last executing test programs:

13m44.146097537s ago: executing program 0 (id=1079):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}, {0x18, 0x84, 0x5, "10"}], 0x28}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

13m43.059942948s ago: executing program 0 (id=1090):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x3, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0xb9, 0x0, 0x2}, 0x28)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c01cba0d29e00000c0000000200000005d0514b0df4bf9a64000000000068f6cd1f87cf67903ef5319c43f25d21a4657302b629d15adad89b897fa8c10b6c6c59e5c474486d24ac5e3caa96112c"], 0x0, 0x26}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = perf_event_open(&(0x7f00000010c0)={0x3, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x3000, 0x2000000, 0x0, 0x0, 0x20000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
sendmsg$unix(r4, &(0x7f0000001500)={&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="015d320283f667a00f91508f46778ad15c5030991d01c9a03b2ae5fbd89e3f2a7b5ea75860d1e28537e498633fa943f4031a50e7a6c3dd74452cee3fc27a5dea4863c60a976f3962cc784c7e7767a7f9de5a6e52442ec5f712b21f8fcee2e27e56552be0bf607c50ad137c9ccd9faae2da354905e2fa500729fcd20120100e62cdfb3573cef2883623ebda2a8bf225e3e34e861ff771bccf77b619710288e6e8c2cdb01eb668083d853dfad6a88382c8b26b124e08e5493cebf52bd7d5de1221e2", 0xc1}, {&(0x7f00000007c0)="53f5427efad5d6c88af992bcdc4515539172cf7d53ae502fccb7c0bd", 0x1c}, {&(0x7f0000000800)="fe877b80923e1c553f80826e4f36f144d3ee4002e0db8f623cc346dfd615fe01f82d1fe76f64e353e27e9b8a450be9ce9a7fc0c959b9e7f850a86df7bff76020f3fdae5d1bb71a82ed977030bb30e3b91265788556d9552e401a40e7ac71fe556d88a6e4e969d5d99fc63d0ad90ea11a42e8d55cd01270e19b94a924020b5d3ccace7b5b5fc64920a5727600a9eb9632fc1a59d5b5fc64679cf45ebfe51ac5e70a8c98fb172686f7e97567fa805c4e5b6050c7af32c1448d32a84a864f77fc9249d6ccd0", 0xc4}, {&(0x7f0000000a40)="1be347f5934bf7637d87402aba8d9b1eab62cd75a309971afb51443a828d2f4916cf3d48e1c83f9ae811f5ef7fbe28bbe04234e3de573125b339ffefae7a1464db26d211a2dcb1aaeaf6b1bfaa12c40a96fb44e0d4626fa136e8e34a90c0", 0x5e}], 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000007128ea69000044ff0700"/31, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="10000000000000000100000001000000"], 0x60, 0x84}, 0x44)
r12 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
close(r14)
recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r15=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r12, 0x84, 0x25, &(0x7f0000000000)=r15, 0x20000010)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r10], 0x9a)
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r16)

13m39.337729781s ago: executing program 0 (id=1089):
r0 = getpid() (async)
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x78, 0x2, 0x45, 0x3, 0x0, 0x6, 0x4100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba18, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x106002, 0x9d23, 0x2, 0x5, 0x7, 0xffff, 0x9, 0x0, 0xc, 0x0, 0xe63}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5d, 0x2, 0xaa, 0x2, 0x0, 0x5, 0x200, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7695a070, 0x1, @perf_config_ext={0x200, 0x81}, 0x8804, 0x6, 0x8, 0x1, 0x4, 0x8, 0x5, 0x0, 0x7ff}, r0, 0x9, r1, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x8, 0x1, 0x3, 0x0, 0x6, 0x50d20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x100100, 0x4, 0x6, 0x6, 0x7, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xa, r2, 0x1) (async)
syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/net\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/50, 0x32, <r3=>0x0, &(0x7f0000000280)=""/238, 0xee}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5d, '\x00', 0x0, r4, 0x0, 0x5, 0x2}, 0x50) (async)
close(r2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r4, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/146, 0x92, 0x0, &(0x7f0000000580)=""/11, 0xb}}, 0x10) (async)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=<r7=>0xffffffffffffffff, 0x15, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@map=r5, r5, 0xe, 0x1, r6, @void, @value, @void, @void, r8}, 0x20)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x6000, 0x0) (async)
r10 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000ec0)={&(0x7f0000000880)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000900)="15791d35f618981ab524a21e1067d55c25938c080698745c95f39c310918d5ec72489b63debc2a3f85c00dabd6fa4d7e982b8d21fdf8e1beadb461a99c8670efddf16e5c803dba377657ddea34538aa976e1", 0x52}, {&(0x7f0000000980)="1564bb0b0d19510eaeec33d726d422183a01060affb96bfe89c30ccfed321cd9d7c1a179c0ee25c513acca75d45290b9cd2827e82d6124886b214db9da1e10dea6a8b52cf6efbb772ebd6b01afe33ba50c6823c53ca0beb0f9e9ff01c238794a2c28c8269c60e14c08885f8114af74c9779243d28e178592fa22438386dd718bc13317ce100429f57c3e1958ef76a1fc9e6fa1c5a5a138d90c", 0x99}, {&(0x7f0000000a40)="3d050e9bf4937fbb6ea4b230c2ccfa0e6f4792ca8502ed906399e82ba651ae5e7dcba28622bbd1addf9ab6b2ab46ead29085d87553226ffca091b30bd058f7fb09d3c4763fee6c", 0x47}, {&(0x7f0000000ac0)="9389211569dd4abde10aaf39f383bd5437986b42a0be381ca0dab0680dcaf6ac69b8342f66de1658838f1260d18d7089dd6ac181522c1fe975b2e6cf65303e3089f834bb2fcee7e546aff790cd223dd68a741735472644ad6e9e1d6154b715778b77cfdbd1c9ea0d915b9ac6dc42ce3b245d693a6ae430929cdf30ff7e8f62ec2351fa2cafbcadff604f3fed6bbbfe347b392f6765b447a9f85e0299436a1d2890f4389699fbed7156111ccfc891c812d97fa9e0e28c14070f37df5a9221fca4d6b14a087fddd99e816ea673c09f48f83e5607bc53deed1a6b07bcaab566f697f9c59c2347c09eddf84c0b2684acbe1a55a32b8f9fbfffc71ca49f", 0xfb}, {&(0x7f0000000bc0)="1c655b7648b5e7e7297b36cf60790d519a352b72f37472605f8228d261f92a91be6586de3bbd581adb6d13b872cb1d326d15bdd18e9054f96a1e5f1b036ff6c529a193f53fadf49bc782c731dd2555253de9078445b3535a5b08e33e91b63d8283e67211e407133894a12dac5854d7ac9500abde017952b30ba1a6a7bf56d1e95b1f4ad24a9c1290b852aad7e037097e48ceebad1407fb9deec9d83810e1672baa24f98ee6f9dc3907d763c587298171cc42b0fb16864f741afd4ffdbad2fcbf808389073d14e292704fac1c9f0320cec2bb55d09a4909421553e8ad966e9a5d00294547de", 0xe5}, {&(0x7f0000000cc0)="8d61e3e399007c437e7c29f4e7e0a7cd9d0f68ba8022f594b1e710d2e144e78f36a0c3ba14402e9d87553e67d5c2fd24ed38172a62df357bf64c66ed3eed82e2a7f24dadd54e8a8e2ba6902d30ea1cd5e57ef335744478fdcc23c869177862e57e4394b23d736b", 0x67}, {&(0x7f0000000d40)="ad634d37a9fd6f8cf807204953b420d173299aae909e173d1392788439fad7ba7ede5385c54b55357cde14661ece59ffb8df0d6757680c8e30b90790e3427338890b549dc8327a2e0591a6456748afd2c6206843d5e3823478cfc8de03a401349811c42d2021e776768026dbe197e858b980d7e84f3a81ab59eac39614cafba5e1f242a7f912240c2fdd1c1e9283bbe60c50fc4a05b64176a2289b012a98927b6274ae431b841185c0e57cdc6a9a6c0e70628a81db943ef421858948b4bda68a67b9b2c4d1fc9646d8a215a6622a425d06886f55a0d7c36ea6be9e237f", 0xdd}], 0x7}, 0x4000090) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000f00)={'ip6_vti0\x00', @local})
perf_event_open(&(0x7f0000000f80)={0x5, 0x80, 0xe6, 0x5a, 0x2, 0x5, 0x0, 0x4, 0x570, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000f40), 0xa}, 0x109, 0x6, 0x5, 0x9, 0x5, 0x46, 0xcbd8, 0x0, 0x7ff, 0x0, 0x7}, r0, 0xa, 0xffffffffffffffff, 0x9) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={<r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000001040)) (async)
ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000001080)) (async)
sendmsg(r11, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000010c0)="8a547c6e4bad18c7fb652ddc6a29f9e978910ca72e08559dcf768dac6499d2f57223f095368f959de16f381576a1eb79b5716b5002d92222d34dc7a77b4d7b207f9638b8300af2e82becd830d82dcdd3b83f57d112fb092d2bc4ef6c0bdf92c573", 0x61}, {&(0x7f0000001140)="3b426eb2a4d3e98c833deaa12293d510342c86e0a76c08ddddb4db126aa3d774153de4c3897e58ef1d7ab24f6ee2b8341dc7dbbde3131f90ebcadb77457179975766091ddb424f723564ebaafb5b2359478876a0799ef735f47aed4e391d001c915e3e8684b12035c04e7906caad", 0x6e}, {&(0x7f00000011c0)="d7ba0b7efdca547bf57e74848ea4b76195dbc3ef44a180db24d72e9c69ce7eb2f94797e3a78313181393410a59ff32bbf9d53d091503e83bf43f4d1886bf22a10204249bb8035fc7cf9c036f7ff19332a34ed1b7a7dc426f79bba1c971ac682ccac650960a0a93f19ef403ba4af1db3948514eb22886790c4a318a35a5331309d79e144023d4ccb0f2dd81ddbb6b2b8e9e05529bb74113c8802a", 0x9a}, {&(0x7f0000001280)="bdac4a584cf59b7ec8de1f122fc6f9a89b0a5164bd2bae3cc34a2a201653b89f19fc5aac6b869503150f1ac997ef7ca86238dbd6445c91ca0d7962cbc16e821a40ac95a7805b2ad387983c51fc36cb4ee9c5786e7c1ed75ae5653864d0eac283f0e0facc78673f9b0c2c40511e38408156", 0x71}, {&(0x7f0000001300)="113d5f9eec8136e9e264379bc0e5555220a568a7c627a187c33961bf98342e5e7a2f56b7ef631833317be99eeeac1d4c63513e6b5cac06e93ebf7923364a9946e2f4dfff12b9cdc7c788912f8129d43cf6e7d396ca972caf6cf2d7bc3e8ede7c3d0b73e79cb27cfd804eaddf21e482ad981e1809af395977abbcdfb2147ec1229f99796dff3ef6aadc5512e9629a34e33cd5c92963a6ac9b759cfec607f43be0f62d64d3933f800a8ce53765f99ee47387917876e43e98a54196eaf15749074c9496726d33ee3ce89d4f2ed3797433e404702081361858f59135ddf7887cef0459242f13600bd627f21f", 0xea}, {&(0x7f0000001400)="1df1fe4f248be038c21913773a8e99f7051ddf8f02e5988b29a6f3a08d1af8b573220ca8f4507f2fd74b126127d5b033174c5f6ffce7b81afb8b8c31bf948419e0bca4fef3cd4dece4de06826a98e9ba800b5cd3e8025ea01cfb80f0096c", 0x5e}, {&(0x7f0000001480)="22545160f2a9538eae4c3b4c1636e7e2beb000e52c7516a6bc03dd095ba63bf087251321b2f6fab5c5103f8aa7ac12dcde58eaa1341cf2eb2d98c4c4439ed4b581c5463a527dccc70d93ad4cd5047c953d83b5f37ca56cd31f683d3f0daa2e33be02318c386f6785dd740e472f294032e636c239bafeeff089c930773b1d056121a560d5ba4739e4e019697a0a9aff08133837a0276295ff9882d066a69ba3d3d53bf9f4a2f8f27f1d05edecc865acaf82af29fe604e2a62e3306730daa89651b289652406faa7a5f33ee31c357d319049", 0xd1}, {&(0x7f0000001580)="be5df892a20d80e341165dc8beccbb9ad06f50564c88c2fd0d7d4a914e39c3d64db3b32448aef145ed89c9b54d83c312840e8ae16e19b8308ac2", 0x3a}], 0x8}, 0xc080)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000001680), 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000016c0)={'vlan0\x00', @local})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r6, 0xe0, &(0x7f00000018c0)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001740)=[0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0], 0x0, 0x78, &(0x7f00000017c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0xce, 0x8, 0x8, &(0x7f0000001880)}}, 0x10)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0xa, 0x10, 0x7, 0x410, 0xffffffffffffffff, 0x13, '\x00', r13, r6, 0x0, 0x3, 0x5, 0x6}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a80)={@fallback=r11, r6, 0x12, 0x20, 0x0, @void, @void, @void, @value=r12, r8}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b40)={{r14, <r15=>0xffffffffffffffff}, &(0x7f0000001ac0), &(0x7f0000001b00)='%pi6   \x00'}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={r5, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r16=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x3, 0x51000, r15, 0x100, '\x00', r16, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x8}, 0x50)

13m38.755987147s ago: executing program 0 (id=1093):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000000)=r2, 0xff7b)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c250000000000202020"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)}, 0x40)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x48014)
sendmsg(r5, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

13m38.141206656s ago: executing program 0 (id=1098):
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700))
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x18400, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x26ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000e40000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff9702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000580)="b9ff0300610c", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x905800, 0x0) (async)
openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000b6d000000"]) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x1f, &(0x7f0000000100), 0x120) (async)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0)

13m36.845725646s ago: executing program 0 (id=1104):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x0, 0x7266218f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x55}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00')
ioctl$TUNSETIFF(r1, 0xb702, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37b1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

13m21.569131756s ago: executing program 32 (id=1104):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x0, 0x7266218f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x55}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00')
ioctl$TUNSETIFF(r1, 0xb702, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37b1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.268756245s ago: executing program 4 (id=4212):
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r0, &(0x7f0000000180), 0x40010)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r2)

11.414333325s ago: executing program 4 (id=4218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r3, 0x0, 0x0}, 0x10)
close(r3)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x7468, 0x0, 0x0, 0x40f00, 0xa, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xd, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0], 0x0, 0x10, 0x7}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="fcffffff0000000000000000000000000000000054db3b7abeed59a89f875902cba04180b7778e44990b2c1538604e9942986e62dabf7deca3fcd285bf59d983552cfe5dc29d845688dab0cae922f84eeb535c7aef410f1f0005da94956be284517ef6fb5a50988b4cbe13d8ac2ebb2ea9fd0ad5857e9494bd991d2a8386d745d7edb0c88afa85aad17fd8826f8c78410fbe6a63db2ed215db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r4, 0x0, 0x0}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
close(r5)
socket$kcm(0x23, 0x5, 0x0)
write$cgroup_subtree(r5, &(0x7f00000009c0)=ANY=[], 0xfdef)

11.212577484s ago: executing program 4 (id=4221):
socket$kcm(0x2c, 0x3, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$kcm(0x2, 0x2, 0x0) (rerun: 32)
socket$kcm(0x2c, 0x3, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), 0x0}, 0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'wlan0\x00', 0x112}) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07090000000b0359", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140), 0xfffffe98)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6, r5}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f01000000000000000000000000000000990000000000000004c9d920c1926c72310afac149cd6b0c00000000000000000000000c00000000000000000100000f03000000000000000000de92fd95439d8e1360cd27affea9a60fd175e469fc8614637792fd723662be3ce48d75218da08682cc379178e7f65dbeb50bb60f164c4cf40f1819c905fc48a927c6162a6599e4287a430237631361ada20db458d7128b8db339af5d6057633bc3898ec07d900134813ba40171482700"/256], 0x0, 0x82, 0x0, 0x1}, 0x28) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8940, &(0x7f0000000080)) (async, rerun: 64)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18) (async)
close(r4)

6.057165881s ago: executing program 3 (id=4242):
r0 = socket$kcm(0xa, 0x0, 0x3a)
sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=':', 0x1}], 0x1}, 0x24040801)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xaa}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2d, 'net_cls'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}]}, 0x1b)

5.983882004s ago: executing program 1 (id=4243):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000015006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140))
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000900)=ANY=[@ANYRESOCT], 0x31)

5.696764718s ago: executing program 3 (id=4244):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
mkdir(0x0, 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40040d5)

5.588156833s ago: executing program 1 (id=4245):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x80000001, 0x8}, 0x10925, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810)
r5 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x80000001, 0x8}, 0x10925, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
socket$kcm(0xa, 0x2, 0x73) (async)
sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31) (async)

5.579631003s ago: executing program 3 (id=4246):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x30, 0x0, 0x20000)

5.403377711s ago: executing program 3 (id=4247):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb7}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040)="7bdf", &(0x7f0000000080)=""/251}, 0x20)

5.345398354s ago: executing program 3 (id=4248):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000005f2ffffd4000000000000009500007d8d046d8a5e6ad72c3b000000000092f85e964545f321c5041f5e11233f27dafc339fdcc1631de359da0129883b4409cb88448ef25673bc2e24a5b3cfaab6ef35f884fd474eae193c47ef570d810a000020dc"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x48)
socket$kcm(0x10, 0x2, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x149941, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000380)=r11)

