+0x20/0x20
[ 1080.482821][T29013]  ? load_image+0x420/0x420
[ 1080.487501][T29013]  sysfs_warn_dup+0x8e/0xa0
[ 1080.492053][T29013]  sysfs_do_create_link_sd+0xc0/0x110
[ 1080.497469][T29013]  device_add_class_symlinks+0x1cf/0x240
[ 1080.503159][T29013]  device_add+0x507/0xc20
[ 1080.507547][T29013]  wiphy_register+0x1dad/0x2ae0
[ 1080.512465][T29013]  ? cfg80211_event_work+0x40/0x40
[ 1080.517616][T29013]  ? minstrel_ht_alloc+0x88a/0x990
[ 1080.522783][T29013]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1080.528924][T29013]  ieee80211_register_hw+0x3464/0x4250
[ 1080.534481][T29013]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1080.540169][T29013]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1080.546133][T29013]  ? __debug_object_init+0xec/0x450
[ 1080.551400][T29013]  ? __asan_memset+0x22/0x40
[ 1080.556047][T29013]  ? __hrtimer_init+0x186/0x270
[ 1080.560923][T29013]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1080.566678][T29013]  ? mac80211_hwsim_free+0x220/0x220
[ 1080.571972][T29013]  ? rcu_is_watching+0x15/0xb0
[ 1080.576755][T29013]  ? kstrndup+0xbd/0x140
[ 1080.581029][T29013]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1080.586161][T29013]  ? __nla_validate+0x50/0x50
[ 1080.590862][T29013]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1080.597233][T29013]  ? __nla_parse+0x40/0x50
[ 1080.601671][T29013]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1080.608027][T29013]  genl_family_rcv_msg_doit+0x211/0x310
[ 1080.613608][T29013]  ? end_current_label_crit_section+0x170/0x170
[ 1080.619893][T29013]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1080.625826][T29013]  ? bpf_lsm_capable+0x9/0x10
[ 1080.630536][T29013]  ? security_capable+0x89/0xb0
[ 1080.635434][T29013]  genl_rcv_msg+0x619/0x7a0
[ 1080.639963][T29013]  ? genl_bind+0x360/0x360
[ 1080.644410][T29013]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1080.650761][T29013]  ? ref_tracker_free+0x690/0x840
[ 1080.655836][T29013]  netlink_rcv_skb+0x241/0x4d0
[ 1080.660645][T29013]  ? genl_bind+0x360/0x360
[ 1080.665091][T29013]  ? netlink_ack+0x1180/0x1180
[ 1080.669892][T29013]  ? __lock_acquire+0x7d40/0x7d40
[ 1080.674948][T29013]  ? down_read+0x1ac/0x2e0
[ 1080.679390][T29013]  genl_rcv+0x28/0x40
[ 1080.683403][T29013]  netlink_unicast+0x751/0x8d0
[ 1080.688210][T29013]  netlink_sendmsg+0x8d0/0xbf0
[ 1080.693016][T29013]  ? netlink_getsockopt+0x590/0x590
[ 1080.698260][T29013]  ? aa_sock_msg_perm+0x94/0x150
[ 1080.703312][T29013]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1080.708655][T29013]  ? security_socket_sendmsg+0x80/0xa0
[ 1080.714144][T29013]  ? netlink_getsockopt+0x590/0x590
[ 1080.719377][T29013]  ____sys_sendmsg+0x5ba/0x960
[ 1080.724168][T29013]  ? __asan_memset+0x22/0x40
[ 1080.728793][T29013]  ? __sys_sendmsg_sock+0x30/0x30
[ 1080.733830][T29013]  ? __import_iovec+0x5f2/0x850
[ 1080.738708][T29013]  ? import_iovec+0x73/0xa0
[ 1080.743236][T29013]  ___sys_sendmsg+0x2a6/0x360
[ 1080.747951][T29013]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1080.752778][T29013]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1080.757668][T29013]  ? __x64_sys_sendmsg+0x80/0x80
[ 1080.762639][T29013]  ? lockdep_hardirqs_on+0x98/0x150
[ 1080.767874][T29013]  do_syscall_64+0x55/0xa0
[ 1080.772311][T29013]  ? clear_bhb_loop+0x40/0x90
[ 1080.777015][T29013]  ? clear_bhb_loop+0x40/0x90
[ 1080.781805][T29013]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1080.787739][T29013] RIP: 0033:0x7f833c19c819
[ 1080.792190][T29013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1080.811822][T29013] RSP: 002b:00007f833d00b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1080.820261][T29013] RAX: ffffffffffffffda RBX: 00007f833c416090 RCX: 00007f833c19c819
[ 1080.828337][T29013] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1080.836329][T29013] RBP: 00007f833c232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1080.844326][T29013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1080.852323][T29013] R13: 00007f833c416128 R14: 00007f833c416090 R15: 00007ffe07690e38
[ 1080.860343][T29013]  </TASK>
[ 1080.945103][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1080.954639][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1080.969403][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1080.994231][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1081.003130][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1081.010685][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1081.608326][T29045] netlink: 'syz.1.6811': attribute type 10 has an invalid length.
[ 1081.639753][T29045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1081.702360][T29045] batadv0: entered promiscuous mode
[ 1081.710990][T29045] .`: (slave batadv0): Enslaving as an active interface with an up link
[ 1082.429652][T29028] chnl_net:caif_netlink_parms(): no params data found
[ 1083.033625][T28163] Bluetooth: hci0: command tx timeout
[ 1083.140765][T27033] hsr_slave_0: left promiscuous mode
[ 1083.154177][T27033] hsr_slave_1: left promiscuous mode
[ 1083.178890][T27033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1083.186768][T27033] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1083.204685][T27033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1083.212286][T27033] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1083.235742][T27033] bridge_slave_1: left allmulticast mode
[ 1083.241428][T27033] bridge_slave_1: left promiscuous mode
[ 1083.253363][T27033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.334097][T27033] bridge_slave_0: left allmulticast mode
[ 1083.339801][T27033] bridge_slave_0: left promiscuous mode
[ 1083.374245][T27033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.433946][T27033] veth1_macvtap: left promiscuous mode
[ 1083.440302][T27033] veth0_macvtap: left promiscuous mode
[ 1083.448894][T27033] veth1_vlan: left promiscuous mode
[ 1083.455716][T27033] veth0_vlan: left promiscuous mode
[ 1084.676425][T27033] team0 (unregistering): Port device team_slave_1 removed
[ 1084.723469][T27033] team0 (unregistering): Port device team_slave_0 removed
[ 1084.768344][T27033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1084.813937][T27033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1085.114418][T28163] Bluetooth: hci0: command tx timeout
[ 1085.162813][T27033] bond0 (unregistering): Released all slaves
[ 1085.252789][T29028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.260313][T29028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.267622][T29028] bridge_slave_0: entered allmulticast mode
[ 1085.275071][T29028] bridge_slave_0: entered promiscuous mode
[ 1085.324639][T29028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.362592][T29028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.384306][T29028] bridge_slave_1: entered allmulticast mode
[ 1085.391408][T29028] bridge_slave_1: entered promiscuous mode
[ 1085.488915][T29125] netlink: 'syz.4.6825': attribute type 29 has an invalid length.
[ 1085.497623][T29028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1085.526760][T29028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1085.548757][T29125] netlink: 'syz.4.6825': attribute type 29 has an invalid length.
[ 1085.591491][T29127] netlink: 'syz.1.6826': attribute type 11 has an invalid length.
[ 1085.618787][T29127] __nla_validate_parse: 2 callbacks suppressed
[ 1085.618802][T29127] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.6826'.
[ 1085.634858][T29028] team0: Port device team_slave_0 added
[ 1085.664829][T29028] team0: Port device team_slave_1 added
[ 1085.690546][T29127] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1085.704782][T29127] CPU: 1 PID: 29127 Comm: syz.1.6826 Not tainted syzkaller #0
[ 1085.712293][T29127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1085.722383][T29127] Call Trace:
[ 1085.725703][T29127]  <TASK>
[ 1085.728664][T29127]  dump_stack_lvl+0x18c/0x250
[ 1085.733408][T29127]  ? show_regs_print_info+0x20/0x20
[ 1085.738672][T29127]  ? load_image+0x420/0x420
[ 1085.743252][T29127]  sysfs_warn_dup+0x8e/0xa0
[ 1085.747791][T29127]  sysfs_do_create_link_sd+0xc0/0x110
[ 1085.753222][T29127]  device_add_class_symlinks+0x1cf/0x240
[ 1085.758908][T29127]  device_add+0x507/0xc20
[ 1085.763298][T29127]  wiphy_register+0x1dad/0x2ae0
[ 1085.768242][T29127]  ? cfg80211_event_work+0x40/0x40
[ 1085.773414][T29127]  ? minstrel_ht_alloc+0x88a/0x990
[ 1085.778575][T29127]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1085.784681][T29127]  ieee80211_register_hw+0x3464/0x4250
[ 1085.790180][T29127]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1085.795849][T29127]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1085.801774][T29127]  ? __debug_object_init+0xec/0x450
[ 1085.806999][T29127]  ? __asan_memset+0x22/0x40
[ 1085.811613][T29127]  ? __hrtimer_init+0x186/0x270
[ 1085.816482][T29127]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1085.822236][T29127]  ? mac80211_hwsim_free+0x220/0x220
[ 1085.827545][T29127]  ? rcu_is_watching+0x15/0xb0
[ 1085.832343][T29127]  ? kstrndup+0xbd/0x140
[ 1085.836648][T29127]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1085.841778][T29127]  ? __nla_validate+0x50/0x50
[ 1085.846488][T29127]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1085.852856][T29127]  ? __nla_parse+0x40/0x50
[ 1085.857290][T29127]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1085.863636][T29127]  genl_family_rcv_msg_doit+0x211/0x310
[ 1085.869199][T29127]  ? end_current_label_crit_section+0x170/0x170
[ 1085.875491][T29127]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1085.881410][T29127]  ? bpf_lsm_capable+0x9/0x10
[ 1085.886107][T29127]  ? security_capable+0x89/0xb0
[ 1085.890978][T29127]  genl_rcv_msg+0x619/0x7a0
[ 1085.895510][T29127]  ? genl_bind+0x360/0x360
[ 1085.899945][T29127]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1085.906312][T29127]  ? ref_tracker_free+0x690/0x840
[ 1085.911361][T29127]  netlink_rcv_skb+0x241/0x4d0
[ 1085.916149][T29127]  ? genl_bind+0x360/0x360
[ 1085.920584][T29127]  ? netlink_ack+0x1180/0x1180
[ 1085.925378][T29127]  ? __lock_acquire+0x7d40/0x7d40
[ 1085.930421][T29127]  ? down_read+0x1ac/0x2e0
[ 1085.934881][T29127]  genl_rcv+0x28/0x40
[ 1085.938875][T29127]  netlink_unicast+0x751/0x8d0
[ 1085.943677][T29127]  netlink_sendmsg+0x8d0/0xbf0
[ 1085.948470][T29127]  ? netlink_getsockopt+0x590/0x590
[ 1085.953693][T29127]  ? aa_sock_msg_perm+0x94/0x150
[ 1085.958659][T29127]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1085.963974][T29127]  ? security_socket_sendmsg+0x80/0xa0
[ 1085.969447][T29127]  ? netlink_getsockopt+0x590/0x590
[ 1085.974669][T29127]  ____sys_sendmsg+0x5ba/0x960
[ 1085.979452][T29127]  ? __asan_memset+0x22/0x40
[ 1085.984068][T29127]  ? __sys_sendmsg_sock+0x30/0x30
[ 1085.989108][T29127]  ? __import_iovec+0x5f2/0x850
[ 1085.993985][T29127]  ? import_iovec+0x73/0xa0
[ 1085.998507][T29127]  ___sys_sendmsg+0x2a6/0x360
[ 1086.003211][T29127]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1086.008028][T29127]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1086.012897][T29127]  ? __x64_sys_sendmsg+0x80/0x80
[ 1086.017872][T29127]  ? lockdep_hardirqs_on+0x98/0x150
[ 1086.023097][T29127]  do_syscall_64+0x55/0xa0
[ 1086.027536][T29127]  ? clear_bhb_loop+0x40/0x90
[ 1086.032252][T29127]  ? clear_bhb_loop+0x40/0x90
[ 1086.036974][T29127]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1086.042889][T29127] RIP: 0033:0x7ff9e459c819
[ 1086.047339][T29127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1086.066980][T29127] RSP: 002b:00007ff9e545e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1086.075420][T29127] RAX: ffffffffffffffda RBX: 00007ff9e4815fa0 RCX: 00007ff9e459c819
[ 1086.083412][T29127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1086.091402][T29127] RBP: 00007ff9e4632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1086.099392][T29127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1086.107389][T29127] R13: 00007ff9e4816038 R14: 00007ff9e4815fa0 R15: 00007ffcb66ffd78
[ 1086.115413][T29127]  </TASK>
[ 1086.315578][T29129] delete_channel: no stack
[ 1086.321006][T29028] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1086.342012][T29028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1086.371615][T29028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1086.428389][T29028] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1086.438112][T29028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1086.466199][T29129] delete_channel: no stack
[ 1086.471523][T29028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1086.636084][T29145] netlink: 49920 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1086.678658][T29143] netlink: 'syz.1.6829': attribute type 46 has an invalid length.
[ 1086.752472][T29146] netlink: 'syz.2.6830': attribute type 10 has an invalid length.
[ 1086.763148][T29146] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6830'.
[ 1086.969342][T29028] hsr_slave_0: entered promiscuous mode
[ 1087.107824][T29156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6832'.
[ 1087.199566][T28163] Bluetooth: hci0: command tx timeout
[ 1087.486175][T29028] hsr_slave_1: entered promiscuous mode
[ 1087.529690][T29028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1087.538941][T29028] Cannot create hsr debugfs directory
[ 1087.553635][T29156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6832'.
[ 1087.650960][T29157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6832'.
[ 1087.919161][T29169] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6834'.
[ 1087.944022][T29169] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1088.353443][T29185] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.6838'.
[ 1088.753838][T29191] netlink: 'syz.4.6839': attribute type 5 has an invalid length.
[ 1089.278149][T28163] Bluetooth: hci0: command tx timeout
[ 1092.482436][T29240] netlink: 'syz.4.6850': attribute type 10 has an invalid length.
[ 1092.499980][T29240] team0: Device ipvlan1 failed to register rx_handler
[ 1092.651377][T29028] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1092.750889][T29028] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1092.794172][T29028] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1092.827561][T29028] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1093.107183][T29028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.129329][T29259] delete_channel: no stack
[ 1093.229972][T29028] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.367070][T14606] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.374306][T14606] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1093.388452][T14606] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.395648][T14606] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1093.624623][T29028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1094.708414][T29028] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1094.891146][T29028] veth0_vlan: entered promiscuous mode
[ 1094.931205][T29028] veth1_vlan: entered promiscuous mode
[ 1094.952506][T29309] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6863'.
