last executing test programs:

3.968475962s ago: executing program 2 (id=2281):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
close(r3)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x4408, 0x50000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x541b, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1, 0x0, 0x0, 0x2000000}, 0x40000)

3.203889909s ago: executing program 2 (id=2285):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r4=>0x0})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20439, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x19d5}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socket$kcm(0x2, 0x1, 0x84)
ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0301683a267dab5696170464", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3.200455049s ago: executing program 1 (id=2286):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0}) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
close(r0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0}) (async)
r5 = socket$kcm(0xf, 0x3, 0x2) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000040000000c0000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x23, 0x5, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYRES16=r9], 0x10) (async)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0205000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0)
close(r3) (async)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r10=>0x0, <r11=>0x0})
close(r10)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)

2.202019831s ago: executing program 1 (id=2289):
r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d00)="d59287f82779b99091781ee9b882bb984231b12ad1dca7865f66fd3fc474c4b9583a2a5b6042b314e67727bcb55eed7bad6671439248448a1447b867478e0843a80c5825db69563d0c64459d5ef95716a6b595c0df72c92c329568583a3b27628e1a5c485acf70a9feb5b471d9967df7a23bd01f5df6a1e01c66fd1dc0bbc8a02f", &(0x7f0000000800)="a2db3b76c35829a2728ae28967ec49f7e288bc71a1ecd62308805ee733fe7ddba7a95d19cd4fb76a115daee2d8cf4c3d4b49e2ae33f67e145e895a3d815064efda4224c798c9e6c898d510bee4", 0xa7c0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000300)="aaccb6a64d7ce852b4f3f9bc9b58e2fd52ceae8529eb1259ba421d453e9f5c94a26c06d2416112e32436aebe80e35d09", 0x0, 0xffffffffffffffff, 0x4}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r6) (async)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socket$kcm(0x23, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000e6792b52c95c20e4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000e6792b52c95c20e4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="051494fdc7fd9f6088880000968ecbc97ccb9b2b12d9486a0bfca1430871c5", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
close(r9)
socket$kcm(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f0000000480), &(0x7f00000004c0)=r9}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f0000000480), &(0x7f00000004c0)=r9}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r11, r7, 0x0, 0x75, &(0x7f00000000c0)='\x00\x99\x88\x04`v\x92\xbc\xb2\xcd\xb9\x00\x00\x00\x00\x00\x00\xcd\xf2\xf1tL\xf4S\xe8\xcff\xd7=\xdd|\x8c\x91\xebQBT\xd2c\xb8\x13\xc3\x04x\xd2K;\x06\x87b\x0f\xf6>\xd1Dc\xad~\fh\xf7J+&\xbc4\xa3/,U$\b\x9e1\xcfKZ\xc4\xc0\xa1\xacCv\xb8\xaa!8\xcb/9(\x0f\xb95\xee\tx\xd9\xaa\xab\x04\x05\x7f\xb4C\xba!0\xdf\xb9\xe4]\x9e\x84\xfd\xf7\xcb'}, 0x30) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r11, r7, 0x0, 0x75, &(0x7f00000000c0)='\x00\x99\x88\x04`v\x92\xbc\xb2\xcd\xb9\x00\x00\x00\x00\x00\x00\xcd\xf2\xf1tL\xf4S\xe8\xcff\xd7=\xdd|\x8c\x91\xebQBT\xd2c\xb8\x13\xc3\x04x\xd2K;\x06\x87b\x0f\xf6>\xd1Dc\xad~\fh\xf7J+&\xbc4\xa3/,U$\b\x9e1\xcfKZ\xc4\xc0\xa1\xacCv\xb8\xaa!8\xcb/9(\x0f\xb95\xee\tx\xd9\xaa\xab\x04\x05\x7f\xb4C\xba!0\xdf\xb9\xe4]\x9e\x84\xfd\xf7\xcb'}, 0x30)

2.174501301s ago: executing program 3 (id=2290):
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
unlink(&(0x7f00000000c0)='./file0\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

2.136184162s ago: executing program 2 (id=2291):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x8, 0x2, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x6}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x6, 0x0, 0x1, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20010000, 0xa573}, 0x0, 0x0, 0xfffffffc, 0x5}, r2, 0x8, 0xffffffffffffffff, 0x5)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a40)="b9ff020000000000000000000d00", 0x0, 0xe02, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

1.987615706s ago: executing program 0 (id=2292):
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000731135000000000007000000000000008500000005000000af00000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10)
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r3, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0xa, 0x4e1b, 0x3ff, @loopback={0xff00000000000000}, 0x5}, 0x80, 0x0}, 0x4c810)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x61}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0xbe50, 0xcf, &(0x7f00000005c0)=""/207, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000740)=[{0x8, 0x4, 0x9, 0x9}, {0x5, 0x4, 0xa}, {0x5, 0x1, 0xc, 0x1}, {0x4, 0x5, 0xe, 0xc}, {0x5, 0x3, 0x6, 0x8}], 0x10, 0x75d}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup=r0, r2, 0x7, 0x2, r0, @void, @value=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x114, 0x1d, 0x0, 0xfea5)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000008c0))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x480102, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x12200)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

1.583034455s ago: executing program 1 (id=2293):
r0 = socket$kcm(0xf, 0x3, 0x2)
close(r0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x840, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x656ee910, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x102d0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x10d0d1, 0x1003f, 0x0, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x8) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3b4a5fe1ed2a918c) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))

1.567863945s ago: executing program 0 (id=2294):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x11}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

1.543113745s ago: executing program 3 (id=2295):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x500)

1.419828218s ago: executing program 2 (id=2296):
socket$kcm(0x10, 0x5, 0x0)
r0 = socket$kcm(0x22, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000007c0)={'ipvlan0\x00', @broadcast})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x110052, 0x3, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10, 0x1}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000340)=r7, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffd}, 0x94)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={0xffffffffffffffff, 0x0, 0x0, 0xf5, &(0x7f0000001280), &(0x7f0000002280)=""/245, 0x7, 0x0, 0x0, 0x2e, 0x0, &(0x7f0000002440)="1a03815a6d509da011e2dbcfc8623dadc843b28018cb1a4839c65af71bb3bea3967c0463665f2d8be8e7656be5ba", 0x0, 0x0, 0xca3}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80184947, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000300)="6a6f8e5e", 0x4}], 0x2}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1.419241628s ago: executing program 0 (id=2297):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.sectors\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x16, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x4, 0x95, &(0x7f0000000a80)=""/149, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x1, 0x2, 0x8, 0x9}, {0x3, 0x4, 0xf, 0x5}], 0x10, 0x3}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000cc0)={0xffffffffffffffff, r3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211053300fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d927fbf455c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a735be909f96070460f4b084dacce6d77f1fff5e0e09cdb6fd5cafa21294d176b5def039fa54dc4dfb9ed05c45aa96a638efb93974d0a60b70312429b4e0c6a4c60c54d97bce87b05f72a67ce464e584fce26c48269f6314b2d5111767dccaa5f79b6761"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r6 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x88160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x9022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x40000000, &(0x7f0000000300)="d8586e459eff033b1c6d15c6fafdadbaa7959aee8d57787117b269d5f83a3b6b1c7c6c157f4ce06e885f33ea626032bf66a2ea3a0fd2ce0f60734ce2137bf370c1f0d9093864c2e59a59b1adce0374190544fd2031698345b8899586ac41faa331a340bfec01564fc3d01319c487fee4d8dedda34ec817ef85db77ddaa73a29a7552f5bac289a1604771c886ecf9b9edf37e87972ede8c5f3c8ee6a1da483c09b5f2e0dc76c79d44989cf099ffb5aa", 0xaf, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
close(r6)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0x8000})

1.382183999s ago: executing program 1 (id=2298):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x61, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b, 0x10000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)

1.244501962s ago: executing program 3 (id=2299):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x400006}, [@call={0x85, 0x0, 0x0, 0x3a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.171855974s ago: executing program 1 (id=2300):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd0332dfcd0d7fe74}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000791fce3b1db4c92890081100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x86)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x1, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13e, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000036ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

1.126976195s ago: executing program 3 (id=2301):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x3}, 0x1084, 0x10004, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x4c)

1.099776436s ago: executing program 2 (id=2302):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x8, 0x0, 0x0}}, 0x10)

930.481929ms ago: executing program 3 (id=2303):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r5)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0x0, 0x0}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x3)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYRES8=r9], &(0x7f0000000340)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044150510e0845013f2325f003909050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8800, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, 0x0)

