last executing test programs:

10.571556952s ago: executing program 0 (id=2210):
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r3}, 0x8)
r4 = socket$kcm(0xa, 0x6, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000100)=r5, 0x120)

10.484501349s ago: executing program 0 (id=2211):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {0x0}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x5}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

10.311817612s ago: executing program 0 (id=2214):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000180)=r2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3200000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

10.037001495s ago: executing program 0 (id=2216):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x41)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x9fbde75d38449f7e, 0x8, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e47f500000004000000080000040000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

8.306476793s ago: executing program 1 (id=2227):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/266, 0x10a}, {&(0x7f0000005300)=""/4047, 0xfcf}, {&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000bc0)=""/117, 0x75}], 0x9}, 0x40012100)
recvmsg$kcm(r0, 0x0, 0x0)

7.868878078s ago: executing program 1 (id=2236):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/266, 0x10a}, {&(0x7f0000005300)=""/4047, 0xfcf}, {&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000bc0)=""/117, 0x75}], 0x9}, 0x40012100)
recvmsg$kcm(r0, 0x0, 0x0)

7.555816993s ago: executing program 1 (id=2231):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000047c0)=""/4044, 0xfcc}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x4}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

7.416048665s ago: executing program 1 (id=2232):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1400000029000b6c690000000000000005000000", 0x14}], 0x1}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x2b, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r2, 0x12)
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time_for_children\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(r6)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000000a00"/17, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000000f1000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000800000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f0000000040)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
syz_clone(0x40000000, &(0x7f0000000c40)="6f937fda7d48aaa27b726c753edfc4ede1419b697a2c1f7e8f5474fb31f7ace9e4fb68c551a94c07f04fab90f0148816aadfb559fbd7f680485930aa14f337b022be710e24cf0eccec09258331961b0818a8fc2ef35d28e0b0a29f3a65a0ee8eed36e4d8d34b8300eecf070cb517c87822e214ae8de6b16fe7c06f507b9d84b1b9ec716a7fceef0f9bca4b70ee2bf5acd842b91bed5de7dce126737bcacb17c31cc86ce13bc72d1b2b88938afdd81269d9602201e1678f43cd6951629123916921170b6f601685825fddd75a7097010e244d7b10af4f3f7edffe2fec2908dbf161acae4b9b12bf50dbd1a58b5e03d558534b8233f6766b2afccf949c4e45795151e60e92db7f9d47e711c54119bada29816d1ee90033aabf76aea0baf5f4f648016494e0ad9f2d063a65018098081f", 0x12f, 0x0, 0x0, 0x0)
syz_clone(0x0, &(0x7f00000000c0)="c2254f5ed045cad0b04dd842bddd66e14a1e98fbb9411a9a2b96ad0ff8541dfacdfe5e1509e5f75d15578e91297929083437538aa7b6b0070732736a322066a017", 0x41, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="107dc5c5c5d22b")

7.269528186s ago: executing program 0 (id=2233):
socketpair(0x1, 0x20000000000001, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r0 = socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x17)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0xc8, 0x0, 0x9, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x108001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wg0\x00', @random="0100"})

7.175250114s ago: executing program 0 (id=2234):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1b, &(0x7f0000000280)=r1, 0x4)
openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_clone(0x20010200, &(0x7f0000000640)="8e821ed0748366d259faa113a46b41b985df60", 0x13, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="a36fb53c4a7b9ec6a30083fe5c5eef6baae3d376a0e149f6fed6c7a23a3e23e89ba579378987154e669253e0f7f5e6179757933289e01265e8549f8725ca5a0081d79dbad5535926b9ef9f4bf15b85c34cab5487cef9a37aac90b7cd1c6eb05fab13463f5886fdd851cff31d031aacedce8ee5acc20f0b23ebae6e5289d8421dc36161f464cfd62fbd8a4b187d371edf56fb35882635cc6c9a81c95ff446258397f39709f15d5e157a5c821d1c2f67388b646ce4e4efc0db6b885a9c60129f1b42afc8c2e40e0b1991bbcd")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x1d, &(0x7f00000001c0), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2200000002000000", @ANYRESDEC], 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x76, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000000)=r4, 0x1)
sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

5.661467185s ago: executing program 2 (id=2246):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4044, 0xfcc}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x6}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

4.589142322s ago: executing program 2 (id=2240):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000005300)=""/4047, 0xfcf}, {&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000bc0)=""/117, 0x75}], 0x9}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

4.191815253s ago: executing program 2 (id=2242):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x41)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x9fbde75d38449f7e, 0x8, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e47f500000004000000080000040000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4.000980599s ago: executing program 3 (id=2243):
socketpair(0x1, 0x20000000000001, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r0 = socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x17)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0xc8, 0x0, 0x9, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x108001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wg0\x00', @random="0100"})

3.865729159s ago: executing program 3 (id=2244):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1a, 0x3, &(0x7f0000001380)=ANY=[@ANYRESDEC=r1], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, r1}, 0x94)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, 0x80, 0x0}, 0x20000001)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c9374525174ae867806e58adcd922e70fa89f0e436ab60903ade8f578c74ba99b07a004bd18353b4297f72687eb20f87000b500996f109878e8a4c9536d4743818a16710348fa0f85dcaf2c3c1afb41f09199855806446120c859b72e60545872b415d385acfa1cf534937189a2450e6840d1931916f2e2a1964994813b8026b2bed7aea7f8c42d537d6c6e3b7b59a8b5", 0xb1}, {&(0x7f0000000400)="e48dc0a3fb88f29c8f5525c4192329b436ecad8556791ddcf2bdf03cbb82f6e2094a3d0b7807270037591f5691f0bb022578f41f4998be5865273b33e44aeffa83cd3ce4196d157cf85582f106e50d90ee0743d1f92b5b580ff209", 0x5b}, {&(0x7f0000000600)="297fcb1fca3d717e724afd16f2af8992e74fe59123192f8581467b8f774311d9ef125c78efb4d568e3c08ba9beaa278b0a9ea94caee58f583ad00646e7dfaf88b91351c3f9ddd27062fa1bc94a21e52315c670336c980926fdb5dc3650ca6dc24c0ca5ed0d193742cd0d66a7b7ada3b586c61307a52303e7574490a893632050aed333e5db74075f40da4e15082f5a9725ccf42c2d2192417e82c1506815d7e43e759f70024575ebe8362d65a11e1067e938dc6644c92cfde1666c7b8774f4640de8976eada59049e250097d", 0xcc}, {&(0x7f0000000100)}, {&(0x7f0000000180)}, {&(0x7f00000007c0)="6fd499418915f111847a5322fcb77dffa8b232b75c686ee4ca0296c99e5c4faf0787bb7e6d2556a7d8a8c95b17a7cf6909984126ba51461dd707fda8c9431d471c239644dd56c1e959000d54667c629241a7b1f5b0495c685dd949e5e5ca5d7a6d14220a955d1d99bb3a302337408c57a984b9ac924a", 0x76}], 0x6}, 0x4004)
socket$kcm(0xa, 0x922000000003, 0x11)

3.375806019s ago: executing program 2 (id=2245):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
close(0x3)

2.928342995s ago: executing program 3 (id=2247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext={0x3, 0x8000000000000000}, 0x5460, 0x0, 0x5, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff1085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.595741481s ago: executing program 3 (id=2248):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4044, 0xfcc}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x6}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e75", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

2.053392285s ago: executing program 1 (id=2249):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000047c0)=""/4044, 0xfcc}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000600)=""/230, 0xe6}, {0x0}], 0x5}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

2.052432555s ago: executing program 2 (id=2256):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x58)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
perf_event_open$cgroup(&(0x7f0000000940)={0x2, 0x80, 0x9, 0x6, 0x1, 0x6c, 0x0, 0x100000001, 0x8001, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x4}, 0x2, 0x5, 0x1, 0x9, 0x4, 0x7, 0x6, 0x0, 0x8, 0x0, 0x7fffffffffffffff}, r0, 0xb, 0xffffffffffffffff, 0x1)

245.82037ms ago: executing program 1 (id=2250):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0), 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x3)
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)='G', 0x1}], 0x1}, 0x810)

245.69762ms ago: executing program 2 (id=2251):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000047c0)=""/4044, 0xfcc}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x4}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

245.37939ms ago: executing program 3 (id=2252):
socketpair(0x1, 0x20000000000001, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r0 = socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x17)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0xc8, 0x0, 0x9, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x108001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wg0\x00', @random="0100"})

0s ago: executing program 3 (id=2253):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x41)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x9fbde75d38449f7e, 0x8, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e47f500000004000000080000040000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