[ 1095.030474][T29028] veth0_macvtap: entered promiscuous mode
[ 1095.072514][T29028] veth1_macvtap: entered promiscuous mode
[ 1095.104405][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.170868][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.185704][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.196548][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.206730][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.222208][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.250450][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.277357][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.301729][T29028] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1095.346062][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.376677][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.399892][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.453048][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.496287][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.519642][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.531053][T29028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.546739][T29028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.562582][T29028] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1095.589378][T29028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.609297][T29028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.632970][T29028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.646424][T29028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.068157][T27031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.114046][T27031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.275832][T27031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.299919][T27031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.925323][T29359] netlink: 'syz.0.6801': attribute type 28 has an invalid length.
[ 1096.959111][T29359] netlink: 'syz.0.6801': attribute type 29 has an invalid length.
[ 1097.028848][T29359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6801'.
[ 1097.471137][T29367] netlink: 'syz.1.6874': attribute type 11 has an invalid length.
[ 1097.513059][T29367] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.6874'.
[ 1097.925685][T29367] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1097.953614][T29367] CPU: 0 PID: 29367 Comm: syz.1.6874 Not tainted syzkaller #0
[ 1097.961223][T29367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1097.971383][T29367] Call Trace:
[ 1097.974758][T29367]  <TASK>
[ 1097.977801][T29367]  dump_stack_lvl+0x18c/0x250
[ 1097.982666][T29367]  ? show_regs_print_info+0x20/0x20
[ 1097.988015][T29367]  ? load_image+0x420/0x420
[ 1097.992737][T29367]  sysfs_warn_dup+0x8e/0xa0
[ 1097.997367][T29367]  sysfs_do_create_link_sd+0xc0/0x110
[ 1098.002858][T29367]  device_add_class_symlinks+0x1cf/0x240
[ 1098.008633][T29367]  device_add+0x507/0xc20
[ 1098.013134][T29367]  wiphy_register+0x1dad/0x2ae0
[ 1098.018261][T29367]  ? cfg80211_event_work+0x40/0x40
[ 1098.023475][T29367]  ? minstrel_ht_alloc+0x88a/0x990
[ 1098.028773][T29367]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1098.035004][T29367]  ieee80211_register_hw+0x3464/0x4250
[ 1098.040746][T29367]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1098.046510][T29367]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1098.052528][T29367]  ? __debug_object_init+0xec/0x450
[ 1098.057879][T29367]  ? __asan_memset+0x22/0x40
[ 1098.062593][T29367]  ? __hrtimer_init+0x186/0x270
[ 1098.067681][T29367]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1098.073661][T29367]  ? mac80211_hwsim_free+0x220/0x220
[ 1098.079049][T29367]  ? rcu_is_watching+0x15/0xb0
[ 1098.083927][T29367]  ? kstrndup+0xbd/0x140
[ 1098.088342][T29367]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1098.093602][T29367]  ? __nla_validate+0x50/0x50
[ 1098.098494][T29367]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1098.105047][T29367]  ? __nla_parse+0x40/0x50
[ 1098.109575][T29367]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1098.116024][T29367]  genl_family_rcv_msg_doit+0x211/0x310
[ 1098.121640][T29367]  ? end_current_label_crit_section+0x170/0x170
[ 1098.127962][T29367]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1098.133961][T29367]  ? bpf_lsm_capable+0x9/0x10
[ 1098.138716][T29367]  ? security_capable+0x89/0xb0
[ 1098.143672][T29367]  genl_rcv_msg+0x619/0x7a0
[ 1098.148272][T29367]  ? genl_bind+0x360/0x360
[ 1098.152747][T29367]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1098.159161][T29367]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1098.165872][T29367]  netlink_rcv_skb+0x241/0x4d0
[ 1098.170712][T29367]  ? genl_bind+0x360/0x360
[ 1098.175246][T29367]  ? netlink_ack+0x1180/0x1180
[ 1098.180161][T29367]  ? __lock_acquire+0x7d40/0x7d40
[ 1098.185308][T29367]  ? down_read+0x1ac/0x2e0
[ 1098.189796][T29367]  genl_rcv+0x28/0x40
[ 1098.193832][T29367]  netlink_unicast+0x751/0x8d0
[ 1098.198725][T29367]  netlink_sendmsg+0x8d0/0xbf0
[ 1098.203565][T29367]  ? perf_trace_lock+0x304/0x3b0
[ 1098.208608][T29367]  ? netlink_getsockopt+0x590/0x590
[ 1098.213922][T29367]  ? aa_sock_msg_perm+0x94/0x150
[ 1098.218931][T29367]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1098.224280][T29367]  ? security_socket_sendmsg+0x80/0xa0
[ 1098.229792][T29367]  ? netlink_getsockopt+0x590/0x590
[ 1098.235066][T29367]  ____sys_sendmsg+0x5ba/0x960
[ 1098.239927][T29367]  ? __asan_memset+0x22/0x40
[ 1098.244589][T29367]  ? __sys_sendmsg_sock+0x30/0x30
[ 1098.249694][T29367]  ? __import_iovec+0x5f2/0x850
[ 1098.254675][T29367]  ? import_iovec+0x73/0xa0
[ 1098.259272][T29367]  ___sys_sendmsg+0x2a6/0x360
[ 1098.264074][T29367]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1098.269242][T29367]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1098.274188][T29367]  ? __x64_sys_sendmsg+0x80/0x80
[ 1098.279288][T29367]  ? lockdep_hardirqs_on+0x98/0x150
[ 1098.284581][T29367]  do_syscall_64+0x55/0xa0
[ 1098.289050][T29367]  ? clear_bhb_loop+0x40/0x90
[ 1098.293783][T29367]  ? clear_bhb_loop+0x40/0x90
[ 1098.298539][T29367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1098.304499][T29367] RIP: 0033:0x7ff9e459c819
[ 1098.308981][T29367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.328655][T29367] RSP: 002b:00007ff9e543d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1098.337137][T29367] RAX: ffffffffffffffda RBX: 00007ff9e4816090 RCX: 00007ff9e459c819
[ 1098.345171][T29367] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1098.353203][T29367] RBP: 00007ff9e4632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1098.361240][T29367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.369274][T29367] R13: 00007ff9e4816128 R14: 00007ff9e4816090 R15: 00007ffcb66ffd78
[ 1098.377380][T29367]  </TASK>
[ 1098.706035][T29370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6875'.
[ 1098.780632][T29370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6875'.
[ 1098.887561][T29372] netlink: 'syz.4.6875': attribute type 10 has an invalid length.
[ 1100.080717][T29377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1100.461678][T29381] syzkaller0: entered promiscuous mode
[ 1100.503284][T29381] syzkaller0: entered allmulticast mode
[ 1100.986988][T28163] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[ 1101.043741][T29404] netlink: 22 bytes leftover after parsing attributes in process `syz.2.6880'.
[ 1104.114671][T29436] netlink: 'syz.2.6885': attribute type 29 has an invalid length.
[ 1107.981320][T29436] netlink: 'syz.2.6885': attribute type 29 has an invalid length.
[ 1108.009627][T29439] netlink: 'syz.0.6886': attribute type 33 has an invalid length.
[ 1108.017582][T29439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6886'.
[ 1108.265615][T29471] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6889'.
[ 1108.328366][T29471] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6889'.
[ 1109.034731][T29497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6896'.
[ 1109.061727][T29497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6896'.
[ 1109.154537][T29501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6896'.
[ 1109.660397][T29495] syzkaller0: entered promiscuous mode
[ 1109.698167][T29495] syzkaller0: entered allmulticast mode
[ 1110.866910][T29561] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6902'.
[ 1111.354595][T27027] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1113.440989][T29561] 6: renamed from veth0_vlan (while UP)
[ 1113.487723][T29574] syzkaller0: entered promiscuous mode
[ 1113.498175][T29574] syzkaller0: entered allmulticast mode
[ 1115.837951][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.853080][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.996638][T29599] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6912'.
[ 1116.022602][T29599] netlink: 'syz.2.6912': attribute type 29 has an invalid length.
[ 1116.049621][T29599] netlink: 'syz.2.6912': attribute type 29 has an invalid length.
[ 1116.126308][T29601] netlink: 'syz.1.6913': attribute type 10 has an invalid length.
[ 1117.026903][T29638] netlink: 'syz.1.6924': attribute type 1 has an invalid length.
[ 1117.036130][T29636] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6923'.
[ 1117.083352][T29638] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.6924'.
[ 1118.026002][T29671] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6932'.
[ 1118.045519][T29671] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.6932'.
[ 1118.636173][T29683] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.6937'.
[ 1118.677473][T29683] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6937'.
[ 1119.043175][T29689] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6939'.
[ 1119.702027][T29715] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6947'.
[ 1120.173741][T29737] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6952'.
[ 1120.214238][T29727] delete_channel: no stack
[ 1121.054168][T29764] netlink: 'syz.1.6961': attribute type 3 has an invalid length.
[ 1121.062065][T29764] __nla_validate_parse: 1 callbacks suppressed
[ 1121.062079][T29764] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6961'.
[ 1122.731478][T29806] netlink: 'syz.0.6972': attribute type 10 has an invalid length.
[ 1123.062106][T29815] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6972'.
[ 1123.162210][T29806] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1123.199585][T29806] team0: Port device bond0 added
[ 1124.027768][T27034] hsr_slave_1: left promiscuous mode
[ 1124.084300][T29833] delete_channel: no stack
[ 1124.094385][T27034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1124.116585][T27034] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1124.166770][T27034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1124.197249][T27034] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1124.221750][T27034] bridge_slave_1: left allmulticast mode
[ 1124.237817][T27034] bridge_slave_1: left promiscuous mode
[ 1124.260571][T27034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1124.312114][T27034] bridge_slave_0: left allmulticast mode
[ 1124.325953][T27034] bridge_slave_0: left promiscuous mode
[ 1124.373534][T27034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1124.446001][T29843] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6978'.
[ 1124.711747][T27034] veth1_macvtap: left promiscuous mode
[ 1124.729727][T27034] veth0_macvtap: left promiscuous mode
[ 1124.749049][T27034] veth1_vlan: left promiscuous mode
[ 1124.769404][T27034] veth0_vlan: left promiscuous mode
[ 1124.848185][T29851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6980'.
[ 1126.452730][T27034] team0 (unregistering): Port device team_slave_1 removed
[ 1126.775683][T27034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1126.973670][T27034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1127.471375][T27034] bond0 (unregistering): Released all slaves
[ 1127.577900][T29851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6980'.
[ 1127.623666][T29863] hsr0: entered promiscuous mode
[ 1127.628670][T29863] hsr0: entered allmulticast mode
[ 1127.654904][T29863] hsr_slave_0: entered allmulticast mode
[ 1127.660704][T29863] hsr_slave_1: entered allmulticast mode
[ 1127.700288][T29843] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1127.709069][T29843] CPU: 0 PID: 29843 Comm: syz.2.6978 Not tainted syzkaller #0
[ 1127.716571][T29843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1127.726642][T29843] Call Trace:
[ 1127.729950][T29843]  <TASK>
[ 1127.732917][T29843]  dump_stack_lvl+0x18c/0x250
[ 1127.737640][T29843]  ? show_regs_print_info+0x20/0x20
[ 1127.742871][T29843]  ? load_image+0x420/0x420
[ 1127.747411][T29843]  sysfs_warn_dup+0x8e/0xa0
[ 1127.751938][T29843]  sysfs_do_create_link_sd+0xc0/0x110
[ 1127.757330][T29843]  device_add_class_symlinks+0x1cf/0x240
[ 1127.762990][T29843]  device_add+0x507/0xc20
[ 1127.767365][T29843]  wiphy_register+0x1dad/0x2ae0
[ 1127.772260][T29843]  ? cfg80211_event_work+0x40/0x40
[ 1127.777393][T29843]  ? minstrel_ht_alloc+0x88a/0x990
[ 1127.782547][T29843]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1127.788640][T29843]  ieee80211_register_hw+0x3464/0x4250
[ 1127.794227][T29843]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1127.799897][T29843]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1127.805820][T29843]  ? __debug_object_init+0xec/0x450
[ 1127.811076][T29843]  ? __asan_memset+0x22/0x40
[ 1127.815832][T29843]  ? __hrtimer_init+0x186/0x270
[ 1127.820705][T29843]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1127.826482][T29843]  ? mac80211_hwsim_free+0x220/0x220
[ 1127.831791][T29843]  ? rcu_is_watching+0x15/0xb0
[ 1127.836605][T29843]  ? kstrndup+0xbd/0x140
[ 1127.840879][T29843]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1127.846013][T29843]  ? __nla_validate+0x50/0x50
[ 1127.850717][T29843]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1127.857075][T29843]  ? __nla_parse+0x40/0x50
[ 1127.861511][T29843]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1127.867885][T29843]  genl_family_rcv_msg_doit+0x211/0x310
[ 1127.873472][T29843]  ? end_current_label_crit_section+0x170/0x170
[ 1127.879753][T29843]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1127.885670][T29843]  ? bpf_lsm_capable+0x9/0x10
[ 1127.890377][T29843]  ? security_capable+0x89/0xb0
[ 1127.895254][T29843]  genl_rcv_msg+0x619/0x7a0
[ 1127.899786][T29843]  ? genl_bind+0x360/0x360
[ 1127.904230][T29843]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1127.910607][T29843]  ? perf_trace_lock+0xfc/0x3b0
[ 1127.915497][T29843]  netlink_rcv_skb+0x241/0x4d0
[ 1127.920301][T29843]  ? genl_bind+0x360/0x360
[ 1127.924758][T29843]  ? netlink_ack+0x1180/0x1180
[ 1127.929564][T29843]  ? __lock_acquire+0x7d40/0x7d40
[ 1127.934623][T29843]  ? down_read+0x1ac/0x2e0
[ 1127.939058][T29843]  genl_rcv+0x28/0x40
[ 1127.943086][T29843]  netlink_unicast+0x751/0x8d0
[ 1127.947887][T29843]  netlink_sendmsg+0x8d0/0xbf0
[ 1127.952693][T29843]  ? netlink_getsockopt+0x590/0x590
[ 1127.957927][T29843]  ? aa_sock_msg_perm+0x94/0x150
[ 1127.962994][T29843]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1127.968303][T29843]  ? security_socket_sendmsg+0x80/0xa0
[ 1127.973776][T29843]  ? netlink_getsockopt+0x590/0x590
[ 1127.979001][T29843]  ____sys_sendmsg+0x5ba/0x960
[ 1127.983793][T29843]  ? __asan_memset+0x22/0x40
[ 1127.988404][T29843]  ? __sys_sendmsg_sock+0x30/0x30
[ 1127.993445][T29843]  ? __import_iovec+0x5f2/0x850
[ 1127.998333][T29843]  ? import_iovec+0x73/0xa0
[ 1128.002868][T29843]  ___sys_sendmsg+0x2a6/0x360
[ 1128.007672][T29843]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1128.012495][T29843]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1128.017539][T29843]  ? __x64_sys_sendmsg+0x80/0x80
[ 1128.022522][T29843]  ? lockdep_hardirqs_on+0x98/0x150
[ 1128.027754][T29843]  do_syscall_64+0x55/0xa0
[ 1128.032192][T29843]  ? clear_bhb_loop+0x40/0x90
[ 1128.036896][T29843]  ? clear_bhb_loop+0x40/0x90
[ 1128.041604][T29843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1128.047535][T29843] RIP: 0033:0x7f833c19c819
[ 1128.052060][T29843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1128.071699][T29843] RSP: 002b:00007f833cfea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1128.080133][T29843] RAX: ffffffffffffffda RBX: 00007f833c416180 RCX: 00007f833c19c819
[ 1128.088128][T29843] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[ 1128.096217][T29843] RBP: 00007f833c232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1128.104211][T29843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1128.112211][T29843] R13: 00007f833c416218 R14: 00007f833c416180 R15: 00007ffe07690e38
[ 1128.120224][T29843]  </TASK>
[ 1129.615801][T29920] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6998'.
