last executing test programs:

5.49243629s ago: executing program 2 (id=4549):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$kcm(r0, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x23a8}, 0x1)

5.264675975s ago: executing program 2 (id=4551):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2}, 0x94)
recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0x11, 0x3, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

4.832709976s ago: executing program 2 (id=4558):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="7910480000000000690032000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x31)
syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0)

4.505737293s ago: executing program 1 (id=4560):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x28, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20)
setsockopt$sock_attach_bpf(r1, 0x28, 0x8, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$kcm(0x28, 0x5, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) (async)
setsockopt$sock_attach_bpf(r1, 0x28, 0x8, 0x0, 0x0) (async)

4.504635753s ago: executing program 2 (id=4561):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = syz_clone(0x521c2040, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xf710, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1000da}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x5, 0x98, 0x0, 0x2, 0xfffff274, 0xfdfc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, &(0x7f0000000740)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff21)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x82, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x3, 0x7, 0x0, 0x0, 0x5d32, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x3, 0x0, 0x4, 0x80000000, 0x3, 0xe000, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x4, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x8, 0x9}, 0x105460, 0x8, 0x10, 0x0, 0x400000000f, 0x0, 0x3, 0x0, 0x164, 0x0, 0x4}, r1, 0x80000000000008, 0xffffffffffffffff, 0xb)
close(0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
r8 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x7, 0x7, 0x4c, 0x3, 0x0, 0xfffffffffffffff7, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x9, 0x6, 0x9, 0x9, 0x1ff, 0x101, 0x0, 0x2, 0x0, 0x8}, r1, 0x80000000, r2, 0x3)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'ip6gretap0\x00', @remote})

4.168485041s ago: executing program 1 (id=4562):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 32)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="06ff03076844babeb89eacf008e9", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000002081afb0a000200", 0x20}, {&(0x7f0000000d80)="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", 0x40e}], 0x2, 0x0, 0x0, 0x5865}, 0x40000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={0x0}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x4, 0x9, 0x2, 0x7, 0x0, 0x7ff, 0xc1102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x1000}, 0x10000, 0x8, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6f2, 0x0, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000400)=0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89f5, &(0x7f0000000000)={'gretap0\x00', @random="010000201000"}) (async, rerun: 64)
r8 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="140000002d000b35f8ffffffffffffff0fa3096d", 0x14}], 0x1}, 0x854) (async)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8)
recvmsg$unix(r9, &(0x7f0000000c40)={&(0x7f0000000800), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/174, 0xae}, {&(0x7f0000000940)=""/69, 0x45}, {&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/139, 0x8b}], 0x4, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x10020)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x1, 0x5}, 0x50) (async)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.139874622s ago: executing program 2 (id=4563):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x27)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r2], 0xfe33) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async, rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000480), 0xfffffffffffffea3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r6}, 0x38)
r8 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r4, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x2, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x38, 0x8, 0x0, 0x9, 0xf}], &(0x7f00000003c0)='GPL\x00', 0x380, 0x0, 0x0, 0x40f00, 0x2a, '\x00', r10, 0x0, r4, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x5, 0x80, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000700)=[{0x0, 0x1, 0x5, 0x8}, {0x1, 0x1, 0x7, 0x3}, {0x5, 0x3, 0xa, 0x4}, {0x2, 0x5, 0x4, 0x2}, {0x2, 0x3, 0x3, 0x8}, {0x4, 0x2, 0x5, 0x7}], 0x10, 0x1ff}, 0x94) (async)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010) (async)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0109008c", @ANYRES16=r3], 0xee8a) (async)
r11 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

2.830228263s ago: executing program 0 (id=4569):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000240)=""/163, 0xa3, <r2=>0x0, &(0x7f0000000300)=""/182, 0xb6}}, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xd6f9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0xa, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @tracing=0x18, r1, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xb, 0x7}, 0x10, r2, r3, 0x7, &(0x7f0000000680)=[r4, 0x1, r5, r6, r7, r8, 0x1], &(0x7f00000006c0)=[{0x3, 0x2, 0xd, 0xb}, {0x3, 0x3, 0x8, 0x6}, {0x4, 0x5, 0x5, 0x6}, {0x5, 0x2, 0x2, 0xa}, {0x1, 0x3, 0x6, 0x1}, {0x3, 0x3, 0x4, 0xa}, {0x1, 0x1, 0x9, 0xa}], 0x10, 0x8}, 0x94)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r9, 0xe0, &(0x7f0000000a00)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x52, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000b40)=r12)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000b80)={'pimreg0', 0x32, 0x30}, 0xa)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r4}, 0x8)
close(r4)
r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c40)={r11}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r10}, &(0x7f0000000c00), &(0x7f0000000c80)=r13}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r0, <r14=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r13}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x12, &(0x7f0000000dc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000e80)='GPL\x00', 0x0, 0x6b, &(0x7f0000000ec0)=""/107, 0x41000, 0x3, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x3, 0x7, 0x100, 0x98}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16c}, 0x94)
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000001040)={r3}, 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001080)={0x1, <r16=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000010c0)=r16, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r3}, &(0x7f0000001100), &(0x7f0000001140)=r1}, 0x20)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000011c0)={0x9}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r13)
write$cgroup_type(r15, &(0x7f0000001200), 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r13, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000001300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x53, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001580)='devices.allow\x00', 0x2, 0x0)

2.829354873s ago: executing program 2 (id=4570):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000000007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff0900000005000000060000000200000000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12) (async)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) (async)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async)
r10 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb21d, '\x00', r11, r0, 0x5, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x11, &(0x7f00000006c0)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1}], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94)

2.826947553s ago: executing program 1 (id=4571):
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x65031, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x400, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe00}], 0x1}, 0x2002)

2.625275118s ago: executing program 0 (id=4572):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000000000f4ff000000000016000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000000000000000000801200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2.448673622s ago: executing program 3 (id=4573):
socket$kcm(0x2, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) (async)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0xffffffff, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x46, 0x44, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x6, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x6e)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) (async)
openat$cgroup_procs(r3, 0x0, 0x2, 0x0) (async)
r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8510, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

2.176366319s ago: executing program 0 (id=4574):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.785780558s ago: executing program 0 (id=4575):
socket$kcm(0x2c, 0x3, 0x0) (async)
r0 = socket$kcm(0x2, 0x5, 0x84) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000080)=r1, 0x4) (async)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x7}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x2, 0x2, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0xfffffffffffff6f0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xc, [@union={0x3, 0x2, 0x0, 0x5, 0x1, 0x10, [{0x2, 0x4, 0x7f}, {0x0, 0x4, 0x2f}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0xfff, [{0xb, 0x1, 0x6}]}, @enum64={0x2, 0x3, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x1, 0x1}, {0x1, 0x549d}, {0x10, 0x4, 0x1000}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x63ab3a9a}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x30, 0x2e, 0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000000900)=""/41, 0xa4, 0x29, 0x0, 0x40, 0x10000, @value=r1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, &(0x7f00000019c0)=""/173, 0x0, 0xad, 0x1}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={r6}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10) (async)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r12=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, 0x4}, 0x80) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x11, &(0x7f0000000740)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x1, 0x1, 0x4, 0x7fe9d29df6234856, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x68, &(0x7f0000000280)=""/104, 0x41000, 0x32, '\x00', r10, @fallback=0x17, r11, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x4, &(0x7f0000000480)=[0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r8, r8], &(0x7f00000004c0)=[{0x1, 0x2, 0x6, 0x8}, {0x1, 0x3, 0x3, 0xc}, {0x5, 0x2, 0xe, 0x1}, {0x3, 0x2, 0x9, 0xb}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000010000018600000030000000000000070bbab1b85100000f8ffffff851000000700000002000200530500009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x10000, 0xa0, &(0x7f00000003c0)=""/160, 0x41000, 0x57, '\x00', r10, 0x0, r5, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=[{0x1, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x5}], 0x10, 0x7f}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8940, &(0x7f0000000080)) (async)
r13 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}, {&(0x7f0000001a40)="e969b9ca2a9a2732559840ec1ed4bfe607b21531c4e677ffe27da0a9157d62acd6f8707097e994ef", 0x28}], 0x2}, 0x0)

1.652704331s ago: executing program 3 (id=4576):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%ps    \x00'}, 0x20)

1.649521841s ago: executing program 1 (id=4577):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x7, 0x1420, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x5}, 0x4, 0x2bd31cb0, 0x4, 0x908d3dc9dc567a8b, 0x4, 0x6, 0x0, 0x0, 0x7aa0, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r3, 0x9)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="63152a3a2a207700"], 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x7, 0x1420, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x5}, 0x4, 0x2bd31cb0, 0x4, 0x908d3dc9dc567a8b, 0x4, 0x6, 0x0, 0x0, 0x7aa0, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r3, 0x9) (async)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="63152a3a2a207700"], 0x8) (async)

1.618617702s ago: executing program 3 (id=4578):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000800000018270000c06189e1d3754c6a2ad2435779c6fd7256568cc4368516140a39", @ANYRES32=r3, @ANYBLOB="00000000ffffff7f9500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x33, &(0x7f0000000140)=""/51, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2062)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={0xffffffffffffffff, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000009000600731177000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f3, &(0x7f0000000080))

1.504229545s ago: executing program 0 (id=4579):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = getpid()
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x25, &(0x7f0000000100), 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
r8 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x8, 0xe, 0x6, 0x0, 0x298, 0x11000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8a, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1a010, 0x7, 0x5, 0x2, 0x100000000, 0x180000, 0x2, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r10)
perf_event_open(&(0x7f0000000000)={0x3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0xb, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff)
close(r8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0682, 0x0)

1.099399104s ago: executing program 1 (id=4580):
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000bfa200000000400007020000f8ffffffb703000008200000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdb, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaf, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8918, &(0x7f0000000000)={r6})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="f8392f76030157475ded746093c5dde1bcadb9bfc40b52ed4bc7304020af6228f2a49271ba235c", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x3}, 0x8)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/138, 0x8a}, 0x23)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '})

576.157457ms ago: executing program 1 (id=4581):
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x105101, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa0", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f00000001c0), &(0x7f0000000280)=r3}, 0x20)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10d, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r10 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r10, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0}, 0x0)

249.941584ms ago: executing program 3 (id=4582):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0))
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="13000000320081944e82131508e997e0f13ab1", 0x13}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async)
close(r1) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) (async)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0)) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="13000000320081944e82131508e997e0f13ab1", 0x13}], 0x1}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) (async)

249.474634ms ago: executing program 3 (id=4583):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

143.702267ms ago: executing program 0 (id=4584):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x20}, 0x8000)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b", 0x6}], 0x1}, 0x8000)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff7)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000040))
close(r3)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r6, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x101, 0x4000}, 0x80, 0x0}, 0x20000804)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x3, 0x20, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x7}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x6, 0x100, 0x1}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x100}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0xb588, 0xc4, &(0x7f00000002c0)=""/196, 0x40f00, 0x52, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x10001, 0x1}, 0x10, 0x1b4ca, r2, 0x0, &(0x7f0000000540)=[r8, r2], 0x0, 0x10, 0x4}, 0x94)
ioctl$SIOCSIFHWADDR(r7, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000300000000000000000000000186e3108", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=4585):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000040), 0x500}, 0x20)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xfffffffd, '\x00', 0x0, r4, 0x6, 0x5, 0x3}, 0x50)

kernel console output (not intermixed with test programs):