after parsing attributes in process `syz.1.1007'.
[  177.855465][ T8337] netlink: zone id is out of range
[  177.860864][ T8337] netlink: del zone limit has 8 unknown bytes
[  178.083013][ T8341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  178.382259][ T8350] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.1013'.
[  178.483371][ T5804] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  178.955838][ T8357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.146907][ T8360] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1017'.
[  179.244224][ T8363] validate_nla: 34 callbacks suppressed
[  179.244239][ T8363] netlink: 'syz.1.1018': attribute type 29 has an invalid length.
[  179.333929][ T8363] netlink: 'syz.1.1018': attribute type 29 has an invalid length.
[  179.354550][ T8364] netlink: 'syz.1.1018': attribute type 29 has an invalid length.
[  179.379964][ T8366] netlink: 'syz.2.1019': attribute type 10 has an invalid length.
[  179.403349][ T8366] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  179.433109][ T8363] netlink: 'syz.1.1018': attribute type 29 has an invalid length.
[  179.627526][ T8373] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.1022'.
[  179.641587][ T8376] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  179.649778][ T5804] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  179.651470][ T8376] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  179.669995][ T8376] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  179.679807][ T8376] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  179.688909][ T8376] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  179.906039][ T8379] net_ratelimit: 2 callbacks suppressed
[  179.906088][ T8379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.012982][ T8388] netlink: zone id is out of range
[  180.019465][ T8388] netlink: del zone limit has 8 unknown bytes
[  180.139355][ T8390] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  180.419113][ T5804] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  180.692247][ T8405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.873188][ T8411] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  180.949247][ T8414] __nla_validate_parse: 2 callbacks suppressed
[  180.949265][ T8414] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1039'.
[  180.966565][ T8414] netlink: zone id is out of range
[  180.972400][ T8414] netlink: del zone limit has 8 unknown bytes
[  181.131841][ T5804] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  181.154517][ T8422] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.1043'.
[  181.390833][ T8426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  181.942907][ T8441] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  182.024435][ T8443] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1051'.
[  182.042591][ T8443] netlink: zone id is out of range
[  182.051657][ T8443] netlink: del zone limit has 8 unknown bytes
[  182.238722][ T5804] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  182.286930][ T8453] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.1054'.
[  182.756068][ T8471] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  183.521710][ T8477] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1061'.
[  183.532949][ T8477] netlink: zone id is out of range
[  185.792344][ T8485] validate_nla: 31 callbacks suppressed
[  185.792359][ T8485] netlink: 'syz.3.1066': attribute type 4 has an invalid length.
[  185.806768][ T8485] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1066'.
[  185.967282][ T8492] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  185.976118][ T8492] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  185.998884][ T8492] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  186.017460][ T8492] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  186.091538][ T8496] netlink: 'syz.3.1069': attribute type 29 has an invalid length.
[  186.102338][ T8496] netlink: 'syz.3.1069': attribute type 29 has an invalid length.
[  186.127459][ T8496] netlink: 'syz.3.1069': attribute type 29 has an invalid length.
[  186.140596][ T8496] netlink: 'syz.3.1069': attribute type 29 has an invalid length.
[  186.150399][ T8496] netlink: 'syz.3.1069': attribute type 29 has an invalid length.
[  186.261775][ T8500] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  186.416628][ T8504] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1073'.
[  186.428352][ T8504] net_ratelimit: 1 callbacks suppressed
[  186.428364][ T8504] netlink: zone id is out of range
[  186.440286][ T8504] netlink: del zone limit has 8 unknown bytes
[  186.855728][ T8511] wg2: entered promiscuous mode
[  186.880590][ T8511] wg2: entered allmulticast mode
[  186.889645][ T8513] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1076'.
[  187.123926][ T8515] syzkaller0: entered promiscuous mode
[  187.141124][ T8515] syzkaller0: entered allmulticast mode
[  187.770316][ T8525] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1082'.
[  187.802915][ T8525] netlink: zone id is out of range
[  187.811772][ T8525] netlink: del zone limit has 8 unknown bytes
[  189.396617][ T8527] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  189.410152][ T8537] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1086'.
[  189.544576][ T8541] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  189.930837][ T5804] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  190.027904][ T8555] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1094'.
[  190.057526][ T8555] netlink: zone id is out of range
[  190.062808][ T8555] netlink: del zone limit has 8 unknown bytes
[  190.073916][ T5804] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  190.371425][ T8564] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1097'.
[  190.516361][ T8566] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1098'.
[  190.663374][ T8568] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  190.816311][ T8571] validate_nla: 20 callbacks suppressed
[  190.816330][ T8571] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  190.887586][ T8571] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  191.070321][ T8574] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  191.079122][ T8571] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  191.146214][ T8579] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  191.372489][ T5804] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  191.761082][ T8592] netlink: 'syz.1.1109': attribute type 1 has an invalid length.
[  191.816623][ T8592] netlink: 'syz.1.1109': attribute type 4 has an invalid length.
[  191.827509][ T8592] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1109'.
[  192.019533][ T8595] netlink: 'syz.3.1110': attribute type 10 has an invalid length.
[  192.048114][ T8595] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  192.280905][ T8600] netlink: 'syz.0.1112': attribute type 29 has an invalid length.
[  192.295259][ T8600] netlink: 'syz.0.1112': attribute type 29 has an invalid length.
[  192.313618][ T8602] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1113'.
[  192.605552][ T5804] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  192.775783][ T8617] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1119'.
[  193.004707][ T8621] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  193.237337][   T34] wlan1: Trigger new scan to find an IBSS to join
[  193.618998][ T8636] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1127'.
[  193.680637][ T5804] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  193.815315][ T8639] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1129'.
[  194.078162][ T8646] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  194.287435][ T5804] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  194.512884][ T8661] syzkaller0: entered promiscuous mode
[  194.526850][ T8661] syzkaller0: entered allmulticast mode
[  194.551615][ T8667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.627340][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  194.640652][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  195.465440][ T8673] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1144'.
[  195.475962][ T8673] netlink: zone id is out of range
[  195.481536][ T8673] netlink: del zone limit has 8 unknown bytes
[  196.390319][ T8671] validate_nla: 24 callbacks suppressed
[  196.390334][ T8671] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[  196.404356][ T8671] netlink: 'syz.0.1142': attribute type 4 has an invalid length.
[  196.412142][ T8671] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1142'.
[  196.421540][ T8679] netlink: 'syz.2.1146': attribute type 29 has an invalid length.
[  196.445444][ T8682] netlink: 'syz.3.1147': attribute type 10 has an invalid length.
[  196.460199][ T8682] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  196.480220][ T8680] netlink: 'syz.2.1146': attribute type 29 has an invalid length.
[  196.775491][ T8696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.663270][ T8708] netlink: 'syz.3.1158': attribute type 10 has an invalid length.
[  197.684117][ T8708] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  197.708454][ T8706] netlink: 'syz.0.1156': attribute type 1 has an invalid length.
[  197.718137][ T8706] netlink: 'syz.0.1156': attribute type 4 has an invalid length.
[  197.729724][ T8710] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1157'.
[  197.749212][ T8706] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1156'.
[  197.762304][ T8710] netlink: zone id is out of range
[  197.769557][ T8710] netlink: del zone limit has 8 unknown bytes
[  197.889669][ T8713] syzkaller0: entered promiscuous mode
[  197.902115][ T8713] syzkaller0: entered allmulticast mode
[  198.224642][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  199.166406][ T2901] wlan1: Creating new IBSS network, BSSID ae:95:0b:a4:c5:ac
[  199.654141][ T8728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.671409][ T8740] netlink: 'syz.0.1169': attribute type 10 has an invalid length.
[  199.683576][ T8740] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  199.812279][ T8743] netlink: 'syz.3.1170': attribute type 1 has an invalid length.
[  199.854443][ T8743] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1170'.
[  200.060829][ T8755] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1176'.
[  200.082211][ T8755] netlink: zone id is out of range
[  200.115123][ T8755] netlink: del zone limit has 8 unknown bytes
[  200.237439][ T8760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.257576][ T8762] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  200.477293][ T8773] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1184'.
[  201.360925][ T8778] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1186'.
[  201.577689][ T8786] validate_nla: 6 callbacks suppressed
[  201.577708][ T8786] netlink: 'syz.2.1189': attribute type 10 has an invalid length.
[  201.611819][ T8786] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  201.857484][ T8790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.140086][ T8799] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1195'.
[  202.155832][ T8799] netlink: zone id is out of range
[  202.162265][ T8799] netlink: del zone limit has 8 unknown bytes
[  202.509163][ T8807] netlink: 'syz.3.1198': attribute type 1 has an invalid length.
[  202.519946][ T8807] netlink: 'syz.3.1198': attribute type 4 has an invalid length.
[  202.527881][ T8807] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1198'.
[  202.671543][ T8811] netlink: 'syz.3.1200': attribute type 10 has an invalid length.
[  202.679591][ T8811] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  202.769619][ T8813] netlink: 'syz.3.1201': attribute type 3 has an invalid length.
[  202.779296][ T8813] netlink: 'syz.3.1201': attribute type 1 has an invalid length.
[  202.792091][ T8813] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1201'.
[  203.012425][ T8815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.359531][ T8825] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1207'.
[  203.439232][ T8825] netlink: zone id is out of range
[  203.450079][ T8825] netlink: del zone limit has 8 unknown bytes
[  203.496747][ T8828] netlink: 'syz.0.1208': attribute type 1 has an invalid length.
[  203.510506][ T8828] netlink: 'syz.0.1208': attribute type 4 has an invalid length.
[  203.521650][ T8828] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1208'.
[  203.720215][ T8832] netlink: 'syz.0.1210': attribute type 3 has an invalid length.
[  203.732052][ T8832] netlink: 'syz.0.1210': attribute type 1 has an invalid length.
[  203.757081][ T8832] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1210'.
[  204.217310][ T8839] syzkaller0: entered promiscuous mode
[  204.229120][ T8839] syzkaller0: entered allmulticast mode
[  205.283628][ T8861] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1221'.
[  206.066798][ T8852] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1218'.
[  206.298777][ T8863] net_ratelimit: 1 callbacks suppressed
[  206.298827][ T8863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.610858][ T8884] validate_nla: 6 callbacks suppressed
[  206.610871][ T8884] netlink: 'syz.0.1231': attribute type 1 has an invalid length.
[  206.625383][ T8884] netlink: 'syz.0.1231': attribute type 4 has an invalid length.
[  206.633213][ T8884] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1231'.
[  206.712685][ T8886] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  206.721915][ T8886] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  206.731190][ T8886] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  206.740073][ T8886] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  206.845342][ T8888] syzkaller0: entered promiscuous mode
[  206.850983][ T8888] syzkaller0: entered allmulticast mode
[  207.783021][ T8905] netlink: 'syz.1.1241': attribute type 29 has an invalid length.
[  208.225803][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  208.752659][ T8894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.768204][ T8903] netlink: 'syz.3.1240': attribute type 1 has an invalid length.
[  208.781224][ T8903] netlink: 'syz.3.1240': attribute type 4 has an invalid length.
[  208.795037][ T8903] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1240'.
[  208.824497][ T8905] netlink: 'syz.1.1241': attribute type 29 has an invalid length.
[  208.880057][ T8910] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  209.000972][ T8914] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1243'.
[  209.343177][ T8927] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  209.419936][ T8931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.532465][ T8935] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1251'.
[  209.691967][ T8937] syzkaller0: entered promiscuous mode
[  209.697666][ T8937] syzkaller0: entered allmulticast mode
[  211.264937][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  212.000275][ T8941] validate_nla: 5 callbacks suppressed
[  212.000292][ T8941] netlink: 'syz.0.1254': attribute type 10 has an invalid length.
[  212.032452][ T8941] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  212.067316][ T5799] Bluetooth: hci1: command 0x0406 tx timeout
[  212.068036][ T5798] Bluetooth: hci2: command 0x0406 tx timeout
[  212.073576][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  212.079809][ T5798] Bluetooth: hci0: command 0x0406 tx timeout
[  212.256900][ T8968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.591771][ T8981] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1270'.
[  212.607567][ T8981] netlink: zone id is out of range
[  212.619386][ T8981] netlink: del zone limit has 8 unknown bytes
[  212.742305][ T8986] netlink: 'syz.2.1272': attribute type 10 has an invalid length.
[  212.751373][ T8986] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  212.869822][ T8988] syzkaller0: entered promiscuous mode
[  212.875580][ T8988] syzkaller0: entered allmulticast mode
[  213.184361][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  213.633557][ T9004] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1280'.
[  213.646118][ T9004] netlink: zone id is out of range
[  213.651417][ T9004] netlink: del zone limit has 8 unknown bytes
[  214.225829][   T34] wlan1: Trigger new scan to find an IBSS to join
[  215.167733][ T9006] netlink: 'syz.3.1281': attribute type 10 has an invalid length.
[  215.179107][ T9006] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  215.210763][ T9013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.463498][ T9029] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1290'.
