last executing test programs:

4.578331934s ago: executing program 2 (id=2846):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x7, 0x1, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x84, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc)

4.14883006s ago: executing program 2 (id=2847):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

3.860423339s ago: executing program 2 (id=2851):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0})
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$kcm(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000200)='|', 0x1}], 0x1}, 0x4000010)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0)

3.734381273s ago: executing program 2 (id=2854):
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000280), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$kcm(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x840) (async)
sendmsg$kcm(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x840)

3.508879741s ago: executing program 2 (id=2855):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00009e00429e7f6245b25b8ffa", @ANYRES32=0x0, @ANYRES32], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000022560000000000000400000020020000", @ANYRES32=0x1, @ANYBLOB="bb0c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/19], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r4, r7}, 0xc)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

3.305058188s ago: executing program 1 (id=2858):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async, rerun: 32)
recvmsg$unix(r1, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x10060) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

2.830680794s ago: executing program 1 (id=2860):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2.660395079s ago: executing program 1 (id=2862):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x50)
r0 = socket$kcm(0x2, 0x200000000000006, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f0000000040), 0x4)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2204, 0x2, 0xfffffffe, 0x0, 0x6, 0x81, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x800, 0xb8, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}, 0xc000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x4, 0x7fe0, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f50000000000080000000000000000000000000046083282cbc84793a6c23cd3a01d8ec3cedc74dcf1d8fb8085033a450ad4c20c9d637ae083549dee2b400fc7e165d091ff321a9b61075dc2f2c9d4478f98"], 0x48)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f00000000c0), 0xb9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)

2.188855226s ago: executing program 1 (id=2865):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000002000000fe8041"], 0x20}, 0x0)
recvmsg(r2, &(0x7f0000002440)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000580)=""/92, 0x5c}, {&(0x7f00000009c0)=""/241, 0xf1}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x5}, 0x40010022)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000000000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x2, 0x5, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r8 = socket$kcm(0x11, 0x2, 0x0)
r9 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x8)
sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10)

1.796986409s ago: executing program 0 (id=2868):
r0 = socket$kcm(0xa, 0x3, 0x73)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x4, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)='$', 0x1}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x13, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x18, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

1.744670401s ago: executing program 0 (id=2869):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.627081385s ago: executing program 0 (id=2870):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000940)=r0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000009c0)={&(0x7f0000000340)="38d780c77733049aebc857b210754161268c3255d3dca868bf55aee879d1744e50aa03a8ee22bb23af3765762842ab7ebd695b0a41f86c89f5fa81f34183765711ff92b8c70b59638cb10ab84393aead6b26dc474e59fcd1dd2f89d98278c2bf1a9323786f79c7d2555c90cb1a8af5b4aaea34580f7831d9d6105fb53637df8a8d82da9b20bae852b07f9850948928e5fcda384656", &(0x7f0000000400)=""/207, &(0x7f0000000680)="da146a25e788f48f163bffa48de2c93b929c3e4e51d810ad5354012c549da200579f3a433149125050c994719be59995981e15290f5167df06c84d4c2bd984ecec99a1790b432e6ace223b91ffebc68b7cab80779f441fc3bcfd60f38796c50ba38fe597dd2518767b0a4fff9fc8594292470183a7813dab1557feceafe48d3c4234e114191f4412a2eec2e99a3cca5cbe59dca1e1c2f7ce207e2c19e1ac91da5a4f46a58c6831650b1c29d85cf49635bd69784ac629830ed7e63bd25c4ff0d74d8e595e1f3f7e50c088d3f2eff78975433806769cac9d2f5352de7c00834c02f1b1cf901604631b611320d161f7bb2eb5a2", &(0x7f0000000780)="9fa7905483e0eeaf71cc4d3d9d965bdd732fc87006e5ea5a36a692c4a260d08342a1a24f07e8437a3ce8a46362cebe4179ca3a6d3f77c01a2698b965665b83756a8442ac0b927f0f5f254981f1dbb255e20b5a4fe2b87de6dee963614538a18030c7baeaaeb27de73b25eb65cb41059803f49ece9bab967194cb", 0x3, r1}, 0x38)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc14}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff6d, 0x6}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x2, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x2}, 0x180e4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1a1, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0xfcb1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2003, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0xfc1}, 0x1410, 0x401, 0x0, 0xc, 0x18, 0x10000, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000011b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x9, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x8001, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
close(r5)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)

1.328847635s ago: executing program 0 (id=2871):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085190000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x655a}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r5 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$kcm(0x23, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000000c0)=r7, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000940)={r7, r7})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={<r8=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0)
sendmsg$unix(r8, &(0x7f00000016c0)={&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000012c0)="580b2e9e4ec42f49732d16cb14854ebc52f0e08ecfb9e04a00ebda2b1ea95db32ceacbece67a968e580673b61b57757c78a3bf325b6e0259159d35ab9d1bcdba7560787f16c81acd25ae3aaf44e0a67f8b7aff9c8a928acc5da669d471481ee67c1bbf3a4bdb623c86e37249d2e698a4ba6b353106ba463d5446169f8fec6a80a355d37701bfbe3a450fb277a81e78f67974e4a6f5c31dd015d1081975ec0231301b1fbe3dcae33f7fc8813e513a3e590356bdd8c5307664630e34a53ab4a06e786bdc1e1fa9b9731c874bf5da7fc2fcc1f79846dff05769d9ac377a510e52175305c20f1eeeb52f", 0xe8}, {&(0x7f00000013c0)="ef8b9c47c13f577895cbe33e6d52e8bbdec6fab1f812b6a1cb855df31176d1553929f0b098b0fbfb946417c9adbfb297b0cfc942bbd5c262910f5848c758e3430ed94777f38216f6b23e9e2341a678c94a7285b3a1b06b55e861933ce3c4d3d940c258c762b4e4f0126f2757ba955c17e620ea02a5f42e3b36e08e323c8e259e7c157700cdaca43e2076f2c9689ae77c2953ca4ddff9895703ddae236e82971a5935221f225ae25be7cbe5adf5221101b1b5dba2f877a4e38c6c083ce406f9c0a9bd7ca0dfa8f753879f7647d3bda88466d39dd4690684893eb6595a69477b70443270d56a7ea52306da23d113f57f78ccfd", 0xf2}, {&(0x7f00000014c0)="cad0bcd5a7a7f86112add5ba2ae0ab26ab10e649c2110a063da42a1ae41f7f1c281f297020cf84", 0x27}], 0x3, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [r1, r7, r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x20000085}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001280)={r0, &(0x7f00000002c0)="98de304a3a780b669d44e99f270dc62402cbc8d0a09545601a51f28f0d759c2fb113c90833be598aa48fc0fb0c31e7d63ffcedecebc3d7a6038a455c7f7502e37fab0916f2bd0b27ca98bf24f37f35abc6050c450250fcfb85a26efefe64edc49490aada0b8b93b157ed870e5921efbee5f8825ee62140ffb85a0e9d8f99cb43175c5e52648e0952a54f922e8510a1ec48065ffca55c0ad611ed963beb5b7cc374a31fce77ad437d5017678922232f1c73f23804301de77687702efbccd53774736d5853c001bbb2e28f9c6d83c7293fe11495925e61f2d4be998f21bf1c96c5871cafd49f7ea6", &(0x7f0000001180)=""/233, 0x4}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x6d, 0x0, &(0x7f0000000700)="d1fd5b41a5ae09dfdf77a4392cd819a4054d5240de98da5b90a9855a0592d15168de09be86add0088bf87dc6fc21157515a43dee7020b6ca27377bb0d55cb3b23f2179695a5750ef57e07b99756901ea4a4b60f7aff4662cf13dc1170d24bd32b3160b1dce34330a6870cee42f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x3e)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b70300"], 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r10}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r12, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.284863557s ago: executing program 1 (id=2872):
r0 = socket$kcm(0x2, 0x0, 0x106)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ede8f64160af3653c001a0038006d0e3af93a08ae0017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e7860400c80004000300c5bb5b64f6985300", 0x5c}], 0x0, 0x0, 0x0, 0x1f00c00e}, 0xc080)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)='Q;Z', 0x3}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="731c8c575b6926cee1a83e317ca565e501016f29ac5fd9a366c21ed8b84e5230d5651f27b73808", @ANYRES32=r2], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)="fbd2b9ed29d8974ae8ab72ff91", 0xd}, {&(0x7f00000007c0)="d25bf710e1be930583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e240", 0x27}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
r12 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r12, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="d7", 0x1}], 0x1}, 0x240448c4)

1.105085432s ago: executing program 3 (id=2873):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x3, 0x0, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)

948.921668ms ago: executing program 0 (id=2874):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={&(0x7f0000000000)="f1a9eb83689a5b17e1bb6a8c9b2ae6e9f4e28e36cfe9ceff82cd781eb68f4e3a1a297a026cb26f083b2f94d6c25d673f1e1d82989b137b4812ebecd43945936eef0016bb63061c1a0d29655797c884842c0363659898631aa00a2068aae1562cc14b950023a53e6ce352fc55d6dba37c8110924bdf902b16dcac1ce42e", &(0x7f0000000180)=""/123, &(0x7f00000004c0)="aedf1f6a14d75236f91871980e355dde1ffebf0957d1588e80b096ec79c903e8106204388dde5a11324b6ac5c2e4c1f9fb9d1a0be36f2111694aab81a054a67ff546915cd46d1c1817399b847ae6d4221c78f94358e61162bfb6964214df57bac78da27da810eb279f29c47395c12c870e0e9948e590fe259f1f287d76e58d4d7d0f7bb5d1f243ba60e2adfc24ccfaa2357cb24218b1595a9065984be54c3f8da4bf78da793e6e54d4e11ff0dcd6b34269676a15dc89108c87bae2225426e62f696c836be1da", &(0x7f0000000700)="3f875104126cf6fae4b93885c036b362b756fb", 0xfffffff9, r0, 0x4}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r4, 0x0, 0x800000000}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], <r5=>0x0, 0xd6, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}}, &(0x7f0000000300)='GPL\x00', 0x3faf, 0x76, &(0x7f0000000780)=""/118, 0x41100, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000800)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x7}, 0x10, r5, 0x0, 0x9, 0x0, &(0x7f0000000b80)=[{0x5, 0x2, 0xf, 0x7}, {0x2, 0x2, 0x10, 0x9}, {0x3, 0x3, 0x8, 0x6}, {0x1, 0x2, 0xb, 0x4}, {0x4, 0x5, 0x8, 0x8}, {0x1, 0x1, 0xd}, {0x1, 0x1, 0xc, 0x9}, {0x2, 0x1, 0x6, 0x4}, {0x2, 0x3, 0xc, 0x5}], 0x10, 0x2}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33)

797.763383ms ago: executing program 3 (id=2875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
close(0xffffffffffffffff) (async, rerun: 32)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfdef) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async, rerun: 32)
socket$kcm(0x1e, 0x4, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10) (rerun: 64)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@l2={0x1f, 0x281, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xff, 0x1}, 0x80}, 0x400c0)
unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd02, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff5b93}, 0x50)

633.164778ms ago: executing program 1 (id=2876):
socketpair(0x1, 0x6, 0x6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1004000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f9, &(0x7f0000000080)) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x48, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r12], 0x12) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1100000000008000000008000000000018110000", @ANYRES32=r5, @ANYRESOCT=r5, @ANYRESDEC=r8, @ANYBLOB="dfae1c15ae49f131c78c106d26a3b2ff83a3078eee695d2f732c919faa63b8c993c1551b9fc9a091e4c6f9cd411737aee1f84ddda23c9dab254398bc8747bb788dcb9b0f3ca5ccc071fab11477b447cd65ba4570f8f689fc16bbb97c5b78d3fe0b557602b84816bd54a5400ab88e5597fbeaa64a9bfa051b67d6717b4f5655b9203d93ca0c12bcd6ab186d32fc7c4d6ca3d0c1278d9aec09e3e858d84e00b430cbc26e27897c1e9504714865ad5bb603dcee79cdf4ba70ec7dec477312e48e530d37b91430eb8f6351f2987e4f8363164474bbefd0d24783d91bc156d6d9754d01c650d9483d981c7d067de2b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000100)=r13) (async)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async)
write$cgroup_devices(r14, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')

329.013169ms ago: executing program 3 (id=2877):
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0) (async)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) (async)
r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xda, 0x9, 0x4, 0xa, 0x0, 0x1, 0x14, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x4000, 0xf309, 0x40000000, 0x3, 0x1, 0x9, 0x6, 0x0, 0xb8c, 0x0, 0x6}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

306.299009ms ago: executing program 2 (id=2878):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x9080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2f9}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
ioctl$TUNSETFILTEREBPF(r7, 0xb702, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8)
write$cgroup_subtree(r8, &(0x7f0000000240)={[{0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}]}, 0x19)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x20}, 0x18)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r10)
socket$kcm(0x10, 0x2, 0x0)

280.92832ms ago: executing program 3 (id=2879):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4c31, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x49, 0x0, &(0x7f0000000040)="89abfdd9156dcd0c803da9328b79b026699d987518582b5c6362f19b7c5b508c9a1496c37e714e79ee2bcde97bd7c538a30d7abb3bc663ce559aeb53f4b55b14dbba87bb89588171d5", 0x0, 0xfffffff4, 0x0, 0xb6, 0x0, &(0x7f00000000c0)="e56678f1339302f5093e89ad7280e14847fe271c3c3bd868f35ef207c0ae82bc28ea043e690ee1faddecc8b44104ad277e31cd6b67b12237bf86da3fca2de4c82d10c51235a0bb415c65d37281215e1277fd8a81120ec12127759debd70eb96533fcf2a3bc15747e85accf63a339645d4ab28cf334b0eb5017d76939bbab74958861c615b8332ba47da7459db6aa96324a0efa9d855e6c2e20e555d6c58dee3511164b2529c904bb87e6651954350efa4098f20d919f", 0x0, 0x2, 0x0, 0xff}, 0x50)
close(r1)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)

217.004773ms ago: executing program 0 (id=2880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x5e5, r0}, 0x38)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0)

173.637964ms ago: executing program 3 (id=2881):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5edb38b77678a6b3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x41)

0s ago: executing program 3 (id=2882):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0908000000000035090100000000009500000000070000b708000000000000639a04fe000000006609000080ffffffdbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff57000000e700000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x8, 0x3, 0x7, 0x10001}]})
r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r11)
r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r14}, 0x38)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208001d0040001101a8002e000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)

kernel console output (not intermixed with test programs):