attribute type 3 has an invalid length.
[  799.467984][T17777] netlink: 'syz.3.3032': attribute type 1 has an invalid length.
[  799.480928][T17777] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3032'.
[  800.761201][T17791] netlink: 'syz.0.3035': attribute type 29 has an invalid length.
[  800.872029][T17793] netlink: 'syz.0.3035': attribute type 1 has an invalid length.
[  800.882945][T17793] netlink: 'syz.0.3035': attribute type 6 has an invalid length.
[  800.894410][T17793] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3035'.
[  803.348782][T17788] syzkaller0: entered promiscuous mode
[  803.365375][T17788] syzkaller0: entered allmulticast mode
[  803.376010][T17791] netlink: 'syz.0.3035': attribute type 29 has an invalid length.
[  804.038850][   T51] Bluetooth: Frame is too long (len 149, expected len 4)
[  804.318270][T17809] netlink: 'syz.1.3039': attribute type 15 has an invalid length.
[  804.329575][T17809] netlink: 'syz.1.3039': attribute type 7 has an invalid length.
[  804.588605][T17827] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  804.613021][T17827] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  804.634594][T17827] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  804.702677][T17827] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  804.763547][T17830] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  804.779719][T17833] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  804.858460][T17827] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  805.151194][T17846] macvlan0: entered promiscuous mode
[  805.183533][T17846] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  806.340697][T17873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  806.348087][T17873] IPv6: NLM_F_CREATE should be set when creating new route
[  806.355503][T17873] IPv6: NLM_F_CREATE should be set when creating new route
[  806.362773][T17873] IPv6: NLM_F_CREATE should be set when creating new route
[  806.620151][T17877] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3053'.
[  807.166892][T17891] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3059'.
[  807.425781][T17897] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3061'.
[  807.823204][T17899] syzkaller0: entered promiscuous mode
[  807.855036][T17899] syzkaller0: entered allmulticast mode
[  808.267249][T17901] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3061'.
[  808.267801][T17909] syzkaller0: entered promiscuous mode
[  808.307518][T17909] syzkaller0: entered allmulticast mode
[  809.244362][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.254915][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  810.126261][T17937] validate_nla: 8 callbacks suppressed
[  810.126282][T17937] netlink: 'syz.2.3069': attribute type 29 has an invalid length.
[  811.281763][T17937] netlink: 'syz.2.3069': attribute type 29 has an invalid length.
[  811.294907][T17939] netlink: 'syz.2.3069': attribute type 13 has an invalid length.
[  811.302805][T17939] netlink: 'syz.2.3069': attribute type 58 has an invalid length.
[  811.315029][T17939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3069'.
[  811.765812][T17958] netlink: 'syz.2.3074': attribute type 9 has an invalid length.
[  811.816184][T17958] netlink: 'syz.2.3074': attribute type 23 has an invalid length.
[  811.855011][T17958] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.3074'.
[  811.905057][T17963] netlink: 'syz.2.3074': attribute type 10 has an invalid length.
[  811.970581][T17963] hsr0: entered promiscuous mode
[  812.002700][T17963] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  812.065004][T17963] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  812.088955][T17963] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  812.174961][T17963] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  812.195668][T17971] netlink: 'syz.0.3076': attribute type 5 has an invalid length.
[  812.680459][T17997] can: request_module (can-proto-0) failed.
[  813.177945][T18006] netlink: 'syz.2.3086': attribute type 21 has an invalid length.
[  813.260042][T18006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3086'.
[  813.527802][T18013] netlink: 'syz.3.3087': attribute type 10 has an invalid length.
[  813.807134][T18017] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3088'.
[  813.829291][T18017] openvswitch: netlink: Key type 4112 is out of range max 32
[  814.164006][T18024] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.3090'.
[  814.193961][T18024] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.3090'.
[  814.366058][T18019] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3089'.
[  814.592996][T18027] bridge_slave_1: left allmulticast mode
[  814.628824][T18028] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3091'.
[  814.651200][T18028] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  814.655353][T18027] bridge_slave_1: left promiscuous mode
[  814.679739][T18028] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  814.697761][T18027] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.742818][T18027] bridge_slave_0: left allmulticast mode
[  814.754989][T18027] bridge_slave_0: left promiscuous mode
[  814.769976][T18027] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.544194][T18057] can: request_module (can-proto-0) failed.
[  816.163416][T18065] syzkaller1: tun_chr_ioctl cmd 1074025677
[  816.178802][T18065] syzkaller1: linktype set to 769
[  816.516723][T18084] netlink: 'syz.1.3104': attribute type 29 has an invalid length.
[  816.525546][T18084] netlink: 'syz.1.3104': attribute type 29 has an invalid length.
[  816.536616][T18084] netlink: 'syz.1.3104': attribute type 29 has an invalid length.
[  816.554631][T18084] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  816.607827][T18083] delete_channel: no stack
[  816.721672][T18086] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3105'.
[  816.750574][T18086] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  817.478510][T18100] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3107'.
[  817.549088][T18100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  817.691409][T18106] syzkaller0: entered promiscuous mode
[  817.705379][T18106] syzkaller0: entered allmulticast mode
[  817.742060][T18118] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3110'.
[  817.922312][T18112] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3110'.
[  817.953509][T18112] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  817.994672][T18100] tap0: tun_chr_ioctl cmd 1074025676
[  818.014878][T18100] tap0: owner set to 776
[  820.562594][T18128] can: request_module (can-proto-0) failed.
[  820.568628][T18135] IPv6: Can't replace route, no match found
[  820.854734][T18144] syzkaller0: entered promiscuous mode
[  820.871092][T18144] syzkaller0: entered allmulticast mode
[  821.054952][T18155] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3121'.
[  821.369194][T18162] netlink: 'syz.3.3123': attribute type 1 has an invalid length.
[  821.412430][T18162] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.3123'.
[  822.471394][T18174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3126'.
[  823.043469][T18179] netlink: 'syz.0.3127': attribute type 29 has an invalid length.
[  824.012562][T18179] netlink: 'syz.0.3127': attribute type 29 has an invalid length.
[  824.279216][T18185] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3128'.
[  824.629686][T18199] sit0: entered promiscuous mode
[  825.327483][T18210] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3134'.
[  825.349179][T18210] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  825.492970][T18218] netlink: 'syz.3.3136': attribute type 2 has an invalid length.
[  825.901407][T18225] syzkaller0: entered promiscuous mode
[  825.940665][T18225] syzkaller0: entered allmulticast mode
[  828.738975][T18240] netlink: 'syz.1.3142': attribute type 10 has an invalid length.
[  828.764637][T18240] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.772723][T18240] bridge_slave_1: left allmulticast mode
[  828.782418][T18240] bridge_slave_1: left promiscuous mode
[  828.788721][T18240] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.804095][T18240] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  828.818499][T18249] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3145'.
[  828.871530][T18252] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3146'.
[  829.017985][T18257] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3147'.
[  829.099396][T18255] delete_channel: no stack
[  829.313348][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  831.449554][T18288] syzkaller0: entered promiscuous mode
[  831.465590][T18288] syzkaller0: entered allmulticast mode
[  831.843799][T18307] netlink: 'syz.3.3161': attribute type 29 has an invalid length.
[  832.666367][T18317] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3163'.
[  832.688459][T18317] netlink: 'syz.1.3163': attribute type 2 has an invalid length.
[  833.862221][T18307] netlink: 'syz.3.3161': attribute type 29 has an invalid length.
[  833.873918][T18317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3163'.
[  834.338154][T18334] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3166'.
[  834.671102][T18352] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3172'.
[  834.888973][T18352] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3172'.
[  834.923772][T18358] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3172'.
[  834.979892][T18358] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3172'.
[  835.453361][T18369] syzkaller0: entered promiscuous mode
[  835.478910][T18369] syzkaller0: entered allmulticast mode
[  837.811185][T18392] tap0: tun_chr_ioctl cmd 2147767511
[  837.817590][T18398] netlink: 'syz.3.3180': attribute type 10 has an invalid length.
[  838.069368][T18401] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3181'.
[  838.153379][T18405] netlink: 'syz.1.3182': attribute type 9 has an invalid length.
[  838.168367][T18405] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3182'.
[  838.195460][T18406] C: renamed from team_slave_0 (while UP)
[  838.213832][T18406] netlink: 'syz.1.3182': attribute type 3 has an invalid length.
[  838.223178][T18406] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3182'.
[  838.408495][T18422] netlink: 'syz.3.3187': attribute type 2 has an invalid length.
[  838.417388][T18422] netlink: 'syz.3.3187': attribute type 8 has an invalid length.
[  838.427875][T18422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3187'.
[  838.538503][T18422] netlink: 'syz.3.3187': attribute type 10 has an invalid length.
[  838.547510][T18422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3187'.
[  838.559694][T18421] delete_channel: no stack
[  838.731351][T18432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  839.273249][T18445] syzkaller0: entered promiscuous mode
[  839.285315][T18445] syzkaller0: entered allmulticast mode
[  839.399021][T18454] __nla_validate_parse: 1 callbacks suppressed
[  839.399040][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'.
[  839.449455][T18454] netlink: 'syz.3.3194': attribute type 15 has an invalid length.
[  839.469799][T18454] netlink: 'syz.3.3194': attribute type 16 has an invalid length.
[  839.499048][T18454] netlink: 'syz.3.3194': attribute type 20 has an invalid length.
[  839.530346][T18454] netlink: 'syz.3.3194': attribute type 21 has an invalid length.
[  839.539234][T18454] netlink: 'syz.3.3194': attribute type 23 has an invalid length.
[  839.547446][T18454] netlink: 'syz.3.3194': attribute type 25 has an invalid length.
[  839.555869][T18454] netlink: 'syz.3.3194': attribute type 27 has an invalid length.
[  839.563804][T18454] netlink: 'syz.3.3194': attribute type 28 has an invalid length.
[  839.586392][T18454] netlink: 'syz.3.3194': attribute type 29 has an invalid length.
[  839.594278][T18454] netlink: 'syz.3.3194': attribute type 30 has an invalid length.
[  840.435523][T18473] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3200'.
[  841.836981][T18461] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.3196'.
[  842.742901][T18500] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  842.750226][T18500] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  842.843809][T18499] delete_channel: no stack
[  843.031640][T18504] 
: renamed from bond_slave_0 (while UP)
[  843.109006][T18509] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3211'.
[  843.170003][T18510] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3212'.
[  843.801173][T18526] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.3216'.
[  846.315784][T18541] mac80211_hwsim hwsim33 .3ãc¤±: renamed from wlan1
[  846.330706][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.339957][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.349207][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.358391][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.367566][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.376782][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.386051][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.392379][T18539] validate_nla: 5 callbacks suppressed
[  846.392555][T18539] netlink: 'syz.3.3221': attribute type 29 has an invalid length.
[  846.395205][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.417845][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.427032][T18542] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  846.773999][T18551] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3223'.
[  846.829124][T18539] netlink: 'syz.3.3221': attribute type 29 has an invalid length.
[  847.231097][T18540] netlink: 'syz.3.3221': attribute type 29 has an invalid length.
[  847.248033][T18543] netlink: 'syz.3.3221': attribute type 29 has an invalid length.
[  847.341446][T18557] netlink: 'syz.0.3225': attribute type 10 has an invalid length.
[  847.443960][T18557] bridge0: port 1(team0) entered disabled state
[  847.606470][T18557] bridge0: port 1(team0) entered disabled state
[  847.629468][T18557] C: left promiscuous mode
[  847.644503][T18557] C: left allmulticast mode
[  847.695722][T18557] team0 (unregistering): Port device C removed
[  847.739324][T18557] team_slave_1: left promiscuous mode
[  847.751495][T18557] team_slave_1: left allmulticast mode
[  847.810080][T18557] team0 (unregistering): Port device team_slave_1 removed
[  847.855406][T18557] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  847.885273][T18557] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  848.000225][T18557] team0 (unregistering): Port device netdevsim0 removed
[  848.028838][T18557] mac80211_hwsim hwsim33 .3ãc¤±: left promiscuous mode
[  848.041503][T18557] mac80211_hwsim hwsim33 .3ãc¤±: left allmulticast mode
[  848.070893][T18557] team0 (unregistering): Port device .3ãc¤± removed
[  848.139847][T18566] 
: renamed from bond_slave_0 (while UP)
[  848.321373][T18567] netlink: 'syz.1.3226': attribute type 12 has an invalid length.
[  848.373237][T18567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3226'.
[  849.722339][T18620] 
: renamed from bond_slave_0 (while UP)
[  850.593827][T18637] syz.0.3244[18637] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  850.594268][T18637] syz.0.3244[18637] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  850.881598][T18630] netlink: 'syz.2.3241': attribute type 39 has an invalid length.
[  851.509312][T18638] netlink: 'syz.0.3244': attribute type 10 has an invalid length.
[  851.732140][T18652] netlink: 'syz.1.3248': attribute type 15 has an invalid length.
[  851.743586][T18652] netlink: 'syz.1.3248': attribute type 7 has an invalid length.
[  851.837886][T18660] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3248'.
[  851.966622][T18664] netlink: 'syz.3.3252': attribute type 3 has an invalid length.
[  851.975020][T18664] netlink: 'syz.3.3252': attribute type 16 has an invalid length.
[  851.983362][T18664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3252'.
[  852.138582][T18669] delete_channel: no stack
[  852.330091][T18682] netlink: 'syz.3.3255': attribute type 9 has an invalid length.
[  852.338076][T18682] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3255'.
[  852.549753][T18686] Ÿë
: port 1(ip6gretap0) entered blocking state
[  852.558344][T18686] Ÿë
: port 1(ip6gretap0) entered disabled state
[  852.573947][T18686] ip6gretap0: entered allmulticast mode
[  852.629491][T18686] ip6gretap0: entered promiscuous mode
[  852.670496][T18690] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3259'.
[  852.716409][T18691] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.3259'.
[  854.268455][T18727] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3269'.
[  854.333311][T18725] syzkaller0: entered promiscuous mode
[  854.369507][T18725] syzkaller0: entered allmulticast mode
[  854.379882][T18727] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3269'.
[  854.394039][T18721] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3269'.
[  854.967879][T18737] netlink: 'syz.3.3274': attribute type 3 has an invalid length.
[  854.995467][T18737] netlink: 'syz.3.3274': attribute type 6 has an invalid length.
[  855.014383][T18737] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3274'.
[  857.288405][T18747] netlink: 'syz.2.3277': attribute type 2 has an invalid length.
[  857.296541][T18747] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3277'.
[  857.398244][T18750] netlink: 'syz.0.3278': attribute type 1 has an invalid length.