[  215.479455][ T9029] netlink: zone id is out of range
[  215.504029][ T9029] netlink: del zone limit has 8 unknown bytes
[  215.865487][ T9047] netlink: 'syz.0.1296': attribute type 10 has an invalid length.
[  215.876055][ T9047] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  216.047620][ T9049] syzkaller0: entered promiscuous mode
[  216.053255][ T9049] syzkaller0: entered allmulticast mode
[  216.951989][ T9068] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1304'.
[  216.964387][ T9068] netlink: zone id is out of range
[  216.976567][ T9068] netlink: del zone limit has 8 unknown bytes
[  217.193885][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  217.263947][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  217.357740][ T2875] wlan1: Creating new IBSS network, BSSID 8a:f1:be:18:fb:49
[  217.922335][ T9053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.071187][ T9078] netlink: 'syz.1.1308': attribute type 3 has an invalid length.
[  218.079904][ T9078] netlink: 'syz.1.1308': attribute type 1 has an invalid length.
[  218.087900][ T9078] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1308'.
[  218.117080][ T2901] wlan1: Creating new IBSS network, BSSID fa:65:33:fe:6c:14
[  218.586011][ T9099] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  218.594514][ T9099] netlink: 'syz.1.1317': attribute type 4 has an invalid length.
[  218.602453][ T9099] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1317'.
[  218.741282][ T9102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.009629][ T9105] syzkaller0: entered promiscuous mode
[  219.015245][ T9105] syzkaller0: entered allmulticast mode
[  219.494504][ T9113] netlink: 'syz.0.1323': attribute type 3 has an invalid length.
[  219.523988][ T9113] netlink: 'syz.0.1323': attribute type 1 has an invalid length.
[  219.531790][ T9113] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1323'.
[  219.718340][ T9120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1325'.
[  219.850529][ T9125] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1327'.
[  219.863347][ T9125] netlink: zone id is out of range
[  219.868871][ T9125] netlink: del zone limit has 8 unknown bytes
[  221.065803][ T9120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1325'.
[  221.808328][ T9145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.902528][ T9151] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1337'.
[  221.913461][ T9151] netlink: zone id is out of range
[  221.919235][ T9151] netlink: del zone limit has 8 unknown bytes
[  222.846312][ T9166] netlink: 'syz.1.1343': attribute type 10 has an invalid length.
[  222.854699][ T9166] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  223.046896][ T9174] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1346'.
[  223.062613][ T9174] netlink: zone id is out of range
[  223.073940][ T9174] netlink: del zone limit has 8 unknown bytes
[  224.272690][ T9204] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1360'.
[  224.283643][ T9204] netlink: zone id is out of range
[  224.284503][ T9205] netlink: 'syz.3.1359': attribute type 10 has an invalid length.
[  224.289416][ T9204] netlink: del zone limit has 8 unknown bytes
[  224.309154][ T9205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  224.818292][ T9226] netlink: 'syz.1.1370': attribute type 10 has an invalid length.
[  224.829021][ T9226] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.843059][ T9226] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.852523][ T9226] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.879654][ T9226] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.910323][ T9226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.922791][ T9226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.933632][ T9226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.942856][ T9226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.962039][ T9226] team0: Port device geneve1 added
[  224.968097][ T9228] netlink: 'syz.2.1371': attribute type 10 has an invalid length.
[  224.979299][ T9228] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  225.085007][ T9230] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1372'.
[  225.095596][ T9230] netlink: zone id is out of range
[  225.100949][ T9230] netlink: del zone limit has 8 unknown bytes
[  225.183864][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  225.571073][ T9249] netlink: 'syz.2.1381': attribute type 10 has an invalid length.
[  225.579557][ T9249] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  225.758179][ T9254] netlink: 'syz.2.1383': attribute type 10 has an invalid length.
[  225.779068][ T9256] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1384'.
[  225.790242][ T9256] netlink: zone id is out of range
[  225.792353][ T9254] team0: Port device geneve1 added
[  225.795749][ T9256] netlink: del zone limit has 8 unknown bytes
[  226.612517][ T9275] netlink: 'syz.3.1392': attribute type 10 has an invalid length.
[  226.640579][ T9275] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  226.746753][ T9279] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1394'.
[  226.765184][ T9279] netlink: zone id is out of range
[  226.774472][ T9279] netlink: del zone limit has 8 unknown bytes
[  226.864571][ T9285] netlink: 'syz.3.1396': attribute type 10 has an invalid length.
[  226.903883][ T9285] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.912871][ T9285] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.928016][ T9285] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.938414][ T9285] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.972647][ T9285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.009396][ T9285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.024214][ T9285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.033765][ T9285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.070089][ T9285] team0: Port device geneve1 added
[  227.209815][ T9295] netlink: 'syz.1.1402': attribute type 10 has an invalid length.
[  227.267303][ T9295] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.293566][ T9295] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.313318][ T9295] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.333765][ T9295] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.009894][ T9317] netlink: 'syz.0.1412': attribute type 10 has an invalid length.
[  228.030723][ T9317] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  228.225101][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  228.246087][ T9328] netlink: 'syz.2.1417': attribute type 10 has an invalid length.
[  229.288036][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  229.314635][ T9361] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.324981][ T9361] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.337570][ T9361] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.346743][ T9361] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.739990][ T9376] validate_nla: 1 callbacks suppressed
[  229.740007][ T9376] netlink: 'syz.2.1435': attribute type 10 has an invalid length.
[  229.766849][ T9376] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  230.132066][ T9387] syzkaller0: entered promiscuous mode
[  230.139221][ T9387] syzkaller0: entered allmulticast mode
[  231.186256][ T2901] wlan1: Creating new IBSS network, BSSID 7e:20:54:a9:b0:b1
[  232.006775][ T9409] netlink: 'syz.3.1452': attribute type 10 has an invalid length.
[  232.015365][ T9409] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  232.728719][ T9438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.863321][ T9443] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1466'.
[  232.883480][ T9443] netlink: zone id is out of range
[  232.889035][ T9443] netlink: del zone limit has 8 unknown bytes
[  233.674463][ T9469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.033068][ T9477] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1481'.
[  234.045731][ T9477] netlink: zone id is out of range
[  234.051211][ T9477] netlink: del zone limit has 8 unknown bytes
[  234.226444][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  235.080600][ T9499] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1491'.
[  235.095571][ T9499] netlink: zone id is out of range
[  235.101000][ T9499] netlink: del zone limit has 8 unknown bytes
[  235.264078][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  235.366408][ T9507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.030508][ T9524] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1502'.
[  236.065255][ T9524] netlink: zone id is out of range
[  236.812567][ T9555] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1515'.
[  237.872601][ T9579] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1526'.
[  237.890820][ T9579] net_ratelimit: 4 callbacks suppressed
[  237.890835][ T9579] netlink: zone id is out of range
[  237.910692][ T9579] netlink: del zone limit has 8 unknown bytes
[  238.177354][ T9589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.212858][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  239.234069][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  239.250092][ T9608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  239.265375][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  239.272034][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  239.302753][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  239.533297][ T9621] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1545'.
[  239.544383][ T9621] netlink: zone id is out of range
[  239.550078][ T9621] netlink: del zone limit has 8 unknown bytes
[  240.009493][ T9637] netlink: 'syz.2.1550': attribute type 10 has an invalid length.
[  240.018807][ T9637] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  240.132859][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1551'.
[  240.181895][ T9644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  240.191349][ T9644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  240.200989][ T9641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  240.217209][ T2875] wlan1: Creating new IBSS network, BSSID 96:94:7d:79:69:4c
[  240.287992][ T9648] netlink: zone id is out of range
[  240.293558][ T9648] netlink: del zone limit has 8 unknown bytes
[  240.483358][ T9656] netlink: 'syz.1.1560': attribute type 10 has an invalid length.
[  240.498334][ T9656] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  240.670297][ T9661] netlink: 'syz.1.1562': attribute type 10 has an invalid length.
[  240.679299][ T9661] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  240.783567][ T9667] netlink: 'syz.3.1564': attribute type 10 has an invalid length.
[  240.798335][ T9667] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  240.833934][ T9671] netlink: 'syz.0.1565': attribute type 10 has an invalid length.
[  240.842125][ T9671] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  241.100132][ T9682] netlink: 'syz.2.1571': attribute type 10 has an invalid length.
[  241.111080][ T9682] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  241.273093][ T5796] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  241.506950][ T9699] netlink: 'syz.1.1579': attribute type 10 has an invalid length.
[  241.522335][ T9699] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  242.406197][ T9713] netlink: 'syz.3.1585': attribute type 10 has an invalid length.
[  242.424091][ T9713] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  242.605680][ T5796] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  245.421429][ T9748] netlink: 'syz.0.1597': attribute type 10 has an invalid length.
[  245.443189][ T9748] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  245.460279][ T5796] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  246.266350][ T9778] __nla_validate_parse: 10 callbacks suppressed
[  246.266368][ T9778] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1609'.
[  246.295877][ T9778] netlink: zone id is out of range
[  246.301167][ T9778] netlink: del zone limit has 8 unknown bytes
[  246.631899][ T9784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.310859][ T9804] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1621'.
[  247.321536][ T9804] netlink: zone id is out of range
[  247.326916][ T9804] netlink: del zone limit has 8 unknown bytes
[  247.658897][ T9810] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1623'.
[  247.750827][ T9810] netlink: zone id is out of range
[  247.799737][ T9810] netlink: del zone limit has 8 unknown bytes
[  249.094181][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1630'.
[  249.114280][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1630'.
[  249.210808][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1630'.
[  250.183982][ T9844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.088009][ T9861] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1641'.
[  251.157325][ T9861] netlink: zone id is out of range
[  251.202610][ T9861] netlink: del zone limit has 8 unknown bytes
[  252.111004][ T9884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.257681][ T9888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.335400][ T9890] netlink: 'syz.3.1651': attribute type 10 has an invalid length.
[  252.343427][ T9890] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  255.632360][ T9938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.684657][ T9941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.070261][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  256.076752][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  257.031319][ T9968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.101960][ T9970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.952083][ T9982] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1681'.
[  257.979963][ T9982] netlink: zone id is out of range
[  258.004297][ T9982] netlink: del zone limit has 8 unknown bytes
[  258.225520][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  258.283383][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1683'.
[  258.323573][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1683'.
[  258.337850][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1683'.
[  258.354181][ T9989] netlink: 'syz.0.1684': attribute type 10 has an invalid length.
[  258.362235][ T9989] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  258.435928][ T9991] netlink: 'syz.3.1685': attribute type 29 has an invalid length.
[  258.458923][ T9991] netlink: 'syz.3.1685': attribute type 29 has an invalid length.
[  258.493214][ T9991] netlink: 'syz.3.1685': attribute type 29 has an invalid length.
[  259.008534][ T9993] netlink: 'syz.0.1694': attribute type 29 has an invalid length.
[  259.067369][ T9993] netlink: 'syz.0.1694': attribute type 29 has an invalid length.
[  259.079965][ T9997] netlink: 'syz.0.1694': attribute type 29 has an invalid length.
[  259.165325][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1695'.
[  259.194063][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1695'.
[  259.213263][ T9998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1695'.
[  259.222964][T10001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1695'.
[  260.407910][T10023] netlink: 'syz.2.1697': attribute type 29 has an invalid length.
[  260.428700][T10023] netlink: 'syz.2.1697': attribute type 29 has an invalid length.
[  260.460331][T10025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1696'.
[  260.470617][T10023] netlink: 'syz.2.1697': attribute type 29 has an invalid length.
[  260.481085][T10025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1696'.
[  260.615873][T10030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.518386][T10051] netlink: zone id is out of range
[  261.528486][T10051] netlink: del zone limit has 8 unknown bytes
[  262.243197][T10070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.972846][T10086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.264241][   T34] wlan1: Trigger new scan to find an IBSS to join
[  264.234284][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  264.359497][ T2929] wlan1: Creating new IBSS network, BSSID e6:45:f8:57:7e:2f
[  265.077302][T10102] validate_nla: 10 callbacks suppressed
[  265.077322][T10102] netlink: 'syz.0.1726': attribute type 3 has an invalid length.
[  265.153825][T10102] netlink: 'syz.0.1726': attribute type 1 has an invalid length.
[  265.201804][T10102] __nla_validate_parse: 6 callbacks suppressed
