last executing test programs:

3.993912313s ago: executing program 1 (id=1643):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = getpid() (async)
r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xc, 0x3, 0x40, 0x4, 0x0, 0x95, 0x40000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x9}, 0x1180, 0xd22, 0x1ff, 0xc, 0x8, 0x6, 0x5, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xf)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x7, 0xd9, 0x0, 0x8, 0x40981, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x7, 0x6}, 0x105, 0xfff, 0x2, 0x7, 0x8, 0x5e0, 0x8, 0x0, 0x10001, 0x0, 0x2}, r0, 0x5, r1, 0x3)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x100000000000000, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90ba3c92b", 0x14}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000690000000000000000ff0f00"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0xfeff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYBLOB="000000000000c9e3fbc33c7cc8fe00000000f3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x43a882, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async)
ioctl$TUNSETDEBUG(r8, 0x400454c9, 0xffffffffffffffff) (async)
ioctl$TUNGETVNETBE(r8, 0x800454df, 0x0) (async)
close(r4) (async)
close(0x3) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5599}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.807565081s ago: executing program 3 (id=1644):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40", 0x9c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0x10, 0x107, 0x7}, {0x18, 0x0, 0x6, "f2d4827b9a79c3f7"}, {0x60, 0x108, 0xffff7a8f, "246308391969030da4711f76960c0607f912ceb8fdff35fa720f9c701289057311e7bf6d559a0c59565aefc28a8e67750106b0dbbb9ea7b29785d71140b9509974d40529993896071e4c5e6046702a"}, {0x10, 0x13f, 0x2}, {0x10, 0x3a, 0x2}, {0x98, 0x29, 0xe72, "3a2e9eeb98ec347da1bdd577dfd4ac25f4c4acc84ac11838d560054ed302ccd51b6326757c407162823c4d2bf36bfa3065b458791c80024aa896af5186a420b45d7bdc4e350aa38959ec5bb839515eec097b514d5014ac2a0a0da21500f9c848f5ce45006c30a09400a9e30a0e88eee0be7f0d843ce4d1c1e327f417f59e8fb1f00dbd913f"}, {0x68, 0x10a, 0x8, "63c3edd93989dde3c226ee3916e811fc6efc4cc93db65f1dd59fbae02bff4ac9f5ca02336685104c04d490fb26db8fc843e5c2e9a094a942a5d4e168a86a80b2d7271710d37d6029aa3c3457705e4adfdcc7db05"}], 0x288}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x10)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x200004, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00803b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x661ef11352c62459)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r3}, &(0x7f0000000d80), &(0x7f0000000dc0)=r6}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)

3.658075468s ago: executing program 2 (id=1645):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000009d0a000000000000030142"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x19}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) (async)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x33, &(0x7f0000000040), 0x10) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, @perf_bp={0x0}, 0x4000, 0x578, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e)

3.62274286s ago: executing program 1 (id=1646):
socketpair(0x2c, 0x4, 0x80000001, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.383357351s ago: executing program 0 (id=1647):
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x110c0, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="59eced8ec6dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x4040000)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0xbc00)

2.75025164s ago: executing program 3 (id=1648):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x100000000, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17)
socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r6, 0x6, 0x3, &(0x7f00000000c0), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7)
r8 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r8, r0, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r9 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r9, 0x0, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
gettid()
r10 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r10, 0x11e, 0x19, 0x0, 0x0)
syz_clone(0x10021400, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.682756004s ago: executing program 1 (id=1649):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4)
close(r2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240)}, 0x100, 0x879, 0xa482, 0x5, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000100), 0x12)
r8 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f00000000c0)=0xd, 0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x2})

2.571949959s ago: executing program 2 (id=1650):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0), 0x4)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2808, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x8)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00410000039bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.173729498s ago: executing program 0 (id=1651):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x2, 0x0)

2.143785149s ago: executing program 1 (id=1652):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x11a226, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x11a226, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f509000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="01000000020000000500"/27], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f509000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="01000000020000000500"/27], 0x50)
write$cgroup_subtree(r2, 0x0, 0xfe33)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r4) (async)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x30, 0x0}, 0x10)
sendmsg$kcm(r1, 0x0, 0xb80b)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, r5, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x1, 0x84)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

2.051994384s ago: executing program 3 (id=1653):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x20004840)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000001b40), 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000040), &(0x7f0000000000)=r2}, 0x20)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x20004840) (async)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000001b40), 0x4) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000040), &(0x7f0000000000)=r2}, 0x20) (async)

2.050661164s ago: executing program 2 (id=1654):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x6105db513b536218, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x88e2}, 0x0, 0x2, 0x0, 0x5, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x400000000003, 0xffffffffffffffff, 0x1b)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
write$cgroup_type(r2, 0x0, 0x60)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r5, 0x0}, 0x50)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000010000018000000500000000000100", @ANYRES32=r3, @ANYBLOB="fbffffff00"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="02000000050000000300"/24, @ANYRES32=r6, @ANYBLOB="8570da89424ea0a3433555c4806732b961b0ce2415a3e4662c2760199cdc2efb57df29a40b8aa7554336abbb3325faf4d193a5702b025dd1161d7b70401a16252c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2.025534685s ago: executing program 0 (id=1655):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x6, 0xc, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000100000000000000"], 0x0, 0x7}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1d, 0x14, &(0x7f0000001140)=ANY=[@ANYRES64], 0x0, 0x7, 0x0, 0x0, 0x0, 0x45, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.680939731s ago: executing program 3 (id=1656):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x10, &(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRES16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x74689, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x60000000000, 0x3fff8001}, 0x0, 0x32, 0x7ff, 0x4, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00'}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a40)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010100730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xb8}, {&(0x7f0000000980)="e8d1fc9c4d2f0c00e082115ee30f17d664c9d2fdcaeddad95aa313e1ece713c66f62fdeb4dd9e890f42e20c1685e24a9a17baee11f45b3270b72d6fd618becb4689e3bd1f2f524fe474c33771ea46db1768a318af0831be354eda1b5e19692dfe4547cdb69ac61bfce9d037d4811ad3e3b074ce78db869a5980cbe35c0d1512e9692025dcf6176ec61c0750a0cf59c34f3273de6b6063397358a8f08fbd68e3e9e9698e8acb31dccd7", 0xa9}, {&(0x7f0000000680)="b58418089ae9e358e2a4b57a062bb4bc23c106953d6f8a894b697f9adbf3d592f7f90a587a731ea1b016be40711267d912711a0ee07eaf8ac665cf0f7a2fd2277d35e17a99526c461deb8644f24b14b096a09b392639e3beece5cc5b2f4700ba7a2bd2cf8e", 0x65}], 0x3, 0x0, 0x0, 0x2663}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200000000c, 0x646d6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x806, 0x3, 0x0, 0x8, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400", 0x36}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x19)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000be5fef0108f6035a43a916acb1bfd98af6b5d6b5cb215d27ee55281bf13b96211a0a375580f84302f54fc42a5247377cf197aa8a029fa632a550bc710359ee3f1e66f0e9324cb2bbafe88bf4f9442917b6f5b1fa3e8c202d9943ab72c65e5e9631fe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b00)={r8, 0x58, 0x0}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/76, 0x4c}], 0x1}, 0x10141)

1.534821968s ago: executing program 2 (id=1657):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.402406104s ago: executing program 1 (id=1658):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x82, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x40047459, &(0x7f0000000180))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f00000008c0)={0x2, 0x80, 0x40, 0x1, 0xeb, 0x8, 0x0, 0x7, 0x1, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7fffffff, 0x4}, 0x802, 0xb41, 0x101, 0x8, 0x10001, 0x1ea, 0x0, 0x0, 0xffff607d, 0x0, 0xffffffffffffffff}, r3, 0xe, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r11, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000580)="2614f9d98044c26638d48120607179d3fea2402246477d8a94", 0x19}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0xffff0001, 0x7, 0x5, 0x9006, 0xffffffffffffffff, 0x5, '\x00', r2, r3, 0x1, 0x0, 0x2, 0x0, @value=r12}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe00000, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r10, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10)

1.366800226s ago: executing program 0 (id=1659):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
close(r1) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x103c09, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x9c1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b14e20e4493539f03", @ANYRES32=0x0], 0x50) (async)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f0000000180)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

1.008055343s ago: executing program 2 (id=1660):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
socketpair(0x22, 0x5, 0x25, &(0x7f00000000c0))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000)
close(r2)

944.451706ms ago: executing program 0 (id=1661):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>r0})
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000071d080006007c09e8fe08a104000e000a003d0003600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x2000004)

714.477056ms ago: executing program 0 (id=1662):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="10000000000000000000000000140000", @ANYRES32=0x0, @ANYRES32=r2], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)

423.84152ms ago: executing program 3 (id=1663):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x2, 0x0)

319.138845ms ago: executing program 3 (id=1664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x19}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f0000000200)=@raw=[@generic={0x7f, 0x1, 0x6, 0x4, 0xe}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x38, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r8 = socket$kcm(0xa, 0x2, 0x88)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000900000000000000fcffffff85100000fcffffff182b0000", @ANYRES32=r0, @ANYBLOB="000000000400000018300000040000000000000000000000975fea"], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', r7, 0x0, r9, 0x8, &(0x7f0000000440)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x0, 0x1, 0x8, 0xa}], 0x10, 0xec}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000600)=r9)
r10 = socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0xfeffffffffffffff)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000))
r12 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r12, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="62031f00d7552f056510120800afbcf7916df67d3dbd11e12b7f96e5521c8cf217300100000093c1", 0x2a}], 0x1}, 0x4084)

235.414109ms ago: executing program 1 (id=1665):
socket$kcm(0x2, 0x3, 0x2) (async)
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES32=r0], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002057aee4ccb0917056bbbedb17b245de2fccaa857d28c1fc579b945cc68ba008e8256791883bbfb0d4d7fef6", @ANYRES32, @ANYBLOB="07000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0xfffffffffffffff6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x20040000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r3}, 0x94)
socket$kcm(0x28, 0x5, 0x0) (async)
socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0x11, 0x2, 0x300) (async)
socket$kcm(0x11, 0x2, 0x300)
close(0x3)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$tipc(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) (async)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb7f0018000000000000004c0000004c00000003000000090000000000001203000000010000000000001105000000022000000100000000000012030000000300fdffffff001009000000000000000000000300000000020000000500000004000000005f00"], &(0x7f0000000380)=""/56, 0x67, 0x38, 0x1, 0x3, 0x10000}, 0x28)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=@bloom_filter={0x1e, 0xc, 0x100, 0xfffff000, 0x804, r2, 0xffff55f8, '\x00', 0x0, r7, 0x0, 0x0, 0x3, 0xc}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000000)=ANY=[], 0xb) (async)
write$cgroup_devices(r10, &(0x7f0000000000)=ANY=[], 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12)
socket$kcm(0x1e, 0x4, 0x0)

0s ago: executing program 2 (id=1666):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f00000002c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000027c0)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