[  857.407489][T18750] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3278'.
[  857.425944][T18753] netlink: 'syz.2.3279': attribute type 12 has an invalid length.
[  857.434100][T18753] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.3279'.
[  857.629451][T18757] syzkaller0: entered promiscuous mode
[  857.640140][T18757] syzkaller0: entered allmulticast mode
[  858.540761][T18760] delete_channel: no stack
[  860.500907][T18793] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3288'.
[  860.578671][T18793] net_ratelimit: 3319 callbacks suppressed
[  860.578689][T18793] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  861.063076][T18804] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3292'.
[  861.087423][T18805] netlink: 'syz.3.3291': attribute type 29 has an invalid length.
[  861.112707][T18805] netlink: 'syz.3.3291': attribute type 29 has an invalid length.
[  861.151587][T18804] openvswitch: netlink: Message has 20476 unknown bytes.
[  861.200959][T18810] netlink: 'syz.0.3290': attribute type 9 has an invalid length.
[  861.229230][T18810] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3290'.
[  861.442642][T18812] syzkaller0: entered promiscuous mode
[  861.452974][T18812] syzkaller0: entered allmulticast mode
[  861.479956][T18818] netlink: 162840 bytes leftover after parsing attributes in process `syz.3.3295'.
[  862.220111][T18827] netlink: 'syz.0.3297': attribute type 29 has an invalid length.
[  864.012702][T18819] netlink: 162840 bytes leftover after parsing attributes in process `syz.3.3295'.
[  864.024326][T18821] netlink: 'syz.1.3293': attribute type 39 has an invalid length.
[  864.085939][T18827] netlink: 'syz.0.3297': attribute type 29 has an invalid length.
[  864.386430][T18840] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3299'.
[  864.405247][T18847] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3299'.
[  864.826859][T18858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3303'.
[  864.903371][T18872] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3306'.
[  864.953203][T18858] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  865.144481][T18874] netlink: 'syz.2.3305': attribute type 9 has an invalid length.
[  865.152690][T18874] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3305'.
[  865.209287][T18879] syzkaller0: entered promiscuous mode
[  865.216778][T18879] syzkaller0: entered allmulticast mode
[  867.133277][T18882] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3308'.
[  867.300593][T18901] netlink: 'syz.1.3312': attribute type 10 has an invalid length.
[  867.345249][T18901] syz_tun: entered promiscuous mode
[  867.487532][T18901] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  867.564489][T18905] netlink: 'syz.1.3312': attribute type 10 has an invalid length.
[  867.633012][T18905] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.656961][T18905] team0: Port device bond0 added
[  867.669742][T18912] netlink: 'syz.1.3312': attribute type 10 has an invalid length.
[  867.719972][T18914] netlink: 'syz.0.3316': attribute type 39 has an invalid length.
[  867.931397][T18914] hsr_slave_1 (unregistering): left promiscuous mode
[  868.563415][T18935] syzkaller0: entered promiscuous mode
[  868.584539][T18935] syzkaller0: entered allmulticast mode
[  870.436528][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  870.443091][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  872.248307][T18959] netlink: 'syz.3.3327': attribute type 21 has an invalid length.
[  872.256516][T18959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3327'.
[  872.267552][T18964] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3327'.
[  872.287479][T18964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  872.607690][T18996] netlink: 'syz.1.3338': attribute type 10 has an invalid length.
[  872.615762][T18996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3338'.
[  872.625107][T18996] team0: entered promiscuous mode
[  872.630486][T18996] C: entered promiscuous mode
[  872.635787][T18996] team_slave_1: entered promiscuous mode
[  872.641921][T18996] bond0: entered promiscuous mode
[  872.649471][T18996] 
: entered promiscuous mode
[  872.655775][T18996] bond_slave_1: entered promiscuous mode
[  872.666428][T18996] bridge_slave_1: entered promiscuous mode
[  872.678610][T18996] team0: entered allmulticast mode
[  872.688118][T18996] C: entered allmulticast mode
[  872.697087][T18996] team_slave_1: entered allmulticast mode
[  872.703483][T18996] bond0: entered allmulticast mode
[  872.709595][T18996] 
: entered allmulticast mode
[  872.715634][T18996] bond_slave_1: entered allmulticast mode
[  872.721538][T18996] bridge_slave_1: entered allmulticast mode
[  872.728169][T18996] syz_tun: entered allmulticast mode
[  872.737173][T18996] bridge0: port 1(team0) entered blocking state
[  872.743882][T18996] bridge0: port 1(team0) entered disabled state
[  872.770012][T18996] bridge0: port 1(team0) entered blocking state
[  872.776542][T18996] bridge0: port 1(team0) entered forwarding state
[  873.302114][T19018] syzkaller0: entered promiscuous mode
[  873.309067][T19018] syzkaller0: entered allmulticast mode
[  873.429091][T19010] syz.1.3342 (19010) used greatest stack depth: 18024 bytes left
[  873.471057][T19021] netlink: 'syz.2.3345': attribute type 9 has an invalid length.
[  873.489643][T19021] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3345'.
[  877.974346][T19023] netlink: 'syz.0.3346': attribute type 21 has an invalid length.
[  877.982521][T19023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3346'.
[  877.992101][T19025] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3346'.
[  878.012464][T19025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  878.301519][T19044] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3351'.
[  878.316044][T19042] netlink: 'syz.3.3350': attribute type 10 has an invalid length.
[  878.322378][T19048] netlink: 7650 bytes leftover after parsing attributes in process `syz.3.3350'.
[  878.323903][T19042] netlink: 27071 bytes leftover after parsing attributes in process `syz.3.3350'.
[  879.042605][T19067] syzkaller0: entered promiscuous mode
[  879.077489][T19067] syzkaller0: entered allmulticast mode
[  879.179044][T19073] netlink: 'syz.2.3359': attribute type 21 has an invalid length.
[  879.192812][T19073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3359'.
[  881.052891][T19073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3359'.
[  881.073007][T19073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  881.105506][T19086] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3363'.
[  881.147744][T19087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  881.155092][T19087] IPv6: NLM_F_CREATE should be set when creating new route
[  882.372545][T19120] syzkaller0: entered promiscuous mode
[  882.387579][T19120] syzkaller0: entered allmulticast mode
[  882.707255][T19125] Dead loop on virtual device ip6_vti0, fix it urgently!
[  884.330955][T19135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  884.338269][T19135] IPv6: NLM_F_CREATE should be set when creating new route
[  884.474518][T19142] netlink: 'syz.2.3377': attribute type 17 has an invalid length.
[  884.504939][T19142] netlink: 'syz.2.3377': attribute type 16 has an invalid length.
[  884.516497][T19142] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3377'.
[  884.611756][T19147] syzkaller0: entered promiscuous mode
[  884.618251][T19147] syzkaller0: entered allmulticast mode
[  887.071256][T19170] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3382'.
[  887.103055][T19170] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3382'.
[  887.349929][T19176] netlink: 'syz.0.3382': attribute type 10 has an invalid length.
[  887.423259][T19176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  887.472831][T19176] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  887.876333][T19185] syzkaller0: entered promiscuous mode
[  887.892100][T19185] syzkaller0: entered allmulticast mode
[  887.924254][T19190] netlink: 'syz.0.3388': attribute type 3 has an invalid length.
[  887.932756][T19190] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3388'.
[  887.949458][T19190] netlink: 'syz.0.3388': attribute type 29 has an invalid length.
[  888.058225][T19190] netlink: 'syz.0.3388': attribute type 29 has an invalid length.
[  888.071222][T19193] netlink: 'syz.0.3388': attribute type 29 has an invalid length.
[  888.152802][T19194] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3389'.
[  890.561234][T19190] netlink: 'syz.0.3388': attribute type 29 has an invalid length.
[  890.574958][T19193] netlink: 'syz.0.3388': attribute type 29 has an invalid length.
[  891.157545][T19223] netlink: 'syz.1.3396': attribute type 29 has an invalid length.
[  891.271937][T19223] netlink: 'syz.1.3396': attribute type 29 has an invalid length.
[  891.456701][T19228] syzkaller0: entered promiscuous mode
[  891.468168][T19228] syzkaller0: entered allmulticast mode
[  891.487474][T19232] netlink: 'syz.1.3396': attribute type 29 has an invalid length.
[  891.555637][T19235] netlink: 'syz.1.3396': attribute type 29 has an invalid length.
[  891.645301][T19223] netlink: 'syz.1.3396': attribute type 29 has an invalid length.
[  894.048372][T19270] netlink: 'syz.0.3406': attribute type 9 has an invalid length.
[  894.057865][T19270] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3406'.
[  894.581236][T19242] netlink: 'syz.2.3400': attribute type 39 has an invalid length.
[  895.157308][T19284] netlink: 'syz.3.3411': attribute type 3 has an invalid length.
[  895.194852][T19284] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3411'.
[  895.307380][T19291] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3419'.
[  895.409746][T19295] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3414'.
[  895.419615][T19295] openvswitch: netlink: Flow key attribute not present in set flow.
[  895.710927][T19296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3415'.
[  895.768432][T19300] Ÿë
: port 2(gretap0) entered blocking state
[  895.776830][T19300] Ÿë
: port 2(gretap0) entered disabled state
[  895.783646][T19300] gretap0: entered allmulticast mode
[  895.797748][T19300] gretap0: entered promiscuous mode
[  895.989146][T19306] validate_nla: 6 callbacks suppressed
[  895.989163][T19306] netlink: 'syz.2.3417': attribute type 29 has an invalid length.
[  896.100603][T19307] syzkaller0: entered promiscuous mode
[  896.130611][T19307] syzkaller0: entered allmulticast mode
[  896.160978][T19306] netlink: 'syz.2.3417': attribute type 29 has an invalid length.
[  896.201878][T19308] netlink: 'syz.2.3417': attribute type 29 has an invalid length.
[  896.700096][T19324] netlink: 160820 bytes leftover after parsing attributes in process `syz.3.3422'.
[  896.712439][T19324] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  896.880868][T19327] netlink: 'syz.2.3423': attribute type 3 has an invalid length.
[  896.891316][T19327] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3423'.
[  898.683317][T19335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3425'.
[  898.707904][T19335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  898.799199][T19337] netlink: set zone limit has 8 unknown bytes
[  898.818176][T19337] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3426'.
[  899.942707][T19358] netlink: 'syz.3.3432': attribute type 46 has an invalid length.
[  900.750372][T19377] syzkaller0: entered promiscuous mode
[  900.774792][T19377] syzkaller0: entered allmulticast mode
[  903.850905][T19408] syzkaller0: entered promiscuous mode
[  903.856788][T19408] syzkaller0: entered allmulticast mode
[  904.210859][T19422] netlink: 'syz.0.3447': attribute type 3 has an invalid length.
[  904.230568][T19425] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3448'.
[  904.243306][T19422] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3447'.
[  904.941292][T19437] syzkaller0: entered promiscuous mode
[  904.947020][T19437] syzkaller0: entered allmulticast mode
[  904.956230][T19439] netlink: 'syz.1.3453': attribute type 10 has an invalid length.
[  905.153021][T19439] vxcan1: entered promiscuous mode
[  905.205996][T19439] vxcan1: entered allmulticast mode
[  905.212156][T19439] team0: Device vxcan1 is of different type
[  905.692353][T19455] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.3457'.
[  905.963674][T19469] netlink: 'syz.3.3461': attribute type 3 has an invalid length.
[  905.979835][T19469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3461'.
[  907.822204][T19484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3464'.
[  907.851699][T19484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3464'.
[  908.077749][T19491] sit0: entered allmulticast mode
[  908.126694][T19498] netlink: 'syz.0.3468': attribute type 29 has an invalid length.
[  908.135835][T19491] sit0: entered promiscuous mode
[  908.300744][T19498] netlink: 'syz.0.3468': attribute type 29 has an invalid length.
[  908.536145][T19502] sit0: entered promiscuous mode
[  909.141584][T19511] syzkaller0: entered promiscuous mode
[  909.174239][T19511] syzkaller0: entered allmulticast mode
[  909.207294][T19533] netlink: 'syz.0.3476': attribute type 10 has an invalid length.
[  909.216652][T19533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3476'.
[  909.256199][T19533] bridge0: port 1(veth0_vlan) entered blocking state
[  909.270179][T19533] bridge0: port 1(veth0_vlan) entered disabled state
[  909.361897][T19533] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  909.557120][T19543] tap0: tun_chr_ioctl cmd 1074025681
[  911.766610][T19557] netlink: 'syz.1.3479': attribute type 10 has an invalid length.
[  911.775331][T19557] bridge0: port 1(team0) entered disabled state
[  911.798892][T19557] bridge0: port 1(team0) entered blocking state
[  911.805348][T19557] bridge0: port 1(team0) entered forwarding state
[  911.840956][T19557] bridge0: port 1(team0) entered disabled state
[  912.114219][T19566] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3482'.
[  912.289821][T19570] syzkaller0: entered promiscuous mode
[  912.321182][T19570] syzkaller0: entered allmulticast mode
[  912.362227][   T12] syzkaller0: tun_net_xmit 48
[  912.553351][T19578] syzkaller0: tun_net_xmit 1280
[  915.633801][T19596] syzkaller0: entered promiscuous mode
[  915.641795][T19596] syzkaller0: entered allmulticast mode
[  915.674980][T19595] veth0_vlan: left promiscuous mode
[  915.685190][T19600] netlink: 'syz.2.3491': attribute type 29 has an invalid length.
[  915.740405][T19595] veth0_vlan: entered promiscuous mode
[  915.870993][T19600] netlink: 'syz.2.3491': attribute type 29 has an invalid length.
[  916.020556][T19602] netlink: 'syz.2.3491': attribute type 29 has an invalid length.
[  918.077001][T19606] netlink: 'syz.2.3491': attribute type 29 has an invalid length.
[  918.099643][T19618] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3494'.
[  918.414231][T19627] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  918.477617][T19630] netlink: 'syz.0.3499': attribute type 10 has an invalid length.
[  918.509931][T19630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3499'.
[  918.635544][T19638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  918.913581][T19645] syzkaller0: entered promiscuous mode
[  918.925406][T19645] syzkaller0: entered allmulticast mode
[  918.930703][T19643] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3503'.
[  918.963186][T19643] netlink: 'syz.3.3503': attribute type 4 has an invalid length.
[  918.975470][T19643] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3503'.
[  919.132052][T19653] netlink: 'syz.3.3506': attribute type 2 has an invalid length.
[  919.142978][T19653] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3506'.
[  921.581587][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'.
[  921.590929][T19648] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3505'.
[  921.614128][T19676] IPv6: NLM_F_CREATE should be specified when creating new route
[  921.634422][T19676] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3513'.
[  921.800794][T19678] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3514'.
[  921.993471][T19680] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3515'.
[  922.017046][T19688] netlink: 'syz.0.3515': attribute type 4 has an invalid length.
[  922.391804][T19685] veth0_vlan: left promiscuous mode
[  922.408641][T19685] veth0_vlan: entered promiscuous mode
[  922.772908][T19695] tap0: tun_chr_ioctl cmd 1074025677
[  922.803305][T19695] tap0: linktype set to 1
[  923.114031][T19709] syzkaller0: entered promiscuous mode
[  923.120980][T19709] syzkaller0: entered allmulticast mode