[  265.201822][T10102] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1726'.
[  265.888045][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1730'.
[  265.897194][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1730'.
[  265.906700][T10113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1730'.
[  265.916115][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1730'.
[  266.054226][T10119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1739'.
[  266.064173][T10119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1739'.
[  266.075668][T10118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1739'.
[  266.086331][T10119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1739'.
[  266.275164][T10126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.365861][T10129] netlink: 'syz.2.1734': attribute type 29 has an invalid length.
[  266.374627][T10129] netlink: 'syz.2.1734': attribute type 29 has an invalid length.
[  266.393254][T10129] netlink: 'syz.2.1734': attribute type 29 has an invalid length.
[  266.403495][T10129] netlink: 'syz.2.1734': attribute type 29 has an invalid length.
[  266.535519][T10131] netlink: 'syz.2.1735': attribute type 10 has an invalid length.
[  266.544132][T10131] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  267.877204][T10151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1742'.
[  268.224145][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  268.425165][T10157] netlink: 'syz.1.1744': attribute type 29 has an invalid length.
[  268.444046][T10157] netlink: 'syz.1.1744': attribute type 29 has an invalid length.
[  268.502558][T10157] netlink: 'syz.1.1744': attribute type 29 has an invalid length.
[  268.623183][T10159] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  269.174219][ T1138] wlan1: Creating new IBSS network, BSSID 6a:8e:a4:dc:84:be
[  270.965420][T10169] validate_nla: 2 callbacks suppressed
[  270.965438][T10169] netlink: 'syz.3.1750': attribute type 3 has an invalid length.
[  271.019381][T10169] netlink: 'syz.3.1750': attribute type 1 has an invalid length.
[  271.046872][T10169] __nla_validate_parse: 7 callbacks suppressed
[  271.046887][T10169] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1750'.
[  271.550657][T10181] netlink: 'syz.2.1755': attribute type 29 has an invalid length.
[  271.963362][T10181] netlink: 'syz.2.1755': attribute type 29 has an invalid length.
[  272.007602][T10182] netlink: 'syz.2.1755': attribute type 29 has an invalid length.
[  272.079757][T10183] netlink: 'syz.2.1755': attribute type 29 has an invalid length.
[  273.274242][ T1138] wlan1: Trigger new scan to find an IBSS to join
[  273.292493][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1759'.
[  273.359537][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1759'.
[  273.441370][T10194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1759'.
[  273.535453][T10197] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1759'.
[  273.798956][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'.
[  273.870178][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'.
[  273.886358][T10202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'.
[  274.000708][T10206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'.
[  274.267673][T10215] netlink: 'syz.2.1767': attribute type 3 has an invalid length.
[  274.289321][T10215] netlink: 'syz.2.1767': attribute type 1 has an invalid length.
[  274.301606][T10215] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1767'.
[  275.367250][T10232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.097888][T10245] netlink: 'syz.2.1776': attribute type 10 has an invalid length.
[  276.106845][T10245] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  276.164164][T10246] __nla_validate_parse: 4 callbacks suppressed
[  276.164181][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1775'.
[  276.257468][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1775'.
[  276.352869][T10243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1775'.
[  276.385928][T10247] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1775'.
[  276.889006][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1780'.
[  276.920095][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1780'.
[  276.930608][T10260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1780'.
[  276.940423][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1780'.
[  277.520960][T10277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1788'.
[  277.559846][T10277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1788'.
[  279.196538][ T1138] wlan1: Trigger new scan to find an IBSS to join
[  279.266213][ T1138] wlan1: Trigger new scan to find an IBSS to join
[  279.640501][T10297] netlink: zone id is out of range
[  279.646080][T10297] netlink: del zone limit has 8 unknown bytes
[  279.955433][T10300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.921371][T10306] syzkaller0: entered promiscuous mode
[  280.948007][T10309] netlink: 'syz.3.1800': attribute type 29 has an invalid length.
[  280.957306][T10306] syzkaller0: entered allmulticast mode
[  280.964866][T10309] netlink: 'syz.3.1800': attribute type 29 has an invalid length.
[  280.984309][T10309] netlink: 'syz.3.1800': attribute type 29 has an invalid length.
[  281.008337][T10309] netlink: 'syz.3.1800': attribute type 29 has an invalid length.
[  281.187660][ T1138] wlan1: Trigger new scan to find an IBSS to join
[  282.572189][T10311] netlink: 'syz.3.1801': attribute type 10 has an invalid length.
[  282.581819][T10311] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  283.189768][T10328] netlink: 'syz.2.1809': attribute type 29 has an invalid length.
[  283.214255][T10328] netlink: 'syz.2.1809': attribute type 29 has an invalid length.
[  283.232823][T10328] netlink: 'syz.2.1809': attribute type 29 has an invalid length.
[  283.256325][T10328] netlink: 'syz.2.1809': attribute type 29 has an invalid length.
[  283.485454][T10337] netlink: 'syz.1.1812': attribute type 10 has an invalid length.
[  283.498106][T10337] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  283.508167][T10339] __nla_validate_parse: 7 callbacks suppressed
[  283.508188][T10339] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1813'.
[  283.587445][T10339] netlink: zone id is out of range
[  283.603352][T10339] netlink: del zone limit has 8 unknown bytes
[  283.903530][T10352] netlink: 'syz.2.1819': attribute type 29 has an invalid length.
[  283.912475][T10352] netlink: 'syz.2.1819': attribute type 29 has an invalid length.
[  283.922903][T10352] netlink: 'syz.2.1819': attribute type 29 has an invalid length.
[  283.934214][T10352] netlink: 'syz.2.1819': attribute type 29 has an invalid length.
[  284.085246][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  284.123800][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  284.149537][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  284.159622][T10356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  284.217750][T10362] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  285.274822][   T34] wlan1: Trigger new scan to find an IBSS to join
[  286.156884][T10395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1832'.
[  286.167344][T10395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1832'.
[  286.185701][T10395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1832'.
[  286.205772][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1832'.
[  286.224523][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  286.280124][T10398] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  286.662752][T10412] syzkaller0: entered promiscuous mode
[  286.668511][T10412] syzkaller0: entered allmulticast mode
[  287.718377][T10426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1847'.
[  288.228680][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  288.234672][   T34] wlan1: Trigger new scan to find an IBSS to join
[  288.411047][T10430] validate_nla: 14 callbacks suppressed
[  288.411065][T10430] netlink: 'syz.3.1848': attribute type 10 has an invalid length.
[  288.449860][T10430] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  288.847099][T10453] __nla_validate_parse: 3 callbacks suppressed
[  288.847134][T10453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'.
[  288.863357][T10453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'.
[  288.874833][T10451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'.
[  288.896580][T10453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'.
[  289.636253][T10465] netlink: 'syz.2.1862': attribute type 10 has an invalid length.
[  289.651666][T10465] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  290.285878][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  290.635771][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'.
[  290.659015][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'.
[  290.674361][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'.
[  290.699936][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'.
[  291.184647][   T34] wlan1: Trigger new scan to find an IBSS to join
[  291.235660][   T34] wlan1: Creating new IBSS network, BSSID e6:8c:f7:76:e7:60
[  291.265223][   T59] wlan1: Trigger new scan to find an IBSS to join
[  291.512398][T10488] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1879'.
[  291.564179][T10488] netlink: zone id is out of range
[  291.573960][T10488] netlink: del zone limit has 8 unknown bytes
[  292.160984][T10502] netlink: 'syz.1.1875': attribute type 10 has an invalid length.
[  292.189524][T10502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  292.224686][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  292.506481][T10512] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1881'.
[  292.521662][T10512] netlink: zone id is out of range
[  292.528520][T10512] netlink: del zone limit has 8 unknown bytes
[  294.223919][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  294.240788][ T2901] wlan1: Creating new IBSS network, BSSID fa:44:a8:ff:ab:5e
[  294.439509][T10526] __nla_validate_parse: 4 callbacks suppressed
[  294.439529][T10526] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1887'.
[  294.488188][T10526] netlink: zone id is out of range
[  294.499930][T10526] netlink: del zone limit has 8 unknown bytes
[  294.541028][T10530] netlink: 'syz.2.1886': attribute type 10 has an invalid length.
[  294.549408][T10530] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  294.870911][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1888'.
[  294.882886][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1888'.
[  294.899813][T10533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1888'.
[  294.919887][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1888'.
[  296.024090][T10557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'.
[  296.033392][T10557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'.
[  296.045039][T10554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'.
[  296.062450][T10554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'.
[  296.213988][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1904'.
[  296.227390][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  297.193998][ T2901] wlan1: Creating new IBSS network, BSSID 82:ef:22:ca:9e:81
[  298.224438][ T2901] wlan1: Creating new IBSS network, BSSID b6:d9:3c:03:73:08
[  299.738325][T10649] __nla_validate_parse: 27 callbacks suppressed
[  299.738343][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1927'.
[  299.817137][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1927'.
[  299.854841][T10648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1927'.
[  299.867919][T10652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1927'.
[  300.231386][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  301.194236][ T2888] wlan1: Trigger new scan to find an IBSS to join
[  301.268261][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  302.078103][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1933'.
[  302.117101][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1933'.
[  302.184109][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1933'.
[  302.193461][T10675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1933'.
[  302.529523][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1938'.
[  302.564174][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1938'.
[  304.644518][T10703] netlink: 'syz.0.1946': attribute type 29 has an invalid length.
[  304.699648][T10703] netlink: 'syz.0.1946': attribute type 29 has an invalid length.
[  304.753204][T10704] netlink: 'syz.0.1946': attribute type 29 has an invalid length.
[  304.809648][T10703] netlink: 'syz.0.1946': attribute type 29 has an invalid length.
[  305.004314][T10707] __nla_validate_parse: 2 callbacks suppressed
[  305.004332][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'.
[  305.070227][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'.
[  305.080445][T10706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'.
[  305.096509][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'.
[  305.265677][ T2929] wlan1: Trigger new scan to find an IBSS to join
[  305.789059][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'.
[  305.808013][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'.
[  305.818130][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'.
[  305.827977][T10714] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'.
[  305.849089][T10718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.225877][ T2901] wlan1: Trigger new scan to find an IBSS to join
[  306.233257][ T2875] wlan1: Trigger new scan to find an IBSS to join
[  306.298001][ T2875] wlan1: Creating new IBSS network, BSSID da:44:8a:76:83:de
[  307.191214][ T1138] wlan1: Creating new IBSS network, BSSID 8e:4d:e9:d0:b1:6a
[  307.206621][ T2875] wlan1: Creating new IBSS network, BSSID 52:02:f4:ec:7c:99
[  307.533951][T10743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1960'.
[  307.617193][T10743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1960'.
[  307.955370][T10754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  309.368984][T10783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.787521][T10802] FAULT_INJECTION: forcing a failure.
[  310.787521][T10802] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  310.806398][T10802] CPU: 0 PID: 10802 Comm: syz.0.1979 Not tainted 6.6.102-syzkaller #0
[  310.814613][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  310.824711][T10802] Call Trace:
[  310.828024][T10802]  <TASK>
[  310.830992][T10802]  dump_stack_lvl+0x16c/0x230
[  310.835728][T10802]  ? show_regs_print_info+0x20/0x20
[  310.840971][T10802]  ? load_image+0x3b0/0x3b0
[  310.845510][T10802]  ? __lock_acquire+0x7c80/0x7c80
[  310.850564][T10802]  ? snprintf+0xdb/0x120
[  310.854855][T10802]  should_fail_ex+0x39d/0x4d0
[  310.859576][T10802]  _copy_to_user+0x2f/0xa0
[  310.864020][T10802]  simple_read_from_buffer+0xe7/0x150
[  310.869443][T10802]  proc_fail_nth_read+0x1e3/0x250
[  310.874485][T10802]  ? proc_fault_inject_write+0x340/0x340
[  310.880132][T10802]  ? fsnotify_perm+0x271/0x5e0
[  310.884917][T10802]  ? proc_fault_inject_write+0x340/0x340
[  310.890572][T10802]  vfs_read+0x27e/0x920
[  310.894747][T10802]  ? kernel_read+0x1e0/0x1e0
[  310.899347][T10802]  ? __fget_files+0x28/0x4d0
[  310.903961][T10802]  ? __fget_files+0x44a/0x4d0
[  310.908662][T10802]  ? __fdget_pos+0x2a3/0x330
[  310.913279][T10802]  ? ksys_read+0x75/0x250
[  310.917642][T10802]  ksys_read+0x147/0x250
[  310.921897][T10802]  ? vfs_write+0x940/0x940
[  310.926330][T10802]  ? lockdep_hardirqs_on+0x98/0x150
[  310.931554][T10802]  do_syscall_64+0x55/0xb0
[  310.935993][T10802]  ? clear_bhb_loop+0x40/0x90
[  310.940798][T10802]  ? clear_bhb_loop+0x40/0x90
[  310.945531][T10802]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  310.951453][T10802] RIP: 0033:0x7f085e78d5fc
[  310.955884][T10802] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  310.975497][T10802] RSP: 002b:00007f085f5d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  310.983970][T10802] RAX: ffffffffffffffda RBX: 00007f085e9b5fa0 RCX: 00007f085e78d5fc
[  310.992036][T10802] RDX: 000000000000000f RSI: 00007f085f5d90a0 RDI: 0000000000000007
[  311.000026][T10802] RBP: 00007f085f5d9090 R08: 0000000000000000 R09: 0000000000000000
[  311.008010][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.015984][T10802] R13: 00007f085e9b6038 R14: 00007f085e9b5fa0 R15: 00007ffd98111438
[  311.024000][T10802]  </TASK>
[  311.194198][T10807] __nla_validate_parse: 10 callbacks suppressed