038] netlink: 'syz.0.1196': attribute type 29 has an invalid length.
[  257.329853][T10038] netlink: 'syz.0.1196': attribute type 29 has an invalid length.
[  257.348516][T10038] netlink: 'syz.0.1196': attribute type 29 has an invalid length.
[  257.362190][T10038] netlink: 'syz.0.1196': attribute type 29 has an invalid length.
[  257.399324][T10038] netlink: 'syz.0.1196': attribute type 29 has an invalid length.
[  257.470821][T10041] netlink: 'syz.3.1195': attribute type 27 has an invalid length.
[  258.092317][T10053] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1200'.
[  259.615796][T10090] netlink: 17263 bytes leftover after parsing attributes in process `syz.2.1210'.
[  259.710405][T10094] netlink: 'syz.2.1211': attribute type 29 has an invalid length.
[  260.916326][T10087] netlink: 'syz.1.1209': attribute type 21 has an invalid length.
[  260.924230][T10087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1209'.
[  260.943753][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'.
[  260.965769][T10088] netlink: 'syz.1.1209': attribute type 21 has an invalid length.
[  260.973664][T10088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1209'.
[  260.995612][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'.
[  261.606044][T10117] netlink: 17263 bytes leftover after parsing attributes in process `syz.3.1219'.
[  261.817673][T10124] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1222'.
[  262.145869][T10136] aaaaaaaaaaaaaaa: entered promiscuous mode
[  262.854280][T10168] validate_nla: 2 callbacks suppressed
[  262.854296][T10168] netlink: 'syz.3.1234': attribute type 10 has an invalid length.
[  262.899816][T10168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1234'.
[  263.776488][T10182] netlink: 'syz.3.1237': attribute type 2 has an invalid length.
[  263.796006][T10182] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1237'.
[  264.018811][T10193] netlink: 64835 bytes leftover after parsing attributes in process `syz.3.1241'.
[  264.809575][T10226] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1250'.
[  264.920143][T10229] netlink: 'syz.2.1252': attribute type 17 has an invalid length.
[  264.935051][T10229] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1252'.
[  267.379944][T10238] netlink: 'syz.2.1255': attribute type 21 has an invalid length.
[  267.403086][T10238] netlink: 'syz.2.1255': attribute type 6 has an invalid length.
[  267.430064][T10238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1255'.
[  268.153584][T10257] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1262'.
[  268.173926][T10257] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  268.355337][T10265] netlink: 'syz.3.1263': attribute type 5 has an invalid length.
[  268.534408][T10278] netlink: 'syz.2.1267': attribute type 27 has an invalid length.
[  268.555937][T10278] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1267'.
[  268.582768][T10278] netlink: 'syz.2.1267': attribute type 10 has an invalid length.
[  268.601218][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1267'.
[  268.618759][T10278] ipvlan1: entered promiscuous mode
[  268.624202][T10278] ipvlan1: entered allmulticast mode
[  268.631504][T10278] veth0_vlan: entered allmulticast mode
[  268.643814][T10284] netlink: 'syz.1.1270': attribute type 9 has an invalid length.
[  268.651882][T10284] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1270'.
[  268.657198][T10278] bridge0: port 3(ipvlan1) entered blocking state
[  268.669810][T10278] bridge0: port 3(ipvlan1) entered disabled state
[  268.683933][T10278] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  268.704481][T10287] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1269'.
[  268.731787][T10282] Dead loop on virtual device ip6_vti0, fix it urgently!
[  268.741098][T10278] syz.2.1267 (10278) used greatest stack depth: 18984 bytes left
[  268.764572][T10280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.097939][T10295] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  269.118213][T10295] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1272'.
[  269.584653][T10319] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1278'.
[  269.623557][T10312] netlink: 'syz.1.1277': attribute type 10 has an invalid length.
[  269.647701][T10312] team0: Device hsr_slave_0 failed to register rx_handler
[  270.152988][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1282'.
[  270.508389][T10318] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1280'.
[  272.185742][T10400] netlink: 'syz.0.1292': attribute type 19 has an invalid length.
[  272.204370][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1292'.
[  273.134354][T10429] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1301'.
[  273.147672][T10429] bridge_slave_1: default FDB implementation only supports local addresses
[  273.841791][T10459] netlink: 'syz.0.1309': attribute type 10 has an invalid length.
[  273.890091][T10457] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1307'.
[  273.930278][T10459] netlink: 'syz.0.1309': attribute type 9 has an invalid length.
[  273.938873][T10457] bridge_slave_1: default FDB implementation only supports local addresses
[  273.957051][T10459] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1309'.
[  275.126131][T10485] netlink: 'syz.0.1317': attribute type 3 has an invalid length.
[  275.134065][T10485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1317'.
[  276.156537][T10515] netlink: 'syz.3.1322': attribute type 17 has an invalid length.
[  276.412251][T10515] netlink: 'syz.3.1322': attribute type 10 has an invalid length.
[  276.706314][T10559] netlink: 'syz.0.1327': attribute type 21 has an invalid length.
[  276.727158][T10559] netlink: 'syz.0.1327': attribute type 1 has an invalid length.
[  276.763400][T10559] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.1327'.
[  276.781463][T10565] netlink: 'syz.0.1327': attribute type 3 has an invalid length.
[  276.832746][T10565] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1327'.
[  277.236756][T10577] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  277.482552][T10577] netlink: 'syz.0.1332': attribute type 3 has an invalid length.
[  277.503435][T10577] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1332'.
[  278.334274][T10600] netlink: 'syz.0.1339': attribute type 29 has an invalid length.
[  278.593044][T10611] netlink: 'syz.1.1342': attribute type 11 has an invalid length.
[  278.635118][T10611] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1342'.
[  278.897050][T10630] tap0: tun_chr_ioctl cmd 1074025692
[  279.933175][T10657] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1356'.
[  280.009933][T10659] ��: renamed from team_slave_1
[  280.121964][T10667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1360'.
[  280.209051][T10672] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  280.233646][T10674] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1361'.
[  280.442716][T10684] validate_nla: 2 callbacks suppressed
[  280.442730][T10684] netlink: 'syz.0.1363': attribute type 4 has an invalid length.
[  281.095261][T10685] netlink: 'syz.1.1366': attribute type 10 has an invalid length.
[  281.106193][T10685] hsr_slave_0: left promiscuous mode
[  281.112261][T10685] hsr_slave_1: left promiscuous mode
[  281.147503][T10691] netlink: 'syz.2.1367': attribute type 64 has an invalid length.
[  281.248215][T10696] netlink: 'syz.0.1368': attribute type 21 has an invalid length.
[  282.800497][T10702] tap0: tun_chr_ioctl cmd 1074025694
[  283.101088][T10712] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  283.375609][T10725] IPv6: Can't replace route, no match found
[  283.512482][T10732] netlink: 'syz.3.1378': attribute type 29 has an invalid length.
[  283.552358][T10732] netlink: 'syz.3.1378': attribute type 29 has an invalid length.
[  283.594412][T10731] netlink: 'syz.3.1378': attribute type 29 has an invalid length.
[  283.628331][T10732] netlink: 'syz.3.1378': attribute type 29 has an invalid length.
[  283.640155][T10730] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1379'.
[  283.670582][T10730] bridge_slave_1: default FDB implementation only supports local addresses
[  283.687110][T10731] netlink: 'syz.3.1378': attribute type 29 has an invalid length.
[  283.964159][T10742] netlink: 'syz.3.1381': attribute type 4 has an invalid length.
[  283.996215][T10742] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1381'.
[  284.061147][T10745] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1381'.
[  284.108424][T10746] veth1_macvtap: left promiscuous mode
[  284.113979][T10746] macsec0: entered allmulticast mode
[  284.170853][T10749] veth1_macvtap: entered promiscuous mode
[  284.255262][T10749] veth1_macvtap: entered allmulticast mode
[  284.261278][T10749] macsec0: entered promiscuous mode
[  284.417364][T10757] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1383'.
[  284.495260][T10760] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1386'.
[  284.509849][T10760] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1386'.
[  285.754319][T10793] validate_nla: 4 callbacks suppressed
[  285.754335][T10793] netlink: 'syz.0.1396': attribute type 29 has an invalid length.
[  285.779908][T10793] netlink: 'syz.0.1396': attribute type 29 has an invalid length.
[  285.838795][T10798] netlink: 'syz.0.1396': attribute type 29 has an invalid length.
[  285.893830][T10793] netlink: 'syz.0.1396': attribute type 29 has an invalid length.
[  285.964494][T10798] netlink: 'syz.0.1396': attribute type 29 has an invalid length.
[  286.002027][T10793] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  286.030763][T10793] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1396'.
[  286.423607][T10806] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1399'.
[  286.470770][T10804] netlink: 181524 bytes leftover after parsing attributes in process `syz.0.1398'.
[  286.528204][T10804] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  286.571816][T10809] netlink: 'syz.2.1400': attribute type 10 has an invalid length.
[  286.656470][T10815] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1401'.
[  286.676973][T10815] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  286.689335][T10815] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1401'.
[  286.702810][T10815] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  286.713766][T10815] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1401'.
[  286.733140][T10815] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  286.929704][T10822] netlink: 'syz.2.1403': attribute type 10 has an invalid length.
[  287.159774][T10824] netlink: 'syz.3.1404': attribute type 10 has an invalid length.
[  287.181314][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1404'.
[  287.191965][T10824] batadv0: entered allmulticast mode
[  287.199577][T10824] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  287.341182][T10827] netlink: 'syz.0.1405': attribute type 1 has an invalid length.
[  287.386257][T10827] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1405'.
[  287.738714][T10848] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1410'.
[  287.937216][T10857] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  288.453632][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'.
[  293.845638][T10944] validate_nla: 2 callbacks suppressed
[  293.845653][T10944] netlink: 'syz.1.1441': attribute type 3 has an invalid length.
[  293.873267][T10944] __nla_validate_parse: 1 callbacks suppressed
[  293.873283][T10944] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1441'.
[  294.056302][T10948] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1442'.
[  294.638949][T10976] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1450'.
[  294.920413][T10988] tun0: tun_chr_ioctl cmd 1074025677
[  294.927118][T10988] tun0: linktype set to 1
[  295.054760][T10995] netlink: 'syz.2.1456': attribute type 1 has an invalid length.
[  295.143999][T10999] netlink: 'syz.2.1458': attribute type 21 has an invalid length.
[  295.159470][T10999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1458'.
[  300.480937][T11085] netlink: 'syz.1.1478': attribute type 3 has an invalid length.
[  300.495900][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1478'.
[  300.850541][T11094] netlink: 'syz.0.1482': attribute type 10 has an invalid length.
[  300.879401][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'.
[  300.935004][T11098] netlink: 'syz.0.1482': attribute type 10 has an invalid length.
[  300.942867][T11098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'.
[  301.629562][T11139] netlink: 'syz.1.1491': attribute type 10 has an invalid length.
[  301.659761][T11139] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1491'.
[  301.771528][T11141] netlink: 'syz.3.1494': attribute type 13 has an invalid length.
[  301.799281][T11141] netlink: 'syz.3.1494': attribute type 58 has an invalid length.
[  301.825592][T11141] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1494'.
[  303.188525][T11168] netlink: 'syz.0.1501': attribute type 12 has an invalid length.
[  303.203638][T11168] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1501'.
[  303.683213][T11175] veth1_to_batadv: entered promiscuous mode
[  303.697683][T11175] veth1_to_batadv: entered allmulticast mode
[  304.579347][T11185] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1507'.
[  304.646281][T11186] __sock_release: fasync list not empty!
[  305.179832][T11195] netlink: 'syz.1.1510': attribute type 3 has an invalid length.
[  305.787890][T11211] netlink: 'syz.3.1514': attribute type 33 has an invalid length.
[  307.256470][T11266] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1527'.
[  307.762503][T11278] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  307.885682][T11279] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1532'.
[  308.291624][T11292] netlink: 'syz.1.1537': attribute type 21 has an invalid length.
[  308.317287][T11292] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1537'.
[  308.491674][T11298] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  308.532379][T11299] netlink: 'syz.3.1538': attribute type 21 has an invalid length.
[  308.950169][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1539'.
[  309.345984][T11315] netlink: 'syz.0.1542': attribute type 5 has an invalid length.
[  309.359359][T11316] netlink: 'syz.0.1542': attribute type 5 has an invalid length.
[  309.395481][T11320] netlink: 'syz.1.1544': attribute type 12 has an invalid length.
[  309.411938][T11320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1544'.
[  309.546532][T11322] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1545'.
[  309.592951][T11326] netlink: 'syz.1.1547': attribute type 10 has an invalid length.
[  309.611188][T11326] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1547'.
[  309.645169][T11326] netlink: 'syz.1.1547': attribute type 39 has an invalid length.
[  310.924086][T11347] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1554'.
[  310.942046][T11347] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  310.951838][T11347] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  311.386337][T11357] delete_channel: no stack
[  311.441957][T11360] netlink: 'syz.3.1558': attribute type 21 has an invalid length.
[  311.471586][T11360] netlink: 16174 bytes leftover after parsing attributes in process `syz.3.1558'.
[  311.498310][T11362] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1559'.
[  312.209284][T11371] netlink: 'syz.1.1561': attribute type 10 has an invalid length.
[  312.231513][T11371] ipvlan1: entered promiscuous mode
[  312.256876][T11371] ipvlan1: entered allmulticast mode
[  312.275228][T11371] veth0_vlan: entered allmulticast mode
[  312.402902][T11371] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  312.479445][T11360] __nla_validate_parse: 1 callbacks suppressed
[  312.479461][T11360] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1558'.
[  312.506299][T11371] syz.1.1561 (11371) used greatest stack depth: 17480 bytes left
[  312.685272][T11360] netlink: 'syz.3.1558': attribute type 2 has an invalid length.
[  312.693668][T11379] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1562'.
[  312.735599][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'.
[  312.786666][T11378] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1562'.
[  312.885445][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'.
[  313.401418][T11392] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1566'.
[  313.431518][T11392] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  313.698127][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 62
[  314.123506][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  314.175837][T11420] veth1_macvtap: left promiscuous mode
[  314.262995][T11420] netlink: 'syz.1.1574': attribute type 5 has an invalid length.
[  314.765252][T11443] netlink: 'syz.0.1580': attribute type 1 has an invalid length.
[  314.773574][T11443] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1580'.
[  315.385427][T11459] netlink: 153204 bytes leftover after parsing attributes in process `syz.1.1585'.
[  315.661942][T11465] netlink: 'syz.2.1587': attribute type 29 has an invalid length.
[  316.142811][T11462] netlink: 'syz.0.1586': attribute type 2 has an invalid length.
[  316.155328][T11465] netlink: 'syz.2.1587': attribute type 29 has an invalid length.
[  316.219862][T11466] netlink: 'syz.2.1587': attribute type 29 has an invalid length.
[  316.289493][T11469] sit0: entered promiscuous mode
[  316.309036][T11469] sit0: entered allmulticast mode
[  316.376194][T11467] netlink: 'syz.2.1587': attribute type 29 has an invalid length.
[  316.459178][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  317.199469][T11490] validate_nla: 1 callbacks suppressed
[  317.199484][T11490] netlink: 'syz.3.1595': attribute type 21 has an invalid length.
[  317.218114][T11490] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1595'.
[  317.235572][T11490] netlink: 'syz.3.1595': attribute type 4 has an invalid length.
[  317.374125][T11498] netlink: 'syz.1.1597': attribute type 1 has an invalid length.