68 bytes leftover after parsing attributes in process `syz.1.25'.
[   86.956643][ T1201] cfg80211: failed to load regulatory.db
[   87.173198][ T5924] netlink: 164 bytes leftover after parsing attributes in process `syz.3.29'.
[   87.253878][ T5933] validate_nla: 4 callbacks suppressed
[   87.253914][ T5933] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   87.292935][ T5928] netlink: 'syz.3.29': attribute type 21 has an invalid length.
[   87.396304][ T5935] FAULT_INJECTION: forcing a failure.
[   87.396304][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   87.412003][ T5935] CPU: 1 PID: 5935 Comm: syz.1.33 Not tainted syzkaller #0
[   87.419246][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.429332][ T5935] Call Trace:
[   87.432644][ T5935]  <TASK>
[   87.435594][ T5935]  dump_stack_lvl+0x18c/0x250
[   87.440313][ T5935]  ? show_regs_print_info+0x20/0x20
[   87.445532][ T5935]  ? load_image+0x420/0x420
[   87.450054][ T5935]  ? __lock_acquire+0x7d80/0x7d80
[   87.455102][ T5935]  ? snprintf+0xe9/0x140
[   87.459371][ T5935]  should_fail_ex+0x394/0x4c0
[   87.464079][ T5935]  _copy_to_user+0x2f/0xa0
[   87.468523][ T5935]  simple_read_from_buffer+0xe7/0x150
[   87.473919][ T5935]  proc_fail_nth_read+0x1e8/0x260
[   87.478976][ T5935]  ? proc_fault_inject_write+0x360/0x360
[   87.484635][ T5935]  ? fsnotify_perm+0x271/0x5e0
[   87.489434][ T5935]  ? proc_fault_inject_write+0x360/0x360
[   87.495100][ T5935]  vfs_read+0x298/0x990
[   87.499293][ T5935]  ? kernel_read+0x1e0/0x1e0
[   87.503907][ T5935]  ? __fget_files+0x28/0x460
[   87.508524][ T5935]  ? __fget_files+0x3fc/0x460
[   87.513231][ T5935]  ? __fdget_pos+0x2a3/0x330
[   87.517843][ T5935]  ? ksys_read+0x74/0x260
[   87.522197][ T5935]  ksys_read+0x151/0x260
[   87.526461][ T5935]  ? vfs_write+0x9a0/0x9a0
[   87.530899][ T5935]  ? lockdep_hardirqs_on+0x98/0x150
[   87.536114][ T5935]  do_syscall_64+0x55/0xb0
[   87.540546][ T5935]  ? clear_bhb_loop+0x40/0x90
[   87.545243][ T5935]  ? clear_bhb_loop+0x40/0x90
[   87.549942][ T5935]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   87.555853][ T5935] RIP: 0033:0x7f84a975e98e
[   87.560298][ T5935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   87.579926][ T5935] RSP: 002b:00007f84aa65ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   87.588363][ T5935] RAX: ffffffffffffffda RBX: 00007f84aa6606c0 RCX: 00007f84a975e98e
[   87.596346][ T5935] RDX: 000000000000000f RSI: 00007f84aa6600a0 RDI: 0000000000000005
[   87.604331][ T5935] RBP: 00007f84aa660090 R08: 0000000000000000 R09: 0000000000000000
[   87.612316][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.620305][ T5935] R13: 00007f84a9a26038 R14: 00007f84a9a25fa0 R15: 00007ffdb4a2f768
[   87.628314][ T5935]  </TASK>
[   90.841672][ T5959] netlink: 'syz.0.37': attribute type 46 has an invalid length.
[   90.864955][ T5959] netlink: 2 bytes leftover after parsing attributes in process `syz.0.37'.
[   91.168620][ T5966] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   91.244161][ T5966] nla_validate_range_unsigned: 25 callbacks suppressed
[   91.244200][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.342359][ T5968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41'.
[   91.344580][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.431971][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.468495][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.513563][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.570095][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.601308][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.654747][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.700385][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.748383][ T5966] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   91.783343][ T5966] netlink: 'syz.1.41': attribute type 4 has an invalid length.
[   91.819941][ T5966] netlink: 'syz.1.41': attribute type 5 has an invalid length.
[   91.857158][ T5966] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.41'.
[   92.108878][ T5986] netlink: 'syz.3.47': attribute type 25 has an invalid length.
[   92.148870][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'.
[   92.328822][ T5992] netlink: 'syz.1.49': attribute type 2 has an invalid length.
[   92.374675][ T5992] netlink: 'syz.1.49': attribute type 1 has an invalid length.
[   92.392510][ T5992] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.49'.
[   92.830397][ T6004] syzkaller0: entered promiscuous mode
[   92.838431][ T6004] syzkaller0: entered allmulticast mode
[   93.050645][ T6009] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   93.110005][ T6009] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.54'.
[   93.515105][ T6011] netlink: 'syz.0.55': attribute type 29 has an invalid length.
[   93.594772][ T6012] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   98.195809][ T6011] netlink: 'syz.0.55': attribute type 29 has an invalid length.
[   99.048933][ T6047] netlink: 'syz.1.63': attribute type 21 has an invalid length.
[   99.072603][ T6047] netlink: 176 bytes leftover after parsing attributes in process `syz.1.63'.
[   99.352635][ T6057] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.67'.
[   99.614941][ T6063] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.753726][ T6067] netlink: 'syz.2.72': attribute type 21 has an invalid length.
[   99.774550][ T6067] IPv6: NLM_F_CREATE should be specified when creating new route
[   99.804047][ T6067] IPv6: Can't replace route, no match found
[   99.846839][ T6073] netlink: 'syz.2.72': attribute type 10 has an invalid length.
[   99.931094][ T6073] team0: Device wg1 is of different type
[  100.162777][ T6086] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.76'.
[  100.629562][ T6105] syz.3.82: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  100.652154][ T6105] CPU: 0 PID: 6105 Comm: syz.3.82 Not tainted syzkaller #0
[  100.659410][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  100.669497][ T6105] Call Trace:
[  100.672797][ T6105]  <TASK>
[  100.675748][ T6105]  dump_stack_lvl+0x18c/0x250
[  100.680463][ T6105]  ? show_regs_print_info+0x20/0x20
[  100.685692][ T6105]  ? load_image+0x420/0x420
[  100.690239][ T6105]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.696684][ T6105]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  100.703225][ T6105]  warn_alloc+0x246/0x340
[  100.707580][ T6105]  ? stack_trace_save+0xaa/0x100
[  100.712552][ T6105]  ? zone_watermark_ok_safe+0x230/0x230
[  100.718133][ T6105]  ? kasan_set_track+0x5f/0x70
[  100.722915][ T6105]  ? kasan_set_track+0x4e/0x70
[  100.727695][ T6105]  ? __kasan_kmalloc+0x8f/0xa0
[  100.732482][ T6105]  ? xsk_init_queue+0xad/0x100
[  100.737265][ T6105]  ? xsk_setsockopt+0x4c9/0x750
[  100.742133][ T6105]  ? do_sock_setsockopt+0x175/0x1a0
[  100.747352][ T6105]  ? __x64_sys_setsockopt+0x182/0x200
[  100.752748][ T6105]  __vmalloc_node_range+0x129/0x1320
[  100.758099][ T6105]  ? free_vm_area+0x50/0x50
[  100.762639][ T6105]  vmalloc_user+0x74/0x80
[  100.766989][ T6105]  ? xskq_create+0xbf/0x170
[  100.771519][ T6105]  xskq_create+0xbf/0x170
[  100.775874][ T6105]  xsk_init_queue+0xad/0x100
[  100.780487][ T6105]  xsk_setsockopt+0x4c9/0x750
[  100.785188][ T6105]  ? xsk_poll+0x670/0x670
[  100.789540][ T6105]  ? __fget_files+0x28/0x460
[  100.794153][ T6105]  ? aa_sock_opt_perm+0x74/0x100
[  100.799121][ T6105]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  100.804689][ T6105]  ? security_socket_setsockopt+0x7e/0xa0
[  100.810437][ T6105]  ? xsk_poll+0x670/0x670
[  100.814792][ T6105]  do_sock_setsockopt+0x175/0x1a0
[  100.819839][ T6105]  ? __fdget+0x180/0x210
[  100.824108][ T6105]  __x64_sys_setsockopt+0x182/0x200
[  100.829337][ T6105]  do_syscall_64+0x55/0xb0
[  100.833775][ T6105]  ? clear_bhb_loop+0x40/0x90
[  100.838474][ T6105]  ? clear_bhb_loop+0x40/0x90
[  100.843178][ T6105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  100.849095][ T6105] RIP: 0033:0x7f3d65d9e159
[  100.853536][ T6105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.873140][ T6105] RSP: 002b:00007f3d63fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  100.873179][ T6105] RAX: ffffffffffffffda RBX: 00007f3d66026180 RCX: 00007f3d65d9e159
[  100.873190][ T6105] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  100.873201][ T6105] RBP: 00007f3d65e3506b R08: 0000000000000004 R09: 0000000000000000
[  100.873211][ T6105] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  100.873226][ T6105] R13: 00007f3d66026218 R14: 00007f3d66026180 R15: 00007ffe550a3428
[  100.873258][ T6105]  </TASK>
[  100.932526][ T6105] Mem-Info:
[  100.941386][ T6105] active_anon:5186 inactive_anon:0 isolated_anon:0
[  100.941386][ T6105]  active_file:12855 inactive_file:39957 isolated_file:0
[  100.941386][ T6105]  unevictable:768 dirty:472 writeback:0
[  100.941386][ T6105]  slab_reclaimable:9925 slab_unreclaimable:95373
[  100.941386][ T6105]  mapped:24188 shmem:1361 pagetables:561
[  100.941386][ T6105]  sec_pagetables:0 bounce:0
[  100.941386][ T6105]  kernel_misc_reclaimable:0
[  100.941386][ T6105]  free:1346476 free_pcp:9918 free_cma:0
[  100.990128][ T6105] Node 0 active_anon:20744kB inactive_anon:0kB active_file:51420kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96752kB dirty:1876kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10728kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no
[  101.033699][ T6105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  101.074921][ T6105] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.109048][ T6105] lowmem_reserve[]: 0 2521 2522 2522 2522
[  101.116912][ T6105] Node 0 DMA32 free:1477784kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20648kB inactive_anon:0kB active_file:51420kB inactive_file:158816kB unevictable:1536kB writepending:1864kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:22476kB local_pcp:5128kB free_cma:0kB
[  101.160075][ T6105] lowmem_reserve[]: 0 0 0 0 0
[  101.166160][ T6105] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  101.202934][ T6105] lowmem_reserve[]: 0 0 0 0 0
[  101.208472][ T6105] Node 1 Normal free:3892552kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:12320kB free_cma:0kB
[  101.245832][ T6105] lowmem_reserve[]: 0 0 0 0 0
[  101.250900][ T6105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  101.278380][ T6105] Node 0 DMA32: 784*4kB (UM) 573*8kB (UME) 529*16kB (UME) 541*32kB (UME) 272*64kB (UME) 54*128kB (UME) 21*256kB (UME) 10*512kB (UM) 4*1024kB (UM) 4*2048kB (ME) 341*4096kB (M) = 1477336kB
[  101.303360][ T6105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  101.321472][ T6105] Node 1 Normal: 222*4kB (UME) 54*8kB (UME) 32*16kB (UME) 36*32kB (UME) 15*64kB (UE) 2*128kB (ME) 1*256kB (E) 2*512kB (UM) 0*1024kB 0*2048kB 949*4096kB (M) = 3892584kB
[  101.353636][ T6105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  101.366820][ T6105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.376315][ T6105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  101.404651][ T6105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.434674][ T6105] 54175 total pagecache pages
[  101.441830][ T6105] 0 pages in swap cache
[  101.452513][ T6105] Free swap  = 124996kB
[  101.456856][ T6105] Total swap = 124996kB
[  101.461058][ T6105] 2097051 pages RAM
[  101.465128][ T6105] 0 pages HighMem/MovableOnly
[  101.469941][ T6105] 416965 pages reserved
[  101.474166][ T6105] 0 pages cma reserved
[  103.114129][ T6141] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.90'.
[  103.685063][ T6155] syzkaller1: tun_chr_ioctl cmd 1074025677
[  103.738088][ T6155] syzkaller1: linktype set to 769
[  103.808560][ T6155] netlink: 'syz.0.94': attribute type 3 has an invalid length.
[  103.975886][ T6155] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.94'.
[  104.204814][ T6166] netlink: 'syz.2.95': attribute type 25 has an invalid length.
[  104.228349][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[  104.393312][ T6168] netlink: 'syz.0.97': attribute type 2 has an invalid length.
[  104.525429][ T6168] netlink: 14 bytes leftover after parsing attributes in process `syz.0.97'.
[  104.651277][ T6183] netlink: 'syz.2.98': attribute type 10 has an invalid length.
[  104.732753][ T6183] macvlan0: entered promiscuous mode
[  104.811440][ T6183] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  104.955410][ T6194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.100'.
[  105.012151][ T6192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.100'.
[  105.646945][ T6209] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[  105.655397][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.105'.
[  105.672331][ T6209] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  105.679967][ T6209] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.707791][ T6209] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  106.211239][ T6218] netlink: 'syz.0.107': attribute type 4 has an invalid length.
[  106.220519][ T6218] netlink: 152 bytes leftover after parsing attributes in process `syz.0.107'.
[  106.275295][ T6218] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  106.415414][ T6218] syz.0.107 (6218) used greatest stack depth: 20008 bytes left
[  106.443064][ T6228] netlink: 'syz.2.110': attribute type 29 has an invalid length.
[  106.474251][ T6228] netlink: 'syz.2.110': attribute type 29 has an invalid length.
[  106.508088][ T6228] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.110'.
[  107.949190][ T6269] macsec0: entered promiscuous mode
[  107.994823][ T6269] macsec0: entered allmulticast mode
[  108.034573][ T6269] veth1_macvtap: entered allmulticast mode
[  109.085693][ T6281] syzkaller0: entered promiscuous mode
[  109.098908][ T6281] syzkaller0: entered allmulticast mode
[  111.031750][ T6301] netlink: 'syz.1.128': attribute type 21 has an invalid length.
[  111.042380][ T6301] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.100179][ T6304] netlink: 'syz.2.129': attribute type 2 has an invalid length.
[  111.113808][ T6304] netlink: 'syz.2.129': attribute type 8 has an invalid length.
[  111.134087][ T6304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.129'.
[  111.748276][ T6313] netlink: 'syz.2.132': attribute type 27 has an invalid length.
[  111.764276][ T6313] netlink: 164 bytes leftover after parsing attributes in process `syz.2.132'.
[  114.402324][ T6332] netlink: 'syz.2.135': attribute type 10 has an invalid length.
[  114.448190][ T6332] geneve0: entered promiscuous mode
[  114.483490][ T6332] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  114.669175][ T6353] netlink: 'syz.2.139': attribute type 21 has an invalid length.
[  114.692294][ T6353] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[  114.702328][ T6353] netlink: 144 bytes leftover after parsing attributes in process `syz.2.139'.
[  114.884347][ T6359] syzkaller0: entered promiscuous mode
[  114.893287][ T6359] syzkaller0: entered allmulticast mode
[  114.967594][ T6357] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  117.106006][ T6375] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.147'.
[  117.358283][ T6387] netlink: 'syz.3.152': attribute type 10 has an invalid length.
[  117.381129][ T6387] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  117.404294][ T6387] team0: Port device wlan1 added
[  117.429428][ T6388] netlink: 'syz.0.150': attribute type 12 has an invalid length.
[  117.514982][ T6388] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.150'.
[  118.072622][ T6404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.302245][ T6413] netlink: 'syz.2.158': attribute type 10 has an invalid length.
[  118.333088][ T6413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'.
[  118.353222][ T6413] ipvlan1: entered promiscuous mode
[  118.452036][ T6413] ipvlan1: entered allmulticast mode
[  118.458340][ T6413] veth0_vlan: entered allmulticast mode
[  118.519113][ T6413] bridge0: port 2(ipvlan1) entered blocking state
[  118.527362][ T6413] bridge0: port 2(ipvlan1) entered disabled state
[  118.578550][ T6413] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  118.708344][ T6413] syz.2.158 (6413) used greatest stack depth: 18216 bytes left
[  118.760604][ T6429] netlink: 128 bytes leftover after parsing attributes in process `syz.0.161'.
[  118.816933][ T6429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.931973][ T6434] netlink: 128 bytes leftover after parsing attributes in process `syz.0.161'.
[  118.943373][ T6434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.311532][ T6435] delete_channel: no stack
[  119.851029][ T6446] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[  119.861855][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'.
[  120.256357][ T6477] netlink: 'syz.0.174': attribute type 2 has an invalid length.
[  120.323075][ T6477] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[  120.385166][ T6477] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.174'.
[  120.882019][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.177'.
[  120.917166][ T6488] : renamed from virt_wifi0
[  124.157853][ T6558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.324432][ T6563] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.184'.
[  124.725519][ T6583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.192'.
[  124.736795][ T6583] bridge0: port 2(ip6gretap0) entered blocking state
[  124.745046][ T6583] bridge0: port 2(ip6gretap0) entered disabled state
[  124.754051][ T6583] ip6gretap0: entered allmulticast mode
[  124.761726][ T6583] ip6gretap0: entered promiscuous mode
[  124.768463][ T6583] bridge0: port 2(ip6gretap0) entered blocking state
[  124.775656][ T6583] bridge0: port 2(ip6gretap0) entered forwarding state
[  124.955616][ T6588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'.
[  124.964770][ T6588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'.
[  124.974071][ T6586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'.
[  124.983645][ T6587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'.
[  124.992942][ T6588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'.
[  125.318297][ T6597] netlink: 'syz.2.195': attribute type 3 has an invalid length.
[  125.326401][ T6597] netlink: 'syz.2.195': attribute type 16 has an invalid length.