5.053530138s ago: executing program 2 (id=4249):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x2a, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x3, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x3}, @fwd={0x1}, @enum64={0x6, 0x4, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x11, 0x6}, {0x8, 0x30c7ee12, 0xa}, {0x2, 0x7d82a07d, 0x9}, {0x3, 0x1, 0x6}]}, @union={0x3, 0x7, 0x0, 0x5, 0x0, 0x6, [{0x0, 0x0, 0x3}, {0x5, 0x3}, {0xf, 0x1, 0x5}, {0xb, 0x0, 0x7cdb}, {0xf, 0x0, 0x400}, {0xf, 0x4, 0x40}, {0xd, 0x2, 0x9}]}]}, {0x0, [0x5f]}}, &(0x7f0000000600)=""/36, 0xe3, 0x24, 0x0, 0x2}, 0x28) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000100)='syzkaller\x00', 0x18000000, 0x61, &(0x7f0000000140)=""/97, 0x40f00, 0x4c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000680)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r0, r0, r0, r0, r4], &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x6}, {0x4, 0x5, 0x2, 0x7}, {0x2, 0x5, 0xf, 0x6}, {0x2, 0x2, 0xa, 0xb}, {0x5, 0x2, 0x7, 0x2}], 0x10, 0xffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x345f53cc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x6d, &(0x7f0000000900)=""/109, 0x41100, 0x29, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000a80)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000ac0)=[{0x0, 0x3, 0x4, 0xc}, {0x2, 0x5, 0x5, 0x9}, {0x0, 0x1, 0x1, 0x5}, {0x5, 0x1, 0x7, 0xb}, {0x2, 0x5, 0xe, 0x8}], 0x10, 0x10}, 0x94)

4.864809086s ago: executing program 2 (id=4250):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x12, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.803013929s ago: executing program 1 (id=4251):
socket$kcm(0x29, 0x7, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="59202a3a2a201a82414d"], 0xa) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4c510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001812000000000000000000000000000004000000002e0000afe7656f4442ac8a93aa6439de360bf99504bcfa7646898b4b7d51a423feb5316d5fc9c6a5b6a97c0ffdd03d5684ff117f7cafed30112628eba5a4fda5e3c1f138533b3eb2fdd69f1b5e3471ce29e3f6c969ca15f6fac221fb8451eae10b306309f8d65ec9aca4e89dcf85c14d1e7069938b99c7195c5f2bfc848153c44ac3d79a8ae2d110f788f84ebc0c25e9f7484bec6a744f5641efb6db49ddf2a78531462bc1dd44fc8f578aef07223e08af9f37640a65ce4844"], 0x0, 0x1c, 0x0, 0x1, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0xc8, 0xfffffffc, 0x3, 0x0, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffb}, 0x0, 0x4, 0xffffffffffffffff, 0x11) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="8c38f0ff10f3b74395e8177a9a86a1a2639668722e1ff7c2a0428a723f9da1676fdd6454720da8de9411b2fd8c32916245586b1d3084868059f23898178d63ef2bcbeb5b139e43604b3cfccda84028d8fd747260ee0524dcdd1510fde70256faf255f996b1b783df52461b9924"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, 0xffffffffffffffff, 0x4}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0xc800, 0x9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3.945496998s ago: executing program 2 (id=4252):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x110082, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd", 0x1a}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d0000000000000000030000000000000003000000040000000300000000000000000000020000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xdfc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x102)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4)
ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000340)=0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0xc3200, 0xc, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xf, 0x0, &(0x7f0000000680)="0000000000000000000000004000ac", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.872565782s ago: executing program 1 (id=4253):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000100), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x100)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x27)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bede00212ba0d8105040a600000000f040b067c55a1bc0009001e0006990600000015000500fe", 0x2d}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
close(r1)
r5 = socket$kcm(0x2b, 0x1, 0x0)
close(r5)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x15, 0x12}, 0x20)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r5)

2.912547486s ago: executing program 2 (id=4254):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, &(0x7f0000000500), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x5, 0x2, 0x1, 0x1}}, 0x80, 0x0}, 0x408c5)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=0x1, 0x24, 0x0, 0x10000, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x2, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8229, 0x10007, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xa, 0xffffffffffffffff, 0x70f9c640190efb20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x8, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000008c0)={&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a99c1ec2", 0x4}], 0x1}, 0x20004801)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x67, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), 0xfffffffffffffffd, 0x0, 0x5d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0xa, 0x6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c7c9b670b645e62a29a8e75236bff10f8000000000009a222bf9cafef92435efb1443fc11de0b807e3394191ce17a3bd720e5bd55213eb1b91984602d6538fcecfe48bcc7d21c47ea7062047fb1e553abe7ad9617e71415ecd2e259fdcd7924ded6f3ddaa2848b33e9082db551bbc4a435a1742c371557ee6e8395d857171d6341927ace8d9dbaf6b1ed45693a20760b1998b52fbd7e38ce2b65d5a283c8974588e1a2182281190965a524174e9d8fb7176c35b15c684d85c6abc4afdf3f116d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$kcm(0x10, 0x400000002, 0x0)

2.855043988s ago: executing program 4 (id=4255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x100})
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = socket$kcm(0x2b, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
close(r3)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x1e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
sendmsg$sock(r9, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc62, 0x3}, 0x18, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r11, 0x0, 0x7}, 0x38)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080))

424.669641ms ago: executing program 1 (id=4256):
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x9, 0x0, 0x6, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x10193f, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random="00ffffff8d00"}) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94)
sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{}, 0x0, 0x0}, 0x20)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58}, 0x28)
close(r5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xffffffffffffffd8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) (async)
close(r3)

424.008041ms ago: executing program 2 (id=4257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000100000000000000feffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="000000001c00007b8af8ff00000000bfa2000000009e000007020000f8ffffffb703000000000000b70400007dd53a522ea171575555bc09d4912a353f710100"/73], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0xb, &(0x7f00000001c0)=r1, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async)
mkdir(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x8, 0x0, 0x10, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x8, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, r4, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x200040c4)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0x100000b, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffbc) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r11}, 0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

417.721351ms ago: executing program 4 (id=4258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x14, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000580), 0x1000, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000280)="9dc3ba0a28", &(0x7f0000001580)=""/92}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19fdff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000fbffffff000005000000fadde2e04284e3379761feef1081f585b390cc768582ce66bad6d82afa449e34d56ed615827f519448ecfc08892b17e4787603b46b32b9e681e62f8a3a901ba716b6c027d8bc0f2abf33aceeb76c69df3962c6babaf3e2ad3dcb8c0092cb563b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0)
close(r10)
recvmsg$unix(r9, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
r12 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2950b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efb}, 0x11efa, 0x4, 0x96, 0x0, 0x2, 0xfefff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94", 0x45}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000180)=ANY=[@ANYRES8=r10, @ANYBLOB="3e971d"], 0x9a)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8, <r14=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400), 0x90ac, r14}, 0x38)

397.107552ms ago: executing program 3 (id=4259):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="9d15", 0x2}], 0x1}, 0x8051)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x5, 0x0) (async)
socket$kcm(0x2, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b002e9bbf3900004600000000000000fdff0000b58006566cf9debbd8f583ff25e1b311bea5b7c9e1494b93b9c1cb784daf961633d176e06acbfa3e03dc6774ec97d52a3690729b11d5c47aeb07c8ead24e8d4d2ede9dd6f504232d5b88741a50e46474ec0dedb24d2c076e482b913b1d8eb034e7bad139a89a493671665211acd3db33a7818d8989b5a1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007baaf8ff00000000b5080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500002791e3d49a9645a5a2b9990800000085000000b30400009500004ab43375de"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007baaf8ff00000000b5080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500002791e3d49a9645a5a2b9990800000085000000b30400009500004ab43375de"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0xb28, 0x0, 0x0, 0x0, 0xb, 0xc67, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x40800)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x29, 0x7, 0x0) (async)
socket$kcm(0x29, 0x7, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000300140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

108.599805ms ago: executing program 2 (id=4260):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000180000000000000000000000711203000000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00>', @ANYRES32], 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8480, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94)

67.238327ms ago: executing program 1 (id=4261):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x13, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 4 (id=4262):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1398, 0x9980, 0x7b20a547, 0x4113, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r0, 0x2, 0x5, 0x4, 0x1}, 0x50) (rerun: 64)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r5, 0x4000, r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa120000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000009000000ed5000000800000000000000", @ANYRES32, @ANYBLOB="030000000000fdff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'})

kernel console output (not intermixed with test programs):