881.8043ms ago: executing program 2 (id=2304):
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
unlink(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

608.141886ms ago: executing program 0 (id=2305):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x50)

375.924371ms ago: executing program 0 (id=2306):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x40000002)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18)

275.345323ms ago: executing program 1 (id=2307):
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000001c00)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/146, 0x92}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/12, 0xc}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000a00)=""/61, 0x3d}, {&(0x7f0000000a40)=""/68, 0x44}, {&(0x7f0000000ac0)=""/67, 0x43}], 0x9, &(0x7f0000000c00)=""/4096, 0x1000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98)
r4 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000000000007000000890f0463"], 0x20, 0x5}, 0x0)
close(r1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f)
socket$kcm(0x10, 0x2, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r7 = openat$cgroup_ro(r2, &(0x7f0000001c40)='freezer.parent_freezing\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000180)=r7, 0x4)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="ddc7e95827870855276d86f527536075b3925e18f814709bca285f7ebc7d686aed63be4c701f", 0x26}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044180503"], 0x30}, 0x40880)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x40, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
ioctl$TUNGETVNETLE(r1, 0x40047451, 0x0)

68.324568ms ago: executing program 3 (id=2308):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
sendmsg$inet(r0, 0x0, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x204, 0x655dbc91c479b1e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5580000000000000, 0x7}, 0x0, 0x85d, 0x8, 0x2, 0x3, 0x0, 0xb9, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000008}, [@generic={0x81, 0x1, 0x1, 0x5e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0)

0s ago: executing program 0 (id=2309):
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000005001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