[  125.334262][ T6597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.195'.
[  127.121041][ T5787] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  127.942807][ T6599] netlink: 'syz.1.196': attribute type 10 has an invalid length.
[  127.961136][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.984885][ T6599] bridge_slave_1: left allmulticast mode
[  127.994901][ T6599] bridge_slave_1: left promiscuous mode
[  128.004739][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.029549][ T6599] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  128.077010][ T6616] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.201'.
[  129.183146][ T6660] raw_sendmsg: syz.1.215 forgot to set AF_INET. Fix it!
[  129.321306][ T6664] netlink: 'syz.1.215': attribute type 15 has an invalid length.
[  129.430069][ T6664] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.215'.
[  129.727905][ T6674] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.218'.
[  129.975077][ T6684] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1 (while UP)
[  130.233923][ T6693] netlink: 'syz.3.225': attribute type 3 has an invalid length.
[  130.253451][ T6693] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.225'.
[  130.286170][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'.
[  130.330393][ T6695] netlink: 128 bytes leftover after parsing attributes in process `syz.3.225'.
[  131.262763][ T6717] netlink: 'syz.3.230': attribute type 10 has an invalid length.
[  131.275665][ T6717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.230'.
[  131.304678][ T6717] dummy0: entered allmulticast mode
[  131.310255][ T6717] bridge0: port 3(dummy0) entered blocking state
[  131.332261][ T6717] bridge0: port 3(dummy0) entered disabled state
[  131.377102][ T6717] dummy0: entered promiscuous mode
[  131.395791][ T6717] bridge0: port 3(dummy0) entered blocking state
[  131.402288][ T6717] bridge0: port 3(dummy0) entered forwarding state
[  133.120642][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.127682][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.444923][ T6750] syzkaller0: entered promiscuous mode
[  133.472885][ T6750] syzkaller0: entered allmulticast mode
[  133.516506][ T6754] netlink: 'syz.3.241': attribute type 10 has an invalid length.
[  134.062566][ T6763] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[  134.094421][ T6763] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.243'.
[  134.135240][ T6763] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[  136.138026][ T6794] netlink: 'syz.0.249': attribute type 4 has an invalid length.
[  136.175142][ T6794] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.249'.
[  136.398750][ T6803] netlink: 'syz.2.252': attribute type 3 has an invalid length.
[  136.425710][ T6803] netlink: 'syz.2.252': attribute type 1 has an invalid length.
[  136.455825][ T6803] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.252'.
[  136.673528][ T6816] netlink: 64 bytes leftover after parsing attributes in process `syz.3.257'.
[  136.972143][ T6831] netlink: 'syz.1.261': attribute type 21 has an invalid length.
[  137.020402][ T6831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  137.027720][ T6831] IPv6: NLM_F_CREATE should be set when creating new route
[  137.035091][ T6831] IPv6: NLM_F_CREATE should be set when creating new route
[  137.042343][ T6831] IPv6: NLM_F_CREATE should be set when creating new route
[  137.308336][ T6838] netlink: 'syz.3.262': attribute type 10 has an invalid length.
[  137.376405][ T6838] geneve0: entered promiscuous mode
[  137.459659][ T6838] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  137.642954][ T6844] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[  137.667911][ T6844] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.265'.
[  138.510385][ T6874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.518381][ T6874] IPv6: NLM_F_CREATE should be set when creating new route
[  138.527041][ T6874] IPv6: NLM_F_CREATE should be set when creating new route
[  138.535200][ T6874] IPv6: NLM_F_CREATE should be set when creating new route
[  138.729730][ T6874] netlink: 'syz.1.274': attribute type 9 has an invalid length.
[  138.757111][ T6874] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.274'.
[  139.092338][ T6876] netlink: 'syz.1.274': attribute type 9 has an invalid length.
[  139.102309][ T6876] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.274'.
[  139.524587][ T6883] delete_channel: no stack
[  140.010519][ T6902] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  140.023531][ T6902] syzkaller0: entered promiscuous mode
[  140.034551][ T6902] syzkaller0: entered allmulticast mode
[  140.115963][ T6902] netlink: 'syz.1.282': attribute type 6 has an invalid length.
[  140.133494][ T6902] netlink: 164 bytes leftover after parsing attributes in process `syz.1.282'.
[  140.480781][ T6911] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[  140.490172][ T6911] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.285'.
[  140.795657][ T6924] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.286'.
[  141.379899][ T6933] syzkaller1: tun_chr_ioctl cmd 2147767521
[  141.389793][ T6933] syzkaller1: tun_chr_ioctl cmd 2147767521
[  141.414824][ T6933] syzkaller1: tun_chr_ioctl cmd 2147767521
[  141.425744][ T6933] syzkaller1: tun_chr_ioctl cmd 2147767521
[  141.458632][ T6933] syzkaller1: tun_chr_ioctl cmd 2147767521
[  141.461669][ T6942] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.290'.
[  141.531646][ T6942] openvswitch: netlink: Duplicate key (type 0).
[  142.600685][ T6965] netlink: 'syz.0.295': attribute type 21 has an invalid length.
[  142.970589][ T6971] netlink: 'syz.3.296': attribute type 1 has an invalid length.
[  142.988119][ T6971] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.296'.
[  143.828201][ T6987] netlink: 'syz.1.301': attribute type 3 has an invalid length.
[  143.874825][ T6987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.301'.
[  144.846227][ T7006] : renamed from batadv0 (while UP)
[  145.487463][ T7019] netlink: 'syz.0.308': attribute type 1 has an invalid length.
[  145.514603][ T7019] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.308'.
[  146.172767][ T7029] netlink: 'syz.3.313': attribute type 2 has an invalid length.
[  146.264225][ T7029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.313'.
[  146.339206][ T7030] netlink: 'syz.3.313': attribute type 2 has an invalid length.
[  146.404654][ T7030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.313'.
[  147.585061][ T7063] pim6reg1: entered promiscuous mode
[  148.155785][ T7075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.163705][ T7075] IPv6: NLM_F_CREATE should be set when creating new route
[  148.172199][ T7075] IPv6: NLM_F_CREATE should be set when creating new route
[  148.180167][ T7075] IPv6: NLM_F_CREATE should be set when creating new route
[  148.236435][ T7070] netlink: 'syz.1.323': attribute type 33 has an invalid length.
[  148.348504][ T7075] netlink: 'syz.2.326': attribute type 9 has an invalid length.
[  148.363809][ T7075] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.326'.
[  148.704590][ T7084] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.329'.
[  149.004079][ T7080] netlink: 'syz.2.326': attribute type 9 has an invalid length.
[  149.042235][ T7080] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.326'.
[  149.579767][ T7097] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.332'.
[  149.880514][ T7109] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.336'.
[  150.275627][ T7117] pim6reg0: tun_chr_ioctl cmd 1074025672
[  150.281349][ T7117] pim6reg0: ignored: set checksum disabled
[  151.078494][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.344'.
[  152.292631][ T7161] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  152.805616][ T7167] netlink: 'syz.2.349': attribute type 10 has an invalid length.
[  152.996472][ T7167] team0: Port device geneve1 added
[  153.240168][ T7188] netlink: 'syz.1.352': attribute type 13 has an invalid length.
[  153.279639][ T7188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.352'.
[  153.360386][ T7188] syz_tun: refused to change device tx_queue_len
[  153.385299][ T7188] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  154.098299][ T7198] syzkaller0: entered promiscuous mode
[  154.124124][ T7198] syzkaller0: entered allmulticast mode
[  157.156684][ T7228] : renamed from bond0 (while UP)
[  157.243106][ T7230] netlink: 128 bytes leftover after parsing attributes in process `syz.2.360'.
[  157.273154][ T7230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.451515][ T7232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.557139][ T7237] netlink: 'syz.2.363': attribute type 21 has an invalid length.
[  157.585337][ T7237] netlink: 156 bytes leftover after parsing attributes in process `syz.2.363'.
[  157.679878][ T7240] netlink: 'syz.3.364': attribute type 1 has an invalid length.
[  157.701753][ T7240] netlink: 5 bytes leftover after parsing attributes in process `syz.3.364'.
[  157.946150][ T7241] tun0: tun_chr_ioctl cmd 1074025681
[  158.256625][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.361039][ T7246] team0: Port device team_slave_0 removed
[  158.373454][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.441512][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.473380][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.493995][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.504534][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.540953][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.558060][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.596424][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.611814][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.667246][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.685239][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.715594][ T7246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.365'.
[  158.745363][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.816396][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  158.848949][ T7246] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  159.124311][ T7282] netlink: 'syz.1.374': attribute type 21 has an invalid length.
[  159.468727][ T7298] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  159.534173][ T7298] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  159.601485][ T7298] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  159.615575][ T7307] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  159.635657][ T7298] netlink: 'syz.0.377': attribute type 29 has an invalid length.
[  160.100960][ T7312] netlink: 'syz.3.382': attribute type 10 has an invalid length.
[  160.237788][ T7312] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  163.442386][ T7382] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[  163.475639][ T7382] __nla_validate_parse: 72 callbacks suppressed
[  163.475653][ T7382] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.398'.
[  163.648359][ T7385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.399'.
[  163.856119][ T7387] syzkaller0: entered promiscuous mode
[  163.861825][ T7387] syzkaller0: entered allmulticast mode
[  164.879692][ T7394] netlink: 'syz.3.403': attribute type 21 has an invalid length.
[  164.932073][ T7394] netlink: 156 bytes leftover after parsing attributes in process `syz.3.403'.
[  164.932291][ T7399] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.404'.
[  165.041716][ T7402] netlink: 'syz.1.405': attribute type 10 has an invalid length.
[  165.117591][ T7404] netlink: 128 bytes leftover after parsing attributes in process `syz.3.403'.
[  165.127517][ T7404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.145188][ T7404] tap0: tun_chr_ioctl cmd 1074025676
[  165.150513][ T7404] tap0: owner set to 776
[  165.754936][ T7418] syzkaller0: entered promiscuous mode
[  165.761101][ T7418] syzkaller0: entered allmulticast mode
[  165.773316][ T7417] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  166.674823][ T7440] syzkaller0: tun_chr_ioctl cmd 2147767507
[  167.096622][ T7446] netlink: 128 bytes leftover after parsing attributes in process `syz.0.419'.
[  167.157116][ T7446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.352166][ T7456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.420'.
[  167.446810][ T7463] netlink: 'syz.3.423': attribute type 2 has an invalid length.
[  167.465090][ T7463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.423'.
[  169.435057][ T5787] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  170.266296][ T7533] netlink: 'syz.2.442': attribute type 27 has an invalid length.
[  170.290130][ T7533] netlink: 'syz.2.442': attribute type 27 has an invalid length.
[  170.471697][ T7540] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.444'.
[  170.527815][ T7542] netlink: 'syz.1.445': attribute type 29 has an invalid length.
[  170.556233][ T7542] netlink: 'syz.1.445': attribute type 29 has an invalid length.
[  170.575173][ T7542] netlink: 'syz.1.445': attribute type 29 has an invalid length.
[  170.935854][ T7561] netlink: 'syz.3.449': attribute type 10 has an invalid length.
[  170.990699][ T7559] can: request_module (can-proto-0) failed.
[  171.002306][ T7561] veth1_vlan: entered allmulticast mode
[  171.078976][ T7561] team0: Device veth1_vlan failed to register rx_handler
[  171.141488][ T7564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.450'.
[  171.155113][ T7572] can: request_module (can-proto-0) failed.
[  171.155681][ T7564] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  171.203777][ T7573] netlink: 'syz.3.449': attribute type 10 has an invalid length.
[  171.237861][ T7573] team0: Device veth1_vlan failed to register rx_handler
[  171.273925][ T7570] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.448'.
[  171.860787][ T7563] delete_channel: no stack
[  172.547058][ T7619] syz.2.461[7619] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.547218][ T7619] syz.2.461[7619] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.607399][ T7619] netlink: 'syz.2.461': attribute type 8 has an invalid length.
[  172.681018][ T7619] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.461'.
[  172.951476][ T7626] netlink: 'syz.2.463': attribute type 11 has an invalid length.
[  172.979459][ T7626] netlink: 'syz.2.463': attribute type 2 has an invalid length.
[  172.995502][ T7626] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.463'.
[  173.183011][ T6021] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  174.369783][ T5787] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[  174.496705][ T7659] delete_channel: no stack
[  174.755835][ T7673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.478'.
[  175.886937][ T7705] netlink: 763 bytes leftover after parsing attributes in process `syz.3.490'.
[  176.357427][ T7736] validate_nla: 2 callbacks suppressed
[  176.357438][ T7736] netlink: 'syz.3.498': attribute type 3 has an invalid length.
[  176.383263][ T7736] netlink: 'syz.3.498': attribute type 6 has an invalid length.
[  176.400621][ T7736] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.498'.
[  176.472644][ T7738] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  176.480524][ T7738] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.499'.
[  176.598678][ T7742] netlink: 'syz.1.501': attribute type 9 has an invalid length.
[  176.610325][ T7742] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.501'.
[  176.927943][ T7740] syzkaller0: entered promiscuous mode
[  176.944895][ T7740] syzkaller0: entered allmulticast mode
[  176.958385][ T7750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[  177.735794][ T7768] netlink: 'syz.1.509': attribute type 27 has an invalid length.
[  177.762416][ T7768] netlink: 164 bytes leftover after parsing attributes in process `syz.1.509'.
[  177.786030][ T7770] netlink: 'syz.0.510': attribute type 2 has an invalid length.
[  177.794058][ T7770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.510'.
[  177.892743][ T7781] netlink: 830 bytes leftover after parsing attributes in process `syz.3.512'.
[  178.112204][ T7790] netlink: 14 bytes leftover after parsing attributes in process `syz.2.515'.
[  178.376001][ T5787] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  178.384744][ T5787] Bluetooth: hci0: Injecting HCI hardware error event
[  178.393870][ T5782] Bluetooth: hci0: hardware error 0x00
[  178.719294][ T7810] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.521'.
[  179.013242][ T7815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.518'.
[  179.036230][ T7817] bridge_slave_1: entered promiscuous mode
[  180.454798][ T5782] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  183.018053][ T7853] team0: Port device team_slave_0 removed
[  183.030014][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.054963][ T7855] netlink: 'syz.1.531': attribute type 10 has an invalid length.
[  183.081426][ T7855] macvlan0: entered promiscuous mode
[  183.101788][ T7855] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  183.153744][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.167200][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.197838][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.208285][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.220396][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.265747][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.285744][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.294609][ T7856] netlink: 'syz.1.531': attribute type 39 has an invalid length.
[  183.712524][ T7887] syzkaller0: entered allmulticast mode
[  183.745890][ T7887] syzkaller0: entered promiscuous mode
[  184.133835][ T7880] __nla_validate_parse: 1 callbacks suppressed
[  184.133852][ T7880] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.536'.
[  184.301265][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.539'.
[  184.782874][ T7917] syzkaller0: entered promiscuous mode
[  184.790702][ T7917] syzkaller0: entered allmulticast mode
[  189.986814][ T7952] netlink: 14 bytes leftover after parsing attributes in process `syz.2.552'.
[  190.065809][ T7959] validate_nla: 27 callbacks suppressed
[  190.065824][ T7959] netlink: 'syz.1.553': attribute type 21 has an invalid length.