[  923.444209][T19715] syz.3.3525[19715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  923.444366][T19715] syz.3.3525[19715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  923.484517][T19715] syz.3.3525[19715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  923.499631][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.517832][T19715] syz.3.3525[19715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  923.518834][T19715] syz.3.3525[19715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  923.530386][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.530914][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.571270][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.578458][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.585501][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.592371][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.599352][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.606327][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.613217][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.620241][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.627186][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.634057][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.641191][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.648741][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.655741][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.662633][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.669739][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.676740][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.683732][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.690752][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.697771][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.704859][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.711787][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.718789][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.725740][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.732637][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.739634][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.746621][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.753687][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.760685][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.767674][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.774553][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.781676][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.788827][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.795827][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.802709][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.809676][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.816627][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.823519][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.830478][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.837432][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.844313][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.846069][T19715] syz.3.3525[19715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  923.851362][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.869896][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.876903][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.883855][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.890967][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.898149][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.905093][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.911971][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.918962][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.925899][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.932806][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.939765][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.946742][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.953820][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.960805][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.967935][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.974901][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.981793][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.988813][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  923.995891][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  924.002766][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  924.009721][   T51] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  924.189611][T19725] netlink: 'syz.1.3527': attribute type 9 has an invalid length.
[  924.197581][T19725] __nla_validate_parse: 1 callbacks suppressed
[  924.197596][T19725] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3527'.
[  925.798198][T19728] netlink: 'syz.1.3527': attribute type 9 has an invalid length.
[  925.819432][T19728] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3527'.
[  926.141577][T19733] veth0_vlan: left promiscuous mode
[  926.161473][T19733] veth0_vlan: entered promiscuous mode
[  926.212606][T19738] netlink: 'syz.1.3532': attribute type 33 has an invalid length.
[  926.236389][T19738] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3532'.
[  927.029779][T19769] netlink: 'syz.1.3539': attribute type 29 has an invalid length.
[  927.038527][T19769] netlink: 'syz.1.3539': attribute type 29 has an invalid length.
[  927.926949][T19783] syzkaller0: entered promiscuous mode
[  927.941219][T19783] syzkaller0: entered allmulticast mode
[  928.017927][T19789] netlink: 'syz.3.3545': attribute type 29 has an invalid length.
[  931.192556][T19789] netlink: 'syz.3.3545': attribute type 29 has an invalid length.
[  931.516776][T19813] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3551'.
[  931.528510][T19813] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.3551'.
[  931.872645][T19823] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3553'.
[  931.882543][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  931.888924][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  932.193509][T19838] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.3547'.
[  932.213737][T19839] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.3547'.
[  932.307981][T19833] netlink: 'syz.0.3547': attribute type 10 has an invalid length.
[  932.332958][T19833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3547'.
[  932.347455][T19833] caif0: entered promiscuous mode
[  932.355828][T19833] caif0: entered allmulticast mode
[  932.364626][T19833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  932.381627][T19838] netlink: 'syz.0.3547': attribute type 10 has an invalid length.
[  932.393136][T19838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3547'.
[  932.414104][T19838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  932.610538][T19849] syzkaller0: entered promiscuous mode
[  932.620039][T19849] syzkaller0: entered allmulticast mode
[  934.684819][T19863] netlink: 'syz.0.3560': attribute type 4 has an invalid length.
[  934.704813][T19863] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3560'.
[  934.713931][T19863] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  934.967897][T19870] netlink: 'syz.2.3561': attribute type 21 has an invalid length.
[  935.007769][T19870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3561'.
[  935.045546][T19870] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3561'.
[  935.119541][T19876] netlink: 'syz.1.3565': attribute type 39 has an invalid length.
[  935.335664][T19885] netlink: 'syz.2.3567': attribute type 4 has an invalid length.
[  936.561327][T19899] syzkaller0: entered promiscuous mode
[  936.567773][T19899] syzkaller0: entered allmulticast mode
[  936.674151][T19904] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0
[  937.465614][T19908] delete_channel: no stack
[  939.750558][T19951] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  940.806788][T19970] __nla_validate_parse: 1 callbacks suppressed
[  940.806809][T19970] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3590'.
[  941.213220][T19970] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3590'.
[  941.324870][T19981] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3590'.
[  941.474646][T19972] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3590'.
[  941.618283][T19976] syzkaller0: entered promiscuous mode
[  941.625610][T19976] syzkaller0: entered allmulticast mode
[  944.385380][T20004] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3599'.
[  944.409434][T20004] hsr_slave_0: left promiscuous mode
[  944.419512][T20004] hsr_slave_1: left promiscuous mode
[  945.982908][T20061] syzkaller0: entered promiscuous mode
[  945.998136][T20061] syzkaller0: entered allmulticast mode
[  948.536842][T20071] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3612'.
[  948.787253][T20078] netlink: 'syz.0.3614': attribute type 29 has an invalid length.
[  948.842936][T20078] netlink: 'syz.0.3614': attribute type 29 has an invalid length.
[  948.901459][T20080] netlink: 'syz.3.3616': attribute type 12 has an invalid length.
[  948.925272][T20080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3616'.
[  948.946733][T20081] netlink: 'syz.0.3614': attribute type 29 has an invalid length.
[  951.032064][T20116] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3623'.
[  952.638865][T20117] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  952.670526][T20117] syzkaller0: entered promiscuous mode
[  952.680093][T20117] syzkaller0: entered allmulticast mode
[  954.984031][T20121] netlink: 'syz.2.3625': attribute type 21 has an invalid length.
[  954.992175][T20121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3625'.
[  955.001488][T20121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3625'.
[  955.065519][T20137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3626'.
[  955.091609][T20139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3626'.
[  955.380603][T20148] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3629'.
[  955.489564][T20152] netlink: 'syz.1.3631': attribute type 27 has an invalid length.
[  955.714571][T20156] netlink: 'syz.3.3633': attribute type 10 has an invalid length.
[  955.726168][T20156] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3633'.
[  955.924441][T20166] syzkaller0: entered promiscuous mode
[  955.930101][T20166] syzkaller0: entered allmulticast mode
[  958.393895][T20175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  958.481387][T20184] Ÿë
: port 1(gretap0) entered blocking state
[  958.489057][T20184] Ÿë
: port 1(gretap0) entered disabled state
[  958.515139][T20184] gretap0: entered allmulticast mode
[  958.522591][T20184] gretap0: entered promiscuous mode
[  958.554025][T20190] Ÿë
: port 2(veth0_to_team) entered blocking state
[  958.561179][T20190] Ÿë
: port 2(veth0_to_team) entered disabled state
[  958.571423][T20190] veth0_to_team: entered allmulticast mode
[  958.606557][T20190] veth0_to_team: entered promiscuous mode
[  959.250659][T20204] syzkaller0: entered promiscuous mode
[  959.264619][T20204] syzkaller0: entered allmulticast mode
[  959.337919][T20211] netlink: 'syz.2.3648': attribute type 3 has an invalid length.
[  959.375103][T20211] netlink: 'syz.2.3648': attribute type 4 has an invalid length.
[  959.419481][T20211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3648'.
[  959.509006][T20215] netlink: 'syz.0.3649': attribute type 9 has an invalid length.
[  959.522443][T20215] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3649'.
[  961.059079][T20248] sctp: [Deprecated]: syz.2.3654 (pid 20248) Use of struct sctp_assoc_value in delayed_ack socket option.
[  961.059079][T20248] Use struct sctp_sack_info instead
[  961.233218][T20255] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3655'.
[  965.669150][T20306] netlink: 'syz.2.3661': attribute type 33 has an invalid length.
[  966.878334][T20330] syz.2.3668[20330] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  966.878618][T20330] syz.2.3668[20330] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  966.892385][T20331] netlink: 'syz.3.3669': attribute type 5 has an invalid length.
[  966.933374][T20331] netlink: 'syz.3.3669': attribute type 1 has an invalid length.
[  966.941980][T20331] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3669'.
[  966.997693][T20331] netlink: 'syz.3.3669': attribute type 29 has an invalid length.
[  967.015205][T20331] netlink: 'syz.3.3669': attribute type 29 has an invalid length.
[  967.044550][T20331] netlink: 'syz.3.3669': attribute type 29 has an invalid length.
[  967.066032][T20331] netlink: 'syz.3.3669': attribute type 29 has an invalid length.
[  967.116413][T20333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3671'.
[  967.159715][T20333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3671'.
[  967.292195][T20333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3671'.
[  967.427564][T20336] mac80211_hwsim hwsim50 wlan0: left promiscuous mode
[  967.444754][T20336] mac80211_hwsim hwsim50 wlan0: left allmulticast mode
[  967.841320][T20347] netlink: 'syz.2.3676': attribute type 12 has an invalid length.
[  967.865091][T20347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3676'.
[  968.117402][T20355] syzkaller0: entered promiscuous mode
[  968.131131][T20355] syzkaller0: entered allmulticast mode
[  968.281648][T20361] netlink: 'syz.3.3679': attribute type 2 has an invalid length.
[  968.302502][T20361] netlink: 'syz.3.3679': attribute type 1 has an invalid length.
[  970.784408][T20383] syzkaller0: entered promiscuous mode
[  970.790048][T20383] syzkaller0: entered allmulticast mode
[  973.079110][T20391] bridge_slave_1: left allmulticast mode
[  973.084927][T20391] bridge_slave_1: left promiscuous mode
[  973.090677][T20391] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.234032][T20406] netlink: 'syz.3.3690': attribute type 21 has an invalid length.
[  973.254399][T20406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3690'.
[  973.541682][T20422] syzkaller0: entered promiscuous mode
[  973.547524][T20422] syzkaller0: entered allmulticast mode
[  975.490699][T20429] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3697'.
[  977.272695][T20471] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3707'.
[  977.299410][T20474] syzkaller0: entered promiscuous mode
[  977.309961][T20474] syzkaller0: entered allmulticast mode
[  977.317927][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'.
[  978.307011][T20495] netlink: 'syz.0.3714': attribute type 29 has an invalid length.
[  980.144570][T20495] netlink: 'syz.0.3714': attribute type 29 has an invalid length.
[  980.484095][T20505] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3715'.
[  980.559751][T20505] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3715'.
[  980.654692][T20505] bond0: (slave 
3
4
): Releasing backup interface
[  980.969132][T20505] A link change request failed with some changes committed already. Interface 
3
4
 may have been left with an inconsistent configuration, please check.
[  981.055605][T20510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3716'.
[  981.860397][T20522] syzkaller0: entered promiscuous mode
[  981.882372][T20522] syzkaller0: entered allmulticast mode
[  981.920615][T20528] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3721'.
[  982.571106][T20535] syzkaller0: entered promiscuous mode
[  982.612125][T20535] syzkaller0: entered allmulticast mode
[  982.685203][T20540] netlink: 'syz.0.3724': attribute type 19 has an invalid length.
[  982.693122][T20540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3724'.
[  986.931992][T20598] netlink: 'syz.1.3738': attribute type 6 has an invalid length.
[  987.024973][T20598] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3738'.
[  987.250019][T20605] netlink: 'syz.0.3740': attribute type 29 has an invalid length.
[  987.271105][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3740'.
[  989.910880][T20603] syzkaller0: entered promiscuous mode
[  989.917179][T20603] syzkaller0: entered allmulticast mode
[  989.934820][T20605] netlink: 'syz.0.3740': attribute type 29 has an invalid length.
[  989.951990][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3740'.
[  992.556657][T20617] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3742'.
[  992.567554][T20641] netlink: 'syz.0.3743': attribute type 2 has an invalid length.
[  992.575681][T20641] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3743'.
[  992.964420][T20697] netlink: 'syz.3.3748': attribute type 1 has an invalid length.
[  992.986756][T20696] netlink: 'syz.3.3748': attribute type 1 has an invalid length.
[  993.131795][T20695] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3747'.
[  993.141549][T20695] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  993.317908][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  993.327022][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  993.350584][T20712] netlink: 1851 bytes leftover after parsing attributes in process `syz.2.3751'.
[  993.363159][T20712] netlink: 1851 bytes leftover after parsing attributes in process `syz.2.3751'.
[  993.378798][T20710] netlink: 1851 bytes leftover after parsing attributes in process `syz.2.3751'.
[  993.767075][T20720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3754'.
[  993.778988][T20720] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3754'.
[  993.793746][T20720] netlink: 'syz.3.3754': attribute type 10 has an invalid length.
[  993.803865][T20720] bridge0: port 3(hsr0) entered disabled state
[  993.810506][T20720] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.966313][T20724] netlink: 'syz.3.3755': attribute type 21 has an invalid length.
[  993.975255][T20724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3755'.
[  994.327034][T20735] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.3760'.
[  994.420611][T20739] netlink: 'syz.1.3761': attribute type 8 has an invalid length.
[  994.854652][T20754] syzkaller0: entered promiscuous mode
[  994.876129][T20754] syzkaller0: entered allmulticast mode
[  994.919976][T20757] netlink: 'syz.0.3767': attribute type 3 has an invalid length.