sing attributes in process `syz.4.2557'.
[  758.880388][T16806] netlink: 'syz.4.2557': attribute type 1 has an invalid length.
[  758.999836][T16806] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2557'.
[  759.828812][T16812] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  759.982687][T16833] netlink: 'syz.4.2561': attribute type 29 has an invalid length.
[  760.710645][T16833] netlink: 'syz.4.2561': attribute type 29 has an invalid length.
[  761.216307][T16856] netlink: 'syz.4.2565': attribute type 2 has an invalid length.
[  761.263862][T16856] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2565'.
[  761.579977][T16860] syzkaller0: entered promiscuous mode
[  761.590539][T16860] syzkaller0: entered allmulticast mode
[  764.357504][T15582] wlan1: Trigger new scan to find an IBSS to join
[  766.012746][T16893] netlink: 'syz.2.2573': attribute type 12 has an invalid length.
[  768.350141][T15585] wlan1: Trigger new scan to find an IBSS to join
[  769.331212][T15581] wlan1: Creating new IBSS network, BSSID 56:9c:8b:97:de:18
[  770.231246][T16920] netlink: 'syz.2.2580': attribute type 3 has an invalid length.
[  770.239469][T16920] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2580'.
[  770.583351][T16933] netlink: 'syz.3.2582': attribute type 10 has an invalid length.
[  771.460666][T16933] team0: Port device wlan1 added
[  771.492275][T16931] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  771.535256][ T5775] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  771.681563][T16938] netlink: 'syz.2.2585': attribute type 9 has an invalid length.
[  771.693125][T16938] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2585'.
[  772.418311][T16958] netlink: 'syz.4.2590': attribute type 29 has an invalid length.
[  772.437615][T16958] netlink: 'syz.4.2590': attribute type 29 has an invalid length.
[  772.466472][T16960] netlink: 'syz.4.2590': attribute type 29 has an invalid length.
[  773.174167][T16968] netlink: 'syz.1.2593': attribute type 9 has an invalid length.
[  773.184362][T16968] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2593'.
[  775.323748][T15585] wlan1: Trigger new scan to find an IBSS to join
[  775.581490][T16976] netlink: 'syz.3.2604': attribute type 9 has an invalid length.
[  775.609225][T16976] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2604'.
[  776.167122][T16979] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  779.317589][T15577] wlan1: Trigger new scan to find an IBSS to join
[  779.385489][T15577] wlan1: Creating new IBSS network, BSSID e2:68:a3:6f:73:2a
[  779.588508][T17007] netlink: 'syz.2.2603': attribute type 2 has an invalid length.
[  779.598731][T17007] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2603'.
[  779.626138][T17005] netlink: 'syz.2.2603': attribute type 21 has an invalid length.
[  779.644521][T17005] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2603'.
[  779.662513][T17005] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2603'.
[  779.833025][T17025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  779.929860][T17025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  779.954385][T17015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  779.977003][T17017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  780.316634][T17031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2611'.
[  780.325821][T17029] netlink: 'syz.3.2610': attribute type 3 has an invalid length.
[  780.330794][T17031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2611'.
[  780.665337][T17039] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.675478][T17039] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.721969][T17039] bridge0: entered allmulticast mode
[  780.763677][T17042] bridge_slave_1: left allmulticast mode
[  780.779275][T17042] bridge_slave_1: left promiscuous mode
[  780.796484][T17042] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.834357][T17042] bridge_slave_0: left allmulticast mode
[  780.854001][T17042] bridge_slave_0: left promiscuous mode
[  780.865684][T17042] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.108646][T17050] netlink: 'syz.4.2609': attribute type 9 has an invalid length.
[  781.118645][T17050] __nla_validate_parse: 2 callbacks suppressed
[  781.118725][T17050] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2609'.
[  781.326594][T17062] sock: sock_timestamping_bind_phc: sock not bind to device
[  781.362560][T17059] netlink: 'syz.2.2616': attribute type 10 has an invalid length.
[  781.991643][T17059] team0: Device gre0 is of different type
[  782.190856][T17074] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2620'.
[  782.786124][T17085] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2623'.
[  783.023617][T17089] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2625'.
[  784.242466][T17103] sit0: entered allmulticast mode
[  784.255546][T17109] netlink: 'syz.2.2629': attribute type 10 has an invalid length.
[  784.489863][T17104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2628'.
[  784.490481][T17105] sit0: entered promiscuous mode
[  784.788426][T17109] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2629'.
[  784.796594][T17111] netlink: 'syz.1.2631': attribute type 2 has an invalid length.
[  784.815465][T17111] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2631'.
[  784.825280][T17109] openvswitch: netlink: Message has 4 unknown bytes.
[  785.380619][T17130] netlink: 'syz.4.2637': attribute type 2 has an invalid length.
[  785.388912][T17130] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.2637'.
[  785.520277][T17134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2638'.
[  785.688355][T17134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2638'.
[  785.730029][T17147] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  786.175228][T17161] netlink: 'syz.4.2644': attribute type 28 has an invalid length.
[  786.218992][T17161] netlink: 'syz.4.2644': attribute type 29 has an invalid length.
[  786.227973][T17161] __nla_validate_parse: 2 callbacks suppressed
[  786.227990][T17161] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2644'.
[  786.308187][T17161] netlink: 'syz.4.2644': attribute type 21 has an invalid length.
[  786.335176][T17161] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2644'.
[  786.929418][T17168] syzkaller0: entered promiscuous mode
[  786.935477][T17168] syzkaller0: entered allmulticast mode
[  788.908871][T17193] netlink: 'syz.3.2652': attribute type 3 has an invalid length.
[  788.939195][T17193] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2652'.
[  791.705897][T17209] IPv6: NLM_F_CREATE should be specified when creating new route
[  791.714279][T17209] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2656'.
[  792.139355][T17228] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2661'.
[  792.217142][T17228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2661'.
[  792.317966][T17228] hsr_slave_0: left promiscuous mode
[  792.339390][T17228] hsr_slave_1: left promiscuous mode
[  792.587458][T17235] netlink: 'syz.1.2662': attribute type 29 has an invalid length.
[  792.633984][T17235] netlink: 'syz.1.2662': attribute type 29 has an invalid length.
[  793.230550][T17244] netlink: 'syz.3.2664': attribute type 29 has an invalid length.
[  793.293929][T17244] netlink: 'syz.3.2664': attribute type 29 has an invalid length.
[  793.330679][T17245] netlink: 'syz.3.2664': attribute type 29 has an invalid length.
[  793.342651][T17246] netlink: 'syz.3.2664': attribute type 29 has an invalid length.
[  793.372670][T17244] netlink: 'syz.3.2664': attribute type 29 has an invalid length.
[  793.549217][T17244] netlink: 'syz.3.2664': attribute type 11 has an invalid length.
[  793.723062][T17250] syzkaller0: entered promiscuous mode
[  793.728900][T17250] syzkaller0: entered allmulticast mode
[  800.609956][T17286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2674'.
[  800.738804][T17293] netlink: 'syz.3.2675': attribute type 21 has an invalid length.
[  800.798765][T17293] IPv6: NLM_F_CREATE should be specified when creating new route
[  804.510383][T17329] netlink: 'syz.2.2682': attribute type 10 has an invalid length.
[  804.518406][T17329] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2682'.
[  804.535800][T17329] hsr0: entered promiscuous mode
[  804.547009][T17329] bridge0: port 4(hsr0) entered blocking state
[  804.554236][T17329] bridge0: port 4(hsr0) entered disabled state
[  804.561242][T17329] hsr0: entered allmulticast mode
[  804.566490][T17329] hsr_slave_0: entered allmulticast mode
[  804.573523][T17329] hsr_slave_1: entered allmulticast mode
[  804.582763][T17329] bridge0: port 4(hsr0) entered blocking state
[  804.589101][T17329] bridge0: port 4(hsr0) entered forwarding state
[  804.976260][T17342] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2686'.
[  805.164813][T17338] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2685'.
[  805.181202][T17338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  808.171911][T17359] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2689'.
[  808.604391][T17377] netlink: 'syz.2.2694': attribute type 1 has an invalid length.
[  808.624571][T17369] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2690'.
[  808.643365][T17377] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2694'.
[  808.654814][T17369] bond0: (slave bond_slave_0): Releasing backup interface
[  808.688290][T17369] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  808.705893][T17373] netlink: 'syz.4.2693': attribute type 10 has an invalid length.
[  809.161296][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  809.167695][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  809.349827][T17399] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.374405][T17408] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.397441][T17399] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.423180][T17408] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.446344][T17399] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.460297][T17408] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.476728][T17408] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.482438][T17399] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.533755][T17399] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.534760][T17408] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.555249][T17399] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.591171][T17399] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  809.606467][T17408] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.635848][T17399] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2700'.
[  809.681383][T17408] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  814.442707][T17439] __nla_validate_parse: 8 callbacks suppressed
[  814.442749][T17439] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2706'.
[  814.533441][T17439] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2706'.
[  814.545474][T17439] hsr_slave_0: left promiscuous mode
[  814.563148][T17439] hsr_slave_1: left promiscuous mode
[  815.020201][T17461] delete_channel: no stack
[  815.167005][T17473] validate_nla: 6 callbacks suppressed
[  815.167045][T17473] netlink: 'syz.1.2715': attribute type 21 has an invalid length.
[  815.205787][T17473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2715'.
[  815.628353][T17481] netlink: 'syz.1.2717': attribute type 2 has an invalid length.
[  815.697372][T17481] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2717'.
[  815.722576][T17483] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2718'.
[  816.116437][T17489] netlink: 'syz.3.2720': attribute type 3 has an invalid length.
[  816.139852][T17489] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2720'.
[  816.368117][T17501] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2724'.
[  816.395532][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'.
[  816.424423][T17498] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2723'.
[  816.449720][T17498] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2723'.
[  818.018605][T17539] netlink: 'syz.1.2736': attribute type 3 has an invalid length.
[  818.973397][T17555] syz.2.2739[17555] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  818.974854][T17555] syz.2.2739[17555] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  819.874336][T17573] __nla_validate_parse: 8 callbacks suppressed
[  819.874357][T17573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2744'.
[  820.069315][T17575] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2744'.
[  820.110827][T17573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2744'.
[  820.188344][T17572] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2744'.
[  820.270215][T17571] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2744'.
[  820.283454][T17572] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2744'.
[  821.470147][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  821.939210][T17619] netlink: 'syz.4.2754': attribute type 17 has an invalid length.
[  821.960961][T17619] netlink: 'syz.4.2754': attribute type 16 has an invalid length.
[  821.968965][T17619] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2754'.
[  822.119251][T17623] netlink: 'syz.4.2754': attribute type 17 has an invalid length.
[  822.159690][T17623] netlink: 'syz.4.2754': attribute type 16 has an invalid length.
[  822.209925][T17623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2754'.
[  823.125282][T17630] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2756'.
[  823.212823][T17630] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2756'.
[  826.735116][T17661] __nla_validate_parse: 1 callbacks suppressed
[  826.735137][T17661] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2762'.
[  830.331084][   T14] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 1042 jiffies old.
[  832.936368][T17688] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2769'.
[  833.560388][T17721] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2778'.
[  834.148410][T17733] netlink: 'syz.2.2780': attribute type 21 has an invalid length.
[  834.299382][T17729] netlink: 'syz.1.2779': attribute type 10 has an invalid length.
[  834.325314][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.346294][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.459819][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.493520][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.508661][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.527054][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.559563][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.579734][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.608394][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.627290][T17729] netlink: 'syz.1.2779': attribute type 11 has an invalid length.
[  834.645968][T17729] netlink: 'syz.1.2779': attribute type 4 has an invalid length.
[  834.669125][T17729] netlink: 'syz.1.2779': attribute type 5 has an invalid length.
[  834.689423][T17729] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.2779'.
[  835.502215][T17750] sit0: entered allmulticast mode
[  835.540724][T17758] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2785'.
[  835.697431][T17756] sit0: entered promiscuous mode
[  836.324121][T17781] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2790'.
[  836.700708][T17784] syzkaller0: entered promiscuous mode
[  836.706372][T17784] syzkaller0: entered allmulticast mode
[  836.742877][T17787] netlink: 'syz.1.2791': attribute type 39 has an invalid length.
[  836.832415][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  837.116957][T17799] netlink: 'syz.3.2797': attribute type 29 has an invalid length.
[  839.282605][T17799] netlink: 'syz.3.2797': attribute type 29 has an invalid length.
[  839.665759][T17815] tap0: tun_chr_ioctl cmd 1074025676
[  839.681433][T17815] tap0: owner set to 776
[  839.854982][T17810] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2798'.
[  841.162384][T17835] netlink: 'syz.1.2804': attribute type 1 has an invalid length.
[  841.180387][T17835] netlink: 'syz.1.2804': attribute type 2 has an invalid length.
[  841.188217][T17835] netlink: 'syz.1.2804': attribute type 2 has an invalid length.
[  841.198002][T17835] netlink: 'syz.1.2804': attribute type 3 has an invalid length.
[  841.206360][T17835] netlink: 'syz.1.2804': attribute type 4 has an invalid length.
[  841.215516][T17835] netlink: 'syz.1.2804': attribute type 5 has an invalid length.
[  841.224420][T17835] netlink: 'syz.1.2804': attribute type 6 has an invalid length.
[  841.235810][T17835] netlink: 'syz.1.2804': attribute type 7 has an invalid length.
[  841.243995][T17835] netlink: 'syz.1.2804': attribute type 9 has an invalid length.
[  841.252246][T17835] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2804'.
[  842.289512][T17852] syzkaller0: entered promiscuous mode
[  842.296458][T17852] syzkaller0: entered allmulticast mode
[  842.312813][T17853] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2810'.
[  846.554099][ T5775] Bluetooth: hci3: ISO packet for unknown connection handle 1854
[  849.077596][T17865] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  849.542131][T17889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  849.550077][T17889] IPv6: NLM_F_CREATE should be set when creating new route
[  849.558259][T17889] IPv6: NLM_F_CREATE should be set when creating new route
[  849.566203][T17889] IPv6: NLM_F_CREATE should be set when creating new route
[  849.628857][T17891] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.2820'.
[  849.778121][T17889] validate_nla: 4 callbacks suppressed
[  849.778154][T17889] netlink: 'syz.1.2818': attribute type 9 has an invalid length.
[  849.849127][T17889] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2818'.
[  850.305806][T17913] netlink: 'syz.1.2824': attribute type 10 has an invalid length.
[  850.748600][T17913] macvlan0: entered promiscuous mode
[  850.869265][T17913] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  851.286668][T17917] syzkaller0: entered promiscuous mode
[  851.313907][T17917] syzkaller0: entered allmulticast mode
[  851.321625][T17923] netlink: 'syz.2.2826': attribute type 39 has an invalid length.
[  852.189929][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  856.256280][T17975] sit0: left promiscuous mode
[  856.344727][T17984] sit0: entered promiscuous mode
[  856.574172][T17992] netlink: 'syz.4.2843': attribute type 2 has an invalid length.
[  856.585544][T17992] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2843'.
[  856.732774][T18000] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2846'.
[  856.894944][T17998] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2845'.
[  857.221735][T17998] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  857.376109][T18013] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2850'.
[  857.393462][T18013] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  857.482910][T18016] netlink: 'syz.2.2851': attribute type 10 has an invalid length.
[  857.552417][T18019] netlink: 'syz.3.2852': attribute type 1 has an invalid length.
[  857.555970][T18016] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.595920][T18019] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2852'.
[  857.611134][T18016] bridge_slave_1: left allmulticast mode
[  857.653647][T18016] bridge_slave_1: left promiscuous mode
[  857.684692][T18016] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.870411][T18016] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  858.277136][T18045] netlink: 'syz.4.2858': attribute type 10 has an invalid length.
[  858.304520][T18042] netlink: 'syz.3.2856': attribute type 29 has an invalid length.
[  858.654946][T18042] netlink: 'syz.3.2856': attribute type 29 has an invalid length.
[  858.672373][T18050] netlink: 'syz.3.2856': attribute type 29 has an invalid length.
[  859.038679][T18051] netlink: 'syz.3.2856': attribute type 29 has an invalid length.
[  859.121379][T18055] netlink: 'syz.3.2856': attribute type 29 has an invalid length.
[  859.298779][T18064] netlink: 'syz.2.2862': attribute type 21 has an invalid length.
[  859.329857][T18064] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2862'.
[  859.720430][T18074] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2864'.
[  859.756937][T18077] bridge_slave_1: left allmulticast mode
[  859.776677][T18077] bridge_slave_1: left promiscuous mode
[  859.796114][T18077] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.844829][T18077] bridge_slave_0: left allmulticast mode
[  859.866377][T18077] bridge_slave_0: left promiscuous mode
[  859.874049][T18077] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.710350][T16030] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  863.025586][T18078] netlink: 64947 bytes leftover after parsing attributes in process `syz.2.2866'.
[  863.192816][T18090] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2869'.
[  863.460071][T18106] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2873'.
[  863.580529][T18106] IPv6: Can't replace route, no match found
[  864.108934][T18122] can: request_module (can-proto-0) failed.
[  866.114799][T18143] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2883'.