[  190.092218][ T7959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.553'.
[  190.405729][ T7966] netlink: 'syz.0.555': attribute type 39 has an invalid length.
[  192.965278][ T8012] netlink: 'syz.2.563': attribute type 3 has an invalid length.
[  193.072673][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.563'.
[  194.495231][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.501702][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  198.453129][ T8073] netlink: 'syz.1.578': attribute type 22 has an invalid length.
[  198.468976][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'.
[  198.502351][ T8075] netlink: 'syz.1.578': attribute type 22 has an invalid length.
[  198.516234][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'.
[  198.880818][ T8082] : entered promiscuous mode
[  199.026309][ T8088] netlink: 'syz.2.583': attribute type 1 has an invalid length.
[  199.035340][ T8088] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.583'.
[  199.180388][ T8097] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.586'.
[  199.359605][ T8104] sit0: entered allmulticast mode
[  199.506810][ T8110] netlink: 'syz.2.587': attribute type 10 has an invalid length.
[  199.598412][ T8110] veth0_macvtap: left promiscuous mode
[  199.691663][ T8110] veth0_macvtap: entered promiscuous mode
[  199.729339][ T8110] team0: Device macvtap0 failed to register rx_handler
[  199.770222][ T8110] veth0_macvtap: left promiscuous mode
[  200.233379][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.394431][ T8128] tun0: tun_chr_ioctl cmd 1074812118
[  200.887180][ T8139] netlink: 144 bytes leftover after parsing attributes in process `syz.3.594'.
[  200.903536][ T8139] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  201.424085][ T8160] netlink: 'syz.3.599': attribute type 1 has an invalid length.
[  201.443147][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'.
[  201.501707][ T8152] sit0: entered allmulticast mode
[  201.657265][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  201.663379][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  201.669891][ T5088] Bluetooth: hci1: command 0x0406 tx timeout
[  202.942935][ T8198] netlink: 'syz.2.609': attribute type 3 has an invalid length.
[  202.950931][ T8198] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.609'.
[  203.002608][ T8199] syz.2.609[8199] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  203.003487][ T8199] syz.2.609[8199] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  203.045581][ T8198] syz.2.609[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  203.075863][ T8198] syz.2.609[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  203.165548][ T8206] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.611'.
[  203.249288][ T8205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'.
[  203.266333][ T8204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'.
[  203.855667][ T8214] cgroup: fork rejected by pids controller in /syz2
[  204.681556][ T8226] delete_channel: no stack
[  205.833598][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.841537][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.852046][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.903824][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  205.945799][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  205.956997][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.264424][ T8284] netlink: 'syz.1.634': attribute type 46 has an invalid length.
[  206.393419][ T8282] netlink: 'syz.3.633': attribute type 10 has an invalid length.
[  206.415760][ T8282] team0: Device ipvlan1 failed to register rx_handler
[  206.683312][ T8278] chnl_net:caif_netlink_parms(): no params data found
[  206.778438][ T8292] delete_channel: no stack
[  206.973404][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.995183][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.023032][ T8278] bridge_slave_0: entered allmulticast mode
[  207.039990][ T8278] bridge_slave_0: entered promiscuous mode
[  207.086009][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.127145][ T8305] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.637'.
[  207.137268][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.155082][ T8278] bridge_slave_1: entered allmulticast mode
[  207.171612][ T8305] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  207.180475][ T8278] bridge_slave_1: entered promiscuous mode
[  207.270978][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.325130][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.383223][ T8278] team0: Port device team_slave_0 added
[  207.400843][ T8278] team0: Port device team_slave_1 added
[  207.430978][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.445338][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.501024][ T8278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.529181][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.547254][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.690399][ T8278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.987603][ T8278] hsr_slave_0: entered promiscuous mode
[  207.994259][ T8278] hsr_slave_1: entered promiscuous mode
[  208.000988][ T8278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.008651][ T8278] Cannot create hsr debugfs directory
[  208.015134][ T8317] sit0: entered allmulticast mode
[  208.060184][ T5787] Bluetooth: hci1: command tx timeout
[  208.377202][ T8278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.518089][ T8278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.658396][ T8278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.862023][ T8278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.414053][ T8278] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  209.463911][ T8278] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  209.533449][ T8278] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  209.968307][ T8278] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  210.135312][ T5787] Bluetooth: hci1: command tx timeout
[  210.681738][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.722691][ T8278] 8021q: adding VLAN 0 to HW filter on device team0
[  210.757964][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.765642][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.799388][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.806556][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.965069][ T8370] nr0: tun_chr_ioctl cmd 1074025677
[  210.970419][ T8370] nr0: linktype set to 780
[  210.990865][ T8278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  211.008814][ T8278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.328493][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.660'.
[  211.371127][ T8384] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  211.462803][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.502725][ T8394] sctp: [Deprecated]: syz.1.662 (pid 8394) Use of int in maxseg socket option.
[  211.502725][ T8394] Use struct sctp_assoc_value instead
[  211.568907][ T8278] veth0_vlan: entered promiscuous mode
[  211.592996][ T8278] veth1_vlan: entered promiscuous mode
[  211.628768][ T8278] veth0_macvtap: entered promiscuous mode
[  211.640832][ T8278] veth1_macvtap: entered promiscuous mode
[  211.671849][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.697083][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.708281][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.719155][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.729345][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.744713][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.770899][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.781727][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.806531][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.834313][ T8403] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.665'.
[  211.844413][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.864857][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.875385][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.886224][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.905745][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.917015][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.933061][ T8278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.944239][ T8278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.956031][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.974323][ T8278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.983967][ T8278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.000841][ T8278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.010553][ T8278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.028857][ T8405] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.666'.
[  212.176501][ T6547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.196892][ T6547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.215885][ T5787] Bluetooth: hci1: command tx timeout
[  212.270510][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.291053][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.537622][ T8418] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.627'.
[  212.574282][ T8417] netlink: 'syz.3.670': attribute type 10 has an invalid length.
[  213.301477][ T8417] team0: Port device geneve1 added
[  213.452842][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.482123][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.508476][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.523485][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.535336][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.551789][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.587142][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.625511][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  213.642671][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  214.305265][ T5787] Bluetooth: hci1: command tx timeout
[  216.624044][ T8512] syzkaller0: entered promiscuous mode
[  216.633998][ T8512] syzkaller0: entered allmulticast mode
[  219.369893][ T8521] __nla_validate_parse: 29 callbacks suppressed
[  219.369908][ T8521] netlink: 128 bytes leftover after parsing attributes in process `syz.0.699'.
[  219.385940][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.458105][ T8515] syzkaller0: entered promiscuous mode
[  219.463619][ T8515] syzkaller0: entered allmulticast mode
[  219.497860][ T8535] netlink: 132 bytes leftover after parsing attributes in process `syz.1.701'.
[  219.498647][ T8541] netlink: 'syz.0.702': attribute type 3 has an invalid length.
[  219.534635][ T8538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.701'.
[  219.544920][ T8541] netlink: 'syz.0.702': attribute type 1 has an invalid length.
[  219.570635][ T8541] netlink: 'syz.0.702': attribute type 2 has an invalid length.
[  219.585293][ T8541] netlink: 198040 bytes leftover after parsing attributes in process `syz.0.702'.
[  221.606781][ T8563] netlink: 763 bytes leftover after parsing attributes in process `syz.2.707'.
[  222.170805][ T5787] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  222.337025][ T8590] netlink: 'syz.2.714': attribute type 10 has an invalid length.
[  222.398646][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.428653][ T8590] bridge_slave_1: left allmulticast mode
[  222.435373][ T8590] bridge_slave_1: left promiscuous mode
[  222.444542][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.589279][ T8590] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  223.159190][ T8609] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.719'.
[  223.510727][ T8620] netlink: 'syz.2.724': attribute type 21 has an invalid length.
[  223.523896][ T8620] IPv6: NLM_F_CREATE should be specified when creating new route
[  223.533729][ T8620] IPv6: Can't replace route, no match found
[  223.759353][ T8625] netlink: 128 bytes leftover after parsing attributes in process `syz.2.725'.
[  223.786948][ T8625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.840815][ T8627] netlink: 'syz.3.726': attribute type 17 has an invalid length.
[  223.864615][ T8627] netlink: 'syz.3.726': attribute type 16 has an invalid length.
[  223.872466][ T8627] netlink: 152 bytes leftover after parsing attributes in process `syz.3.726'.
[  224.216012][ T8637] tap0: tun_chr_ioctl cmd 1074820166
[  224.447948][ T8646] netlink: 'syz.2.731': attribute type 3 has an invalid length.
[  224.504329][ T8646] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.731'.
[  224.645608][ T8650] netlink: 152 bytes leftover after parsing attributes in process `syz.2.731'.
[  224.747744][ T8650] bond0: (slave bond_slave_0): Releasing backup interface
[  224.804908][ T8650] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  225.017780][ T8657] tap0: tun_chr_ioctl cmd 1074025677
[  225.023285][ T8657] tap0: linktype set to 773
[  225.387863][ T8665] netlink: 'syz.1.737': attribute type 10 has an invalid length.
[  225.428791][ T8664] netlink: 'syz.1.737': attribute type 10 has an invalid length.
[  226.101019][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.266543][ T8687] netlink: 'syz.1.743': attribute type 10 has an invalid length.
[  226.369164][ T8692] netlink: 144 bytes leftover after parsing attributes in process `syz.0.745'.
[  227.528703][ T8731] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.751'.
[  227.576903][ T8731] openvswitch: netlink: IP tunnel dst address not specified
[  227.720880][ T8737] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.754'.
[  227.880606][ T8741] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.753'.
[  227.929806][ T8741] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  227.945791][ T8748] netlink: 'syz.1.755': attribute type 2 has an invalid length.
[  227.977258][ T8748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.755'.
[  228.378596][ T8753] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.759'.
[  228.487627][ T8755] netlink: 'syz.0.758': attribute type 10 has an invalid length.
[  228.507214][ T8755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.758'.
[  228.543964][ T8755] batman_adv: batadv0: Adding interface: virt_wifi0
[  228.560694][ T8758] netlink: 'syz.0.758': attribute type 1 has an invalid length.
[  228.571631][ T8755] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.606320][ T8758] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.758'.
[  228.641740][ T8755] batman_adv: batadv0: Interface activated: virt_wifi0
[  229.308179][ T8768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.900782][ T8788] __nla_validate_parse: 1 callbacks suppressed
[  229.900798][ T8788] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.766'.
[  229.995417][ T8788] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  230.307833][ T8798] netlink: 'syz.2.769': attribute type 10 has an invalid length.
[  230.334671][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.769'.
[  230.343905][ T8798] ipvlan1: entered promiscuous mode
[  230.392580][ T8798] ipvlan1: entered allmulticast mode
[  230.414753][ T8798] veth0_vlan: entered allmulticast mode
[  230.439954][ T8798] bridge0: port 2(ipvlan1) entered blocking state
[  230.469774][ T8798] bridge0: port 2(ipvlan1) entered disabled state
[  230.497673][ T8798] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  230.525392][ T8806] nla_validate_range_unsigned: 25 callbacks suppressed
[  230.525407][ T8806] netlink: 'syz.0.771': attribute type 11 has an invalid length.
[  230.540932][ T8806] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.771'.
[  230.810783][ T8811] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.772'.
[  230.838730][ T8813] netlink: 'syz.0.774': attribute type 29 has an invalid length.
[  230.857617][ T8813] netlink: 'syz.0.774': attribute type 29 has an invalid length.
[  230.878147][ T8814] virt_wifi0: mtu greater than device maximum
[  230.953964][ T8819] netlink: 'syz.2.773': attribute type 3 has an invalid length.
[  231.285768][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'.
[  234.565575][ T8843] netlink: 'syz.0.779': attribute type 21 has an invalid length.
[  234.587591][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.779'.
[  234.976730][ T8860] syzkaller0: entered promiscuous mode
[  234.986435][ T8860] syzkaller0: entered allmulticast mode
[  234.992818][ T8852] netlink: 'syz.1.783': attribute type 10 has an invalid length.
[  235.127280][ T8852] team0: Device ipvlan1 failed to register rx_handler
[  235.243721][ T8867] netlink: 'syz.2.786': attribute type 6 has an invalid length.
[  235.478904][ T8880] netlink: 102020 bytes leftover after parsing attributes in process `syz.2.789'.
[  235.842444][ T8892] tap0: tun_chr_ioctl cmd 1074025675
[  235.874667][ T8892] tap0: persist enabled
[  236.556842][ T8902] syzkaller0: entered promiscuous mode
[  236.562335][ T8902] syzkaller0: entered allmulticast mode
[  238.480171][ T8919] netlink: 'syz.3.798': attribute type 39 has an invalid length.
[  238.741379][ T8932] netlink: 128 bytes leftover after parsing attributes in process `syz.1.801'.
[  238.792081][ T8932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.209779][ T8980] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.811'.
[  240.582035][ T8991] netlink: 60 bytes leftover after parsing attributes in process `syz.1.812'.
[  240.652178][ T8991] netlink: 60 bytes leftover after parsing attributes in process `syz.1.812'.
[  240.762398][ T8985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.812'.
[  240.833607][ T8988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.812'.
[  241.355144][ T9010] netlink: 'syz.0.817': attribute type 2 has an invalid length.
[  241.393891][ T9010] netlink: 164 bytes leftover after parsing attributes in process `syz.0.817'.
[  244.144261][ T9057] netlink: 'syz.1.830': attribute type 21 has an invalid length.
[  244.225243][ T9057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.830'.
[  244.628983][ T9065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.831'.
[  244.676963][ T9047] netlink: 188 bytes leftover after parsing attributes in process `syz.2.828'.
[  245.489254][ T9076] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.834'.