[  994.928210][T20757] netlink: 'syz.0.3767': attribute type 8 has an invalid length.
[  997.150602][T20778] ±ÿ: renamed from veth0_vlan (while UP)
[  997.248934][T20778] netlink: 'syz.0.3774': attribute type 10 has an invalid length.
[  997.265030][T20778] hsr0: left promiscuous mode
[  998.957158][T20834] syzkaller0: entered promiscuous mode
[  998.962824][T20834] syzkaller0: entered allmulticast mode
[  999.089145][T20839] __nla_validate_parse: 5 callbacks suppressed
[  999.089165][T20839] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3790'.
[  999.258423][T20843] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3791'.
[  999.545942][T20849] netlink: 'syz.1.3793': attribute type 21 has an invalid length.
[ 1000.138662][T20861] netlink: 'syz.0.3795': attribute type 4 has an invalid length.
[ 1000.157996][T20861] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3795'.
[ 1000.278249][T20863] netlink: 'syz.2.3796': attribute type 63 has an invalid length.
[ 1000.296537][T20863] netlink: 'syz.2.3796': attribute type 63 has an invalid length.
[ 1000.350732][T20866] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3797'.
[ 1000.363708][T20867] netlink: 'syz.1.3797': attribute type 10 has an invalid length.
[ 1000.561729][T20867] gre0: entered promiscuous mode
[ 1000.570822][T20867] gre0: entered allmulticast mode
[ 1000.577100][T20867] team0: Device gre0 is of different type
[ 1000.633355][T20877] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3800'.
[ 1000.646854][T20877] openvswitch: netlink: Duplicate key (type 0).
[ 1001.311851][T20887] netlink: 'syz.1.3802': attribute type 41 has an invalid length.
[ 1001.532420][T20900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3805'.
[ 1001.689323][T20904] netlink: 'syz.1.3804': attribute type 9 has an invalid length.
[ 1001.772360][T20911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3807'.
[ 1002.122251][T20920] netlink: 'syz.0.3809': attribute type 29 has an invalid length.
[ 1002.132948][T20920] netlink: 'syz.0.3809': attribute type 29 has an invalid length.
[ 1002.162290][T20921] netlink: 'syz.0.3809': attribute type 29 has an invalid length.
[ 1002.402125][T20923] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3810'.
[ 1003.294303][T20940] sit0: left promiscuous mode
[ 1003.827845][T20960] syzkaller0: entered promiscuous mode
[ 1003.833479][T20960] syzkaller0: entered allmulticast mode
[ 1006.049690][T20966] validate_nla: 4 callbacks suppressed
[ 1006.049703][T20966] netlink: 'syz.2.3824': attribute type 41 has an invalid length.
[ 1006.316630][T20986] netlink: 'syz.0.3828': attribute type 6 has an invalid length.
[ 1006.328222][T20986] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3828'.
[ 1007.692448][T21015] netlink: 'syz.0.3835': attribute type 41 has an invalid length.
[ 1007.753662][T21005] netlink: 'syz.1.3834': attribute type 9 has an invalid length.
[ 1007.763817][T21005] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3834'.
[ 1008.305830][T21022] netlink: 'syz.2.3838': attribute type 3 has an invalid length.
[ 1008.354873][T21022] netlink: 'syz.2.3838': attribute type 20 has an invalid length.
[ 1008.363186][T21022] netlink: 'syz.2.3838': attribute type 25 has an invalid length.
[ 1008.520769][T21029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3842'.
[ 1008.541559][T21029] netlink: get zone limit has 4 unknown bytes
[ 1008.572117][T21020] syzkaller0: entered promiscuous mode
[ 1008.578149][T21020] syzkaller0: entered allmulticast mode
[ 1008.735726][T21041] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3840'.
[ 1010.728317][T21061] netlink: 'syz.1.3847': attribute type 29 has an invalid length.
[ 1010.870952][T21068] netlink: 'syz.1.3847': attribute type 29 has an invalid length.
[ 1011.983195][T21041] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3840'.
[ 1012.012767][T21061] netlink: 'syz.1.3847': attribute type 29 has an invalid length.
[ 1012.167291][T21075] netlink: 'syz.0.3849': attribute type 11 has an invalid length.
[ 1012.184588][T21075] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.3849'.
[ 1012.339183][T21075] syzkaller0: entered promiscuous mode
[ 1012.345855][T21075] syzkaller0: entered allmulticast mode
[ 1014.947247][T21111] sctp: [Deprecated]: syz.0.3855 (pid 21111) Use of int in maxseg socket option.
[ 1014.947247][T21111] Use struct sctp_assoc_value instead
[ 1015.049601][T21119] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3858'.
[ 1015.071507][T21106] syzkaller0: entered promiscuous mode
[ 1015.105723][T21106] syzkaller0: entered allmulticast mode
[ 1015.128603][T21119] openvswitch: netlink: IP tunnel dst address not specified
[ 1017.770073][T21128] netlink: 'syz.1.3859': attribute type 21 has an invalid length.
[ 1017.778248][T21128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3859'.
[ 1018.127613][T21146] netlink: 'syz.0.3864': attribute type 3 has an invalid length.
[ 1018.144770][T21146] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3864'.
[ 1018.285786][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3865'.
[ 1019.132633][T21179] syzkaller0: entered promiscuous mode
[ 1019.139052][T21179] syzkaller0: entered allmulticast mode
[ 1021.238577][T21182] netlink: 'syz.2.3872': attribute type 4 has an invalid length.
[ 1021.247397][T21192] netlink: 'syz.3.3875': attribute type 5 has an invalid length.
[ 1021.370706][T21195] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3876'.
[ 1023.498390][T21209] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[ 1023.507812][T21209] netlink: 'syz.1.3879': attribute type 4 has an invalid length.
[ 1023.517238][T21209] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3879'.
[ 1023.527336][T21212] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[ 1023.535665][T21212] netlink: 4070 bytes leftover after parsing attributes in process `syz.1.3879'.
[ 1025.643833][T21235] netlink: 'syz.3.3884': attribute type 19 has an invalid length.
[ 1025.652058][T21235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3884'.
[ 1026.231013][T21248] syzkaller0: entered promiscuous mode
[ 1026.279903][T21248] syzkaller0: entered allmulticast mode
[ 1029.639840][T21283] delete_channel: no stack
[ 1030.853696][T21322] syzkaller0: entered promiscuous mode
[ 1030.869856][T21322] syzkaller0: entered allmulticast mode
[ 1031.554279][T21336] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3909'.
[ 1033.716543][T21336] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3909'.
[ 1033.728328][T21339] netlink: 'syz.0.3909': attribute type 10 has an invalid length.
[ 1035.105809][T21366] syzkaller0: entered promiscuous mode
[ 1035.111362][T21366] syzkaller0: entered allmulticast mode
[ 1036.376213][T21399] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3925'.
[ 1036.416480][T21399] netlink: 'syz.1.3925': attribute type 41 has an invalid length.
[ 1037.709127][T21399] netlink: 'syz.1.3925': attribute type 41 has an invalid length.
[ 1037.966532][T21412] netlink: 'syz.2.3929': attribute type 27 has an invalid length.
[ 1037.989221][T21412] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3929'.
[ 1038.915462][T21444] hsr0: entered promiscuous mode
[ 1039.005136][T21447] syzkaller0: entered promiscuous mode
[ 1039.013992][T21447] syzkaller0: entered allmulticast mode
[ 1039.444621][T21462] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3941'.
[ 1039.878921][T21464] netlink: 'syz.3.3942': attribute type 3 has an invalid length.
[ 1039.888424][T21464] netlink: 127328 bytes leftover after parsing attributes in process `syz.3.3942'.
[ 1041.484082][T21462] netlink: 22808 bytes leftover after parsing attributes in process `syz.0.3941'.
[ 1041.506036][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'.
[ 1041.814989][T21473] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3943'.
[ 1041.883350][T21469] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.3943'.
[ 1041.957925][T21473] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1042.132858][T21474] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3944'.
[ 1042.306485][T21474] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1042.335639][T21474] CPU: 1 PID: 21474 Comm: syz.3.3944 Not tainted syzkaller #0
[ 1042.343175][T21474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1042.353275][T21474] Call Trace:
[ 1042.356586][T21474]  <TASK>
[ 1042.359551][T21474]  dump_stack_lvl+0x18c/0x250
[ 1042.364270][T21474]  ? show_regs_print_info+0x20/0x20
[ 1042.369506][T21474]  ? load_image+0x420/0x420
[ 1042.374111][T21474]  sysfs_warn_dup+0x8e/0xa0
[ 1042.378678][T21474]  sysfs_do_create_link_sd+0xc0/0x110
[ 1042.384129][T21474]  device_add_class_symlinks+0x1cf/0x240
[ 1042.389817][T21474]  device_add+0x4f9/0xc40
[ 1042.394196][T21474]  wiphy_register+0x1d99/0x2ac0
[ 1042.399120][T21474]  ? cfg80211_event_work+0x40/0x40
[ 1042.404278][T21474]  ? minstrel_ht_alloc+0x88a/0x990
[ 1042.409450][T21474]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1042.415578][T21474]  ieee80211_register_hw+0x2dd8/0x3b30
[ 1042.421090][T21474]  ? ieee80211_register_hw+0xf11/0x3b30
[ 1042.426688][T21474]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1042.432374][T21474]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1042.438318][T21474]  ? __debug_object_init+0xec/0x450
[ 1042.443575][T21474]  ? __asan_memset+0x22/0x40
[ 1042.448221][T21474]  ? __hrtimer_init+0x189/0x270
[ 1042.453123][T21474]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[ 1042.458911][T21474]  ? mac80211_hwsim_free+0x220/0x220
[ 1042.464232][T21474]  ? rcu_is_watching+0x15/0xb0
[ 1042.469049][T21474]  ? kstrndup+0xbd/0x140
[ 1042.473348][T21474]  hwsim_new_radio_nl+0xdad/0x1a70
[ 1042.478506][T21474]  ? __nla_validate+0x50/0x50
[ 1042.483250][T21474]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1042.489634][T21474]  ? __nla_parse+0x40/0x50
[ 1042.494100][T21474]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1042.500477][T21474]  genl_family_rcv_msg_doit+0x21a/0x310
[ 1042.506096][T21474]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1042.512055][T21474]  ? bpf_lsm_capable+0x9/0x10
[ 1042.516779][T21474]  ? security_capable+0x89/0xb0
[ 1042.521678][T21474]  genl_rcv_msg+0x611/0x7a0
[ 1042.526226][T21474]  ? genl_bind+0x360/0x360
[ 1042.530672][T21474]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1042.537045][T21474]  netlink_rcv_skb+0x235/0x4c0
[ 1042.541838][T21474]  ? genl_bind+0x360/0x360
[ 1042.546300][T21474]  ? netlink_ack+0x1160/0x1160
[ 1042.551107][T21474]  ? __lock_acquire+0x7d80/0x7d80
[ 1042.556171][T21474]  ? down_read+0x1ac/0x2e0
[ 1042.560620][T21474]  genl_rcv+0x28/0x40
[ 1042.564629][T21474]  netlink_unicast+0x7b1/0x930
[ 1042.569432][T21474]  netlink_sendmsg+0x8d0/0xbf0
[ 1042.574231][T21474]  ? netlink_getsockopt+0x590/0x590
[ 1042.579457][T21474]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1042.585032][T21474]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1042.590346][T21474]  ? security_socket_sendmsg+0x80/0xa0
[ 1042.595831][T21474]  ? netlink_getsockopt+0x590/0x590
[ 1042.601054][T21474]  ____sys_sendmsg+0x61b/0x980
[ 1042.605852][T21474]  ? __asan_memset+0x22/0x40
[ 1042.610473][T21474]  ? __sys_sendmsg_sock+0x30/0x30
[ 1042.615523][T21474]  ? __import_iovec+0x5f2/0x850
[ 1042.620416][T21474]  ? import_iovec+0x73/0xa0
[ 1042.624956][T21474]  ___sys_sendmsg+0x2a6/0x360
[ 1042.629667][T21474]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1042.634506][T21474]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1042.639384][T21474]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1042.645666][T21474]  ? __x64_sys_sendmsg+0x80/0x80
[ 1042.650636][T21474]  ? lock_chain_count+0x20/0x20
[ 1042.655523][T21474]  ? lockdep_hardirqs_on+0x98/0x150
[ 1042.660755][T21474]  do_syscall_64+0x55/0xb0
[ 1042.665196][T21474]  ? clear_bhb_loop+0x40/0x90
[ 1042.669902][T21474]  ? clear_bhb_loop+0x40/0x90
[ 1042.674617][T21474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1042.680545][T21474] RIP: 0033:0x7fae8699e159
[ 1042.684989][T21474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1042.704668][T21474] RSP: 002b:00007fae8780f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1042.713124][T21474] RAX: ffffffffffffffda RBX: 00007fae86c25fa0 RCX: 00007fae8699e159
[ 1042.721126][T21474] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000000000aa
[ 1042.729128][T21474] RBP: 00007fae86a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1042.737160][T21474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1042.745160][T21474] R13: 00007fae86c26038 R14: 00007fae86c25fa0 R15: 00007ffde27baf78
[ 1042.753172][T21474]  </TASK>
[ 1043.200638][T21499] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3950'.
[ 1043.241293][T21505] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3951'.
[ 1043.265619][T21499] netlink: del zone limit has 8 unknown bytes
[ 1043.309374][T21505] netlink: 'syz.3.3951': attribute type 29 has an invalid length.
[ 1043.325833][T21505] netlink: 'syz.3.3951': attribute type 29 has an invalid length.
[ 1045.570167][T21529] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3955'.
[ 1045.657878][T21527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1045.679833][T21527] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1045.701725][T21527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1045.735121][T21527] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1046.160714][T21529] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1046.414057][T21528] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3955'.
[ 1046.906583][T21539] netlink: 'syz.0.3958': attribute type 6 has an invalid length.
[ 1046.924137][T21539] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3958'.
[ 1047.930062][T21549] netlink: 'syz.3.3962': attribute type 153 has an invalid length.
[ 1048.008113][T21549] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3962'.
[ 1048.859951][T21555] netlink: 'syz.1.3961': attribute type 3 has an invalid length.
[ 1048.899304][T21555] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3961'.
[ 1048.947638][T21554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3961'.
[ 1049.767939][T21564] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3965'.
[ 1050.039271][T21566] netlink: 'syz.2.3964': attribute type 29 has an invalid length.
[ 1050.048611][T21567] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3964'.
[ 1050.187730][T21566] netlink: 'syz.2.3964': attribute type 29 has an invalid length.
[ 1052.864388][T21598] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3970'.
[ 1052.915529][T21597] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3970'.
[ 1053.315284][T21603] netlink: 'syz.2.3973': attribute type 9 has an invalid length.
[ 1053.351399][T21603] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3973'.
[ 1053.365324][T21608] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3974'.
[ 1053.406486][T21595] delete_channel: no stack
[ 1053.558469][T21611] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.3974'.
[ 1053.584986][T21611] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3974'.
[ 1053.658293][T21611] netlink: 'syz.3.3974': attribute type 10 has an invalid length.
[ 1054.750461][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.761689][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.999666][T21644] netlink: 'syz.3.3983': attribute type 10 has an invalid length.
[ 1055.012918][T21637] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3982'.
[ 1055.035280][T21644] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1055.052529][T21644] bridge0: port 3(hsr0) entered blocking state
[ 1055.059239][T21644] bridge0: port 3(hsr0) entered listening state
[ 1055.066227][T21644] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.074089][T21644] bridge0: port 1(bridge_slave_0) entered listening state
[ 1055.102971][T21644] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1055.126156][T21637] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1055.146585][T21637] CPU: 0 PID: 21637 Comm: syz.2.3982 Not tainted syzkaller #0
[ 1055.154188][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1055.164344][T21637] Call Trace:
[ 1055.167712][T21637]  <TASK>
[ 1055.170732][T21637]  dump_stack_lvl+0x18c/0x250
[ 1055.175511][T21637]  ? show_regs_print_info+0x20/0x20
[ 1055.180807][T21637]  ? load_image+0x420/0x420
[ 1055.185439][T21637]  sysfs_warn_dup+0x8e/0xa0
[ 1055.190030][T21637]  sysfs_do_create_link_sd+0xc0/0x110
[ 1055.195505][T21637]  device_add_class_symlinks+0x1cf/0x240
[ 1055.201247][T21637]  device_add+0x4f9/0xc40
[ 1055.205661][T21637]  wiphy_register+0x1d99/0x2ac0
[ 1055.210691][T21637]  ? cfg80211_event_work+0x40/0x40
[ 1055.215888][T21637]  ? minstrel_ht_alloc+0x88a/0x990
[ 1055.221129][T21637]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1055.227325][T21637]  ieee80211_register_hw+0x2dd8/0x3b30
[ 1055.232914][T21637]  ? ieee80211_register_hw+0xf11/0x3b30
[ 1055.238590][T21637]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1055.244304][T21637]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1055.250289][T21637]  ? __debug_object_init+0xec/0x450
[ 1055.255609][T21637]  ? __asan_memset+0x22/0x40
[ 1055.260308][T21637]  ? __hrtimer_init+0x189/0x270
[ 1055.265265][T21637]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[ 1055.271214][T21637]  ? mac80211_hwsim_free+0x220/0x220
[ 1055.276579][T21637]  ? rcu_is_watching+0x15/0xb0
[ 1055.281430][T21637]  ? kstrndup+0xbd/0x140
[ 1055.285807][T21637]  hwsim_new_radio_nl+0xdad/0x1a70
[ 1055.291019][T21637]  ? __nla_validate+0x50/0x50