[  866.335886][T18144] validate_nla: 1 callbacks suppressed
[  866.335905][T18144] netlink: 'syz.3.2883': attribute type 2 has an invalid length.
[  866.517078][T18144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2883'.
[  867.088794][T18151] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2883'.
[  867.206379][T18152] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2883'.
[  867.711634][T18164] : entered promiscuous mode
[  867.991595][T18172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2887'.
[  869.356184][T18200] netlink: 'syz.1.2896': attribute type 46 has an invalid length.
[  869.401709][T18200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2896'.
[  870.198839][T18208] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2897'.
[  870.314042][T18208] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  870.552780][T18221] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2900'.
[  870.661522][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.668004][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  871.830151][T18226] netlink: 'syz.4.2902': attribute type 9 has an invalid length.
[  871.850655][T18226] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2902'.
[  871.958945][T18230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2904'.
[  872.889524][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2910'.
[  872.960124][T18250] netlink: 'syz.4.2910': attribute type 21 has an invalid length.
[  872.988858][T18250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2910'.
[  873.035001][T18250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'.
[  873.766633][T18273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2916'.
[  874.371920][T18278] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.2917'.
[  875.371024][T18292] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2920'.
[  876.838490][T18301] netlink: 'syz.4.2924': attribute type 6 has an invalid length.
[  876.874540][T18301] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2924'.
[  876.922786][T18303] syzkaller1: tun_chr_ioctl cmd 1074025677
[  876.936360][T18303] syzkaller1: linktype set to 805
[  880.418080][T18332] netlink: 'syz.4.2932': attribute type 21 has an invalid length.
[  882.696843][T18363] netlink: 'syz.2.2940': attribute type 21 has an invalid length.
[  882.737667][T18363] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2940'.
[  882.806244][T18363] netlink: 'syz.2.2940': attribute type 10 has an invalid length.
[  882.972251][T18363] bridge0: port 4(hsr0) entered disabled state
[  882.978911][T18363] bridge0: port 3(veth0_to_bond) entered disabled state
[  882.986553][T18363] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.054511][T18363] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  883.119348][T18363] bridge0: port 4(hsr0) entered blocking state
[  883.125948][T18363] bridge0: port 4(hsr0) entered forwarding state
[  883.133031][T18363] bridge0: port 3(veth0_to_bond) entered blocking state
[  883.140349][T18363] bridge0: port 3(veth0_to_bond) entered forwarding state
[  883.147987][T18363] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.155458][T18363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  883.251489][T18363] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  887.798190][T18387] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2945'.
[  888.141685][T18386] netlink: 'syz.4.2947': attribute type 10 has an invalid length.
[  888.191213][T18386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2947'.
[  889.934163][T18412] can: request_module (can-proto-0) failed.
[  891.499990][T18435] netlink: 'syz.4.2957': attribute type 63 has an invalid length.
[  891.508132][T18435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2957'.
[  894.003139][T18457] netlink: zone id is out of range
[  894.008385][T18457] netlink: set zone limit has 8 unknown bytes
[  894.158262][T18452] netlink: 'syz.1.2960': attribute type 1 has an invalid length.
[  894.272756][T18455] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2960'.
[  894.327083][T18467] syz.2.2965[18467] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  894.327336][T18467] syz.2.2965[18467] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  894.329013][T18463] netlink: 'syz.3.2964': attribute type 10 has an invalid length.
[  894.341444][T18468] syz.2.2965[18468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  894.385573][T18468] syz.2.2965[18468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  894.412004][T18463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.470984][T18463] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  894.568577][T18475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2967'.
[  895.386948][T18492] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2969'.
[  895.457410][T18492] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  895.530437][T18492] CPU: 1 PID: 18492 Comm: syz.2.2969 Not tainted syzkaller #0
[  895.537999][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  895.548105][T18492] Call Trace:
[  895.551429][T18492]  <TASK>
[  895.554411][T18492]  dump_stack_lvl+0x18c/0x250
[  895.559155][T18492]  ? show_regs_print_info+0x20/0x20
[  895.564421][T18492]  ? load_image+0x420/0x420
[  895.569002][T18492]  sysfs_warn_dup+0x8e/0xa0
[  895.573588][T18492]  sysfs_do_create_link_sd+0xc0/0x110
[  895.579010][T18492]  device_add_class_symlinks+0x1cf/0x240
[  895.584705][T18492]  device_add+0x4f9/0xc40
[  895.589186][T18492]  wiphy_register+0x1d99/0x2ac0
[  895.594122][T18492]  ? cfg80211_event_work+0x40/0x40
[  895.599287][T18492]  ? minstrel_ht_alloc+0x88a/0x990
[  895.604473][T18492]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  895.610603][T18492]  ieee80211_register_hw+0x2dd8/0x3b30
[  895.616143][T18492]  ? ieee80211_register_hw+0xfb1/0x3b30
[  895.621786][T18492]  ? ieee80211_tasklet_handler+0x20/0x20
[  895.627490][T18492]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  895.633452][T18492]  ? __debug_object_init+0xec/0x450
[  895.638736][T18492]  ? __asan_memset+0x22/0x40
[  895.643379][T18492]  ? __hrtimer_init+0x189/0x270
[  895.648443][T18492]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  895.654451][T18492]  ? mac80211_hwsim_free+0x220/0x220
[  895.659756][T18492]  ? rcu_is_watching+0x15/0xb0
[  895.664538][T18492]  ? kstrndup+0xbd/0x140
[  895.668815][T18492]  hwsim_new_radio_nl+0xdad/0x1a70
[  895.673987][T18492]  ? __nla_validate+0x50/0x50
[  895.678731][T18492]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  895.685117][T18492]  ? __nla_parse+0x40/0x50
[  895.689602][T18492]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  895.695977][T18492]  genl_family_rcv_msg_doit+0x21a/0x310
[  895.701562][T18492]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  895.707501][T18492]  ? bpf_lsm_capable+0x9/0x10
[  895.712196][T18492]  ? security_capable+0x89/0xb0
[  895.717076][T18492]  genl_rcv_msg+0x611/0x7a0
[  895.721809][T18492]  ? genl_bind+0x360/0x360
[  895.726322][T18492]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  895.732698][T18492]  ? ref_tracker_free+0x686/0x830
[  895.737744][T18492]  ? __kasan_kmalloc_large+0x8b/0xa0
[  895.743483][T18492]  netlink_rcv_skb+0x235/0x4c0
[  895.748291][T18492]  ? genl_bind+0x360/0x360
[  895.752730][T18492]  ? netlink_ack+0x1160/0x1160
[  895.757522][T18492]  ? __lock_acquire+0x7d80/0x7d80
[  895.762574][T18492]  ? down_read+0x1ac/0x2e0
[  895.767094][T18492]  genl_rcv+0x28/0x40
[  895.771097][T18492]  netlink_unicast+0x7b1/0x930
[  895.775893][T18492]  netlink_sendmsg+0x8d0/0xbf0
[  895.780713][T18492]  ? netlink_getsockopt+0x590/0x590
[  895.786131][T18492]  ? apparmor_socket_sendmsg+0x8e/0x330
[  895.791710][T18492]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  895.797017][T18492]  ? security_socket_sendmsg+0x80/0xa0
[  895.802579][T18492]  ? netlink_getsockopt+0x590/0x590
[  895.807798][T18492]  ____sys_sendmsg+0x61b/0x980
[  895.812767][T18492]  ? __asan_memset+0x22/0x40
[  895.817376][T18492]  ? __sys_sendmsg_sock+0x30/0x30
[  895.822504][T18492]  ? __import_iovec+0x5f2/0x850
[  895.827383][T18492]  ? import_iovec+0x73/0xa0
[  895.831915][T18492]  ___sys_sendmsg+0x2a6/0x360
[  895.836616][T18492]  ? __sys_sendmsg+0x2b0/0x2b0
[  895.841490][T18492]  __se_sys_sendmsg+0x1d0/0x2c0
[  895.846450][T18492]  ? __x64_sys_sendmsg+0x80/0x80
[  895.851445][T18492]  ? lockdep_hardirqs_on+0x98/0x150
[  895.856684][T18492]  do_syscall_64+0x55/0xb0
[  895.861118][T18492]  ? clear_bhb_loop+0x40/0x90
[  895.865926][T18492]  ? clear_bhb_loop+0x40/0x90
[  895.870715][T18492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  895.876635][T18492] RIP: 0033:0x7f95f099e159
[  895.881167][T18492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  895.900792][T18492] RSP: 002b:00007f95f18db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  895.909222][T18492] RAX: ffffffffffffffda RBX: 00007f95f0c26270 RCX: 00007f95f099e159
[  895.917296][T18492] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  895.925286][T18492] RBP: 00007f95f0a3506b R08: 0000000000000000 R09: 0000000000000000
[  895.933268][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  895.941251][T18492] R13: 00007f95f0c26308 R14: 00007f95f0c26270 R15: 00007ffc5cc99508
[  895.949267][T18492]  </TASK>
[  896.628999][T18508] netlink: 'syz.1.2974': attribute type 21 has an invalid length.
[  899.723493][T18573] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  900.271207][T18589] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2994'.
[  901.022419][T18597] netlink: 'syz.3.2997': attribute type 10 has an invalid length.
[  902.382542][T18643] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3007'.
[  902.427109][T18651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3007'.
[  903.583418][T18682] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3013'.
[  903.609887][T18682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  904.234730][T18695] delete_channel: no stack
[  904.388126][T18703] netlink: 'syz.4.3018': attribute type 6 has an invalid length.
[  904.396919][T18703] netlink: 'syz.4.3018': attribute type 1 has an invalid length.
[  904.406711][T18703] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3018'.
[  904.770226][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'.
[  905.630825][T18728] netlink: 'syz.3.3024': attribute type 27 has an invalid length.
[  905.638740][T18728] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3024'.
[  906.018743][T18736] netlink: 'syz.4.3025': attribute type 27 has an invalid length.
[  906.079007][T18733] netlink: 'syz.4.3025': attribute type 1 has an invalid length.
[  906.144910][T18736] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3025'.
[  906.199881][T18733] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3025'.
[  906.922056][T18754] netlink: 'syz.2.3029': attribute type 3 has an invalid length.
[  907.024061][T18754] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.3029'.
[  908.134538][T18761] netlink: 'syz.2.3030': attribute type 6 has an invalid length.
[  908.185587][T18761] netlink: 'syz.2.3030': attribute type 1 has an invalid length.
[  908.218598][T18761] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3030'.
[  909.344866][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'.
[  909.377598][T18777] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3033'.
[  909.809163][T18782] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3036'.
[  909.968592][T18782] team0: Port device team_slave_0 removed
[  909.988221][T18782] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  910.333002][T18790] netlink: 'syz.3.3039': attribute type 2 has an invalid length.
[  910.375253][T18790] netlink: 'syz.3.3039': attribute type 2 has an invalid length.
[  910.586878][T18790] netlink: 'syz.3.3039': attribute type 10 has an invalid length.
[  910.694565][T18790] macvlan0: entered promiscuous mode
[  910.804819][T18790] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  911.095710][T18802] netlink: 'syz.1.3043': attribute type 6 has an invalid length.
[  911.115832][T18802] netlink: 'syz.1.3043': attribute type 1 has an invalid length.
[  911.212473][T18802] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3043'.
[  912.113664][T18818] netlink: 'syz.4.3045': attribute type 9 has an invalid length.
[  912.170078][T18818] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3045'.
[  914.266516][T18861] netlink: 'syz.3.3055': attribute type 6 has an invalid length.
[  914.297139][T18861] netlink: 'syz.3.3055': attribute type 1 has an invalid length.
[  914.315885][T18861] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3055'.
[  914.555319][T18873] netlink: 'syz.2.3057': attribute type 9 has an invalid length.
[  914.566116][T18873] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3057'.
[  914.827349][T18877] netlink: 'syz.2.3057': attribute type 9 has an invalid length.
[  914.870433][T18877] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3057'.
[  914.887844][T18870] netlink: 'syz.1.3058': attribute type 9 has an invalid length.
[  914.911663][T18870] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3058'.
[  915.488521][T18882] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3059'.
[  915.719677][T18887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3059'.
[  915.767850][T18896] netlink: 'syz.1.3062': attribute type 21 has an invalid length.
[  915.794065][T18896] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3062'.
[  916.097128][T18904] netlink: 'syz.3.3064': attribute type 7 has an invalid length.
[  917.004798][T18917] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3070'.
[  917.367359][T18930] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3075'.
[  917.502544][T18933] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3076'.
[  917.813048][T18945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3079'.
[  917.825941][T18945] netlink: 'syz.2.3079': attribute type 12 has an invalid length.
[  917.835104][T18945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3079'.
[  917.868982][T18945] netlink: 'syz.2.3079': attribute type 21 has an invalid length.
[  917.877942][T18945] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3079'.
[  917.892474][T18945] netlink: 'syz.2.3079': attribute type 4 has an invalid length.
[  917.903216][T18945] netlink: 'syz.2.3079': attribute type 3 has an invalid length.
[  917.921418][T18945] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3079'.
[  917.966320][T18950] tap0: tun_chr_ioctl cmd 1074025676
[  917.974081][T18950] tap0: owner set to 776
[  917.984327][T18948] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.3080'.
[  918.300846][T18958] netlink: 'syz.1.3083': attribute type 2 has an invalid length.
[  919.333043][T18974] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3087'.
[  920.080066][T18999] netlink: 'syz.3.3095': attribute type 3 has an invalid length.
[  920.105847][T18999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3095'.
[  920.773546][T19012] netlink: 'syz.3.3098': attribute type 3 has an invalid length.
[  920.797946][T19012] netlink: 'syz.3.3098': attribute type 1 has an invalid length.
[  920.846616][T19013] C: renamed from team_slave_0
[  920.862889][T19013] netlink: 'syz.3.3098': attribute type 3 has an invalid length.
[  920.870923][T19013] netlink: 'syz.3.3098': attribute type 2 has an invalid length.
[  920.878684][T19013] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  921.234823][T19025] dvmrp1: tun_chr_ioctl cmd 1074025675
[  921.261383][T19025] dvmrp1: persist disabled
[  923.743470][T19064] __nla_validate_parse: 5 callbacks suppressed
[  923.743489][T19064] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3113'.
[  923.934282][T19068] validate_nla: 5 callbacks suppressed
[  923.934319][T19068] netlink: 'syz.4.3114': attribute type 10 has an invalid length.
[  924.418958][T19080] netlink: 'syz.1.3119': attribute type 13 has an invalid length.
[  924.427662][T19080] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.3119'.
[  925.241520][T19083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3120'.
[  925.264564][T19083] : renamed from caif0
[  925.508871][T19083] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  925.526256][T19089] netlink: 'syz.1.3121': attribute type 10 has an invalid length.
[  925.539285][T19089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3121'.
[  925.549926][T19089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  925.817164][T19093] bridge0: port 4(hsr0) entered disabled state
[  925.826379][T19093] bridge0: port 3(veth0_to_bond) entered disabled state
[  925.837114][T19093] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.868843][T19093] bridge0: entered allmulticast mode
[  925.938574][T19097] hsr0: left allmulticast mode
[  925.947028][T19097] hsr_slave_0: left allmulticast mode
[  925.958508][T19097] hsr_slave_1: left allmulticast mode
[  925.976061][T19097] bridge0: port 4(hsr0) entered disabled state
[  926.063675][T19097] veth0_to_bond: left allmulticast mode
[  926.070759][T19097] veth0_to_bond: left promiscuous mode
[  926.088923][T19097] bridge0: port 3(veth0_to_bond) entered disabled state
[  926.135885][T19097] bridge_slave_0: left allmulticast mode
[  926.144980][T19097] bridge_slave_0: left promiscuous mode
[  926.155608][T19097] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.334053][T19097] bond0: (slave bridge0): Releasing backup interface
[  926.347880][T19097] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  926.439476][T19102] netlink: 'syz.1.3124': attribute type 10 has an invalid length.
[  926.564204][T19106] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3125'.
[  926.680391][T19111] netlink: 'syz.2.3127': attribute type 46 has an invalid length.
[  927.255444][T19122] netlink: 'syz.3.3132': attribute type 2 has an invalid length.
[  927.279804][T19122] netlink: 'syz.3.3132': attribute type 8 has an invalid length.
[  927.287700][T19122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3132'.
[  927.459192][T19125] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3133'.
[  927.563915][T19125] netlink: 'syz.2.3133': attribute type 10 has an invalid length.
[  927.683038][T19125] team0: Device hsr_slave_0 failed to register rx_handler
[  927.773105][T19132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3135'.
[  927.986618][T19132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3135'.
[  928.018698][T19139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3135'.
[  928.077201][T19132] ��
: port 1(gretap0) entered blocking state
[  928.093538][T19132] ��
: port 1(gretap0) entered disabled state
[  928.103245][T19132] gretap0: entered allmulticast mode
[  928.177744][T19132] gretap0: entered promiscuous mode
[  928.463165][T19150] netlink: 'syz.2.3140': attribute type 2 has an invalid length.
[  929.283983][T19173] __nla_validate_parse: 3 callbacks suppressed
[  929.284001][T19173] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.3147'.
[  929.754412][T19181] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3151'.
[  930.465314][T19211] nla_validate_range_unsigned: 25 callbacks suppressed
[  930.465336][T19211] netlink: 'syz.4.3159': attribute type 11 has an invalid length.
[  930.486879][T19211] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.3159'.
[  930.617478][T19211] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  930.626692][T19211] CPU: 0 PID: 19211 Comm: syz.4.3159 Not tainted syzkaller #0
[  930.634232][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  930.644375][T19211] Call Trace:
[  930.647689][T19211]  <TASK>
[  930.650659][T19211]  dump_stack_lvl+0x18c/0x250
[  930.655405][T19211]  ? show_regs_print_info+0x20/0x20
[  930.660672][T19211]  ? load_image+0x420/0x420
[  930.665242][T19211]  sysfs_warn_dup+0x8e/0xa0
[  930.669838][T19211]  sysfs_do_create_link_sd+0xc0/0x110
[  930.675267][T19211]  device_add_class_symlinks+0x1cf/0x240
[  930.680963][T19211]  device_add+0x4f9/0xc40
[  930.685448][T19211]  wiphy_register+0x1d99/0x2ac0
[  930.690383][T19211]  ? cfg80211_event_work+0x40/0x40
[  930.695721][T19211]  ? minstrel_ht_alloc+0x88a/0x990
[  930.701115][T19211]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  930.707334][T19211]  ieee80211_register_hw+0x2dd8/0x3b30
[  930.712938][T19211]  ? ieee80211_register_hw+0xfb1/0x3b30
[  930.718555][T19211]  ? ieee80211_tasklet_handler+0x20/0x20
[  930.724323][T19211]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  930.730283][T19211]  ? __debug_object_init+0xec/0x450
[  930.735529][T19211]  ? __asan_memset+0x22/0x40
[  930.740199][T19211]  ? __hrtimer_init+0x189/0x270
[  930.745098][T19211]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  930.750894][T19211]  ? mac80211_hwsim_free+0x220/0x220
[  930.756227][T19211]  ? rcu_is_watching+0x15/0xb0
[  930.761040][T19211]  ? kstrndup+0xbd/0x140
[  930.765346][T19211]  hwsim_new_radio_nl+0xdad/0x1a70
[  930.770524][T19211]  ? __nla_validate+0x50/0x50
[  930.775280][T19211]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  930.781696][T19211]  ? __nla_parse+0x40/0x50
[  930.786157][T19211]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  930.792629][T19211]  genl_family_rcv_msg_doit+0x21a/0x310
[  930.798675][T19211]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  930.804631][T19211]  ? bpf_lsm_capable+0x9/0x10