[  317.390314][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  317.396889][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  317.403388][T11498] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1597'.
[  318.059316][T11524] netlink: 'syz.3.1605': attribute type 21 has an invalid length.
[  318.511955][T11528] netlink: 'syz.0.1606': attribute type 10 has an invalid length.
[  318.533702][T11528] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1606'.
[  318.666801][T11537] netlink: 'syz.2.1610': attribute type 1 has an invalid length.
[  318.675426][T11537] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1610'.
[  318.968804][T11546] netlink: 'syz.2.1613': attribute type 1 has an invalid length.
[  318.984989][T11546] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1613'.
[  319.085329][T11549] netlink: 'syz.0.1614': attribute type 10 has an invalid length.
[  319.093716][T11549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1614'.
[  319.148880][T11549] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  319.179566][T11550] netlink: 'syz.0.1614': attribute type 10 has an invalid length.
[  319.204537][T11550] geneve0: entered promiscuous mode
[  319.252905][T11550] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  319.266595][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'.
[  319.308188][T11549] netlink: 'syz.0.1614': attribute type 1 has an invalid length.
[  319.323849][T11549] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1614'.
[  319.489712][T11556] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1616'.
[  319.525638][T11556] netlink: zone id is out of range
[  319.530952][T11556] netlink: zone id is out of range
[  319.539756][T11556] netlink: zone id is out of range
[  319.545252][T11556] netlink: zone id is out of range
[  319.550460][T11556] netlink: zone id is out of range
[  319.560544][T11556] netlink: zone id is out of range
[  319.570689][T11556] netlink: zone id is out of range
[  319.581139][T11556] netlink: zone id is out of range
[  319.587851][T11556] netlink: zone id is out of range
[  321.413194][T11583] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1622'.
[  321.516052][T11587] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  321.554202][T11586] geneve0: entered promiscuous mode
[  321.810960][T11599] IPv6: pim6reg1: Disabled Multicast RS
[  322.823678][T11615] validate_nla: 3 callbacks suppressed
[  322.823695][T11615] netlink: 'syz.3.1634': attribute type 2 has an invalid length.
[  322.857369][T11615] netlink: 'syz.3.1634': attribute type 9 has an invalid length.
[  322.873733][T11615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1634'.
[  323.058841][T11616] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1635'.
[  323.922499][T11640] netlink: 'syz.3.1643': attribute type 4 has an invalid length.
[  323.958693][T11640] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1643'.
[  323.967310][T11646] netlink: 'syz.1.1645': attribute type 3 has an invalid length.
[  323.976568][T11646] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1645'.
[  323.999041][T11647] netlink: 'syz.1.1645': attribute type 3 has an invalid length.
[  324.037877][T11647] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1645'.
[  324.808213][T11688] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1658'.
[  324.852958][T11686] delete_channel: no stack
[  325.277843][T11695] C: renamed from team_slave_0
[  325.309098][T11695] netlink: 'syz.0.1661': attribute type 3 has an invalid length.
[  325.355340][T11695] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1661'.
[  325.364577][T11695] net_ratelimit: 41 callbacks suppressed
[  325.364591][T11695] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  325.981357][T11730] macvlan1: entered promiscuous mode
[  325.997368][T11730] macvlan1: entered allmulticast mode
[  326.002322][T11734] delete_channel: no stack
[  326.012662][T11730] veth1_vlan: entered allmulticast mode
[  326.153364][T11738] netlink: 'syz.0.1675': attribute type 2 has an invalid length.
[  326.193651][T11738] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1675'.
[  326.765620][T11775] netlink: 'syz.0.1686': attribute type 153 has an invalid length.
[  326.773869][T11775] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1686'.
[  326.889529][T11782] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1688'.
[  326.982916][T11786] netlink: 'syz.0.1690': attribute type 1 has an invalid length.
[  327.029379][T11788] netlink: 'syz.0.1691': attribute type 12 has an invalid length.
[  327.038518][T11788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1691'.
[  327.091676][T11790] FAULT_INJECTION: forcing a failure.
[  327.091676][T11790] name failslab, interval 1, probability 0, space 0, times 1
[  327.104710][T11790] CPU: 0 PID: 11790 Comm: syz.0.1692 Not tainted syzkaller #0
[  327.112197][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  327.122269][T11790] Call Trace:
[  327.125552][T11790]  <TASK>
[  327.128478][T11790]  dump_stack_lvl+0x18c/0x250
[  327.133156][T11790]  ? show_regs_print_info+0x20/0x20
[  327.138352][T11790]  ? load_image+0x420/0x420
[  327.142849][T11790]  ? __might_sleep+0xe0/0xe0
[  327.147441][T11790]  ? __lock_acquire+0x7d40/0x7d40
[  327.152467][T11790]  should_fail_ex+0x39d/0x4d0
[  327.157165][T11790]  should_failslab+0x9/0x20
[  327.161666][T11790]  slab_pre_alloc_hook+0x59/0x310
[  327.166691][T11790]  ? __get_vm_area_node+0x125/0x370
[  327.171888][T11790]  __kmem_cache_alloc_node+0x53/0x250
[  327.177271][T11790]  ? __get_vm_area_node+0x125/0x370
[  327.182467][T11790]  kmalloc_node_trace+0x26/0xe0
[  327.187320][T11790]  __get_vm_area_node+0x125/0x370
[  327.192348][T11790]  __vmalloc_node_range+0x36e/0x1330
[  327.197802][T11790]  ? netlink_sendmsg+0x602/0xbf0
[  327.202737][T11790]  ? netlink_insert+0x109f/0x13a0
[  327.207768][T11790]  ? netlink_data_ready+0x10/0x10
[  327.212785][T11790]  ? free_vm_area+0x50/0x50
[  327.217296][T11790]  ? netlink_sendmsg+0x602/0xbf0
[  327.222228][T11790]  vmalloc+0x79/0x90
[  327.226120][T11790]  ? netlink_sendmsg+0x602/0xbf0
[  327.231051][T11790]  netlink_sendmsg+0x602/0xbf0
[  327.235821][T11790]  ? netlink_getsockopt+0x590/0x590
[  327.241015][T11790]  ? aa_sock_msg_perm+0x94/0x150
[  327.245952][T11790]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  327.251236][T11790]  ? security_socket_sendmsg+0x80/0xa0
[  327.256691][T11790]  sock_write_iter+0x2df/0x420
[  327.261454][T11790]  ? sock_read_iter+0x3e0/0x3e0
[  327.266307][T11790]  ? common_file_perm+0x198/0x1f0
[  327.271333][T11790]  vfs_write+0x46c/0x990
[  327.275576][T11790]  ? file_end_write+0x250/0x250
[  327.280428][T11790]  ? __fget_files+0x43d/0x4b0
[  327.285108][T11790]  ? __fdget_pos+0x1d8/0x330
[  327.289717][T11790]  ? ksys_write+0x75/0x260
[  327.294148][T11790]  ksys_write+0x150/0x260
[  327.298490][T11790]  ? __ia32_sys_read+0x90/0x90
[  327.303263][T11790]  ? lockdep_hardirqs_on+0x98/0x150
[  327.308480][T11790]  do_syscall_64+0x55/0xb0
[  327.312897][T11790]  ? clear_bhb_loop+0x40/0x90
[  327.317575][T11790]  ? clear_bhb_loop+0x40/0x90
[  327.322252][T11790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.328144][T11790] RIP: 0033:0x7f889b99ce59
[  327.332556][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.352161][T11790] RSP: 002b:00007f889c890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  327.360571][T11790] RAX: ffffffffffffffda RBX: 00007f889bc15fa0 RCX: 00007f889b99ce59
[  327.368536][T11790] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  327.376500][T11790] RBP: 00007f889c890090 R08: 0000000000000000 R09: 0000000000000000
[  327.384464][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.392430][T11790] R13: 00007f889bc16038 R14: 00007f889bc15fa0 R15: 00007ffddb8db5e8
[  327.400412][T11790]  </TASK>
[  327.416496][T11790] syz.0.1692: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  327.451487][T11790] CPU: 1 PID: 11790 Comm: syz.0.1692 Not tainted syzkaller #0
[  327.458997][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  327.469048][T11790] Call Trace:
[  327.472322][T11790]  <TASK>
[  327.475257][T11790]  dump_stack_lvl+0x18c/0x250
[  327.479935][T11790]  ? show_regs_print_info+0x20/0x20
[  327.485127][T11790]  ? load_image+0x420/0x420
[  327.489626][T11790]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  327.496039][T11790]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  327.502537][T11790]  warn_alloc+0x246/0x340
[  327.506870][T11790]  ? zone_watermark_ok_safe+0x230/0x230
[  327.512420][T11790]  ? __get_vm_area_node+0x356/0x370
[  327.517621][T11790]  __vmalloc_node_range+0x393/0x1330
[  327.522905][T11790]  ? netlink_insert+0x109f/0x13a0
[  327.527933][T11790]  ? netlink_data_ready+0x10/0x10
[  327.532952][T11790]  ? free_vm_area+0x50/0x50
[  327.537460][T11790]  ? netlink_sendmsg+0x602/0xbf0
[  327.542390][T11790]  vmalloc+0x79/0x90
[  327.546284][T11790]  ? netlink_sendmsg+0x602/0xbf0
[  327.551220][T11790]  netlink_sendmsg+0x602/0xbf0
[  327.555982][T11790]  ? netlink_getsockopt+0x590/0x590
[  327.561175][T11790]  ? aa_sock_msg_perm+0x94/0x150
[  327.566111][T11790]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  327.571394][T11790]  ? security_socket_sendmsg+0x80/0xa0
[  327.576850][T11790]  sock_write_iter+0x2df/0x420
[  327.581612][T11790]  ? sock_read_iter+0x3e0/0x3e0
[  327.586463][T11790]  ? common_file_perm+0x198/0x1f0
[  327.591488][T11790]  vfs_write+0x46c/0x990
[  327.595731][T11790]  ? file_end_write+0x250/0x250
[  327.600578][T11790]  ? __fget_files+0x43d/0x4b0
[  327.605254][T11790]  ? __fdget_pos+0x1d8/0x330
[  327.609837][T11790]  ? ksys_write+0x75/0x260
[  327.614250][T11790]  ksys_write+0x150/0x260
[  327.618579][T11790]  ? __ia32_sys_read+0x90/0x90
[  327.623341][T11790]  ? lockdep_hardirqs_on+0x98/0x150
[  327.628536][T11790]  do_syscall_64+0x55/0xb0
[  327.632959][T11790]  ? clear_bhb_loop+0x40/0x90
[  327.637724][T11790]  ? clear_bhb_loop+0x40/0x90
[  327.642399][T11790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.648299][T11790] RIP: 0033:0x7f889b99ce59
[  327.652718][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.672329][T11790] RSP: 002b:00007f889c890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  327.680740][T11790] RAX: ffffffffffffffda RBX: 00007f889bc15fa0 RCX: 00007f889b99ce59
[  327.688703][T11790] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  327.696668][T11790] RBP: 00007f889c890090 R08: 0000000000000000 R09: 0000000000000000
[  327.704629][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.712591][T11790] R13: 00007f889bc16038 R14: 00007f889bc15fa0 R15: 00007ffddb8db5e8
[  327.720567][T11790]  </TASK>
[  327.788934][T11790] Mem-Info:
[  327.792508][T11790] active_anon:8655 inactive_anon:0 isolated_anon:0
[  327.792508][T11790]  active_file:17175 inactive_file:40052 isolated_file:0
[  327.792508][T11790]  unevictable:768 dirty:259 writeback:0
[  327.792508][T11790]  slab_reclaimable:10905 slab_unreclaimable:94809
[  327.792508][T11790]  mapped:24461 shmem:1361 pagetables:523
[  327.792508][T11790]  sec_pagetables:0 bounce:0
[  327.792508][T11790]  kernel_misc_reclaimable:0
[  327.792508][T11790]  free:1342783 free_pcp:6741 free_cma:0
[  327.849352][T11790] Node 0 active_anon:34620kB inactive_anon:0kB active_file:68700kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97844kB dirty:1036kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12472kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no
[  327.889926][T11790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  327.924538][T11790] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  327.952032][T11790] lowmem_reserve[]: 0 2521 2522 2522 2522
[  327.958054][T11790] Node 0 DMA32 free:1450244kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34776kB inactive_anon:0kB active_file:68700kB inactive_file:159192kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:13272kB local_pcp:8384kB free_cma:0kB
[  327.975189][T11799] validate_nla: 1 callbacks suppressed
[  327.975250][T11799] netlink: 'syz.2.1695': attribute type 5 has an invalid length.
[  327.989000][T11790] lowmem_reserve[]: 0 0 0 0 0
[  327.989048][T11790] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  328.005273][T11799] netlink: 'syz.2.1695': attribute type 1 has an invalid length.
[  328.036879][T11790] lowmem_reserve[]: 0 0 0 0 0
[  328.047611][T11790] Node 1 Normal free:3904772kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13856kB local_pcp:4832kB free_cma:0kB
[  328.078092][T11799] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1695'.
[  328.090129][T11790] lowmem_reserve[]: 0 0 0 0 0
[  328.095066][T11790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  328.108035][T11790] Node 0 DMA32: 1005*4kB (UME) 1678*8kB (UME) 1060*16kB (UM) 1101*32kB (UME) 736*64kB (UME) 144*128kB (UME) 102*256kB (UME) 39*512kB (UM) 17*1024kB (UME) 9*2048kB (UME) 301*4096kB (UM) = 1449988kB
[  328.128284][T11790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  328.146371][T11790] Node 1 Normal: 187*4kB (UM) 45*8kB (UME) 31*16kB (UME) 104*32kB (UME) 39*64kB (UME) 10*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 951*4096kB (ME) = 3904772kB
[  328.164631][T11790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.216335][T11790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  328.245968][T11790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.271635][T11790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  328.281632][T11790] 58588 total pagecache pages
[  328.286691][T11790] 0 pages in swap cache
[  328.290871][T11790] Free swap  = 124996kB
[  328.295434][T11790] Total swap = 124996kB
[  328.299700][T11790] 2097051 pages RAM
[  328.303524][T11790] 0 pages HighMem/MovableOnly
[  328.308557][T11790] 416932 pages reserved
[  328.312812][T11790] 0 pages cma reserved
[  329.031368][T11834] netlink: 'syz.0.1705': attribute type 13 has an invalid length.
[  329.061950][T11834] __nla_validate_parse: 5 callbacks suppressed
[  329.061970][T11834] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1705'.
[  329.136660][T11833] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1705'.
[  329.168979][T11833] openvswitch: netlink: Key type 29 is not supported
[  329.246911][T11834] erspan0: refused to change device tx_queue_len
[  329.382229][T11838] netlink: 'syz.2.1707': attribute type 1 has an invalid length.
[  329.952348][T11849] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  329.988428][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  330.108384][T11856] netlink: 'syz.0.1711': attribute type 29 has an invalid length.
[  330.138873][T11856] netlink: 'syz.0.1711': attribute type 29 has an invalid length.
[  330.168364][T11858] netlink: 'syz.0.1711': attribute type 29 has an invalid length.
[  330.203717][T11856] netlink: 'syz.0.1711': attribute type 29 has an invalid length.
[  330.249906][T11859] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1713'.
[  330.285534][T11856] netlink: 'syz.0.1711': attribute type 29 has an invalid length.
[  331.185376][T11903] IPv6: Can't replace route, no match found
[  331.347515][T11907] can: request_module (can-proto-3) failed.
[  332.286358][T11932] syzkaller0: entered promiscuous mode
[  332.317887][T11932] syzkaller0: entered allmulticast mode
[  333.108921][T11943] netlink: set zone limit has 8 unknown bytes
[  336.133615][T11947] A link change request failed with some changes committed already. Interface 
2
6�����!��D may have been left with an inconsistent configuration, please check.
[  336.427920][T11965] netlink: 'syz.3.1739': attribute type 21 has an invalid length.
[  336.591204][T11972] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1742'.
[  338.052850][T12014] delete_channel: no stack
[  338.521704][T12026] netlink: 'syz.1.1757': attribute type 3 has an invalid length.
[  338.536745][T12026] netlink: 'syz.1.1757': attribute type 1 has an invalid length.
[  338.548411][T12026] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.1757'.
[  341.215316][T12091] netlink: 'syz.0.1776': attribute type 9 has an invalid length.
[  341.223117][T12091] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1776'.
[  341.273570][T12095] C: renamed from team_slave_0
[  341.292420][T12095] netlink: 'syz.2.1778': attribute type 4 has an invalid length.
[  341.306431][T12095] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  341.342318][T12097] netlink: 'syz.0.1779': attribute type 3 has an invalid length.
[  341.350414][T12097] netlink: 'syz.0.1779': attribute type 5 has an invalid length.
[  341.681181][T12108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1782'.
[  341.705542][T12108] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1782'.
[  341.748387][T12108] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1782'.
[  344.902917][T12129] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1787'.
[  345.112631][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  345.415629][T12143] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1793'.
[  345.727590][T12158] netlink: 'syz.3.1797': attribute type 19 has an invalid length.
[  348.137689][T12217] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1810'.
[  348.162418][T12217] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  348.170921][T12217] CPU: 0 PID: 12217 Comm: syz.2.1810 Not tainted syzkaller #0
[  348.178439][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  348.188543][T12217] Call Trace:
[  348.191870][T12217]  <TASK>
[  348.194831][T12217]  dump_stack_lvl+0x18c/0x250
[  348.199545][T12217]  ? show_regs_print_info+0x20/0x20
[  348.204759][T12217]  ? load_image+0x420/0x420
[  348.209310][T12217]  sysfs_warn_dup+0x8e/0xa0
[  348.213854][T12217]  sysfs_do_create_link_sd+0xc0/0x110
[  348.219288][T12217]  device_add_class_symlinks+0x1cf/0x240
[  348.224970][T12217]  device_add+0x507/0xc50
[  348.229344][T12217]  wiphy_register+0x1dad/0x2ae0
[  348.234253][T12217]  ? cfg80211_event_work+0x40/0x40
[  348.239379][T12217]  ? minstrel_ht_alloc+0x88a/0x990
[  348.244518][T12217]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  348.250617][T12217]  ieee80211_register_hw+0x3464/0x4250