[  245.615844][ T9076] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  245.736203][ T9080] netlink: 'syz.0.836': attribute type 10 has an invalid length.
[  245.772414][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.807972][ T9080] team0: Port device bond0 added
[  245.925341][ T9089] netlink: 763 bytes leftover after parsing attributes in process `syz.3.837'.
[  248.930172][ T9126] netlink: 'syz.2.846': attribute type 10 has an invalid length.
[  248.953373][ T9134] netlink: 'syz.3.847': attribute type 10 has an invalid length.
[  248.983771][ T9126] team0: Port device macvlan0 added
[  248.992672][ T9134] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.847'.
[  249.012138][ T9134] openvswitch: netlink: Flow key attr not present in new flow.
[  249.323198][ T9149] netlink: 'syz.0.852': attribute type 39 has an invalid length.
[  249.877122][ T9157] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.855'.
[  250.152101][ T3496] hsr_slave_0: left promiscuous mode
[  250.166342][ T3496] hsr_slave_1: left promiscuous mode
[  250.175966][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.185445][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.206444][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.238060][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.275029][ T3496] bridge_slave_0: left allmulticast mode
[  250.281018][ T3496] bridge_slave_0: left promiscuous mode
[  250.310714][ T3496] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.447560][ T3496] veth1_macvtap: left allmulticast mode
[  250.457381][ T3496] veth1_macvtap: left promiscuous mode
[  250.471135][ T3496] veth1_vlan: left promiscuous mode
[  250.486458][ T3496] veth0_vlan: left promiscuous mode
[  250.908016][ T3496] team0 (unregistering): Port device geneve1 removed
[  250.974872][ T3496] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  251.363843][ T3496] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  251.384023][ T9211] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.871'.
[  252.718723][ T3496] team0 (unregistering): Port device team_slave_1 removed
[  252.785277][ T3496] team0 (unregistering): Port device team_slave_0 removed
[  252.944234][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.116881][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.281805][ T3496] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  254.410832][ T3496] bond0 (unregistering): Released all slaves
[  254.633548][ T9176] netlink: 'syz.3.863': attribute type 58 has an invalid length.
[  254.641418][ T9176] netlink: 144 bytes leftover after parsing attributes in process `syz.3.863'.
[  254.651578][ T9199] netlink: 140 bytes leftover after parsing attributes in process `syz.1.869'.
[  254.696562][ T9221] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.873'.
[  254.947074][ T9241] netlink: 'syz.0.876': attribute type 7 has an invalid length.
[  255.054304][ T9244] delete_channel: no stack
[  255.900570][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.908017][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.841832][ T9293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.889'.
[  257.089007][ T9298] netlink: 'syz.2.891': attribute type 3 has an invalid length.
[  257.099644][ T9298] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.891'.
[  257.228971][ T9303] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.892'.
[  258.759207][ T9314] netlink: 'syz.1.895': attribute type 39 has an invalid length.
[  259.982606][ T9286] delete_channel: no stack
[  260.136477][ T9350] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.905'.
[  260.156475][ T9350] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.905'.
[  260.171690][ T9350] tipc: Started in network mode
[  260.178824][ T9350] tipc: Node identity b, cluster identity 57
[  260.189168][ T9350] tipc: Node number set to 11
[  260.481366][ T9363] syzkaller0: entered promiscuous mode
[  260.505803][ T9363] syzkaller0: entered allmulticast mode
[  260.547925][ T9368] netlink: 'syz.1.912': attribute type 10 has an invalid length.
[  260.566068][ T9380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'.
[  260.595501][ T9368] syz_tun: entered promiscuous mode
[  260.689083][ T9368] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  260.704126][ T9381] netlink: 'syz.0.913': attribute type 10 has an invalid length.
[  260.728697][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.913'.
[  260.786744][ T9381] caif0: entered promiscuous mode
[  260.801877][ T9381] caif0: entered allmulticast mode
[  260.810291][ T9381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.853490][ T9380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'.
[  260.869748][ T9382] netlink: 'syz.1.912': attribute type 10 has an invalid length.
[  260.953776][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.983623][ T9382] team0: Port device bond0 added
[  261.011406][ T9366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'.
[  261.055123][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'.
[  264.331548][ T9424] netlink: 'syz.2.923': attribute type 27 has an invalid length.
[  264.465984][ T9438] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.926'.
[  264.525531][ T9438] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.926'.
[  264.870740][ T9448] syzkaller1: tun_chr_ioctl cmd 2147767521
[  264.893929][ T9448] syzkaller1: tun_chr_ioctl cmd 35108
[  265.199818][ T9465] netlink: 'syz.2.933': attribute type 4 has an invalid length.
[  265.226012][ T9465] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.933'.
[  265.671964][ T9476] delete_channel: no stack
[  265.825462][ T9485] netlink: 'syz.1.937': attribute type 33 has an invalid length.
[  265.833386][ T9485] netlink: 164 bytes leftover after parsing attributes in process `syz.1.937'.
[  268.886734][ T9554] netlink: 'syz.3.946': attribute type 2 has an invalid length.
[  268.944581][ T9554] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.946'.
[  269.096459][ T9559] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.948'.
[  269.106210][ T9559] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  269.194175][ T9553] delete_channel: no stack
[  269.574327][ T9568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'.
[  269.676074][ T9566] netlink: 'syz.0.952': attribute type 10 has an invalid length.
[  269.719389][ T9566] netlink: 128 bytes leftover after parsing attributes in process `syz.0.952'.
[  270.550223][ T9600] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.964'.
[  270.925546][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  270.970959][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  270.989067][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.006961][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.028390][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.051480][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.089319][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.130797][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.170731][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.206179][ T9606] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  271.687712][ T9618] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.970'.
[  271.840419][ T9620] syzkaller0: entered promiscuous mode
[  271.874915][ T9620] syzkaller0: entered allmulticast mode
[  271.896022][ T9618] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  271.963275][ T9620] sit0: entered promiscuous mode
[  273.452250][ T9626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.661139][ T9635] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.975'.
[  274.016607][ T9651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  274.288290][ T9660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.981'.
[  274.779984][ T9665] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.983'.
[  274.874158][ T9665] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.983'.
[  275.089940][ T9669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.984'.
[  275.123981][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'.
[  275.843955][ T9686] veth1_macvtap: left promiscuous mode
[  276.000157][ T9693] validate_nla: 32 callbacks suppressed
[  276.000172][ T9693] netlink: 'syz.0.992': attribute type 21 has an invalid length.
[  276.046272][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.992'.
[  276.097814][ T9694] netlink: 44 bytes leftover after parsing attributes in process `syz.1.990'.
[  276.212579][ T9702] netlink: 'syz.3.995': attribute type 21 has an invalid length.
[  276.242465][ T9702] netlink: 'syz.3.995': attribute type 21 has an invalid length.
[  276.361554][ T9700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.994'.
[  276.394651][ T9709] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.996'.
[  276.434584][ T9709] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  276.693515][ T9724] netlink: 'syz.0.1001': attribute type 9 has an invalid length.
[  276.702122][ T9724] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1001'.
[  279.517386][ T9776] delete_channel: no stack
[  279.544661][ T9776] delete_channel: no stack
[  280.342705][ T9793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'.
[  281.362450][ T9827] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1027'.
[  281.448838][ T9828] netlink: 'syz.3.1027': attribute type 1 has an invalid length.
[  281.455200][ T9827] openvswitch: netlink: Duplicate key (type 0).
[  281.463750][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'.
[  281.619798][ T9830] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1028'.
[  281.657007][ T9833] netlink: 'syz.2.1028': attribute type 10 has an invalid length.
[  281.694830][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1028'.
[  281.703832][ T9833] dummy0: entered promiscuous mode
[  281.758046][ T9833] dummy0: entered allmulticast mode
[  281.775446][ T9833] bridge0: port 2(dummy0) entered blocking state
[  281.791119][ T9833] bridge0: port 2(dummy0) entered disabled state
[  281.816675][ T9833] bridge0: port 2(dummy0) entered blocking state
[  281.823970][ T9833] bridge0: port 2(dummy0) entered forwarding state
[  282.113187][ T9847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1032'.
[  282.114280][ T9851] netlink: 'syz.0.1033': attribute type 46 has an invalid length.
[  282.131681][ T9851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1033'.
[  283.937334][ T9895] netlink: 'syz.1.1045': attribute type 5 has an invalid length.
[  283.958429][ T9897] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1046'.
[  284.007622][ T9895] netlink: 'syz.1.1045': attribute type 1 has an invalid length.
[  284.176965][ T9894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1045'.
[  286.793389][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'.
[  287.207507][ T9926] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  287.223626][ T9926] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  288.359676][ T9944] netlink: 'syz.2.1057': attribute type 39 has an invalid length.
[  289.198740][ T9968] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1064'.
[  289.234885][ T9968] netlink: 'syz.1.1064': attribute type 21 has an invalid length.
[  289.568397][ T9981] netlink: 'syz.3.1066': attribute type 39 has an invalid length.
[  290.631124][ T9999] netlink: 'syz.2.1071': attribute type 7 has an invalid length.
[  292.097234][T10029] netlink: 'syz.2.1081': attribute type 3 has an invalid length.
[  292.114201][T10029] netlink: 16795 bytes leftover after parsing attributes in process `syz.2.1081'.
[  292.258399][T10037] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1084'.
[  292.296215][T10037] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  292.381200][T10046] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1086'.
[  292.428081][T10046] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  292.455535][T10046] CPU: 1 PID: 10046 Comm: syz.0.1086 Not tainted syzkaller #0
[  292.463043][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  292.473149][T10046] Call Trace:
[  292.476445][T10046]  <TASK>
[  292.479389][T10046]  dump_stack_lvl+0x18c/0x250
[  292.484094][T10046]  ? show_regs_print_info+0x20/0x20
[  292.489316][T10046]  ? load_image+0x420/0x420
[  292.493839][T10046]  sysfs_warn_dup+0x8e/0xa0
[  292.498342][T10046]  sysfs_do_create_link_sd+0xc0/0x110
[  292.503711][T10046]  device_add_class_symlinks+0x1cf/0x240
[  292.509343][T10046]  device_add+0x4f9/0xc40
[  292.513672][T10046]  wiphy_register+0x1d99/0x2ac0
[  292.518543][T10046]  ? cfg80211_event_work+0x40/0x40
[  292.523657][T10046]  ? minstrel_ht_alloc+0x88a/0x990
[  292.528776][T10046]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  292.534847][T10046]  ieee80211_register_hw+0x2dd8/0x3b30
[  292.540311][T10046]  ? ieee80211_register_hw+0xfb1/0x3b30
[  292.545857][T10046]  ? ieee80211_tasklet_handler+0x20/0x20
[  292.551488][T10046]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  292.557382][T10046]  ? __debug_object_init+0xec/0x450
[  292.562582][T10046]  ? __asan_memset+0x22/0x40
[  292.567173][T10046]  ? __hrtimer_init+0x189/0x270
[  292.572019][T10046]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  292.577754][T10046]  ? mac80211_hwsim_free+0x220/0x220
[  292.583031][T10046]  ? rcu_is_watching+0x15/0xb0
[  292.587794][T10046]  ? kstrndup+0xbd/0x140
[  292.592043][T10046]  hwsim_new_radio_nl+0xdad/0x1a70
[  292.597156][T10046]  ? __nla_validate+0x50/0x50
[  292.601843][T10046]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  292.608174][T10046]  ? __nla_parse+0x40/0x50
[  292.612590][T10046]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  292.618919][T10046]  genl_family_rcv_msg_doit+0x21a/0x310
[  292.624474][T10046]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  292.630379][T10046]  ? bpf_lsm_capable+0x9/0x10
[  292.635047][T10046]  ? security_capable+0x89/0xb0
[  292.639899][T10046]  genl_rcv_msg+0x611/0x7a0
[  292.644429][T10046]  ? genl_bind+0x360/0x360
[  292.648874][T10046]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  292.655199][T10046]  ? ref_tracker_free+0x686/0x830
[  292.660214][T10046]  ? __kasan_kmalloc_large+0x8b/0xa0
[  292.665503][T10046]  netlink_rcv_skb+0x235/0x4c0
[  292.670265][T10046]  ? genl_bind+0x360/0x360
[  292.674677][T10046]  ? netlink_ack+0x1160/0x1160
[  292.679441][T10046]  ? __lock_acquire+0x7d80/0x7d80
[  292.684476][T10046]  ? down_read+0x1ac/0x2e0
[  292.688891][T10046]  genl_rcv+0x28/0x40
[  292.692868][T10046]  netlink_unicast+0x7b1/0x930
[  292.697638][T10046]  netlink_sendmsg+0x8d0/0xbf0
[  292.702403][T10046]  ? netlink_getsockopt+0x590/0x590
[  292.707617][T10046]  ? apparmor_socket_sendmsg+0x8e/0x330
[  292.713174][T10046]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  292.718463][T10046]  ? security_socket_sendmsg+0x80/0xa0
[  292.723926][T10046]  ? netlink_getsockopt+0x590/0x590
[  292.729130][T10046]  ____sys_sendmsg+0x61b/0x980
[  292.733901][T10046]  ? __asan_memset+0x22/0x40
[  292.738495][T10046]  ? __sys_sendmsg_sock+0x30/0x30
[  292.743525][T10046]  ? __import_iovec+0x5f2/0x850
[  292.748385][T10046]  ? import_iovec+0x73/0xa0
[  292.752887][T10046]  ___sys_sendmsg+0x2a6/0x360
[  292.757564][T10046]  ? __sys_sendmsg+0x2b0/0x2b0
[  292.762363][T10046]  __se_sys_sendmsg+0x1d0/0x2c0
[  292.767219][T10046]  ? __x64_sys_sendmsg+0x80/0x80
[  292.772169][T10046]  ? lockdep_hardirqs_on+0x98/0x150
[  292.777383][T10046]  do_syscall_64+0x55/0xb0
[  292.781815][T10046]  ? clear_bhb_loop+0x40/0x90
[  292.786500][T10046]  ? clear_bhb_loop+0x40/0x90
[  292.791180][T10046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.797084][T10046] RIP: 0033:0x7f47af99e159
[  292.801501][T10046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.821107][T10046] RSP: 002b:00007f47b0872028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.829541][T10046] RAX: ffffffffffffffda RBX: 00007f47afc25fa0 RCX: 00007f47af99e159
[  292.837520][T10046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  292.845490][T10046] RBP: 00007f47afa3506b R08: 0000000000000000 R09: 0000000000000000
[  292.853463][T10046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.861430][T10046] R13: 00007f47afc26038 R14: 00007f47afc25fa0 R15: 00007ffced2a9e38
[  292.869413][T10046]  </TASK>
[  293.714176][T10064] netlink: 'syz.3.1093': attribute type 6 has an invalid length.
[  293.738016][T10064] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1093'.
[  294.229128][T10079] netlink: 'syz.2.1097': attribute type 30 has an invalid length.
[  294.606849][T10083] netlink: 'syz.1.1099': attribute type 10 has an invalid length.
[  294.614912][T10083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1099'.
[  294.691422][T10083] batman_adv: batadv0: Adding interface: 
[  294.697403][T10083] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.752282][T10083] batman_adv: batadv0: Interface activated: 
[  296.563795][T10127] netlink: 'syz.1.1110': attribute type 19 has an invalid length.
[  296.577234][T10127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1110'.
[  296.724872][T10127] netlink: 'syz.1.1110': attribute type 5 has an invalid length.
[  296.966028][T10134] netlink: 'syz.1.1113': attribute type 29 has an invalid length.
[  296.985025][T10134] netlink: 'syz.1.1113': attribute type 29 has an invalid length.
[  297.702593][T10152] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1115'.
[  297.982949][T10163] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1117'.
[  298.288488][ T5787] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  298.634001][T10173] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1121'.
[  298.656294][T10173] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  298.665906][T10173] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  298.828155][T10175] syzkaller0: entered promiscuous mode
[  298.860624][T10175] syzkaller0: entered allmulticast mode
[  299.037851][T10176] netlink: 'syz.0.1121': attribute type 1 has an invalid length.
[  299.091693][T10176] netlink: 'syz.0.1121': attribute type 3 has an invalid length.
[  299.135013][T10176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1121'.
[  299.340801][T10184] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1123'.
[  300.877846][T10196] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1126'.