[  311.194215][T10807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1980'.
[  311.241059][T10807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1980'.
[  311.289748][T10806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1980'.
[  311.304163][T10811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1980'.
[  311.315519][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1981'.
[  311.344963][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1981'.
[  311.444123][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1981'.
[  311.462987][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1981'.
[  313.171860][T10828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.502168][T10840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.552420][T10843] netlink: 'syz.1.1991': attribute type 29 has an invalid length.
[  314.575313][T10843] netlink: 'syz.1.1991': attribute type 29 has an invalid length.
[  314.593256][T10843] netlink: 'syz.1.1991': attribute type 29 has an invalid length.
[  314.630977][T10843] netlink: 'syz.1.1991': attribute type 29 has an invalid length.
[  314.779912][T10852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1995'.
[  314.789358][T10852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1995'.
[  317.607680][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  317.619170][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  317.870523][T10883] netlink: 'syz.0.2005': attribute type 29 has an invalid length.
[  317.916774][T10883] netlink: 'syz.0.2005': attribute type 29 has an invalid length.
[  317.942463][T10886] netlink: 'syz.0.2005': attribute type 29 has an invalid length.
[  317.956111][T10883] netlink: 'syz.0.2005': attribute type 29 has an invalid length.
[  318.014161][T10891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.026266][T10892] __nla_validate_parse: 6 callbacks suppressed
[  318.026284][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2008'.
[  318.063474][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2008'.
[  318.084742][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2008'.
[  318.099054][T10895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2008'.
[  319.363720][T10922] FAULT_INJECTION: forcing a failure.
[  319.363720][T10922] name failslab, interval 1, probability 0, space 0, times 1
[  319.379187][T10922] CPU: 1 PID: 10922 Comm: syz.3.2018 Not tainted 6.6.102-syzkaller #0
[  319.387411][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  319.397507][T10922] Call Trace:
[  319.400828][T10922]  <TASK>
[  319.403796][T10922]  dump_stack_lvl+0x16c/0x230
[  319.408521][T10922]  ? show_regs_print_info+0x20/0x20
[  319.413763][T10922]  ? load_image+0x3b0/0x3b0
[  319.418307][T10922]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  319.424335][T10922]  ? __asan_memset+0x22/0x40
[  319.428994][T10922]  should_fail_ex+0x39d/0x4d0
[  319.433725][T10922]  should_failslab+0x9/0x20
[  319.438276][T10922]  slab_pre_alloc_hook+0x59/0x310
[  319.443528][T10922]  ? __debug_object_init+0xe8/0x430
[  319.448786][T10922]  kmem_cache_alloc+0x5a/0x2e0
[  319.453596][T10922]  ? slab_build_skb+0x2b/0x3f0
[  319.458408][T10922]  slab_build_skb+0x2b/0x3f0
[  319.463046][T10922]  bpf_prog_test_run_skb+0x3ba/0x11c0
[  319.468472][T10922]  ? __fget_files+0x28/0x4d0
[  319.473106][T10922]  ? cpu_online+0x60/0x60
[  319.477466][T10922]  bpf_prog_test_run+0x321/0x390
[  319.482418][T10922]  __sys_bpf+0x440/0x800
[  319.486671][T10922]  ? bpf_link_show_fdinfo+0x350/0x350
[  319.492063][T10922]  ? lock_chain_count+0x20/0x20
[  319.496959][T10922]  __x64_sys_bpf+0x7c/0x90
[  319.501392][T10922]  do_syscall_64+0x55/0xb0
[  319.505831][T10922]  ? clear_bhb_loop+0x40/0x90
[  319.510518][T10922]  ? clear_bhb_loop+0x40/0x90
[  319.515233][T10922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.521190][T10922] RIP: 0033:0x7f282e58ebe9
[  319.525619][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.545233][T10922] RSP: 002b:00007f282f4c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  319.553662][T10922] RAX: ffffffffffffffda RBX: 00007f282e7b5fa0 RCX: 00007f282e58ebe9
[  319.561641][T10922] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  319.569616][T10922] RBP: 00007f282f4c2090 R08: 0000000000000000 R09: 0000000000000000
[  319.577593][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.585568][T10922] R13: 00007f282e7b6038 R14: 00007f282e7b5fa0 R15: 00007ffc077e1398
[  319.593559][T10922]  </TASK>
[  319.693804][T10924] netlink: 'syz.1.2019': attribute type 29 has an invalid length.
[  319.848601][T10924] netlink: 'syz.1.2019': attribute type 29 has an invalid length.
[  319.857455][T10925] netlink: 'syz.1.2019': attribute type 29 has an invalid length.
[  319.907828][T10929] netlink: 'syz.1.2019': attribute type 29 has an invalid length.
[  320.046035][T10934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.138205][T10936] netlink: 204844 bytes leftover after parsing attributes in process `syz.1.2023'.
[  322.191760][T10959] FAULT_INJECTION: forcing a failure.
[  322.191760][T10959] name failslab, interval 1, probability 0, space 0, times 0
[  322.204694][T10959] CPU: 1 PID: 10959 Comm: syz.1.2029 Not tainted 6.6.102-syzkaller #0
[  322.212993][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  322.223087][T10959] Call Trace:
[  322.226402][T10959]  <TASK>
[  322.229363][T10959]  dump_stack_lvl+0x16c/0x230
[  322.234092][T10959]  ? show_regs_print_info+0x20/0x20
[  322.239338][T10959]  ? load_image+0x3b0/0x3b0
[  322.243907][T10959]  ? __might_sleep+0xe0/0xe0
[  322.248540][T10959]  ? __lock_acquire+0x7c80/0x7c80
[  322.253628][T10959]  should_fail_ex+0x39d/0x4d0
[  322.258359][T10959]  should_failslab+0x9/0x20
[  322.262929][T10959]  slab_pre_alloc_hook+0x59/0x310
[  322.267999][T10959]  kmem_cache_alloc_node+0x60/0x330
[  322.273222][T10959]  ? __alloc_skb+0x108/0x2c0
[  322.277847][T10959]  __alloc_skb+0x108/0x2c0
[  322.282292][T10959]  alloc_skb_with_frags+0xca/0x7c0
[  322.287418][T10959]  ? mark_lock+0x94/0x320
[  322.291780][T10959]  sock_alloc_send_pskb+0x857/0x990
[  322.297012][T10959]  ? sock_kzfree_s+0x50/0x50
[  322.301729][T10959]  tun_get_user+0x9dc/0x3bf0
[  322.306342][T10959]  ? aa_file_perm+0x120/0xec0
[  322.311057][T10959]  ? aa_file_perm+0x3e8/0xec0
[  322.315748][T10959]  ? rcu_read_unlock+0xa0/0xa0
[  322.320544][T10959]  ? tun_get+0x1c/0x2e0
[  322.324894][T10959]  ? __lock_acquire+0x7c80/0x7c80
[  322.329937][T10959]  ? tun_get+0x1c/0x2e0
[  322.334125][T10959]  tun_chr_write_iter+0x119/0x200
[  322.339169][T10959]  vfs_write+0x43b/0x940
[  322.343432][T10959]  ? file_end_write+0x250/0x250
[  322.348305][T10959]  ? __fget_files+0x44a/0x4d0
[  322.353006][T10959]  ? __fdget_pos+0x1d8/0x330
[  322.357625][T10959]  ? ksys_write+0x75/0x250
[  322.362072][T10959]  ksys_write+0x147/0x250
[  322.366426][T10959]  ? __ia32_sys_read+0x90/0x90
[  322.371212][T10959]  ? lockdep_hardirqs_on+0x98/0x150
[  322.376428][T10959]  do_syscall_64+0x55/0xb0
[  322.380867][T10959]  ? clear_bhb_loop+0x40/0x90
[  322.385552][T10959]  ? clear_bhb_loop+0x40/0x90
[  322.390241][T10959]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.396159][T10959] RIP: 0033:0x7fe44058ebe9
[  322.400596][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.420217][T10959] RSP: 002b:00007fe441351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  322.428670][T10959] RAX: ffffffffffffffda RBX: 00007fe4407b5fa0 RCX: 00007fe44058ebe9
[  322.436657][T10959] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  322.444638][T10959] RBP: 00007fe441351090 R08: 0000000000000000 R09: 0000000000000000
[  322.452620][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.460618][T10959] R13: 00007fe4407b6038 R14: 00007fe4407b5fa0 R15: 00007ffcf6492238
[  322.468612][T10959]  </TASK>
[  323.131735][T10969] FAULT_INJECTION: forcing a failure.
[  323.131735][T10969] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  323.155867][T10969] CPU: 1 PID: 10969 Comm: syz.2.2032 Not tainted 6.6.102-syzkaller #0
[  323.164098][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  323.174199][T10969] Call Trace:
[  323.177516][T10969]  <TASK>
[  323.180488][T10969]  dump_stack_lvl+0x16c/0x230
[  323.185208][T10969]  ? show_regs_print_info+0x20/0x20
[  323.190481][T10969]  ? load_image+0x3b0/0x3b0
[  323.195051][T10969]  ? __lock_acquire+0x7c80/0x7c80
[  323.200132][T10969]  should_fail_ex+0x39d/0x4d0
[  323.204845][T10969]  prepare_alloc_pages+0x1e2/0x5f0
[  323.210008][T10969]  __alloc_pages+0x127/0x460
[  323.214643][T10969]  ? zone_statistics+0x170/0x170
[  323.219644][T10969]  pte_alloc_one+0x89/0x540
[  323.224193][T10969]  ? pfn_modify_allowed+0x560/0x560
[  323.229425][T10969]  ? hugepage_vma_check+0x488/0x5a0
[  323.234662][T10969]  handle_mm_fault+0x2e8e/0x4920
[  323.239647][T10969]  ? handle_mm_fault+0xd1/0x4920
[  323.244645][T10969]  ? numa_migrate_prep+0x350/0x350
[  323.249806][T10969]  ? lock_mm_and_find_vma+0x9c/0x300
[  323.255121][T10969]  do_user_addr_fault+0x738/0x12e0
[  323.260286][T10969]  exc_page_fault+0x67/0x110
[  323.264921][T10969]  asm_exc_page_fault+0x26/0x30
[  323.269811][T10969] RIP: 0010:rep_movs_alternative+0x30/0x90
[  323.275637][T10969] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[  323.295252][T10969] RSP: 0018:ffffc9000bdb7a10 EFLAGS: 00050216
[  323.301331][T10969] RAX: ffffffff841e5e01 RBX: 0000000000000020 RCX: 0000000000000020
[  323.309311][T10969] RDX: 0000000000000001 RSI: 000000110c230000 RDI: ffff88802fdd5f00
[  323.317305][T10969] RBP: ffffc9000bdb7bb0 R08: ffff88802fdd5f1f R09: 1ffff11005fbabe3
[  323.325286][T10969] R10: dffffc0000000000 R11: ffffed1005fbabe4 R12: 000000110c230020
[  323.333270][T10969] R13: ffff88802fdd5f00 R14: ffff88802fdd5f00 R15: 000000110c230000
[  323.341260][T10969]  ? rcuref_put_slowpath+0x141/0x150
[  323.346662][T10969]  _copy_from_user+0x8b/0xe0
[  323.351267][T10969]  ioctl_standard_iw_point+0x58e/0xca0
[  323.356756][T10969]  ? cfg80211_wext_giwap+0x120/0x120
[  323.362051][T10969]  ? iw_handler_get_iwstats+0x110/0x110
[  323.367614][T10969]  ? wext_ioctl_dispatch+0x115/0x5f0
[  323.372909][T10969]  ? mutex_lock_nested+0x20/0x20
[  323.377883][T10969]  ? cfg80211_wext_giwap+0x120/0x120
[  323.383353][T10969]  ioctl_standard_call+0xb7/0x2b0
[  323.388399][T10969]  ? cfg80211_wext_giwap+0x120/0x120
[  323.393696][T10969]  wext_ioctl_dispatch+0x1cb/0x5f0
[  323.398827][T10969]  ? wext_ioctl_dispatch+0x5f0/0x5f0
[  323.404124][T10969]  ? iw_handler_get_private+0x1f0/0x1f0
[  323.409684][T10969]  ? wext_handle_ioctl+0x1c0/0x1c0
[  323.414806][T10969]  ? __might_fault+0xaa/0x120
[  323.419505][T10969]  ? __might_fault+0xc6/0x120
[  323.424189][T10969]  ? __might_fault+0xaa/0x120
[  323.428873][T10969]  wext_handle_ioctl+0x108/0x1c0
[  323.433833][T10969]  ? call_commit_handler+0xf0/0xf0
[  323.438985][T10969]  sock_ioctl+0x160/0x7a0
[  323.443376][T10969]  ? sock_poll+0x3d0/0x3d0
[  323.447820][T10969]  ? bpf_lsm_file_ioctl+0x9/0x10
[  323.452764][T10969]  ? security_file_ioctl+0x80/0xa0
[  323.457897][T10969]  ? sock_poll+0x3d0/0x3d0
[  323.462333][T10969]  __se_sys_ioctl+0xfd/0x170
[  323.466944][T10969]  do_syscall_64+0x55/0xb0
[  323.471375][T10969]  ? clear_bhb_loop+0x40/0x90
[  323.476064][T10969]  ? clear_bhb_loop+0x40/0x90
[  323.480758][T10969]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  323.486682][T10969] RIP: 0033:0x7f069138ebe9
[  323.491106][T10969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.510808][T10969] RSP: 002b:00007f06921d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  323.519237][T10969] RAX: ffffffffffffffda RBX: 00007f06915b6090 RCX: 00007f069138ebe9
[  323.527220][T10969] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000007
[  323.535196][T10969] RBP: 00007f06921d8090 R08: 0000000000000000 R09: 0000000000000000
[  323.543178][T10969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.551157][T10969] R13: 00007f06915b6128 R14: 00007f06915b6090 R15: 00007ffffbf56118
[  323.559155][T10969]  </TASK>
[  323.584118][T10969] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  323.600771][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2033'.
[  323.984007][T10978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.533047][T10988] FAULT_INJECTION: forcing a failure.
[  324.533047][T10988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.546499][T10988] CPU: 1 PID: 10988 Comm: syz.0.2046 Not tainted 6.6.102-syzkaller #0
[  324.554709][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  324.564811][T10988] Call Trace:
[  324.568136][T10988]  <TASK>
[  324.571105][T10988]  dump_stack_lvl+0x16c/0x230
[  324.575840][T10988]  ? show_regs_print_info+0x20/0x20
[  324.581175][T10988]  ? load_image+0x3b0/0x3b0
[  324.585738][T10988]  ? __might_fault+0xaa/0x120
[  324.590465][T10988]  ? __lock_acquire+0x7c80/0x7c80
[  324.595545][T10988]  should_fail_ex+0x39d/0x4d0
[  324.600254][T10988]  _copy_from_user+0x2f/0xe0
[  324.604872][T10988]  ___sys_sendmsg+0x159/0x290
[  324.609567][T10988]  ? __sys_sendmsg+0x270/0x270
[  324.614451][T10988]  ? __lock_acquire+0x7c80/0x7c80
[  324.619517][T10988]  __se_sys_sendmsg+0x1a5/0x270
[  324.624387][T10988]  ? __x64_sys_sendmsg+0x80/0x80
[  324.629359][T10988]  ? lockdep_hardirqs_on+0x98/0x150
[  324.634579][T10988]  do_syscall_64+0x55/0xb0
[  324.639008][T10988]  ? clear_bhb_loop+0x40/0x90
[  324.643702][T10988]  ? clear_bhb_loop+0x40/0x90
[  324.648391][T10988]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.654305][T10988] RIP: 0033:0x7f085e78ebe9
[  324.658734][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.678360][T10988] RSP: 002b:00007f085f5d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.686793][T10988] RAX: ffffffffffffffda RBX: 00007f085e9b5fa0 RCX: 00007f085e78ebe9
[  324.694787][T10988] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  324.702791][T10988] RBP: 00007f085f5d9090 R08: 0000000000000000 R09: 0000000000000000
[  324.710783][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.718765][T10988] R13: 00007f085e9b6038 R14: 00007f085e9b5fa0 R15: 00007ffd98111438
[  324.726763][T10988]  </TASK>
[  324.945659][T10997] netlink: 'syz.1.2040': attribute type 10 has an invalid length.
[  324.989793][T10997] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.054608][T10997] bridge_slave_1: left allmulticast mode
[  325.079064][T10997] bridge_slave_1: left promiscuous mode
[  325.100143][T10997] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.248973][T10997] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  325.446505][T11010] netlink: 'syz.3.2044': attribute type 10 has an invalid length.
[  325.468049][T11012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2045'.
[  325.483006][T11010] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2044'.
[  325.511955][T11010] bond0: entered promiscuous mode
[  325.523558][T11010] bond_slave_0: entered promiscuous mode
[  325.551261][T11010] bond_slave_1: entered promiscuous mode
[  325.586945][T11010] bridge0: port 1(bond0) entered blocking state
[  325.608933][T11010] bridge0: port 1(bond0) entered disabled state
[  325.616022][T11010] bond0: entered allmulticast mode
[  325.621821][T11010] bond_slave_0: entered allmulticast mode
[  325.634730][T11010] bond_slave_1: entered allmulticast mode
[  325.648853][T11010] bridge0: port 1(bond0) entered blocking state
[  325.655369][T11010] bridge0: port 1(bond0) entered forwarding state
[  325.707233][T11012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2045'.
[  325.724313][T11015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2045'.
[  325.933235][T11019] FAULT_INJECTION: forcing a failure.
[  325.933235][T11019] name failslab, interval 1, probability 0, space 0, times 0
[  325.970247][T11019] CPU: 1 PID: 11019 Comm: syz.0.2048 Not tainted 6.6.102-syzkaller #0
[  325.978575][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  325.988658][T11019] Call Trace:
[  325.991963][T11019]  <TASK>
[  325.994924][T11019]  dump_stack_lvl+0x16c/0x230
[  325.999732][T11019]  ? show_regs_print_info+0x20/0x20
[  326.004986][T11019]  ? load_image+0x3b0/0x3b0
[  326.009534][T11019]  ? __might_sleep+0xe0/0xe0
[  326.014160][T11019]  ? __lock_acquire+0x7c80/0x7c80
[  326.019252][T11019]  ? mark_lock+0x94/0x320
[  326.023630][T11019]  should_fail_ex+0x39d/0x4d0
[  326.028365][T11019]  should_failslab+0x9/0x20
[  326.032910][T11019]  slab_pre_alloc_hook+0x59/0x310
[  326.037986][T11019]  ? __get_vm_area_node+0x125/0x370
[  326.043273][T11019]  __kmem_cache_alloc_node+0x53/0x260
[  326.048698][T11019]  ? __get_vm_area_node+0x125/0x370
[  326.053951][T11019]  kmalloc_node_trace+0x26/0xe0