[  348.256128][T12217]  ? ieee80211_tasklet_handler+0x20/0x20
[  348.261773][T12217]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  348.267690][T12217]  ? __debug_object_init+0xec/0x450
[  348.272915][T12217]  ? __asan_memset+0x22/0x40
[  348.277553][T12217]  ? __hrtimer_init+0x186/0x270
[  348.282452][T12217]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  348.288240][T12217]  ? mac80211_hwsim_free+0x220/0x220
[  348.293544][T12217]  ? rcu_is_watching+0x15/0xb0
[  348.298330][T12217]  ? kstrndup+0xbd/0x140
[  348.302607][T12217]  hwsim_new_radio_nl+0xdc9/0x1a90
[  348.307768][T12217]  ? __nla_validate+0x50/0x50
[  348.312480][T12217]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  348.318859][T12217]  ? __nla_parse+0x40/0x50
[  348.323295][T12217]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  348.329663][T12217]  genl_family_rcv_msg_doit+0x211/0x310
[  348.335228][T12217]  ? end_current_label_crit_section+0x170/0x170
[  348.341496][T12217]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  348.347417][T12217]  ? bpf_lsm_capable+0x9/0x10
[  348.352116][T12217]  ? security_capable+0x89/0xb0
[  348.357003][T12217]  genl_rcv_msg+0x619/0x7a0
[  348.361534][T12217]  ? genl_bind+0x360/0x360
[  348.365962][T12217]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  348.372311][T12217]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  348.378943][T12217]  netlink_rcv_skb+0x241/0x4d0
[  348.383739][T12217]  ? genl_bind+0x360/0x360
[  348.388178][T12217]  ? netlink_ack+0x1180/0x1180
[  348.392980][T12217]  ? __lock_acquire+0x7d40/0x7d40
[  348.398035][T12217]  ? down_read+0x1ac/0x2e0
[  348.402477][T12217]  genl_rcv+0x28/0x40
[  348.406481][T12217]  netlink_unicast+0x751/0x8d0
[  348.411275][T12217]  netlink_sendmsg+0x8d0/0xbf0
[  348.416052][T12217]  ? perf_trace_lock+0x304/0x3b0
[  348.421012][T12217]  ? netlink_getsockopt+0x590/0x590
[  348.426228][T12217]  ? aa_sock_msg_perm+0x94/0x150
[  348.431183][T12217]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  348.436488][T12217]  ? security_socket_sendmsg+0x80/0xa0
[  348.441962][T12217]  ? netlink_getsockopt+0x590/0x590
[  348.447268][T12217]  ____sys_sendmsg+0x5ba/0x960
[  348.452517][T12217]  ? __asan_memset+0x22/0x40
[  348.457142][T12217]  ? __sys_sendmsg_sock+0x30/0x30
[  348.462181][T12217]  ? __import_iovec+0x5f2/0x850
[  348.467078][T12217]  ? import_iovec+0x73/0xa0
[  348.471600][T12217]  ___sys_sendmsg+0x2a6/0x360
[  348.476303][T12217]  ? __sys_sendmsg+0x2a0/0x2a0
[  348.481166][T12217]  __se_sys_sendmsg+0x1c2/0x2b0
[  348.486043][T12217]  ? __x64_sys_sendmsg+0x80/0x80
[  348.491022][T12217]  ? lockdep_hardirqs_on+0x98/0x150
[  348.496246][T12217]  do_syscall_64+0x55/0xb0
[  348.500673][T12217]  ? clear_bhb_loop+0x40/0x90
[  348.505365][T12217]  ? clear_bhb_loop+0x40/0x90
[  348.510061][T12217]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  348.515972][T12217] RIP: 0033:0x7fe5dcb9ce59
[  348.520398][T12217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.540017][T12217] RSP: 002b:00007fe5dadb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  348.548450][T12217] RAX: ffffffffffffffda RBX: 00007fe5dce16180 RCX: 00007fe5dcb9ce59
[  348.556519][T12217] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  348.564493][T12217] RBP: 00007fe5dcc32d6f R08: 0000000000000000 R09: 0000000000000000
[  348.572470][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.580447][T12217] R13: 00007fe5dce16218 R14: 00007fe5dce16180 R15: 00007fffe2df8998
[  348.588453][T12217]  </TASK>
[  348.702346][T12212] netlink: 'syz.0.1812': attribute type 21 has an invalid length.
[  348.729289][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1812'.
[  349.272261][T12244] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1821'.
[  349.327059][T12244] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1821'.
[  349.346172][T12247] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1821'.
[  349.516855][T12252] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  349.524675][T12252] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1823'.
[  349.561293][T12254] netlink: 127924 bytes leftover after parsing attributes in process `syz.1.1823'.
[  349.593429][T12254] netlink: 16384 bytes leftover after parsing attributes in process `syz.1.1823'.
[  350.281421][T12268] netlink: 'syz.1.1829': attribute type 10 has an invalid length.
[  350.293956][T12270] netlink: 'syz.2.1830': attribute type 153 has an invalid length.
[  350.304167][T12270] netlink: 'syz.2.1830': attribute type 1 has an invalid length.
[  350.314271][T12270] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1830'.
[  350.688822][T12268] team0 (unregistering): Port device C removed
[  350.741748][T12268] team0 (unregistering): Port device team_slave_1 removed
[  350.767996][T12268] veth1_vlan: left allmulticast mode
[  350.802017][T12268] team0 (unregistering): Port device macvlan0 removed
[  350.830951][T12268] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.857876][T12268] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.881328][T12268] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.904529][T12268] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.952610][T12268] team0 (unregistering): Port device geneve1 removed
[  351.029607][T12276] netlink: 'syz.3.1831': attribute type 10 has an invalid length.
[  351.047916][T12276] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  351.349420][T12286] can: request_module (can-proto-0) failed.
[  352.150180][T12328] netlink: 'syz.3.1843': attribute type 21 has an invalid length.
[  352.173751][T12328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1843'.
[  352.567038][T12339] netlink: 'syz.0.1848': attribute type 6 has an invalid length.
[  353.537228][T12352] netlink: 'syz.2.1853': attribute type 21 has an invalid length.
[  353.547974][T12352] __nla_validate_parse: 4 callbacks suppressed
[  353.548027][T12352] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.1853'.
[  354.982155][T12376] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.1860'.
[  355.480199][T12387] netlink: 'syz.2.1865': attribute type 3 has an invalid length.
[  355.498690][T12387] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1865'.
[  355.539202][T12390] netlink: 'syz.2.1865': attribute type 3 has an invalid length.
[  355.567559][T12390] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1865'.
[  356.025294][T12401] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1867'.
[  356.928342][T12430] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  357.335054][T12435] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1873'.
[  357.517832][T12439] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1874'.
[  357.888007][T12445] netlink: 'syz.0.1876': attribute type 10 has an invalid length.
[  358.116742][T12450] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1879'.
[  358.614058][T12457] syzkaller0: entered promiscuous mode
[  358.776953][T12457] syzkaller0: entered allmulticast mode
[  358.890185][T12465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1884'.
[  362.501961][T12490] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.1891'.
[  362.502597][T12475] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1887'.
[  363.188956][T12519] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1899'.
[  363.672642][T12531] netlink: 'syz.1.1904': attribute type 1 has an invalid length.
[  363.682534][T12531] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1904'.
[  363.692853][T12531] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1904'.
[  363.744309][T12528] netlink: 'syz.0.1903': attribute type 9 has an invalid length.
[  363.753052][T12528] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1903'.
[  363.820012][T12535] pim6reg0: tun_chr_ioctl cmd 1074025675
[  363.831306][T12535] pim6reg0: persist enabled
[  364.133453][T12546] pim6reg1: entered promiscuous mode
[  364.139501][T12546] pim6reg1: entered allmulticast mode
[  364.589314][T12554] tun0: tun_chr_ioctl cmd 1074025681
[  364.885320][T12562] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1914'.
[  364.960418][T12564] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1915'.
[  365.050120][T12565] netlink: 'syz.3.1913': attribute type 41 has an invalid length.
[  365.075925][T12565] netlink: 'syz.3.1913': attribute type 41 has an invalid length.
[  365.982253][T12602] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1928'.
[  367.195482][T12641] netlink: 'syz.0.1940': attribute type 1 has an invalid length.
[  367.418115][T12654] netlink: 'syz.3.1943': attribute type 2 has an invalid length.
[  367.436138][T12654] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1943'.
[  367.502235][T12654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1943'.
[  367.561136][T12654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1943'.
[  367.647081][T12664] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1946'.
[  367.666077][T12664] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.1946'.
[  367.678650][T12664] tipc: Started in network mode
[  367.698458][T12664] tipc: Node identity 1a, cluster identity 4711
[  367.714139][T12664] tipc: Node number set to 26
[  367.877547][T12672] netlink: 'syz.3.1948': attribute type 21 has an invalid length.
[  367.900159][T12672] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1948'.
[  368.106271][T12683] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  368.329240][T12687] netlink: 'syz.3.1952': attribute type 3 has an invalid length.
[  368.339595][T12687] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1952'.
[  370.221601][T12708] netlink: 'syz.3.1957': attribute type 21 has an invalid length.
[  370.243255][T12708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1957'.
[  370.781138][T12725] netlink: 'syz.1.1964': attribute type 29 has an invalid length.
[  370.858330][T12725] netlink: 'syz.1.1964': attribute type 29 has an invalid length.
[  374.028384][T12745] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1969'.
[  375.064102][T12757] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  375.075857][T12757] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  375.108381][T12758] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  375.150801][T12758] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  375.171072][T12761] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1976'.
[  375.442162][T12779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1982'.
[  375.583405][T12786] delete_channel: no stack
[  375.684809][T12795] netlink: 'syz.2.1988': attribute type 1 has an invalid length.
[  377.503361][T12812] netlink: 'syz.0.1993': attribute type 7 has an invalid length.
[  377.630534][T12815] netlink: 'syz.3.1995': attribute type 29 has an invalid length.
[  377.660206][T12815] netlink: 'syz.3.1995': attribute type 29 has an invalid length.
[  377.696947][T12815] netlink: 'syz.3.1995': attribute type 29 has an invalid length.
[  377.718633][T12824] netlink: 'syz.2.1994': attribute type 29 has an invalid length.
[  377.731606][T12824] netlink: 'syz.2.1994': attribute type 29 has an invalid length.
[  377.753407][T12824] netlink: 'syz.2.1994': attribute type 29 has an invalid length.
[  378.001100][T12830] netlink: 'syz.0.1998': attribute type 21 has an invalid length.
[  378.038858][T12830] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1998'.
[  378.072529][T12829] netlink: 'syz.0.1998': attribute type 21 has an invalid length.
[  378.110619][T12829] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1998'.
[  378.464599][T12846] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2006'.
[  378.839229][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  378.846030][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  380.172452][T12874] delete_channel: no stack
[  380.853898][T12896] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2016'.
[  381.197415][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2019'.
[  381.225702][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2019'.
[  381.536451][T12916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2019'.
[  381.921201][T12924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2021'.
[  382.349376][T12931] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2022'.
[  382.886773][T12949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2029'.
[  383.453141][T12961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2032'.
[  383.536779][T12961] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  383.817947][T12976] validate_nla: 3 callbacks suppressed
[  383.817963][T12976] netlink: 'syz.0.2035': attribute type 13 has an invalid length.
[  383.896461][T12976] netlink: 'syz.0.2035': attribute type 58 has an invalid length.
[  383.930084][T12976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2035'.
[  383.989922][T12977] netlink: 'syz.0.2035': attribute type 13 has an invalid length.
[  384.040980][T12977] netlink: 'syz.0.2035': attribute type 58 has an invalid length.
[  384.085204][T12977] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2035'.
[  384.129788][T12979] netlink: 'syz.1.2036': attribute type 10 has an invalid length.
[  384.769906][T13008] netlink: 'syz.2.2047': attribute type 1 has an invalid length.
[  385.901916][T13031] netlink: 'syz.0.2054': attribute type 9 has an invalid length.
[  385.941429][T13029] netlink: 'syz.2.2053': attribute type 21 has an invalid length.
[  385.962992][T13031] __nla_validate_parse: 2 callbacks suppressed
[  385.963008][T13031] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2054'.
[  385.982925][T13029] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2053'.
[  386.045981][T13029] netlink: 'syz.2.2053': attribute type 4 has an invalid length.
[  386.065171][T13029] netlink: 'syz.2.2053': attribute type 3 has an invalid length.
[  386.073655][T13029] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2053'.
[  386.628873][T13050] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2059'.
[  386.886189][T13058] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2061'.
[  386.920649][T13058] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2061'.
[  387.492605][T13076] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2067'.
[  388.127851][T13090] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2071'.
[  388.281465][T13092] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2079'.
[  389.957155][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 3079
[  390.178884][T13144] validate_nla: 9 callbacks suppressed
[  390.178903][T13144] netlink: 'syz.2.2085': attribute type 4 has an invalid length.
[  390.212909][T13144] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  390.221803][T13141] syzkaller0: entered allmulticast mode
[  390.261593][T13148] netlink: 'syz.1.2088': attribute type 21 has an invalid length.
[  390.335395][T13150] syzkaller0: left allmulticast mode
[  390.593478][T13153] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2089'.
[  391.001969][T13168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2095'.
[  391.020136][T13169] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2092'.
[  391.061367][T13169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  391.165433][T13173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.338410][T13178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2097'.
[  391.353785][T13174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2094'.
[  391.412055][T13178] netlink: 'syz.0.2097': attribute type 10 has an invalid length.
[  391.636955][T13193] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2102'.
[  391.665619][T13193] netlink: zone id is out of range
[  391.777385][T13199] netlink: 'syz.2.2104': attribute type 21 has an invalid length.
[  391.933908][T13206] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2105'.
[  391.958018][T13203] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2105'.
[  392.027519][T13199] netlink: 'syz.2.2104': attribute type 21 has an invalid length.
[  392.036150][T13199] IPv6: NLM_F_CREATE should be specified when creating new route
[  392.044208][T13199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.051647][T13199] IPv6: NLM_F_CREATE should be set when creating new route
[  392.059231][T13199] IPv6: NLM_F_CREATE should be set when creating new route
[  392.066669][T13199] IPv6: NLM_F_CREATE should be set when creating new route
[  392.095990][T13202] netlink: 'syz.2.2104': attribute type 21 has an invalid length.
[  392.103961][T13202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.155224][T13212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.418721][ T5786] Bluetooth: hci0: ISO packet for unknown connection handle 3870
[  392.619249][T13225] netlink: 'syz.0.2111': attribute type 10 has an invalid length.
[  392.630000][T13225] bridge0: port 3(hsr0) entered disabled state
[  392.636461][T13225] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.659467][T13225] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  392.677316][T13225] bridge0: port 3(hsr0) entered blocking state
[  392.683592][T13225] bridge0: port 3(hsr0) entered forwarding state
[  392.690338][T13225] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.697512][T13225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.709071][T13225] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  392.718141][T13227] netlink: 'syz.3.2112': attribute type 3 has an invalid length.
[  392.726299][T13227] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2112'.
[  392.751834][T13225] netlink: 'syz.0.2111': attribute type 19 has an invalid length.
[  392.963627][T13241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2114'.
[  393.083066][T13248] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2117'.
[  393.308420][T13250] IPv6: NLM_F_CREATE should be specified when creating new route
[  393.321840][T13250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.329392][T13250] IPv6: NLM_F_CREATE should be set when creating new route
[  393.336867][T13250] IPv6: NLM_F_CREATE should be set when creating new route
[  393.344779][T13250] IPv6: NLM_F_CREATE should be set when creating new route