[  301.014392][T10199] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  301.061226][T10199] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  301.075800][T10203] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  301.094398][T10203] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  301.139549][T10199] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  301.699996][T10218] netlink: 'syz.0.1131': attribute type 21 has an invalid length.
[  301.738929][T10219] netlink: 'syz.3.1134': attribute type 13 has an invalid length.
[  301.752288][T10219] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1134'.
[  301.763113][T10219] erspan0: refused to change device tx_queue_len
[  301.846034][T10220] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1133'.
[  301.874269][T10220] netlink: 'syz.1.1133': attribute type 21 has an invalid length.
[  301.896289][T10222] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1135'.
[  303.355795][T10268] tc_dump_action: action bad kind
[  303.429263][T10269] geneve0: entered promiscuous mode
[  303.484971][T10269] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  304.372782][T10305] validate_nla: 2 callbacks suppressed
[  304.372823][T10305] netlink: 'syz.3.1158': attribute type 7 has an invalid length.
[  304.404076][T10305] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1158'.
[  304.712743][T10321] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1163'.
[  305.103355][T10338] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.1168'.
[  305.130141][T10338] netlink: 'syz.1.1168': attribute type 27 has an invalid length.
[  305.148616][T10338] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1168'.
[  307.690448][T10363] ref_ctr_offset mismatch. inode: 0x5f3 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  311.149220][T10369] netlink: 'syz.0.1174': attribute type 10 has an invalid length.
[  311.157464][T10369] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1174'.
[  311.207591][T10349] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1170'.
[  311.217021][T10386] netlink: 'syz.3.1177': attribute type 21 has an invalid length.
[  311.225177][T10386] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1177'.
[  311.234310][T10386] netlink: 'syz.3.1177': attribute type 5 has an invalid length.
[  311.246862][T10386] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1177'.
[  311.274543][T10387] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1170'.
[  311.836203][T10415] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1183'.
[  311.855942][T10411] netlink: 'syz.1.1182': attribute type 28 has an invalid length.
[  311.936492][T10411] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1182'.
[  311.950876][T10411] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  312.168031][T10422] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1186'.
[  312.391606][T10427] macsec0: entered allmulticast mode
[  312.410578][T10427] veth1_macvtap: entered allmulticast mode
[  315.181546][T10427] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.1188'.
[  315.392505][T10457] netlink: 'syz.3.1193': attribute type 7 has an invalid length.
[  315.942528][T10462] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1194'.
[  316.019402][T10466] netlink: 'syz.3.1195': attribute type 3 has an invalid length.
[  317.339316][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.354818][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.841319][T10521] netlink: 'syz.0.1210': attribute type 11 has an invalid length.
[  319.206637][T10536] __nla_validate_parse: 1 callbacks suppressed
[  319.206653][T10536] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1212'.
[  319.301441][T10536] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1212'.
[  319.485791][T10540] netlink: 'syz.2.1211': attribute type 10 has an invalid length.
[  319.731560][T10547] netlink: 'syz.1.1213': attribute type 1 has an invalid length.
[  319.754595][T10547] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1213'.
[  320.038773][T10553] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1216'.
[  320.094746][T10553] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1216'.
[  321.168120][T10567] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1222'.
[  321.481649][T10580] netlink: 'syz.3.1225': attribute type 3 has an invalid length.
[  321.493981][T10580] netlink: 'syz.3.1225': attribute type 1 has an invalid length.
[  321.502305][T10580] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1225'.
[  321.522786][T10584] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1226'.
[  321.643881][T10590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1227'.
[  321.656655][T10589] netlink: 'syz.1.1228': attribute type 21 has an invalid length.
[  321.804602][T10589] netlink: 'syz.1.1228': attribute type 29 has an invalid length.
[  321.933334][T10593] netlink: 'syz.1.1228': attribute type 29 has an invalid length.
[  322.695631][T10609] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1229'.
[  323.048666][T10589] netlink: 'syz.1.1228': attribute type 29 has an invalid length.
[  323.142290][T10612] netlink: 'syz.3.1231': attribute type 12 has an invalid length.
[  323.567099][T10633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.864349][T10645] team0: Port device wlan1 added
[  323.870173][T10649] validate_nla: 1 callbacks suppressed
[  323.870184][T10649] netlink: 'syz.1.1240': attribute type 10 has an invalid length.
[  323.911397][T10651] netlink: 'syz.2.1241': attribute type 21 has an invalid length.
[  323.983363][T10658] netlink: 'syz.3.1242': attribute type 1 has an invalid length.
[  324.212794][T10666] netlink: 'syz.1.1244': attribute type 21 has an invalid length.
[  324.223278][T10666] __nla_validate_parse: 4 callbacks suppressed
[  324.223293][T10666] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1244'.
[  324.509926][T10715] netlink: 'syz.1.1245': attribute type 10 has an invalid length.
[  324.544768][T10715] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1245'.
[  324.570499][T10715] hsr0: entered promiscuous mode
[  324.586270][T10715] bridge0: port 2(hsr0) entered blocking state
[  324.605990][T10715] bridge0: port 2(hsr0) entered disabled state
[  324.614833][T10715] hsr0: entered allmulticast mode
[  324.626231][T10715] hsr_slave_0: entered allmulticast mode
[  324.636244][T10715] hsr_slave_1: entered allmulticast mode
[  324.655233][T10715] bridge0: port 2(hsr0) entered blocking state
[  324.661584][T10715] bridge0: port 2(hsr0) entered forwarding state
[  324.740597][T10733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'.
[  324.761663][T10733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'.
[  324.785532][T10733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'.
[  325.489722][T10746] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1250'.
[  327.113481][T10755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1251'.
[  327.148832][T10758] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1251'.
[  327.192650][T10765] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1253'.
[  327.283097][T10768] netlink: 'syz.0.1254': attribute type 39 has an invalid length.
[  327.456221][T10777] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1257'.
[  327.648906][T10785] : port 1(ip6gretap0) entered blocking state
[  327.694838][T10785] : port 1(ip6gretap0) entered disabled state
[  327.701176][T10785] ip6gretap0: entered allmulticast mode
[  327.725850][T10785] ip6gretap0: entered promiscuous mode
[  327.889857][T10782] ip6gretap0: left allmulticast mode
[  327.904224][T10782] ip6gretap0: left promiscuous mode
[  327.917616][T10782] : port 1(ip6gretap0) entered disabled state
[  327.929702][T10773] syz.2.1257 (10773) used greatest stack depth: 17704 bytes left
[  328.504812][T10802] netlink: 'syz.2.1264': attribute type 2 has an invalid length.
[  329.669070][ T5790] Bluetooth: hci1: command 0x0406 tx timeout
[  331.459440][T10858] __nla_validate_parse: 3 callbacks suppressed
[  331.459455][T10858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1278'.
[  331.515406][T10862] netlink: 'syz.1.1281': attribute type 21 has an invalid length.
[  331.585444][T10875] __sock_release: fasync list not empty!
[  331.690355][T10858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1278'.
[  331.787758][T10855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1278'.
[  332.117627][T10895] netlink: 'syz.1.1285': attribute type 21 has an invalid length.
[  332.125874][T10895] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1285'.
[  332.145126][T10895] netlink: 'syz.1.1285': attribute type 5 has an invalid length.
[  332.160824][T10895] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1285'.
[  332.653581][T10911] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1290'.
[  332.746946][T10911] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  332.794749][T10911] CPU: 1 PID: 10911 Comm: syz.3.1290 Not tainted syzkaller #0
[  332.802280][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.812379][T10911] Call Trace:
[  332.815675][T10911]  <TASK>
[  332.818623][T10911]  dump_stack_lvl+0x18c/0x250
[  332.823340][T10911]  ? show_regs_print_info+0x20/0x20
[  332.828569][T10911]  ? load_image+0x420/0x420
[  332.833115][T10911]  sysfs_warn_dup+0x8e/0xa0
[  332.837642][T10911]  sysfs_do_create_link_sd+0xc0/0x110
[  332.843046][T10911]  device_add_class_symlinks+0x1cf/0x240
[  332.848724][T10911]  device_add+0x4f9/0xc40
[  332.853091][T10911]  wiphy_register+0x1d99/0x2ac0
[  332.858006][T10911]  ? cfg80211_event_work+0x40/0x40
[  332.863157][T10911]  ? minstrel_ht_alloc+0x88a/0x990
[  332.868305][T10911]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  332.874397][T10911]  ieee80211_register_hw+0x2dd8/0x3b30
[  332.879897][T10911]  ? ieee80211_register_hw+0xfb1/0x3b30
[  332.885469][T10911]  ? ieee80211_tasklet_handler+0x20/0x20
[  332.891122][T10911]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  332.897060][T10911]  ? __debug_object_init+0xec/0x450
[  332.902278][T10911]  ? __asan_memset+0x22/0x40
[  332.906884][T10911]  ? __hrtimer_init+0x189/0x270
[  332.911748][T10911]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  332.917502][T10911]  ? mac80211_hwsim_free+0x220/0x220
[  332.922800][T10911]  ? rcu_is_watching+0x15/0xb0
[  332.927574][T10911]  ? kstrndup+0xbd/0x140
[  332.931834][T10911]  hwsim_new_radio_nl+0xdad/0x1a70
[  332.936962][T10911]  ? __nla_validate+0x50/0x50
[  332.941675][T10911]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  332.948035][T10911]  ? __nla_parse+0x40/0x50
[  332.952473][T10911]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  332.958829][T10911]  genl_family_rcv_msg_doit+0x21a/0x310
[  332.964401][T10911]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  332.970315][T10911]  ? bpf_lsm_capable+0x9/0x10
[  332.975010][T10911]  ? security_capable+0x89/0xb0
[  332.979884][T10911]  genl_rcv_msg+0x611/0x7a0
[  332.984402][T10911]  ? genl_bind+0x360/0x360
[  332.988835][T10911]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  332.995179][T10911]  ? ref_tracker_free+0x686/0x830
[  333.000206][T10911]  ? __kasan_kmalloc_large+0x8b/0xa0
[  333.005521][T10911]  netlink_rcv_skb+0x235/0x4c0
[  333.010303][T10911]  ? genl_bind+0x360/0x360
[  333.014738][T10911]  ? netlink_ack+0x1160/0x1160
[  333.019524][T10911]  ? __lock_acquire+0x7d80/0x7d80
[  333.024563][T10911]  ? down_read+0x1ac/0x2e0
[  333.028993][T10911]  genl_rcv+0x28/0x40
[  333.033003][T10911]  netlink_unicast+0x7b1/0x930
[  333.037788][T10911]  netlink_sendmsg+0x8d0/0xbf0
[  333.042573][T10911]  ? netlink_getsockopt+0x590/0x590
[  333.047785][T10911]  ? apparmor_socket_sendmsg+0x8e/0x330
[  333.053334][T10911]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  333.058633][T10911]  ? security_socket_sendmsg+0x80/0xa0
[  333.064099][T10911]  ? netlink_getsockopt+0x590/0x590
[  333.069315][T10911]  ____sys_sendmsg+0x61b/0x980
[  333.074104][T10911]  ? __asan_memset+0x22/0x40
[  333.078705][T10911]  ? __sys_sendmsg_sock+0x30/0x30
[  333.083747][T10911]  ? __import_iovec+0x5f2/0x850
[  333.088618][T10911]  ? import_iovec+0x73/0xa0
[  333.093131][T10911]  ___sys_sendmsg+0x2a6/0x360
[  333.097827][T10911]  ? __sys_sendmsg+0x2b0/0x2b0
[  333.102660][T10911]  __se_sys_sendmsg+0x1d0/0x2c0
[  333.107518][T10911]  ? __x64_sys_sendmsg+0x80/0x80
[  333.112492][T10911]  ? lockdep_hardirqs_on+0x98/0x150
[  333.117727][T10911]  do_syscall_64+0x55/0xb0
[  333.122174][T10911]  ? clear_bhb_loop+0x40/0x90
[  333.126863][T10911]  ? clear_bhb_loop+0x40/0x90
[  333.131551][T10911]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  333.137450][T10911] RIP: 0033:0x7f3d65d9e159
[  333.141869][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.161488][T10911] RSP: 002b:00007f3d63ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  333.169916][T10911] RAX: ffffffffffffffda RBX: 00007f3d66025fa0 RCX: 00007f3d65d9e159
[  333.177934][T10911] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  333.185933][T10911] RBP: 00007f3d65e3506b R08: 0000000000000000 R09: 0000000000000000
[  333.193917][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.201890][T10911] R13: 00007f3d66026038 R14: 00007f3d66025fa0 R15: 00007ffe550a3428
[  333.209887][T10911]  </TASK>
[  334.058436][T10930] netlink: 'syz.1.1296': attribute type 21 has an invalid length.
[  334.066472][T10930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1296'.
[  334.089444][T10930] : entered promiscuous mode
[  334.094181][T10930] : entered allmulticast mode
[  334.838200][T10946] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1301'.
[  334.939828][T10950] vcan0: entered allmulticast mode
[  334.960258][T10953] netlink: 'syz.1.1300': attribute type 10 has an invalid length.
[  335.079504][T10953] veth0_macvtap: left promiscuous mode
[  335.471016][T10975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1306'.
[  335.492696][T10975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1306'.
[  335.635712][T10975] openvswitch: netlink: Key type 29 is not supported
[  336.315650][T10982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.569345][T10988] netlink: 'syz.2.1310': attribute type 2 has an invalid length.
[  336.639623][T10984] can: request_module (can-proto-0) failed.
[  337.023223][T11007] netlink: 'syz.2.1315': attribute type 10 has an invalid length.
[  337.042253][T11007] __nla_validate_parse: 4 callbacks suppressed
[  337.042294][T11007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1315'.
[  337.064752][T11007] team0: entered promiscuous mode
[  337.070180][T11007] team_slave_0: entered promiscuous mode
[  337.081180][T11007] team_slave_1: entered promiscuous mode
[  337.088604][T11007] macvlan0: entered promiscuous mode
[  337.113184][T11007] team0: entered allmulticast mode
[  337.122259][T11007] team_slave_0: entered allmulticast mode
[  337.128497][T11007] team_slave_1: entered allmulticast mode
[  337.134342][T11007] macvlan0: entered allmulticast mode
[  337.146519][T11007] veth1_vlan: entered allmulticast mode
[  337.157465][T11007] bridge0: port 3(team0) entered blocking state
[  337.181521][T11007] bridge0: port 3(team0) entered disabled state
[  337.237910][T11007] bridge0: port 3(team0) entered blocking state
[  337.244683][T11007] bridge0: port 3(team0) entered forwarding state
[  337.445063][T11011] syzkaller0: entered promiscuous mode
[  337.450596][T11011] syzkaller0: entered allmulticast mode
[  337.569362][T11020] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1318'.
[  337.580290][T11020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.435745][T11038] netlink: 'syz.0.1322': attribute type 3 has an invalid length.
[  338.450083][T11038] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.1322'.
[  339.996053][T11034] netlink: 'syz.2.1321': attribute type 21 has an invalid length.
[  340.003936][T11034] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1321'.
[  340.493834][T11052] netlink: 'syz.1.1326': attribute type 3 has an invalid length.
[  340.509914][T11052] netlink: 'syz.1.1326': attribute type 1 has an invalid length.
[  340.520649][T11054] netlink: 'syz.1.1326': attribute type 3 has an invalid length.
[  340.571225][T11054] netlink: 'syz.1.1326': attribute type 1 has an invalid length.
[  340.582914][T11052] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1326'.
[  340.623806][T11054] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1326'.
[  340.633313][T11057] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1327'.
[  341.160369][T11068] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1330'.
[  341.210529][T11068] hsr_slave_0: left promiscuous mode
[  341.228765][T11068] hsr_slave_1: left promiscuous mode
[  341.327637][T11068] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1330'.
[  341.339874][T11068] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1330'.
[  341.423700][T11076] syz.2.1332[11076] is installing a program with bpf_probe_write_user helper that may corrupt user memory!: renamed from bond_slave_1 (while UP)
[  341.692853][T11083] netlink: 'syz.2.1335': attribute type 10 has an invalid length.
[  341.707516][T11083] bridge0: port 3(team0) entered disabled state
[  341.714027][T11083] bridge0: port 2(dummy0) entered disabled state
[  341.720652][T11083] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.753401][T11083] bridge0: port 3(team0) entered blocking state
[  341.760007][T11083] bridge0: port 3(team0) entered forwarding state
[  341.766885][T11083] bridge0: port 2(dummy0) entered blocking state
[  341.773429][T11083] bridge0: port 2(dummy0) entered forwarding state
[  341.780346][T11083] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.787660][T11083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.816983][T11083] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  342.590322][T11124] netlink: 'syz.3.1346': attribute type 10 has an invalid length.
[  343.539330][T11127] __nla_validate_parse: 31 callbacks suppressed
[  343.539364][T11127] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1345'.
[  343.838980][T11135] netlink: 'syz.3.1348': attribute type 10 has an invalid length.