[  326.058851][T11019]  __get_vm_area_node+0x125/0x370
[  326.063949][T11019]  __vmalloc_node_range+0x36e/0x1320
[  326.069280][T11019]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  326.074860][T11019]  ? mark_lock+0x94/0x320
[  326.079247][T11019]  ? __lock_acquire+0x1334/0x7c80
[  326.084304][T11019]  ? verify_lock_unused+0x140/0x140
[  326.089563][T11019]  ? free_vm_area+0x50/0x50
[  326.094109][T11019]  ? end_current_label_crit_section+0x170/0x170
[  326.100399][T11019]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  326.105984][T11019]  __vmalloc+0x7a/0x90
[  326.110091][T11019]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  326.115684][T11019]  bpf_prog_alloc_no_stats+0x47/0x440
[  326.121095][T11019]  ? bpf_prog_alloc+0x2b/0x1b0
[  326.125892][T11019]  bpf_prog_alloc+0x3d/0x1b0
[  326.130523][T11019]  bpf_prog_load+0x6b8/0x16d0
[  326.135246][T11019]  ? map_freeze+0x420/0x420
[  326.139815][T11019]  ? __might_fault+0xaa/0x120
[  326.144524][T11019]  ? __lock_acquire+0x7c80/0x7c80
[  326.149591][T11019]  ? file_end_write+0x159/0x250
[  326.154487][T11019]  ? __might_fault+0xaa/0x120
[  326.159210][T11019]  ? __might_fault+0xc6/0x120
[  326.163930][T11019]  ? __might_fault+0xaa/0x120
[  326.168647][T11019]  ? bpf_lsm_bpf+0x9/0x10
[  326.173011][T11019]  ? security_bpf+0x7e/0xa0
[  326.177559][T11019]  __sys_bpf+0x55a/0x800
[  326.181844][T11019]  ? bpf_link_show_fdinfo+0x350/0x350
[  326.187307][T11019]  ? lock_chain_count+0x20/0x20
[  326.192208][T11019]  __x64_sys_bpf+0x7c/0x90
[  326.196665][T11019]  do_syscall_64+0x55/0xb0
[  326.201123][T11019]  ? clear_bhb_loop+0x40/0x90
[  326.205829][T11019]  ? clear_bhb_loop+0x40/0x90
[  326.210543][T11019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  326.216477][T11019] RIP: 0033:0x7f085e78ebe9
[  326.220927][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.240567][T11019] RSP: 002b:00007f085f5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  326.249019][T11019] RAX: ffffffffffffffda RBX: 00007f085e9b5fa0 RCX: 00007f085e78ebe9
[  326.257025][T11019] RDX: 0000000000000094 RSI: 0000200000000ec0 RDI: 0000000000000005
[  326.265031][T11019] RBP: 00007f085f5d9090 R08: 0000000000000000 R09: 0000000000000000
[  326.273040][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.281054][T11019] R13: 00007f085e9b6038 R14: 00007f085e9b5fa0 R15: 00007ffd98111438
[  326.289075][T11019]  </TASK>
[  326.295146][T11019] syz.0.2048: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  326.298752][ T2888] wlan1: Trigger new scan to find an IBSS to join
[  326.312366][T11019] CPU: 1 PID: 11019 Comm: syz.0.2048 Not tainted 6.6.102-syzkaller #0
[  326.326606][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  326.336697][T11019] Call Trace:
[  326.340004][T11019]  <TASK>
[  326.342979][T11019]  dump_stack_lvl+0x16c/0x230
[  326.347710][T11019]  ? show_regs_print_info+0x20/0x20
[  326.352951][T11019]  ? load_image+0x3b0/0x3b0
[  326.357506][T11019]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  326.363967][T11019]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  326.370512][T11019]  warn_alloc+0x210/0x300
[  326.374881][T11019]  ? __get_vm_area_node+0x125/0x370
[  326.380122][T11019]  ? zone_watermark_ok_safe+0x230/0x230
[  326.385715][T11019]  ? rcu_is_watching+0x15/0xb0
[  326.390524][T11019]  ? __get_vm_area_node+0x356/0x370
[  326.395747][T11019]  __vmalloc_node_range+0x393/0x1320
[  326.401048][T11019]  ? mark_lock+0x94/0x320
[  326.405393][T11019]  ? __lock_acquire+0x1334/0x7c80
[  326.410429][T11019]  ? verify_lock_unused+0x140/0x140
[  326.415649][T11019]  ? free_vm_area+0x50/0x50
[  326.420174][T11019]  ? end_current_label_crit_section+0x170/0x170
[  326.426451][T11019]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  326.432019][T11019]  __vmalloc+0x7a/0x90
[  326.436102][T11019]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  326.441671][T11019]  bpf_prog_alloc_no_stats+0x47/0x440
[  326.447052][T11019]  ? bpf_prog_alloc+0x2b/0x1b0
[  326.451824][T11019]  bpf_prog_alloc+0x3d/0x1b0
[  326.456429][T11019]  bpf_prog_load+0x6b8/0x16d0
[  326.461125][T11019]  ? map_freeze+0x420/0x420
[  326.465643][T11019]  ? __might_fault+0xaa/0x120
[  326.470416][T11019]  ? __lock_acquire+0x7c80/0x7c80
[  326.475472][T11019]  ? file_end_write+0x159/0x250
[  326.480351][T11019]  ? __might_fault+0xaa/0x120
[  326.485036][T11019]  ? __might_fault+0xc6/0x120
[  326.489716][T11019]  ? __might_fault+0xaa/0x120
[  326.494402][T11019]  ? bpf_lsm_bpf+0x9/0x10
[  326.498743][T11019]  ? security_bpf+0x7e/0xa0
[  326.503264][T11019]  __sys_bpf+0x55a/0x800
[  326.507542][T11019]  ? bpf_link_show_fdinfo+0x350/0x350
[  326.512952][T11019]  ? lock_chain_count+0x20/0x20
[  326.517829][T11019]  __x64_sys_bpf+0x7c/0x90
[  326.522258][T11019]  do_syscall_64+0x55/0xb0
[  326.526709][T11019]  ? clear_bhb_loop+0x40/0x90
[  326.531394][T11019]  ? clear_bhb_loop+0x40/0x90
[  326.536086][T11019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  326.542009][T11019] RIP: 0033:0x7f085e78ebe9
[  326.546429][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.566047][T11019] RSP: 002b:00007f085f5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  326.574474][T11019] RAX: ffffffffffffffda RBX: 00007f085e9b5fa0 RCX: 00007f085e78ebe9
[  326.582454][T11019] RDX: 0000000000000094 RSI: 0000200000000ec0 RDI: 0000000000000005
[  326.590445][T11019] RBP: 00007f085f5d9090 R08: 0000000000000000 R09: 0000000000000000
[  326.598428][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.606410][T11019] R13: 00007f085e9b6038 R14: 00007f085e9b5fa0 R15: 00007ffd98111438
[  326.614403][T11019]  </TASK>
[  326.668259][T11019] Mem-Info:
[  326.671454][T11019] active_anon:5223 inactive_anon:0 isolated_anon:0
[  326.671454][T11019]  active_file:1363 inactive_file:39917 isolated_file:0
[  326.671454][T11019]  unevictable:768 dirty:356 writeback:0
[  326.671454][T11019]  slab_reclaimable:10102 slab_unreclaimable:92889
[  326.671454][T11019]  mapped:24312 shmem:1361 pagetables:565
[  326.671454][T11019]  sec_pagetables:0 bounce:0
[  326.671454][T11019]  kernel_misc_reclaimable:0
[  326.671454][T11019]  free:1369099 free_pcp:6497 free_cma:0
[  326.719075][T11019] Node 0 active_anon:20892kB inactive_anon:0kB active_file:5452kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97248kB dirty:1424kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no
[  326.752604][T11019] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  326.801581][T11019] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  326.841453][T11019] lowmem_reserve[]: 0 2525 2526 2526 2526
[  326.847829][T11019] Node 0 DMA32 free:1569864kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20748kB inactive_anon:0kB active_file:5452kB inactive_file:158132kB unevictable:1536kB writepending:1424kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:5624kB local_pcp:4148kB free_cma:0kB
[  326.880462][T11019] lowmem_reserve[]: 0 0 1 1 1
[  326.893562][T11019] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  326.926225][T11019] lowmem_reserve[]: 0 0 0 0 0
[  326.931098][T11019] Node 1 Normal free:3891168kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20624kB local_pcp:9648kB free_cma:0kB
[  326.970763][T11019] lowmem_reserve[]: 0 0 0 0 0
[  326.976767][T11019] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  326.990000][T11019] Node 0 DMA32: 748*4kB (UME) 353*8kB (UME) 559*16kB (UME) 857*32kB (UME) 330*64kB (UME) 92*128kB (UE) 31*256kB (U) 6*512kB (U) 1*1024kB (M) 4*2048kB (UME) 360*4096kB (M) = 1569864kB
[  327.008697][T11019] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  327.021058][T11019] Node 1 Normal: 268*4kB (UME) 62*8kB (UME) 34*16kB (UME) 61*32kB (UME) 18*64kB (UME) 5*128kB (UE) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3891168kB
[  327.043728][T11019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  327.057517][T11019] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.067974][T11019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  327.083389][T11019] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.092974][T11019] 42641 total pagecache pages
[  327.102486][T11019] 0 pages in swap cache
[  327.109285][T11019] Free swap  = 124996kB
[  327.113488][T11019] Total swap = 124996kB
[  327.125479][T11019] 2097051 pages RAM
[  327.129457][T11019] 0 pages HighMem/MovableOnly
[  327.137757][T11019] 416138 pages reserved
[  327.142072][T11019] 0 pages cma reserved
[  327.813048][T11039] netlink: 'syz.1.2056': attribute type 39 has an invalid length.
[  327.980454][T11042] netlink: 'syz.3.2057': attribute type 29 has an invalid length.
[  327.998742][T11042] netlink: 'syz.3.2057': attribute type 29 has an invalid length.
[  328.010037][T11042] netlink: 'syz.3.2057': attribute type 29 has an invalid length.
[  328.027228][T11042] netlink: 'syz.3.2057': attribute type 29 has an invalid length.
[  328.272884][T11054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'.
[  328.282088][T11054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'.
[  328.299275][T11047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'.
[  328.309763][T11047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'.
[  329.264038][   T59] wlan1: Trigger new scan to find an IBSS to join
[  329.376165][T11071] netlink: 'syz.2.2068': attribute type 29 has an invalid length.
[  329.480306][T11071] netlink: 'syz.2.2068': attribute type 29 has an invalid length.
[  329.489974][T11072] netlink: 'syz.2.2068': attribute type 29 has an invalid length.
[  330.583993][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2071'.
[  330.648999][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2071'.
[  330.695172][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2071'.
[  330.704800][T11082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2071'.
[  331.185509][ T2929] wlan1: Creating new IBSS network, BSSID c6:88:ab:82:df:76
[  331.807818][T11088] FAULT_INJECTION: forcing a failure.
[  331.807818][T11088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.844759][T11088] CPU: 0 PID: 11088 Comm: syz.1.2081 Not tainted 6.6.102-syzkaller #0
[  331.853005][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  331.863108][T11088] Call Trace:
[  331.866441][T11088]  <TASK>
[  331.869410][T11088]  dump_stack_lvl+0x16c/0x230
[  331.874121][T11088]  ? show_regs_print_info+0x20/0x20
[  331.879381][T11088]  ? load_image+0x3b0/0x3b0
[  331.883942][T11088]  ? __might_fault+0xaa/0x120
[  331.888651][T11088]  ? __lock_acquire+0x7c80/0x7c80
[  331.893731][T11088]  should_fail_ex+0x39d/0x4d0
[  331.898468][T11088]  _copy_from_iter+0x1d3/0x1290
[  331.903368][T11088]  ? slab_post_alloc_hook+0x8a/0x4d0
[  331.908719][T11088]  ? __virt_addr_valid+0x18c/0x540
[  331.913879][T11088]  ? __lock_acquire+0x7c80/0x7c80
[  331.918938][T11088]  ? rcu_is_watching+0x15/0xb0
[  331.923750][T11088]  ? copyout_mc+0x70/0x70
[  331.928117][T11088]  ? __virt_addr_valid+0x18c/0x540
[  331.933263][T11088]  ? __virt_addr_valid+0x18c/0x540
[  331.938412][T11088]  ? __virt_addr_valid+0x469/0x540
[  331.943570][T11088]  ? __check_object_size+0x506/0xa30
[  331.948908][T11088]  netlink_sendmsg+0x75c/0xbe0
[  331.953728][T11088]  ? netlink_getsockopt+0x580/0x580
[  331.958958][T11088]  ? aa_sock_msg_perm+0x94/0x150
[  331.963927][T11088]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  331.969233][T11088]  ? security_socket_sendmsg+0x80/0xa0
[  331.974769][T11088]  ? netlink_getsockopt+0x580/0x580
[  331.979994][T11088]  ____sys_sendmsg+0x5bf/0x950
[  331.984786][T11088]  ? __asan_memset+0x22/0x40
[  331.989400][T11088]  ? __sys_sendmsg_sock+0x30/0x30
[  331.994450][T11088]  ? __import_iovec+0x5f2/0x860
[  331.999335][T11088]  ? import_iovec+0x73/0xa0
[  332.003873][T11088]  ___sys_sendmsg+0x220/0x290
[  332.008581][T11088]  ? __sys_sendmsg+0x270/0x270
[  332.013366][T11088]  ? __lock_acquire+0x7c80/0x7c80
[  332.018439][T11088]  __se_sys_sendmsg+0x1a5/0x270
[  332.023302][T11088]  ? __x64_sys_sendmsg+0x80/0x80
[  332.028262][T11088]  ? lockdep_hardirqs_on+0x98/0x150
[  332.033473][T11088]  do_syscall_64+0x55/0xb0
[  332.037893][T11088]  ? clear_bhb_loop+0x40/0x90
[  332.042586][T11088]  ? clear_bhb_loop+0x40/0x90
[  332.047281][T11088]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  332.053188][T11088] RIP: 0033:0x7fe44058ebe9
[  332.057623][T11088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.077270][T11088] RSP: 002b:00007fe441351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.085720][T11088] RAX: ffffffffffffffda RBX: 00007fe4407b5fa0 RCX: 00007fe44058ebe9
[  332.093709][T11088] RDX: 0000000004040044 RSI: 0000200000000000 RDI: 0000000000000003
[  332.101704][T11088] RBP: 00007fe441351090 R08: 0000000000000000 R09: 0000000000000000
[  332.109689][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.117683][T11088] R13: 00007fe4407b6038 R14: 00007fe4407b5fa0 R15: 00007ffcf6492238
[  332.125685][T11088]  </TASK>
[  333.328546][T11104] validate_nla: 1 callbacks suppressed
[  333.328583][T11104] netlink: 'syz.2.2078': attribute type 29 has an invalid length.
[  333.352859][T11104] netlink: 'syz.2.2078': attribute type 29 has an invalid length.
[  333.362760][T11104] netlink: 'syz.2.2078': attribute type 29 has an invalid length.
[  333.376549][T11104] netlink: 'syz.2.2078': attribute type 29 has an invalid length.
[  333.539846][T11110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2080'.
[  333.573938][T11110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2080'.
[  333.583189][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2080'.
[  333.605625][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2080'.
[  333.739612][T11112] caif0: entered promiscuous mode
[  333.745138][T11112] caif0: entered allmulticast mode
[  333.885945][T11115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.057920][T11120] macsec0: entered promiscuous mode
[  334.064081][T11120] macsec0: entered allmulticast mode
[  334.071706][T11120] veth1_macvtap: entered allmulticast mode
[  334.249069][T11126] netlink: 'syz.0.2086': attribute type 39 has an invalid length.
[  334.440690][T11134] FAULT_INJECTION: forcing a failure.
[  334.440690][T11134] name failslab, interval 1, probability 0, space 0, times 0
[  334.459681][T11134] CPU: 1 PID: 11134 Comm: syz.3.2089 Not tainted 6.6.102-syzkaller #0
[  334.467954][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  334.478136][T11134] Call Trace:
[  334.481458][T11134]  <TASK>
[  334.484419][T11134]  dump_stack_lvl+0x16c/0x230
[  334.489142][T11134]  ? show_regs_print_info+0x20/0x20
[  334.494395][T11134]  ? load_image+0x3b0/0x3b0
[  334.498959][T11134]  ? __might_sleep+0xe0/0xe0
[  334.503598][T11134]  ? __lock_acquire+0x7c80/0x7c80
[  334.508678][T11134]  should_fail_ex+0x39d/0x4d0
[  334.513419][T11134]  should_failslab+0x9/0x20
[  334.517975][T11134]  slab_pre_alloc_hook+0x59/0x310
[  334.523052][T11134]  kmem_cache_alloc_node+0x60/0x330
[  334.528297][T11134]  ? __alloc_skb+0x108/0x2c0
[  334.532936][T11134]  __alloc_skb+0x108/0x2c0
[  334.537402][T11134]  netlink_dump+0x1cf/0xde0
[  334.541960][T11134]  ? rcu_is_watching+0x15/0xb0
[  334.546767][T11134]  ? trace_contention_end+0x39/0xe0
[  334.552023][T11134]  ? netlink_lookup+0x200/0x200
[  334.556952][T11134]  ? netlink_autobind+0x300/0x300
[  334.562028][T11134]  ? netlink_lookup+0x30/0x200
[  334.566823][T11134]  ? netlink_lookup+0x30/0x200
[  334.571605][T11134]  __netlink_dump_start+0x5f1/0x810
[  334.576820][T11134]  rtnetlink_rcv_msg+0xba1/0xf10
[  334.581777][T11134]  ? rtnl_fdb_get+0xc60/0xc60
[  334.586470][T11134]  ? rtnetlink_rcv_msg+0x1eb/0xf10
[  334.591614][T11134]  ? rtnetlink_bind+0x80/0x80
[  334.596315][T11134]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  334.602308][T11134]  ? __dev_queue_xmit+0x245/0x35a0
[  334.607430][T11134]  ? lock_chain_count+0x20/0x20
[  334.612303][T11134]  ? __local_bh_enable_ip+0x12e/0x1c0
[  334.617686][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  334.622906][T11134]  ? __local_bh_enable_ip+0x12e/0x1c0
[  334.628305][T11134]  ? _local_bh_enable+0xa0/0xa0
[  334.633212][T11134]  ? __dev_queue_xmit+0x245/0x35a0
[  334.634293][T11137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.638346][T11134]  ? __dev_queue_xmit+0x1449/0x35a0
[  334.638413][T11134]  ? __dev_queue_xmit+0x245/0x35a0
[  334.663891][T11134]  ? rtnl_fdb_get+0xc60/0xc60
[  334.668633][T11134]  ? ref_tracker_free+0x634/0x7d0
[  334.673699][T11134]  ? __copy_skb_header+0xa7/0x550
[  334.678871][T11134]  netlink_rcv_skb+0x216/0x480
[  334.683682][T11134]  ? rtnetlink_bind+0x80/0x80
[  334.688408][T11134]  ? netlink_ack+0x1110/0x1110
[  334.693230][T11134]  ? __lock_acquire+0x7c80/0x7c80