[  393.436302][T13253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  396.042778][T13347] __nla_validate_parse: 4 callbacks suppressed
[  396.042819][T13347] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2145'.
[  396.085184][T13347] openvswitch: netlink: IP tunnel dst address not specified
[  396.279839][T13354] syzkaller0: left promiscuous mode
[  396.285308][T13354] syzkaller0: left allmulticast mode
[  396.342789][T13358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2149'.
[  396.689612][T13374] validate_nla: 9 callbacks suppressed
[  396.689630][T13374] netlink: 'syz.2.2153': attribute type 10 has an invalid length.
[  396.936545][T13379] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2156'.
[  397.134986][T13389] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2158'.
[  397.159520][T13389] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2158'.
[  398.097358][T13424] netlink: 'syz.3.2167': attribute type 1 has an invalid length.
[  398.123694][T13424] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2167'.
[  398.166796][T13430] netlink: 'syz.0.2170': attribute type 29 has an invalid length.
[  398.187681][T13430] netlink: 'syz.0.2170': attribute type 29 has an invalid length.
[  398.209645][T13430] netlink: 'syz.0.2170': attribute type 29 has an invalid length.
[  398.269956][T13430] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2170'.
[  399.334578][T13443] netlink: 'syz.0.2173': attribute type 10 has an invalid length.
[  399.433209][T13443] bond0: (slave bond_slave_0): Releasing backup interface
[  399.623396][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'.
[  399.785628][T13462] netlink: 'syz.1.2178': attribute type 10 has an invalid length.
[  399.798881][T13462] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  399.835148][T13461] netlink: 'syz.1.2178': attribute type 10 has an invalid length.
[  399.857720][T13455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2177'.
[  401.495477][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  401.507871][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  401.516918][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  401.527790][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  401.535808][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  401.543222][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  401.846125][T13513] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2192'.
[  402.241504][T13503] chnl_net:caif_netlink_parms(): no params data found
[  402.298809][T13532] sctp: [Deprecated]: syz.3.2197 (pid 13532) Use of struct sctp_assoc_value in delayed_ack socket option.
[  402.298809][T13532] Use struct sctp_sack_info instead
[  402.319713][T13530] netlink: 'syz.0.2198': attribute type 10 has an invalid length.
[  402.349341][T13530] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2198'.
[  402.520030][T13503] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.536370][T13503] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.549453][T13503] bridge_slave_0: entered allmulticast mode
[  402.564835][T13503] bridge_slave_0: entered promiscuous mode
[  402.640149][T13503] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.659484][T13503] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.670739][T13503] bridge_slave_1: entered allmulticast mode
[  402.681028][T13503] bridge_slave_1: entered promiscuous mode
[  402.769893][T13550] netlink: 'syz.2.2201': attribute type 9 has an invalid length.
[  402.793361][T13550] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2201'.
[  402.841497][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.854606][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.902937][T13503] team0: Port device team_slave_0 added
[  402.914578][T13553] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2203'.
[  402.946248][T13553] A link change request failed with some changes committed already. Interface 
2
6�����!��D may have been left with an inconsistent configuration, please check.
[  402.999116][T10371] tipc: Left network mode
[  403.006751][T13503] team0: Port device team_slave_1 added
[  403.192060][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.201303][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.237045][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.625186][ T5777] Bluetooth: hci2: command tx timeout
[  405.715092][ T5777] Bluetooth: hci2: command tx timeout
[  406.205635][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.212618][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.261623][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.570891][T13503] hsr_slave_0: entered promiscuous mode
[  406.593471][T13503] hsr_slave_1: entered promiscuous mode
[  406.619241][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.627359][T13503] Cannot create hsr debugfs directory
[  406.732293][T13597] syzkaller1: tun_chr_ioctl cmd 1074025677
[  406.744798][T13597] syzkaller1: linktype set to 769
[  406.791771][T13600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2212'.
[  407.062017][T13611] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2214'.
[  407.124435][T13611] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.2214'.
[  407.152219][T13611] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2214'.
[  407.795141][ T5777] Bluetooth: hci2: command tx timeout
[  408.234172][T13630] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2218'.
[  408.446110][T13629] syzkaller0: entered promiscuous mode
[  408.451656][T13629] syzkaller0: entered allmulticast mode
[  409.866469][ T5777] Bluetooth: hci2: command tx timeout
[  410.170842][T13652] netlink: 'syz.2.2222': attribute type 25 has an invalid length.
[  410.178928][T13652] netlink: 'syz.2.2222': attribute type 28 has an invalid length.
[  410.306171][T13503] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  410.356460][T13503] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  410.401747][T13658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2223'.
[  410.411501][T13503] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  410.424280][T13503] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  410.606054][T13667] netlink: 'syz.2.2227': attribute type 29 has an invalid length.
[  410.676750][T13667] netlink: 'syz.2.2227': attribute type 29 has an invalid length.
[  413.889027][T13503] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.924012][T13503] 8021q: adding VLAN 0 to HW filter on device team0
[  414.060871][T13703] netlink: 'syz.3.2230': attribute type 29 has an invalid length.
[  414.104542][T10371] veth0_macvtap: left promiscuous mode
[  414.125490][T10371] veth1_vlan: left promiscuous mode
[  414.131045][T10371] veth0_vlan: left promiscuous mode
[  416.792988][T13703] netlink: 'syz.3.2230': attribute type 29 has an invalid length.
[  416.851211][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.858412][ T9596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.908254][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.915449][ T9596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.272394][T13503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.324791][T13503] veth0_vlan: entered promiscuous mode
[  417.355605][T13503] veth1_vlan: entered promiscuous mode
[  417.369927][T13733] netlink: 'syz.3.2234': attribute type 12 has an invalid length.
[  417.379563][T13733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2234'.
[  417.425802][T13503] veth0_macvtap: entered promiscuous mode
[  417.438587][T13503] veth1_macvtap: entered promiscuous mode
[  417.501128][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.518289][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.530994][T13503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.542214][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.554124][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.563997][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.574511][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.586324][T13503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.616013][T13503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.629621][T13503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.639793][T13503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.652237][T13503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.797673][T10382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.825731][T10382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.888515][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.914731][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.269875][T13754] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2183'.
[  418.367684][T13756] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2183'.
[  418.404709][T13754] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2183'.
[  418.447910][T13756] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2183'.
[  418.982223][T13771] pim6reg0: tun_chr_ioctl cmd 1074025672
[  418.988297][T13770] netlink: 'syz.1.2244': attribute type 1 has an invalid length.
[  419.001923][T13771] pim6reg0: ignored: set checksum disabled
[  419.017577][T13770] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2244'.
[  419.404583][T13792] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2252'.
[  419.414643][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'.
[  420.214923][T13811] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2257'.
[  420.635230][T13829] netlink: 'syz.1.2261': attribute type 10 has an invalid length.
[  420.646797][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2261'.
[  420.681687][T13829] batman_adv: batadv0: Adding interface: veth0_vlan
[  420.689418][T13829] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.722486][T13829] batman_adv: batadv0: Interface activated: veth0_vlan
[  420.776332][T13837] netlink: 'syz.0.2264': attribute type 3 has an invalid length.
[  420.977580][T13847] veth1_vlan: mtu less than device minimum
[  421.528294][T13864] netlink: 'syz.2.2273': attribute type 3 has an invalid length.
[  421.538906][T13864] netlink: 'syz.2.2273': attribute type 1 has an invalid length.
[  421.836339][T13881] netlink: 'syz.1.2280': attribute type 1 has an invalid length.
[  421.897252][T13887] netlink: 'syz.2.2281': attribute type 29 has an invalid length.
[  421.906437][T13887] netlink: 'syz.2.2281': attribute type 29 has an invalid length.
[  421.919737][T13888] netlink: 'syz.2.2281': attribute type 29 has an invalid length.
[  421.929497][T13887] netlink: 'syz.2.2281': attribute type 29 has an invalid length.
[  421.959199][T13887] netlink: 'syz.2.2281': attribute type 29 has an invalid length.
[  424.899892][T13906] __nla_validate_parse: 7 callbacks suppressed
[  424.899911][T13906] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2285'.
[  424.959657][T13907] netlink: 'syz.2.2286': attribute type 2 has an invalid length.
[  424.974950][T13907] netlink: 'syz.2.2286': attribute type 8 has an invalid length.
[  424.984679][T13907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2286'.
[  425.846780][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'.
[  426.078301][T13944] netlink: 'syz.3.2299': attribute type 39 has an invalid length.
[  426.518284][T13952] netlink: 'syz.2.2303': attribute type 2 has an invalid length.
[  426.548650][T13952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2303'.
[  426.910273][T13972] netlink: 'syz.2.2308': attribute type 10 has an invalid length.
[  426.926106][T13972] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2308'.
[  427.293731][T13989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2311'.
[  427.318614][T13989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2311'.
[  427.340119][T13984] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2311'.
[  427.379452][T13989] netlink: 63747 bytes leftover after parsing attributes in process `syz.3.2311'.
[  427.407460][T13986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2311'.
[  427.444148][T13984] netlink: 'syz.3.2311': attribute type 3 has an invalid length.
[  427.717651][T13995] netlink: 'syz.3.2315': attribute type 7 has an invalid length.
[  428.066453][T14021] netlink: 'syz.1.2323': attribute type 9 has an invalid length.
[  428.110570][T14014] sock: sock_timestamping_bind_phc: sock not bind to device
[  428.244066][T14019] netlink: 'syz.2.2322': attribute type 1 has an invalid length.
[  428.257099][T14023] netlink: 'syz.1.2323': attribute type 9 has an invalid length.
[  428.423099][T14030] netlink: 'syz.2.2326': attribute type 10 has an invalid length.
[  428.589093][T14035] openvswitch: netlink: Key type 4112 is out of range max 32
[  428.611741][T14035] openvswitch: netlink: Key type 4112 is out of range max 32
[  429.399699][T14029] delete_channel: no stack
[  429.780068][T14082] netlink: 'syz.0.2343': attribute type 3 has an invalid length.
[  430.279915][T14097] netlink: 'syz.0.2348': attribute type 10 has an invalid length.
[  430.302710][T14097] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.314641][T14097] bridge_slave_1: left allmulticast mode
[  430.320978][T14097] bridge_slave_1: left promiscuous mode
[  430.328313][T14097] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.348264][T14097] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  430.571958][T14107] __nla_validate_parse: 9 callbacks suppressed
[  430.571977][T14107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2349'.
[  431.433137][T14120] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2355'.
[  431.451844][T14120] tc_dump_action: action bad kind
[  431.517007][T14120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.714175][T14128] netlink: 'syz.0.2356': attribute type 10 has an invalid length.
[  431.765020][T14128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2356'.
[  431.789594][T14128] bond0: entered promiscuous mode
[  431.797474][T14128] bond_slave_1: entered promiscuous mode
[  431.806601][T14128] bridge0: entered promiscuous mode
[  431.812708][T14128] bridge_slave_1: entered promiscuous mode
[  431.823119][T14128] bridge0: port 2(bond0) entered blocking state
[  431.830410][T14128] bridge0: port 2(bond0) entered disabled state
[  431.838384][T14128] bond0: entered allmulticast mode
[  431.843877][T14128] bond_slave_1: entered allmulticast mode
[  431.850044][T14128] geneve0: entered allmulticast mode
[  431.856461][T14128] bridge0: entered allmulticast mode
[  431.862590][T14128] bridge_slave_1: entered allmulticast mode
[  431.874309][T14128] bond0: left allmulticast mode
[  431.879342][T14128] bond_slave_1: left allmulticast mode
[  431.885189][T14128] geneve0: left allmulticast mode
[  431.890267][T14128] bridge0: left allmulticast mode
[  431.896248][T14128] bridge_slave_1: left allmulticast mode
[  431.903406][T14128] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  431.920219][T14133] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2358'.
[  432.104604][T14137] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2359'.
[  432.155583][T14137] bridge_slave_1: default FDB implementation only supports local addresses
[  432.696123][T14152] syzkaller0: entered promiscuous mode
[  432.701961][T14152] syzkaller0: entered allmulticast mode
[  432.985445][T14152] netlink: 'syz.1.2362': attribute type 10 has an invalid length.
[  433.024036][T14152] macvlan0: entered promiscuous mode
[  433.037526][T14152] macvlan0: entered allmulticast mode
[  433.080769][T14152] veth1_vlan: entered allmulticast mode
[  433.108718][T14152] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  433.264956][T14174] netlink: 'syz.2.2366': attribute type 5 has an invalid length.
[  433.272742][T14174] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2366'.
[  433.747960][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  433.769029][T14185] netlink: 'syz.3.2369': attribute type 9 has an invalid length.
[  433.769367][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  433.794536][T14185] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2369'.
[  433.797908][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  433.816718][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  433.831433][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  433.838106][T14185] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2369'.
[  433.870191][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  433.969498][T14189] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2371'.
[  435.909715][T14185] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.2369'.
[  435.947716][ T5777] Bluetooth: hci1: command tx timeout
[  436.038438][ T9585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.158028][ T9585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.226488][ T9585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.355627][ T9585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.414180][T14184] chnl_net:caif_netlink_parms(): no params data found
[  436.554779][T14184] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.563368][T14184] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.571464][T14184] bridge_slave_0: entered allmulticast mode
[  436.579323][T14184] bridge_slave_0: entered promiscuous mode
[  436.588671][T14184] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.596225][T14184] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.603603][T14184] bridge_slave_1: entered allmulticast mode
[  436.612645][T14184] bridge_slave_1: entered promiscuous mode
[  436.648780][T14184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.661489][T14184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.676465][T14235] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2380'.
[  436.688765][T14237] netlink: 'syz.2.2382': attribute type 29 has an invalid length.
[  436.724486][T14184] team0: Port device team_slave_0 added
[  436.730952][T14237] netlink: 'syz.2.2382': attribute type 29 has an invalid length.
[  436.741560][T14238] netlink: 'syz.2.2382': attribute type 29 has an invalid length.
[  436.797088][T14184] team0: Port device team_slave_1 added
[  436.872588][T14242] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2384'.