s leftover after parsing attributes in process `syz.0.713'.
[  207.889724][ T7899] netlink: 14 bytes leftover after parsing attributes in process `syz.0.717'.
[  209.030486][ T7911] netlink: set zone limit has 8 unknown bytes
[  209.095317][ T7911] netlink: 'syz.0.721': attribute type 10 has an invalid length.
[  209.106706][ T7911] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.115998][ T7911] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.133652][ T7911] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.142687][ T7911] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.203018][ T7911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.235235][ T7911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.255946][ T7911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.279401][ T7911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.316099][ T7911] team0: Port device geneve1 added
[  210.915262][ T7956] sock: sock_set_timeout: `syz.0.736' (pid 7956) tries to set negative timeout
[  211.480704][ T7970] netlink: 'syz.0.744': attribute type 39 has an invalid length.
[  211.731488][ T7979] netlink: 'syz.2.747': attribute type 21 has an invalid length.
[  211.918979][ T7990] netlink: 'syz.3.751': attribute type 41 has an invalid length.
[  212.540801][ T8004] FAULT_INJECTION: forcing a failure.
[  212.540801][ T8004] name failslab, interval 1, probability 0, space 0, times 0
[  212.623016][ T8004] CPU: 0 PID: 8004 Comm: syz.1.758 Not tainted syzkaller #0
[  212.630467][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  212.640557][ T8004] Call Trace:
[  212.643859][ T8004]  <TASK>
[  212.646807][ T8004]  dump_stack_lvl+0x18c/0x250
[  212.651518][ T8004]  ? show_regs_print_info+0x20/0x20
[  212.656741][ T8004]  ? load_image+0x420/0x420
[  212.661281][ T8004]  ? __might_sleep+0xe0/0xe0
[  212.665873][ T8004]  ? __lock_acquire+0x7d80/0x7d80
[  212.670904][ T8004]  should_fail_ex+0x394/0x4c0
[  212.675597][ T8004]  should_failslab+0x9/0x20
[  212.680103][ T8004]  slab_pre_alloc_hook+0x59/0x300
[  212.685146][ T8004]  kmem_cache_alloc_node+0x5e/0x310
[  212.690345][ T8004]  ? __alloc_skb+0x103/0x2c0
[  212.694936][ T8004]  __alloc_skb+0x103/0x2c0
[  212.699355][ T8004]  sctp_packet_transmit+0x2ef/0x2950
[  212.704656][ T8004]  ? sctp_packet_append_chunk+0xafa/0x1040
[  212.710469][ T8004]  sctp_packet_singleton+0x230/0x330
[  212.715757][ T8004]  ? sctp_outq_select_transport+0x590/0x590
[  212.721747][ T8004]  ? sctp_outq_select_transport+0x480/0x590
[  212.727644][ T8004]  ? sctp_transport_burst_limited+0x197/0x280
[  212.733713][ T8004]  sctp_outq_flush+0x4fc/0x3260
[  212.738655][ T8004]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  212.744558][ T8004]  ? rcu_is_watching+0x15/0xb0
[  212.749325][ T8004]  ? sctp_outq_tail+0x8a0/0x8a0
[  212.754183][ T8004]  ? sctp_outq_uncork+0x4d/0xa0
[  212.759041][ T8004]  sctp_do_sm+0x53c4/0x5af0
[  212.763567][ T8004]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  212.769464][ T8004]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  212.775216][ T8004]  ? __sk_mem_raise_allocated+0x97b/0x11e0
[  212.781025][ T8004]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.787192][ T8004]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  212.792594][ T8004]  sctp_sendmsg_to_asoc+0x1009/0x17f0
[  212.797972][ T8004]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  212.803352][ T8004]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  212.809158][ T8004]  ? __sctp_connect+0xd80/0xd80
[  212.814004][ T8004]  ? __local_bh_enable_ip+0x13a/0x1c0
[  212.819376][ T8004]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  212.824919][ T8004]  ? security_sctp_bind_connect+0x89/0xb0
[  212.830635][ T8004]  sctp_sendmsg+0x1afa/0x27b0
[  212.835357][ T8004]  ? sctp_getsockopt+0xb60/0xb60
[  212.840297][ T8004]  ? aa_af_perm+0x330/0x330
[  212.844815][ T8004]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  212.851229][ T8004]  ? sock_rps_record_flow+0x19/0x3f0
[  212.856516][ T8004]  ? inet_sendmsg+0xce/0x2a0
[  212.861111][ T8004]  ? inet_send_prepare+0x250/0x250
[  212.866221][ T8004]  ____sys_sendmsg+0x61b/0x980
[  212.870991][ T8004]  ? __asan_memset+0x22/0x40
[  212.875579][ T8004]  ? __sys_sendmsg_sock+0x30/0x30
[  212.880602][ T8004]  ? __import_iovec+0x5f2/0x850
[  212.885457][ T8004]  ? import_iovec+0x73/0xa0
[  212.889977][ T8004]  ___sys_sendmsg+0x2a6/0x360
[  212.894655][ T8004]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  212.900370][ T8004]  ? __sys_sendmsg+0x2b0/0x2b0
[  212.905240][ T8004]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.911508][ T8004]  __se_sys_sendmsg+0x1d0/0x2c0
[  212.916366][ T8004]  ? perf_trace_preemptirq_template+0x269/0x330
[  212.922608][ T8004]  ? __x64_sys_sendmsg+0x80/0x80
[  212.927645][ T8004]  ? lockdep_hardirqs_on+0x98/0x150
[  212.932849][ T8004]  do_syscall_64+0x55/0xb0
[  212.937265][ T8004]  ? clear_bhb_loop+0x40/0x90
[  212.941943][ T8004]  ? clear_bhb_loop+0x40/0x90
[  212.946626][ T8004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.952521][ T8004] RIP: 0033:0x7f1292f9de59
[  212.956932][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.976539][ T8004] RSP: 002b:00007f1293d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.984964][ T8004] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9de59
[  212.992941][ T8004] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000005
[  213.000938][ T8004] RBP: 00007f1293d83090 R08: 0000000000000000 R09: 0000000000000000
[  213.008928][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  213.016987][ T8004] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffee36ebdc8
[  213.024974][ T8004]  </TASK>
[  213.764786][ T8017] syzkaller0: entered promiscuous mode
[  213.798286][ T8017] syzkaller0: entered allmulticast mode
[  216.503386][ T8051] netlink: 'syz.1.776': attribute type 10 has an invalid length.
[  216.511394][ T8051] hsr0: entered promiscuous mode
[  216.517371][ T8051] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  216.860874][ T8060] netlink: 'syz.3.780': attribute type 21 has an invalid length.
[  217.734626][ T8072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.784'.
[  217.849283][ T8057] netlink: 144 bytes leftover after parsing attributes in process `syz.1.779'.
[  217.875480][ T8057] team0: Port device C removed
[  217.882172][ T8057] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  219.450131][ T8102] netlink: 'syz.1.792': attribute type 21 has an invalid length.
[  219.508177][ T8095] delete_channel: no stack
[  219.589768][ T8095] delete_channel: no stack
[  219.731606][ T8109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.904969][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'.
[  220.182211][ T8120] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.801'.
[  220.612711][ T8126] netlink: 'syz.0.805': attribute type 21 has an invalid length.
[  220.630297][ T8128] netlink: 'syz.2.806': attribute type 10 has an invalid length.
[  220.639427][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'.
[  220.653006][ T8128] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  221.448998][ T8154] FAULT_INJECTION: forcing a failure.
[  221.448998][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  221.463071][ T8154] CPU: 1 PID: 8154 Comm: syz.2.816 Not tainted syzkaller #0
[  221.470383][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  221.480461][ T8154] Call Trace:
[  221.483745][ T8154]  <TASK>
[  221.486688][ T8154]  dump_stack_lvl+0x18c/0x250
[  221.491404][ T8154]  ? show_regs_print_info+0x20/0x20
[  221.496642][ T8154]  ? load_image+0x420/0x420
[  221.501182][ T8154]  ? __might_fault+0xaa/0x120
[  221.505896][ T8154]  ? __lock_acquire+0x7d80/0x7d80
[  221.510964][ T8154]  should_fail_ex+0x394/0x4c0
[  221.515673][ T8154]  _copy_to_user+0x2f/0xa0
[  221.520123][ T8154]  bpf_test_finish+0x19f/0x650
[  221.525003][ T8154]  ? bpf_test_run+0x174/0x870
[  221.529704][ T8154]  ? convert_skb_to___skb+0x420/0x420
[  221.535108][ T8154]  bpf_prog_test_run_skb+0x1135/0x18f0
[  221.540617][ T8154]  ? cpu_online+0x60/0x60
[  221.544974][ T8154]  bpf_prog_test_run+0x31f/0x390
[  221.549937][ T8154]  __sys_bpf+0x49d/0x890
[  221.554199][ T8154]  ? bpf_link_show_fdinfo+0x390/0x390
[  221.559605][ T8154]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.565800][ T8154]  __x64_sys_bpf+0x7c/0x90
[  221.570240][ T8154]  do_syscall_64+0x55/0xb0
[  221.574683][ T8154]  ? clear_bhb_loop+0x40/0x90
[  221.579383][ T8154]  ? clear_bhb_loop+0x40/0x90
[  221.584084][ T8154]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.590007][ T8154] RIP: 0033:0x7f6ebe19de59
[  221.594444][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.614076][ T8154] RSP: 002b:00007f6ebefe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  221.622515][ T8154] RAX: ffffffffffffffda RBX: 00007f6ebe425fa0 RCX: 00007f6ebe19de59