[  334.698305][T11134]  ? netlink_deliver_tap+0x2e/0x1b0
[  334.703558][T11134]  netlink_unicast+0x751/0x8d0
[  334.708379][T11134]  netlink_sendmsg+0x8c1/0xbe0
[  334.713204][T11134]  ? netlink_getsockopt+0x580/0x580
[  334.718448][T11134]  ? aa_sock_msg_perm+0x94/0x150
[  334.723436][T11134]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  334.728764][T11134]  ? security_socket_sendmsg+0x80/0xa0
[  334.734264][T11134]  ? netlink_getsockopt+0x580/0x580
[  334.739506][T11134]  ____sys_sendmsg+0x5bf/0x950
[  334.744323][T11134]  ? __asan_memset+0x22/0x40
[  334.748949][T11134]  ? __sys_sendmsg_sock+0x30/0x30
[  334.754003][T11134]  ? __import_iovec+0x5f2/0x860
[  334.758897][T11134]  ? import_iovec+0x73/0xa0
[  334.763443][T11134]  ___sys_sendmsg+0x220/0x290
[  334.768177][T11134]  ? __sys_sendmsg+0x270/0x270
[  334.772983][T11134]  ? __lock_acquire+0x7c80/0x7c80
[  334.778061][T11134]  __se_sys_sendmsg+0x1a5/0x270
[  334.782945][T11134]  ? __x64_sys_sendmsg+0x80/0x80
[  334.787926][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  334.793152][T11134]  do_syscall_64+0x55/0xb0
[  334.797588][T11134]  ? clear_bhb_loop+0x40/0x90
[  334.802277][T11134]  ? clear_bhb_loop+0x40/0x90
[  334.806966][T11134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  334.812887][T11134] RIP: 0033:0x7f282e58ebe9
[  334.817321][T11134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.836956][T11134] RSP: 002b:00007f282f4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.845393][T11134] RAX: ffffffffffffffda RBX: 00007f282e7b5fa0 RCX: 00007f282e58ebe9
[  334.853396][T11134] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  334.861394][T11134] RBP: 00007f282f4c2090 R08: 0000000000000000 R09: 0000000000000000
[  334.869379][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.877368][T11134] R13: 00007f282e7b6038 R14: 00007f282e7b5fa0 R15: 00007ffc077e1398
[  334.885375][T11134]  </TASK>
[  335.929365][T11162] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2098'.
[  336.297610][   T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  336.635451][T11173] netlink: 'syz.3.2102': attribute type 49 has an invalid length.
[  336.749066][T11173] pim6reg1: entered promiscuous mode
[  336.776526][T11173] pim6reg1: entered allmulticast mode
[  336.857506][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'.
[  336.876773][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'.
[  336.887326][T11182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'.
[  337.011604][T11182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'.
[  337.225572][ T2875] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  337.238505][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  340.586098][T11206] FAULT_INJECTION: forcing a failure.
[  340.586098][T11206] name failslab, interval 1, probability 0, space 0, times 0
[  340.603148][T11206] CPU: 0 PID: 11206 Comm: syz.3.2113 Not tainted 6.6.102-syzkaller #0
[  340.611372][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  340.621479][T11206] Call Trace:
[  340.624830][T11206]  <TASK>
[  340.627798][T11206]  dump_stack_lvl+0x16c/0x230
[  340.632526][T11206]  ? show_regs_print_info+0x20/0x20
[  340.637773][T11206]  ? load_image+0x3b0/0x3b0
[  340.642333][T11206]  ? __might_sleep+0xe0/0xe0
[  340.646966][T11206]  ? __lock_acquire+0x7c80/0x7c80
[  340.652039][T11206]  should_fail_ex+0x39d/0x4d0
[  340.656774][T11206]  should_failslab+0x9/0x20
[  340.661316][T11206]  slab_pre_alloc_hook+0x59/0x310
[  340.666390][T11206]  kmem_cache_alloc_node+0x60/0x330
[  340.671638][T11206]  ? __alloc_skb+0x108/0x2c0
[  340.676275][T11206]  __alloc_skb+0x108/0x2c0
[  340.680742][T11206]  netlink_dump+0x1cf/0xde0
[  340.685290][T11206]  ? rcu_is_watching+0x15/0xb0
[  340.690097][T11206]  ? trace_contention_end+0x39/0xe0
[  340.695344][T11206]  ? netlink_lookup+0x200/0x200
[  340.700248][T11206]  ? netlink_autobind+0x300/0x300
[  340.705318][T11206]  ? netlink_lookup+0x30/0x200
[  340.710123][T11206]  ? netlink_lookup+0x30/0x200
[  340.714931][T11206]  __netlink_dump_start+0x5f1/0x810
[  340.720179][T11206]  rtnetlink_rcv_msg+0xba1/0xf10
[  340.725165][T11206]  ? rtnl_fdb_get+0xc60/0xc60
[  340.729883][T11206]  ? rtnetlink_rcv_msg+0x1eb/0xf10
[  340.735034][T11206]  ? rtnetlink_bind+0x80/0x80
[  340.739748][T11206]  ? perf_trace_preemptirq_template+0xa4/0x340
[  340.745942][T11206]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  340.751979][T11206]  ? lock_chain_count+0x20/0x20
[  340.756866][T11206]  ? __local_bh_enable_ip+0x12e/0x1c0
[  340.762264][T11206]  ? lockdep_hardirqs_on+0x98/0x150
[  340.767489][T11206]  ? __local_bh_enable_ip+0x12e/0x1c0
[  340.772885][T11206]  ? _local_bh_enable+0xa0/0xa0
[  340.777783][T11206]  ? __dev_queue_xmit+0x245/0x35a0
[  340.782924][T11206]  ? __dev_queue_xmit+0x1449/0x35a0
[  340.788169][T11206]  ? __dev_queue_xmit+0x245/0x35a0
[  340.793318][T11206]  ? rtnl_fdb_get+0xc60/0xc60
[  340.798039][T11206]  ? ref_tracker_free+0x634/0x7d0
[  340.803094][T11206]  ? __copy_skb_header+0xa7/0x550
[  340.808170][T11206]  netlink_rcv_skb+0x216/0x480
[  340.812972][T11206]  ? rtnetlink_bind+0x80/0x80
[  340.817702][T11206]  ? netlink_ack+0x1110/0x1110
[  340.822555][T11206]  ? __lock_acquire+0x7c80/0x7c80
[  340.827658][T11206]  ? netlink_deliver_tap+0x2e/0x1b0
[  340.832911][T11206]  netlink_unicast+0x751/0x8d0
[  340.837760][T11206]  netlink_sendmsg+0x8c1/0xbe0
[  340.842565][T11206]  ? netlink_getsockopt+0x580/0x580
[  340.847800][T11206]  ? aa_sock_msg_perm+0x94/0x150
[  340.852777][T11206]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  340.858100][T11206]  ? security_socket_sendmsg+0x80/0xa0
[  340.863588][T11206]  ? netlink_getsockopt+0x580/0x580
[  340.868823][T11206]  ____sys_sendmsg+0x5bf/0x950
[  340.873629][T11206]  ? __asan_memset+0x22/0x40
[  340.878340][T11206]  ? __sys_sendmsg_sock+0x30/0x30
[  340.883396][T11206]  ? __import_iovec+0x5f2/0x860
[  340.888317][T11206]  ? import_iovec+0x73/0xa0
[  340.892880][T11206]  ___sys_sendmsg+0x220/0x290
[  340.897618][T11206]  ? __sys_sendmsg+0x270/0x270
[  340.902466][T11206]  ? __lock_acquire+0x7c80/0x7c80
[  340.907575][T11206]  __se_sys_sendmsg+0x1a5/0x270
[  340.912472][T11206]  ? __x64_sys_sendmsg+0x80/0x80
[  340.917471][T11206]  ? lockdep_hardirqs_on+0x98/0x150
[  340.922736][T11206]  do_syscall_64+0x55/0xb0
[  340.927198][T11206]  ? clear_bhb_loop+0x40/0x90
[  340.931901][T11206]  ? clear_bhb_loop+0x40/0x90
[  340.936615][T11206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.942553][T11206] RIP: 0033:0x7f282e58ebe9
[  340.946993][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.966649][T11206] RSP: 002b:00007f282f4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.975110][T11206] RAX: ffffffffffffffda RBX: 00007f282e7b5fa0 RCX: 00007f282e58ebe9
[  340.983119][T11206] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  340.991123][T11206] RBP: 00007f282f4c2090 R08: 0000000000000000 R09: 0000000000000000
[  340.999130][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.007133][T11206] R13: 00007f282e7b6038 R14: 00007f282e7b5fa0 R15: 00007ffc077e1398
[  341.015150][T11206]  </TASK>
[  341.754150][T11213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2115'.
[  341.763256][T11213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2115'.
[  341.830474][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2115'.
[  341.904227][T11213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2115'.
[  342.045214][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2116'.
[  342.166526][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2116'.
[  342.175479][T11221] netlink: 'syz.3.2118': attribute type 29 has an invalid length.
[  342.199951][T11215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2116'.
[  342.209407][T11221] netlink: 'syz.3.2118': attribute type 29 has an invalid length.
[  342.237259][T11217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2116'.
[  342.246833][T11221] netlink: 'syz.3.2118': attribute type 29 has an invalid length.
[  342.255572][T11221] netlink: 'syz.3.2118': attribute type 29 has an invalid length.
[  342.417131][ T5796] Bluetooth: hci0: ISO packet for unknown connection handle 27
[  342.602406][T11225] netlink: 'syz.3.2120': attribute type 17 has an invalid length.
[  342.612352][T11225] netlink: 'syz.3.2120': attribute type 16 has an invalid length.
[  342.621755][T11225] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2120'.
[  343.699426][T11246] FAULT_INJECTION: forcing a failure.
[  343.699426][T11246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.712580][T11246] CPU: 0 PID: 11246 Comm: syz.2.2125 Not tainted 6.6.102-syzkaller #0
[  343.720763][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  343.730826][T11246] Call Trace:
[  343.734122][T11246]  <TASK>
[  343.737059][T11246]  dump_stack_lvl+0x16c/0x230
[  343.741773][T11246]  ? show_regs_print_info+0x20/0x20
[  343.746999][T11246]  ? load_image+0x3b0/0x3b0
[  343.751521][T11246]  ? __might_fault+0xaa/0x120
[  343.756218][T11246]  ? __lock_acquire+0x7c80/0x7c80
[  343.761288][T11246]  should_fail_ex+0x39d/0x4d0
[  343.765998][T11246]  _copy_from_user+0x2f/0xe0
[  343.770618][T11246]  ___sys_sendmsg+0x159/0x290
[  343.775330][T11246]  ? __sys_sendmsg+0x270/0x270
[  343.780185][T11246]  ? __lock_acquire+0x7c80/0x7c80
[  343.785253][T11246]  __se_sys_sendmsg+0x1a5/0x270
[  343.790117][T11246]  ? __x64_sys_sendmsg+0x80/0x80
[  343.795081][T11246]  ? lockdep_hardirqs_on+0x98/0x150
[  343.800307][T11246]  do_syscall_64+0x55/0xb0
[  343.804765][T11246]  ? clear_bhb_loop+0x40/0x90
[  343.809466][T11246]  ? clear_bhb_loop+0x40/0x90
[  343.814161][T11246]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  343.820087][T11246] RIP: 0033:0x7f069138ebe9
[  343.824520][T11246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.844138][T11246] RSP: 002b:00007f06921f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.852566][T11246] RAX: ffffffffffffffda RBX: 00007f06915b5fa0 RCX: 00007f069138ebe9
[  343.860547][T11246] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  343.868530][T11246] RBP: 00007f06921f9090 R08: 0000000000000000 R09: 0000000000000000
[  343.876534][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.884516][T11246] R13: 00007f06915b6038 R14: 00007f06915b5fa0 R15: 00007ffffbf56118
[  343.892527][T11246]  </TASK>
[  344.131791][T11254] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2127'.
[  344.156416][T11253] netlink: 'syz.1.2128': attribute type 29 has an invalid length.
[  344.214202][T11253] netlink: 'syz.1.2128': attribute type 29 has an invalid length.
[  344.235643][T11255] netlink: 'syz.1.2128': attribute type 29 has an invalid length.
[  344.257136][T11253] netlink: 'syz.1.2128': attribute type 29 has an invalid length.
[  345.021721][T11272] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  346.877533][ T5796] Bluetooth: hci3: ISO packet for unknown connection handle 27
[  348.669405][T11329] __nla_validate_parse: 12 callbacks suppressed
[  348.670163][T11329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2151'.
[  348.713926][T11329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2151'.
[  348.734369][T11328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2151'.
[  348.745721][T11328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2151'.
[  348.951862][T11336] FAULT_INJECTION: forcing a failure.
[  348.951862][T11336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  348.969276][T11336] CPU: 0 PID: 11336 Comm: syz.1.2155 Not tainted 6.6.102-syzkaller #0
[  348.977523][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  348.987661][T11336] Call Trace:
[  348.991004][T11336]  <TASK>
[  348.994007][T11336]  dump_stack_lvl+0x16c/0x230
[  348.998781][T11336]  ? show_regs_print_info+0x20/0x20
[  349.004054][T11336]  ? load_image+0x3b0/0x3b0
[  349.008644][T11336]  ? __lock_acquire+0x7c80/0x7c80
[  349.013757][T11336]  ? snprintf+0xdb/0x120
[  349.018099][T11336]  should_fail_ex+0x39d/0x4d0
[  349.022881][T11336]  _copy_to_user+0x2f/0xa0
[  349.027376][T11336]  simple_read_from_buffer+0xe7/0x150
[  349.032849][T11336]  proc_fail_nth_read+0x1e3/0x250
[  349.037963][T11336]  ? proc_fault_inject_write+0x340/0x340
[  349.043689][T11336]  ? fsnotify_perm+0x271/0x5e0
[  349.048538][T11336]  ? proc_fault_inject_write+0x340/0x340
[  349.054235][T11336]  vfs_read+0x27e/0x920
[  349.058480][T11336]  ? kernel_read+0x1e0/0x1e0
[  349.063150][T11336]  ? __fget_files+0x28/0x4d0
[  349.067822][T11336]  ? __fget_files+0x44a/0x4d0
[  349.072606][T11336]  ? __fdget_pos+0x2a3/0x330
[  349.077254][T11336]  ? ksys_read+0x75/0x250
[  349.081708][T11336]  ksys_read+0x147/0x250
[  349.086024][T11336]  ? vfs_write+0x940/0x940
[  349.090495][T11336]  ? lockdep_hardirqs_on+0x98/0x150
[  349.095749][T11336]  do_syscall_64+0x55/0xb0
[  349.100204][T11336]  ? clear_bhb_loop+0x40/0x90
[  349.104911][T11336]  ? clear_bhb_loop+0x40/0x90
[  349.109627][T11336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  349.115575][T11336] RIP: 0033:0x7fe44058d5fc
[  349.120029][T11336] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  349.139695][T11336] RSP: 002b:00007fe441351030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  349.148140][T11336] RAX: ffffffffffffffda RBX: 00007fe4407b5fa0 RCX: 00007fe44058d5fc
[  349.156145][T11336] RDX: 000000000000000f RSI: 00007fe4413510a0 RDI: 0000000000000006
[  349.164152][T11336] RBP: 00007fe441351090 R08: 0000000000000000 R09: 0000000000000000
[  349.172149][T11336] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  349.180159][T11336] R13: 00007fe4407b6038 R14: 00007fe4407b5fa0 R15: 00007ffcf6492238
[  349.188206][T11336]  </TASK>
[  349.411880][T11339] validate_nla: 5 callbacks suppressed
[  349.411980][T11339] netlink: 'syz.3.2157': attribute type 30 has an invalid length.
[  349.932808][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2163'.
[  349.957159][T11358] FAULT_INJECTION: forcing a failure.
[  349.957159][T11358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.964908][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2163'.
[  349.974314][T11358] CPU: 0 PID: 11358 Comm: syz.1.2164 Not tainted 6.6.102-syzkaller #0
[  349.987380][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  349.997469][T11358] Call Trace:
[  350.000787][T11358]  <TASK>
[  350.003753][T11358]  dump_stack_lvl+0x16c/0x230
[  350.008481][T11358]  ? show_regs_print_info+0x20/0x20
[  350.013708][T11358]  ? load_image+0x3b0/0x3b0
[  350.018253][T11358]  ? __might_fault+0xaa/0x120
[  350.022962][T11358]  ? __lock_acquire+0x7c80/0x7c80
[  350.028029][T11358]  should_fail_ex+0x39d/0x4d0
[  350.032799][T11358]  _copy_from_iter+0x1d3/0x1290
[  350.037693][T11358]  ? slab_post_alloc_hook+0x8a/0x4d0
[  350.043019][T11358]  ? __virt_addr_valid+0x18c/0x540
[  350.048174][T11358]  ? __lock_acquire+0x7c80/0x7c80
[  350.053230][T11358]  ? rcu_is_watching+0x15/0xb0
[  350.058037][T11358]  ? copyout_mc+0x70/0x70
[  350.062401][T11358]  ? __virt_addr_valid+0x18c/0x540
[  350.067537][T11358]  ? __virt_addr_valid+0x18c/0x540
[  350.072678][T11358]  ? __virt_addr_valid+0x469/0x540
[  350.077872][T11358]  ? __check_object_size+0x506/0xa30
[  350.083195][T11358]  netlink_sendmsg+0x75c/0xbe0
[  350.088002][T11358]  ? netlink_getsockopt+0x580/0x580
[  350.093233][T11358]  ? aa_sock_msg_perm+0x94/0x150
[  350.098215][T11358]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  350.103540][T11358]  ? security_socket_sendmsg+0x80/0xa0
[  350.109030][T11358]  ? netlink_getsockopt+0x580/0x580
[  350.114260][T11358]  ____sys_sendmsg+0x5bf/0x950
[  350.119068][T11358]  ? __asan_memset+0x22/0x40
[  350.123726][T11358]  ? __sys_sendmsg_sock+0x30/0x30
[  350.128787][T11358]  ? __import_iovec+0x5f2/0x860
[  350.133687][T11358]  ? import_iovec+0x73/0xa0
[  350.138234][T11358]  ___sys_sendmsg+0x220/0x290
[  350.143040][T11358]  ? __sys_sendmsg+0x270/0x270
[  350.147862][T11358]  ? __lock_acquire+0x7c80/0x7c80
[  350.152945][T11358]  __se_sys_sendmsg+0x1a5/0x270
[  350.157848][T11358]  ? __x64_sys_sendmsg+0x80/0x80
[  350.162840][T11358]  ? lockdep_hardirqs_on+0x98/0x150
[  350.168341][T11358]  do_syscall_64+0x55/0xb0
[  350.172781][T11358]  ? clear_bhb_loop+0x40/0x90
[  350.177497][T11358]  ? clear_bhb_loop+0x40/0x90
[  350.182204][T11358]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  350.188164][T11358] RIP: 0033:0x7fe44058ebe9
[  350.192626][T11358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.212279][T11358] RSP: 002b:00007fe441351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.220738][T11358] RAX: ffffffffffffffda RBX: 00007fe4407b5fa0 RCX: 00007fe44058ebe9