[  436.896940][T14242] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8
[  436.971758][T14184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.979268][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.981428][T14242] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2384'.
[  437.014604][T14184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.052567][T14242] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8
[  437.062238][T14184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.083164][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.109401][T14184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.544497][T14184] hsr_slave_0: entered promiscuous mode
[  437.576991][T14184] hsr_slave_1: entered promiscuous mode
[  437.597873][T14184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  437.621685][T14184] Cannot create hsr debugfs directory
[  437.662434][T14264] sit0: entered promiscuous mode
[  437.999776][T14282] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2391'.
[  438.023600][T14281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2390'.
[  438.034071][T14282] netlink: 'syz.2.2391': attribute type 2 has an invalid length.
[  438.043172][ T5777] Bluetooth: hci1: command tx timeout
[  438.063420][T14282] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2391'.
[  438.226312][T14290] netlink: 'syz.2.2393': attribute type 39 has an invalid length.
[  438.402210][T14300] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2395'.
[  439.162139][T14333] netlink: 'syz.2.2403': attribute type 21 has an invalid length.
[  439.191749][T14333] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2403'.
[  439.664664][T14184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  439.676132][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  439.741972][T14184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  439.758064][T14184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  439.774293][T14184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  440.115892][ T5777] Bluetooth: hci1: command tx timeout
[  440.166843][ T9585] hsr_slave_0: left promiscuous mode
[  440.181862][ T9585] hsr_slave_1: left promiscuous mode
[  440.195410][ T9585] hsr0: left allmulticast mode
[  440.201935][ T9585] bridge0: port 3(hsr0) entered disabled state
[  440.228091][ T9585] bridge_slave_0: left allmulticast mode
[  440.242672][ T9585] bridge_slave_0: left promiscuous mode
[  440.251279][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.268668][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  440.275904][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  440.319442][ T9585] veth1_vlan: left promiscuous mode
[  440.325018][ T9585] veth0_vlan: left promiscuous mode
[  440.676835][ T9585] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  441.266693][ T9585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.281690][ T9585] bond_slave_1 (unregistering): left promiscuous mode
[  441.398256][ T9585] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  441.411659][ T9585] bridge_slave_1 (unregistering): left promiscuous mode
[  441.718243][ T9585] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  441.727244][ T9585] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  441.742569][ T9585] bridge0 (unregistering): left promiscuous mode
[  441.749340][ T9585] bond0 (unregistering): Released all slaves
[  441.919756][T14184] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.009157][T14184] 8021q: adding VLAN 0 to HW filter on device team0
[  442.072305][T10371] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.079566][T10371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.119605][T10371] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.126834][T10371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.193722][ T5777] Bluetooth: hci1: command tx timeout
[  442.299714][T14184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  442.821079][T14184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.942632][T14184] veth0_vlan: entered promiscuous mode
[  442.998177][T14184] veth1_vlan: entered promiscuous mode
[  443.071913][T14184] veth0_macvtap: entered promiscuous mode
[  443.166838][T14184] veth1_macvtap: entered promiscuous mode
[  443.257745][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.312219][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.362763][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.391540][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.426856][T14184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.463306][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.495269][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.525365][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.585804][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.614565][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.645400][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.672148][T14184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.726975][T14184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.752284][T14184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.779508][T14184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.803481][T14184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.625193][T10387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.633066][T10387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.708406][ T9585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.732346][ T9585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.019540][T14491] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2438'.
[  445.127104][T14497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.134525][T14497] IPv6: NLM_F_CREATE should be set when creating new route
[  445.141885][T14497] IPv6: NLM_F_CREATE should be set when creating new route
[  445.149189][T14497] IPv6: NLM_F_CREATE should be set when creating new route
[  445.528104][T14513] netlink: 'syz.2.2444': attribute type 27 has an invalid length.
[  445.588193][T14515] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  446.006542][T14522] ��: renamed from team_slave_1
[  446.356020][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  446.370726][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  446.380631][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  446.396812][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  446.408881][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  446.416721][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  446.527029][ T9596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.893721][T14542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2450'.
[  446.987888][ T9596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.030714][T14542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2450'.
[  447.055154][T14545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2450'.
[  447.131717][T14549] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2452'.
[  447.186727][ T9596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.513934][T14559] netlink: 'syz.2.2456': attribute type 12 has an invalid length.
[  447.535115][T14559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2456'.
[  448.272887][T14531] chnl_net:caif_netlink_parms(): no params data found
[  448.505192][ T5777] Bluetooth: hci3: command tx timeout
[  448.670883][T14586] netlink: 'syz.2.2460': attribute type 1 has an invalid length.
[  448.701997][T14586] netlink: 'syz.2.2460': attribute type 3 has an invalid length.
[  448.730284][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2460'.
[  450.590795][ T5777] Bluetooth: hci3: command tx timeout
[  450.674506][T14588] netlink: 'syz.0.2459': attribute type 5 has an invalid length.
[  450.855730][T14531] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.881058][T14531] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.895069][T14531] bridge_slave_0: entered allmulticast mode
[  450.902526][T14531] bridge_slave_0: entered promiscuous mode
[  451.090860][T14531] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.125117][T14531] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.132382][T14531] bridge_slave_1: entered allmulticast mode
[  451.158987][T14531] bridge_slave_1: entered promiscuous mode
[  451.544024][T14628] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2465'.
[  451.698971][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.804255][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.829181][T14622] pim6reg1: entered promiscuous mode
[  451.845063][T14622] pim6reg1: entered allmulticast mode
[  451.913149][T14628] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  451.961585][T14628] CPU: 0 PID: 14628 Comm: syz.2.2465 Not tainted syzkaller #0
[  451.969114][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  451.979205][T14628] Call Trace:
[  451.982503][T14628]  <TASK>
[  451.985455][T14628]  dump_stack_lvl+0x18c/0x250
[  451.990297][T14628]  ? show_regs_print_info+0x20/0x20
[  451.995526][T14628]  ? load_image+0x420/0x420
[  452.000094][T14628]  sysfs_warn_dup+0x8e/0xa0
[  452.004671][T14628]  sysfs_do_create_link_sd+0xc0/0x110
[  452.010082][T14628]  device_add_class_symlinks+0x1cf/0x240
[  452.015793][T14628]  device_add+0x507/0xc50
[  452.020160][T14628]  wiphy_register+0x1dad/0x2ae0
[  452.025165][T14628]  ? cfg80211_event_work+0x40/0x40
[  452.030306][T14628]  ? minstrel_ht_alloc+0x88a/0x990
[  452.035566][T14628]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  452.041757][T14628]  ieee80211_register_hw+0x3464/0x4250
[  452.047323][T14628]  ? ieee80211_tasklet_handler+0x20/0x20
[  452.052976][T14628]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  452.058976][T14628]  ? __debug_object_init+0xec/0x450
[  452.064319][T14628]  ? __asan_memset+0x22/0x40
[  452.068950][T14628]  ? __hrtimer_init+0x186/0x270
[  452.073873][T14628]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  452.079690][T14628]  ? mac80211_hwsim_free+0x220/0x220
[  452.085009][T14628]  ? rcu_is_watching+0x15/0xb0
[  452.089800][T14628]  ? kstrndup+0xbd/0x140
[  452.094117][T14628]  hwsim_new_radio_nl+0xdc9/0x1a90
[  452.099262][T14628]  ? __nla_validate+0x50/0x50
[  452.103981][T14628]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  452.110357][T14628]  ? __nla_parse+0x40/0x50
[  452.114802][T14628]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  452.121280][T14628]  genl_family_rcv_msg_doit+0x211/0x310
[  452.126858][T14628]  ? end_current_label_crit_section+0x170/0x170
[  452.133185][T14628]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  452.139121][T14628]  ? bpf_lsm_capable+0x9/0x10
[  452.143865][T14628]  ? security_capable+0x89/0xb0
[  452.148770][T14628]  genl_rcv_msg+0x619/0x7a0
[  452.153310][T14628]  ? genl_bind+0x360/0x360
[  452.157753][T14628]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  452.164113][T14628]  ? perf_trace_lock+0xfc/0x3b0
[  452.169003][T14628]  netlink_rcv_skb+0x241/0x4d0
[  452.173795][T14628]  ? genl_bind+0x360/0x360
[  452.178241][T14628]  ? netlink_ack+0x1180/0x1180
[  452.183025][T14628]  ? __lock_acquire+0x7d40/0x7d40
[  452.188061][T14628]  ? down_read+0x1ac/0x2e0
[  452.192484][T14628]  genl_rcv+0x28/0x40
[  452.196465][T14628]  netlink_unicast+0x751/0x8d0
[  452.201238][T14628]  netlink_sendmsg+0x8d0/0xbf0
[  452.206015][T14628]  ? netlink_getsockopt+0x590/0x590
[  452.211217][T14628]  ? aa_sock_msg_perm+0x94/0x150
[  452.216157][T14628]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  452.221446][T14628]  ? security_socket_sendmsg+0x80/0xa0
[  452.226909][T14628]  ? netlink_getsockopt+0x590/0x590
[  452.232110][T14628]  ____sys_sendmsg+0x5ba/0x960
[  452.236981][T14628]  ? __asan_memset+0x22/0x40
[  452.241577][T14628]  ? __sys_sendmsg_sock+0x30/0x30
[  452.246603][T14628]  ? __import_iovec+0x5f2/0x850
[  452.251483][T14628]  ? import_iovec+0x73/0xa0
[  452.255987][T14628]  ___sys_sendmsg+0x2a6/0x360
[  452.260670][T14628]  ? __sys_sendmsg+0x2a0/0x2a0
[  452.265494][T14628]  __se_sys_sendmsg+0x1c2/0x2b0
[  452.270374][T14628]  ? __x64_sys_sendmsg+0x80/0x80
[  452.275342][T14628]  ? lockdep_hardirqs_on+0x98/0x150
[  452.280563][T14628]  do_syscall_64+0x55/0xb0
[  452.284984][T14628]  ? clear_bhb_loop+0x40/0x90
[  452.289793][T14628]  ? clear_bhb_loop+0x40/0x90
[  452.294476][T14628]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.300387][T14628] RIP: 0033:0x7fe5dcb9ce59
[  452.304804][T14628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.324412][T14628] RSP: 002b:00007fe5da14b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.332846][T14628] RAX: ffffffffffffffda RBX: 00007fe5dce16450 RCX: 00007fe5dcb9ce59
[  452.340823][T14628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d
[  452.348814][T14628] RBP: 00007fe5dcc32d6f R08: 0000000000000000 R09: 0000000000000000
[  452.356787][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.364761][T14628] R13: 00007fe5dce164e8 R14: 00007fe5dce16450 R15: 00007fffe2df8998
[  452.372746][T14628]  </TASK>
[  452.665483][ T5777] Bluetooth: hci3: command tx timeout
[  452.746986][T14531] team0: Port device team_slave_0 added
[  452.816699][T14531] team0: Port device team_slave_1 added
[  452.928963][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.944982][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.999093][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.163185][T14661] netlink: 'syz.0.2471': attribute type 3 has an invalid length.
[  453.203437][T14661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2471'.
[  453.220738][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.250733][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.304432][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.537905][T14531] hsr_slave_0: entered promiscuous mode
[  453.581558][T14531] hsr_slave_1: entered promiscuous mode
[  453.830461][T14677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.848082][T14677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.575354][T14702] netlink: 207808 bytes leftover after parsing attributes in process `syz.2.2477'.
[  454.651895][T14703] netlink: 207808 bytes leftover after parsing attributes in process `syz.2.2477'.
[  454.747170][ T5777] Bluetooth: hci3: command tx timeout
[  454.803483][T14707] netlink: 'syz.0.2479': attribute type 29 has an invalid length.
[  454.857982][T14707] netlink: 'syz.0.2479': attribute type 29 has an invalid length.
[  454.938176][T14711] netlink: 'syz.0.2479': attribute type 29 has an invalid length.
[  455.125496][T14715] netlink: 'syz.0.2479': attribute type 29 has an invalid length.
[  455.144474][T14707] netlink: 'syz.0.2479': attribute type 29 has an invalid length.
[  455.834591][ T9596] hsr_slave_0: left promiscuous mode
[  455.848808][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.873719][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.904754][T14752] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2487'.
[  455.926525][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.933985][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.957977][ T9596] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  455.971199][ T9596] batman_adv: batadv0: Removing interface: virt_wifi0
[  456.035618][ T9596] veth1_vlan: left promiscuous mode
[  456.041033][ T9596] veth0_vlan: left promiscuous mode
[  456.759045][ T9596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.768548][ T9596] bond_slave_1 (unregistering): left promiscuous mode
[  457.051352][T14780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2494'.
[  457.212497][ T9596] bond0 (unregistering): Released all slaves
[  457.687701][T14531] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  457.722906][T14531] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  457.763623][T14531] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  457.806559][T14531] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  458.096181][T14531] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.139167][T14531] 8021q: adding VLAN 0 to HW filter on device team0
[  458.162165][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.169400][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.217737][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.224989][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.764562][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.806432][T14848] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2508'.
[  458.933731][T14531] veth0_vlan: entered promiscuous mode
[  458.970363][T14531] veth1_vlan: entered promiscuous mode
[  459.018880][T14531] veth0_macvtap: entered promiscuous mode
[  459.048891][T14531] veth1_macvtap: entered promiscuous mode
[  459.131966][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.163540][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.208662][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.252097][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.283779][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.332566][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.366583][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.393874][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.438505][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.454520][T14854] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.2509'.
[  459.481416][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.553682][T14531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.603244][T14531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.649242][T14531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.685402][T14531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.911044][T14864] netlink: 'syz.0.2511': attribute type 29 has an invalid length.
[  461.783379][T14864] netlink: 'syz.0.2511': attribute type 29 has an invalid length.
[  462.059118][T10378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.092330][T10378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.163147][T10378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.187213][T10378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.574153][T14902] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.2516'.