[  221.630512][ T8154] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  221.638510][ T8154] RBP: 00007f6ebefe5090 R08: 0000000000000000 R09: 0000000000000000
[  221.646594][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.654586][ T8154] R13: 00007f6ebe426038 R14: 00007f6ebe425fa0 R15: 00007ffdd9f52b58
[  221.662595][ T8154]  </TASK>
[  222.026703][ T8164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.255412][ T8169] syzkaller0: entered promiscuous mode
[  222.260969][ T8169] syzkaller0: entered allmulticast mode
[  222.367116][ T8178] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.827'.
[  224.073360][ T8178] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  224.313486][ T8200] netlink: 'syz.2.835': attribute type 33 has an invalid length.
[  224.330107][ T8200] netlink: 152 bytes leftover after parsing attributes in process `syz.2.835'.
[  224.931708][ T8211] netlink: 'syz.2.841': attribute type 21 has an invalid length.
[  224.939722][ T8211] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.841'.
[  225.075028][ T8223] netlink: 'syz.2.846': attribute type 21 has an invalid length.
[  225.082849][ T8223] netlink: 'syz.2.846': attribute type 6 has an invalid length.
[  225.096647][ T8223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.846'.
[  225.199777][ T8231] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.849'.
[  225.391426][ T8241] netlink: 'syz.2.851': attribute type 153 has an invalid length.
[  225.400808][ T8241] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[  225.410050][ T8241] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.851'.
[  225.732640][ T8246] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.854'.
[  225.842779][ T8246] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.854'.
[  227.263467][ T8281] netlink: 'syz.0.869': attribute type 9 has an invalid length.
[  227.272070][ T8281] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.869'.
[  227.670943][ T8294] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.875'.
[  228.216085][ T8311] netlink: 'syz.2.879': attribute type 4 has an invalid length.
[  228.228823][ T8311] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.879'.
[  230.390963][ T8321] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.883'.
[  230.768666][ T8330] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.883'.
[  232.076053][ T8351] netlink: 'syz.1.892': attribute type 10 has an invalid length.
[  234.111508][ T8365] netlink: 'syz.0.898': attribute type 10 has an invalid length.
[  237.342093][ T8394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  237.494658][ T8398] netlink: 'syz.1.912': attribute type 21 has an invalid length.
[  237.521035][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'.
[  238.780215][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'.
[  239.989493][ T8447] netlink: 'syz.3.931': attribute type 10 has an invalid length.
[  240.006514][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.931'.
[  240.024605][ T8447] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  240.265191][ T8452] netlink: 'syz.1.933': attribute type 10 has an invalid length.
[  241.838961][ T8485] netlink: 'syz.2.942': attribute type 21 has an invalid length.
[  241.847237][ T8485] netlink: 128 bytes leftover after parsing attributes in process `syz.2.942'.
[  241.856767][ T8485] netlink: 'syz.2.942': attribute type 5 has an invalid length.
[  241.864705][ T8485] netlink: 3 bytes leftover after parsing attributes in process `syz.2.942'.
[  242.920519][ T8504] netlink: 'syz.3.949': attribute type 10 has an invalid length.
[  243.107488][ T8508] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.950'.
[  243.260118][ T8508] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  243.286105][ T8508] CPU: 1 PID: 8508 Comm: syz.1.950 Not tainted syzkaller #0
[  243.293500][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  243.303631][ T8508] Call Trace:
[  243.306969][ T8508]  <TASK>
[  243.309966][ T8508]  dump_stack_lvl+0x18c/0x250
[  243.314925][ T8508]  ? show_regs_print_info+0x20/0x20
[  243.320209][ T8508]  ? load_image+0x420/0x420
[  243.325122][ T8508]  sysfs_warn_dup+0x8e/0xa0
[  243.329696][ T8508]  sysfs_do_create_link_sd+0xc0/0x110
[  243.335112][ T8508]  device_add_class_symlinks+0x1cf/0x240
[  243.340882][ T8508]  device_add+0x4f9/0xc40
[  243.345256][ T8508]  wiphy_register+0x1d99/0x2ac0
[  243.350252][ T8508]  ? cfg80211_event_work+0x40/0x40
[  243.355388][ T8508]  ? minstrel_ht_alloc+0x88a/0x990
[  243.360608][ T8508]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  243.366838][ T8508]  ieee80211_register_hw+0x2dd8/0x3b30
[  243.372386][ T8508]  ? ieee80211_register_hw+0xef1/0x3b30
[  243.378015][ T8508]  ? ieee80211_tasklet_handler+0x20/0x20
[  243.383701][ T8508]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  243.389734][ T8508]  ? __debug_object_init+0xec/0x450
[  243.394989][ T8508]  ? __asan_memset+0x22/0x40
[  243.399614][ T8508]  ? __hrtimer_init+0x189/0x270
[  243.404507][ T8508]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  243.410353][ T8508]  ? mac80211_hwsim_free+0x220/0x220
[  243.416018][ T8508]  ? rcu_is_watching+0x15/0xb0
[  243.420815][ T8508]  ? kstrndup+0xbd/0x140
[  243.425114][ T8508]  hwsim_new_radio_nl+0xdad/0x1a70
[  243.430361][ T8508]  ? __nla_validate+0x50/0x50
[  243.435096][ T8508]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  243.441546][ T8508]  ? __nla_parse+0x40/0x50
[  243.446033][ T8508]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  243.452499][ T8508]  genl_family_rcv_msg_doit+0x21a/0x310
[  243.458146][ T8508]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  243.464098][ T8508]  ? bpf_lsm_capable+0x9/0x10
[  243.468802][ T8508]  ? security_capable+0x89/0xb0
[  243.473697][ T8508]  genl_rcv_msg+0x611/0x7a0
[  243.478251][ T8508]  ? genl_bind+0x360/0x360
[  243.482691][ T8508]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  243.489050][ T8508]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  243.495702][ T8508]  netlink_rcv_skb+0x235/0x4c0
[  243.500512][ T8508]  ? genl_bind+0x360/0x360
[  243.505059][ T8508]  ? netlink_ack+0x1160/0x1160
[  243.509885][ T8508]  ? __lock_acquire+0x7d80/0x7d80
[  243.514975][ T8508]  ? down_read+0x1ac/0x2e0
[  243.519438][ T8508]  genl_rcv+0x28/0x40
[  243.523449][ T8508]  netlink_unicast+0x7b1/0x930
[  243.528271][ T8508]  netlink_sendmsg+0x8d0/0xbf0
[  243.533128][ T8508]  ? netlink_getsockopt+0x590/0x590
[  243.538379][ T8508]  ? apparmor_socket_sendmsg+0x8e/0x330
[  243.543960][ T8508]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  243.549268][ T8508]  ? security_socket_sendmsg+0x80/0xa0
[  243.554750][ T8508]  ? netlink_getsockopt+0x590/0x590
[  243.560017][ T8508]  ____sys_sendmsg+0x61b/0x980
[  243.564929][ T8508]  ? __asan_memset+0x22/0x40
[  243.569558][ T8508]  ? __sys_sendmsg_sock+0x30/0x30
[  243.574608][ T8508]  ? __import_iovec+0x5f2/0x850
[  243.579513][ T8508]  ? import_iovec+0x73/0xa0
[  243.584056][ T8508]  ___sys_sendmsg+0x2a6/0x360
[  243.588867][ T8508]  ? __sys_sendmsg+0x2b0/0x2b0
[  243.593871][ T8508]  __se_sys_sendmsg+0x1d0/0x2c0
[  243.598766][ T8508]  ? __x64_sys_sendmsg+0x80/0x80
[  243.603773][ T8508]  ? lockdep_hardirqs_on+0x98/0x150
[  243.609010][ T8508]  do_syscall_64+0x55/0xb0
[  243.613450][ T8508]  ? clear_bhb_loop+0x40/0x90
[  243.618227][ T8508]  ? clear_bhb_loop+0x40/0x90
[  243.622935][ T8508]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.628919][ T8508] RIP: 0033:0x7f1292f9de59
[  243.633360][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.652994][ T8508] RSP: 002b:00007f1293d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.661441][ T8508] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9de59
[  243.669465][ T8508] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  243.677459][ T8508] RBP: 00007f1293033e6f R08: 0000000000000000 R09: 0000000000000000
[  243.685462][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.693450][ T8508] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffee36ebdc8
[  243.701597][ T8508]  </TASK>
[  244.230091][ T8522] netlink: 'syz.2.956': attribute type 33 has an invalid length.
[  244.245023][ T8522] netlink: 152 bytes leftover after parsing attributes in process `syz.2.956'.
[  244.754480][ T8537] netlink: 'syz.2.961': attribute type 10 has an invalid length.
[  245.515433][ T8551] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.967'.
[  245.588045][ T8545] netlink: 'syz.0.964': attribute type 21 has an invalid length.
[  245.621101][ T8545] netlink: 'syz.0.964': attribute type 6 has an invalid length.
[  245.663725][ T8545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.964'.
[  246.956458][ T8580] netlink: 'syz.1.977': attribute type 21 has an invalid length.
[  246.971812][ T8580] netlink: 203 bytes leftover after parsing attributes in process `syz.1.977'.
[  247.250185][ T8585] netlink: set zone limit has 8 unknown bytes
[  248.370358][ T8625] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.996'.