[  930.809342][T19211]  ? security_capable+0x89/0xb0
[  930.814246][T19211]  genl_rcv_msg+0x611/0x7a0
[  930.818801][T19211]  ? genl_bind+0x360/0x360
[  930.823266][T19211]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  930.829669][T19211]  netlink_rcv_skb+0x235/0x4c0
[  930.834478][T19211]  ? genl_bind+0x360/0x360
[  930.838939][T19211]  ? netlink_ack+0x1160/0x1160
[  930.843907][T19211]  ? __lock_acquire+0x7d80/0x7d80
[  930.848984][T19211]  ? down_read+0x1ac/0x2e0
[  930.853455][T19211]  genl_rcv+0x28/0x40
[  930.857488][T19211]  netlink_unicast+0x7b1/0x930
[  930.862301][T19211]  netlink_sendmsg+0x8d0/0xbf0
[  930.867098][T19211]  ? netlink_getsockopt+0x590/0x590
[  930.872343][T19211]  ? apparmor_socket_sendmsg+0x8e/0x330
[  930.878215][T19211]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  930.883564][T19211]  ? security_socket_sendmsg+0x80/0xa0
[  930.889061][T19211]  ? netlink_getsockopt+0x590/0x590
[  930.894300][T19211]  ____sys_sendmsg+0x61b/0x980
[  930.899145][T19211]  ? __asan_memset+0x22/0x40
[  930.903773][T19211]  ? __sys_sendmsg_sock+0x30/0x30
[  930.908839][T19211]  ? __import_iovec+0x5f2/0x850
[  930.913754][T19211]  ? import_iovec+0x73/0xa0
[  930.918343][T19211]  ___sys_sendmsg+0x2a6/0x360
[  930.923075][T19211]  ? __sys_sendmsg+0x2b0/0x2b0
[  930.927941][T19211]  __se_sys_sendmsg+0x1d0/0x2c0
[  930.932864][T19211]  ? perf_trace_preemptirq_template+0x269/0x330
[  930.939155][T19211]  ? __x64_sys_sendmsg+0x80/0x80
[  930.944239][T19211]  ? lockdep_hardirqs_on+0x98/0x150
[  930.949484][T19211]  do_syscall_64+0x55/0xb0
[  930.954036][T19211]  ? clear_bhb_loop+0x40/0x90
[  930.958757][T19211]  ? clear_bhb_loop+0x40/0x90
[  930.963558][T19211]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  930.969692][T19211] RIP: 0033:0x7f729879e159
[  930.974167][T19211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  930.993916][T19211] RSP: 002b:00007f72996c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  931.002379][T19211] RAX: ffffffffffffffda RBX: 00007f7298a25fa0 RCX: 00007f729879e159
[  931.010378][T19211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  931.018366][T19211] RBP: 00007f729883506b R08: 0000000000000000 R09: 0000000000000000
[  931.026374][T19211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  931.034381][T19211] R13: 00007f7298a26038 R14: 00007f7298a25fa0 R15: 00007ffc89a8fcd8
[  931.042512][T19211]  </TASK>
[  931.329042][T19220] netlink: 'syz.4.3161': attribute type 21 has an invalid length.
[  931.345377][T19220] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3161'.
[  931.349155][T19217] netlink: 'syz.2.3160': attribute type 3 has an invalid length.
[  931.377357][T19217] netlink: 'syz.2.3160': attribute type 6 has an invalid length.
[  931.388926][T19217] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3160'.
[  931.423124][T19222] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.3162'.
[  931.468170][T19222] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3162'.
[  931.533320][T19220] netlink: 'syz.4.3161': attribute type 64 has an invalid length.
[  931.824382][T19237] tun0: tun_chr_ioctl cmd 1074025675
[  931.832313][T19237] tun0: persist enabled
[  931.836889][T19237] tun0: tun_chr_ioctl cmd 1074025675
[  931.845235][T19237] tun0: persist disabled
[  931.884564][T19237] tun0: tun_chr_ioctl cmd 21731
[  932.036662][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  932.043354][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  932.660172][T19257] netlink: 'syz.3.3171': attribute type 13 has an invalid length.
[  932.720553][T19257] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3171'.
[  933.208122][T19263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3172'.
[  933.409218][T19265] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3172'.
[  934.298328][T19288] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3179'.
[  936.023219][T19313] netlink: 'syz.4.3184': attribute type 10 has an invalid length.
[  936.900214][ T5775] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  940.053349][T19343] netlink: 'syz.1.3190': attribute type 9 has an invalid length.
[  940.053367][T19338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  940.077335][T19343] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3190'.
[  940.152143][T19342] netlink: 'syz.3.3191': attribute type 2 has an invalid length.
[  940.157676][T19338] netlink: 'syz.1.3190': attribute type 9 has an invalid length.
[  940.169248][T19342] netlink: 'syz.3.3191': attribute type 8 has an invalid length.
[  940.177664][T19338] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3190'.
[  940.199799][T19342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3191'.
[  940.527410][T19361] netlink: 'syz.4.3197': attribute type 10 has an invalid length.
[  940.559861][T19361] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3197'.
[  941.946059][T19386] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3202'.
[  941.972904][T19386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  942.155536][T19390] netlink: 179116 bytes leftover after parsing attributes in process `syz.1.3203'.
[  942.526258][T19401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3208'.
[  945.098802][T19452] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3219'.
[  945.146127][T19455] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3221'.
[  945.203448][T19451] netlink: 'syz.1.3220': attribute type 16 has an invalid length.
[  945.259301][T19451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3220'.
[  945.272749][T19465] netlink: 'syz.3.3219': attribute type 3 has an invalid length.
[  945.272774][T19465] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3219'.
[  945.300458][T19451] veth1_macvtap: entered allmulticast mode
[  946.864326][T19496] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3230'.
[  947.354093][T19495] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3228'.
[  947.412638][T19495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  948.319775][T19520] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3234'.
[  948.964556][T19525] netlink: 'syz.2.3235': attribute type 1 has an invalid length.
[  949.028409][T19525] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.3235'.
[  949.532112][T19533] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3237'.
[  952.460101][T19544] syzkaller0: entered promiscuous mode
[  952.465658][T19544] syzkaller0: entered allmulticast mode
[  952.610296][T19546] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  953.049223][T19561] syzkaller0: entered promiscuous mode
[  953.085667][T19561] syzkaller0: entered allmulticast mode
[  953.133357][T19558] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3243'.
[  955.799359][T19574] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3245'.
[  955.809853][T19574] hsr_slave_0: left promiscuous mode
[  956.266456][T19606] netlink: 'syz.4.3250': attribute type 28 has an invalid length.
[  956.312785][T19606] netlink: 'syz.4.3250': attribute type 29 has an invalid length.
[  956.357241][T19606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3250'.
[  958.149041][T19637] netdevsim netdevsim1 ������: renamed from netdevsim0 (while UP)
[  958.496571][T19644] syzkaller0: entered promiscuous mode
[  958.512697][T19644] syzkaller0: entered allmulticast mode
[  958.767247][T19661] netlink: 'syz.2.3264': attribute type 3 has an invalid length.
[  958.794600][T19661] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3264'.
[  958.846790][T19661] netlink: 'syz.2.3264': attribute type 3 has an invalid length.
[  958.856746][T19661] netlink: 'syz.2.3264': attribute type 6 has an invalid length.
[  958.867466][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  958.877657][T19661] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3264'.
[  958.906764][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  958.957579][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  958.974949][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  958.987220][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  959.008247][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  959.021815][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  959.037133][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3263'.
[  962.613480][T19677] netlink: 'syz.2.3267': attribute type 19 has an invalid length.
[  963.236115][T19702] netlink: 'syz.2.3273': attribute type 9 has an invalid length.
[  963.707711][T19721] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  964.766160][T19726] __nla_validate_parse: 60 callbacks suppressed
[  964.766202][T19726] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3280'.
[  965.412464][T19751] netlink: 'syz.4.3285': attribute type 10 has an invalid length.
[  966.001759][T19768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3289'.
[  966.144775][T19768] syzkaller0: entered promiscuous mode
[  966.230874][T19768] syzkaller0: entered allmulticast mode
[  967.500070][T19792] netlink: 'syz.3.3298': attribute type 58 has an invalid length.
[  967.528665][T19792] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3298'.
[  967.912085][T19801] netlink: 'syz.4.3301': attribute type 28 has an invalid length.
[  967.949997][T19801] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3301'.
[  968.405507][T19815] netlink: 'syz.3.3306': attribute type 33 has an invalid length.
[  968.414238][T19815] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3306'.
[  968.905147][T19840] syz.1.3313[19840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  968.905257][T19840] syz.1.3313[19840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  968.937123][T19840] netlink: 'syz.1.3313': attribute type 21 has an invalid length.
[  968.958268][T19840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3313'.
[  969.425704][T19851] netlink: 'syz.4.3315': attribute type 17 has an invalid length.
[  972.323230][T19860] syzkaller0: entered promiscuous mode
[  972.329446][T19860] syzkaller0: entered allmulticast mode
[  972.340497][T19869] netlink: 'syz.2.3322': attribute type 10 has an invalid length.
[  972.451452][T19869] netlink: 'syz.2.3322': attribute type 3 has an invalid length.
[  972.459309][T19869] netlink: 'syz.2.3322': attribute type 1 has an invalid length.
[  972.519648][T19869] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.3322'.
[  976.862365][T19883] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3326'.
[  977.517200][T19916] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3336'.
[  977.702093][T19919] netlink: 'syz.3.3337': attribute type 1 has an invalid length.
[  977.710086][T19919] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3337'.
[  977.787450][T19920] netlink: 11903 bytes leftover after parsing attributes in process `syz.3.3337'.
[  977.865042][T19925] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3339'.
[  977.884179][T19925] syzkaller0: tun_chr_ioctl cmd 2147767517
[  977.893982][ T5775] Bluetooth: hci3: ISO packet for unknown connection handle 62
[  977.910390][T19925] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.3339'.
[  978.432656][T19938] netlink: 'syz.2.3343': attribute type 2 has an invalid length.
[  978.494860][T19938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3343'.
[  978.547810][T19931] netlink: 'syz.1.3342': attribute type 29 has an invalid length.
[  978.614265][T19931] netlink: 'syz.1.3342': attribute type 29 has an invalid length.
[  978.626226][T19932] netlink: 'syz.1.3342': attribute type 29 has an invalid length.
[  978.636081][T19933] netlink: 'syz.1.3342': attribute type 29 has an invalid length.
[  978.977684][T19954] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.3347'.
[  979.236160][T19955] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3348'.
[  979.333889][T19955] team0: Port device bond0 removed
[  979.428465][T19955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  980.207866][T19955] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  980.278859][T19955] bond0 (unregistering): Released all slaves
[  980.480765][T19960] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3349'.
[  980.730000][T19979] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3353'.
[  980.735339][T19976] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3352'.
[  980.871971][T19981] netlink: 'syz.2.3352': attribute type 4 has an invalid length.
[  981.725671][T20019] netlink: 'syz.4.3365': attribute type 10 has an invalid length.
[  982.693053][T20029] sctp: [Deprecated]: syz.1.3369 (pid 20029) Use of struct sctp_assoc_value in delayed_ack socket option.
[  982.693053][T20029] Use struct sctp_sack_info instead
[  983.180278][T20044] netlink: 'syz.1.3373': attribute type 10 has an invalid length.
[  983.357045][T20048] netlink: 'syz.2.3374': attribute type 1 has an invalid length.
[  983.401068][T20047] netlink: 'syz.2.3374': attribute type 1 has an invalid length.
[  983.685446][T20057] netlink: 'syz.2.3376': attribute type 8 has an invalid length.
[  983.749312][T20057] netlink: 'syz.2.3376': attribute type 3 has an invalid length.
[  983.809805][T20057] __nla_validate_parse: 6 callbacks suppressed
[  983.809824][T20057] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3376'.
[  984.574211][T20080] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3379'.
[  985.084743][T20085] netlink: 'syz.4.3381': attribute type 21 has an invalid length.
[  985.129773][T20085] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3381'.
[  985.242438][T20085] netlink: 'syz.4.3381': attribute type 10 has an invalid length.
[  985.279977][T20085] bridge0: left allmulticast mode
[  985.358280][T20091] netlink: 178420 bytes leftover after parsing attributes in process `syz.2.3383'.
[  985.804412][T20093] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3384'.
[  985.918692][T20095] netlink: 'syz.3.3385': attribute type 4 has an invalid length.
[  985.968444][T20097] netlink: 'syz.3.3385': attribute type 10 has an invalid length.
[  986.000735][T20097] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3385'.
[  986.788242][T20119] netlink: 'syz.3.3389': attribute type 3 has an invalid length.
[  986.845135][T20119] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3389'.
[  987.764804][T20137] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3393'.
[  989.040167][T20160] sit0: entered allmulticast mode
[  989.076651][T20161] sit0: entered promiscuous mode
[  989.408858][T20169] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3404'.
[  989.493168][T20171] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3406'.
[  989.823396][T20184] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3407'.
[  989.869013][T20184] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3407'.
[  989.892421][T20178] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3407'.
[  989.951806][T20187] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3407'.
[  989.995646][T20178] validate_nla: 1 callbacks suppressed
[  989.995665][T20178] netlink: 'syz.1.3407': attribute type 10 has an invalid length.
[  990.010816][T20178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3407'.
[  990.022156][T20178] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  990.029915][T20178] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  990.058595][T20178] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  990.314207][T20204] syz.4.3415[20204] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  990.314466][T20204] syz.4.3415[20204] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  990.319804][T20198] netlink: 178420 bytes leftover after parsing attributes in process `syz.1.3413'.
[  990.851729][T20204] netlink: 195724 bytes leftover after parsing attributes in process `syz.4.3415'.
[  991.269041][T20221] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.3418'.
[  991.392213][T20229] netlink: 'syz.3.3420': attribute type 10 has an invalid length.
[  991.478579][T20229] team0: Port device hsr_slave_0 added
[  991.757319][T20233] netlink: 'syz.4.3421': attribute type 10 has an invalid length.
[  991.776974][T20233] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.798107][T20233] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.860023][T20233] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.886032][T20233] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.000239][T20241] netlink: 'syz.4.3421': attribute type 10 has an invalid length.
[  993.525135][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.531873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  994.913238][T20293] netlink: 'syz.2.3438': attribute type 21 has an invalid length.
[  994.938458][T20293] __nla_validate_parse: 7 callbacks suppressed
[  994.938484][T20293] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3438'.
[  995.025032][T20295] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3438'.
[  995.240446][T20300] netlink: 'syz.2.3441': attribute type 21 has an invalid length.
[  995.300225][T20300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3441'.
[  996.551272][T20311] sit0: left promiscuous mode
[  996.826590][T20321] sit0: entered promiscuous mode
[  997.222684][T20333] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3448'.
[  997.455893][T20335] sit0: left promiscuous mode
[  997.615331][T20332] sit0: entered promiscuous mode
[  997.889806][T20347] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3451'.
[ 1001.332920][T20414] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3467'.
[ 1002.302539][T20447] netlink: 'syz.3.3479': attribute type 3 has an invalid length.
[ 1002.339804][T20447] netlink: 191840 bytes leftover after parsing attributes in process `syz.3.3479'.
[ 1004.335700][T20513] netlink: 'syz.1.3497': attribute type 41 has an invalid length.
[ 1005.418114][T20534] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3504'.
[ 1005.455065][T20534] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1007.139145][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1007.161033][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1007.178527][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1007.188193][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1007.198878][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1007.206824][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1007.567327][T20548] chnl_net:caif_netlink_parms(): no params data found
[ 1007.743007][T20548] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.761305][T20548] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.769133][T20548] bridge_slave_0: entered allmulticast mode
[ 1007.786952][T20548] bridge_slave_0: entered promiscuous mode
[ 1007.797164][T20548] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.817879][T20548] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.826004][T20548] bridge_slave_1: entered allmulticast mode
[ 1007.834135][T20548] bridge_slave_1: entered promiscuous mode
[ 1007.911547][T20548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1007.931455][T20548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1007.999403][T20548] team0: Port device team_slave_0 added
[ 1008.019270][T20548] team0: Port device team_slave_1 added
[ 1008.074372][T20548] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1008.087578][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.127025][T20548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1008.151925][T20548] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1008.161858][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.198790][T20548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1009.309967][ T5781] Bluetooth: hci2: command tx timeout
[ 1009.400969][T20548] hsr_slave_0: entered promiscuous mode
[ 1009.417561][T20548] hsr_slave_1: entered promiscuous mode
[ 1009.439854][T20548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1009.454205][T20548] Cannot create hsr debugfs directory
[ 1009.938245][T20562] sit0: left promiscuous mode
[ 1010.036595][T20563] netlink: 'syz.2.3509': attribute type 1 has an invalid length.
[ 1010.045804][T20563] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3509'.
[ 1011.400772][ T5781] Bluetooth: hci2: command tx timeout
[ 1013.480188][ T5781] Bluetooth: hci2: command tx timeout
[ 1014.667805][T20612] netlink: 'syz.1.3522': attribute type 1 has an invalid length.
[ 1014.691338][T20548] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1014.705468][T20612] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.3522'.
[ 1014.723003][T20548] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1014.872770][T20548] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1014.911224][T20548] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1015.003027][T20622] netlink: 'syz.1.3524': attribute type 2 has an invalid length.
[ 1015.027330][T20622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3524'.
[ 1015.114827][T20621] netlink: 'syz.2.3526': attribute type 39 has an invalid length.
[ 1015.124336][T20626] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3527'.
[ 1015.144837][T20626] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[ 1015.278111][T20621] hsr_slave_1 (unregistering): left promiscuous mode
[ 1015.602068][T20548] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1015.619780][ T5781] Bluetooth: hci2: command tx timeout