[ 1129.682638][T29918] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.6998'.
[ 1129.752258][T29922] netlink: 'syz.1.7000': attribute type 9 has an invalid length.
[ 1129.849701][T29920] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1130.354314][T29935] netlink: 'syz.2.7004': attribute type 10 has an invalid length.
[ 1130.363183][T29935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7004'.
[ 1130.373955][T29934] netlink: 'syz.2.7004': attribute type 10 has an invalid length.
[ 1130.382179][T29934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7004'.
[ 1131.127765][T29953] netlink: 'syz.0.7008': attribute type 10 has an invalid length.
[ 1131.793628][T29950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1131.954025][T29953] team0: Port device wlan1 added
[ 1132.187938][T29969] netlink: 'syz.2.7013': attribute type 3 has an invalid length.
[ 1132.199616][T29969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7013'.
[ 1132.285053][T29971] sock: sock_set_timeout: `syz.0.7014' (pid 29971) tries to set negative timeout
[ 1135.103853][T29973] netlink: 'syz.0.7015': attribute type 3 has an invalid length.
[ 1135.111999][T29973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7015'.
[ 1136.912668][T29978] sit0: entered allmulticast mode
[ 1136.926593][T29980] netlink: 'syz.0.7017': attribute type 2 has an invalid length.
[ 1136.938264][T29980] netlink: 'syz.0.7017': attribute type 8 has an invalid length.
[ 1136.948173][T29980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7017'.
[ 1136.968784][T29983] netlink: 'syz.0.7017': attribute type 2 has an invalid length.
[ 1136.982926][T29983] netlink: 'syz.0.7017': attribute type 8 has an invalid length.
[ 1136.993649][T29983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7017'.
[ 1137.156649][T29987] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1137.164561][T29987] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1137.188260][T29987] bridge0: entered allmulticast mode
[ 1137.199970][T29993] netlink: 'syz.4.7021': attribute type 29 has an invalid length.
[ 1137.264158][T29993] netlink: 'syz.4.7021': attribute type 29 has an invalid length.
[ 1137.284219][T29994] netlink: 'syz.4.7021': attribute type 29 has an invalid length.
[ 1137.297661][T29993] netlink: 'syz.4.7021': attribute type 29 has an invalid length.
[ 1137.425176][T29990] netlink: 'syz.2.7019': attribute type 4 has an invalid length.
[ 1137.433719][T29990] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7019'.
[ 1137.470761][T29989] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7019'.
[ 1137.690739][T30002] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7023'.
[ 1137.921714][T30008] netlink: 42683 bytes leftover after parsing attributes in process `syz.4.7026'.
[ 1138.020568][T30006] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.7025'.
[ 1138.229923][T30017] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7028'.
[ 1138.409748][T30022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7030'.
[ 1140.120037][T30087] validate_nla: 135 callbacks suppressed
[ 1140.120053][T30087] netlink: 'syz.2.7046': attribute type 3 has an invalid length.
[ 1140.138547][T30087] __nla_validate_parse: 7 callbacks suppressed
[ 1140.138561][T30087] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7046'.
[ 1140.322712][T30094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1140.457252][T30097] IPv6: Can't replace route, no match found
[ 1141.257744][T30126] netlink: 'syz.0.7056': attribute type 10 has an invalid length.
[ 1141.269609][T30126] hsr0: left promiscuous mode
[ 1141.279915][T30126] hsr0: left allmulticast mode
[ 1141.287224][T30126] hsr_slave_0: left allmulticast mode
[ 1141.308948][T30126] hsr_slave_1: left allmulticast mode
[ 1141.365014][T30126] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1141.589546][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1141.603016][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1141.610782][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1141.620838][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1141.629418][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1141.636802][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1141.915670][T27032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.075936][T27032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.242115][T27032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.307003][T30133] chnl_net:caif_netlink_parms(): no params data found
[ 1142.450135][T27032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.587607][T30171] netlink: 'syz.1.7067': attribute type 1 has an invalid length.
[ 1142.621915][T30167] netlink: 'syz.4.7068': attribute type 10 has an invalid length.
[ 1142.642238][T30133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1142.651904][T30133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.673196][T30133] bridge_slave_0: entered allmulticast mode
[ 1142.681058][T30133] bridge_slave_0: entered promiscuous mode
[ 1142.692712][T30133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.704286][T30133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.711559][T30133] bridge_slave_1: entered allmulticast mode
[ 1142.720529][T30133] bridge_slave_1: entered promiscuous mode
[ 1142.791577][T30180] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7070'.
[ 1142.817492][T30133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1142.840452][T30133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1142.877634][T30180] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1142.926623][T30182] netlink: 'syz.4.7071': attribute type 10 has an invalid length.
[ 1142.939261][T30182] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7071'.
[ 1143.118630][T30133] team0: Port device team_slave_0 added
[ 1143.155142][T30133] team0: Port device team_slave_1 added
[ 1143.231235][T30133] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1143.241978][T30133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1143.288868][T30133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1143.342222][T30133] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1143.356305][T27034] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1143.371189][T30133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1143.432854][T30133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1143.493014][T27032] tipc: Left network mode
[ 1143.510122][T30193] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.7074'.
[ 1143.676227][T28163] Bluetooth: hci2: command tx timeout
[ 1143.738051][T30133] hsr_slave_0: entered promiscuous mode
[ 1143.805437][T30133] hsr_slave_1: entered promiscuous mode
[ 1143.851228][T30133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1143.879868][T30133] Cannot create hsr debugfs directory
[ 1144.482856][T30223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1144.717145][T30227] netlink: 'syz.4.7076': attribute type 21 has an invalid length.
[ 1144.740629][T30227] netlink: 'syz.4.7076': attribute type 4 has an invalid length.
[ 1144.749248][T30227] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1145.103142][T27032] gretap0 (unregistering): left allmulticast mode
[ 1145.115321][T27032] gretap0 (unregistering): left promiscuous mode
[ 1145.133361][T27032] Ÿë
: port 1(gretap0) entered disabled state
[ 1145.753201][T28163] Bluetooth: hci2: command tx timeout
[ 1146.542731][T30133] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1146.622453][T30133] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1146.655329][T30279] GPL: port 1(syz_tun) entered blocking state
[ 1146.663490][T30279] GPL: port 1(syz_tun) entered disabled state
[ 1146.673489][T30279] syz_tun: entered allmulticast mode
[ 1146.680312][T30279] syz_tun: entered promiscuous mode
[ 1146.760295][T30133] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1146.805230][T30133] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1147.210414][T27032] veth1_macvtap: left promiscuous mode
[ 1147.833468][T28163] Bluetooth: hci2: command tx timeout
[ 1149.913041][T28163] Bluetooth: hci2: command tx timeout
[ 1150.269027][T27032] geneve1 (unregistering): left promiscuous mode
[ 1150.291935][T27032] team0 (unregistering): Port device geneve1 removed
[ 1150.440875][T27032] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode
[ 1150.451954][T27032] team0 (unregistering): Port device virt_wifi0 removed
[ 1150.677835][T27032] .` (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1150.694459][T27032] batadv_slave_0 (unregistering): left promiscuous mode
[ 1150.751283][T27032] team_slave_1 (unregistering): left promiscuous mode
[ 1150.761508][T27032] team0 (unregistering): Port device team_slave_1 removed
[ 1150.799334][T30316] delete_channel: no stack
[ 1150.814530][T27032] C (unregistering): left promiscuous mode
[ 1150.828494][T27032] team0 (unregistering): Port device C removed
[ 1150.919594][T27032] .` (unregistering): (slave 
4
@0Ù): Releasing backup interface
[ 1150.931980][T27032] 
@0Ù (unregistering): left promiscuous mode
[ 1151.319850][T27032] .` (unregistering): (slave team0): Releasing backup interface
[ 1151.330390][T27032] team0 (unregistering): left promiscuous mode
[ 1151.360235][T27032] .` (unregistering): Released all slaves
[ 1151.605617][T30330] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.7096'.
[ 1151.639465][T30133] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1151.653919][T30334] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7097'.
[ 1151.701769][T30334] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.7097'.
[ 1151.760330][T30332] netlink: 'syz.0.7096': attribute type 1 has an invalid length.
[ 1151.776364][T30332] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.7096'.
[ 1151.789204][T30133] 8021q: adding VLAN 0 to HW filter on device team0
[ 1151.835799][T27035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.843016][T27035] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1151.901862][T27035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.909088][T27035] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1152.101937][T30133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1152.380925][T30345] netlink: 'syz.1.7099': attribute type 10 has an invalid length.
[ 1152.403937][T30345] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7099'.
[ 1152.747105][T30355] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7101'.
[ 1152.806262][T30355] netlink: 'syz.1.7101': attribute type 10 has an invalid length.
[ 1152.824056][T30355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7101'.
[ 1152.868432][T30358] netlink: 'syz.4.7098': attribute type 2 has an invalid length.
[ 1152.885103][T30358] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7098'.
[ 1152.900556][T30133] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1152.913390][T30359] netlink: 'syz.4.7098': attribute type 2 has an invalid length.
[ 1152.921173][T30359] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7098'.
[ 1153.006172][T30133] veth0_vlan: entered promiscuous mode
[ 1153.126717][T30366] netlink: 'syz.0.7102': attribute type 1 has an invalid length.
[ 1153.152345][T30366] netlink: 11647 bytes leftover after parsing attributes in process `syz.0.7102'.
[ 1153.546029][T30133] veth1_vlan: entered promiscuous mode
[ 1153.800854][T30133] veth0_macvtap: entered promiscuous mode
[ 1153.826614][T30133] veth1_macvtap: entered promiscuous mode
[ 1153.843501][T28163] Bluetooth: hci4: ISO packet for unknown connection handle 2366
[ 1153.938055][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.979020][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.020990][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.053903][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.083228][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.103232][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.127270][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.163654][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.192061][T30133] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1154.230259][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.248542][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.268128][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.278733][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.288895][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.301297][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.312429][T30133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.325262][T30133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.341841][T30133] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1154.353244][T30133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.362212][T30133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.377775][T30133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.386803][T30133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.402258][T30386] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP)
[ 1154.552776][T27032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1154.582959][T27032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1154.612723][T14606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1154.631734][T14606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1155.507461][T30422] netlink: 'syz.0.7114': attribute type 39 has an invalid length.
[ 1155.825621][T30422] hsr_slave_1 (unregistering): left promiscuous mode
[ 1156.061090][T30423] netlink: 'syz.1.7113': attribute type 33 has an invalid length.
[ 1156.145843][T30423] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1157.200782][T30453] __nla_validate_parse: 2 callbacks suppressed
[ 1157.200821][T30453] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7124'.
[ 1157.218746][T30455] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7123'.
[ 1157.237487][T30455] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 1157.292822][T30453] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1157.593972][T30463] netlink: 'syz.4.7127': attribute type 10 has an invalid length.
[ 1157.690370][T30463] 6: left promiscuous mode
[ 1157.725738][T30463] 6: entered promiscuous mode
[ 1157.769996][T30463] team0: Device 
7
76 failed to register rx_handler
[ 1158.124689][T28163] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[ 1158.124719][T28163] Bluetooth: unknown link type 110
[ 1158.137458][T28163] Bluetooth: hci2: connection err: -111
[ 1158.251775][T30492] netlink: 'syz.2.7134': attribute type 21 has an invalid length.
[ 1158.260805][T30492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'.
[ 1161.452588][T30515] batadv_slave_1: entered promiscuous mode
[ 1161.458719][T30515] batadv_slave_1: entered allmulticast mode
[ 1161.850146][T30520] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7141'.
[ 1162.078743][T30527] netlink: 'syz.4.7141': attribute type 39 has an invalid length.
[ 1162.683239][T30527] hsr_slave_1 (unregistering): left promiscuous mode
[ 1163.812048][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7148'.
[ 1163.825146][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7148'.
[ 1163.853285][T30542] netlink: 33 bytes leftover after parsing attributes in process `syz.4.7148'.
[ 1163.876489][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7148'.
[ 1163.897306][T30542] netlink: 33 bytes leftover after parsing attributes in process `syz.4.7148'.
[ 1163.967761][T30546] netlink: 'syz.1.7150': attribute type 21 has an invalid length.
[ 1163.993221][T30546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7150'.
[ 1164.240390][T30555] netlink: 'syz.0.7153': attribute type 2 has an invalid length.
[ 1164.541178][T30561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1164.725062][T30568] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7157'.
[ 1164.794316][T30568] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1164.804302][T30568] bond_slave_0: left promiscuous mode
[ 1164.980954][T30568] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1165.018219][T30568] bond_slave_1: left promiscuous mode
[ 1165.059396][T30568] .` (unregistering): (slave bridge0): Releasing backup interface
[ 1165.074299][T30568] bridge0: left promiscuous mode
[ 1165.102695][T30568] .` (unregistering): (slave batadv0): Releasing backup interface
[ 1165.127334][T30568] batadv0: left promiscuous mode
[ 1165.167229][T30568] .` (unregistering): Released all slaves
[ 1165.214622][T30575] netlink: 'syz.4.7159': attribute type 25 has an invalid length.
[ 1165.234627][T30575] netlink: 'syz.4.7159': attribute type 9 has an invalid length.
[ 1165.555170][T30581] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7161'.
[ 1165.603231][T30581] openvswitch: netlink: Flow key attr not present in new flow.