[  350.228760][T11358] RDX: 0000000004040044 RSI: 0000200000000000 RDI: 0000000000000003
[  350.236765][T11358] RBP: 00007fe441351090 R08: 0000000000000000 R09: 0000000000000000
[  350.244773][T11358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.252801][T11358] R13: 00007fe4407b6038 R14: 00007fe4407b5fa0 R15: 00007ffcf6492238
[  350.260828][T11358]  </TASK>
[  350.273926][T11354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2163'.
[  350.367248][T11354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2163'.
[  350.671946][T11363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.697844][T11367] netlink: 'syz.2.2168': attribute type 3 has an invalid length.
[  350.705828][T11367] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2168'.
[  350.721952][T11368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2167'.
[  350.764667][T11367] netlink: 'syz.2.2168': attribute type 1 has an invalid length.
[  351.469233][T11383] netlink: 'syz.3.2176': attribute type 29 has an invalid length.
[  351.486356][T11383] netlink: 'syz.3.2176': attribute type 29 has an invalid length.
[  351.502767][T11383] netlink: 'syz.3.2176': attribute type 29 has an invalid length.
[  351.530260][T11383] netlink: 'syz.3.2176': attribute type 29 has an invalid length.
[  352.034165][T11408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.407544][T11414] netlink: 'syz.1.2186': attribute type 29 has an invalid length.
[  352.431371][T11414] netlink: 'syz.1.2186': attribute type 29 has an invalid length.
[  352.476970][T11414] netlink: 'syz.1.2186': attribute type 29 has an invalid length.
[  352.912937][T11428] caif0: entered promiscuous mode
[  352.918154][T11428] caif0: entered allmulticast mode
[  353.397556][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.808206][T11456] __nla_validate_parse: 24 callbacks suppressed
[  353.808223][T11456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2202'.
[  353.838574][T11456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2202'.
[  353.860362][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2202'.
[  353.893197][T11456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2202'.
[  354.055680][T11460] caif0: entered promiscuous mode
[  354.060884][T11460] caif0: entered allmulticast mode
[  354.386223][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'.
[  354.397147][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'.
[  354.408718][T11470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'.
[  354.419105][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'.
[  354.528101][T11483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2211'.
[  354.550942][T11483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2211'.
[  354.722465][T11489] validate_nla: 11 callbacks suppressed
[  354.722484][T11489] netlink: 'syz.0.2214': attribute type 4 has an invalid length.
[  354.754389][T11489] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  354.962664][T11495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.341737][T11500] netlink: 'syz.1.2218': attribute type 29 has an invalid length.
[  355.382254][T11500] netlink: 'syz.1.2218': attribute type 29 has an invalid length.
[  355.490724][T11500] netlink: 'syz.1.2218': attribute type 29 has an invalid length.
[  356.710796][T11529] netlink: 'syz.1.2227': attribute type 29 has an invalid length.
[  356.731252][T11529] netlink: 'syz.1.2227': attribute type 29 has an invalid length.
[  356.747997][T11529] netlink: 'syz.1.2227': attribute type 29 has an invalid length.
[  357.162038][T11533] netlink: 'syz.1.2236': attribute type 29 has an invalid length.
[  357.167693][T11535] netlink: 'syz.3.2228': attribute type 29 has an invalid length.
[  357.182809][T11535] netlink: 'syz.3.2228': attribute type 29 has an invalid length.
[  357.222203][T11536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  359.560244][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.569936][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.580997][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.599095][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.608095][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  359.620121][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.043097][ T1138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.423262][T11573] validate_nla: 4 callbacks suppressed
[  360.423280][T11573] netlink: 'syz.2.2240': attribute type 29 has an invalid length.
[  360.509945][ T1138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.545024][T11573] netlink: 'syz.2.2240': attribute type 29 has an invalid length.
[  360.605267][T11579] __nla_validate_parse: 15 callbacks suppressed
[  360.605283][T11579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2241'.
[  360.669404][T11574] netlink: 'syz.2.2240': attribute type 29 has an invalid length.
[  360.677849][T11576] netlink: 'syz.2.2240': attribute type 29 has an invalid length.
[  360.699861][ T1138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.727796][T11579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2241'.
[  360.746036][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2241'.
[  360.860650][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2241'.
[  360.895417][ T1138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.229645][T11590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.342642][T11568] chnl_net:caif_netlink_parms(): no params data found
[  361.664454][ T5796] Bluetooth: hci2: command tx timeout
[  361.889747][T11568] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.900623][T11568] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.916088][T11568] bridge_slave_0: entered allmulticast mode
[  361.924603][T11568] bridge_slave_0: entered promiscuous mode
[  362.023009][T11568] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.044982][T11568] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.052253][T11568] bridge_slave_1: entered allmulticast mode
[  362.075514][T11568] bridge_slave_1: entered promiscuous mode
[  362.328454][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.381826][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.615841][T11568] team0: Port device team_slave_0 added
[  362.656818][T11568] team0: Port device team_slave_1 added
[  362.753750][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.760765][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.788550][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.823560][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.830753][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.904260][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.205161][T11568] hsr_slave_0: entered promiscuous mode
[  363.215430][T11568] hsr_slave_1: entered promiscuous mode
[  363.240182][T11568] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.262618][T11568] Cannot create hsr debugfs directory
[  363.369517][T11637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2249'.
[  363.394423][T11637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2249'.
[  363.418951][T11635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2249'.
[  363.451816][ T1138] hsr_slave_0: left promiscuous mode
[  363.461083][ T1138] hsr_slave_1: left promiscuous mode
[  363.471442][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.482522][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.499980][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.509027][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.518827][ T1138] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  363.527155][ T1138] batman_adv: batadv0: Removing interface: hsr_slave_1
[  363.535585][ T1138] bridge_slave_1: left allmulticast mode
[  363.541276][ T1138] bridge_slave_1: left promiscuous mode
[  363.548704][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.576193][ T1138] veth1_macvtap: left promiscuous mode
[  363.582679][ T1138] veth0_macvtap: left promiscuous mode
[  363.590478][ T1138] veth1_vlan: left promiscuous mode
[  363.598912][ T1138] veth0_vlan: left promiscuous mode
[  363.743785][ T5796] Bluetooth: hci2: command tx timeout
[  364.052332][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  364.093564][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  364.138411][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.183329][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.530578][ T1138] bond0 (unregistering): Released all slaves
[  364.618538][T11637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2249'.
[  364.776047][T11645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2251'.
[  364.832059][T11645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2251'.
[  378.968828][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  378.975323][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  395.615603][ T2901] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  395.625969][   T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  440.424325][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  440.430722][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  469.963579][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  469.970667][    C0] rcu: 	1-....: (1 GPs behind) idle=f744/1/0x4000000000000000 softirq=41759/41760 fqs=2100
[  469.981606][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  469.988050][    C0] rcu: 	 number:  8428430          0            0
[  469.994475][    C0] rcu: 	cputime:     6015      46502            0   ==> 52500(ms)
[  470.002297][    C0] rcu: 	(detected by 0, t=10505 jiffies, g=54593, q=1693 ncpus=2)
[  470.010137][    C0] Sending NMI from CPU 0 to CPUs 1:
[  470.015375][    C1] NMI backtrace for cpu 1
[  470.015391][    C1] CPU: 1 PID: 11644 Comm: syz.1.2250 Not tainted 6.6.102-syzkaller #0
[  470.015408][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.015417][    C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20
[  470.015441][    C1] Code: 06 25 ed ff e9 a1 03 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 a1 02 00 00 48 89 c4 48 89 e7 e8 f6 06 ed ff e9 81 03 00 00 90 <f3> 0f 1e fa 0f 01 ca fc 6a ff e8 81 02 00 00 48 89 c4 48 89 e7 e8
[  470.015456][    C1] RSP: 0018:ffffc900001f0ad8 EFLAGS: 00000006
[  470.015469][    C1] RAX: 4745e9f8720a9700 RBX: 1ffff9200003e168 RCX: 4745e9f8720a9700
[  470.015481][    C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0
[  470.015494][    C1] RBP: ffffc900001f0c00 R08: ffffffff8e4a882f R09: 1ffffffff1c95105
[  470.015511][    C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffffffff8cd35400
[  470.015523][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  470.015534][    C1] FS:  00007fe4413516c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  470.015548][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  470.015559][    C1] CR2: 00002000000029c0 CR3: 00000000630c2000 CR4: 00000000003506e0
[  470.015573][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  470.015583][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  470.015592][    C1] Call Trace:
[  470.015600][    C1]  <IRQ>
[  470.015605][    C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0
[  470.015631][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 39 58 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  470.015644][    C1] RSP: 0018:ffffc900001f0b00 EFLAGS: 00000206
[  470.015662][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  470.015690][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  470.015713][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  470.015739][    C1]  ? read_lock_is_recursive+0x20/0x20
[  470.015762][    C1]  __rcu_read_unlock+0x7c/0xd0
[  470.015787][    C1]  ? ieee80211_rx_napi+0xcc/0x3c0
[  470.015807][    C1]  ieee80211_rx_napi+0x21d/0x3c0
[  470.015829][    C1]  ? ieee80211_rx_list+0x2f10/0x2f10
[  470.015852][    C1]  ? skb_dequeue+0x10e/0x140
[  470.015880][    C1]  ieee80211_handle_queued_frames+0x106/0x1a0
[  470.015905][    C1]  tasklet_action_common+0x2eb/0x4c0
[  470.015922][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  470.015948][    C1]  ? local_clock_noinstr+0xa1/0xd0
[  470.015978][    C1]  ? trace_raw_output_tasklet+0xc0/0xc0
[  470.016002][    C1]  handle_softirqs+0x280/0x820
[  470.016019][    C1]  ? __irq_exit_rcu+0xc7/0x190
[  470.016037][    C1]  ? do_softirq+0x180/0x180
[  470.016054][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  470.016076][    C1]  __irq_exit_rcu+0xc7/0x190
[  470.016091][    C1]  ? irq_exit_rcu+0x20/0x20
[  470.016110][    C1]  irq_exit_rcu+0x9/0x20
[  470.016124][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  470.016147][    C1]  </IRQ>
[  470.016152][    C1]  <TASK>
[  470.016157][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  470.016183][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x140
[  470.016204][    C1] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 63 bf 01 00 00 00 e8 4b da e5 f6 e8 46 5f 16 f7 fb bf 01 00 00 00 <e8> db b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  470.016217][    C1] RSP: 0018:ffffc9000376f8c0 EFLAGS: 00000282
[  470.016230][    C1] RAX: 4745e9f8720a9700 RBX: 0000000000000000 RCX: 4745e9f8720a9700
[  470.016241][    C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: 0000000000000001
[  470.016252][    C1] RBP: ffffc9000376f960 R08: ffffffff8e4a882f R09: 1ffffffff1c95105
[  470.016264][    C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: 0000000000000000
[  470.016275][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006edf18
[  470.016296][    C1]  ? preempt_schedule_notrace+0x110/0x110
[  470.016321][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  470.016343][    C1]  irqentry_exit+0x67/0x70
[  470.016365][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  470.016396][    C1] RIP: 0010:refill_obj_stock+0x485/0x680
[  470.016414][    C1] Code: 0f 85 72 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5b 2c 89 08 f7 c3 00 02 00 00 0f 84 44 ff ff ff fb 4d 85 ed <0f> 85 3f ff ff ff e9 42 ff ff ff e8 2b db 36 02 85 c0 0f 84 b5 fc
[  470.016427][    C1] RSP: 0018:ffffc9000376fa20 EFLAGS: 00000246
[  470.016440][    C1] RAX: 4745e9f8720a9700 RBX: 0000000000000a02 RCX: 4745e9f8720a9700
[  470.016451][    C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0
[  470.016463][    C1] RBP: ffffc9000376fb10 R08: ffffffff8e4a882f R09: 1ffffffff1c95105
[  470.016474][    C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: dffffc0000000000
[  470.016486][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b8f37f98
[  470.016512][    C1]  ? refill_obj_stock+0xec/0x680
[  470.016529][    C1]  ? obj_cgroup_charge+0x620/0x620
[  470.016545][    C1]  ? percpu_ref_tryget+0x15/0x180
[  470.016563][    C1]  ? percpu_ref_tryget+0x15/0x180
[  470.016583][    C1]  ? percpu_ref_put+0x19/0x180
[  470.016601][    C1]  ? percpu_ref_put+0xef/0x180
[  470.016620][    C1]  obj_cgroup_charge+0x3c3/0x620
[  470.016637][    C1]  ? get_obj_cgroup_from_current+0xd4/0x280
[  470.016660][    C1]  ? obj_cgroup_charge+0xe6/0x620
[  470.016676][    C1]  ? mod_objcg_mlstate+0x310/0x310
[  470.016695][    C1]  ? get_obj_cgroup_from_current+0xd4/0x280
[  470.016711][    C1]  ? get_obj_cgroup_from_current+0xd4/0x280
[  470.016731][    C1]  slab_pre_alloc_hook+0x2eb/0x310
[  470.016758][    C1]  kmem_cache_alloc+0x5a/0x2e0
[  470.016780][    C1]  ? sk_prot_alloc+0x57/0x210
[  470.016799][    C1]  sk_prot_alloc+0x57/0x210
[  470.016814][    C1]  ? sk_alloc+0x24/0x360
[  470.016830][    C1]  sk_alloc+0x3a/0x360
[  470.016848][    C1]  unix_create1+0xb0/0x790
[  470.016873][    C1]  unix_create+0x154/0x1f0
[  470.016894][    C1]  __sock_create+0x4a6/0x940
[  470.016919][    C1]  __sys_socketpair+0x236/0x550
[  470.016943][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  470.016964][    C1]  do_syscall_64+0x55/0xb0
[  470.016982][    C1]  ? clear_bhb_loop+0x40/0x90
[  470.016996][    C1]  ? clear_bhb_loop+0x40/0x90
[  470.017011][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  470.017036][    C1] RIP: 0033:0x7fe44058ebe9
[  470.017050][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.017064][    C1] RSP: 002b:00007fe441351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  470.017078][    C1] RAX: ffffffffffffffda RBX: 00007fe4407b5fa0 RCX: 00007fe44058ebe9
[  470.017090][    C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
[  470.017105][    C1] RBP: 00007fe440611e19 R08: 0000000000000000 R09: 0000000000000000
[  470.017115][    C1] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000
[  470.017125][    C1] R13: 00007fe4407b6038 R14: 00007fe4407b5fa0 R15: 00007ffcf6492238
[  470.017145][    C1]  </TASK>