[ 1015.668185][T20548] 8021q: adding VLAN 0 to HW filter on device team0
[ 1015.713860][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.721133][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1015.743510][T20486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1015.750767][T20486] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1016.009450][ T6181] gretap0 (unregistering): left allmulticast mode
[ 1016.051166][ T6181] gretap0 (unregistering): left promiscuous mode
[ 1016.076030][ T6181] ��
: port 1(gretap0) entered disabled state
[ 1017.174757][T20649] netlink: 161704 bytes leftover after parsing attributes in process `syz.3.3533'.
[ 1017.191511][T20649] netlink: 'syz.3.3533': attribute type 1 has an invalid length.
[ 1017.200387][T20649] netlink: 'syz.3.3533': attribute type 2 has an invalid length.
[ 1017.208337][T20649] netlink: 'syz.3.3533': attribute type 3 has an invalid length.
[ 1017.216979][T20649] netlink: 'syz.3.3533': attribute type 4 has an invalid length.
[ 1017.238787][T20654] netlink: 'syz.2.3534': attribute type 10 has an invalid length.
[ 1017.300650][T20653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1017.313118][T20654] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.3534'.
[ 1017.334733][T20654] openvswitch: netlink: Flow key attr not present in new flow.
[ 1017.550526][T20676] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1017.592085][T20683] netlink: 'syz.2.3537': attribute type 21 has an invalid length.
[ 1017.912158][T20687] netlink: 'syz.2.3538': attribute type 27 has an invalid length.
[ 1017.944276][T20687] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3538'.
[ 1017.976786][T20548] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1019.210324][T20695] netlink: 'syz.3.3540': attribute type 10 has an invalid length.
[ 1019.503588][T20695] team0: Device vxcan1 is of different type
[ 1020.182400][T20724] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3546'.
[ 1020.355911][T20724] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.3546'.
[ 1020.645078][T20548] veth0_vlan: entered promiscuous mode
[ 1020.792019][T20548] veth1_vlan: entered promiscuous mode
[ 1022.114322][ T6181] batman_adv: : Interface deactivated: batadv_slave_0
[ 1022.129824][ T6181] batman_adv: : Removing interface: batadv_slave_0
[ 1022.141335][ T6181] batman_adv: : Interface deactivated: batadv_slave_1
[ 1022.148446][ T6181] batman_adv: : Removing interface: batadv_slave_1
[ 1022.164099][ T6181] batman_adv: : Interface deactivated: veth1_virt_wifi
[ 1022.185622][ T6181] batman_adv: : Removing interface: veth1_virt_wifi
[ 1022.358777][ T6181] batman_adv: : Interface deactivated: virt_wifi0
[ 1022.375747][ T6181] batman_adv: : Removing interface: virt_wifi0
[ 1022.405342][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.447412][ T6181] veth1_vlan: left promiscuous mode
[ 1022.457922][ T6181] veth0_vlan: left promiscuous mode
[ 1023.792124][T20752] tap0: tun_chr_ioctl cmd 2147767511
[ 1023.824814][T20763] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3557'.
[ 1023.835345][T20764] netlink: 'syz.3.3557': attribute type 10 has an invalid length.
[ 1023.844373][T20764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3557'.
[ 1023.929790][T20548] veth0_macvtap: entered promiscuous mode
[ 1023.996525][T20548] veth1_macvtap: entered promiscuous mode
[ 1024.091786][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.109638][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.125766][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.136340][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.147971][T20548] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1024.203958][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.215002][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.225651][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.242306][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.260264][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.272554][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.284175][T20548] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1024.297091][T20548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.306684][T20548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.315567][T20548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.324434][T20548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.430125][T20672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1024.438244][T20672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1024.485110][T20673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1024.494959][T20673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.941941][T20803] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3566'.
[ 1025.993829][T20803] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3566'.
[ 1026.091121][T20813] netlink: 'syz.1.3570': attribute type 13 has an invalid length.
[ 1026.099773][T20813] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3570'.
[ 1026.150299][T20813] syz_tun: refused to change device tx_queue_len
[ 1026.180042][T20813] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1029.273232][T20873] syzkaller0: entered promiscuous mode
[ 1029.299464][T20873] syzkaller0: entered allmulticast mode
[ 1029.346593][T20878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1037.974903][T20930] netlink: 'syz.3.3599': attribute type 28 has an invalid length.
[ 1037.989703][T20930] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3599'.
[ 1039.110935][T20955] netlink: 'syz.1.3603': attribute type 10 has an invalid length.
[ 1039.118852][T20955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3603'.
[ 1039.245409][T20958] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3604'.
[ 1039.269017][T20958] bridge_slave_1: default FDB implementation only supports local addresses
[ 1039.493309][T20968] netlink: set zone limit has 8 unknown bytes
[ 1039.536032][T20966] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3608'.
[ 1039.627391][T20970] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3609'.
[ 1039.851585][T20974] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3610'.
[ 1040.800639][T20988] netlink: 'syz.2.3614': attribute type 2 has an invalid length.
[ 1040.833278][T20988] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3614'.
[ 1041.920278][T21010] netlink: 'syz.1.3620': attribute type 1 has an invalid length.
[ 1041.928145][T21010] netlink: 'syz.1.3620': attribute type 3 has an invalid length.
[ 1042.001677][T21010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3620'.
[ 1042.213336][T21009] netlink: 'syz.1.3620': attribute type 10 has an invalid length.
[ 1042.268486][T21009] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3620'.
[ 1043.056854][T21055] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3623'.
[ 1043.067120][T21055] netlink: zone id is out of range
[ 1043.073128][T21055] netlink: zone id is out of range
[ 1043.096928][T21055] netlink: zone id is out of range
[ 1043.110828][T21055] netlink: zone id is out of range
[ 1043.147305][T21055] netlink: zone id is out of range
[ 1043.168366][T21055] netlink: zone id is out of range
[ 1043.194995][T21055] netlink: zone id is out of range
[ 1043.205797][T21055] netlink: zone id is out of range
[ 1043.213865][T21055] netlink: zone id is out of range
[ 1043.306645][T21051] netlink: 'syz.3.3625': attribute type 10 has an invalid length.
[ 1043.315296][T21051] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3625'.
[ 1043.342081][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1043.379654][T21057] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1043.391449][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1043.398944][T21057] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1043.448649][T21057] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[ 1043.499876][T21057] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[ 1046.485546][T21068] netlink: 'syz.1.3629': attribute type 29 has an invalid length.
[ 1046.562915][T21068] netlink: 'syz.1.3629': attribute type 29 has an invalid length.
[ 1046.614517][T21072] netlink: 'syz.4.3631': attribute type 4 has an invalid length.
[ 1046.644266][T21072] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3631'.
[ 1048.344653][T21131] netlink: 'syz.4.3644': attribute type 4 has an invalid length.
[ 1048.378138][T21131] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3644'.
[ 1048.497947][T21131] net_ratelimit: 239 callbacks suppressed
[ 1048.498007][T21131] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1048.568151][T21133] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.3646'.
[ 1048.597916][T21133] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3646'.
[ 1048.630540][T21141] netlink: 'syz.1.3646': attribute type 41 has an invalid length.
[ 1049.444544][T21141] netlink: 'syz.1.3646': attribute type 41 has an invalid length.
[ 1049.532519][T21144] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3646'.
[ 1050.386748][T21170] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3656'.
[ 1050.790794][T21190] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3660'.
[ 1053.746331][T21223] netlink: 'syz.3.3670': attribute type 2 has an invalid length.
[ 1053.763796][T21223] netlink: 'syz.3.3670': attribute type 9 has an invalid length.
[ 1053.827652][T21223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3670'.
[ 1053.978990][T21230] netlink: 'syz.4.3673': attribute type 17 has an invalid length.
[ 1054.001135][T21230] netlink: 'syz.4.3673': attribute type 16 has an invalid length.
[ 1054.009068][T21230] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3673'.
[ 1054.920461][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.927996][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.101668][T21254] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3679'.
[ 1056.141146][T21254] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.3679'.
[ 1056.375840][T21250] cgroup: fork rejected by pids controller in /syz2
[ 1058.780242][ T6181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.875168][T21307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3691'.
[ 1059.246841][T21302] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3691'.
[ 1059.262217][T21303] batadv0: entered promiscuous mode
[ 1059.283477][T21307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3691'.
[ 1059.460182][ T6181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.652135][T21311] netlink: 'syz.4.3693': attribute type 3 has an invalid length.
[ 1059.679390][T21311] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3693'.
[ 1059.766903][ T6181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.962816][ T6181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.084470][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1060.106897][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1060.115546][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1060.142778][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1060.176243][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1060.184107][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1060.915866][T21334] netlink: 'syz.4.3700': attribute type 3 has an invalid length.
[ 1060.925092][T21334] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3700'.
[ 1062.269836][ T5775] Bluetooth: hci0: command tx timeout
[ 1062.474487][T21323] chnl_net:caif_netlink_parms(): no params data found
[ 1062.635225][T21378] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3706'.
[ 1062.707947][T21378] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3706'.
[ 1062.731936][T21380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3706'.
[ 1063.091098][T21388] netlink: 'syz.4.3707': attribute type 13 has an invalid length.
[ 1063.118347][T21388] netlink: 'syz.4.3707': attribute type 58 has an invalid length.
[ 1063.128061][T21388] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3707'.
[ 1064.119414][T21323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.126944][T21323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.136273][T21323] bridge_slave_0: entered allmulticast mode
[ 1064.145789][T21323] bridge_slave_0: entered promiscuous mode
[ 1064.156176][T21323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1064.163900][T21323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.171548][T21323] bridge_slave_1: entered allmulticast mode
[ 1064.178672][T21323] bridge_slave_1: entered promiscuous mode
[ 1064.351099][ T5775] Bluetooth: hci0: command tx timeout
[ 1064.462623][T21323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1064.508735][T21323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1064.818190][T21323] team0: Port device team_slave_0 added
[ 1064.864296][T21323] team0: Port device team_slave_1 added
[ 1065.175335][T21323] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.219392][T21323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.345392][T21323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.528106][T21323] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.547607][T21323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.612865][T21323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1065.684002][T21446] veth0_vlan: entered allmulticast mode
[ 1066.430472][ T5781] Bluetooth: hci0: command tx timeout
[ 1066.539684][T21455] veth0_vlan: left promiscuous mode
[ 1066.545696][T21455] veth0_vlan: entered promiscuous mode
[ 1066.686410][T21459] netlink: 'syz.1.3724': attribute type 3 has an invalid length.
[ 1066.720456][T21459] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3724'.
[ 1067.859965][T21323] hsr_slave_0: entered promiscuous mode
[ 1067.874482][T21323] hsr_slave_1: entered promiscuous mode
[ 1067.912877][T21323] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1067.966428][T21323] Cannot create hsr debugfs directory
[ 1068.327088][ T6181] hsr_slave_0: left promiscuous mode
[ 1068.360799][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1068.368320][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1068.451327][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1068.479292][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1068.509789][ T5775] Bluetooth: hci0: command tx timeout
[ 1068.594579][ T6181] veth1_macvtap: left promiscuous mode
[ 1068.600425][ T6181] veth0_macvtap: left promiscuous mode
[ 1071.971825][ T6181] team0 (unregistering): Port device team_slave_1 removed
[ 1072.210577][ T6181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1072.345998][ T6181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1072.486077][ T6181] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1072.940442][ T6181] bond0 (unregistering): Released all slaves
[ 1073.556792][T21522] netlink: 'syz.3.3737': attribute type 21 has an invalid length.
[ 1073.599743][T21522] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3737'.
[ 1073.813234][T21522] sit0: entered promiscuous mode
[ 1073.901813][T21535] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3741'.
[ 1073.939939][T21535] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.3741'.
[ 1075.077282][T21323] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1075.099208][T21323] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1075.118263][T21323] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1075.146926][T21323] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1075.159194][T21576] netlink: 'syz.3.3746': attribute type 21 has an invalid length.
[ 1075.169935][T21576] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3746'.
[ 1075.179437][T21575] netlink: 'syz.3.3746': attribute type 21 has an invalid length.
[ 1075.187826][T21575] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3746'.
[ 1075.511133][T21323] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1075.565099][T21323] 8021q: adding VLAN 0 to HW filter on device team0
[ 1075.604450][T20675] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1075.611723][T20675] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1075.667174][T20675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.674455][T20675] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1075.983478][T21599] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3751'.
[ 1076.038578][T21600] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3750'.
[ 1076.075771][T21600] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1076.244293][T21323] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.299135][T21605] netlink: 'syz.4.3752': attribute type 33 has an invalid length.
[ 1076.326021][T21605] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3752'.
[ 1076.377986][T21323] veth0_vlan: entered promiscuous mode
[ 1076.400821][T21608] netlink: 'syz.3.3753': attribute type 3 has an invalid length.
[ 1076.415642][T21323] veth1_vlan: entered promiscuous mode
[ 1076.567644][T21323] veth0_macvtap: entered promiscuous mode
[ 1076.622691][T21323] veth1_macvtap: entered promiscuous mode
[ 1076.703159][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.734846][T21620] netlink: 'syz.1.3754': attribute type 3 has an invalid length.
[ 1076.760201][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.773698][T21620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3754'.
[ 1076.789839][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.830080][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.861369][T21323] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1076.882253][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.924043][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.944412][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.973659][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.994912][T21323] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1077.042968][T21323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.092183][T21323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.119769][T21323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.176106][T21323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.198031][T21627] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3758'.
[ 1077.443361][T21627] hsr_slave_0: left promiscuous mode
[ 1077.501993][T21627] hsr_slave_1: left promiscuous mode
[ 1078.335935][T21658] netlink: 'syz.4.3763': attribute type 2 has an invalid length.
[ 1078.427340][T21659] netlink: 'syz.4.3763': attribute type 2 has an invalid length.
[ 1078.472173][T21655] netlink: 'syz.3.3762': attribute type 13 has an invalid length.
[ 1078.831910][T20674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1078.881127][T20674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1079.078947][T20674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1079.108580][T20674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1081.484787][T21714] netlink: 'syz.4.3773': attribute type 3 has an invalid length.
[ 1081.520187][T21714] __nla_validate_parse: 1 callbacks suppressed
[ 1081.520202][T21714] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3773'.
[ 1081.587107][T21720] netlink: 'syz.2.3774': attribute type 16 has an invalid length.
[ 1081.605353][T21720] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3774'.
[ 1081.669888][T21715] netlink: 'syz.4.3773': attribute type 3 has an invalid length.
[ 1081.701425][T21715] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3773'.
[ 1081.737630][T21720] netlink: 'syz.2.3774': attribute type 3 has an invalid length.
[ 1081.756784][T21720] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3774'.
[ 1083.301777][T21748] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3776'.
[ 1084.031655][T21767] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3778'.
[ 1084.153601][T21767] bridge_slave_1: entered promiscuous mode
[ 1084.193696][T21763] netlink: 'syz.3.3778': attribute type 27 has an invalid length.
[ 1084.255941][T21763] netlink: 'syz.3.3778': attribute type 3 has an invalid length.
[ 1084.328116][T21763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3778'.
[ 1088.082037][T21824] sctp: [Deprecated]: syz.2.3788 (pid 21824) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1088.082037][T21824] Use struct sctp_sack_info instead
[ 1088.165981][T21823] netlink: 'syz.4.3789': attribute type 25 has an invalid length.
[ 1088.209351][T21823] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3789'.
[ 1088.545032][T21830] netlink: 'syz.4.3789': attribute type 3 has an invalid length.
[ 1088.592098][T21830] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3789'.
[ 1088.853321][T21826] netlink: 'syz.4.3789': attribute type 10 has an invalid length.
[ 1088.906773][T21826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1088.914730][T21826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.037152][T21826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.044442][T21826] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1089.052085][T21826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.059393][T21826] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1089.105920][T21826] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1089.138947][T21828] netlink: 'syz.4.3789': attribute type 10 has an invalid length.
[ 1089.152473][T21828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3789'.