[ 1165.609923][T30583] netlink: 'syz.4.7164': attribute type 10 has an invalid length.
[ 1165.619230][T30586] netlink: 'syz.2.7163': attribute type 29 has an invalid length.
[ 1165.638508][T30583] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7164'.
[ 1165.648199][T30583] hsr0: entered promiscuous mode
[ 1165.668926][T30583] bridge0: port 3(hsr0) entered blocking state
[ 1165.679979][T30583] bridge0: port 3(hsr0) entered disabled state
[ 1165.688814][T30583] hsr0: entered allmulticast mode
[ 1165.695983][T30583] hsr_slave_0: entered allmulticast mode
[ 1165.732045][T30583] bridge0: port 3(hsr0) entered blocking state
[ 1165.739626][T30583] bridge0: port 3(hsr0) entered forwarding state
[ 1165.752326][T30586] netlink: 'syz.2.7163': attribute type 29 has an invalid length.
[ 1165.762322][T30589] netlink: 'syz.2.7163': attribute type 29 has an invalid length.
[ 1165.772473][T30588] netlink: 'syz.1.7165': attribute type 10 has an invalid length.
[ 1165.803136][T30588] team0: Port device wlan1 removed
[ 1165.812520][T30592] netlink: 'syz.2.7163': attribute type 29 has an invalid length.
[ 1165.923897][T30589] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7163'.
[ 1168.451171][T30652] GPL: entered allmulticast mode
[ 1168.692610][T30669] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1168.700938][T30669] bridge0: port 3(veth0_to_bridge) entered forwarding state
[ 1168.710291][T30669] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1168.718066][T30669] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1168.726460][T30669] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1168.734313][T30669] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1168.805276][T30669] team0: Port device bridge0 added
[ 1168.817714][T30672] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1168.826029][T30672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1168.833804][T30672] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1169.123036][ T5782] Bluetooth: hci1: command 0x0406 tx timeout
[ 1170.195292][T30717] validate_nla: 6 callbacks suppressed
[ 1170.195387][T30717] netlink: 'syz.2.7202': attribute type 2 has an invalid length.
[ 1170.218830][T30717] netlink: 'syz.2.7202': attribute type 8 has an invalid length.
[ 1170.254352][T30717] __nla_validate_parse: 6 callbacks suppressed
[ 1170.254387][T30717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7202'.
[ 1170.327569][T30731] netlink: 'syz.0.7205': attribute type 1 has an invalid length.
[ 1170.336449][T30731] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7205'.
[ 1171.350213][T30740] netlink: 'syz.4.7208': attribute type 2 has an invalid length.
[ 1171.393027][T30740] netlink: 'syz.4.7208': attribute type 8 has an invalid length.
[ 1171.435252][T30740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7208'.
[ 1171.454690][T30744] netlink: 'syz.4.7208': attribute type 11 has an invalid length.
[ 1171.866264][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1171.876750][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1171.884956][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1171.896516][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1171.905025][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1171.912428][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1172.733708][T30766] IPv6: Can't replace route, no match found
[ 1172.943527][T14606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.099565][T14606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.124981][T30779] netlink: 'syz.4.7221': attribute type 10 has an invalid length.
[ 1173.139737][T30779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7221'.
[ 1173.163116][T30779] team0: entered promiscuous mode
[ 1173.171813][T30779] team_slave_0: entered promiscuous mode
[ 1173.181523][T30779] team_slave_1: entered promiscuous mode
[ 1173.187715][T30779] team0: entered allmulticast mode
[ 1173.193286][T30779] team_slave_0: entered allmulticast mode
[ 1173.199133][T30779] team_slave_1: entered allmulticast mode
[ 1173.206734][T30779] bridge0: port 4(team0) entered blocking state
[ 1173.213557][T30779] bridge0: port 4(team0) entered disabled state
[ 1173.285441][T14606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.520243][T30763] chnl_net:caif_netlink_parms(): no params data found
[ 1173.720093][T30763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1173.727486][T30763] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.743994][T30763] bridge_slave_0: entered allmulticast mode
[ 1173.751404][T30763] bridge_slave_0: entered promiscuous mode
[ 1173.821044][T30763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1173.863205][T30763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1173.870474][T30763] bridge_slave_1: entered allmulticast mode
[ 1173.879866][T30763] bridge_slave_1: entered promiscuous mode
[ 1173.944113][T30808] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7230'.
[ 1173.971479][T30808] bridge_slave_1: default FDB implementation only supports local addresses
[ 1174.008173][ T5782] Bluetooth: hci4: command tx timeout
[ 1174.085888][T30763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1174.111150][T14606] tipc: Left network mode
[ 1174.117578][T30763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1174.204472][T30763] team0: Port device team_slave_0 added
[ 1174.231741][T30763] team0: Port device team_slave_1 added
[ 1174.690749][T30763] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1174.730562][T30763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.796361][T30763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1174.825244][T30763] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1174.832232][T30763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.945385][T30763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1175.263584][T30849] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7241'.
[ 1175.353673][T27027] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1176.082988][ T5782] Bluetooth: hci4: command tx timeout
[ 1177.281682][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.291936][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.596004][T30849] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7241'.
[ 1177.761538][T30763] hsr_slave_0: entered promiscuous mode
[ 1177.817320][T30763] hsr_slave_1: entered promiscuous mode
[ 1177.823930][T30763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1177.831609][T30763] Cannot create hsr debugfs directory
[ 1178.153179][ T5782] Bluetooth: hci4: command tx timeout
[ 1178.489371][T30881] syzkaller0: entered promiscuous mode
[ 1178.504514][T30881] syzkaller0: entered allmulticast mode
[ 1180.243038][ T5782] Bluetooth: hci4: command tx timeout
[ 1181.479501][T30930] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.7267'.
[ 1181.714320][T30948] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7271'.
[ 1181.882999][T14606] hsr_slave_0: left promiscuous mode
[ 1181.910403][T14606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1181.923894][T14606] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1181.933706][T14606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1181.941128][T14606] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1181.950275][T14606] veth0_to_bridge: left allmulticast mode
[ 1181.956362][T14606] veth0_to_bridge: left promiscuous mode
[ 1181.962426][T14606] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1181.977271][T14606] bridge_slave_1: left allmulticast mode
[ 1181.986146][T14606] bridge_slave_1: left promiscuous mode
[ 1181.991937][T14606] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.002627][T14606] bridge_slave_0: left allmulticast mode
[ 1182.008952][T14606] bridge_slave_0: left promiscuous mode
[ 1182.025046][T14606] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1182.052398][T14606] veth1_macvtap: left allmulticast mode
[ 1182.309334][T14606] team0 (unregistering): Port device veth0_macvtap removed
[ 1185.592196][T14606] team0 (unregistering): Port device team_slave_1 removed
[ 1185.660366][T14606] team0 (unregistering): Port device C removed
[ 1186.024552][T14606] team0 (unregistering): Port device bridge0 removed
[ 1186.167416][T30763] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1186.200996][T30763] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1186.269122][T30763] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1186.381455][T30763] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1186.651652][T30763] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1186.789791][T30991] syzkaller0: entered promiscuous mode
[ 1186.821491][T30991] syzkaller0: entered allmulticast mode
[ 1186.884285][T30763] 8021q: adding VLAN 0 to HW filter on device team0
[ 1189.875876][T31019] netlink: 'syz.4.7297': attribute type 2 has an invalid length.
[ 1189.904235][T31019] netlink: 'syz.4.7297': attribute type 9 has an invalid length.
[ 1189.912023][T31019] netlink: 'syz.4.7297': attribute type 10 has an invalid length.
[ 1189.943774][T31019] netlink: 'syz.4.7297': attribute type 11 has an invalid length.
[ 1189.951669][T31019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7297'.
[ 1189.989541][T27035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.996770][T27035] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1190.035206][T27035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1190.042402][T27035] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1190.358460][T31038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7302'.
[ 1190.388714][T31038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7302'.
[ 1190.434862][T31038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7302'.
[ 1190.472626][T31038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7302'.
[ 1190.516601][T31044] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7303'.
[ 1190.755858][T30763] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1190.952269][T30763] veth0_vlan: entered promiscuous mode
[ 1190.987874][T30763] veth1_vlan: entered promiscuous mode
[ 1191.044154][T30763] veth0_macvtap: entered promiscuous mode
[ 1191.052521][T31059] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.7306'.
[ 1191.086459][T30763] veth1_macvtap: entered promiscuous mode
[ 1191.152689][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.172766][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.197902][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.242943][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.252804][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.281025][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.302956][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.323063][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.344624][T30763] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1191.372822][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.415114][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.459951][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.486261][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.505566][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.537946][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.563006][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.592931][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.610642][T31077] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.7312'.
[ 1191.626340][T30763] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1191.695251][T30763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.722663][T30763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.755072][T30763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.782958][T30763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.052100][T31090] GPL: port 1(team0) entered blocking state
[ 1192.066077][T31090] GPL: port 1(team0) entered disabled state
[ 1192.074018][T31090] team0: entered allmulticast mode
[ 1192.079968][T31090] team_slave_0: entered allmulticast mode
[ 1192.112996][T31090] team_slave_1: entered allmulticast mode
[ 1192.135201][T31090] team0: entered promiscuous mode
[ 1192.146907][T31090] team_slave_0: entered promiscuous mode
[ 1192.154222][T31090] team_slave_1: entered promiscuous mode
[ 1192.314642][T27027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.346934][T27027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.371642][T31097] netlink: 'syz.0.7317': attribute type 10 has an invalid length.
[ 1192.391595][T31097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7317'.
[ 1192.424401][T31097] batman_adv: batadv0: Adding interface: veth0_vlan
[ 1192.431129][T31097] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1192.493231][T31097] batman_adv: batadv0: Interface activated: veth0_vlan
[ 1192.572475][T27023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.612694][T27023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1193.327890][T31137] netlink: 'syz.4.7327': attribute type 3 has an invalid length.
[ 1193.347802][T31137] netlink: 'syz.4.7327': attribute type 2 has an invalid length.
[ 1193.373781][T31137] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7327'.
[ 1194.820958][T31189] netlink: 'syz.4.7347': attribute type 10 has an invalid length.
[ 1194.859008][T31189] openvswitch: netlink: Flow key attr not present in new flow.
[ 1195.514738][T31203] __nla_validate_parse: 2 callbacks suppressed
[ 1195.514752][T31203] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7349'.
[ 1195.754731][T31213] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.7353'.
[ 1195.804484][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.814411][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.824099][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.833689][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.843302][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.852962][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.862601][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.872238][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1195.881926][T31209] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1199.058750][T31233] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7358'.
[ 1199.073065][T31231] pim6reg1: entered allmulticast mode
[ 1199.352698][T31238] netlink: 'syz.1.7357': attribute type 1 has an invalid length.
[ 1199.370865][T31238] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7357'.
[ 1199.726333][T31268] pim6reg1: tun_chr_ioctl cmd 1074025673
[ 1199.949507][T31278] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7370'.
[ 1200.023207][T31277] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7369'.
[ 1200.041821][T31277] net_ratelimit: 1655 callbacks suppressed
[ 1200.049530][T31277] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1200.068211][T31278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1200.080979][T31278] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1200.149847][T31278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1200.158392][T31278] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1203.729845][T31320] netlink: 179316 bytes leftover after parsing attributes in process `syz.4.7380'.
[ 1203.744881][T31314] netlink: 703 bytes leftover after parsing attributes in process `syz.2.7379'.
[ 1203.755312][T31318] netlink: 179316 bytes leftover after parsing attributes in process `syz.4.7380'.
[ 1203.764997][T31320] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1203.777318][T31318] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1203.862585][T31311] can: request_module (can-proto-0) failed.
[ 1204.525081][T31354] netlink: 'syz.2.7388': attribute type 29 has an invalid length.
[ 1204.562070][T31354] netlink: 'syz.2.7388': attribute type 29 has an invalid length.
[ 1204.844428][T31369] syzkaller0: entered promiscuous mode
[ 1204.850063][T31369] syzkaller0: entered allmulticast mode
[ 1204.955255][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[ 1205.126173][T31380] bridge0: port 4(team0) entered disabled state
[ 1205.189193][T31380] hsr0: left allmulticast mode
[ 1205.211013][T31380] hsr_slave_0: left allmulticast mode
[ 1205.226837][T31380] bridge0: port 3(hsr0) entered disabled state
[ 1205.270567][T31380] bridge_slave_1: left allmulticast mode
[ 1205.288576][T31380] bridge_slave_1: left promiscuous mode
[ 1205.307750][T31380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1205.364847][T31380] bridge_slave_0: left promiscuous mode
[ 1205.381923][T31380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1206.051741][T31399] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7404'.
[ 1206.061701][T31395] netlink: 'syz.1.7401': attribute type 39 has an invalid length.
[ 1206.589910][T31421] netlink: 'syz.0.7409': attribute type 11 has an invalid length.
[ 1206.633566][T31421] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7409'.
[ 1206.745718][T31427] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7411'.
[ 1206.776096][T31427] netlink: 'syz.1.7411': attribute type 15 has an invalid length.
[ 1206.794718][T31427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7411'.
[ 1207.354033][ T2969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1207.679974][T31459] mac80211_hwsim hwsim110 wlan1: entered allmulticast mode
[ 1209.006522][T31485] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7427'.
[ 1209.144992][T31485] C: renamed from team_slave_0 (while UP)
[ 1209.168400][T31485] netlink: 'syz.0.7427': attribute type 1 has an invalid length.
[ 1209.176822][T31485] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7427'.
[ 1209.480942][T28163] Bluetooth: hci2: ISO packet for unknown connection handle 48
[ 1210.979582][T31568] sctp: [Deprecated]: syz.1.7451 (pid 31568) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1210.979582][T31568] Use struct sctp_sack_info instead
[ 1211.088815][T31570] netlink: 1772 bytes leftover after parsing attributes in process `syz.4.7452'.
[ 1211.973540][T31597] tap1: tun_chr_ioctl cmd 1074025677
[ 1211.982325][T31597] tap1: linktype set to 778
[ 1212.088118][T31601] C: renamed from team_slave_0 (while UP)
[ 1212.134320][T31601] netlink: 'syz.2.7461': attribute type 3 has an invalid length.
[ 1212.143097][T31601] netlink: 'syz.2.7461': attribute type 1 has an invalid length.
[ 1212.151300][T31601] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7461'.
[ 1212.166716][T31601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1212.337256][T31604] mac80211_hwsim hwsim110 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1212.525819][T31618] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7466'.
[ 1212.614824][T31613] netlink: 'syz.2.7465': attribute type 39 has an invalid length.
[ 1213.717440][T31645] netlink: 'syz.4.7474': attribute type 21 has an invalid length.