[  463.326981][T14922] netlink: 'syz.0.2518': attribute type 3 has an invalid length.
[  463.425213][T14922] netlink: 'syz.0.2518': attribute type 9 has an invalid length.
[  464.198967][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  464.208874][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  464.219563][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  464.230480][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  464.250973][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  464.259504][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  464.312098][T14952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2523'.
[  464.369256][T14952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2523'.
[  464.449810][ T9585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.474261][T14953] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2523'.
[  464.510118][T14952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2523'.
[  464.632934][ T9585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.851131][ T9585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.090211][ T9585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.375478][T14949] chnl_net:caif_netlink_parms(): no params data found
[  465.463313][T15004] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2529'.
[  465.563836][T15007] mac80211_hwsim hwsim40 ..�c��: renamed from wlan1 (while UP)
[  465.600793][ T9585] tipc: Left network mode
[  465.832383][T14949] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.862561][T15019] netlink: 'syz.3.2533': attribute type 4 has an invalid length.
[  465.864475][T14949] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.882203][T15019] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2533'.
[  465.890583][T14949] bridge_slave_0: entered allmulticast mode
[  465.904159][T14949] bridge_slave_0: entered promiscuous mode
[  465.912662][T15014] netlink: 'syz.1.2531': attribute type 10 has an invalid length.
[  465.924340][T15014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2531'.
[  465.938867][T15014] ipvlan1: entered promiscuous mode
[  465.944646][T15014] ipvlan1: entered allmulticast mode
[  465.956376][T15014] veth0_vlan: entered allmulticast mode
[  465.980802][T15019] netlink: 'syz.3.2533': attribute type 9 has an invalid length.
[  465.999494][T15014] bridge0: port 3(ipvlan1) entered blocking state
[  466.007253][T15019] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2533'.
[  466.007684][T15014] bridge0: port 3(ipvlan1) entered disabled state
[  466.043102][T15014] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  466.142209][T14949] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.158140][T14949] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.168854][T14949] bridge_slave_1: entered allmulticast mode
[  466.208146][T14949] bridge_slave_1: entered promiscuous mode
[  466.346183][ T5777] Bluetooth: hci0: command tx timeout
[  466.451633][T15029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.483951][T14949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.519357][T14949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.665309][ T5777] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  466.869102][T14949] team0: Port device team_slave_0 added
[  466.993244][T14949] team0: Port device team_slave_1 added
[  467.010526][T15046] netlink: 'syz.3.2537': attribute type 21 has an invalid length.
[  467.066578][T15046] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2537'.
[  468.428354][ T5777] Bluetooth: hci0: command tx timeout
[  469.943810][T14949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.951222][T14949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.979894][T14949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.021741][T14949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.045029][T14949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.126498][T14949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.242417][T15085] netlink: 'syz.1.2544': attribute type 21 has an invalid length.
[  470.260125][T15085] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2544'.
[  470.514938][ T5777] Bluetooth: hci0: command tx timeout
[  471.484825][T14949] hsr_slave_0: entered promiscuous mode
[  471.515526][T14949] hsr_slave_1: entered promiscuous mode
[  471.522573][T14949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.542802][T14949] Cannot create hsr debugfs directory
[  471.550294][T15096] netlink: 'syz.1.2548': attribute type 10 has an invalid length.
[  471.591297][T15096] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  472.585187][ T5777] Bluetooth: hci0: command tx timeout
[  475.157572][ T9585] hsr_slave_0: left promiscuous mode
[  475.178138][ T9585] hsr_slave_1: left promiscuous mode
[  475.192153][ T9585] bridge_slave_1: left allmulticast mode
[  475.200469][ T9585] bridge_slave_1: left promiscuous mode
[  475.220668][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.237940][ T9585] bridge_slave_0: left promiscuous mode
[  475.248052][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.342113][ T9585] veth1_macvtap: left allmulticast mode
[  475.352075][ T9585] veth1_macvtap: left promiscuous mode
[  475.358461][ T9585] veth0_macvtap: left promiscuous mode
[  475.364544][ T9585] veth1_vlan: left allmulticast mode
[  475.376445][ T9585] veth0_vlan: left promiscuous mode
[  478.699468][T14949] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  478.710721][T14949] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  478.742704][T14949] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  478.773233][T14949] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  478.980406][T14949] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.047683][T14949] 8021q: adding VLAN 0 to HW filter on device team0
[  479.081704][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.088935][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.118954][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.126254][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.757023][T14949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.831415][T14949] veth0_vlan: entered promiscuous mode
[  479.861039][T14949] veth1_vlan: entered promiscuous mode
[  479.957831][T14949] veth0_macvtap: entered promiscuous mode
[  480.024423][T14949] veth1_macvtap: entered promiscuous mode
[  480.066978][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.079850][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.092184][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.103094][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.113820][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.129863][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.143991][T14949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.176825][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.192543][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.214992][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.231645][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.242404][T14949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.253238][T14949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.265994][T14949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.304190][T14949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.313598][T14949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.329371][T14949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.339717][T14949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.492306][ T9596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.519167][ T9596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.621982][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.667620][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.947386][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2573'.
[  481.240303][T15275] netlink: 'syz.2.2575': attribute type 39 has an invalid length.
[  481.534592][T15288] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2578'.
[  481.544702][T15288] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  481.597756][T15286] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2577'.
[  482.857375][T15307] netlink: 'syz.3.2583': attribute type 9 has an invalid length.
[  482.874233][T15307] netlink: 247 bytes leftover after parsing attributes in process `syz.3.2583'.
[  483.234652][T15322] netlink: 'syz.3.2587': attribute type 21 has an invalid length.
[  483.243178][T15322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2587'.
[  483.256071][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2587'.
[  483.446765][T15325] netlink: 'syz.2.2588': attribute type 10 has an invalid length.
[  483.454808][T15325] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2588'.
[  484.183191][T15344] netlink: 'syz.0.2594': attribute type 10 has an invalid length.
[  484.241009][T15344] team0: Device wg1 is of different type
[  485.356141][T15383] tap0: tun_chr_ioctl cmd 1074025677
[  485.361923][T15383] tap0: linktype set to 778
[  485.369341][T15383] tap0: tun_chr_ioctl cmd 2147767511
[  485.678984][T15390] netlink: 'syz.1.2607': attribute type 1 has an invalid length.
[  485.693533][T15390] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2607'.
[  486.210843][T15422] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2618'.
[  486.299616][T15424] netlink: 'syz.3.2619': attribute type 10 has an invalid length.
[  486.333432][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2619'.
[  486.387233][T15424] batadv0: entered promiscuous mode
[  486.443320][T15424] batadv0: entered allmulticast mode
[  486.497359][T15424] bridge0: port 3(batadv0) entered blocking state
[  486.552278][T15424] bridge0: port 3(batadv0) entered disabled state
[  486.674949][T15424] bridge0: port 3(batadv0) entered blocking state
[  486.683767][T15424] bridge0: port 3(batadv0) entered forwarding state
[  486.718039][ T9596] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  486.727973][ T9596] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  486.938835][T15435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2621'.
[  487.499063][T15456] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2628'.
[  487.543714][T15456] netlink: 'syz.1.2628': attribute type 28 has an invalid length.
[  487.552185][T15456] netlink: 'syz.1.2628': attribute type 29 has an invalid length.
[  487.577468][T15456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2628'.
[  487.912553][T15476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2633'.
[  489.745492][T15532] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2648'.
[  490.282784][T15542] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2651'.
[  491.088646][T15555] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2656'.
[  491.115043][T15555] openvswitch: netlink: Key type 29 is not supported
[  491.156884][T15555] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2656'.
[  491.371192][T15571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2659'.
[  491.698703][T15583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2662'.
[  491.787030][T15583] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  491.930391][T15586] delete_channel: no stack
[  491.977555][T15594] netlink: 'syz.1.2667': attribute type 9 has an invalid length.
[  491.986785][T15594] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2667'.
[  492.631544][T15618] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2673'.
[  492.776797][T15614] sit0: entered allmulticast mode
[  492.865631][T15625] sit0: entered promiscuous mode
[  492.978766][T15635] Q�6�`Ҙ: renamed from lo (while UP)
[  493.007514][T15635] sock: sock_timestamping_bind_phc: sock not bind to device
[  494.271426][T15693] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.2692'.
[  494.929845][T15692] netlink: 'syz.3.2692': attribute type 21 has an invalid length.
[  494.939865][T15692] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2692'.
[  494.963148][T15692] netlink: 'syz.3.2692': attribute type 4 has an invalid length.
[  494.984998][T15692] netlink: 'syz.3.2692': attribute type 5 has an invalid length.
[  494.992786][T15692] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2692'.
[  495.107186][T15697] delete_channel: no stack
[  495.111786][T15697] delete_channel: no stack
[  495.179037][T15697] netlink: 'syz.1.2693': attribute type 21 has an invalid length.
[  495.198249][T15697] netlink: 'syz.1.2693': attribute type 6 has an invalid length.
[  495.215068][T15703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2695'.
[  495.311701][T15703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.329925][T15703] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.350476][T15703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.361412][T15703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.213771][T15718] netlink: 'syz.1.2699': attribute type 8 has an invalid length.
[  496.375845][T15724] netlink: 'syz.2.2700': attribute type 8 has an invalid length.
[  496.383730][T15724] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2700'.
[  496.510305][T15728] netlink: 'syz.1.2702': attribute type 29 has an invalid length.
[  496.590711][T15728] netlink: 'syz.1.2702': attribute type 29 has an invalid length.
[  496.753681][T15728] sit0: left promiscuous mode
[  496.769448][T15728] sit0: entered allmulticast mode
[  497.085408][T15736] validate_nla: 3 callbacks suppressed
[  497.085427][T15736] netlink: 'syz.0.2703': attribute type 12 has an invalid length.
[  497.156341][T15736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2703'.
[  497.219276][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2703'.
[  498.051744][T15749] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2708'.
[  499.035324][T15770] netlink: 'syz.1.2716': attribute type 41 has an invalid length.
[  499.879561][T15792] netlink: 'syz.3.2720': attribute type 3 has an invalid length.
[  499.895864][T15792] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2720'.
[  500.012451][T15796] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2722'.
[  501.528682][T15836] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2733'.
[  501.565244][T15836] openvswitch: netlink: Key type 29 is not supported
[  501.594805][T15845] netlink: 'syz.2.2733': attribute type 10 has an invalid length.
[  501.634262][T15845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2733'.
[  501.664689][T15845] team0: entered promiscuous mode
[  501.693138][T15845] team_slave_0: entered promiscuous mode
[  501.721477][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  501.728067][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  501.732112][T15845] team_slave_1: entered promiscuous mode
[  501.752591][T15845] team0: entered allmulticast mode
[  501.772463][T15845] team_slave_0: entered allmulticast mode
[  501.793562][T15845] team_slave_1: entered allmulticast mode
[  501.818566][T15845] bridge0: port 3(team0) entered blocking state
[  501.840937][T15845] bridge0: port 3(team0) entered disabled state
[  501.861255][T15845] bridge0: port 3(team0) entered blocking state
[  501.868327][T15845] bridge0: port 3(team0) entered forwarding state
[  503.718747][T15852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2736'.
[  504.009989][T15857] netlink: 'syz.1.2738': attribute type 3 has an invalid length.
[  504.039878][T15857] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2738'.
[  504.087269][T15857] netlink: 'syz.1.2738': attribute type 12 has an invalid length.
[  504.109697][T15857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2738'.
[  504.180720][T15868] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2740'.
[  504.501841][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 5
[  506.843679][T15880] netlink: 'syz.3.2743': attribute type 10 has an invalid length.
[  506.880850][T15880] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.939832][T15880] bridge_slave_1: left allmulticast mode
[  506.964379][T15880] bridge_slave_1: left promiscuous mode
[  506.983853][T15880] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.018923][T15880] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  507.244218][T15893] netlink: 'syz.2.2746': attribute type 4 has an invalid length.
[  507.275487][T15893] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2746'.
[  507.455282][T15897] netlink: 'syz.0.2747': attribute type 3 has an invalid length.
[  507.463121][T15897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2747'.
[  507.496851][T15905] netlink: 'syz.3.2748': attribute type 1 has an invalid length.
[  507.515119][T15905] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2748'.
[  507.561156][T15905] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2748'.
[  507.583831][T15902] netlink: 'syz.1.2750': attribute type 16 has an invalid length.
[  507.619158][T15902] netlink: 'syz.1.2750': attribute type 3 has an invalid length.
[  507.639784][T15902] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2750'.
[  507.791853][T15905] team0: Port device team_slave_0 removed
[  507.861170][T15905] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  507.995767][T15920] netlink: 'syz.1.2753': attribute type 10 has an invalid length.
[  508.048844][T15923] netlink: 'syz.1.2753': attribute type 9 has an invalid length.
[  508.089011][T15923] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2753'.
[  508.199212][T15920] team0: Device hsr_slave_0 failed to register rx_handler
[  508.886219][T15937] team0: Device hsr_slave_0 failed to register rx_handler
[  508.954533][T15939] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2756'.
[  509.072285][T15931] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2757'.
[  509.806199][T15965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2766'.
[  510.045585][T15977] netlink: set zone limit has 8 unknown bytes
[  510.142891][T15977] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2769'.
[  511.125766][T16021] syz.3.2781[16021] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.125950][T16021] syz.3.2781[16021] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.609686][T16025] validate_nla: 2 callbacks suppressed