[  248.383245][ T8625] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.996'.
[  248.438589][ T8625] netlink: 'syz.0.996': attribute type 10 has an invalid length.
[  248.458897][ T8625] team0: Device ipvlan1 failed to register rx_handler
[  249.951870][ T8669] FAULT_INJECTION: forcing a failure.
[  249.951870][ T8669] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.968993][ T8669] CPU: 1 PID: 8669 Comm: syz.0.1012 Not tainted syzkaller #0
[  249.976533][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  249.986610][ T8669] Call Trace:
[  249.989905][ T8669]  <TASK>
[  249.992861][ T8669]  dump_stack_lvl+0x18c/0x250
[  249.997619][ T8669]  ? show_regs_print_info+0x20/0x20
[  250.002840][ T8669]  ? load_image+0x420/0x420
[  250.007392][ T8669]  ? __might_fault+0xaa/0x120
[  250.012090][ T8669]  ? __lock_acquire+0x7d80/0x7d80
[  250.017123][ T8669]  should_fail_ex+0x394/0x4c0
[  250.021805][ T8669]  _copy_from_user+0x2f/0xe0
[  250.026420][ T8669]  ___sys_sendmsg+0x1c7/0x360
[  250.031146][ T8669]  ? __sys_sendmsg+0x2b0/0x2b0
[  250.035956][ T8669]  ? trace_call_bpf+0xc3/0x6c0
[  250.040840][ T8669]  __se_sys_sendmsg+0x1d0/0x2c0
[  250.045819][ T8669]  ? __x64_sys_sendmsg+0x80/0x80
[  250.050827][ T8669]  ? lockdep_hardirqs_on+0x98/0x150
[  250.056051][ T8669]  do_syscall_64+0x55/0xb0
[  250.060471][ T8669]  ? clear_bhb_loop+0x40/0x90
[  250.065158][ T8669]  ? clear_bhb_loop+0x40/0x90
[  250.069847][ T8669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.075744][ T8669] RIP: 0033:0x7efee579de59
[  250.080162][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.099771][ T8669] RSP: 002b:00007efee66e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.108297][ T8669] RAX: ffffffffffffffda RBX: 00007efee5a25fa0 RCX: 00007efee579de59
[  250.116492][ T8669] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000004
[  250.124485][ T8669] RBP: 00007efee66e2090 R08: 0000000000000000 R09: 0000000000000000
[  250.132501][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.140479][ T8669] R13: 00007efee5a26038 R14: 00007efee5a25fa0 R15: 00007fffd5de03e8
[  250.148502][ T8669]  </TASK>
[  250.652738][ T8680] FAULT_INJECTION: forcing a failure.
[  250.652738][ T8680] name failslab, interval 1, probability 0, space 0, times 0
[  250.697810][ T8680] CPU: 1 PID: 8680 Comm: syz.1.1016 Not tainted syzkaller #0
[  250.705258][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  250.715346][ T8680] Call Trace:
[  250.718639][ T8680]  <TASK>
[  250.721584][ T8680]  dump_stack_lvl+0x18c/0x250
[  250.726378][ T8680]  ? show_regs_print_info+0x20/0x20
[  250.731597][ T8680]  ? load_image+0x420/0x420
[  250.736110][ T8680]  ? __might_sleep+0xe0/0xe0
[  250.740732][ T8680]  ? __lock_acquire+0x7d80/0x7d80
[  250.745752][ T8680]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  250.750783][ T8680]  should_fail_ex+0x394/0x4c0
[  250.755460][ T8680]  should_failslab+0x9/0x20
[  250.759962][ T8680]  slab_pre_alloc_hook+0x59/0x300
[  250.764986][ T8680]  ? sctp_datamsg_from_user+0x88/0xee0
[  250.770540][ T8680]  __kmem_cache_alloc_node+0x53/0x250
[  250.775914][ T8680]  ? sctp_datamsg_from_user+0x88/0xee0
[  250.781368][ T8680]  kmalloc_trace+0x2a/0xe0
[  250.785815][ T8680]  sctp_datamsg_from_user+0x88/0xee0
[  250.791109][ T8680]  ? __sk_mem_raise_allocated+0x97b/0x11e0
[  250.796921][ T8680]  ? sctp_primitive_ASSOCIATE+0x95/0xc0
[  250.802534][ T8680]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  250.807825][ T8680]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  250.813198][ T8680]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  250.819000][ T8680]  ? __sctp_connect+0xd80/0xd80
[  250.823851][ T8680]  ? __local_bh_enable_ip+0x13a/0x1c0
[  250.829321][ T8680]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  250.834863][ T8680]  ? security_sctp_bind_connect+0x89/0xb0
[  250.840667][ T8680]  sctp_sendmsg+0x1afa/0x27b0
[  250.845363][ T8680]  ? sctp_getsockopt+0xb60/0xb60
[  250.850311][ T8680]  ? aa_af_perm+0x330/0x330
[  250.854820][ T8680]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  250.861236][ T8680]  ? sock_rps_record_flow+0x19/0x3f0
[  250.866555][ T8680]  ? inet_sendmsg+0xce/0x2a0
[  250.871139][ T8680]  ? inet_send_prepare+0x250/0x250
[  250.876340][ T8680]  ____sys_sendmsg+0x61b/0x980
[  250.881136][ T8680]  ? __asan_memset+0x22/0x40
[  250.885819][ T8680]  ? __sys_sendmsg_sock+0x30/0x30
[  250.890844][ T8680]  ? __import_iovec+0x5f2/0x850
[  250.895708][ T8680]  ? import_iovec+0x73/0xa0
[  250.900220][ T8680]  ___sys_sendmsg+0x2a6/0x360
[  250.904907][ T8680]  ? get_pid_task+0x20/0x1e0
[  250.909502][ T8680]  ? __sys_sendmsg+0x2b0/0x2b0
[  250.914336][ T8680]  ? __lock_acquire+0x7d80/0x7d80
[  250.919403][ T8680]  __se_sys_sendmsg+0x1d0/0x2c0
[  250.924274][ T8680]  ? __x64_sys_sendmsg+0x80/0x80
[  250.929236][ T8680]  ? lockdep_hardirqs_on+0x98/0x150
[  250.934461][ T8680]  do_syscall_64+0x55/0xb0
[  250.938893][ T8680]  ? clear_bhb_loop+0x40/0x90
[  250.943656][ T8680]  ? clear_bhb_loop+0x40/0x90
[  250.948328][ T8680]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.954222][ T8680] RIP: 0033:0x7f1292f9de59
[  250.958634][ T8680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.978234][ T8680] RSP: 002b:00007f1293d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.986644][ T8680] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9de59
[  250.994705][ T8680] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000005
[  251.002707][ T8680] RBP: 00007f1293d83090 R08: 0000000000000000 R09: 0000000000000000
[  251.010679][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  251.018738][ T8680] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffee36ebdc8
[  251.026720][ T8680]  </TASK>
[  251.428163][ T8694] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1021'.
[  251.443870][ T8694] openvswitch: netlink: Key type 4112 is out of range max 32
[  251.563243][ T8699] netlink: 'syz.0.1025': attribute type 10 has an invalid length.
[  251.889111][ T8707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1026'.
[  253.008981][ T8744] syzkaller0: entered promiscuous mode
[  253.015376][ T8744] syzkaller0: entered allmulticast mode
[  254.919914][ T8754] netlink: 'syz.1.1045': attribute type 10 has an invalid length.
[  254.928218][ T8754] team0: Device wg1 is up. Set it down before adding it as a team port
[  254.936776][ T8764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1048'.
[  255.080640][ T8775] netlink: 'syz.0.1053': attribute type 6 has an invalid length.
[  255.104600][ T8775] netlink: 212824 bytes leftover after parsing attributes in process `syz.0.1053'.
[  255.210591][ T8780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.622582][ T8792] netlink: 'syz.3.1059': attribute type 1 has an invalid length.
[  255.635536][ T8792] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1059'.
[  255.833234][ T8795] netlink: 'syz.1.1060': attribute type 2 has an invalid length.
[  255.855921][ T8795] netlink: 168036 bytes leftover after parsing attributes in process `syz.1.1060'.
[  255.948206][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  255.954694][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.232792][ T8804] netlink: 'syz.3.1063': attribute type 10 has an invalid length.
[  256.268487][ T8804] team0: Device hsr_slave_0 failed to register rx_handler
[  256.397642][ T8805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.418120][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.493389][ T8805] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.504178][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.744116][ T8784] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1055'.
[  256.764535][ T8784] bridge_slave_1: default FDB implementation only supports local addresses
[  257.160124][ T8815] netlink: 'syz.1.1066': attribute type 9 has an invalid length.
[  257.184127][ T8815] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1066'.
[  259.482471][ T8817] netlink: 'syz.2.1067': attribute type 10 has an invalid length.
[  259.490765][ T8817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1067'.
[  259.500001][ T8817] dummy0: entered promiscuous mode
[  259.505525][ T8817] dummy0: entered allmulticast mode
[  259.511513][ T8817] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  259.553791][ T8824] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1069'.
[  259.594676][ T8824] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  259.969149][ T8837] : port 1(ip6gretap0) entered blocking state
[  259.978227][ T8837] : port 1(ip6gretap0) entered disabled state
[  259.985744][ T8837] ip6gretap0: entered allmulticast mode
[  259.996806][ T8837] ip6gretap0: entered promiscuous mode
[  260.021383][ T8841] netlink: 'syz.0.1076': attribute type 39 has an invalid length.
[  260.048301][ T8840] netlink: 'syz.3.1074': attribute type 10 has an invalid length.
[  260.061471][ T8840] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  260.157801][ T8840] team0: Port device wlan1 removed