[ 1213.739340][T31645] netlink: 'syz.4.7474': attribute type 1 has an invalid length.
[ 1213.783231][T31645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7474'.
[ 1214.022165][T31654] netlink: 'syz.4.7479': attribute type 39 has an invalid length.
[ 1214.081594][T31661] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7480'.
[ 1214.114223][T31652] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.7478'.
[ 1214.312748][T31672] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7481'.
[ 1214.464484][T31674] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.7483'.
[ 1215.046888][T31681] pim6reg0: tun_chr_ioctl cmd 2147767520
[ 1215.070985][T31677] veth1_macvtap: entered allmulticast mode
[ 1215.176320][T31689] netlink: 'syz.0.7486': attribute type 39 has an invalid length.
[ 1215.279248][T31688] netlink: 'syz.4.7485': attribute type 10 has an invalid length.
[ 1215.294385][T31688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1215.313978][T31688] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1215.335621][T31688] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1215.412214][T31691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7487'.
[ 1216.244412][T31719] netlink: 'syz.0.7495': attribute type 3 has an invalid length.
[ 1216.258582][T31719] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7495'.
[ 1216.377370][T31721] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.7497'.
[ 1216.423035][T31721] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[ 1218.143191][T31745] netlink: 'syz.1.7502': attribute type 2 has an invalid length.
[ 1218.152200][T31745] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7502'.
[ 1218.177004][T31747] netlink: 'syz.0.7501': attribute type 9 has an invalid length.
[ 1218.255520][T31750] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7503'.
[ 1218.265398][T31747] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7501'.
[ 1219.169384][T31765] delete_channel: no stack
[ 1219.185364][T31765] delete_channel: no stack
[ 1219.331470][T31771] netlink: 'syz.2.7509': attribute type 2 has an invalid length.
[ 1219.331973][T31769] netlink: 'syz.1.7508': attribute type 9 has an invalid length.
[ 1219.360320][T31769] __nla_validate_parse: 3 callbacks suppressed
[ 1219.360338][T31769] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7508'.
[ 1219.432985][T31774] netlink: 'syz.1.7508': attribute type 9 has an invalid length.
[ 1219.440764][T31774] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7508'.
[ 1219.501721][T31773] netlink: 'syz.0.7510': attribute type 10 has an invalid length.
[ 1219.520067][T31773] hsr_slave_0: left promiscuous mode
[ 1219.534763][T31776] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7511'.
[ 1219.585887][T31777] netlink: 'syz.2.7511': attribute type 21 has an invalid length.
[ 1219.653947][T31777] netlink: 'syz.2.7511': attribute type 4 has an invalid length.
[ 1219.677110][T31777] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7511'.
[ 1219.762597][T31777] .`: renamed from bond0 (while UP)
[ 1220.119932][T31792] netlink: 'syz.2.7515': attribute type 29 has an invalid length.
[ 1220.287452][T31797] netlink: 'syz.4.7518': attribute type 3 has an invalid length.
[ 1220.306076][T31797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7518'.
[ 1220.316303][T31802] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.7520'.
[ 1220.335444][T31802] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1220.435804][T31807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7521'.
[ 1220.573598][T31810] sit0: entered promiscuous mode
[ 1220.578883][T31810] sit0: entered allmulticast mode
[ 1220.911415][T31823] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7526'.
[ 1221.017601][T31829] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7528'.
[ 1221.269264][T31832] mac80211_hwsim hwsim89 wlan0: left promiscuous mode
[ 1221.315318][T31832] mac80211_hwsim hwsim89 wlan0: left allmulticast mode
[ 1221.393441][T31834] mac80211_hwsim hwsim89 wlan0: entered promiscuous mode
[ 1221.424931][T31834] mac80211_hwsim hwsim89 wlan0: entered allmulticast mode
[ 1221.497469][T31835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1223.016917][T28163] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4
[ 1223.490383][T31860] validate_nla: 7 callbacks suppressed
[ 1223.490476][T31860] netlink: 'syz.0.7538': attribute type 1 has an invalid length.
[ 1223.553283][T31860] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7538'.
[ 1225.213761][T31870] delete_channel: no stack
[ 1225.664135][T31889] __nla_validate_parse: 1 callbacks suppressed
[ 1225.664269][T31889] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7548'.
[ 1230.219649][T31920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7555'.
[ 1230.263128][T31920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7555'.
[ 1230.273260][T31920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7555'.
[ 1230.303180][T31920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7555'.
[ 1232.344598][T31954] netlink: 'syz.2.7564': attribute type 29 has an invalid length.
[ 1232.392786][T31954] netlink: 'syz.2.7564': attribute type 29 has an invalid length.
[ 1232.844346][T31968] netlink: 'syz.2.7568': attribute type 21 has an invalid length.
[ 1232.863133][T31968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7568'.
[ 1232.907472][T31968] netlink: 'syz.2.7568': attribute type 2 has an invalid length.
[ 1232.928414][T31964] netlink: 'syz.0.7566': attribute type 49 has an invalid length.
[ 1232.972063][T31966] netlink: 'syz.2.7568': attribute type 2 has an invalid length.
[ 1232.990298][T31968] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7568'.
[ 1233.278925][T31967] netlink: 'syz.1.7565': attribute type 7 has an invalid length.
[ 1233.881521][T31977] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7571'.
[ 1233.977328][T31985] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.7570'.
[ 1234.310046][T31989] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.7574'.
[ 1235.261811][T32010] netlink: 'syz.2.7580': attribute type 22 has an invalid length.
[ 1235.279963][T32010] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7580'.
[ 1235.676170][T32024] netlink: 'syz.1.7582': attribute type 25 has an invalid length.
[ 1235.706105][T32024] netlink: 'syz.1.7582': attribute type 9 has an invalid length.
[ 1235.731618][T32030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7584'.
[ 1236.454076][T32039] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7587'.
[ 1236.736485][T32041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1237.939139][T32057] validate_nla: 3 callbacks suppressed
[ 1237.939156][T32057] netlink: 'syz.2.7593': attribute type 21 has an invalid length.
[ 1237.973430][T32057] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7593'.
[ 1238.218597][T32065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7596'.
[ 1238.735012][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.742086][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.898391][T32085] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.7602'.
[ 1238.935956][T32085] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1239.387524][T14607] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1240.631641][T32112] syzkaller0: entered promiscuous mode
[ 1240.637906][T32112] syzkaller0: entered allmulticast mode
[ 1240.664077][T32117] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7610'.
[ 1243.495199][T32156] netlink: 'syz.0.7624': attribute type 10 has an invalid length.
[ 1243.506504][T32156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7624'.
[ 1243.758421][T32163] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.7627'.
[ 1243.790952][T32161] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.7626'.
[ 1244.751171][T32183] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7634'.
[ 1245.221429][T32209] netlink: 'syz.1.7641': attribute type 5 has an invalid length.
[ 1245.245775][T32204] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7639'.
[ 1245.853780][T32218] netlink: 'syz.0.7644': attribute type 10 has an invalid length.
[ 1245.865383][T32218] veth0_macvtap: left promiscuous mode
[ 1245.947831][T32216] netlink: 'syz.1.7643': attribute type 3 has an invalid length.
[ 1245.978566][T32216] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7643'.
[ 1246.369926][T32234] syz.1.7647[32234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1246.370216][T32234] syz.1.7647[32234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1246.490869][T32237] netlink: 'syz.0.7648': attribute type 21 has an invalid length.
[ 1246.651940][T32239] netlink: 'syz.4.7649': attribute type 4 has an invalid length.
[ 1246.660554][T32239] netlink: 174100 bytes leftover after parsing attributes in process `syz.4.7649'.
[ 1247.433031][T32272] netlink: 'syz.0.7659': attribute type 28 has an invalid length.
[ 1247.467894][T32272] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7659'.
[ 1247.538536][T32272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7659'.
[ 1248.213532][T32289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7662'.
[ 1248.646351][T32313] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.7670'.
[ 1249.581939][T32331] delete_channel: no stack
[ 1249.601754][T32331] delete_channel: no stack
[ 1249.744054][T28163] Bluetooth: hci4: ISO packet for unknown connection handle 1854
[ 1249.755910][T28163] Bluetooth: hci4: ISO packet for unknown connection handle 1854
[ 1249.958894][T32342] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.7679'.
[ 1250.026075][T32342] netlink: 'syz.1.7679': attribute type 10 has an invalid length.
[ 1250.279299][T32350] netlink: 'syz.2.7680': attribute type 3 has an invalid length.
[ 1250.306801][T32350] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7680'.
[ 1250.405962][T32346] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.7679'.
[ 1250.777042][T32359] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7683'.
[ 1250.812694][T32359] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1251.558980][T32395] netlink: 'syz.0.7692': attribute type 10 has an invalid length.
[ 1251.687927][T32395] team0: Device wg1 is of different type
[ 1251.827908][T32411] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.7697'.
[ 1251.930348][T32414] netlink: 'syz.2.7700': attribute type 10 has an invalid length.
[ 1251.941656][T32414] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7700'.
[ 1252.147611][T32419] netlink: 'syz.4.7701': attribute type 1 has an invalid length.
[ 1252.165802][T32419] netlink: 'syz.4.7701': attribute type 4 has an invalid length.
[ 1252.177407][T32413] delete_channel: no stack
[ 1252.183262][T32419] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7701'.
[ 1252.291363][T32422] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7702'.
[ 1252.396354][T32429] netlink: 'syz.2.7704': attribute type 2 has an invalid length.
[ 1252.414450][T32429] netlink: 51 bytes leftover after parsing attributes in process `syz.2.7704'.
[ 1252.567397][T32436] IPv6: Can't replace route, no match found
[ 1252.784751][T32433] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1252.813766][T32433] CPU: 1 PID: 32433 Comm: syz.0.7703 Not tainted syzkaller #0
[ 1252.821380][T32433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1252.831465][T32433] Call Trace:
[ 1252.834780][T32433]  <TASK>
[ 1252.837744][T32433]  dump_stack_lvl+0x18c/0x250
[ 1252.842484][T32433]  ? show_regs_print_info+0x20/0x20
[ 1252.847750][T32433]  ? load_image+0x420/0x420
[ 1252.852362][T32433]  sysfs_warn_dup+0x8e/0xa0
[ 1252.856916][T32433]  sysfs_do_create_link_sd+0xc0/0x110
[ 1252.862323][T32433]  device_add_class_symlinks+0x1cf/0x240
[ 1252.868021][T32433]  device_add+0x507/0xc20
[ 1252.872427][T32433]  wiphy_register+0x1dad/0x2ae0
[ 1252.877365][T32433]  ? cfg80211_event_work+0x40/0x40
[ 1252.882541][T32433]  ? minstrel_ht_alloc+0x88a/0x990
[ 1252.887718][T32433]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1252.893835][T32433]  ieee80211_register_hw+0x3464/0x4250
[ 1252.899395][T32433]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1252.905073][T32433]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1252.911028][T32433]  ? __debug_object_init+0xec/0x450
[ 1252.916282][T32433]  ? __asan_memset+0x22/0x40
[ 1252.920912][T32433]  ? __hrtimer_init+0x186/0x270
[ 1252.925798][T32433]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1252.931558][T32433]  ? mac80211_hwsim_free+0x220/0x220
[ 1252.936866][T32433]  ? rcu_is_watching+0x15/0xb0
[ 1252.941662][T32433]  ? kstrndup+0xbd/0x140
[ 1252.945944][T32433]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1252.951088][T32433]  ? __nla_validate+0x50/0x50
[ 1252.955815][T32433]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1252.962171][T32433]  ? __nla_parse+0x40/0x50
[ 1252.966618][T32433]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1252.972988][T32433]  genl_family_rcv_msg_doit+0x211/0x310
[ 1252.978572][T32433]  ? end_current_label_crit_section+0x170/0x170
[ 1252.984931][T32433]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1252.990851][T32433]  ? bpf_lsm_capable+0x9/0x10
[ 1252.995564][T32433]  ? security_capable+0x89/0xb0
[ 1253.000453][T32433]  genl_rcv_msg+0x619/0x7a0
[ 1253.004997][T32433]  ? genl_bind+0x360/0x360
[ 1253.009430][T32433]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1253.015458][T32433]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1253.021805][T32433]  ? ref_tracker_free+0x690/0x840
[ 1253.026854][T32433]  netlink_rcv_skb+0x241/0x4d0
[ 1253.031662][T32433]  ? genl_bind+0x360/0x360
[ 1253.036109][T32433]  ? netlink_ack+0x1180/0x1180
[ 1253.040917][T32433]  ? __lock_acquire+0x7d40/0x7d40
[ 1253.045971][T32433]  ? down_read+0x1ac/0x2e0
[ 1253.050413][T32433]  genl_rcv+0x28/0x40
[ 1253.054416][T32433]  netlink_unicast+0x751/0x8d0
[ 1253.059218][T32433]  netlink_sendmsg+0x8d0/0xbf0
[ 1253.064016][T32433]  ? __sanitizer_cov_trace_switch+0x8e/0x120
[ 1253.070037][T32433]  ? netlink_getsockopt+0x590/0x590
[ 1253.075274][T32433]  ? aa_sock_msg_perm+0x94/0x150
[ 1253.080252][T32433]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1253.085567][T32433]  ? security_socket_sendmsg+0x80/0xa0
[ 1253.091056][T32433]  ? netlink_getsockopt+0x590/0x590
[ 1253.096292][T32433]  ____sys_sendmsg+0x5ba/0x960
[ 1253.101087][T32433]  ? __asan_memset+0x22/0x40
[ 1253.105699][T32433]  ? __sys_sendmsg_sock+0x30/0x30
[ 1253.110779][T32433]  ? __import_iovec+0x5f2/0x850
[ 1253.115664][T32433]  ? import_iovec+0x73/0xa0
[ 1253.120198][T32433]  ___sys_sendmsg+0x2a6/0x360
[ 1253.124914][T32433]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1253.129743][T32433]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1253.134616][T32433]  ? __x64_sys_sendmsg+0x80/0x80
[ 1253.139594][T32433]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1253.145513][T32433]  do_syscall_64+0x55/0xa0
[ 1253.149954][T32433]  ? clear_bhb_loop+0x40/0x90
[ 1253.154744][T32433]  ? clear_bhb_loop+0x40/0x90
[ 1253.159449][T32433]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1253.165364][T32433] RIP: 0033:0x7f203819c819
[ 1253.169794][T32433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1253.189431][T32433] RSP: 002b:00007f20363f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1253.197867][T32433] RAX: ffffffffffffffda RBX: 00007f2038416090 RCX: 00007f203819c819
[ 1253.205854][T32433] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[ 1253.213847][T32433] RBP: 00007f2038232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1253.221855][T32433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.229842][T32433] R13: 00007f2038416128 R14: 00007f2038416090 R15: 00007ffecee796e8
[ 1253.237856][T32433]  </TASK>
[ 1253.377328][T32445] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1253.541882][T32444] netlink: 'syz.1.7708': attribute type 4 has an invalid length.