[  343.868943][T11135] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  343.900923][T11135] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  343.921959][T11135] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  343.931908][T11135] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.185039][T11151] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1354'.
[  344.396561][T11155] -1: renamed from syzkaller0
[  344.401128][T11165] netlink: 'syz.3.1358': attribute type 3 has an invalid length.
[  344.411319][T11165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1358'.
[  344.623311][T11166] mac80211_hwsim hwsim8 ..ãc¤±: renamed from wlan1
[  344.632319][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.101811][T11182] 
€Â0: renamed from pim6reg1
[  345.324845][T11184] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1364'.
[  345.335791][T11184] bridge_slave_1: default FDB implementation only supports local addresses
[  345.347295][T11194] netlink: 'syz.1.1367': attribute type 21 has an invalid length.
[  345.360567][T11194] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1367'.
[  345.839812][T11211] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1373'.
[  346.367024][T11234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1379'.
[  346.514937][T11235] netlink: 'syz.1.1379': attribute type 21 has an invalid length.
[  346.541865][T11235] netlink: 'syz.1.1379': attribute type 7 has an invalid length.
[  346.574874][T11236] netlink: 'syz.1.1379': attribute type 21 has an invalid length.
[  346.604622][T11236] netlink: 'syz.1.1379': attribute type 7 has an invalid length.
[  347.773498][T11280] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.1390'.
[  348.172958][T11288] netlink: 'syz.3.1393': attribute type 8 has an invalid length.
[  348.211652][T11288] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1393'.
[  348.578687][T11298] wg0: entered promiscuous mode
[  348.590879][T11298] wg0: entered allmulticast mode
[  348.783477][T11315] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1397'.
[  348.971865][T11322] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1399'.
[  350.712352][T11335] netlink: 'syz.1.1402': attribute type 39 has an invalid length.
[  350.955987][T11348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'.
[  350.986065][T11348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'.
[  351.059922][T11338] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'.
[  351.124393][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'.
[  351.178844][T11338] netlink: 'syz.0.1403': attribute type 14 has an invalid length.
[  351.212877][T11338] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1403'.
[  351.258681][T11347] netlink: 'syz.0.1403': attribute type 10 has an invalid length.
[  351.308511][T11360] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1409'.
[  351.361140][T11369] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1409'.
[  351.997114][T11395] netlink: 'syz.1.1420': attribute type 13 has an invalid length.
[  352.012532][T11395] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1420'.
[  352.038784][T11401] netlink: 'syz.1.1420': attribute type 13 has an invalid length.
[  352.190252][T11408] netlink: 'syz.0.1421': attribute type 21 has an invalid length.
[  352.416887][T11411] sctp: [Deprecated]: syz.1.1423 (pid 11411) Use of struct sctp_assoc_value in delayed_ack socket option.
[  352.416887][T11411] Use struct sctp_sack_info instead
[  354.128518][T11472] netlink: 'syz.2.1442': attribute type 8 has an invalid length.
[  354.136859][T11472] __nla_validate_parse: 4 callbacks suppressed
[  354.136890][T11472] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1442'.
[  354.442111][T11478] netlink: 'syz.2.1445': attribute type 33 has an invalid length.
[  354.471460][T11478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1445'.
[  354.525186][T11478] `: renamed from ip6tnl0 (while UP)
[  354.620370][T11478] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  354.765890][T11478] netlink: 'syz.2.1445': attribute type 2 has an invalid length.
[  354.784740][T11478] netlink: 'syz.2.1445': attribute type 1 has an invalid length.
[  354.795026][T11478] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1445'.
[  354.816775][T11481] netlink: 'syz.0.1446': attribute type 10 has an invalid length.
[  355.056850][T11481] team0: Device nlmon0 is of different type
[  356.118292][T11513] syz.3.1456[11513] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  357.478701][T11534] netlink: 'syz.0.1462': attribute type 2 has an invalid length.
[  357.578538][T11534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1462'.
[  357.606793][T11534] netlink: 'syz.0.1462': attribute type 21 has an invalid length.
[  357.800782][T11538] syzkaller0: entered promiscuous mode
[  357.820911][T11538] syzkaller0: entered allmulticast mode
[  362.652073][T11556] netlink: 'syz.0.1468': attribute type 21 has an invalid length.
[  362.660951][T11556] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1468'.
[  362.670682][T11557] sit0: left promiscuous mode
[  362.915179][T11571] netlink: 'syz.1.1470': attribute type 5 has an invalid length.
[  362.950260][T11580] netlink: 'syz.3.1472': attribute type 4 has an invalid length.
[  362.979655][T11580] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1472'.
[  363.108621][T11580] netlink: 'syz.3.1472': attribute type 4 has an invalid length.
[  363.140900][T11580] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1472'.
[  363.347439][T11593] syzkaller0: entered promiscuous mode
[  363.352960][T11593] syzkaller0: entered allmulticast mode
[  363.397471][T11607] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1477'.
[  363.445370][T11604] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  363.452379][T11604] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  363.481785][T11607] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  363.499618][T11607] CPU: 1 PID: 11607 Comm: syz.3.1477 Not tainted syzkaller #0
[  363.507116][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  363.517190][T11607] Call Trace:
[  363.520546][T11607]  <TASK>
[  363.523549][T11607]  dump_stack_lvl+0x18c/0x250
[  363.528410][T11607]  ? show_regs_print_info+0x20/0x20
[  363.533684][T11607]  ? load_image+0x420/0x420
[  363.538275][T11607]  sysfs_warn_dup+0x8e/0xa0
[  363.542843][T11607]  sysfs_do_create_link_sd+0xc0/0x110
[  363.548242][T11607]  device_add_class_symlinks+0x1cf/0x240
[  363.553942][T11607]  device_add+0x4f9/0xc40
[  363.558296][T11607]  wiphy_register+0x1d99/0x2ac0
[  363.563302][T11607]  ? cfg80211_event_work+0x40/0x40
[  363.568440][T11607]  ? minstrel_ht_alloc+0x88a/0x990
[  363.573686][T11607]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  363.579827][T11607]  ieee80211_register_hw+0x2dd8/0x3b30
[  363.585399][T11607]  ? ieee80211_register_hw+0xfb1/0x3b30
[  363.590985][T11607]  ? ieee80211_tasklet_handler+0x20/0x20
[  363.596639][T11607]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  363.602653][T11607]  ? __debug_object_init+0xec/0x450
[  363.607910][T11607]  ? __asan_memset+0x22/0x40
[  363.612630][T11607]  ? __hrtimer_init+0x189/0x270
[  363.617526][T11607]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  363.623312][T11607]  ? mac80211_hwsim_free+0x220/0x220
[  363.628616][T11607]  ? rcu_is_watching+0x15/0xb0
[  363.633398][T11607]  ? kstrndup+0xbd/0x140
[  363.637705][T11607]  hwsim_new_radio_nl+0xdad/0x1a70
[  363.642841][T11607]  ? __nla_validate+0x50/0x50
[  363.647555][T11607]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  363.653919][T11607]  ? __nla_parse+0x40/0x50
[  363.658366][T11607]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  363.664828][T11607]  genl_family_rcv_msg_doit+0x21a/0x310
[  363.670405][T11607]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  363.676333][T11607]  ? bpf_lsm_capable+0x9/0x10
[  363.681041][T11607]  ? security_capable+0x89/0xb0
[  363.685954][T11607]  genl_rcv_msg+0x611/0x7a0
[  363.690487][T11607]  ? genl_bind+0x360/0x360
[  363.694923][T11607]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  363.701273][T11607]  ? perf_trace_lock+0xfc/0x3b0
[  363.706144][T11607]  ? __kasan_kmalloc_large+0x8b/0xa0
[  363.711461][T11607]  netlink_rcv_skb+0x235/0x4c0
[  363.716246][T11607]  ? genl_bind+0x360/0x360
[  363.720686][T11607]  ? netlink_ack+0x1160/0x1160
[  363.725484][T11607]  ? __lock_acquire+0x7d80/0x7d80
[  363.730534][T11607]  ? down_read+0x1ac/0x2e0
[  363.734973][T11607]  genl_rcv+0x28/0x40
[  363.738972][T11607]  netlink_unicast+0x7b1/0x930
[  363.743769][T11607]  netlink_sendmsg+0x8d0/0xbf0
[  363.748568][T11607]  ? netlink_getsockopt+0x590/0x590
[  363.753794][T11607]  ? apparmor_socket_sendmsg+0x8e/0x330
[  363.759390][T11607]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  363.764706][T11607]  ? security_socket_sendmsg+0x80/0xa0
[  363.770183][T11607]  ? netlink_getsockopt+0x590/0x590
[  363.775416][T11607]  ____sys_sendmsg+0x61b/0x980
[  363.780301][T11607]  ? __asan_memset+0x22/0x40
[  363.784915][T11607]  ? __sys_sendmsg_sock+0x30/0x30
[  363.789962][T11607]  ? __import_iovec+0x5f2/0x850
[  363.794843][T11607]  ? import_iovec+0x73/0xa0
[  363.799387][T11607]  ___sys_sendmsg+0x2a6/0x360
[  363.804102][T11607]  ? __sys_sendmsg+0x2b0/0x2b0
[  363.808942][T11607]  __se_sys_sendmsg+0x1d0/0x2c0
[  363.813813][T11607]  ? perf_trace_preemptirq_template+0x269/0x330
[  363.820097][T11607]  ? __x64_sys_sendmsg+0x80/0x80
[  363.825076][T11607]  ? lockdep_hardirqs_on+0x98/0x150
[  363.830349][T11607]  do_syscall_64+0x55/0xb0
[  363.834792][T11607]  ? clear_bhb_loop+0x40/0x90
[  363.839591][T11607]  ? clear_bhb_loop+0x40/0x90
[  363.844294][T11607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  363.850208][T11607] RIP: 0033:0x7f3d65d9e159
[  363.854706][T11607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.874377][T11607] RSP: 002b:00007f3d63ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.882824][T11607] RAX: ffffffffffffffda RBX: 00007f3d66025fa0 RCX: 00007f3d65d9e159
[  363.890809][T11607] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  363.898801][T11607] RBP: 00007f3d65e3506b R08: 0000000000000000 R09: 0000000000000000
[  363.906792][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.914776][T11607] R13: 00007f3d66026038 R14: 00007f3d66025fa0 R15: 00007ffe550a3428
[  363.922782][T11607]  </TASK>
[  365.526029][T11614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1479'.
[  365.535333][T11614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  365.828159][T11620] netlink: 'syz.1.1481': attribute type 21 has an invalid length.
[  366.099823][T11629] netlink: 'syz.0.1485': attribute type 3 has an invalid length.
[  366.208415][T11629] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1485'.
[  366.547880][T11646] netlink: 'syz.2.1480': attribute type 7 has an invalid length.
[  366.736085][T11659] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.1492'.
[  366.745960][T11659] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1492'.
[  367.202718][T11670] netlink: 'syz.1.1497': attribute type 3 has an invalid length.
[  367.220528][T11670] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1497'.
[  368.239953][T11686] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  368.254812][T11686] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode
[  368.504814][T11699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1505'.
[  369.019176][T11713] netlink: 'syz.2.1507': attribute type 3 has an invalid length.
[  369.035753][T11713] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1507'.
[  369.522421][T11726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1509'.
[  369.574371][T11726] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.663797][T11726] bridge_slave_0 (unregistering): left allmulticast mode
[  369.678236][T11726] bridge_slave_0 (unregistering): left promiscuous mode
[  369.688256][T11726] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.708222][T11733] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1511'.
[  369.721900][T11733] netlink: get zone limit has 4 unknown bytes
[  371.185618][T11744] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1515'.
[  371.434805][T11744] bridge_slave_1: default FDB implementation only supports local addresses
[  372.437612][T11763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.586682][T11770] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1521'.
[  372.679340][T11775] netlink: 'syz.1.1523': attribute type 1 has an invalid length.
[  372.706170][T11776] netlink: 'syz.1.1523': attribute type 1 has an invalid length.
[  372.866519][T11785] netlink: 'syz.3.1527': attribute type 3 has an invalid length.
[  372.879232][T11785] netlink: 'syz.3.1527': attribute type 1 has an invalid length.
[  372.904776][T11785] netlink: 'syz.3.1527': attribute type 1 has an invalid length.
[  372.929644][T11785] netlink: 'syz.3.1527': attribute type 2 has an invalid length.
[  372.958102][T11785] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.1527'.
[  373.332490][T11803] dvmrp1: tun_chr_ioctl cmd 1074025673
[  373.375128][T11800] dvmrp1: tun_chr_ioctl cmd 1074025675
[  373.427640][T11800] dvmrp1: persist disabled
[  373.640446][T11809] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1531'.
[  373.679688][T11809] hsr_slave_0: left promiscuous mode
[  373.758269][T11809] hsr_slave_1: left promiscuous mode
[  373.987922][T11821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  374.020066][T11821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  374.053268][T11826] netlink: 'syz.3.1536': attribute type 10 has an invalid length.
[  374.065686][T11823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  374.080205][T11822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  374.714688][T11853] tap0: tun_chr_ioctl cmd 1074025677
[  374.720209][T11853] tap0: linktype set to 778
[  374.735136][T11850] veth1_macvtap: tun_chr_ioctl cmd 1074025677
[  374.760635][T11850] veth1_macvtap: linktype set to 769
[  374.807027][T11858] tap0: tun_chr_ioctl cmd 1074025677
[  374.818210][T11858] tap0: linktype set to 778
[  374.841170][T11857] tap0: tun_chr_ioctl cmd 1074025673
[  375.624909][T11888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1552'.
[  375.725525][T11891] netlink: 173820 bytes leftover after parsing attributes in process `syz.3.1553'.
[  376.337522][T11905] netlink: 'syz.3.1556': attribute type 1 has an invalid length.
[  376.373445][T11905] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1556'.
[  377.139102][T11934] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1563'.
[  377.754663][T11957] netlink: 'syz.2.1571': attribute type 9 has an invalid length.
[  377.791633][T11957] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1571'.
[  378.360815][T11982] netlink: 'syz.0.1578': attribute type 21 has an invalid length.
[  378.739533][T11987] __nla_validate_parse: 1 callbacks suppressed
[  378.739600][T11987] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1579'.
[  378.793562][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.803203][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.966059][T11992] bridge0: port 2(hsr0) entered disabled state
[  378.972473][T11992] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.996945][T11992] bridge0: entered allmulticast mode
[  379.036283][T11993] bridge0: port 2(hsr0) entered blocking state
[  379.042660][T11993] bridge0: port 2(hsr0) entered forwarding state
[  379.049380][T11993] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.056598][T11993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.064880][T11993] bridge0: entered promiscuous mode
[  379.235277][T12005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1585'.
[  379.541081][T12016] netlink: 'syz.1.1590': attribute type 29 has an invalid length.
[  379.557023][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'.
[  379.572441][T12016] netlink: 'syz.1.1590': attribute type 29 has an invalid length.
[  379.586468][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'.
[  380.497568][T12030] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1594'.
[  380.883955][T12045] netlink: 'syz.2.1595': attribute type 17 has an invalid length.
[  380.939576][T12045] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1595'.
[  383.228441][T12064] bridge0: port 3(batadv0) entered blocking state
[  383.287419][T12064] bridge0: port 3(batadv0) entered disabled state
[  383.294078][T12064] batadv0: entered allmulticast mode
[  383.310514][T12064] batadv0: entered promiscuous mode
[  383.321168][T12064] bridge0: port 3(batadv0) entered blocking state
[  383.327810][T12064] bridge0: port 3(batadv0) entered forwarding state
[  383.360620][T12072] netlink: 'syz.1.1604': attribute type 21 has an invalid length.
[  383.373570][T12072] netlink: 'syz.1.1604': attribute type 4 has an invalid length.
[  383.399154][T12072] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1604'.
[  383.832111][T12077] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1605'.
[  383.847817][T10717] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  383.857796][T10717] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  383.864815][T12077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.985196][T12087] netlink: 'syz.1.1610': attribute type 10 has an invalid length.
[  384.008574][T12091] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1611'.
[  384.074241][T12091] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1611'.
[  384.115522][T12092] netlink: 'syz.0.1611': attribute type 21 has an invalid length.
[  384.217134][T12096] netlink: 'syz.2.1612': attribute type 2 has an invalid length.
[  384.264544][T12096] netlink: 'syz.2.1612': attribute type 1 has an invalid length.
[  384.284842][T12096] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1612'.
[  384.393019][T12100] tap0: tun_chr_ioctl cmd 2148553947
[  384.988946][T12113] netlink: 'syz.3.1617': attribute type 10 has an invalid length.
[  385.688835][T12113] syz_tun: entered promiscuous mode
[  385.746926][T12113] : (slave syz_tun): Enslaving as an active interface with an up link
[  385.824807][T12115] netlink: 'syz.3.1617': attribute type 10 has an invalid length.
[  385.872370][T12115] 8021q: adding VLAN 0 to HW filter on device 
[  385.901173][T12120] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1620'.
[  385.901191][T12115] team0: Port device  added