[  260.167583][ T8840] .`: (slave wlan1): Enslaving as an active interface with an up link
[  261.758117][ T8869] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1081'.
[  261.791498][ T8869] bridge_slave_1: default FDB implementation only supports local addresses
[  261.841681][ T8875] syzkaller0: entered promiscuous mode
[  261.850449][ T8875] syzkaller0: entered allmulticast mode
[  264.505307][ T8919] netlink: set zone limit has 8 unknown bytes
[  265.495256][ T8928] netlink: 'syz.2.1107': attribute type 3 has an invalid length.
[  265.532124][ T8928] netlink: 'syz.2.1107': attribute type 1 has an invalid length.
[  265.561756][ T8928] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1107'.
[  267.735941][ T8941] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1108'.
[  267.815624][ T8941] bridge_slave_1: default FDB implementation only supports local addresses
[  269.003963][ T8972] netlink: 'syz.2.1119': attribute type 3 has an invalid length.
[  269.012019][ T8972] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1119'.
[  271.041220][ T9026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1139'.
[  271.170348][ T9029] netlink: 'syz.1.1140': attribute type 10 has an invalid length.
[  271.183866][ T9029] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1140'.
[  272.037316][ T9037] netlink: 'syz.3.1143': attribute type 7 has an invalid length.
[  272.057339][ T9037] netlink: 'syz.3.1143': attribute type 10 has an invalid length.
[  272.066554][ T9037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1143'.
[  272.079243][ T9037] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  272.161621][ T9037] netlink: 'syz.3.1143': attribute type 21 has an invalid length.
[  272.190596][ T9037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1143'.
[  272.223302][ T9037] netlink: 'syz.3.1143': attribute type 4 has an invalid length.
[  272.253665][ T9037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1143'.
[  273.862674][ T9069] netlink: 'syz.3.1156': attribute type 3 has an invalid length.
[  273.872178][ T9069] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1156'.
[  275.364741][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'.
[  276.990220][ T9131] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1183'.
[  277.162478][ T9131] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  277.178246][ T9131] CPU: 1 PID: 9131 Comm: syz.1.1183 Not tainted syzkaller #0
[  277.185689][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  277.195806][ T9131] Call Trace:
[  277.199110][ T9131]  <TASK>
[  277.202070][ T9131]  dump_stack_lvl+0x18c/0x250
[  277.206797][ T9131]  ? show_regs_print_info+0x20/0x20
[  277.212050][ T9131]  ? load_image+0x420/0x420
[  277.216609][ T9131]  sysfs_warn_dup+0x8e/0xa0
[  277.221148][ T9131]  sysfs_do_create_link_sd+0xc0/0x110
[  277.226559][ T9131]  device_add_class_symlinks+0x1cf/0x240
[  277.232328][ T9131]  device_add+0x4f9/0xc40
[  277.236700][ T9131]  wiphy_register+0x1d99/0x2ac0
[  277.241619][ T9131]  ? cfg80211_event_work+0x40/0x40
[  277.246761][ T9131]  ? minstrel_ht_alloc+0x88a/0x990
[  277.251921][ T9131]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  277.258024][ T9131]  ieee80211_register_hw+0x2dd8/0x3b30
[  277.263524][ T9131]  ? ieee80211_register_hw+0xef1/0x3b30
[  277.269124][ T9131]  ? ieee80211_tasklet_handler+0x20/0x20
[  277.275096][ T9131]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  277.281116][ T9131]  ? __debug_object_init+0xec/0x450
[  277.286358][ T9131]  ? __asan_memset+0x22/0x40
[  277.290988][ T9131]  ? __hrtimer_init+0x189/0x270
[  277.295884][ T9131]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  277.301672][ T9131]  ? mac80211_hwsim_free+0x220/0x220
[  277.306999][ T9131]  ? rcu_is_watching+0x15/0xb0
[  277.311800][ T9131]  ? kstrndup+0xbd/0x140
[  277.316084][ T9131]  hwsim_new_radio_nl+0xdad/0x1a70
[  277.321230][ T9131]  ? __nla_validate+0x50/0x50
[  277.326025][ T9131]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  277.332413][ T9131]  ? __nla_parse+0x40/0x50
[  277.336885][ T9131]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  277.343265][ T9131]  genl_family_rcv_msg_doit+0x21a/0x310
[  277.348859][ T9131]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  277.354871][ T9131]  ? bpf_lsm_capable+0x9/0x10
[  277.359593][ T9131]  ? security_capable+0x89/0xb0
[  277.364475][ T9131]  genl_rcv_msg+0x611/0x7a0
[  277.369074][ T9131]  ? genl_bind+0x360/0x360
[  277.373625][ T9131]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  277.380003][ T9131]  ? ref_tracker_free+0x686/0x830
[  277.385071][ T9131]  ? __kasan_kmalloc_large+0x8b/0xa0
[  277.390406][ T9131]  netlink_rcv_skb+0x235/0x4c0
[  277.395215][ T9131]  ? genl_bind+0x360/0x360
[  277.399767][ T9131]  ? netlink_ack+0x1160/0x1160
[  277.404588][ T9131]  ? __lock_acquire+0x7d80/0x7d80
[  277.409670][ T9131]  ? down_read+0x1ac/0x2e0
[  277.414126][ T9131]  genl_rcv+0x28/0x40
[  277.418153][ T9131]  netlink_unicast+0x7b1/0x930
[  277.422976][ T9131]  netlink_sendmsg+0x8d0/0xbf0
[  277.427804][ T9131]  ? netlink_getsockopt+0x590/0x590
[  277.433054][ T9131]  ? apparmor_socket_sendmsg+0x8e/0x330
[  277.438716][ T9131]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  277.444049][ T9131]  ? security_socket_sendmsg+0x80/0xa0
[  277.449555][ T9131]  ? netlink_getsockopt+0x590/0x590
[  277.454778][ T9131]  ____sys_sendmsg+0x61b/0x980
[  277.459581][ T9131]  ? __asan_memset+0x22/0x40
[  277.464193][ T9131]  ? __sys_sendmsg_sock+0x30/0x30
[  277.469268][ T9131]  ? __import_iovec+0x5f2/0x850
[  277.474192][ T9131]  ? import_iovec+0x73/0xa0
[  277.478738][ T9131]  ___sys_sendmsg+0x2a6/0x360
[  277.483463][ T9131]  ? __sys_sendmsg+0x2b0/0x2b0
[  277.488286][ T9131]  ? trace_call_bpf+0xc3/0x6c0
[  277.493145][ T9131]  __se_sys_sendmsg+0x1d0/0x2c0
[  277.498041][ T9131]  ? perf_trace_preemptirq_template+0x269/0x330
[  277.504360][ T9131]  ? __x64_sys_sendmsg+0x80/0x80
[  277.509370][ T9131]  ? lockdep_hardirqs_on+0x98/0x150
[  277.514607][ T9131]  do_syscall_64+0x55/0xb0
[  277.519076][ T9131]  ? clear_bhb_loop+0x40/0x90
[  277.523787][ T9131]  ? clear_bhb_loop+0x40/0x90
[  277.528493][ T9131]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.534425][ T9131] RIP: 0033:0x7f1292f9de59
[  277.538949][ T9131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.558566][ T9131] RSP: 002b:00007f1293d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.567105][ T9131] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9de59
[  277.575110][ T9131] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  277.583174][ T9131] RBP: 00007f1293033e6f R08: 0000000000000000 R09: 0000000000000000
[  277.591148][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.599120][ T9131] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffee36ebdc8
[  277.607110][ T9131]  </TASK>
[  277.660501][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[  277.992860][ T9152] netlink: 'syz.2.1190': attribute type 3 has an invalid length.
[  278.027165][ T9152] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1190'.
[  278.036938][ T9154] netlink: 'syz.0.1191': attribute type 39 has an invalid length.
[  278.404358][ T9165] aaaaaaaaaaaaaaa: entered promiscuous mode
[  278.854971][ T9178] netlink: 'syz.2.1201': attribute type 21 has an invalid length.
[  278.862930][ T9178] netlink: 'syz.2.1201': attribute type 6 has an invalid length.
[  278.871389][ T9178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'.
[  278.987501][ T9182] netlink: 'syz.2.1203': attribute type 21 has an invalid length.
[  278.996515][ T9182] netlink: 'syz.2.1203': attribute type 6 has an invalid length.
[  279.004982][ T9182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1203'.
[  279.026945][ T9180] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.038909][ T9180] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1202'.
[  279.199694][ T9186] netlink: 'syz.2.1204': attribute type 29 has an invalid length.
[  279.213100][ T9186] netlink: 'syz.2.1204': attribute type 29 has an invalid length.
[  279.225475][ T9186] netlink: 'syz.2.1204': attribute type 29 has an invalid length.
[  279.239224][ T9186] netlink: 'syz.2.1204': attribute type 29 has an invalid length.
[  279.302558][ T9189] syzkaller0: entered promiscuous mode
[  279.310196][ T9189] syzkaller0: entered allmulticast mode
[  281.955933][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'.
[  281.966984][ T9237] bridge_slave_0: entered allmulticast mode
[  282.131444][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1225'.
[  282.150901][ T9242] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  282.178023][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1225'.
[  282.232423][ T9243] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  282.558197][ T9252] : renamed from veth0_to_bond (while UP)
[  283.911120][ T9288] validate_nla: 3 callbacks suppressed