[ 1055.295845][T21637]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1055.302300][T21637]  ? __nla_parse+0x40/0x50
[ 1055.306827][T21637]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1055.313270][T21637]  genl_family_rcv_msg_doit+0x21a/0x310
[ 1055.318932][T21637]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1055.324939][T21637]  ? bpf_lsm_capable+0x9/0x10
[ 1055.329703][T21637]  ? security_capable+0x89/0xb0
[ 1055.334680][T21637]  genl_rcv_msg+0x611/0x7a0
[ 1055.339303][T21637]  ? genl_bind+0x360/0x360
[ 1055.343805][T21637]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1055.350236][T21637]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 1055.356905][T21637]  ? ref_tracker_free+0x686/0x830
[ 1055.362133][T21637]  netlink_rcv_skb+0x235/0x4c0
[ 1055.367016][T21637]  ? genl_bind+0x360/0x360
[ 1055.371534][T21637]  ? netlink_ack+0x1160/0x1160
[ 1055.376445][T21637]  ? __lock_acquire+0x7d80/0x7d80
[ 1055.381594][T21637]  ? down_read+0x1ac/0x2e0
[ 1055.386124][T21637]  genl_rcv+0x28/0x40
[ 1055.390198][T21637]  netlink_unicast+0x7b1/0x930
[ 1055.395069][T21637]  netlink_sendmsg+0x8d0/0xbf0
[ 1055.399963][T21637]  ? netlink_getsockopt+0x590/0x590
[ 1055.405250][T21637]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1055.410906][T21637]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1055.416285][T21637]  ? security_socket_sendmsg+0x80/0xa0
[ 1055.421828][T21637]  ? netlink_getsockopt+0x590/0x590
[ 1055.427139][T21637]  ____sys_sendmsg+0x61b/0x980
[ 1055.432035][T21637]  ? __asan_memset+0x22/0x40
[ 1055.437612][T21637]  ? __sys_sendmsg_sock+0x30/0x30
[ 1055.442736][T21637]  ? __import_iovec+0x5f2/0x850
[ 1055.447747][T21637]  ? import_iovec+0x73/0xa0
[ 1055.452386][T21637]  ___sys_sendmsg+0x2a6/0x360
[ 1055.457249][T21637]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1055.462252][T21637]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1055.467189][T21637]  ? __x64_sys_sendmsg+0x80/0x80
[ 1055.472250][T21637]  ? lockdep_hardirqs_on+0x98/0x150
[ 1055.477539][T21637]  do_syscall_64+0x55/0xb0
[ 1055.482024][T21637]  ? clear_bhb_loop+0x40/0x90
[ 1055.486759][T21637]  ? clear_bhb_loop+0x40/0x90
[ 1055.491511][T21637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1055.497466][T21637] RIP: 0033:0x7f8313f9e159
[ 1055.501948][T21637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1055.521610][T21637] RSP: 002b:00007f8314e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1055.530104][T21637] RAX: ffffffffffffffda RBX: 00007f8314225fa0 RCX: 00007f8313f9e159
[ 1055.538128][T21637] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000047
[ 1055.546152][T21637] RBP: 00007f8314035024 R08: 0000000000000000 R09: 0000000000000000
[ 1055.554305][T21637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1055.562354][T21637] R13: 00007f8314226038 R14: 00007f8314225fa0 R15: 00007ffd9add9a08
[ 1055.570786][T21637]  </TASK>
[ 1055.881542][T21656] netlink: 'syz.2.3986': attribute type 1 has an invalid length.
[ 1055.891125][T21656] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3986'.
[ 1056.306602][T21665] netlink: 'syz.3.3989': attribute type 8 has an invalid length.
[ 1056.326849][T21665] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3989'.
[ 1056.789466][T21671] sit0: entered promiscuous mode
[ 1057.099367][T21678] netlink: 'syz.0.3993': attribute type 10 has an invalid length.
[ 1058.395938][T21693] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[ 1058.415600][T21693] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[ 1058.476345][T21692] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[ 1058.484150][T21692] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[ 1058.696762][T21712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4002'.
[ 1058.713491][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4002'.
[ 1058.860064][T21707] netlink: 'syz.2.4001': attribute type 10 has an invalid length.
[ 1058.883842][T21707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4001'.
[ 1059.106842][T21717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4003'.
[ 1059.534453][T21724] netlink: 'syz.0.4005': attribute type 10 has an invalid length.
[ 1059.901918][T21737] netlink: 'syz.0.4008': attribute type 10 has an invalid length.
[ 1059.995603][T21737] netlink: 'syz.0.4008': attribute type 10 has an invalid length.
[ 1060.049848][T21737] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[ 1060.176585][T21737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4008'.
[ 1060.973966][T21747] netlink: 'syz.0.4011': attribute type 12 has an invalid length.
[ 1060.992182][T21747] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.4011'.
[ 1061.742612][T21754] netlink: 'syz.0.4013': attribute type 10 has an invalid length.
[ 1061.754035][T21754] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4013'.
[ 1061.776053][T21754] hsr0: entered promiscuous mode
[ 1063.841338][T21778] netlink: 'syz.1.4019': attribute type 10 has an invalid length.
[ 1064.125108][T21778] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode
[ 1064.133361][T21778] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode
[ 1064.151679][T21778] team0: Port device ÿÿÿÿÿÿ added
[ 1064.176041][T21779] netlink: 'syz.1.4019': attribute type 10 has an invalid length.
[ 1064.184346][T21779] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode
[ 1064.398286][T21779] netdevsim netdevsim1 ÿÿÿÿÿÿ: left allmulticast mode
[ 1065.060213][T21779] team0: Port device ÿÿÿÿÿÿ removed
[ 1065.178596][T21779] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode
[ 1065.229872][T21779] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode
[ 1065.272795][T21779] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[ 1065.375898][T21780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4019'.
[ 1066.011030][T21805] netlink: 'syz.0.4027': attribute type 27 has an invalid length.
[ 1066.374880][T21820] netlink: 'syz.2.4030': attribute type 10 has an invalid length.
[ 1066.678847][T21820] team0 (unregistering): Port device team_slave_0 removed
[ 1066.746322][T21820] team0 (unregistering): Port device team_slave_1 removed
[ 1066.823545][T21820] team0 (unregistering): Port device geneve1 removed
[ 1067.060037][T21831] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4032'.
[ 1067.271257][T21831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1068.098635][T21833] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4032'.
[ 1068.192351][T21851] netlink: 'syz.2.4039': attribute type 27 has an invalid length.
[ 1068.224558][T21852] netlink: 'syz.2.4039': attribute type 27 has an invalid length.
[ 1068.234993][T21851] netlink: 'syz.2.4039': attribute type 3 has an invalid length.
[ 1068.243054][T21851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4039'.
[ 1068.256681][T21852] netlink: 'syz.2.4039': attribute type 3 has an invalid length.
[ 1068.312488][T21852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4039'.
[ 1068.474135][T21522] syz.1.3952 (21522) used greatest stack depth: 17544 bytes left
[ 1068.591892][T21833] bond0 (unregistering): left promiscuous mode
[ 1068.630604][T21833] 
: left promiscuous mode
[ 1068.671372][T21833] bond_slave_1: left promiscuous mode
[ 1068.723687][T21833] bridge_slave_1: left promiscuous mode
[ 1068.823401][T21833] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode
[ 1068.903998][T21833] bond0 (unregistering): left allmulticast mode
[ 1068.944974][T21833] 
: left allmulticast mode
[ 1068.969543][T21833] bond_slave_1: left allmulticast mode
[ 1069.011096][T21833] bridge_slave_1: left allmulticast mode
[ 1069.057002][T21833] syz_tun: left allmulticast mode
[ 1069.114791][T21833] netdevsim netdevsim1 ÿÿÿÿÿÿ: left allmulticast mode
[ 1069.219662][T21833] team0: Port device bond0 removed
[ 1069.229422][T21507] syz.1.3952 (21507) used greatest stack depth: 17440 bytes left
[ 1069.276216][T21833] bond0 (unregistering): (slave 
3
4
): Releasing backup interface
[ 1069.428965][T21833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1069.517908][T21833] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1070.105415][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[ 1070.113700][    C0] bridge0: port 3(hsr0) entered learning state
[ 1072.394424][T21833] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[ 1072.423554][T21833] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface
[ 1072.456328][T21833] bond0 (unregistering): Released all slaves
[ 1072.589091][T21862] netlink: 'syz.2.4041': attribute type 10 has an invalid length.
[ 1072.620111][T21863] netlink: 'syz.2.4041': attribute type 10 has an invalid length.
[ 1072.638254][T21863] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1072.665593][T21864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4041'.
[ 1073.064920][T21879] netlink: 'syz.1.4043': attribute type 21 has an invalid length.
[ 1073.088444][T21879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4043'.
[ 1073.639872][T21890] netlink: 'syz.1.4046': attribute type 10 has an invalid length.
[ 1074.372138][T21906] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4050'.
[ 1074.393643][T21906] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1074.407506][T21906] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1074.451166][T21910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1074.461775][T21910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1074.471694][T21910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1074.484812][T21910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1074.495818][T21910] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1074.504472][T21910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1076.589566][   T51] Bluetooth: hci3: command tx timeout
[ 1076.843563][T20111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.052082][T20111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.150616][T21927] delete_channel: no stack
[ 1077.222739][T20111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.586997][T20111] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface
[ 1077.621740][T20111] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.074996][T21908] chnl_net:caif_netlink_parms(): no params data found
[ 1078.345730][   T51] Bluetooth: hci4: ISO packet for unknown connection handle 3867
[ 1078.385302][T20111] ip6gretap0 (unregistering): left allmulticast mode
[ 1078.412147][T20111] ip6gretap0 (unregistering): left promiscuous mode
[ 1078.438873][T20111] Ÿë
: port 1(ip6gretap0) entered disabled state
[ 1078.547413][T21908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.554855][T21908] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.562165][T21908] bridge_slave_0: entered allmulticast mode
[ 1078.569848][T21908] bridge_slave_0: entered promiscuous mode
[ 1078.668437][   T51] Bluetooth: hci3: command tx timeout
[ 1078.795364][T21908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.802639][T21908] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1078.872959][T21908] bridge_slave_1: entered allmulticast mode
[ 1078.907036][T21908] bridge_slave_1: entered promiscuous mode
[ 1079.213544][T21908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1079.253039][T21908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1079.808789][T21994] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4069'.
[ 1080.105051][T21994] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4069'.
[ 1080.169413][T21908] team0: Port device team_slave_0 added
[ 1080.310934][T21996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4069'.
[ 1080.338411][T21908] team0: Port device team_slave_1 added
[ 1080.521812][T21997] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4069'.
[ 1080.609664][T21908] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1080.635023][T21908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.697199][T21908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1080.711429][T21908] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1080.719724][T21908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.745471][   T51] Bluetooth: hci3: command tx timeout
[ 1080.764745][T21908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1080.873770][T22016] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4072'.
[ 1080.998374][T21908] hsr_slave_0: entered promiscuous mode
[ 1081.036711][T21908] hsr_slave_1: entered promiscuous mode
[ 1081.047526][T21908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1081.057319][T21908] Cannot create hsr debugfs directory
[ 1082.617000][T22063] netlink: 'syz.3.4081': attribute type 9 has an invalid length.
[ 1082.634865][T22063] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4081'.
[ 1082.827252][   T51] Bluetooth: hci3: command tx timeout
[ 1083.743394][T21908] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1083.773979][T21908] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1083.933292][T21908] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1083.954492][T21908] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1084.460922][T20111] hsr_slave_0: left promiscuous mode
[ 1084.475369][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1084.487843][T20111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1084.537991][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1084.545862][T20111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1084.594548][T20111] veth1_vlan: left promiscuous mode
[ 1084.604376][T20111] ±ÿ: left promiscuous mode
[ 1085.242047][T22152] netlink: 'syz.1.4097': attribute type 9 has an invalid length.
[ 1085.251810][T22152] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4097'.
[ 1085.470992][    C0] bridge0: port 3(hsr0) entered forwarding state
[ 1085.477858][    C0] bridge0: topology change detected, propagating
[ 1085.488221][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1085.498738][    C0] bridge0: topology change detected, propagating
[ 1085.602674][T20111] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1086.031571][T20111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1086.085301][T20111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1086.340603][T20111] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1086.419783][T20111] bond0 (unregistering): Released all slaves
[ 1086.488280][T22167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4098'.
[ 1086.788539][T22183] netlink: 'syz.1.4100': attribute type 10 has an invalid length.
[ 1086.818629][T22183] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode
[ 1086.869764][T22183] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode
[ 1086.932187][T22183] team0: Port device ÿÿÿÿÿÿ added
[ 1086.981545][T22188] netlink: 'syz.1.4100': attribute type 10 has an invalid length.
[ 1087.011354][T22188] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode
[ 1087.032839][T22188] netdevsim netdevsim1 ÿÿÿÿÿÿ: left allmulticast mode
[ 1087.120607][T22188] team0: Port device ÿÿÿÿÿÿ removed
[ 1087.130064][T22190] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4100'.
[ 1088.451209][T21908] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1088.519734][T21908] 8021q: adding VLAN 0 to HW filter on device team0
[ 1088.686657][T20112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.694001][T20112] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.757313][T20112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.764688][T20112] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.970275][T21908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1089.741209][T21908] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1089.789628][T22229] netlink: 'syz.2.4105': attribute type 10 has an invalid length.
[ 1089.877661][T21908] veth0_vlan: entered promiscuous mode
[ 1089.909079][T21908] veth1_vlan: entered promiscuous mode
[ 1089.992547][T21908] veth0_macvtap: entered promiscuous mode
[ 1090.020098][T21908] veth1_macvtap: entered promiscuous mode
[ 1090.052732][T21908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1090.074817][T21908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.098274][T21908] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.133734][T21908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.155103][T21908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.186868][T21908] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.237145][T21908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.275524][T21908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.284314][T21908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.310477][T21908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.270258][T22247] syzkaller0: entered promiscuous mode
[ 1091.294749][T22247] syzkaller0: entered allmulticast mode
[ 1093.427327][T12254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.457924][T12254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.521985][T20110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.533588][T20110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.065934][T22418] netlink: 'syz.3.4189': attribute type 10 has an invalid length.
[ 1098.000829][T22439] syzkaller0: entered promiscuous mode
[ 1098.007447][T22439] syzkaller0: entered allmulticast mode
[ 1098.334337][T22441] syzkaller0: entered promiscuous mode
[ 1098.341388][T22441] syzkaller0: entered allmulticast mode
[ 1098.443619][T22455] netlink: 'syz.1.4202': attribute type 64 has an invalid length.
[ 1100.777031][T22469] netlink: 'syz.1.4205': attribute type 10 has an invalid length.