[  511.609706][T16025] netlink: 'syz.0.2782': attribute type 29 has an invalid length.
[  511.672456][T16025] netlink: 'syz.0.2782': attribute type 29 has an invalid length.
[  512.488319][T16055] __nla_validate_parse: 4 callbacks suppressed
[  512.488377][T16055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2791'.
[  512.540116][T16055] netlink: 'syz.3.2791': attribute type 12 has an invalid length.
[  512.565096][T16055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2791'.
[  513.300600][T16077] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2798'.
[  514.018206][T16089] netlink: 'syz.1.2802': attribute type 4 has an invalid length.
[  514.049340][T16089] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2802'.
[  514.098951][T16089] netlink: 'syz.1.2802': attribute type 40 has an invalid length.
[  515.347889][T16120] wg2: entered promiscuous mode
[  515.375536][T16120] wg2: entered allmulticast mode
[  515.631139][T16133] netlink: 'syz.1.2818': attribute type 39 has an invalid length.
[  516.599817][T16158] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.2829'.
[  517.413991][T16188] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2838'.
[  517.528818][T16189] netlink: 'syz.1.2838': attribute type 4 has an invalid length.
[  517.565610][T16189] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2838'.
[  517.721242][T16192] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2839'.
[  517.778143][T16189] .`: renamed from bond0 (while UP)
[  517.905042][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2839'.
[  517.928029][T16193] netlink: 'syz.2.2839': attribute type 21 has an invalid length.
[  518.903838][T16220] netlink: 'syz.2.2847': attribute type 10 has an invalid length.
[  518.913256][T16220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2847'.
[  518.942766][T16220] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  519.647403][T16242] netlink: 'syz.2.2855': attribute type 28 has an invalid length.
[  519.687037][T16247] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2855'.
[  519.712124][T16242] netlink: 'syz.2.2855': attribute type 29 has an invalid length.
[  519.726388][T16244] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2856'.
[  519.759857][T16242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2855'.
[  519.783614][T16244] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  520.873264][T16269] netlink: 'syz.0.2864': attribute type 2 has an invalid length.
[  520.902036][T16269] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2864'.
[  522.503451][T16315] syzkaller0: entered promiscuous mode
[  522.512672][T16315] syzkaller0: entered allmulticast mode
[  523.147970][T16337] ==================================================================
[  523.156093][T16337] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[  523.163929][T16337] Write of size 72 at addr ffff888075cd6c90 by task syz.3.2882/16337
[  523.171988][T16337] 
[  523.174305][T16337] CPU: 0 PID: 16337 Comm: syz.3.2882 Not tainted syzkaller #0
[  523.181757][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  523.191806][T16337] Call Trace:
[  523.195083][T16337]  <TASK>
[  523.198010][T16337]  dump_stack_lvl+0x18c/0x250
[  523.202695][T16337]  ? __lock_acquire+0x7d40/0x7d40
[  523.207738][T16337]  ? show_regs_print_info+0x20/0x20
[  523.212939][T16337]  ? load_image+0x420/0x420
[  523.217438][T16337]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  523.222900][T16337]  ? __virt_addr_valid+0x18c/0x540
[  523.228048][T16337]  ? __virt_addr_valid+0x469/0x540
[  523.233180][T16337]  print_report+0xa8/0x210
[  523.237628][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  523.242749][T16337]  kasan_report+0x117/0x150
[  523.247260][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  523.252464][T16337]  kasan_check_range+0x241/0x290
[  523.257398][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  523.262506][T16337]  __asan_memcpy+0x40/0x70
[  523.266922][T16337]  __bpf_get_stackid+0x6bf/0x900
[  523.271887][T16337]  bpf_get_stackid_pe+0x343/0x410
[  523.276914][T16337]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  523.282365][T16337]  bpf_overflow_handler+0x1fc/0x510
[  523.287564][T16337]  ? bpf_overflow_handler+0xde/0x510
[  523.292849][T16337]  ? tp_perf_event_destroy+0x20/0x20
[  523.298149][T16337]  ? perf_trace_preemptirq_template+0xac/0x330
[  523.304341][T16337]  ? __perf_event_account_interrupt+0x187/0x280
[  523.310584][T16337]  __perf_event_overflow+0x447/0x630
[  523.315877][T16337]  perf_swevent_event+0x319/0x570
[  523.320906][T16337]  ? perf_tp_event+0x1520/0x1520
[  523.325848][T16337]  ___perf_sw_event+0x4a7/0x730
[  523.330696][T16337]  ? ___perf_sw_event+0x199/0x730
[  523.335719][T16337]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  523.342132][T16337]  ? __lock_acquire+0x1347/0x7d40
[  523.347152][T16337]  ? rep_movs_alternative+0x4a/0x90
[  523.352392][T16337]  ? verify_lock_unused+0x140/0x140
[  523.357588][T16337]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  523.363573][T16337]  ? lock_chain_count+0x20/0x20
[  523.368422][T16337]  __perf_sw_event+0x139/0x270
[  523.373189][T16337]  do_user_addr_fault+0x123e/0x12c0
[  523.378387][T16337]  ? rcu_is_watching+0x15/0xb0
[  523.383153][T16337]  exc_page_fault+0x64/0x100
[  523.387743][T16337]  asm_exc_page_fault+0x26/0x30
[  523.392597][T16337] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  523.398406][T16337] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  523.418009][T16337] RSP: 0018:ffffc900033b7bd0 EFLAGS: 00050206
[  523.424073][T16337] RAX: ffffffff842a6101 RBX: 000000000000056d RCX: 0000000000000279
[  523.432057][T16337] RDX: 0000000000000001 RSI: 00002000002cd000 RDI: ffff88805e1d62f4
[  523.440041][T16337] RBP: ffffc900033b7d20 R08: 0000000000000004 R09: 0000000000000005
[  523.448011][T16337] R10: dffffc0000000000 R11: ffffed100bc3acad R12: 00002000002cd279
[  523.455980][T16337] R13: 1ffff92000676fbd R14: ffff88805e1d6000 R15: 00002000002ccd0c
[  523.463980][T16337]  ? rcuref_put_slowpath+0x111/0x150
[  523.469291][T16337]  _copy_from_user+0x8b/0xe0
[  523.473893][T16337]  generic_map_update_batch+0x59a/0x810
[  523.479449][T16337]  ? rcu_read_unlock+0xa0/0xa0
[  523.484222][T16337]  ? __fdget+0x180/0x210
[  523.488499][T16337]  ? rcu_read_unlock+0xa0/0xa0
[  523.493254][T16337]  bpf_map_do_batch+0x3d7/0x610
[  523.498105][T16337]  __sys_bpf+0x381/0x890
[  523.502341][T16337]  ? bpf_link_show_fdinfo+0x390/0x390
[  523.507716][T16337]  ? lock_chain_count+0x20/0x20
[  523.512568][T16337]  __x64_sys_bpf+0x7c/0x90
[  523.516979][T16337]  do_syscall_64+0x55/0xb0
[  523.521393][T16337]  ? clear_bhb_loop+0x40/0x90
[  523.526076][T16337]  ? clear_bhb_loop+0x40/0x90
[  523.530756][T16337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  523.536659][T16337] RIP: 0033:0x7f756b99ce59
[  523.541077][T16337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  523.560759][T16337] RSP: 002b:00007f756c7fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  523.569171][T16337] RAX: ffffffffffffffda RBX: 00007f756bc16090 RCX: 00007f756b99ce59
[  523.577197][T16337] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  523.585163][T16337] RBP: 00007f756ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  523.593148][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  523.601128][T16337] R13: 00007f756bc16128 R14: 00007f756bc16090 R15: 00007fffc8aa8748
[  523.609121][T16337]  </TASK>
[  523.612131][T16337] 
[  523.614447][T16337] Allocated by task 16334:
[  523.618850][T16337]  kasan_set_track+0x4e/0x70
[  523.623443][T16337]  __kasan_kmalloc+0x8f/0xa0
[  523.628028][T16337]  __kmalloc_node+0xb4/0x230
[  523.632616][T16337]  bpf_map_area_alloc+0x5e/0x110
[  523.637549][T16337]  prealloc_elems_and_freelist+0x86/0x1c0
[  523.643264][T16337]  stack_map_alloc+0x33a/0x4c0
[  523.648020][T16337]  map_create+0x877/0x12f0
[  523.652430][T16337]  __sys_bpf+0x651/0x890
[  523.656674][T16337]  __x64_sys_bpf+0x7c/0x90
[  523.661087][T16337]  do_syscall_64+0x55/0xb0
[  523.665501][T16337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  523.671388][T16337] 
[  523.673701][T16337] Last potentially related work creation:
[  523.679404][T16337]  kasan_save_stack+0x3e/0x60
[  523.684081][T16337]  __kasan_record_aux_stack+0xaf/0xc0
[  523.689450][T16337]  call_rcu+0x153/0x950
[  523.693599][T16337]  nf_unregister_net_hooks+0xcb/0x130
[  523.699063][T16337]  ipvlan_uninit+0x297/0x500
[  523.703671][T16337]  unregister_netdevice_many_notify+0x133d/0x1900
[  523.710140][T16337]  default_device_exit_batch+0x9ee/0xa80
[  523.715849][T16337]  cleanup_net+0x795/0xbb0
[  523.720290][T16337]  process_scheduled_works+0xa5d/0x15d0
[  523.725933][T16337]  worker_thread+0xa55/0xfc0
[  523.730519][T16337]  kthread+0x2fa/0x390
[  523.734578][T16337]  ret_from_fork+0x48/0x80
[  523.738990][T16337]  ret_from_fork_asm+0x11/0x20
[  523.743770][T16337] 
[  523.746081][T16337] Second to last potentially related work creation:
[  523.752647][T16337]  kasan_save_stack+0x3e/0x60
[  523.757404][T16337]  __kasan_record_aux_stack+0xaf/0xc0
[  523.762769][T16337]  call_rcu+0x153/0x950
[  523.766916][T16337]  __nf_register_net_hook+0x788/0x910
[  523.772284][T16337]  nf_register_net_hook+0xb2/0x190
[  523.777481][T16337]  nf_register_net_hooks+0x44/0x1b0
[  523.782675][T16337]  nf_ct_netns_do_get+0x3c0/0x5c0
[  523.787771][T16337]  nf_ct_netns_inet_get+0x1f/0x150
[  523.792879][T16337]  nf_conncount_init+0x127/0x380
[  523.797875][T16337]  ovs_ct_init+0x316/0x490
[  523.802357][T16337]  ovs_init_net+0x1e6/0x250
[  523.806849][T16337]  ops_init+0x397/0x640
[  523.810992][T16337]  setup_net+0x3b6/0xa30
[  523.815228][T16337]  copy_net_ns+0x36d/0x5e0
[  523.819642][T16337]  create_new_namespaces+0x3d3/0x6f0
[  523.825007][T16337]  copy_namespaces+0x430/0x4a0
[  523.829764][T16337]  copy_process+0x1724/0x3dc0
[  523.834431][T16337]  kernel_clone+0x24b/0x8a0
[  523.838923][T16337]  __x64_sys_clone+0x1b7/0x230
[  523.843678][T16337]  do_syscall_64+0x55/0xb0
[  523.848117][T16337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  523.854004][T16337] 
[  523.856316][T16337] The buggy address belongs to the object at ffff888075cd6c80
[  523.856316][T16337]  which belongs to the cache kmalloc-cg-64 of size 64
[  523.870452][T16337] The buggy address is located 16 bytes inside of
[  523.870452][T16337]  allocated 40-byte region [ffff888075cd6c80, ffff888075cd6ca8)
[  523.884415][T16337] 
[  523.886729][T16337] The buggy address belongs to the physical page:
[  523.893136][T16337] page:ffffea0001d73580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75cd6
[  523.903279][T16337] memcg:ffff888076019001
[  523.907509][T16337] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  523.915476][T16337] page_type: 0xffffffff()
[  523.919885][T16337] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 dead000000000001
[  523.928457][T16337] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888076019001
[  523.937038][T16337] page dumped because: kasan: bad access detected
[  523.943445][T16337] page_owner tracks the page as allocated
[  523.949145][T16337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5775, tgid 5775 (syz-executor), ts 75062422384, free_ts 75061964936
[  523.967371][T16337]  post_alloc_hook+0x1c1/0x200
[  523.972138][T16337]  get_page_from_freelist+0x1951/0x19e0
[  523.977675][T16337]  __alloc_pages+0x1f0/0x460
[  523.982262][T16337]  alloc_slab_page+0x5d/0x160
[  523.986928][T16337]  new_slab+0x87/0x2d0
[  523.990994][T16337]  ___slab_alloc+0xc5d/0x12f0
[  523.995669][T16337]  __kmem_cache_alloc_node+0x19e/0x250
[  524.001130][T16337]  kmalloc_trace+0x2a/0xe0
[  524.005539][T16337]  alloc_fdtable+0xca/0x2c0
[  524.010034][T16337]  dup_fd+0x786/0xa50
[  524.014010][T16337]  copy_files+0xc3/0x120
[  524.018244][T16337]  copy_process+0x15ab/0x3dc0
[  524.022911][T16337]  kernel_clone+0x24b/0x8a0
[  524.027404][T16337]  __x64_sys_clone+0x1b7/0x230
[  524.032160][T16337]  do_syscall_64+0x55/0xb0
[  524.036571][T16337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.042461][T16337] page last free stack trace:
[  524.047125][T16337]  free_unref_page_prepare+0x7b2/0x8c0
[  524.052588][T16337]  free_unref_page+0x32/0x2e0
[  524.057258][T16337]  vfree+0x1a6/0x320
[  524.061160][T16337]  __do_replace+0x858/0x990
[  524.065893][T16337]  do_ip6t_set_ctl+0xb48/0xe10
[  524.070683][T16337]  nf_setsockopt+0x263/0x280
[  524.075286][T16337]  do_sock_setsockopt+0x175/0x1a0
[  524.080424][T16337]  __x64_sys_setsockopt+0x182/0x200
[  524.085631][T16337]  do_syscall_64+0x55/0xb0
[  524.090048][T16337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.095945][T16337] 
[  524.098346][T16337] Memory state around the buggy address:
[  524.104004][T16337]  ffff888075cd6b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  524.112065][T16337]  ffff888075cd6c00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  524.120294][T16337] >ffff888075cd6c80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  524.128346][T16337]                                   ^
[  524.133705][T16337]  ffff888075cd6d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  524.141758][T16337]  ffff888075cd6d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  524.149805][T16337] ==================================================================
[  524.157954][T16337] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  524.165140][T16337] CPU: 0 PID: 16337 Comm: syz.3.2882 Not tainted syzkaller #0
[  524.172695][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  524.182752][T16337] Call Trace:
[  524.186021][T16337]  <TASK>
[  524.188945][T16337]  dump_stack_lvl+0x18c/0x250
[  524.193619][T16337]  ? show_regs_print_info+0x20/0x20
[  524.198812][T16337]  ? load_image+0x420/0x420
[  524.203309][T16337]  panic+0x2dc/0x730
[  524.207199][T16337]  ? __lock_acquire+0x7d40/0x7d40
[  524.212216][T16337]  ? bpf_jit_dump+0xd0/0xd0
[  524.216768][T16337]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  524.222656][T16337]  ? _raw_spin_unlock+0x40/0x40
[  524.227521][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  524.232644][T16337]  check_panic_on_warn+0x84/0xa0
[  524.237603][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  524.242715][T16337]  end_report+0x6f/0x130
[  524.246958][T16337]  kasan_report+0x128/0x150
[  524.251457][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  524.256570][T16337]  kasan_check_range+0x241/0x290
[  524.261530][T16337]  ? __bpf_get_stackid+0x6bf/0x900
[  524.266652][T16337]  __asan_memcpy+0x40/0x70
[  524.271071][T16337]  __bpf_get_stackid+0x6bf/0x900
[  524.276047][T16337]  bpf_get_stackid_pe+0x343/0x410
[  524.281090][T16337]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  524.286542][T16337]  bpf_overflow_handler+0x1fc/0x510
[  524.291741][T16337]  ? bpf_overflow_handler+0xde/0x510
[  524.297027][T16337]  ? tp_perf_event_destroy+0x20/0x20
[  524.302393][T16337]  ? perf_trace_preemptirq_template+0xac/0x330
[  524.308546][T16337]  ? __perf_event_account_interrupt+0x187/0x280
[  524.314799][T16337]  __perf_event_overflow+0x447/0x630
[  524.320079][T16337]  perf_swevent_event+0x319/0x570
[  524.325106][T16337]  ? perf_tp_event+0x1520/0x1520
[  524.330046][T16337]  ___perf_sw_event+0x4a7/0x730
[  524.334898][T16337]  ? ___perf_sw_event+0x199/0x730
[  524.339921][T16337]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  524.346328][T16337]  ? __lock_acquire+0x1347/0x7d40
[  524.351349][T16337]  ? rep_movs_alternative+0x4a/0x90
[  524.356553][T16337]  ? verify_lock_unused+0x140/0x140
[  524.361750][T16337]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  524.367746][T16337]  ? lock_chain_count+0x20/0x20
[  524.372589][T16337]  __perf_sw_event+0x139/0x270
[  524.377377][T16337]  do_user_addr_fault+0x123e/0x12c0
[  524.382573][T16337]  ? rcu_is_watching+0x15/0xb0
[  524.387336][T16337]  exc_page_fault+0x64/0x100
[  524.391925][T16337]  asm_exc_page_fault+0x26/0x30
[  524.396773][T16337] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  524.402596][T16337] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  524.422394][T16337] RSP: 0018:ffffc900033b7bd0 EFLAGS: 00050206
[  524.428462][T16337] RAX: ffffffff842a6101 RBX: 000000000000056d RCX: 0000000000000279
[  524.436444][T16337] RDX: 0000000000000001 RSI: 00002000002cd000 RDI: ffff88805e1d62f4
[  524.444417][T16337] RBP: ffffc900033b7d20 R08: 0000000000000004 R09: 0000000000000005
[  524.452387][T16337] R10: dffffc0000000000 R11: ffffed100bc3acad R12: 00002000002cd279
[  524.460354][T16337] R13: 1ffff92000676fbd R14: ffff88805e1d6000 R15: 00002000002ccd0c
[  524.468326][T16337]  ? rcuref_put_slowpath+0x111/0x150
[  524.473615][T16337]  _copy_from_user+0x8b/0xe0
[  524.478198][T16337]  generic_map_update_batch+0x59a/0x810
[  524.483744][T16337]  ? rcu_read_unlock+0xa0/0xa0
[  524.488499][T16337]  ? __fdget+0x180/0x210
[  524.492750][T16337]  ? rcu_read_unlock+0xa0/0xa0
[  524.497504][T16337]  bpf_map_do_batch+0x3d7/0x610
[  524.502356][T16337]  __sys_bpf+0x381/0x890
[  524.506594][T16337]  ? bpf_link_show_fdinfo+0x390/0x390
[  524.512144][T16337]  ? lock_chain_count+0x20/0x20
[  524.517037][T16337]  __x64_sys_bpf+0x7c/0x90
[  524.521448][T16337]  do_syscall_64+0x55/0xb0
[  524.525867][T16337]  ? clear_bhb_loop+0x40/0x90
[  524.530545][T16337]  ? clear_bhb_loop+0x40/0x90
[  524.535226][T16337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.541114][T16337] RIP: 0033:0x7f756b99ce59
[  524.545517][T16337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.565117][T16337] RSP: 002b:00007f756c7fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  524.573554][T16337] RAX: ffffffffffffffda RBX: 00007f756bc16090 RCX: 00007f756b99ce59
[  524.581535][T16337] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  524.589504][T16337] RBP: 00007f756ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  524.597473][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  524.605438][T16337] R13: 00007f756bc16128 R14: 00007f756bc16090 R15: 00007fffc8aa8748
[  524.613435][T16337]  </TASK>
[  524.616583][T16337] Kernel Offset: disabled
[  524.620900][T16337] Rebooting in 86400 seconds..