[  283.911139][ T9288] netlink: 'syz.1.1242': attribute type 10 has an invalid length.
[  283.972016][ T9288] 8021q: adding VLAN 0 to HW filter on device team0
[  283.995103][ T9288] .`: (slave team0): Enslaving as an active interface with an up link
[  284.615993][ T9301] FAULT_INJECTION: forcing a failure.
[  284.615993][ T9301] name failslab, interval 1, probability 0, space 0, times 0
[  284.641736][ T9301] CPU: 0 PID: 9301 Comm: syz.3.1245 Not tainted syzkaller #0
[  284.649180][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  284.659279][ T9301] Call Trace:
[  284.662579][ T9301]  <TASK>
[  284.665530][ T9301]  dump_stack_lvl+0x18c/0x250
[  284.670253][ T9301]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.676449][ T9301]  ? show_regs_print_info+0x20/0x20
[  284.681683][ T9301]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.687888][ T9301]  should_fail_ex+0x394/0x4c0
[  284.692605][ T9301]  should_failslab+0x9/0x20
[  284.697140][ T9301]  slab_pre_alloc_hook+0x59/0x300
[  284.702197][ T9301]  ? slab_pre_alloc_hook+0x1/0x300
[  284.707328][ T9301]  kmem_cache_alloc_node+0x5e/0x310
[  284.712529][ T9301]  ? __alloc_skb+0x103/0x2c0
[  284.717129][ T9301]  __alloc_skb+0x103/0x2c0
[  284.721548][ T9301]  _sctp_make_chunk+0x5b/0x430
[  284.726315][ T9301]  sctp_make_datafrag_empty+0x12b/0x240
[  284.731866][ T9301]  ? sctp_make_ecne+0x350/0x350
[  284.736851][ T9301]  ? sctp_auth_send_cid+0x69/0x250
[  284.741978][ T9301]  sctp_datamsg_from_user+0x72e/0xee0
[  284.747379][ T9301]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  284.752675][ T9301]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  284.758055][ T9301]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  284.763863][ T9301]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.770126][ T9301]  ? sctp_sendmsg+0x1524/0x27b0
[  284.774978][ T9301]  sctp_sendmsg+0x1afa/0x27b0
[  284.779663][ T9301]  ? sctp_getsockopt+0xb60/0xb60
[  284.784597][ T9301]  ? perf_trace_preemptirq_template+0x269/0x330
[  284.790841][ T9301]  ? aa_af_perm+0x330/0x330
[  284.795344][ T9301]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  284.801325][ T9301]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  284.807744][ T9301]  ? sock_rps_record_flow+0x19/0x3f0
[  284.813029][ T9301]  ? inet_sendmsg+0xce/0x2a0
[  284.817617][ T9301]  ? inet_send_prepare+0x250/0x250
[  284.822726][ T9301]  ____sys_sendmsg+0x61b/0x980
[  284.827500][ T9301]  ? __asan_memset+0x22/0x40
[  284.832090][ T9301]  ? __sys_sendmsg_sock+0x30/0x30
[  284.837113][ T9301]  ? __import_iovec+0x5f2/0x850
[  284.842005][ T9301]  ? import_iovec+0x73/0xa0
[  284.846513][ T9301]  ___sys_sendmsg+0x2a6/0x360
[  284.851196][ T9301]  ? __sys_sendmsg+0x2b0/0x2b0
[  284.855996][ T9301]  __se_sys_sendmsg+0x1d0/0x2c0
[  284.860856][ T9301]  ? __x64_sys_sendmsg+0x80/0x80
[  284.865807][ T9301]  ? syscall_enter_from_user_mode+0x2e/0x80
[  284.871702][ T9301]  do_syscall_64+0x55/0xb0
[  284.876294][ T9301]  ? clear_bhb_loop+0x40/0x90
[  284.880966][ T9301]  ? clear_bhb_loop+0x40/0x90
[  284.885637][ T9301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  284.891534][ T9301] RIP: 0033:0x7fba1719de59
[  284.895961][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.915592][ T9301] RSP: 002b:00007fba18024028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.924020][ T9301] RAX: ffffffffffffffda RBX: 00007fba17425fa0 RCX: 00007fba1719de59
[  284.932076][ T9301] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000005
[  284.940041][ T9301] RBP: 00007fba18024090 R08: 0000000000000000 R09: 0000000000000000
[  284.948105][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  284.956078][ T9301] R13: 00007fba17426038 R14: 00007fba17425fa0 R15: 00007ffc5e7e97f8
[  284.964069][ T9301]  </TASK>
[  285.289972][ T9314] netlink: 'syz.0.1249': attribute type 10 has an invalid length.
[  285.364090][ T9317] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1250'.
[  286.213220][ T9331] netlink: 'syz.1.1254': attribute type 4 has an invalid length.
[  286.226859][ T9331] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1254'.
[  286.756566][ T9335] syzkaller0: entered promiscuous mode
[  286.766663][ T9335] syzkaller0: entered allmulticast mode
[  289.900309][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  289.927357][ T9377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'.
[  290.052862][ T9380] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1271'.
[  290.095091][ T9379] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1271'.
[  290.152116][ T9382] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  290.172835][ T9382] team0: Device wg1 is of different type
[  291.600421][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'.
[  292.837140][ T9448] netlink: 'syz.1.1296': attribute type 11 has an invalid length.
[  292.866029][ T9448] netlink: 'syz.1.1296': attribute type 2 has an invalid length.
[  292.883702][ T9448] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1296'.
[  293.219133][ T9462] netlink: 'syz.0.1305': attribute type 10 has an invalid length.
[  293.242203][ T9462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1305'.
[  293.701371][ T9487] pim6reg0: tun_chr_ioctl cmd 1074025672
[  293.710725][ T9487] pim6reg0: ignored: set checksum disabled
[  293.725633][ T9487] pim6reg0: tun_chr_ioctl cmd 2148553947
[  294.131259][ T9499] netlink: 'syz.0.1317': attribute type 4 has an invalid length.
[  294.169729][ T9499] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1317'.
[  294.490871][ T9506] netlink: 'syz.1.1322': attribute type 21 has an invalid length.
[  294.500380][ T9506] netlink: 'syz.1.1322': attribute type 6 has an invalid length.
[  294.516842][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'.
[  294.869291][ T9518] netlink: 'syz.1.1325': attribute type 10 has an invalid length.
[  294.893881][ T9518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1325'.
[  294.954341][ T9518] batman_adv: batadv0: Adding interface: virt_wifi0
[  294.961326][ T9518] batman_adv: batadv0: Interface activated: virt_wifi0
[  295.792060][ T9530] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1330'.
[  295.817294][ T9527] syzkaller0: entered promiscuous mode
[  295.823165][ T9527] syzkaller0: entered allmulticast mode
[  295.879833][ T9531] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.888172][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.901126][ T9531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.908840][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.930095][ T9531] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  295.946008][ T9531] batman_adv: batadv0: Removing interface: virt_wifi0
[  297.652629][ T9543] syzkaller0: entered promiscuous mode
[  297.658252][ T9543] syzkaller0: entered allmulticast mode
[  297.823663][ T5786] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  298.915193][ T9576] netlink: 'syz.0.1340': attribute type 3 has an invalid length.
[  298.948640][ T9576] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1340'.
[  300.445456][ T9587] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1350'.
[  300.964357][ T9594] netlink: 'syz.0.1352': attribute type 21 has an invalid length.
[  301.031948][ T9597] netlink: 'syz.2.1353': attribute type 3 has an invalid length.
[  301.043227][ T9597] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1353'.
[  301.071395][ T9597] netlink: 'syz.2.1353': attribute type 21 has an invalid length.
[  301.155657][ T9599] netlink: 'syz.0.1354': attribute type 21 has an invalid length.
[  301.188964][ T9601] FAULT_INJECTION: forcing a failure.
[  301.188964][ T9601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.213660][ T9601] CPU: 0 PID: 9601 Comm: syz.2.1355 Not tainted syzkaller #0
[  301.221095][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  301.231303][ T9601] Call Trace:
[  301.234588][ T9601]  <TASK>
[  301.237518][ T9601]  dump_stack_lvl+0x18c/0x250
[  301.242204][ T9601]  ? show_regs_print_info+0x20/0x20
[  301.247406][ T9601]  ? load_image+0x420/0x420
[  301.251994][ T9601]  ? __might_fault+0xaa/0x120
[  301.256669][ T9601]  ? __lock_acquire+0x7d80/0x7d80
[  301.261694][ T9601]  should_fail_ex+0x394/0x4c0
[  301.266376][ T9601]  _copy_from_user+0x2f/0xe0
[  301.270965][ T9601]  ___sys_sendmsg+0x1c7/0x360
[  301.275647][ T9601]  ? get_pid_task+0x20/0x1e0
[  301.280244][ T9601]  ? __sys_sendmsg+0x2b0/0x2b0
[  301.285025][ T9601]  ? __lock_acquire+0x7d80/0x7d80
[  301.290064][ T9601]  __se_sys_sendmsg+0x1d0/0x2c0
[  301.294928][ T9601]  ? __x64_sys_sendmsg+0x80/0x80
[  301.299878][ T9601]  ? lockdep_hardirqs_on+0x98/0x150
[  301.305077][ T9601]  do_syscall_64+0x55/0xb0
[  301.309492][ T9601]  ? clear_bhb_loop+0x40/0x90
[  301.314163][ T9601]  ? clear_bhb_loop+0x40/0x90
[  301.318837][ T9601]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  301.324732][ T9601] RIP: 0033:0x7f6ebe19de59