[ 1103.924561][T22502] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4214'.
[ 1103.975108][T22502] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1104.034189][T22502] CPU: 0 PID: 22502 Comm: syz.3.4214 Not tainted syzkaller #0
[ 1104.041777][T22502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1104.051886][T22502] Call Trace:
[ 1104.055255][T22502]  <TASK>
[ 1104.058229][T22502]  dump_stack_lvl+0x18c/0x250
[ 1104.062988][T22502]  ? show_regs_print_info+0x20/0x20
[ 1104.068241][T22502]  ? load_image+0x420/0x420
[ 1104.072823][T22502]  sysfs_warn_dup+0x8e/0xa0
[ 1104.077426][T22502]  sysfs_do_create_link_sd+0xc0/0x110
[ 1104.082859][T22502]  device_add_class_symlinks+0x1cf/0x240
[ 1104.088550][T22502]  device_add+0x4f9/0xc40
[ 1104.092920][T22502]  wiphy_register+0x1d99/0x2ac0
[ 1104.097827][T22502]  ? cfg80211_event_work+0x40/0x40
[ 1104.102969][T22502]  ? minstrel_ht_alloc+0x88a/0x990
[ 1104.108115][T22502]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1104.114221][T22502]  ieee80211_register_hw+0x2dd8/0x3b30
[ 1104.119725][T22502]  ? ieee80211_register_hw+0xf11/0x3b30
[ 1104.125316][T22502]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1104.130975][T22502]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1104.136900][T22502]  ? __debug_object_init+0xec/0x450
[ 1104.142137][T22502]  ? __asan_memset+0x22/0x40
[ 1104.146775][T22502]  ? __hrtimer_init+0x189/0x270
[ 1104.151656][T22502]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[ 1104.157433][T22502]  ? mac80211_hwsim_free+0x220/0x220
[ 1104.162756][T22502]  ? rcu_is_watching+0x15/0xb0
[ 1104.167555][T22502]  ? kstrndup+0xbd/0x140
[ 1104.171836][T22502]  hwsim_new_radio_nl+0xdad/0x1a70
[ 1104.177015][T22502]  ? __nla_validate+0x50/0x50
[ 1104.181757][T22502]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1104.188133][T22502]  ? __nla_parse+0x40/0x50
[ 1104.192590][T22502]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1104.198957][T22502]  genl_family_rcv_msg_doit+0x21a/0x310
[ 1104.204549][T22502]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1104.210482][T22502]  ? bpf_lsm_capable+0x9/0x10
[ 1104.215192][T22502]  ? security_capable+0x89/0xb0
[ 1104.220083][T22502]  genl_rcv_msg+0x611/0x7a0
[ 1104.224628][T22502]  ? genl_bind+0x360/0x360
[ 1104.229082][T22502]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1104.235439][T22502]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 1104.242068][T22502]  netlink_rcv_skb+0x235/0x4c0
[ 1104.246885][T22502]  ? genl_bind+0x360/0x360
[ 1104.251334][T22502]  ? netlink_ack+0x1160/0x1160
[ 1104.256133][T22502]  ? __lock_acquire+0x7d80/0x7d80
[ 1104.261197][T22502]  ? down_read+0x1ac/0x2e0
[ 1104.265657][T22502]  genl_rcv+0x28/0x40
[ 1104.269667][T22502]  netlink_unicast+0x7b1/0x930
[ 1104.274464][T22502]  netlink_sendmsg+0x8d0/0xbf0
[ 1104.279273][T22502]  ? netlink_getsockopt+0x590/0x590
[ 1104.284511][T22502]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1104.290127][T22502]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1104.295446][T22502]  ? security_socket_sendmsg+0x80/0xa0
[ 1104.300932][T22502]  ? netlink_getsockopt+0x590/0x590
[ 1104.306166][T22502]  ____sys_sendmsg+0x61b/0x980
[ 1104.311062][T22502]  ? __asan_memset+0x22/0x40
[ 1104.315687][T22502]  ? __sys_sendmsg_sock+0x30/0x30
[ 1104.320757][T22502]  ? __import_iovec+0x5f2/0x850
[ 1104.325661][T22502]  ? import_iovec+0x73/0xa0
[ 1104.330220][T22502]  ___sys_sendmsg+0x2a6/0x360
[ 1104.334956][T22502]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1104.339815][T22502]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1104.344710][T22502]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1104.350997][T22502]  ? __x64_sys_sendmsg+0x80/0x80
[ 1104.355981][T22502]  ? lockdep_hardirqs_on+0x98/0x150
[ 1104.361219][T22502]  do_syscall_64+0x55/0xb0
[ 1104.365663][T22502]  ? clear_bhb_loop+0x40/0x90
[ 1104.370381][T22502]  ? clear_bhb_loop+0x40/0x90
[ 1104.375087][T22502]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1104.381014][T22502] RIP: 0033:0x7fae8699e159
[ 1104.385462][T22502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1104.405097][T22502] RSP: 002b:00007fae8780f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1104.413537][T22502] RAX: ffffffffffffffda RBX: 00007fae86c25fa0 RCX: 00007fae8699e159
[ 1104.421539][T22502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000033
[ 1104.429533][T22502] RBP: 00007fae86a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1104.437528][T22502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1104.445524][T22502] R13: 00007fae86c26038 R14: 00007fae86c25fa0 R15: 00007ffde27baf78
[ 1104.453542][T22502]  </TASK>
[ 1104.588026][T22512] netlink: 'syz.0.4216': attribute type 10 has an invalid length.
[ 1104.800217][T22528] netlink: 'syz.1.4222': attribute type 10 has an invalid length.
[ 1105.121642][T22533] netlink: 279 bytes leftover after parsing attributes in process `syz.2.4224'.
[ 1105.347262][T22533] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4224'.
[ 1105.780986][T22556] netlink: 'syz.0.4232': attribute type 10 has an invalid length.
[ 1106.213393][T22577] netlink: 'syz.2.4238': attribute type 10 has an invalid length.
[ 1106.264438][T22577] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[ 1107.432059][   T51] Bluetooth: hci2: ISO packet for unknown connection handle 53
[ 1107.856654][T22611] netlink: 'syz.0.4249': attribute type 10 has an invalid length.
[ 1107.900734][T22611] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4249'.
[ 1108.166094][T22613] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4249'.
[ 1108.215481][T22622] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.4254'.
[ 1108.282449][T22622] netlink: 'syz.1.4254': attribute type 21 has an invalid length.
[ 1111.142271][T22630] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4256'.
[ 1111.480636][T22641] netlink: 'syz.1.4261': attribute type 2 has an invalid length.
[ 1111.517065][T22641] netlink: 'syz.1.4261': attribute type 11 has an invalid length.
[ 1111.558620][T22641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4261'.
[ 1112.345316][T22661] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4264'.
[ 1112.871537][T22676] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4267'.
[ 1112.914125][T22676] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4267'.
[ 1112.946523][T22676] netlink: 'syz.2.4267': attribute type 10 has an invalid length.
[ 1112.967244][T22676] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[ 1116.209215][T22696] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4276'.
[ 1116.302430][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.313626][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.684803][T22724] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4280'.
[ 1117.817088][T22723] delete_channel: no stack
[ 1119.149620][T22745] netlink: 'syz.2.4289': attribute type 4 has an invalid length.
[ 1119.167810][T22745] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4289'.
[ 1119.198639][T22749] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4290'.
[ 1119.322760][T22751] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4291'.
[ 1119.525358][T22761] netlink: 'syz.0.4291': attribute type 9 has an invalid length.
[ 1119.595434][T22761] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4291'.
[ 1119.866710][T22775] netlink: 'syz.3.4297': attribute type 1 has an invalid length.
[ 1120.647450][T22805] netlink: 'syz.2.4307': attribute type 41 has an invalid length.
[ 1120.689477][T22805] netlink: 'syz.2.4307': attribute type 41 has an invalid length.
[ 1121.398988][T22810] delete_channel: no stack
[ 1121.471584][T22818] tap0: tun_chr_ioctl cmd 1074025677
[ 1121.500240][T22818] tap0: linktype set to 768
[ 1123.673011][T22831] delete_channel: no stack
[ 1123.897934][T22847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4318'.
[ 1124.176253][T22855] netlink: 'syz.0.4320': attribute type 4 has an invalid length.
[ 1126.957935][T22868] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1127.122422][T22877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4326'.
[ 1127.188267][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.247284][T22877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4326'.
[ 1127.274817][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.335150][T22877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4326'.
[ 1127.344865][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.401414][T22877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4326'.
[ 1127.468636][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.514435][T22877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4326'.
[ 1127.533171][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.562533][T22891] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4331'.
[ 1127.584797][T22877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4326'.
[ 1127.595119][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.620586][T22893] netlink: 'syz.0.4331': attribute type 21 has an invalid length.
[ 1127.643503][T22893] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4331'.
[ 1127.703085][T22893] netlink: 'syz.0.4331': attribute type 4 has an invalid length.
[ 1127.711412][T22893] netlink: 'syz.0.4331': attribute type 3 has an invalid length.
[ 1127.743214][T22893] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4331'.
[ 1127.783679][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.805415][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.845066][T22877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1129.909130][T22943] netlink: 'syz.0.4345': attribute type 29 has an invalid length.
[ 1129.937421][T22943] netlink: 'syz.0.4345': attribute type 29 has an invalid length.
[ 1129.968746][T22944] netlink: 'syz.0.4345': attribute type 29 has an invalid length.
[ 1130.018842][T22952] __nla_validate_parse: 7 callbacks suppressed
[ 1130.018861][T22952] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.4346'.
[ 1130.038621][T22950] netlink: 'syz.1.4347': attribute type 2 has an invalid length.
[ 1130.050116][T22950] netlink: 'syz.1.4347': attribute type 8 has an invalid length.
[ 1130.059382][T22950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4347'.
[ 1130.073209][T22945] netlink: 'syz.0.4345': attribute type 29 has an invalid length.
[ 1130.435720][T22961] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4349'.
[ 1130.508283][T22961] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.4349'.
[ 1130.604707][T22961] tc_dump_action: action bad kind
[ 1131.144287][T22973] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1131.335988][T22975] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4354'.
[ 1133.793671][T22984] netlink: 'syz.1.4358': attribute type 21 has an invalid length.
[ 1133.924793][T22984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4358'.
[ 1134.013864][T22984] netlink: 'syz.1.4358': attribute type 21 has an invalid length.
[ 1134.064790][T22984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4358'.
[ 1134.411257][T22984] netlink: 'syz.1.4358': attribute type 21 has an invalid length.
[ 1134.452626][T22984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4358'.
[ 1137.648157][T23037] netlink: 'syz.1.4371': attribute type 11 has an invalid length.
[ 1137.801194][T23044] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4371'.
[ 1138.537780][T23076] netlink: 'syz.1.4383': attribute type 1 has an invalid length.
[ 1138.565066][T23076] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4383'.
[ 1138.710960][T23089] netlink: 'syz.0.4384': attribute type 4 has an invalid length.
[ 1139.093343][T23102] netlink: 15974 bytes leftover after parsing attributes in process `syz.3.4387'.
[ 1139.524873][T23112] netlink: 'syz.2.4388': attribute type 21 has an invalid length.
[ 1139.556820][T23112] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1139.600567][T23112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1139.607993][T23112] IPv6: NLM_F_CREATE should be set when creating new route
[ 1139.615393][T23112] IPv6: NLM_F_CREATE should be set when creating new route
[ 1139.622767][T23112] IPv6: NLM_F_CREATE should be set when creating new route
[ 1139.934241][T23121] tap0: tun_chr_ioctl cmd 1074025676
[ 1139.941864][T23121] tap0: owner set to 776
[ 1140.322720][T23145] netlink: 'syz.3.4398': attribute type 11 has an invalid length.
[ 1140.333026][T23145] netlink: 212788 bytes leftover after parsing attributes in process `syz.3.4398'.
[ 1140.416527][T23146] syzkaller0: entered promiscuous mode
[ 1140.422232][T23146] syzkaller0: entered allmulticast mode
[ 1144.658366][T23167] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4403'.
[ 1144.809105][T23208] netlink: 'syz.2.4412': attribute type 1 has an invalid length.
[ 1144.830060][T23208] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4412'.
[ 1145.172144][T23221] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4416'.
[ 1145.184483][T23225] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4418'.
[ 1145.202087][T23227] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4416'.
[ 1145.532101][T23234] syzkaller0: entered promiscuous mode
[ 1145.537789][T23234] syzkaller0: entered allmulticast mode
[ 1148.076463][T23272] netlink: 'syz.0.4441': attribute type 1 has an invalid length.
[ 1148.085849][T23272] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4441'.
[ 1148.150449][T23270] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4433'.
[ 1149.723314][T23286] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4436'.
[ 1149.857824][T23289] syzkaller0: entered promiscuous mode
[ 1149.863517][T23289] syzkaller0: entered allmulticast mode
[ 1150.400131][T23314] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4446'.
[ 1152.218321][T23301] netlink: 'syz.1.4442': attribute type 33 has an invalid length.
[ 1152.226511][T23301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4442'.
[ 1152.364909][T23318] netlink: 'syz.0.4448': attribute type 12 has an invalid length.
[ 1152.393720][T23318] netlink: 'syz.0.4448': attribute type 15 has an invalid length.
[ 1154.808304][T23347] syzkaller0: entered promiscuous mode
[ 1154.813868][T23347] syzkaller0: entered allmulticast mode
[ 1157.074442][T23361] netlink: 'syz.1.4461': attribute type 21 has an invalid length.
[ 1157.082564][T23361] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4461'.
[ 1157.097241][T23366] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4459'.
[ 1157.210919][T23366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1157.306935][T23366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1157.332918][T23366] bond0 (unregistering): Released all slaves
[ 1157.872123][T23396] netlink: 'syz.3.4472': attribute type 5 has an invalid length.
[ 1157.927835][T23404] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4473'.
[ 1158.403167][T23410] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4475'.
[ 1158.427021][T23410] net_ratelimit: 4 callbacks suppressed
[ 1158.427048][T23410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1158.521588][T23412] syzkaller0: entered promiscuous mode
[ 1158.527372][T23412] syzkaller0: entered allmulticast mode
[ 1160.735715][T23424] syz.0.4479: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 1160.776471][T23424] CPU: 0 PID: 23424 Comm: syz.0.4479 Not tainted syzkaller #0
[ 1160.784052][T23424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1160.794207][T23424] Call Trace:
[ 1160.797631][T23424]  <TASK>
[ 1160.800619][T23424]  dump_stack_lvl+0x18c/0x250
[ 1160.805395][T23424]  ? show_regs_print_info+0x20/0x20
[ 1160.810689][T23424]  ? load_image+0x420/0x420
[ 1160.815279][T23424]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1160.821784][T23424]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1160.828373][T23424]  warn_alloc+0x246/0x340
[ 1160.832860][T23424]  ? stack_trace_save+0xaa/0x100
[ 1160.837885][T23424]  ? zone_watermark_ok_safe+0x230/0x230
[ 1160.843516][T23424]  ? kasan_set_track+0x5f/0x70
[ 1160.848343][T23424]  ? kasan_set_track+0x4e/0x70
[ 1160.853154][T23424]  ? __kasan_kmalloc+0x8f/0xa0
[ 1160.857972][T23424]  ? xsk_init_queue+0xad/0x100
[ 1160.862779][T23424]  ? xsk_setsockopt+0x4c9/0x750
[ 1160.867939][T23424]  ? do_sock_setsockopt+0x175/0x1a0
[ 1160.873178][T23424]  ? __x64_sys_setsockopt+0x182/0x200
[ 1160.878598][T23424]  __vmalloc_node_range+0x129/0x1320
[ 1160.883965][T23424]  ? free_vm_area+0x50/0x50
[ 1160.888530][T23424]  vmalloc_user+0x74/0x80
[ 1160.892912][T23424]  ? xskq_create+0xbf/0x170
[ 1160.897459][T23424]  xskq_create+0xbf/0x170
[ 1160.901851][T23424]  xsk_init_queue+0xad/0x100
[ 1160.906494][T23424]  xsk_setsockopt+0x4c9/0x750
[ 1160.911233][T23424]  ? xsk_poll+0x670/0x670
[ 1160.915609][T23424]  ? __fget_files+0x28/0x460
[ 1160.920259][T23424]  ? aa_sock_opt_perm+0x74/0x100
[ 1160.925252][T23424]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1160.930845][T23424]  ? security_socket_setsockopt+0x7e/0xa0
[ 1160.936605][T23424]  ? xsk_poll+0x670/0x670
[ 1160.940982][T23424]  do_sock_setsockopt+0x175/0x1a0
[ 1160.946050][T23424]  ? __fdget+0x180/0x210
[ 1160.950432][T23424]  __x64_sys_setsockopt+0x182/0x200
[ 1160.955684][T23424]  do_syscall_64+0x55/0xb0
[ 1160.960147][T23424]  ? clear_bhb_loop+0x40/0x90
[ 1160.964869][T23424]  ? clear_bhb_loop+0x40/0x90
[ 1160.969592][T23424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1160.975537][T23424] RIP: 0033:0x7f78c219e159