[ 1253.568436][T32444] .`: renamed from bond0 (while UP)
[ 1254.059685][T32474] __nla_validate_parse: 2 callbacks suppressed
[ 1254.059705][T32474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7715'.
[ 1254.187134][T32476] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.7716'.
[ 1254.967119][T32488] netlink: 'syz.4.7720': attribute type 2 has an invalid length.
[ 1255.013273][T32488] netlink: 'syz.4.7720': attribute type 8 has an invalid length.
[ 1255.067101][T32488] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7720'.
[ 1255.388595][T32510] netlink: 'syz.4.7724': attribute type 10 has an invalid length.
[ 1255.422808][T32510] team0: Device ipvlan1 failed to register rx_handler
[ 1256.413690][T32538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7735'.
[ 1256.569799][T32550] dvmrp1: tun_chr_ioctl cmd 1074025677
[ 1256.576029][T32550] dvmrp1: linktype set to 823
[ 1256.713294][T32554] netlink: 'syz.1.7738': attribute type 21 has an invalid length.
[ 1256.856832][ T8769] tipc: Subscription rejected, illegal request
[ 1257.530543][T32572] syzkaller0: entered promiscuous mode
[ 1257.536183][T32572] syzkaller0: entered allmulticast mode
[ 1260.057982][T32591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7749'.
[ 1260.109155][T32591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7749'.
[ 1260.144500][T32591] syzkaller0: entered promiscuous mode
[ 1260.161721][T32591] syzkaller0: entered allmulticast mode
[ 1260.221426][T32591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7749'.
[ 1260.377774][T32613] netlink: 'syz.1.7756': attribute type 9 has an invalid length.
[ 1260.402724][T32613] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7756'.
[ 1260.785387][T32632] netlink: 'syz.4.7763': attribute type 1 has an invalid length.
[ 1260.794156][T32632] netlink: 'syz.4.7763': attribute type 3 has an invalid length.
[ 1260.802124][T32632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7763'.
[ 1261.156209][T32645] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.7766'.
[ 1261.166224][T32645] openvswitch: netlink: Tunnel attr 1544 out of range max 16
[ 1261.177958][T32645] netlink: 44551 bytes leftover after parsing attributes in process `syz.4.7766'.
[ 1261.241401][T32647] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.7768'.
[ 1261.794349][T28163] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4
[ 1262.031927][T32661] netlink: 'syz.1.7774': attribute type 10 has an invalid length.
[ 1262.055696][T32661] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1262.066264][T32661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1262.240635][T32661] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1262.248741][T32661] bridge0: port 2(bridge_slave_1) entered listening state
[ 1262.257818][T32661] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.265733][T32661] bridge0: port 1(bridge_slave_0) entered listening state
[ 1262.296903][T32661] .`: (slave bridge0): Enslaving as an active interface with an up link
[ 1262.471341][T32683] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1263.401133][T32700] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7786'.
[ 1264.078712][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.100659][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.121690][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.143015][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.174742][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.195837][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.223433][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.243429][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.263553][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1264.873512][T27021] wlan1: Trigger new scan to find an IBSS to join
[ 1266.173106][T32717] net_ratelimit: 6722 callbacks suppressed
[ 1266.173134][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.191713][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.202359][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.213848][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.224844][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.236122][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.246901][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.258366][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.268843][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.279436][T32717] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1266.393064][ T5782] Bluetooth: hci2: command 0x0406 tx timeout
[ 1267.380851][T32730] netlink: 'syz.0.7790': attribute type 10 has an invalid length.
[ 1267.440844][T32731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7790'.
[ 1267.473111][T32731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7790'.
[ 1267.509296][T32724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7790'.
[ 1267.621755][T32735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7793'.
[ 1268.021702][T32746] netlink: 'syz.0.7797': attribute type 17 has an invalid length.
[ 1269.163052][  T301] netlink: 'syz.0.7805': attribute type 10 has an invalid length.
[ 1269.308373][  T306] netlink: 'syz.2.7807': attribute type 5 has an invalid length.
[ 1269.674762][  T310] sit0: entered allmulticast mode
[ 1269.810202][  T318] sit0: entered promiscuous mode
[ 1270.131451][  T325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7813'.
[ 1270.141286][  T323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7813'.
[ 1270.601335][  T353] netlink: 'syz.0.7820': attribute type 4 has an invalid length.
[ 1270.663972][  T353] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7820'.
[ 1270.714820][  T342] netlink: 'syz.0.7820': attribute type 4 has an invalid length.
[ 1270.725100][  T342] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7820'.
[ 1270.886875][T11995] wlan1: Trigger new scan to find an IBSS to join
[ 1271.363074][T12000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1271.708352][  T370] sit0: entered allmulticast mode
[ 1271.814874][T14607] wlan1: Creating new IBSS network, BSSID b2:65:4d:46:ce:48
[ 1271.887771][  T382] sit0: entered promiscuous mode
[ 1272.104367][  T390] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.7829'.
[ 1272.386372][  T394] netlink: 'syz.2.7832': attribute type 21 has an invalid length.
[ 1272.449407][  T394] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7832'.
[ 1272.493943][  T394] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7832'.
[ 1272.949060][  T404] netlink: 207540 bytes leftover after parsing attributes in process `syz.1.7834'.
[ 1273.174110][  T409] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7835'.
[ 1274.163030][  T431] netlink: 'syz.4.7841': attribute type 10 has an invalid length.
[ 1274.209655][  T431] 6: left promiscuous mode
[ 1274.239245][  T431] 6: entered promiscuous mode
[ 1274.273344][  T431] team0: Device 
7
76 failed to register rx_handler
[ 1274.689640][  T433] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7842'.
[ 1274.736838][  T436] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.7839'.
[ 1276.498664][  T438] sit0: left promiscuous mode
[ 1276.666335][  T441] sit0: entered promiscuous mode
[ 1277.754540][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[ 1277.762742][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[ 1279.810559][  T460] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7848'.
[ 1280.778769][  T462] syzkaller0: entered promiscuous mode
[ 1280.784936][  T462] syzkaller0: entered allmulticast mode
[ 1282.629950][  T503] sit0: entered promiscuous mode
[ 1283.805871][  T531] syzkaller0: entered promiscuous mode
[ 1283.828283][  T531] syzkaller0: entered allmulticast mode
[ 1284.024408][  T538] netlink: 'syz.4.7868': attribute type 1 has an invalid length.
[ 1284.032421][  T538] netlink: 'syz.4.7868': attribute type 4 has an invalid length.
[ 1284.040416][  T538] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7868'.
[ 1284.249360][  T545] syzkaller0: entered promiscuous mode
[ 1284.259033][  T545] syzkaller0: entered allmulticast mode
[ 1286.180203][  T562] netlink: 'syz.0.7878': attribute type 15 has an invalid length.
[ 1286.190265][  T562] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7878'.
[ 1286.300557][  T564] netlink: 'syz.2.7879': attribute type 3 has an invalid length.
[ 1286.333027][  T564] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7879'.
[ 1286.862047][  T586] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.7885'.
[ 1286.902965][  T586] netlink: 'syz.0.7885': attribute type 49 has an invalid length.
[ 1286.914984][  T586] net_ratelimit: 2883 callbacks suppressed
[ 1286.914998][  T586] netlink: set zone limit has 8 unknown bytes
[ 1287.381046][  T604] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7889'.
[ 1287.527545][  T608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1288.599830][  T635] syzkaller0: entered promiscuous mode
[ 1288.623947][  T635] syzkaller0: entered allmulticast mode
[ 1288.691720][  T653] netlink: 'syz.4.7903': attribute type 1 has an invalid length.
[ 1288.700792][  T653] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.7903'.
[ 1288.855971][  T659] netlink: set zone limit has 8 unknown bytes
[ 1289.267328][  T663] netlink: 'syz.2.7905': attribute type 7 has an invalid length.
[ 1289.376634][  T665] netlink: 'syz.2.7905': attribute type 46 has an invalid length.
[ 1289.403459][  T665] netlink: 'syz.2.7905': attribute type 46 has an invalid length.
[ 1289.774706][  T670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7907'.
[ 1289.878274][  T673] netlink: 'syz.1.7908': attribute type 10 has an invalid length.
[ 1289.979061][  T673] team0: Device wg1 is of different type
[ 1290.020172][  T674] netlink: 'syz.1.7908': attribute type 10 has an invalid length.
[ 1290.096853][  T674] team0: Device wg1 is of different type
[ 1291.662669][  T706] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7918'.
[ 1291.820402][T28163] Bluetooth: hci0: ISO packet for unknown connection handle 12
[ 1291.838417][  T708] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1292.060182][  T711] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7920'.
[ 1292.106746][  T711] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.7920'.
[ 1292.483254][  T727] netlink: 611 bytes leftover after parsing attributes in process `syz.1.7925'.
[ 1292.620639][  T736] netlink: 'syz.1.7927': attribute type 21 has an invalid length.
[ 1292.628849][  T736] netlink: 'syz.1.7927': attribute type 1 has an invalid length.
[ 1292.814011][  T741] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7929'.
[ 1293.125928][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1293.134443][    C0] bridge0: topology change detected, propagating
[ 1293.147801][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1293.156125][    C0] bridge0: topology change detected, propagating
[ 1293.407173][  T757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7935'.
[ 1293.463687][  T760] netlink: 'syz.1.7936': attribute type 2 has an invalid length.
[ 1293.471651][  T760] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7936'.
[ 1293.809570][  T765] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7938'.
[ 1294.607504][  T783] syzkaller0: entered promiscuous mode
[ 1294.613772][  T783] syzkaller0: entered allmulticast mode
[ 1294.697059][  T781] À: port 1(vlan0) entered blocking state
[ 1294.703974][  T781] À: port 1(vlan0) entered disabled state
[ 1294.710800][  T781] vlan0: entered allmulticast mode
[ 1294.718683][  T781] veth0_vlan: entered allmulticast mode
[ 1294.750807][  T781] vlan0: entered promiscuous mode
[ 1295.423024][  T810] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7949'.
[ 1295.432311][  T810] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.7949'.
[ 1295.502170][  T812] netlink: 'syz.0.7950': attribute type 10 has an invalid length.
[ 1295.826469][  T825] netlink: 'syz.0.7954': attribute type 10 has an invalid length.
[ 1295.835844][  T825] bridge0: left allmulticast mode
[ 1295.851769][  T825] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1295.859870][  T825] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1295.869010][  T825] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1295.876881][  T825] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1295.934916][  T825] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1296.441846][  T845] can: request_module (can-proto-3) failed.
[ 1296.825030][  T867] __nla_validate_parse: 5 callbacks suppressed
[ 1296.825044][  T867] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.7966'.
[ 1296.850715][  T867] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.7966'.
[ 1297.101494][  T882] syzkaller0: entered promiscuous mode
[ 1297.114905][  T882] syzkaller0: entered allmulticast mode
[ 1297.120983][ T5782] Bluetooth: hci4: command 0x0406 tx timeout
[ 1297.194333][  T888] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.7969'.
[ 1297.223408][  T888] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.7969'.
[ 1299.284020][  T898] netlink: 'syz.4.7973': attribute type 21 has an invalid length.
[ 1299.294963][  T898] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7973'.
[ 1300.083288][  T938] syz.4.7980 (938) used obsolete PPPIOCDETACH ioctl
[ 1300.160096][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.171901][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.320989][  T944] netlink: 'syz.2.7984': attribute type 10 has an invalid length.
[ 1300.342543][  T944] 8021q: adding VLAN 0 to HW filter on device .`
[ 1300.354491][  T944] .`: entered promiscuous mode
[ 1300.359304][  T944] bond_slave_0: entered promiscuous mode
[ 1300.393267][  T944] bond_slave_1: entered promiscuous mode
[ 1300.411837][  T944] .`: entered allmulticast mode
[ 1300.433023][  T944] bond_slave_0: entered allmulticast mode
[ 1300.444204][  T944] bond_slave_1: entered allmulticast mode
[ 1300.451080][  T944] team0: Port device .` added
[ 1300.488016][  T948] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7985'.
[ 1300.517302][  T956] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7982'.
[ 1300.542922][  T956] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.7982'.
[ 1300.578611][  T944] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7984'.
[ 1300.725015][  T962] netlink: 'syz.2.7989': attribute type 33 has an invalid length.
[ 1300.733646][  T962] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7989'.
[ 1300.751109][  T962] `: renamed from team0 (while UP)
[ 1301.817528][T27033] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1302.059413][  T993] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1302.068819][  T993] syzkaller1: linktype set to 786
[ 1302.306104][  T999] syzkaller0: entered promiscuous mode
[ 1302.312185][  T999] syzkaller0: entered allmulticast mode
[ 1303.086053][ T1023] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7998'.
[ 1303.364386][T12000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1304.326944][ T1011] netlink: 'syz.1.7998': attribute type 10 has an invalid length.
[ 1304.342351][ T1011] 8021q: adding VLAN 0 to HW filter on device .`
[ 1304.356104][ T1011] team0: Port device .` added
[ 1304.811541][ T1039] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8003'.
[ 1304.823666][ T1039] Ù: renamed from bond_slave_1 (while UP)
[ 1305.259756][ T1053] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8007'.
[ 1306.266451][ T1068] netlink: 'syz.0.8016': attribute type 1 has an invalid length.
[ 1306.280276][ T1068] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.8016'.
[ 1306.319351][ T1078] netlink: 'syz.4.8010': attribute type 10 has an invalid length.
[ 1306.366657][ T1078] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1306.384993][ T1078] bond0: entered promiscuous mode
[ 1306.390191][ T1078] bond_slave_0: entered promiscuous mode
[ 1306.415484][ T1078] bond_slave_1: entered promiscuous mode
[ 1306.434163][ T1078] batadv_slave_0: entered promiscuous mode
[ 1306.440447][ T1078] bond0: entered allmulticast mode
[ 1306.446475][ T1078] bond_slave_0: entered allmulticast mode
[ 1306.452385][ T1078] bond_slave_1: entered allmulticast mode
[ 1306.462628][ T1078] batadv_slave_0: entered allmulticast mode
[ 1306.478764][ T1078] team0: Port device bond0 added
[ 1306.535113][ T1078] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8010'.
[ 1306.897123][ T1087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8015'.
[ 1306.918970][ T1084] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.8024'.
[ 1307.284907][ T1100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1307.408576][ T1100] netlink: 'syz.2.8021': attribute type 1 has an invalid length.
[ 1307.474174][ T1110] netlink: 'syz.0.8023': attribute type 46 has an invalid length.
[ 1307.483607][ T1110] netlink: 'syz.0.8023': attribute type 46 has an invalid length.