[ 1089.163973][T21828] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[ 1089.173749][T21828] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1089.208388][T21828] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[ 1089.235451][T21840] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3791'.
[ 1090.003254][T21861] Q�6��\b��Y�4��: renamed from lo (while UP)
[ 1090.243386][T21875] netlink: 'syz.3.3798': attribute type 1 has an invalid length.
[ 1090.299830][T21875] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3798'.
[ 1093.038362][T21878] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3799'.
[ 1093.717175][T21897] netlink: 'syz.4.3804': attribute type 41 has an invalid length.
[ 1093.748045][T21897] netlink: 'syz.4.3804': attribute type 41 has an invalid length.
[ 1093.812943][T21897] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3804'.
[ 1094.795436][T21907] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3803'.
[ 1094.807329][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'.
[ 1094.956972][T21912] netlink: 'syz.3.3807': attribute type 10 has an invalid length.
[ 1094.974430][T21914] netlink: 'syz.3.3807': attribute type 10 has an invalid length.
[ 1095.448699][T21932] netlink: set zone limit has 8 unknown bytes
[ 1095.667491][T21937] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.218807][T21978] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3821'.
[ 1097.956833][T21981] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3822'.
[ 1097.968292][T21981] A link change request failed with some changes committed already. Interface Q�6��\b��Y�4�� may have been left with an inconsistent configuration, please check.
[ 1098.909245][T22010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 1098.959748][T22010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 1099.026035][T22002] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 1099.066695][T22007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 1099.426572][T22019] netlink: 'syz.1.3831': attribute type 2 has an invalid length.
[ 1099.491606][T22019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3831'.
[ 1099.937524][T22030] sock: sock_set_timeout: `syz.2.3835' (pid 22030) tries to set negative timeout
[ 1100.052163][T22033] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3836'.
[ 1100.143788][T22041] netlink: 'syz.4.3838': attribute type 13 has an invalid length.
[ 1100.152260][T22041] netlink: 24643 bytes leftover after parsing attributes in process `syz.4.3838'.
[ 1100.329010][T22047] syzkaller0: entered promiscuous mode
[ 1100.356607][T22047] syzkaller0: entered allmulticast mode
[ 1100.497876][T22052] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3842'.
[ 1103.485353][T22094] 
��0�[haX���: renamed from batadv_slave_1 (while UP)
[ 1103.677170][T22105] netlink: 'syz.1.3853': attribute type 3 has an invalid length.
[ 1103.701591][T22105] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3853'.
[ 1104.483119][T22111] netlink: 'syz.4.3858': attribute type 23 has an invalid length.
[ 1104.508825][T22111] netlink: 156008 bytes leftover after parsing attributes in process `syz.4.3858'.
[ 1105.062797][T22132] netlink: 'syz.2.3861': attribute type 1 has an invalid length.
[ 1105.077626][T22132] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3861'.
[ 1105.295513][T22141] netlink: 'syz.4.3865': attribute type 1 has an invalid length.
[ 1105.494239][T22146] netlink: 207684 bytes leftover after parsing attributes in process `syz.2.3867'.
[ 1105.518664][T22146] netlink: 'syz.2.3867': attribute type 1 has an invalid length.
[ 1105.554718][T22146] netlink: 'syz.2.3867': attribute type 2 has an invalid length.
[ 1105.572730][T22148] netlink: 'syz.1.3866': attribute type 11 has an invalid length.
[ 1105.624961][T22148] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.3866'.
[ 1105.793149][T22154] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3868'.
[ 1105.887379][T22158] netlink: 'syz.3.3869': attribute type 3 has an invalid length.
[ 1105.901997][T22158] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3869'.
[ 1105.936897][T22163] netlink: 'syz.2.3868': attribute type 2 has an invalid length.
[ 1105.949261][T22158] netlink: 'syz.3.3869': attribute type 3 has an invalid length.
[ 1105.998359][T22158] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3869'.
[ 1106.014354][T22163] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3868'.
[ 1106.122711][T22173] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3872'.
[ 1106.848711][T22185] netlink: 'syz.1.3877': attribute type 10 has an invalid length.
[ 1106.857864][T22185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3877'.
[ 1106.871415][T22185] team0: entered promiscuous mode
[ 1106.876573][T22185] team_slave_0: entered promiscuous mode
[ 1106.887443][T22185] team_slave_1: entered promiscuous mode
[ 1106.896734][T22185] team0: entered allmulticast mode
[ 1106.903693][T22185] team_slave_0: entered allmulticast mode
[ 1106.926418][T22185] team_slave_1: entered allmulticast mode
[ 1106.937825][T22185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1107.883716][T22201] netlink: 'syz.4.3882': attribute type 2 has an invalid length.
[ 1110.252098][T22258] __nla_validate_parse: 5 callbacks suppressed
[ 1110.252120][T22258] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3901'.
[ 1110.270534][T22258] netlink: zone id is out of range
[ 1110.276081][T22258] netlink: zone id is out of range
[ 1110.282404][T22258] netlink: zone id is out of range
[ 1110.305808][T22258] netlink: zone id is out of range
[ 1110.312206][T22258] netlink: zone id is out of range
[ 1110.317755][T22258] netlink: zone id is out of range
[ 1110.324130][T22258] netlink: zone id is out of range
[ 1110.336492][T22258] netlink: zone id is out of range
[ 1110.350420][T22258] netlink: zone id is out of range
[ 1110.868788][T22283] syz.4.3907: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[ 1110.967491][T22283] CPU: 0 PID: 22283 Comm: syz.4.3907 Not tainted syzkaller #0
[ 1110.975037][T22283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1110.985124][T22283] Call Trace:
[ 1110.988523][T22283]  <TASK>
[ 1110.991487][T22283]  dump_stack_lvl+0x18c/0x250
[ 1110.996214][T22283]  ? show_regs_print_info+0x20/0x20
[ 1111.001457][T22283]  ? load_image+0x420/0x420
[ 1111.006101][T22283]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1111.012560][T22283]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1111.019099][T22283]  warn_alloc+0x246/0x340
[ 1111.023567][T22283]  ? stack_trace_save+0xaa/0x100
[ 1111.028554][T22283]  ? zone_watermark_ok_safe+0x230/0x230
[ 1111.034144][T22283]  ? kasan_set_track+0x5f/0x70
[ 1111.038945][T22283]  ? kasan_set_track+0x4e/0x70
[ 1111.043830][T22283]  ? __kasan_kmalloc+0x8f/0xa0
[ 1111.048635][T22283]  ? xsk_init_queue+0xad/0x100
[ 1111.053468][T22283]  ? xsk_setsockopt+0x4c9/0x750
[ 1111.058437][T22283]  ? do_sock_setsockopt+0x175/0x1a0
[ 1111.063678][T22283]  ? __x64_sys_setsockopt+0x182/0x200
[ 1111.069181][T22283]  __vmalloc_node_range+0x129/0x1320
[ 1111.074535][T22283]  ? free_vm_area+0x50/0x50
[ 1111.079089][T22283]  vmalloc_user+0x74/0x80
[ 1111.083466][T22283]  ? xskq_create+0xbf/0x170
[ 1111.088006][T22283]  xskq_create+0xbf/0x170
[ 1111.092375][T22283]  xsk_init_queue+0xad/0x100
[ 1111.097005][T22283]  xsk_setsockopt+0x4c9/0x750
[ 1111.101717][T22283]  ? xsk_poll+0x670/0x670
[ 1111.106088][T22283]  ? __fget_files+0x28/0x460
[ 1111.110749][T22283]  ? aa_sock_opt_perm+0x74/0x100
[ 1111.115727][T22283]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1111.121311][T22283]  ? security_socket_setsockopt+0x7e/0xa0
[ 1111.127061][T22283]  ? xsk_poll+0x670/0x670
[ 1111.131445][T22283]  do_sock_setsockopt+0x175/0x1a0
[ 1111.136503][T22283]  ? __fdget+0x180/0x210
[ 1111.140793][T22283]  __x64_sys_setsockopt+0x182/0x200
[ 1111.146031][T22283]  do_syscall_64+0x55/0xb0
[ 1111.150479][T22283]  ? clear_bhb_loop+0x40/0x90
[ 1111.155202][T22283]  ? clear_bhb_loop+0x40/0x90
[ 1111.159920][T22283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1111.165860][T22283] RIP: 0033:0x7f2a2cf9e159
[ 1111.170324][T22283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1111.190330][T22283] RSP: 002b:00007f2a2dd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1111.198805][T22283] RAX: ffffffffffffffda RBX: 00007f2a2d225fa0 RCX: 00007f2a2cf9e159
[ 1111.206911][T22283] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[ 1111.214939][T22283] RBP: 00007f2a2d03506b R08: 0000000000000004 R09: 0000000000000000
[ 1111.223052][T22283] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1111.231074][T22283] R13: 00007f2a2d226038 R14: 00007f2a2d225fa0 R15: 00007ffd682bfe48
[ 1111.239106][T22283]  </TASK>
[ 1111.292097][T22283] Mem-Info:
[ 1111.295440][T22283] active_anon:14475 inactive_anon:0 isolated_anon:0
[ 1111.295440][T22283]  active_file:18855 inactive_file:40345 isolated_file:0
[ 1111.295440][T22283]  unevictable:768 dirty:66 writeback:25
[ 1111.295440][T22283]  slab_reclaimable:11121 slab_unreclaimable:97279
[ 1111.295440][T22283]  mapped:24499 shmem:1374 pagetables:606
[ 1111.295440][T22283]  sec_pagetables:0 bounce:0
[ 1111.295440][T22283]  kernel_misc_reclaimable:0
[ 1111.295440][T22283]  free:1328706 free_pcp:10608 free_cma:0
[ 1111.383375][T22283] Node 0 active_anon:57900kB inactive_anon:0kB active_file:75420kB inactive_file:161172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97996kB dirty:264kB writeback:100kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12480kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no
[ 1111.465086][T22283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1111.522934][T22283] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1111.573007][T22289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3908'.
[ 1111.590060][T22283] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1111.606926][T22283] Node 0 DMA32 free:1408404kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:57752kB inactive_anon:0kB active_file:75420kB inactive_file:160336kB unevictable:1536kB writepending:240kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:17424kB local_pcp:11536kB free_cma:0kB
[ 1111.659352][T22283] lowmem_reserve[]: 0 0 0 0 0
[ 1111.664645][T22283] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1111.698788][T22283] lowmem_reserve[]: 0 0 0 0 0
[ 1111.704111][T22283] Node 1 Normal free:3891060kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23324kB local_pcp:11416kB free_cma:0kB
[ 1111.737506][T22283] lowmem_reserve[]: 0 0 0 0 0
[ 1111.743187][T22283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1111.760989][T22283] Node 0 DMA32: 1531*4kB (UME) 950*8kB (UME) 1100*16kB (UME) 1429*32kB (UME) 1557*64kB (UME) 1039*128kB (UME) 325*256kB (UME) 188*512kB (UM) 219*1024kB (UM) 11*2048kB (ME) 164*4096kB (UM) = 1407676kB
[ 1111.789349][T22283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1111.804136][T22283] Node 1 Normal: 221*4kB (UME) 64*8kB (UME) 50*16kB (UME) 41*32kB (UME) 13*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3891060kB
[ 1111.822640][T22283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1111.832863][T22283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1111.843260][T22283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1111.862196][T22283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1111.875972][T22283] 60573 total pagecache pages
[ 1111.881171][T22283] 0 pages in swap cache
[ 1111.896154][T22283] Free swap  = 124996kB
[ 1111.901130][T22283] Total swap = 124996kB
[ 1111.905552][T22283] 2097051 pages RAM
[ 1111.909855][T22283] 0 pages HighMem/MovableOnly
[ 1111.915255][T22283] 416965 pages reserved
[ 1111.919642][T22283] 0 pages cma reserved
[ 1112.432491][T22295] syzkaller0: entered promiscuous mode
[ 1112.438165][T22295] syzkaller0: entered allmulticast mode
[ 1112.470160][T22301] validate_nla: 1 callbacks suppressed
[ 1112.470182][T22301] netlink: 'syz.4.3911': attribute type 21 has an invalid length.
[ 1112.510150][T22301] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3911'.
[ 1113.002984][T22307] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3913'.
[ 1113.756705][T22317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1113.796000][T22317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1113.847122][T22317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1113.872466][T22317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1113.892933][T22317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1113.934808][T22317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1116.295325][T22307] __nla_validate_parse: 27 callbacks suppressed
[ 1116.295343][T22307] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3913'.
[ 1116.355142][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.361573][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.400015][T22316] sit0: entered allmulticast mode
[ 1116.430063][T22324] sit0: entered promiscuous mode
[ 1116.645412][T22327] macsec0: entered allmulticast mode
[ 1117.450639][T22356] syz.2.3924[22356] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1117.946141][T22366] netlink: 'syz.2.3927': attribute type 8 has an invalid length.
[ 1117.976756][T22366] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3927'.
[ 1121.060933][T22360] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1122.001811][T22402] netlink: 'syz.3.3938': attribute type 21 has an invalid length.
[ 1122.096669][T22409] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1122.149111][T22409] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1122.242004][T22409] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1122.274686][T22409] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1122.631893][T22409] bond0: (slave batadv0): Releasing backup interface
[ 1122.786146][T22416] netlink: 'syz.2.3941': attribute type 21 has an invalid length.
[ 1123.214839][T22421] netlink: 'syz.4.3943': attribute type 10 has an invalid length.
[ 1123.247874][T22421] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3943'.
[ 1123.344216][T22429] IPv6: Can't replace route, no match found
[ 1123.918212][T22432] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3948'.
[ 1124.050901][T22434] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3945'.
[ 1124.074176][T22434] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3945'.
[ 1124.121434][T22434] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3945'.
[ 1124.176219][T22427] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3945'.
[ 1124.681210][T22456] net_ratelimit: 356 callbacks suppressed
[ 1124.681230][T22456] netlink: set zone limit has 8 unknown bytes
[ 1124.813806][T22455] netlink: 'syz.3.3954': attribute type 10 has an invalid length.
[ 1124.829613][T22455] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3954'.
[ 1124.838686][T22455] batadv_slave_1: entered promiscuous mode
[ 1124.850152][T22458] netlink: 'syz.1.3955': attribute type 46 has an invalid length.
[ 1124.868511][T22458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3955'.
[ 1125.145037][T22462] syzkaller0: entered promiscuous mode
[ 1125.156151][T22462] syzkaller0: entered allmulticast mode
[ 1125.557939][T22472] netlink: 'syz.2.3959': attribute type 29 has an invalid length.
[ 1128.677538][T22472] netlink: 'syz.2.3959': attribute type 29 has an invalid length.
[ 1129.032542][T22499] netlink: 'syz.3.3964': attribute type 5 has an invalid length.
[ 1129.756749][T22504] netlink: 'syz.4.3966': attribute type 153 has an invalid length.
[ 1129.768167][T22504] netlink: 'syz.4.3966': attribute type 1 has an invalid length.
[ 1129.778974][T22504] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.3966'.
[ 1130.576138][T22535] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1130.988080][T22548] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3975'.
[ 1131.734831][T22570] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1131.755729][T22571] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3979'.
[ 1131.766960][T22571] tc_dump_action: action bad kind
[ 1131.790469][T22571] netlink: 'syz.1.3979': attribute type 2 has an invalid length.
[ 1131.843008][T22571] netlink: 'syz.1.3979': attribute type 8 has an invalid length.
[ 1131.873389][T22571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3979'.
[ 1131.931359][T22574] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3979'.
[ 1131.954657][T22574] tc_dump_action: action bad kind
[ 1133.028774][T22587] netlink: 'syz.2.3987': attribute type 10 has an invalid length.
[ 1133.048673][T22587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3987'.
[ 1133.088285][T22587] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1133.138496][T22587] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1133.260833][T22587] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1133.364611][T22572] Bluetooth: hci2: ACL packet for unknown connection handle 2816
[ 1133.795896][T22572] Bluetooth: hci2: command 0x0406 tx timeout
[ 1133.844314][T22611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3996'.
[ 1134.176700][T22630] netlink: 'syz.2.4000': attribute type 2 has an invalid length.
[ 1135.257808][T22644] netlink: 'syz.3.4001': attribute type 10 has an invalid length.
[ 1135.268595][T22644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4001'.
[ 1135.286834][T22644] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1136.487649][T22660] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4009'.
[ 1136.503864][T22661] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4009'.
[ 1136.955450][T22668] netlink: 'syz.2.4010': attribute type 21 has an invalid length.
[ 1138.310084][T22687] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4016'.
[ 1138.677974][T22701] netlink: 'syz.4.4021': attribute type 29 has an invalid length.
[ 1138.716198][T22701] netlink: 'syz.4.4021': attribute type 29 has an invalid length.
[ 1138.939205][T22707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4024'.
[ 1139.672656][T22723] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4029'.
[ 1140.318462][T22731] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.4032'.
[ 1140.625217][T22739] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4035'.
[ 1140.734970][T22744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4034'.
[ 1140.798742][T22744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4034'.
[ 1140.872721][T22737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4034'.
[ 1140.996429][T22752] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4037'.
[ 1141.015979][T22752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1141.882002][T22769] tap0: tun_chr_ioctl cmd 1074025675
[ 1141.887570][T22769] tap0: persist enabled
[ 1141.896541][T22769] tap0: tun_chr_ioctl cmd 1074025675
[ 1141.902567][T22769] tap0: persist enabled
[ 1142.744798][T22787] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4049'.
[ 1144.228080][T22816] netlink: 'syz.2.4054': attribute type 4 has an invalid length.
[ 1144.287911][T22816] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4054'.
[ 1144.841134][T22824] netlink: 'syz.4.4056': attribute type 10 has an invalid length.
[ 1145.003281][T22824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4056'.
[ 1145.292272][T22824] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1145.337038][T22824] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1145.430008][T22824] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1145.479956][T22825] netlink: 'syz.4.4056': attribute type 2 has an invalid length.
[ 1145.488271][T22825] netlink: 'syz.4.4056': attribute type 8 has an invalid length.
[ 1145.529523][T22825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4056'.
[ 1145.919805][T22852] netlink: 'syz.2.4058': attribute type 10 has an invalid length.
[ 1146.096725][T22852] geneve0: entered promiscuous mode
[ 1146.204949][T22852] netlink: 'syz.2.4058': attribute type 10 has an invalid length.
[ 1146.444150][T22852] netlink: 'syz.2.4058': attribute type 10 has an invalid length.
[ 1146.812942][T22867] netlink: 'syz.3.4064': attribute type 5 has an invalid length.
[ 1146.821135][T22868] netlink: 'syz.1.4063': attribute type 10 has an invalid length.
[ 1146.857688][T22871] netlink: 'syz.1.4063': attribute type 21 has an invalid length.
[ 1148.095687][T22919] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4076'.
[ 1148.537609][T22939] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4081'.
[ 1148.593582][T22939] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[ 1148.629986][T22939] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4081'.
[ 1148.668357][T22951] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.4085'.
[ 1148.891778][T22956] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.4087'.
[ 1148.911144][T22955] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.4087'.
[ 1151.144190][T22995] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4099'.
[ 1154.002199][T23061] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4121'.
[ 1154.583268][T23079] validate_nla: 8 callbacks suppressed
[ 1154.583288][T23079] netlink: 'syz.3.4127': attribute type 21 has an invalid length.
[ 1154.659613][T23079] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4127'.
[ 1155.671767][T23098] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4130'.
[ 1155.859406][T23104] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4132'.