[ 1160.979992][T23424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1160.999746][T23424] RSP: 002b:00007f78c2f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1161.008220][T23424] RAX: ffffffffffffffda RBX: 00007f78c2425fa0 RCX: 00007f78c219e159
[ 1161.016246][T23424] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[ 1161.024259][T23424] RBP: 00007f78c2235024 R08: 0000000000000004 R09: 0000000000000000
[ 1161.032279][T23424] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1161.040290][T23424] R13: 00007f78c2426038 R14: 00007f78c2425fa0 R15: 00007ffff870c668
[ 1161.048324][T23424]  </TASK>
[ 1161.085587][T23424] Mem-Info:
[ 1161.095006][T23424] active_anon:6253 inactive_anon:0 isolated_anon:0
[ 1161.095006][T23424]  active_file:18446 inactive_file:40359 isolated_file:0
[ 1161.095006][T23424]  unevictable:768 dirty:64 writeback:0
[ 1161.095006][T23424]  slab_reclaimable:11124 slab_unreclaimable:98970
[ 1161.095006][T23424]  mapped:24482 shmem:1361 pagetables:517
[ 1161.095006][T23424]  sec_pagetables:0 bounce:0
[ 1161.095006][T23424]  kernel_misc_reclaimable:0
[ 1161.095006][T23424]  free:1340241 free_pcp:7898 free_cma:0
[ 1161.185943][T23433] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4479'.
[ 1161.197246][T23424] Node 0 active_anon:24736kB inactive_anon:0kB active_file:73784kB inactive_file:161240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97884kB dirty:264kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12340kB pagetables:1912kB sec_pagetables:0kB all_unreclaimable? no
[ 1161.308277][T23433] team0: Port device team_slave_0 removed
[ 1161.318547][T23424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1161.355652][T23433] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1161.383781][T23424] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1161.431223][T23437] netlink: 'syz.3.4484': attribute type 29 has an invalid length.
[ 1161.469261][T23424] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1161.494587][T23439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4483'.
[ 1161.504255][T23424] Node 0 DMA32 free:1447956kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24864kB inactive_anon:0kB active_file:73784kB inactive_file:160416kB unevictable:1536kB writepending:272kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:20940kB local_pcp:11320kB free_cma:0kB
[ 1161.536478][T23437] netlink: 'syz.3.4484': attribute type 29 has an invalid length.
[ 1161.561940][T23424] lowmem_reserve[]: 0 0 0 0 0
[ 1161.562059][T23424] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 1161.562145][T23424] lowmem_reserve[]: 0 0 0 0 0
[ 1161.562249][T23424] Node 1 Normal free:3897712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11136kB local_pcp:3072kB free_cma:0kB
[ 1161.562336][T23424] lowmem_reserve[]: 0 0 0 0 0
[ 1161.562446][T23424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1161.562761][T23424] Node 0 DMA32: 1585*4kB (UME) 1640*8kB (UME) 1485*16kB (UME) 640*32kB (ME) 495*64kB (UME) 1251*128kB (UM) 496*256kB (UM) 183*512kB (UM) 73*1024kB (UM) 24*2048kB (UME) 207*4096kB (UM) = 1447956kB
[ 1161.563549][T23424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1161.563819][T23424] Node 1 Normal: 262*4kB (UME) 77*8kB (UME) 35*16kB (UME) 240*32kB (UME) 91*64kB (UE) 12*128kB (UME) 4*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 946*4096kB (M) = 3897712kB
[ 1161.566880][T23424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1161.566912][T23424] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1161.566941][T23424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1161.566970][T23424] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1161.566998][T23424] 60168 total pagecache pages
[ 1161.567017][T23424] 0 pages in swap cache
[ 1161.567033][T23424] Free swap  = 124540kB
[ 1161.567052][T23424] Total swap = 124996kB
[ 1161.567071][T23424] 2097051 pages RAM
[ 1161.567088][T23424] 0 pages HighMem/MovableOnly
[ 1161.567105][T23424] 416959 pages reserved
[ 1161.567122][T23424] 0 pages cma reserved
[ 1161.855849][T23438] netlink: 'syz.3.4484': attribute type 29 has an invalid length.
[ 1161.943137][T23440] netlink: 'syz.3.4484': attribute type 29 has an invalid length.
[ 1161.960827][T23438] netlink: 'syz.3.4484': attribute type 29 has an invalid length.
[ 1162.105040][T23451] netlink: 'syz.0.4486': attribute type 39 has an invalid length.
[ 1162.762351][T23446] delete_channel: no stack
[ 1163.167059][T23463] netlink: 'syz.0.4490': attribute type 3 has an invalid length.
[ 1163.175156][T23463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4490'.
[ 1163.213947][T23461] syzkaller0: entered promiscuous mode
[ 1163.263162][T23461] syzkaller0: entered allmulticast mode
[ 1163.383524][T23473] dvmrp1: tun_chr_ioctl cmd 1074025698
[ 1163.396099][T23469] dvmrp1: tun_chr_ioctl cmd 1074025684
[ 1166.100360][T23469] dvmrp1: tun_chr_ioctl cmd 1074025684
[ 1166.111672][T23482] netlink: 'syz.0.4495': attribute type 17 has an invalid length.
[ 1166.121552][T23488] netlink: 'syz.1.4494': attribute type 21 has an invalid length.
[ 1166.276978][T23491] delete_channel: no stack
[ 1166.283531][T23491] delete_channel: no stack
[ 1166.296699][T23493] syz.2.4497[23493] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1166.297062][T23493] syz.2.4497[23493] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1166.326070][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.346954][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.356231][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.365502][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.374822][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.384031][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.393318][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.402587][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.411856][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.421113][T23491] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1166.451382][T23493] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4497'.
[ 1166.528348][T23501] netlink: 'syz.3.4499': attribute type 39 has an invalid length.
[ 1166.985193][T23495] delete_channel: no stack
[ 1167.428588][T23505] netlink: 'syz.2.4500': attribute type 21 has an invalid length.
[ 1167.436923][T23505] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4500'.
[ 1167.446869][T23506] sit0: left promiscuous mode
[ 1167.508431][T23509] sit0: entered promiscuous mode
[ 1167.859523][T23527] syzkaller0: entered promiscuous mode
[ 1167.867418][T23527] syzkaller0: entered allmulticast mode
[ 1168.005236][T23531] netlink: 'syz.2.4507': attribute type 10 has an invalid length.
[ 1168.025374][T23531] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4507'.
[ 1168.325401][T23547] netlink: 'syz.0.4511': attribute type 28 has an invalid length.
[ 1168.333463][T23547] netlink: 'syz.0.4511': attribute type 29 has an invalid length.
[ 1168.343610][T23547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4511'.
[ 1170.027150][T23545] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4511'.
[ 1170.945723][T23569] netlink: 'syz.3.4519': attribute type 3 has an invalid length.
[ 1171.028693][T23569] netlink: 'syz.3.4519': attribute type 5 has an invalid length.
[ 1173.359715][T23593] syzkaller0: entered promiscuous mode
[ 1173.372171][T23593] syzkaller0: entered allmulticast mode
[ 1176.001921][T23620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.009784][T23620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.022793][T23620] bridge0: entered allmulticast mode
[ 1177.319459][T23657] netlink: 'syz.1.4543': attribute type 46 has an invalid length.
[ 1177.384966][T23657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4543'.
[ 1177.632887][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.640690][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.455038][T23680] syzkaller0: entered promiscuous mode
[ 1178.460745][T23680] syzkaller0: entered allmulticast mode
[ 1178.689668][T23695] netlink: 'syz.2.4551': attribute type 21 has an invalid length.
[ 1178.706800][T23695] netlink: 'syz.2.4551': attribute type 12 has an invalid length.
[ 1178.731232][T23695] netlink: 'syz.2.4551': attribute type 13 has an invalid length.
[ 1178.753268][T23695] netlink: 'syz.2.4551': attribute type 14 has an invalid length.
[ 1178.764833][T23695] netlink: 'syz.2.4551': attribute type 15 has an invalid length.
[ 1178.777247][T23695] netlink: 'syz.2.4551': attribute type 16 has an invalid length.
[ 1178.794746][T23695] netlink: 'syz.2.4551': attribute type 19 has an invalid length.
[ 1178.803702][T23695] netlink: 'syz.2.4551': attribute type 21 has an invalid length.
[ 1178.813526][T23695] netlink: 'syz.2.4551': attribute type 22 has an invalid length.
[ 1178.834010][T23695] netlink: 9622 bytes leftover after parsing attributes in process `syz.2.4551'.
[ 1179.188291][T23705] geneve1: entered promiscuous mode
[ 1179.205852][T23705] geneve1: entered allmulticast mode
[ 1179.223560][T23705] team0: Port device geneve1 added
[ 1179.762369][T23728] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.4562'.
[ 1179.864186][T23732] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1179.945881][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1179.983253][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1180.048159][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1180.067402][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1180.095987][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1180.119432][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4563'.
[ 1181.254028][T23772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1181.261446][T23772] IPv6: NLM_F_CREATE should be set when creating new route
[ 1181.268810][T23772] IPv6: NLM_F_CREATE should be set when creating new route
[ 1181.276126][T23772] IPv6: NLM_F_CREATE should be set when creating new route
[ 1181.620931][T23778] sit0: left promiscuous mode
[ 1183.860951][T23818] net_ratelimit: 3319 callbacks suppressed
[ 1183.860996][T23818] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1184.090209][T23768] ------------[ cut here ]------------
[ 1184.095972][T23768] WARNING: CPU: 0 PID: 23768 at kernel/events/core.c:6808 perf_pending_task+0x357/0x480
[ 1184.105973][T23768] Modules linked in:
[ 1184.109951][T23768] CPU: 0 PID: 23768 Comm: syz.2.4570 Not tainted syzkaller #0
[ 1184.117554][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1184.127777][T23768] RIP: 0010:perf_pending_task+0x357/0x480
[ 1184.133566][T23768] Code: e8 9e d2 d5 ff 84 db 75 10 e8 05 d0 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cf d5 ff e8 b0 fa 4e ff eb e9 e8 e9 cf d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[ 1184.153532][T23768] RSP: 0018:ffffc9000daf79c8 EFLAGS: 00010293
[ 1184.159900][T23768] RAX: ffffffff81b1a287 RBX: ffff888076eb4770 RCX: ffff888055b35a00
[ 1184.168099][T23768] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1184.176307][T23768] RBP: ffff888076eb4530 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5
[ 1184.184364][T23768] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffff888055b35a00
[ 1184.192678][T23768] R13: ffff888021cfd530 R14: 0000000000000000 R15: 1ffff1100edd68a6
[ 1184.200759][T23768] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1184.209817][T23768] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1184.216585][T23768] CR2: 00007f30b2beb840 CR3: 000000002c3e0000 CR4: 00000000003506f0
[ 1184.224729][T23768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1184.232761][T23768] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1184.240881][T23768] Call Trace:
[ 1184.244202][T23768]  <TASK>
[ 1184.247265][T23768]  task_work_run+0x1d4/0x260
[ 1184.251950][T23768]  ? task_work_cancel+0x220/0x220
[ 1184.257272][T23768]  do_exit+0x986/0x2530
[ 1184.261542][T23768]  ? put_task_struct+0xc0/0xc0
[ 1184.266496][T23768]  ? preempt_schedule_common+0x82/0xc0
[ 1184.272028][T23768]  ? preempt_schedule+0xc0/0xd0
[ 1184.277019][T23768]  ? schedule_preempt_disabled+0x20/0x20
[ 1184.282721][T23768]  ? lock_chain_count+0x20/0x20
[ 1184.287702][T23768]  do_group_exit+0x22d/0x2f0
[ 1184.292404][T23768]  get_signal+0x12a6/0x1390
[ 1184.297063][T23768]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1184.302720][T23768]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1184.308786][T23768]  ? blkcg_maybe_throttle_current+0x19f/0xa90
[ 1184.315006][T23768]  ? get_sigframe_size+0x20/0x20
[ 1184.320028][T23768]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1184.325630][T23768]  exit_to_user_mode_loop+0x70/0x110
[ 1184.330984][T23768]  exit_to_user_mode_prepare+0xee/0x180
[ 1184.336644][T23768]  syscall_exit_to_user_mode+0x1a/0x50
[ 1184.342243][T23768]  do_syscall_64+0x61/0xb0
[ 1184.346910][T23768]  ? clear_bhb_loop+0x40/0x90
[ 1184.351643][T23768]  ? clear_bhb_loop+0x40/0x90
[ 1184.356588][T23768]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1184.362552][T23768] RIP: 0033:0x7f8313f9e159
[ 1184.367134][T23768] Code: Unable to access opcode bytes at 0x7f8313f9e12f.
[ 1184.374275][T23768] RSP: 002b:00007f8314df50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1184.382822][T23768] RAX: fffffffffffffe00 RBX: 00007f8314226098 RCX: 00007f8313f9e159
[ 1184.390872][T23768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8314226098
[ 1184.399069][T23768] RBP: 00007f8314226090 R08: 0000000000000000 R09: 0000000000000000
[ 1184.407167][T23768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1184.415223][T23768] R13: 00007f8314226128 R14: 00007ffd9add9920 R15: 00007ffd9add9a08
[ 1184.423258][T23768]  </TASK>
[ 1184.426435][T23768] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1184.433788][T23768] CPU: 0 PID: 23768 Comm: syz.2.4570 Not tainted syzkaller #0
[ 1184.441301][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1184.451392][T23768] Call Trace:
[ 1184.454721][T23768]  <TASK>
[ 1184.457676][T23768]  dump_stack_lvl+0x18c/0x250
[ 1184.462387][T23768]  ? show_regs_print_info+0x20/0x20
[ 1184.467612][T23768]  ? load_image+0x420/0x420
[ 1184.472172][T23768]  panic+0x2ca/0x720
[ 1184.476137][T23768]  ? bpf_jit_dump+0xd0/0xd0
[ 1184.480713][T23768]  __warn+0x2e0/0x470
[ 1184.484745][T23768]  ? perf_pending_task+0x357/0x480
[ 1184.489927][T23768]  ? perf_pending_task+0x357/0x480
[ 1184.495094][T23768]  report_bug+0x2be/0x4f0
[ 1184.499550][T23768]  ? perf_pending_task+0x357/0x480
[ 1184.504709][T23768]  ? perf_pending_task+0x357/0x480
[ 1184.509864][T23768]  ? perf_pending_task+0x359/0x480
[ 1184.515015][T23768]  handle_bug+0xcf/0x120
[ 1184.519304][T23768]  exc_invalid_op+0x1a/0x50
[ 1184.523880][T23768]  asm_exc_invalid_op+0x1a/0x20
[ 1184.528766][T23768] RIP: 0010:perf_pending_task+0x357/0x480
[ 1184.534547][T23768] Code: e8 9e d2 d5 ff 84 db 75 10 e8 05 d0 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cf d5 ff e8 b0 fa 4e ff eb e9 e8 e9 cf d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[ 1184.554283][T23768] RSP: 0018:ffffc9000daf79c8 EFLAGS: 00010293
[ 1184.560396][T23768] RAX: ffffffff81b1a287 RBX: ffff888076eb4770 RCX: ffff888055b35a00
[ 1184.568455][T23768] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1184.576453][T23768] RBP: ffff888076eb4530 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5
[ 1184.584451][T23768] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffff888055b35a00
[ 1184.592449][T23768] R13: ffff888021cfd530 R14: 0000000000000000 R15: 1ffff1100edd68a6
[ 1184.600479][T23768]  ? perf_pending_task+0x357/0x480
[ 1184.605642][T23768]  ? perf_pending_task+0x357/0x480
[ 1184.610789][T23768]  task_work_run+0x1d4/0x260
[ 1184.615411][T23768]  ? task_work_cancel+0x220/0x220
[ 1184.620481][T23768]  do_exit+0x986/0x2530
[ 1184.624683][T23768]  ? put_task_struct+0xc0/0xc0
[ 1184.629480][T23768]  ? preempt_schedule_common+0x82/0xc0
[ 1184.635317][T23768]  ? preempt_schedule+0xc0/0xd0
[ 1184.640210][T23768]  ? schedule_preempt_disabled+0x20/0x20
[ 1184.645873][T23768]  ? lock_chain_count+0x20/0x20
[ 1184.650762][T23768]  do_group_exit+0x22d/0x2f0
[ 1184.655389][T23768]  get_signal+0x12a6/0x1390
[ 1184.659962][T23768]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1184.665550][T23768]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1184.671471][T23768]  ? blkcg_maybe_throttle_current+0x19f/0xa90
[ 1184.677569][T23768]  ? get_sigframe_size+0x20/0x20
[ 1184.682556][T23768]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1184.688053][T23768]  exit_to_user_mode_loop+0x70/0x110
[ 1184.693379][T23768]  exit_to_user_mode_prepare+0xee/0x180
[ 1184.698980][T23768]  syscall_exit_to_user_mode+0x1a/0x50
[ 1184.704494][T23768]  do_syscall_64+0x61/0xb0
[ 1184.708943][T23768]  ? clear_bhb_loop+0x40/0x90
[ 1184.713649][T23768]  ? clear_bhb_loop+0x40/0x90
[ 1184.718361][T23768]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1184.724280][T23768] RIP: 0033:0x7f8313f9e159
[ 1184.728724][T23768] Code: Unable to access opcode bytes at 0x7f8313f9e12f.
[ 1184.735767][T23768] RSP: 002b:00007f8314df50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1184.744217][T23768] RAX: fffffffffffffe00 RBX: 00007f8314226098 RCX: 00007f8313f9e159
[ 1184.752230][T23768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8314226098
[ 1184.760254][T23768] RBP: 00007f8314226090 R08: 0000000000000000 R09: 0000000000000000
[ 1184.768268][T23768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1184.776296][T23768] R13: 00007f8314226128 R14: 00007ffd9add9920 R15: 00007ffd9add9a08
[ 1184.784365][T23768]  </TASK>
[ 1184.788006][T23768] Kernel Offset: disabled
[ 1184.792399][T23768] Rebooting in 86400 seconds..