[ 1308.041676][ T1119] netlink: 'syz.2.8027': attribute type 8 has an invalid length.
[ 1308.053225][ T1121] netlink: 'syz.2.8027': attribute type 8 has an invalid length.
[ 1308.084060][ T1123] netlink: 'syz.4.8028': attribute type 3 has an invalid length.
[ 1308.092052][ T1123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8028'.
[ 1308.117845][ T1121] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8027'.
[ 1308.127913][ T1123] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8028'.
[ 1308.138658][ T1123] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8
[ 1308.153425][ T1119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8027'.
[ 1308.680295][ T1134] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8029'.
[ 1309.300234][ T1136] netlink: 'syz.1.8032': attribute type 2 has an invalid length.
[ 1309.330207][ T1136] netlink: 'syz.1.8032': attribute type 8 has an invalid length.
[ 1309.356141][ T1136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8032'.
[ 1309.600331][ T1154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8036'.
[ 1309.733444][ T1157] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8037'.
[ 1309.745978][ T1147] delete_channel: no stack
[ 1309.801409][ T1159] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8037'.
[ 1310.974132][ T1178] delete_channel: no stack
[ 1311.854275][ T1190] bond0 (unregistering): left promiscuous mode
[ 1311.875507][ T1190] bond_slave_0: left promiscuous mode
[ 1311.881149][ T1190] bond_slave_1: left promiscuous mode
[ 1311.890516][ T1190] batadv_slave_0: left promiscuous mode
[ 1311.903366][ T1190] bond0 (unregistering): left allmulticast mode
[ 1311.925080][ T1190] bond_slave_0: left allmulticast mode
[ 1311.945752][ T1190] bond_slave_1: left allmulticast mode
[ 1311.982976][ T1190] batadv_slave_0: left allmulticast mode
[ 1312.007497][ T1190] team0: Port device bond0 removed
[ 1312.043558][ T1190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1312.088671][ T1190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1312.125421][ T1190] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1312.159889][ T1190] bond0 (unregistering): Released all slaves
[ 1312.508980][ T1203] syzkaller0: entered promiscuous mode
[ 1312.522947][ T1203] syzkaller0: entered allmulticast mode
[ 1315.827535][ T1234] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8054'.
[ 1315.840861][ T1234] validate_nla: 1 callbacks suppressed
[ 1315.840908][ T1234] netlink: 'syz.2.8054': attribute type 33 has an invalid length.
[ 1315.865868][ T1234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8054'.
[ 1315.881259][T11995] tipc: Subscription rejected, illegal request
[ 1317.613535][ T1313] netlink: 150456 bytes leftover after parsing attributes in process `syz.2.8077'.
[ 1317.633548][ T1313] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1318.128045][ T1319] syzkaller0: entered promiscuous mode
[ 1318.143114][ T1319] syzkaller0: entered allmulticast mode
[ 1322.013073][ T1345] netlink: 'syz.1.8083': attribute type 21 has an invalid length.
[ 1322.160946][ T1353] netlink: 'syz.1.8085': attribute type 9 has an invalid length.
[ 1322.169953][ T1353] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8085'.
[ 1322.186219][ T1353] netlink: 'syz.1.8085': attribute type 3 has an invalid length.
[ 1322.194703][ T1353] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8085'.
[ 1325.243731][ T1366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1325.444957][ T1380] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8092'.
[ 1325.488577][ T1380] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[ 1325.506472][ T1380] CPU: 1 PID: 1380 Comm: syz.1.8092 Not tainted syzkaller #0
[ 1325.513990][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1325.524072][ T1380] Call Trace:
[ 1325.527385][ T1380]  <TASK>
[ 1325.530347][ T1380]  dump_stack_lvl+0x18c/0x250
[ 1325.535090][ T1380]  ? show_regs_print_info+0x20/0x20
[ 1325.540348][ T1380]  ? load_image+0x420/0x420
[ 1325.544923][ T1380]  sysfs_warn_dup+0x8e/0xa0
[ 1325.549466][ T1380]  sysfs_do_create_link_sd+0xc0/0x110
[ 1325.554881][ T1380]  device_add_class_symlinks+0x1cf/0x240
[ 1325.560560][ T1380]  device_add+0x507/0xc20
[ 1325.564943][ T1380]  wiphy_register+0x1dad/0x2ae0
[ 1325.569834][ T1380]  ? __rtnl_unlock+0x18/0xe0
[ 1325.574492][ T1380]  ? cfg80211_event_work+0x40/0x40
[ 1325.579637][ T1380]  ? minstrel_ht_alloc+0x88a/0x990
[ 1325.584802][ T1380]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1325.590938][ T1380]  ieee80211_register_hw+0x3464/0x4250
[ 1325.596471][ T1380]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1325.602161][ T1380]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1325.608123][ T1380]  ? __debug_object_init+0xec/0x450
[ 1325.613375][ T1380]  ? __asan_memset+0x22/0x40
[ 1325.618003][ T1380]  ? __hrtimer_init+0x186/0x270
[ 1325.622876][ T1380]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1325.628631][ T1380]  ? mac80211_hwsim_free+0x220/0x220
[ 1325.633938][ T1380]  ? rcu_is_watching+0x15/0xb0
[ 1325.638732][ T1380]  ? kstrndup+0xbd/0x140
[ 1325.643005][ T1380]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1325.648148][ T1380]  ? __nla_validate+0x50/0x50
[ 1325.652904][ T1380]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1325.659260][ T1380]  ? __nla_parse+0x40/0x50
[ 1325.663698][ T1380]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1325.670080][ T1380]  genl_family_rcv_msg_doit+0x211/0x310
[ 1325.675661][ T1380]  ? end_current_label_crit_section+0x170/0x170
[ 1325.681959][ T1380]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1325.687885][ T1380]  ? bpf_lsm_capable+0x9/0x10
[ 1325.692582][ T1380]  ? security_capable+0x89/0xb0
[ 1325.697463][ T1380]  genl_rcv_msg+0x619/0x7a0
[ 1325.701986][ T1380]  ? genl_bind+0x360/0x360
[ 1325.706428][ T1380]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1325.712787][ T1380]  netlink_rcv_skb+0x241/0x4d0
[ 1325.717581][ T1380]  ? genl_bind+0x360/0x360
[ 1325.722020][ T1380]  ? netlink_ack+0x1180/0x1180
[ 1325.726813][ T1380]  ? __lock_acquire+0x7d40/0x7d40
[ 1325.731864][ T1380]  ? down_read+0x1ac/0x2e0
[ 1325.736301][ T1380]  genl_rcv+0x28/0x40
[ 1325.740292][ T1380]  netlink_unicast+0x751/0x8d0
[ 1325.745087][ T1380]  netlink_sendmsg+0x8d0/0xbf0
[ 1325.749893][ T1380]  ? netlink_getsockopt+0x590/0x590
[ 1325.755128][ T1380]  ? netlink_getsockopt+0x590/0x590
[ 1325.760361][ T1380]  ____sys_sendmsg+0x5ba/0x960
[ 1325.765169][ T1380]  ? __asan_memset+0x22/0x40
[ 1325.769849][ T1380]  ? __sys_sendmsg_sock+0x30/0x30
[ 1325.774916][ T1380]  ? __import_iovec+0x5f2/0x850
[ 1325.779806][ T1380]  ? import_iovec+0x73/0xa0
[ 1325.784334][ T1380]  ___sys_sendmsg+0x2a6/0x360
[ 1325.789036][ T1380]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1325.793830][ T1380]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[ 1325.800190][ T1380]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1325.805059][ T1380]  ? __x64_sys_sendmsg+0x80/0x80
[ 1325.810022][ T1380]  ? lockdep_hardirqs_on+0x98/0x150
[ 1325.815236][ T1380]  do_syscall_64+0x55/0xa0
[ 1325.819671][ T1380]  ? clear_bhb_loop+0x40/0x90
[ 1325.824375][ T1380]  ? clear_bhb_loop+0x40/0x90
[ 1325.829076][ T1380]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1325.834993][ T1380] RIP: 0033:0x7fdfb739c819
[ 1325.839421][ T1380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1325.859045][ T1380] RSP: 002b:00007fdfb8283028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1325.867476][ T1380] RAX: ffffffffffffffda RBX: 00007fdfb7615fa0 RCX: 00007fdfb739c819
[ 1325.875463][ T1380] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1325.883450][ T1380] RBP: 00007fdfb7432c91 R08: 0000000000000000 R09: 0000000000000000
[ 1325.891445][ T1380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1325.899450][ T1380] R13: 00007fdfb7616038 R14: 00007fdfb7615fa0 R15: 00007fffb560b388
[ 1325.907472][ T1380]  </TASK>
[ 1326.475185][ T1400] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8097'.
[ 1327.493155][ T1410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8102'.
[ 1327.521038][ T1410] netlink: 'syz.0.8102': attribute type 17 has an invalid length.
[ 1327.537699][ T1410] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8102'.
[ 1327.599240][ T1410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1327.668314][ T1410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8102'.
[ 1327.907390][ T1421] IPv6: Can't replace route, no match found
[ 1327.921058][ T1429] netlink: 'syz.0.8106': attribute type 3 has an invalid length.
[ 1327.943077][ T1429] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8106'.
[ 1327.956406][ T1428] mac80211_hwsim hwsim107 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1328.833520][ T1445] netlink: 'syz.0.8109': attribute type 10 has an invalid length.
[ 1328.904184][ T1445] team0: Port device dummy0 added
[ 1329.181950][ T1458] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.8113'.
[ 1329.251048][ T1459] netlink: 'syz.1.8114': attribute type 21 has an invalid length.
[ 1329.301589][ T1459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1329.308906][ T1459] IPv6: NLM_F_CREATE should be set when creating new route
[ 1329.316258][ T1459] IPv6: NLM_F_CREATE should be set when creating new route
[ 1329.323563][ T1459] IPv6: NLM_F_CREATE should be set when creating new route
[ 1329.926404][ T1469] netlink: 'syz.0.8118': attribute type 2 has an invalid length.
[ 1329.957009][ T1469] netlink: 'syz.0.8118': attribute type 8 has an invalid length.
[ 1329.965577][ T1469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8118'.
[ 1330.306434][ T1472] ==================================================================
[ 1330.314578][ T1472] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[ 1330.322450][ T1472] Write of size 72 at addr ffff88801ffd6110 by task syz.2.8122/1472
[ 1330.330474][ T1472] 
[ 1330.332825][ T1472] CPU: 1 PID: 1472 Comm: syz.2.8122 Not tainted syzkaller #0
[ 1330.340232][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1330.350322][ T1472] Call Trace:
[ 1330.353640][ T1472]  <TASK>
[ 1330.356618][ T1472]  dump_stack_lvl+0x18c/0x250
[ 1330.361382][ T1472]  ? __lock_acquire+0x7d40/0x7d40
[ 1330.366446][ T1472]  ? show_regs_print_info+0x20/0x20
[ 1330.371702][ T1472]  ? load_image+0x420/0x420
[ 1330.376283][ T1472]  ? _raw_spin_lock_irqsave+0xc0/0x100
[ 1330.381793][ T1472]  ? __virt_addr_valid+0x18c/0x540
[ 1330.386965][ T1472]  ? __virt_addr_valid+0x469/0x540
[ 1330.392128][ T1472]  print_report+0xa8/0x210
[ 1330.396679][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1330.401833][ T1472]  kasan_report+0x117/0x150
[ 1330.406418][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1330.411588][ T1472]  kasan_check_range+0x241/0x290
[ 1330.416996][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1330.422136][ T1472]  __asan_memcpy+0x40/0x70
[ 1330.426580][ T1472]  __bpf_get_stackid+0x6bf/0x900
[ 1330.431548][ T1472]  bpf_get_stackid_pe+0x343/0x410
[ 1330.436612][ T1472]  bpf_prog_02c92f715e75ceb8+0x30/0x45
[ 1330.442094][ T1472]  bpf_overflow_handler+0x1fc/0x510
[ 1330.447318][ T1472]  ? bpf_overflow_handler+0xde/0x510
[ 1330.452631][ T1472]  ? tp_perf_event_destroy+0x20/0x20
[ 1330.457947][ T1472]  ? __perf_event_account_interrupt+0x187/0x280
[ 1330.464220][ T1472]  __perf_event_overflow+0x447/0x630
[ 1330.469541][ T1472]  perf_swevent_overflow+0x268/0x340
[ 1330.474863][ T1472]  ? perf_event_switch_output+0x790/0x790
[ 1330.480619][ T1472]  ? rcu_is_watching+0x15/0xb0
[ 1330.485416][ T1472]  perf_swevent_event+0x45c/0x570
[ 1330.490477][ T1472]  ? perf_tp_event+0x1520/0x1520
[ 1330.495450][ T1472]  ___perf_sw_event+0x4a7/0x730
[ 1330.500320][ T1472]  ? ___perf_sw_event+0x199/0x730
[ 1330.505367][ T1472]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1330.511824][ T1472]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1330.517824][ T1472]  ? lock_chain_count+0x20/0x20
[ 1330.522689][ T1472]  __perf_sw_event+0x139/0x270
[ 1330.527471][ T1472]  do_user_addr_fault+0x123e/0x12c0
[ 1330.532694][ T1472]  ? rcu_is_watching+0x15/0xb0
[ 1330.537474][ T1472]  exc_page_fault+0x64/0x100
[ 1330.542085][ T1472]  asm_exc_page_fault+0x26/0x30
[ 1330.546948][ T1472] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1330.552781][ T1472] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1330.572398][ T1472] RSP: 0018:ffffc900056b7c30 EFLAGS: 00050202