[  386.062911][T12128] netlink: 'syz.2.1622': attribute type 1 has an invalid length.
[  386.150383][T12128] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1622'.
[  387.028062][T12155] netlink: 'syz.2.1630': attribute type 3 has an invalid length.
[  387.055766][T12155] netlink: 'syz.2.1630': attribute type 1 has an invalid length.
[  387.080220][T12155] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1630'.
[  387.082351][T12158] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1631'.
[  387.713141][T12168] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1634'.
[  387.757187][T12168] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  387.780956][T12168] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  387.781276][T12172] netlink: 'syz.3.1634': attribute type 13 has an invalid length.
[  387.827488][T12172] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1634'.
[  387.865443][T12172] syz_tun: refused to change device tx_queue_len
[  387.907564][T12172] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  388.807417][T12181] netlink: 'syz.0.1638': attribute type 10 has an invalid length.
[  390.690572][T12184] netlink: 'syz.0.1638': attribute type 21 has an invalid length.
[  390.705939][T12184] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.735504][T12184] IPv6: Can't replace route, no match found
[  392.349699][T12228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1649'.
[  392.635273][T12232] netlink: 'syz.2.1650': attribute type 10 has an invalid length.
[  392.678560][T12232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.704423][T12232] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  393.331527][T12255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.692510][ T5787] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  393.701398][ T5787] Bluetooth: hci3: Invalid handle: 0x5393 > 0x0eff
[  395.044728][T12287] ==================================================================
[  395.052910][T12287] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  395.060791][T12287] Write of size 56 at addr ffff88807590aa10 by task syz.2.1666/12287
[  395.068868][T12287] 
[  395.071249][T12287] CPU: 0 PID: 12287 Comm: syz.2.1666 Not tainted syzkaller #0
[  395.078825][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.088892][T12287] Call Trace:
[  395.092181][T12287]  <TASK>
[  395.095126][T12287]  dump_stack_lvl+0x18c/0x250
[  395.099832][T12287]  ? read_lock_is_recursive+0x20/0x20
[  395.105234][T12287]  ? show_regs_print_info+0x20/0x20
[  395.110453][T12287]  ? load_image+0x420/0x420
[  395.114971][T12287]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  395.120449][T12287]  ? __virt_addr_valid+0x10c/0x380
[  395.125605][T12287]  ? __virt_addr_valid+0x10c/0x380
[  395.130774][T12287]  ? __virt_addr_valid+0x10c/0x380
[  395.135907][T12287]  print_report+0xa8/0x210
[  395.140358][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  395.145494][T12287]  kasan_report+0x117/0x150
[  395.150022][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  395.155162][T12287]  kasan_check_range+0x241/0x290
[  395.160122][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  395.165245][T12287]  __asan_memcpy+0x40/0x70
[  395.169661][T12287]  __bpf_get_stackid+0x6c7/0x900
[  395.174599][T12287]  bpf_get_stackid_pe+0x343/0x410
[  395.179622][T12287]  bpf_prog_6611c23d801ea08d+0x29/0x3e
[  395.185074][T12287]  bpf_overflow_handler+0x1fc/0x510
[  395.190272][T12287]  ? bpf_overflow_handler+0xde/0x510
[  395.195553][T12287]  ? tp_perf_event_destroy+0x20/0x20
[  395.200832][T12287]  ? __lock_acquire+0x1262/0x7d80
[  395.205854][T12287]  ? __perf_event_account_interrupt+0x187/0x280
[  395.212116][T12287]  __perf_event_overflow+0x461/0x660
[  395.217398][T12287]  perf_swevent_overflow+0x274/0x340
[  395.222682][T12287]  ? perf_event_switch_output+0x790/0x790
[  395.228402][T12287]  ? rcu_is_watching+0x15/0xb0
[  395.233163][T12287]  perf_swevent_event+0x45c/0x570
[  395.238182][T12287]  ? perf_tp_event+0x1550/0x1550
[  395.243123][T12287]  ___perf_sw_event+0x4ab/0x730
[  395.247987][T12287]  ? ___perf_sw_event+0x19e/0x730
[  395.253017][T12287]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  395.259437][T12287]  ? __lock_acquire+0x1336/0x7d80
[  395.264484][T12287]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  395.270464][T12287]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  395.277675][T12287]  ? lock_chain_count+0x20/0x20
[  395.282534][T12287]  __perf_sw_event+0x139/0x270
[  395.287298][T12287]  do_user_addr_fault+0x1242/0x12d0
[  395.292518][T12287]  ? rcu_is_watching+0x15/0xb0
[  395.297279][T12287]  exc_page_fault+0x64/0x100
[  395.301865][T12287]  asm_exc_page_fault+0x26/0x30
[  395.306713][T12287] RIP: 0010:strncpy_from_user+0x10b/0x2f0
[  395.312431][T12287] Code: 00 00 48 89 de e8 85 a5 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48
[  395.332035][T12287] RSP: 0018:ffffc90004ff7b50 EFLAGS: 00050246
[  395.338100][T12287] RAX: ffffffff8466ea0b RBX: 000000000000007f RCX: ffff888021f83c00
[  395.346062][T12287] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007
[  395.354024][T12287] RBP: ffffc90004ff7d70 R08: ffff888021f83c00 R09: 0000000000000003
[  395.361986][T12287] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000
[  395.369948][T12287] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000
[  395.377918][T12287]  ? strncpy_from_user+0xeb/0x2f0
[  395.382949][T12287]  bpf_prog_load+0xc9e/0x1610
[  395.387626][T12287]  ? map_freeze+0x420/0x420
[  395.392128][T12287]  ? __might_fault+0xaa/0x120
[  395.396796][T12287]  ? __might_fault+0xc6/0x120
[  395.401463][T12287]  ? __might_fault+0xaa/0x120
[  395.406132][T12287]  ? bpf_lsm_bpf+0x9/0x10
[  395.410458][T12287]  ? security_bpf+0x7e/0xa0
[  395.414954][T12287]  __sys_bpf+0x5ba/0x890
[  395.419195][T12287]  ? bpf_link_show_fdinfo+0x560/0x560
[  395.424582][T12287]  ? lock_chain_count+0x20/0x20
[  395.429446][T12287]  __x64_sys_bpf+0x7c/0x90
[  395.433885][T12287]  do_syscall_64+0x55/0xb0
[  395.438297][T12287]  ? clear_bhb_loop+0x40/0x90
[  395.442983][T12287]  ? clear_bhb_loop+0x40/0x90
[  395.447658][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.453550][T12287] RIP: 0033:0x7f796319e159
[  395.457956][T12287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.477554][T12287] RSP: 002b:00007f7963ff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  395.485963][T12287] RAX: ffffffffffffffda RBX: 00007f7963425fa0 RCX: 00007f796319e159
[  395.493927][T12287] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005
[  395.501892][T12287] RBP: 00007f796323506b R08: 0000000000000000 R09: 0000000000000000
[  395.509860][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.517824][T12287] R13: 00007f7963426038 R14: 00007f7963425fa0 R15: 00007fffc3e1aac8
[  395.525799][T12287]  </TASK>
[  395.528811][T12287] 
[  395.531126][T12287] Allocated by task 12287:
[  395.535595][T12287]  kasan_set_track+0x4e/0x70
[  395.540178][T12287]  __kasan_kmalloc+0x8f/0xa0
[  395.544761][T12287]  __kmalloc_node+0xb6/0x240
[  395.549345][T12287]  bpf_map_area_alloc+0x5e/0x110
[  395.554280][T12287]  prealloc_elems_and_freelist+0x86/0x1c0
[  395.559996][T12287]  stack_map_alloc+0x32b/0x4b0
[  395.564752][T12287]  map_create+0x877/0x12f0
[  395.569160][T12287]  __sys_bpf+0x651/0x890
[  395.573393][T12287]  __x64_sys_bpf+0x7c/0x90
[  395.577796][T12287]  do_syscall_64+0x55/0xb0
[  395.582204][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.588093][T12287] 
[  395.590404][T12287] Last potentially related work creation:
[  395.596102][T12287]  kasan_save_stack+0x3e/0x60
[  395.600779][T12287]  __kasan_record_aux_stack+0xaf/0xc0
[  395.606149][T12287]  call_rcu+0x153/0x900
[  395.610306][T12287]  __nf_register_net_hook+0x787/0x910
[  395.615756][T12287]  nf_register_net_hook+0xb2/0x190
[  395.620877][T12287]  nf_register_net_hooks+0x44/0x1b0
[  395.626079][T12287]  nf_ct_netns_do_get+0x3c0/0x5c0
[  395.631095][T12287]  nf_ct_netns_inet_get+0x1f/0x150
[  395.636197][T12287]  nf_conncount_init+0x127/0x380
[  395.641221][T12287]  ovs_ct_init+0x264/0x430
[  395.645693][T12287]  ovs_init_net+0x1e6/0x250
[  395.650219][T12287]  ops_init+0x391/0x640
[  395.654409][T12287]  setup_net+0x3b6/0xa20
[  395.658642][T12287]  copy_net_ns+0x361/0x530
[  395.663056][T12287]  create_new_namespaces+0x3ce/0x700
[  395.668347][T12287]  copy_namespaces+0x42a/0x4a0
[  395.673103][T12287]  copy_process+0x16f6/0x3da0
[  395.677770][T12287]  kernel_clone+0x24b/0x8a0
[  395.682265][T12287]  __x64_sys_clone+0x1b7/0x230
[  395.687018][T12287]  do_syscall_64+0x55/0xb0
[  395.691427][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.697312][T12287] 
[  395.699626][T12287] Second to last potentially related work creation:
[  395.706246][T12287]  kasan_save_stack+0x3e/0x60
[  395.710915][T12287]  __kasan_record_aux_stack+0xaf/0xc0
[  395.716281][T12287]  call_rcu+0x153/0x900
[  395.720434][T12287]  __nf_register_net_hook+0x787/0x910
[  395.725800][T12287]  nf_register_net_hook+0xb2/0x190
[  395.730906][T12287]  nf_register_net_hooks+0x44/0x1b0
[  395.736102][T12287]  nf_ct_netns_do_get+0x213/0x5c0
[  395.741117][T12287]  nf_ct_netns_inet_get+0x3b/0x150
[  395.746218][T12287]  nf_conncount_init+0x127/0x380
[  395.751149][T12287]  ovs_ct_init+0x264/0x430
[  395.755560][T12287]  ovs_init_net+0x1e6/0x250
[  395.760061][T12287]  ops_init+0x391/0x640
[  395.764208][T12287]  setup_net+0x3b6/0xa20
[  395.768442][T12287]  copy_net_ns+0x361/0x530
[  395.772850][T12287]  create_new_namespaces+0x3ce/0x700
[  395.778126][T12287]  copy_namespaces+0x42a/0x4a0
[  395.782882][T12287]  copy_process+0x16f6/0x3da0
[  395.787551][T12287]  kernel_clone+0x24b/0x8a0
[  395.792047][T12287]  __x64_sys_clone+0x1b7/0x230
[  395.796800][T12287]  do_syscall_64+0x55/0xb0
[  395.801208][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.807096][T12287] 
[  395.809409][T12287] The buggy address belongs to the object at ffff88807590aa00
[  395.809409][T12287]  which belongs to the cache kmalloc-cg-64 of size 64
[  395.823621][T12287] The buggy address is located 16 bytes inside of
[  395.823621][T12287]  allocated 40-byte region [ffff88807590aa00, ffff88807590aa28)
[  395.837619][T12287] 
[  395.839935][T12287] The buggy address belongs to the physical page:
[  395.846375][T12287] page:ffffea0001d64280 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807590a680 pfn:0x7590a
[  395.857823][T12287] memcg:ffff888078f4cc01
[  395.862049][T12287] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  395.869934][T12287] page_type: 0xffffffff()
[  395.874597][T12287] raw: 00fff00000000800 ffff888017c4da00 ffffea00017a4d80 dead000000000003
[  395.883196][T12287] raw: ffff88807590a680 0000000080200019 00000001ffffffff ffff888078f4cc01
[  395.891767][T12287] page dumped because: kasan: bad access detected
[  395.898174][T12287] page_owner tracks the page as allocated
[  395.903874][T12287] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6865, tgid 6864 (syz.1.272), ts 138140792809, free_ts 138054523209
[  395.922014][T12287]  post_alloc_hook+0x1c1/0x200
[  395.926785][T12287]  get_page_from_freelist+0x2181/0x22a0
[  395.932324][T12287]  __alloc_pages+0x1f0/0x460
[  395.936915][T12287]  alloc_slab_page+0x5d/0x180
[  395.941593][T12287]  new_slab+0x87/0x2d0
[  395.945655][T12287]  ___slab_alloc+0xc5c/0x12f0
[  395.950322][T12287]  __kmem_cache_alloc_node+0x11f/0x250
[  395.955779][T12287]  kmalloc_trace+0x2a/0xe0
[  395.960193][T12287]  alloc_fdtable+0xca/0x2c0
[  395.964705][T12287]  dup_fd+0x747/0xa20
[  395.968680][T12287]  copy_files+0xaf/0x110
[  395.972915][T12287]  copy_process+0x157d/0x3da0
[  395.977583][T12287]  kernel_clone+0x24b/0x8a0
[  395.982076][T12287]  __x64_sys_clone+0x1b7/0x230
[  395.986834][T12287]  do_syscall_64+0x55/0xb0
[  395.991243][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.997135][T12287] page last free stack trace:
[  396.001794][T12287]  free_unref_page_prepare+0x7d7/0x8f0
[  396.007249][T12287]  free_unref_page_list+0xbe/0x860
[  396.012351][T12287]  release_pages+0x208a/0x2300
[  396.017108][T12287]  tlb_flush_mmu+0x379/0x510
[  396.021701][T12287]  tlb_finish_mmu+0xf4/0x220
[  396.026286][T12287]  exit_mmap+0x428/0xb90
[  396.030539][T12287]  __mmput+0x118/0x3a0
[  396.034612][T12287]  exit_mm+0x23f/0x340
[  396.038680][T12287]  do_exit+0x909/0x2530
[  396.042830][T12287]  do_group_exit+0x22d/0x2f0
[  396.047411][T12287]  get_signal+0x12a6/0x1390
[  396.051908][T12287]  arch_do_signal_or_restart+0xc2/0x7b0
[  396.057484][T12287]  exit_to_user_mode_loop+0x70/0x110
[  396.062773][T12287]  exit_to_user_mode_prepare+0xee/0x180
[  396.068315][T12287]  syscall_exit_to_user_mode+0x1a/0x50
[  396.073772][T12287]  do_syscall_64+0x61/0xb0
[  396.078185][T12287] 
[  396.080498][T12287] Memory state around the buggy address:
[  396.086119][T12287]  ffff88807590a900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  396.094173][T12287]  ffff88807590a980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  396.102221][T12287] >ffff88807590aa00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  396.110272][T12287]                                   ^
[  396.115630][T12287]  ffff88807590aa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  396.123680][T12287]  ffff88807590ab00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  396.131724][T12287] ==================================================================
[  396.139782][T12287] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  396.146962][T12287] CPU: 0 PID: 12287 Comm: syz.2.1666 Not tainted syzkaller #0
[  396.154409][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  396.164453][T12287] Call Trace:
[  396.167729][T12287]  <TASK>
[  396.170652][T12287]  dump_stack_lvl+0x18c/0x250
[  396.175331][T12287]  ? show_regs_print_info+0x20/0x20
[  396.180524][T12287]  ? load_image+0x420/0x420
[  396.185026][T12287]  panic+0x2ca/0x720
[  396.188911][T12287]  ? __lock_acquire+0x7d80/0x7d80
[  396.193948][T12287]  ? bpf_jit_dump+0xd0/0xd0
[  396.198462][T12287]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  396.204354][T12287]  ? _raw_spin_unlock+0x40/0x40
[  396.209204][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  396.214314][T12287]  check_panic_on_warn+0x84/0xa0
[  396.219252][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  396.224361][T12287]  end_report+0x6f/0x130
[  396.228602][T12287]  kasan_report+0x128/0x150
[  396.233110][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  396.238223][T12287]  kasan_check_range+0x241/0x290
[  396.243160][T12287]  ? __bpf_get_stackid+0x6c7/0x900
[  396.248267][T12287]  __asan_memcpy+0x40/0x70
[  396.252682][T12287]  __bpf_get_stackid+0x6c7/0x900
[  396.257648][T12287]  bpf_get_stackid_pe+0x343/0x410
[  396.262675][T12287]  bpf_prog_6611c23d801ea08d+0x29/0x3e
[  396.268126][T12287]  bpf_overflow_handler+0x1fc/0x510
[  396.273343][T12287]  ? bpf_overflow_handler+0xde/0x510
[  396.278634][T12287]  ? tp_perf_event_destroy+0x20/0x20
[  396.283914][T12287]  ? __lock_acquire+0x1262/0x7d80
[  396.288937][T12287]  ? __perf_event_account_interrupt+0x187/0x280
[  396.295173][T12287]  __perf_event_overflow+0x461/0x660
[  396.300455][T12287]  perf_swevent_overflow+0x274/0x340
[  396.305743][T12287]  ? perf_event_switch_output+0x790/0x790
[  396.311464][T12287]  ? rcu_is_watching+0x15/0xb0
[  396.316223][T12287]  perf_swevent_event+0x45c/0x570
[  396.321243][T12287]  ? perf_tp_event+0x1550/0x1550
[  396.326182][T12287]  ___perf_sw_event+0x4ab/0x730
[  396.331029][T12287]  ? ___perf_sw_event+0x19e/0x730
[  396.336047][T12287]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  396.342456][T12287]  ? __lock_acquire+0x1336/0x7d80
[  396.347502][T12287]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  396.353490][T12287]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  396.360694][T12287]  ? lock_chain_count+0x20/0x20
[  396.365547][T12287]  __perf_sw_event+0x139/0x270
[  396.370317][T12287]  do_user_addr_fault+0x1242/0x12d0
[  396.375518][T12287]  ? rcu_is_watching+0x15/0xb0
[  396.380278][T12287]  exc_page_fault+0x64/0x100
[  396.384862][T12287]  asm_exc_page_fault+0x26/0x30
[  396.389705][T12287] RIP: 0010:strncpy_from_user+0x10b/0x2f0
[  396.395417][T12287] Code: 00 00 48 89 de e8 85 a5 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48
[  396.415017][T12287] RSP: 0018:ffffc90004ff7b50 EFLAGS: 00050246
[  396.421076][T12287] RAX: ffffffff8466ea0b RBX: 000000000000007f RCX: ffff888021f83c00
[  396.429042][T12287] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007
[  396.437004][T12287] RBP: ffffc90004ff7d70 R08: ffff888021f83c00 R09: 0000000000000003
[  396.444968][T12287] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000
[  396.452937][T12287] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000
[  396.460915][T12287]  ? strncpy_from_user+0xeb/0x2f0
[  396.465969][T12287]  bpf_prog_load+0xc9e/0x1610
[  396.470649][T12287]  ? map_freeze+0x420/0x420
[  396.475151][T12287]  ? __might_fault+0xaa/0x120
[  396.479822][T12287]  ? __might_fault+0xc6/0x120
[  396.484489][T12287]  ? __might_fault+0xaa/0x120
[  396.489155][T12287]  ? bpf_lsm_bpf+0x9/0x10
[  396.493477][T12287]  ? security_bpf+0x7e/0xa0
[  396.497976][T12287]  __sys_bpf+0x5ba/0x890
[  396.502213][T12287]  ? bpf_link_show_fdinfo+0x560/0x560
[  396.507597][T12287]  ? lock_chain_count+0x20/0x20
[  396.512446][T12287]  __x64_sys_bpf+0x7c/0x90
[  396.516855][T12287]  do_syscall_64+0x55/0xb0
[  396.521265][T12287]  ? clear_bhb_loop+0x40/0x90
[  396.525941][T12287]  ? clear_bhb_loop+0x40/0x90
[  396.530620][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.536513][T12287] RIP: 0033:0x7f796319e159
[  396.540919][T12287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.560520][T12287] RSP: 002b:00007f7963ff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  396.568932][T12287] RAX: ffffffffffffffda RBX: 00007f7963425fa0 RCX: 00007f796319e159
[  396.576895][T12287] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005
[  396.584856][T12287] RBP: 00007f796323506b R08: 0000000000000000 R09: 0000000000000000
[  396.592818][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.600778][T12287] R13: 00007f7963426038 R14: 00007f7963425fa0 R15: 00007fffc3e1aac8
[  396.608751][T12287]  </TASK>
[  396.612010][T12287] Kernel Offset: disabled
[  396.616325][T12287] Rebooting in 86400 seconds..