[ 1155.976463][T23110] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4131'.
[ 1161.664476][T23117] netlink: 'syz.4.4136': attribute type 39 has an invalid length.
[ 1162.161457][T23140] netlink: 'syz.4.4143': attribute type 29 has an invalid length.
[ 1162.185329][T23145] netlink: 'syz.1.4142': attribute type 39 has an invalid length.
[ 1162.332519][T23140] netlink: 'syz.4.4143': attribute type 29 has an invalid length.
[ 1162.576200][T23149] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1162.621042][T23151] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4147'.
[ 1162.635040][T23149] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1162.767585][T23149] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1163.150385][T23156] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4148'.
[ 1163.364513][T23167] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4151'.
[ 1164.505524][T23184] netlink: 'syz.2.4154': attribute type 29 has an invalid length.
[ 1164.793392][T23184] netlink: 'syz.2.4154': attribute type 29 has an invalid length.
[ 1165.058811][T23201] netlink: 'syz.4.4157': attribute type 29 has an invalid length.
[ 1165.741802][T23220] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4160'.
[ 1167.640641][T23201] netlink: 'syz.4.4157': attribute type 29 has an invalid length.
[ 1167.963922][T23223] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4161'.
[ 1168.012631][T23223] netlink: 'syz.4.4161': attribute type 1 has an invalid length.
[ 1168.040090][T23223] netlink: 16520 bytes leftover after parsing attributes in process `syz.4.4161'.
[ 1169.660766][T23268] netlink: 'syz.2.4174': attribute type 1 has an invalid length.
[ 1170.091668][T23279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.100790][T23279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.115198][T23279] bridge0: entered allmulticast mode
[ 1170.176256][T23282] bridge_slave_1: left allmulticast mode
[ 1170.186244][T23282] bridge_slave_1: left promiscuous mode
[ 1170.223507][T23282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.238449][T23282] bridge_slave_0: left allmulticast mode
[ 1170.244775][T23282] bridge_slave_0: left promiscuous mode
[ 1170.289327][T23282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.507306][T23282] bond0: (slave bridge0): Releasing backup interface
[ 1170.895081][T23287] netlink: 'syz.2.4177': attribute type 17 has an invalid length.
[ 1170.905047][T23287] netlink: 'syz.2.4177': attribute type 16 has an invalid length.
[ 1170.934603][T23287] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4177'.
[ 1170.966345][T23292] IPv6: Can't replace route, no match found
[ 1170.976147][T23300] netlink: 'syz.2.4177': attribute type 4 has an invalid length.
[ 1171.204833][T23308] team0: Port device C removed
[ 1171.535250][T23320] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4185'.
[ 1171.597965][T23322] netlink: 'syz.1.4186': attribute type 1 has an invalid length.
[ 1172.101022][T23326] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4188'.
[ 1175.520439][T23362] netlink: 'syz.3.4198': attribute type 10 has an invalid length.
[ 1175.534190][T23362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4198'.
[ 1175.544025][T23364] netlink: 'syz.3.4198': attribute type 10 has an invalid length.
[ 1175.553965][T23364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4198'.
[ 1175.860113][T23375] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.4201'.
[ 1176.076625][T23377] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.4202'.
[ 1176.109376][T23377] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4202'.
[ 1176.139255][T23377] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4202'.
[ 1176.944255][T23389] netlink: 'syz.4.4207': attribute type 3 has an invalid length.
[ 1176.979250][T23389] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.4207'.
[ 1177.830300][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.836696][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.545042][T23446] netlink: 'syz.2.4223': attribute type 21 has an invalid length.
[ 1178.565043][T23446] netlink: 'syz.2.4223': attribute type 1 has an invalid length.
[ 1178.756823][T23457] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4225'.
[ 1178.854078][T23465] netlink: 'syz.2.4227': attribute type 40 has an invalid length.
[ 1181.644106][T23493] netlink: 'syz.1.4234': attribute type 10 has an invalid length.
[ 1181.747884][T23493] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4234'.
[ 1182.169731][T23501] netlink: 'syz.2.4237': attribute type 2 has an invalid length.
[ 1182.205095][T23501] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4237'.
[ 1184.276965][T23530] netlink: 'syz.1.4245': attribute type 1 has an invalid length.
[ 1184.333846][T23530] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4245'.
[ 1184.476041][T23537] netlink: 'syz.1.4245': attribute type 1 has an invalid length.
[ 1184.485918][T23537] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4245'.
[ 1184.513474][T23533] netlink: 'syz.3.4248': attribute type 21 has an invalid length.
[ 1184.542242][T23533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4248'.
[ 1184.836219][T23538] syzkaller0: entered promiscuous mode
[ 1184.842481][T23538] syzkaller0: entered allmulticast mode
[ 1185.026510][T22572] Bluetooth: hci0: command 0x0406 tx timeout
[ 1185.745074][T23558] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4252'.
[ 1189.026590][T23565] netlink: 'syz.2.4254': attribute type 22 has an invalid length.
[ 1189.451507][T23587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4259'.
[ 1189.806541][T23600] ==================================================================
[ 1189.814690][T23600] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[ 1189.822547][T23600] Write of size 72 at addr ffff8880524cc990 by task syz.4.4262/23600
[ 1189.830637][T23600] 
[ 1189.832978][T23600] CPU: 1 PID: 23600 Comm: syz.4.4262 Not tainted syzkaller #0
[ 1189.840469][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1189.850563][T23600] Call Trace:
[ 1189.853881][T23600]  <TASK>
[ 1189.857068][T23600]  dump_stack_lvl+0x18c/0x250
[ 1189.861901][T23600]  ? read_lock_is_recursive+0x20/0x20
[ 1189.867355][T23600]  ? show_regs_print_info+0x20/0x20
[ 1189.872611][T23600]  ? load_image+0x420/0x420
[ 1189.877155][T23600]  ? _raw_spin_lock_irqsave+0xc0/0x100
[ 1189.882655][T23600]  ? __virt_addr_valid+0x10c/0x380
[ 1189.888024][T23600]  ? __virt_addr_valid+0x10c/0x380
[ 1189.893171][T23600]  ? __virt_addr_valid+0x10c/0x380
[ 1189.898315][T23600]  print_report+0xa8/0x210
[ 1189.902785][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1189.907934][T23600]  kasan_report+0x117/0x150
[ 1189.912510][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1189.917659][T23600]  kasan_check_range+0x241/0x290
[ 1189.922671][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1189.927820][T23600]  __asan_memcpy+0x40/0x70
[ 1189.932278][T23600]  __bpf_get_stackid+0x6c7/0x900
[ 1189.937259][T23600]  bpf_get_stackid_pe+0x343/0x410
[ 1189.942407][T23600]  bpf_prog_6611c23d801ea08d+0x29/0x3e
[ 1189.947878][T23600]  bpf_overflow_handler+0x1fc/0x510
[ 1189.953103][T23600]  ? perf_event_output_forward+0x3e0/0x3e0
[ 1189.958921][T23600]  ? bpf_overflow_handler+0xde/0x510
[ 1189.964219][T23600]  ? tp_perf_event_destroy+0x20/0x20
[ 1189.969530][T23600]  ? stack_trace_save+0xaa/0x100
[ 1189.974501][T23600]  ? verify_lock_unused+0x140/0x140
[ 1189.979714][T23600]  ? __perf_event_account_interrupt+0x187/0x280
[ 1189.986487][T23600]  __perf_event_overflow+0x461/0x660
[ 1189.991791][T23600]  perf_swevent_overflow+0x274/0x340
[ 1189.997182][T23600]  ? perf_event_switch_output+0x790/0x790
[ 1190.002952][T23600]  ? rcu_is_watching+0x15/0xb0
[ 1190.007734][T23600]  perf_swevent_event+0x45c/0x570
[ 1190.012789][T23600]  ? perf_tp_event+0x1550/0x1550
[ 1190.017772][T23600]  ___perf_sw_event+0x4ab/0x730
[ 1190.022677][T23600]  ? ___perf_sw_event+0x19e/0x730
[ 1190.027730][T23600]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1190.034182][T23600]  ? __lock_acquire+0x1336/0x7d80
[ 1190.039263][T23600]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1190.045256][T23600]  ? verify_lock_unused+0x140/0x140
[ 1190.050477][T23600]  ? lock_chain_count+0x20/0x20
[ 1190.055347][T23600]  __perf_sw_event+0x139/0x270
[ 1190.060124][T23600]  do_user_addr_fault+0x1242/0x12d0
[ 1190.065338][T23600]  ? rcu_is_watching+0x15/0xb0
[ 1190.070210][T23600]  exc_page_fault+0x64/0x100
[ 1190.074809][T23600]  asm_exc_page_fault+0x26/0x30
[ 1190.079767][T23600] RIP: 0010:rep_movs_alternative+0x15/0x90
[ 1190.085588][T23600] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[ 1190.105207][T23600] RSP: 0018:ffffc9000b56fc50 EFLAGS: 00050202
[ 1190.111459][T23600] RAX: ffffffff84342cea RBX: 0000000000000004 RCX: 0000000000000004
[ 1190.119527][T23600] RDX: 0000000000000000 RSI: ffffc9000b56fcc0 RDI: 0000200000000404
[ 1190.127593][T23600] RBP: ffffc9000b56fd38 R08: 0000000000000003 R09: 0000000000000004
[ 1190.135578][T23600] R10: dffffc0000000000 R11: fffff520016adf98 R12: 0000200000000408
[ 1190.143557][T23600] R13: 0000000000000000 R14: 0000200000000404 R15: ffffc9000b56fcc0
[ 1190.152267][T23600]  ? check_zeroed_user+0x1a/0x160
[ 1190.157500][T23600]  _copy_to_user+0x85/0xa0
[ 1190.161929][T23600]  bpf_prog_test_run_syscall+0x33f/0x4b0
[ 1190.167827][T23600]  ? sock_gen_cookie+0x60/0x60
[ 1190.172608][T23600]  ? sock_gen_cookie+0x60/0x60
[ 1190.177390][T23600]  bpf_prog_test_run+0x31f/0x390
[ 1190.182337][T23600]  __sys_bpf+0x49d/0x890
[ 1190.186587][T23600]  ? vma_end_read+0x18/0x170
[ 1190.191186][T23600]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1190.196590][T23600]  ? lock_chain_count+0x20/0x20
[ 1190.201450][T23600]  ? lock_chain_count+0x20/0x20
[ 1190.206310][T23600]  __x64_sys_bpf+0x7c/0x90
[ 1190.210743][T23600]  do_syscall_64+0x55/0xb0
[ 1190.215172][T23600]  ? clear_bhb_loop+0x40/0x90
[ 1190.219873][T23600]  ? clear_bhb_loop+0x40/0x90
[ 1190.224576][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.230483][T23600] RIP: 0033:0x7f2a2cf9e159
[ 1190.234934][T23600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1190.255074][T23600] RSP: 002b:00007f2a2b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1190.263518][T23600] RAX: ffffffffffffffda RBX: 00007f2a2d226090 RCX: 00007f2a2cf9e159
[ 1190.271499][T23600] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000a
[ 1190.279564][T23600] RBP: 00007f2a2d03506b R08: 0000000000000000 R09: 0000000000000000
[ 1190.287566][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1190.295553][T23600] R13: 00007f2a2d226128 R14: 00007f2a2d226090 R15: 00007ffd682bfe48
[ 1190.303631][T23600]  </TASK>
[ 1190.306666][T23600] 
[ 1190.309020][T23600] Allocated by task 23599:
[ 1190.313441][T23600]  kasan_set_track+0x4e/0x70
[ 1190.318132][T23600]  __kasan_kmalloc+0x8f/0xa0
[ 1190.322754][T23600]  __kmalloc_node+0xb6/0x240
[ 1190.327568][T23600]  bpf_map_area_alloc+0x5e/0x110
[ 1190.332546][T23600]  prealloc_elems_and_freelist+0x86/0x1c0
[ 1190.338291][T23600]  stack_map_alloc+0x32b/0x4b0
[ 1190.343065][T23600]  map_create+0x877/0x12f0
[ 1190.347504][T23600]  __sys_bpf+0x651/0x890
[ 1190.351785][T23600]  __x64_sys_bpf+0x7c/0x90
[ 1190.356207][T23600]  do_syscall_64+0x55/0xb0
[ 1190.360729][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.366641][T23600] 
[ 1190.369028][T23600] Last potentially related work creation:
[ 1190.374767][T23600]  kasan_save_stack+0x3e/0x60
[ 1190.379462][T23600]  __kasan_record_aux_stack+0xaf/0xc0
[ 1190.384860][T23600]  kvfree_call_rcu+0xee/0x780
[ 1190.389551][T23600]  trie_update_elem+0x953/0xd60
[ 1190.394418][T23600]  bpf_map_update_value+0x64b/0x710
[ 1190.399717][T23600]  generic_map_update_batch+0x5de/0x800
[ 1190.405269][T23600]  bpf_map_do_batch+0x3f2/0x600
[ 1190.410127][T23600]  __sys_bpf+0x381/0x890
[ 1190.414990][T23600]  __x64_sys_bpf+0x7c/0x90
[ 1190.419416][T23600]  do_syscall_64+0x55/0xb0
[ 1190.423853][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.429774][T23600] 
[ 1190.432103][T23600] Second to last potentially related work creation:
[ 1190.438776][T23600]  kasan_save_stack+0x3e/0x60
[ 1190.443460][T23600]  __kasan_record_aux_stack+0xaf/0xc0
[ 1190.448853][T23600]  call_rcu+0x153/0x900
[ 1190.453023][T23600]  __nf_register_net_hook+0x787/0x910
[ 1190.458483][T23600]  nf_register_net_hook+0xb2/0x190
[ 1190.463606][T23600]  nf_register_net_hooks+0x44/0x1b0
[ 1190.468821][T23600]  ipvlan_l3s_register+0x134/0x1d0
[ 1190.474078][T23600]  ipvlan_set_port_mode+0x1a1/0x3f0
[ 1190.479288][T23600]  ipvlan_link_new+0x736/0xae0
[ 1190.484061][T23600]  rtnl_newlink+0x15a0/0x2170
[ 1190.488802][T23600]  rtnetlink_rcv_msg+0x843/0xf90
[ 1190.493795][T23600]  netlink_rcv_skb+0x235/0x4c0
[ 1190.498582][T23600]  netlink_unicast+0x7b1/0x930
[ 1190.503353][T23600]  netlink_sendmsg+0x8d0/0xbf0
[ 1190.508126][T23600]  __sys_sendto+0x4a9/0x6b0
[ 1190.512659][T23600]  __x64_sys_sendto+0xde/0xf0
[ 1190.517347][T23600]  do_syscall_64+0x55/0xb0
[ 1190.521792][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.527797][T23600] 
[ 1190.530133][T23600] The buggy address belongs to the object at ffff8880524cc980
[ 1190.530133][T23600]  which belongs to the cache kmalloc-cg-64 of size 64
[ 1190.544282][T23600] The buggy address is located 16 bytes inside of
[ 1190.544282][T23600]  allocated 40-byte region [ffff8880524cc980, ffff8880524cc9a8)
[ 1190.558354][T23600] 
[ 1190.560776][T23600] The buggy address belongs to the physical page:
[ 1190.567188][T23600] page:ffffea0001493300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x524cc
[ 1190.577345][T23600] memcg:ffff888078abb401
[ 1190.581589][T23600] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1190.589495][T23600] page_type: 0xffffffff()
[ 1190.593845][T23600] raw: 00fff00000000800 ffff888017c4da00 ffffea0001839140 dead000000000003
[ 1190.602451][T23600] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888078abb401
[ 1190.611060][T23600] page dumped because: kasan: bad access detected
[ 1190.617580][T23600] page_owner tracks the page as allocated
[ 1190.623313][T23600] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5782, tgid 5782 (syz-executor), ts 291325683367, free_ts 291325110023
[ 1190.641828][T23600]  post_alloc_hook+0x1c1/0x200
[ 1190.646636][T23600]  get_page_from_freelist+0x2181/0x22a0
[ 1190.652361][T23600]  __alloc_pages+0x1f0/0x460
[ 1190.656976][T23600]  alloc_slab_page+0x5d/0x180
[ 1190.661661][T23600]  new_slab+0x87/0x2d0
[ 1190.665831][T23600]  ___slab_alloc+0xc5c/0x12f0
[ 1190.670528][T23600]  __kmem_cache_alloc_node+0x11f/0x250
[ 1190.676020][T23600]  kmalloc_trace+0x2a/0xe0
[ 1190.680456][T23600]  alloc_fdtable+0xca/0x2c0
[ 1190.684976][T23600]  dup_fd+0x747/0xa20
[ 1190.688966][T23600]  copy_files+0xaf/0x110
[ 1190.693241][T23600]  copy_process+0x157d/0x3da0
[ 1190.697925][T23600]  kernel_clone+0x24b/0x8a0
[ 1190.702443][T23600]  __x64_sys_clone+0x1b7/0x230
[ 1190.707211][T23600]  do_syscall_64+0x55/0xb0
[ 1190.711636][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.717634][T23600] page last free stack trace:
[ 1190.722393][T23600]  free_unref_page_prepare+0x7d7/0x8f0
[ 1190.727858][T23600]  free_unref_page+0x32/0x2e0
[ 1190.732556][T23600]  vfree+0x1a7/0x340
[ 1190.736588][T23600]  __do_replace+0x878/0x9b0
[ 1190.741206][T23600]  do_ip6t_set_ctl+0xb41/0xe10
[ 1190.746090][T23600]  nf_setsockopt+0x263/0x280
[ 1190.750695][T23600]  do_sock_setsockopt+0x175/0x1a0
[ 1190.755824][T23600]  __x64_sys_setsockopt+0x182/0x200
[ 1190.761044][T23600]  do_syscall_64+0x55/0xb0
[ 1190.765470][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.771373][T23600] 
[ 1190.773698][T23600] Memory state around the buggy address:
[ 1190.779328][T23600]  ffff8880524cc880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1190.787393][T23600]  ffff8880524cc900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 1190.795502][T23600] >ffff8880524cc980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 1190.803582][T23600]                                   ^
[ 1190.808965][T23600]  ffff8880524cca00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 1190.817050][T23600]  ffff8880524cca80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 1190.825112][T23600] ==================================================================
[ 1190.833181][T23600] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1190.840374][T23600] CPU: 1 PID: 23600 Comm: syz.4.4262 Not tainted syzkaller #0
[ 1190.847836][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1190.857901][T23600] Call Trace:
[ 1190.861275][T23600]  <TASK>
[ 1190.864210][T23600]  dump_stack_lvl+0x18c/0x250
[ 1190.868916][T23600]  ? show_regs_print_info+0x20/0x20
[ 1190.874123][T23600]  ? load_image+0x420/0x420
[ 1190.878669][T23600]  panic+0x2ca/0x720
[ 1190.882574][T23600]  ? __lock_acquire+0x7d80/0x7d80
[ 1190.887616][T23600]  ? bpf_jit_dump+0xd0/0xd0
[ 1190.892151][T23600]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1190.898053][T23600]  ? _raw_spin_unlock+0x40/0x40
[ 1190.902932][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1190.908055][T23600]  check_panic_on_warn+0x84/0xa0
[ 1190.913008][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1190.918126][T23600]  end_report+0x6f/0x130
[ 1190.922376][T23600]  kasan_report+0x128/0x150
[ 1190.926896][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1190.932022][T23600]  kasan_check_range+0x241/0x290
[ 1190.936968][T23600]  ? __bpf_get_stackid+0x6c7/0x900
[ 1190.942086][T23600]  __asan_memcpy+0x40/0x70
[ 1190.946603][T23600]  __bpf_get_stackid+0x6c7/0x900
[ 1190.951559][T23600]  bpf_get_stackid_pe+0x343/0x410
[ 1190.956610][T23600]  bpf_prog_6611c23d801ea08d+0x29/0x3e
[ 1190.962092][T23600]  bpf_overflow_handler+0x1fc/0x510
[ 1190.967303][T23600]  ? perf_event_output_forward+0x3e0/0x3e0
[ 1190.973120][T23600]  ? bpf_overflow_handler+0xde/0x510
[ 1190.978420][T23600]  ? tp_perf_event_destroy+0x20/0x20
[ 1190.983728][T23600]  ? stack_trace_save+0xaa/0x100
[ 1190.988676][T23600]  ? verify_lock_unused+0x140/0x140
[ 1190.993885][T23600]  ? __perf_event_account_interrupt+0x187/0x280
[ 1191.000135][T23600]  __perf_event_overflow+0x461/0x660
[ 1191.005433][T23600]  perf_swevent_overflow+0x274/0x340
[ 1191.010730][T23600]  ? perf_event_switch_output+0x790/0x790
[ 1191.016462][T23600]  ? rcu_is_watching+0x15/0xb0
[ 1191.021238][T23600]  perf_swevent_event+0x45c/0x570
[ 1191.026288][T23600]  ? perf_tp_event+0x1550/0x1550
[ 1191.031290][T23600]  ___perf_sw_event+0x4ab/0x730
[ 1191.036152][T23600]  ? ___perf_sw_event+0x19e/0x730
[ 1191.041193][T23600]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1191.047628][T23600]  ? __lock_acquire+0x1336/0x7d80
[ 1191.052677][T23600]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1191.058666][T23600]  ? verify_lock_unused+0x140/0x140
[ 1191.063870][T23600]  ? lock_chain_count+0x20/0x20
[ 1191.068749][T23600]  __perf_sw_event+0x139/0x270
[ 1191.073536][T23600]  do_user_addr_fault+0x1242/0x12d0
[ 1191.078752][T23600]  ? rcu_is_watching+0x15/0xb0
[ 1191.083529][T23600]  exc_page_fault+0x64/0x100
[ 1191.088131][T23600]  asm_exc_page_fault+0x26/0x30
[ 1191.092997][T23600] RIP: 0010:rep_movs_alternative+0x15/0x90
[ 1191.098820][T23600] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[ 1191.118732][T23600] RSP: 0018:ffffc9000b56fc50 EFLAGS: 00050202
[ 1191.125074][T23600] RAX: ffffffff84342cea RBX: 0000000000000004 RCX: 0000000000000004
[ 1191.133089][T23600] RDX: 0000000000000000 RSI: ffffc9000b56fcc0 RDI: 0000200000000404
[ 1191.141068][T23600] RBP: ffffc9000b56fd38 R08: 0000000000000003 R09: 0000000000000004
[ 1191.149046][T23600] R10: dffffc0000000000 R11: fffff520016adf98 R12: 0000200000000408
[ 1191.157035][T23600] R13: 0000000000000000 R14: 0000200000000404 R15: ffffc9000b56fcc0
[ 1191.165070][T23600]  ? check_zeroed_user+0x1a/0x160
[ 1191.170114][T23600]  _copy_to_user+0x85/0xa0
[ 1191.174639][T23600]  bpf_prog_test_run_syscall+0x33f/0x4b0
[ 1191.180470][T23600]  ? sock_gen_cookie+0x60/0x60
[ 1191.185251][T23600]  ? sock_gen_cookie+0x60/0x60
[ 1191.190025][T23600]  bpf_prog_test_run+0x31f/0x390
[ 1191.194973][T23600]  __sys_bpf+0x49d/0x890
[ 1191.199221][T23600]  ? vma_end_read+0x18/0x170
[ 1191.203830][T23600]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1191.209214][T23600]  ? lock_chain_count+0x20/0x20
[ 1191.214082][T23600]  ? lock_chain_count+0x20/0x20
[ 1191.218946][T23600]  __x64_sys_bpf+0x7c/0x90
[ 1191.223374][T23600]  do_syscall_64+0x55/0xb0
[ 1191.227803][T23600]  ? clear_bhb_loop+0x40/0x90
[ 1191.232498][T23600]  ? clear_bhb_loop+0x40/0x90
[ 1191.237195][T23600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1191.243116][T23600] RIP: 0033:0x7f2a2cf9e159
[ 1191.247538][T23600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1191.267417][T23600] RSP: 002b:00007f2a2b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1191.275948][T23600] RAX: ffffffffffffffda RBX: 00007f2a2d226090 RCX: 00007f2a2cf9e159
[ 1191.283946][T23600] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000a
[ 1191.291924][T23600] RBP: 00007f2a2d03506b R08: 0000000000000000 R09: 0000000000000000
[ 1191.299904][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1191.307967][T23600] R13: 00007f2a2d226128 R14: 00007f2a2d226090 R15: 00007ffd682bfe48
[ 1191.315951][T23600]  </TASK>
[ 1191.319225][T23600] Kernel Offset: disabled
[ 1191.323569][T23600] Rebooting in 86400 seconds..