[ 1330.578480][ T1472] RAX: ffffffff842a1e01 RBX: 0000000000000e80 RCX: 00000000000004c0
[ 1330.586471][ T1472] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff888019a8ca00
[ 1330.594457][ T1472] RBP: ffff888019a8c000 R08: ffff888019a8cebf R09: 1ffff110033519d7
[ 1330.602440][ T1472] R10: dffffc0000000000 R11: ffffed10033519d8 R12: 00002000000014c0
[ 1330.610425][ T1472] R13: ffff888019a8c040 R14: ffff888019a8c040 R15: 0000200000000640
[ 1330.618417][ T1472]  ? _copy_from_user+0x11/0xe0
[ 1330.623224][ T1472]  _copy_from_user+0x8b/0xe0
[ 1330.627841][ T1472]  bpf_prog_test_run_skb+0x266/0x12b0
[ 1330.633231][ T1472]  ? __fget_files+0x28/0x4b0
[ 1330.637848][ T1472]  ? __fget_files+0x28/0x4b0
[ 1330.642545][ T1472]  ? __fget_files+0x43d/0x4b0
[ 1330.647247][ T1472]  ? cpu_online+0x60/0x60
[ 1330.651607][ T1472]  bpf_prog_test_run+0x321/0x390
[ 1330.656567][ T1472]  __sys_bpf+0x49d/0x890
[ 1330.660821][ T1472]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1330.666216][ T1472]  ? lock_chain_count+0x20/0x20
[ 1330.671090][ T1472]  __x64_sys_bpf+0x7c/0x90
[ 1330.675526][ T1472]  do_syscall_64+0x55/0xa0
[ 1330.679963][ T1472]  ? clear_bhb_loop+0x40/0x90
[ 1330.684673][ T1472]  ? clear_bhb_loop+0x40/0x90
[ 1330.689378][ T1472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1330.695305][ T1472] RIP: 0033:0x7f9093f9c819
[ 1330.699738][ T1472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1330.719376][ T1472] RSP: 002b:00007f9094dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1330.727815][ T1472] RAX: ffffffffffffffda RBX: 00007f9094215fa0 RCX: 00007f9093f9c819
[ 1330.735801][ T1472] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[ 1330.743785][ T1472] RBP: 00007f9094032c91 R08: 0000000000000000 R09: 0000000000000000
[ 1330.751777][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1330.759766][ T1472] R13: 00007f9094216038 R14: 00007f9094215fa0 R15: 00007ffe69778da8
[ 1330.767775][ T1472]  </TASK>
[ 1330.770817][ T1472] 
[ 1330.773155][ T1472] Allocated by task 1472:
[ 1330.777513][ T1472]  kasan_set_track+0x4e/0x70
[ 1330.782131][ T1472]  __kasan_kmalloc+0x8f/0xa0
[ 1330.786753][ T1472]  __kmalloc_node+0xb4/0x230
[ 1330.791381][ T1472]  bpf_map_area_alloc+0x5e/0x110
[ 1330.796343][ T1472]  prealloc_elems_and_freelist+0x86/0x1c0
[ 1330.802078][ T1472]  stack_map_alloc+0x33a/0x4c0
[ 1330.806866][ T1472]  map_create+0x877/0x12f0
[ 1330.811310][ T1472]  __sys_bpf+0x651/0x890
[ 1330.815571][ T1472]  __x64_sys_bpf+0x7c/0x90
[ 1330.820011][ T1472]  do_syscall_64+0x55/0xa0
[ 1330.824438][ T1472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1330.830349][ T1472] 
[ 1330.832677][ T1472] Last potentially related work creation:
[ 1330.838400][ T1472]  kasan_save_stack+0x3e/0x60
[ 1330.843094][ T1472]  __kasan_record_aux_stack+0xaf/0xc0
[ 1330.848491][ T1472]  call_rcu+0x153/0x950
[ 1330.852662][ T1472]  nf_unregister_net_hooks+0xcb/0x130
[ 1330.858064][ T1472]  nf_defrag_ipv4_disable+0x95/0xe0
[ 1330.863274][ T1472]  nf_ct_netns_put+0x2da/0x520
[ 1330.868055][ T1472]  nf_conncount_destroy+0x41/0x150
[ 1330.873210][ T1472]  ovs_ct_exit+0x9c/0x200
[ 1330.877563][ T1472]  ovs_exit_net+0xed/0x7a0
[ 1330.882001][ T1472]  cleanup_net+0x70a/0xbb0
[ 1330.886438][ T1472]  process_scheduled_works+0xa5d/0x15d0
[ 1330.892005][ T1472]  worker_thread+0xa55/0xfc0
[ 1330.896633][ T1472]  kthread+0x2fa/0x390
[ 1330.900722][ T1472]  ret_from_fork+0x48/0x80
[ 1330.905169][ T1472]  ret_from_fork_asm+0x11/0x20
[ 1330.909969][ T1472] 
[ 1330.912307][ T1472] Second to last potentially related work creation:
[ 1330.918910][ T1472]  kasan_save_stack+0x3e/0x60
[ 1330.923619][ T1472]  __kasan_record_aux_stack+0xaf/0xc0
[ 1330.929040][ T1472]  call_rcu+0x153/0x950
[ 1330.933211][ T1472]  nf_unregister_net_hooks+0xcb/0x130
[ 1330.938605][ T1472]  nf_ct_netns_put+0x2d2/0x520
[ 1330.943393][ T1472]  nf_conncount_destroy+0x41/0x150
[ 1330.948546][ T1472]  ovs_ct_exit+0x9c/0x200
[ 1330.952915][ T1472]  ovs_exit_net+0xed/0x7a0
[ 1330.957361][ T1472]  cleanup_net+0x70a/0xbb0
[ 1330.961993][ T1472]  process_scheduled_works+0xa5d/0x15d0
[ 1330.967560][ T1472]  worker_thread+0xa55/0xfc0
[ 1330.972194][ T1472]  kthread+0x2fa/0x390
[ 1330.976279][ T1472]  ret_from_fork+0x48/0x80
[ 1330.980712][ T1472]  ret_from_fork_asm+0x11/0x20
[ 1330.985497][ T1472] 
[ 1330.987834][ T1472] The buggy address belongs to the object at ffff88801ffd6100
[ 1330.987834][ T1472]  which belongs to the cache kmalloc-cg-64 of size 64
[ 1331.002013][ T1472] The buggy address is located 16 bytes inside of
[ 1331.002013][ T1472]  allocated 40-byte region [ffff88801ffd6100, ffff88801ffd6128)
[ 1331.016000][ T1472] 
[ 1331.018341][ T1472] The buggy address belongs to the physical page:
[ 1331.024782][ T1472] page:ffffea00007ff580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ffd6
[ 1331.034955][ T1472] memcg:ffff88802e06ea01
[ 1331.039212][ T1472] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1331.046774][ T1472] page_type: 0xffffffff()
[ 1331.051139][ T1472] raw: 00fff00000000800 ffff888017c4da00 ffffea0001e31c80 dead000000000008
[ 1331.059748][ T1472] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802e06ea01
[ 1331.068343][ T1472] page dumped because: kasan: bad access detected
[ 1331.074770][ T1472] page_owner tracks the page as allocated
[ 1331.080495][ T1472] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 61, tgid 61 (kworker/u4:4), ts 584064547360, free_ts 570994433876
[ 1331.098561][ T1472]  post_alloc_hook+0x1c1/0x200
[ 1331.103363][ T1472]  get_page_from_freelist+0x1951/0x19e0
[ 1331.108928][ T1472]  __alloc_pages+0x1f0/0x460
[ 1331.113529][ T1472]  alloc_slab_page+0x5d/0x160
[ 1331.118227][ T1472]  new_slab+0x87/0x2d0
[ 1331.122317][ T1472]  ___slab_alloc+0xc5d/0x12f0
[ 1331.127020][ T1472]  __kmem_cache_alloc_node+0x19e/0x250
[ 1331.132506][ T1472]  __kmalloc_node+0xa4/0x230
[ 1331.137122][ T1472]  kvmalloc_node+0x70/0x180
[ 1331.141644][ T1472]  __nf_hook_entries_try_shrink+0x310/0x6d0
[ 1331.147572][ T1472]  __nf_unregister_net_hook+0x4e1/0x6e0
[ 1331.153159][ T1472]  nf_unregister_net_hooks+0xcb/0x130
[ 1331.158576][ T1472]  cleanup_net+0x595/0xbb0
[ 1331.163023][ T1472]  process_scheduled_works+0xa5d/0x15d0
[ 1331.168587][ T1472]  worker_thread+0xa55/0xfc0
[ 1331.173201][ T1472]  kthread+0x2fa/0x390
[ 1331.177283][ T1472] page last free stack trace:
[ 1331.181961][ T1472]  free_unref_page_prepare+0x7b2/0x8c0
[ 1331.187443][ T1472]  free_unref_page+0x32/0x2e0
[ 1331.192145][ T1472]  vfree+0x1a6/0x320
[ 1331.196067][ T1472]  delayed_vfree_work+0x55/0x80
[ 1331.201120][ T1472]  process_scheduled_works+0xa5d/0x15d0
[ 1331.206705][ T1472]  worker_thread+0xa55/0xfc0
[ 1331.211317][ T1472]  kthread+0x2fa/0x390
[ 1331.215408][ T1472]  ret_from_fork+0x48/0x80
[ 1331.219849][ T1472]  ret_from_fork_asm+0x11/0x20
[ 1331.224637][ T1472] 
[ 1331.226983][ T1472] Memory state around the buggy address:
[ 1331.232630][ T1472]  ffff88801ffd6000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1331.240714][ T1472]  ffff88801ffd6080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 1331.248792][ T1472] >ffff88801ffd6100: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 1331.256867][ T1472]                                   ^
[ 1331.262252][ T1472]  ffff88801ffd6180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1331.270324][ T1472]  ffff88801ffd6200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 1331.278398][ T1472] ==================================================================
[ 1331.286480][ T1472] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1331.293686][ T1472] CPU: 1 PID: 1472 Comm: syz.2.8122 Not tainted syzkaller #0
[ 1331.301066][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1331.311148][ T1472] Call Trace:
[ 1331.314456][ T1472]  <TASK>
[ 1331.317402][ T1472]  dump_stack_lvl+0x18c/0x250
[ 1331.322103][ T1472]  ? show_regs_print_info+0x20/0x20
[ 1331.327331][ T1472]  ? load_image+0x420/0x420
[ 1331.331866][ T1472]  panic+0x2dc/0x730
[ 1331.335794][ T1472]  ? __lock_acquire+0x7d40/0x7d40
[ 1331.340840][ T1472]  ? bpf_jit_dump+0xd0/0xd0
[ 1331.345357][ T1472]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1331.351270][ T1472]  ? _raw_spin_unlock+0x40/0x40
[ 1331.356140][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1331.361263][ T1472]  check_panic_on_warn+0x84/0xa0
[ 1331.366222][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1331.371361][ T1472]  end_report+0x6f/0x130
[ 1331.375626][ T1472]  kasan_report+0x128/0x150
[ 1331.380163][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1331.385298][ T1472]  kasan_check_range+0x241/0x290
[ 1331.390263][ T1472]  ? __bpf_get_stackid+0x6bf/0x900
[ 1331.395387][ T1472]  __asan_memcpy+0x40/0x70
[ 1331.399829][ T1472]  __bpf_get_stackid+0x6bf/0x900
[ 1331.404815][ T1472]  bpf_get_stackid_pe+0x343/0x410
[ 1331.409959][ T1472]  bpf_prog_02c92f715e75ceb8+0x30/0x45
[ 1331.415466][ T1472]  bpf_overflow_handler+0x1fc/0x510
[ 1331.420685][ T1472]  ? bpf_overflow_handler+0xde/0x510
[ 1331.425995][ T1472]  ? tp_perf_event_destroy+0x20/0x20
[ 1331.431311][ T1472]  ? __perf_event_account_interrupt+0x187/0x280
[ 1331.437593][ T1472]  __perf_event_overflow+0x447/0x630
[ 1331.442911][ T1472]  perf_swevent_overflow+0x268/0x340
[ 1331.448221][ T1472]  ? perf_event_switch_output+0x790/0x790
[ 1331.453972][ T1472]  ? rcu_is_watching+0x15/0xb0
[ 1331.458766][ T1472]  perf_swevent_event+0x45c/0x570
[ 1331.463816][ T1472]  ? perf_tp_event+0x1520/0x1520
[ 1331.468782][ T1472]  ___perf_sw_event+0x4a7/0x730
[ 1331.473654][ T1472]  ? ___perf_sw_event+0x199/0x730
[ 1331.478714][ T1472]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1331.485187][ T1472]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1331.491203][ T1472]  ? lock_chain_count+0x20/0x20
[ 1331.496075][ T1472]  __perf_sw_event+0x139/0x270
[ 1331.500863][ T1472]  do_user_addr_fault+0x123e/0x12c0
[ 1331.506097][ T1472]  ? rcu_is_watching+0x15/0xb0
[ 1331.510892][ T1472]  exc_page_fault+0x64/0x100
[ 1331.515509][ T1472]  asm_exc_page_fault+0x26/0x30
[ 1331.520379][ T1472] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1331.526201][ T1472] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1331.545858][ T1472] RSP: 0018:ffffc900056b7c30 EFLAGS: 00050202
[ 1331.551961][ T1472] RAX: ffffffff842a1e01 RBX: 0000000000000e80 RCX: 00000000000004c0
[ 1331.559950][ T1472] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff888019a8ca00
[ 1331.567938][ T1472] RBP: ffff888019a8c000 R08: ffff888019a8cebf R09: 1ffff110033519d7
[ 1331.575923][ T1472] R10: dffffc0000000000 R11: ffffed10033519d8 R12: 00002000000014c0
[ 1331.583911][ T1472] R13: ffff888019a8c040 R14: ffff888019a8c040 R15: 0000200000000640
[ 1331.591912][ T1472]  ? _copy_from_user+0x11/0xe0
[ 1331.596707][ T1472]  _copy_from_user+0x8b/0xe0
[ 1331.601309][ T1472]  bpf_prog_test_run_skb+0x266/0x12b0
[ 1331.606714][ T1472]  ? __fget_files+0x28/0x4b0
[ 1331.611335][ T1472]  ? __fget_files+0x28/0x4b0
[ 1331.615968][ T1472]  ? __fget_files+0x43d/0x4b0
[ 1331.620692][ T1472]  ? cpu_online+0x60/0x60
[ 1331.625083][ T1472]  bpf_prog_test_run+0x321/0x390
[ 1331.630067][ T1472]  __sys_bpf+0x49d/0x890
[ 1331.634369][ T1472]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1331.639903][ T1472]  ? lock_chain_count+0x20/0x20
[ 1331.644811][ T1472]  __x64_sys_bpf+0x7c/0x90
[ 1331.649247][ T1472]  do_syscall_64+0x55/0xa0
[ 1331.653697][ T1472]  ? clear_bhb_loop+0x40/0x90
[ 1331.658396][ T1472]  ? clear_bhb_loop+0x40/0x90
[ 1331.663097][ T1472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1331.669013][ T1472] RIP: 0033:0x7f9093f9c819
[ 1331.673441][ T1472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1331.693075][ T1472] RSP: 002b:00007f9094dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1331.701614][ T1472] RAX: ffffffffffffffda RBX: 00007f9094215fa0 RCX: 00007f9093f9c819
[ 1331.709613][ T1472] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[ 1331.717612][ T1472] RBP: 00007f9094032c91 R08: 0000000000000000 R09: 0000000000000000
[ 1331.725620][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1331.733615][ T1472] R13: 00007f9094216038 R14: 00007f9094215fa0 R15: 00007ffe69778da8
[ 1331.741634][ T1472]  </TASK>
[ 1331.745245][ T1472] Kernel Offset: disabled
[ 1331.749587][ T1472] Rebooting in 86400 seconds..