[  301.329148][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.348755][ T9601] RSP: 002b:00007f6ebefe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.357184][ T9601] RAX: ffffffffffffffda RBX: 00007f6ebe425fa0 RCX: 00007f6ebe19de59
[  301.365204][ T9601] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003
[  301.373200][ T9601] RBP: 00007f6ebefe5090 R08: 0000000000000000 R09: 0000000000000000
[  301.381170][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.389136][ T9601] R13: 00007f6ebe426038 R14: 00007f6ebe425fa0 R15: 00007ffdd9f52b58
[  301.397114][ T9601]  </TASK>
[  301.490113][ T9608] netlink: 'syz.2.1357': attribute type 10 has an invalid length.
[  301.498156][ T9608] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1357'.
[  301.511130][ T9608] openvswitch: netlink: Flow key attr not present in new flow.
[  302.232560][ T9631] netlink: 'syz.1.1367': attribute type 10 has an invalid length.
[  302.607417][ T9643] netlink: 'syz.2.1371': attribute type 3 has an invalid length.
[  302.620333][ T9643] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1371'.
[  302.816801][ T9646] netlink: 'syz.1.1372': attribute type 10 has an invalid length.
[  303.676869][ T9658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'.
[  303.727663][ T9658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'.
[  303.752085][ T9659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'.
[  303.775722][ T9669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'.
[  305.432496][ T9705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1394'.
[  305.450401][ T9708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1395'.
[  305.467152][ T9705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1394'.
[  305.562515][ T9705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1394'.
[  305.673447][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'.
[  305.693214][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'.
[  305.721968][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'.
[  305.744433][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'.
[  305.797874][ T9715] netlink: 'syz.0.1397': attribute type 10 has an invalid length.
[  305.818647][ T9715] team0: Device wg1 is of different type
[  306.658177][ T9740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1407'.
[  306.683797][ T9740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1407'.
[  308.386044][ T9789] syzkaller0: entered promiscuous mode
[  308.392706][ T9789] syzkaller0: entered allmulticast mode
[  310.560883][ T9812] netlink: 'syz.2.1431': attribute type 21 has an invalid length.
[  310.576312][ T9812] netlink: 'syz.2.1431': attribute type 6 has an invalid length.
[  310.590992][ T9812] __nla_validate_parse: 6 callbacks suppressed
[  310.591008][ T9812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1431'.
[  310.609921][ T9814] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1430'.
[  310.799220][ T9821] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1434'.
[  311.157560][ T9831] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1438'.
[  311.186227][ T9831] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  311.198505][ T9831] CPU: 0 PID: 9831 Comm: syz.3.1438 Not tainted syzkaller #0
[  311.205942][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  311.216025][ T9831] Call Trace:
[  311.219320][ T9831]  <TASK>
[  311.222262][ T9831]  dump_stack_lvl+0x18c/0x250
[  311.226972][ T9831]  ? show_regs_print_info+0x20/0x20
[  311.232187][ T9831]  ? load_image+0x420/0x420
[  311.236719][ T9831]  sysfs_warn_dup+0x8e/0xa0
[  311.241230][ T9831]  sysfs_do_create_link_sd+0xc0/0x110
[  311.246616][ T9831]  device_add_class_symlinks+0x1cf/0x240
[  311.252260][ T9831]  device_add+0x4f9/0xc40
[  311.256608][ T9831]  wiphy_register+0x1d99/0x2ac0
[  311.261514][ T9831]  ? cfg80211_event_work+0x40/0x40
[  311.266682][ T9831]  ? minstrel_ht_alloc+0x88a/0x990
[  311.271852][ T9831]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  311.278036][ T9831]  ieee80211_register_hw+0x2dd8/0x3b30
[  311.283519][ T9831]  ? ieee80211_register_hw+0xef1/0x3b30
[  311.289095][ T9831]  ? ieee80211_tasklet_handler+0x20/0x20
[  311.294737][ T9831]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  311.300732][ T9831]  ? __debug_object_init+0xec/0x450
[  311.305945][ T9831]  ? __asan_memset+0x22/0x40
[  311.310547][ T9831]  ? __hrtimer_init+0x189/0x270
[  311.315408][ T9831]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  311.321185][ T9831]  ? mac80211_hwsim_free+0x220/0x220
[  311.326599][ T9831]  ? rcu_is_watching+0x15/0xb0
[  311.331391][ T9831]  ? kstrndup+0xbd/0x140
[  311.335713][ T9831]  hwsim_new_radio_nl+0xdad/0x1a70
[  311.341028][ T9831]  ? __nla_validate+0x50/0x50
[  311.345727][ T9831]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  311.352079][ T9831]  ? __nla_parse+0x40/0x50
[  311.356608][ T9831]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  311.362951][ T9831]  genl_family_rcv_msg_doit+0x21a/0x310
[  311.368514][ T9831]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  311.374427][ T9831]  ? bpf_lsm_capable+0x9/0x10
[  311.379110][ T9831]  ? security_capable+0x89/0xb0
[  311.383970][ T9831]  genl_rcv_msg+0x611/0x7a0
[  311.388488][ T9831]  ? genl_bind+0x360/0x360
[  311.392909][ T9831]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  311.399251][ T9831]  ? ref_tracker_free+0x686/0x830
[  311.404310][ T9831]  ? __kasan_kmalloc_large+0x8b/0xa0
[  311.409641][ T9831]  netlink_rcv_skb+0x235/0x4c0
[  311.414447][ T9831]  ? genl_bind+0x360/0x360
[  311.418893][ T9831]  ? netlink_ack+0x1160/0x1160
[  311.423682][ T9831]  ? __lock_acquire+0x7d80/0x7d80
[  311.429620][ T9831]  ? down_read+0x1ac/0x2e0
[  311.434059][ T9831]  genl_rcv+0x28/0x40
[  311.438063][ T9831]  netlink_unicast+0x7b1/0x930
[  311.442853][ T9831]  netlink_sendmsg+0x8d0/0xbf0
[  311.447641][ T9831]  ? netlink_getsockopt+0x590/0x590
[  311.452853][ T9831]  ? apparmor_socket_sendmsg+0x8e/0x330
[  311.458403][ T9831]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  311.463780][ T9831]  ? security_socket_sendmsg+0x80/0xa0
[  311.469261][ T9831]  ? netlink_getsockopt+0x590/0x590
[  311.474492][ T9831]  ____sys_sendmsg+0x61b/0x980
[  311.479283][ T9831]  ? __asan_memset+0x22/0x40
[  311.483879][ T9831]  ? __sys_sendmsg_sock+0x30/0x30
[  311.488910][ T9831]  ? __import_iovec+0x5f2/0x850
[  311.493775][ T9831]  ? import_iovec+0x73/0xa0
[  311.498287][ T9831]  ___sys_sendmsg+0x2a6/0x360
[  311.502979][ T9831]  ? __sys_sendmsg+0x2b0/0x2b0
[  311.507795][ T9831]  __se_sys_sendmsg+0x1d0/0x2c0
[  311.512656][ T9831]  ? __x64_sys_sendmsg+0x80/0x80
[  311.517619][ T9831]  ? lockdep_hardirqs_on+0x98/0x150
[  311.522823][ T9831]  do_syscall_64+0x55/0xb0
[  311.527245][ T9831]  ? clear_bhb_loop+0x40/0x90
[  311.532025][ T9831]  ? clear_bhb_loop+0x40/0x90
[  311.536727][ T9831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.542643][ T9831] RIP: 0033:0x7fba1719de59
[  311.547066][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.566682][ T9831] RSP: 002b:00007fba18024028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.575113][ T9831] RAX: ffffffffffffffda RBX: 00007fba17425fa0 RCX: 00007fba1719de59
[  311.583084][ T9831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  311.591056][ T9831] RBP: 00007fba17233e6f R08: 0000000000000000 R09: 0000000000000000
[  311.599026][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.606994][ T9831] R13: 00007fba17426038 R14: 00007fba17425fa0 R15: 00007ffc5e7e97f8
[  311.614986][ T9831]  </TASK>
[  311.750384][ T9835] syzkaller0: entered promiscuous mode
[  311.759073][ T9835] syzkaller0: entered allmulticast mode
[  313.353916][ T9839] netlink: 'syz.3.1441': attribute type 33 has an invalid length.
[  313.362095][ T9839] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1441'.
[  313.493430][ T9854] netlink: 'syz.1.1447': attribute type 21 has an invalid length.
[  313.502335][ T9854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1447'.
[  313.804977][ T9865] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1452'.
[  313.972847][ T9871] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1454'.
[  313.989677][ T9871] netlink: 'syz.0.1454': attribute type 2 has an invalid length.
[  314.068268][ T9873] syzkaller0: entered promiscuous mode
[  314.096745][ T9873] syzkaller0: entered allmulticast mode
[  314.315196][ T9876] netlink: set zone limit has 8 unknown bytes
[  316.980221][ T9885] syzkaller0: entered promiscuous mode
[  317.003767][ T9885] syzkaller0: entered allmulticast mode
[  317.398668][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.405707][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  318.680554][ T9898] netlink: 'syz.1.1463': attribute type 21 has an invalid length.
[  318.689756][ T9896] netlink: 'syz.3.1462': attribute type 21 has an invalid length.
[  318.817309][ T9906] FAULT_INJECTION: forcing a failure.
[  318.817309][ T9906] name failslab, interval 1, probability 0, space 0, times 0
[  318.841844][ T9906] CPU: 0 PID: 9906 Comm: syz.1.1465 Not tainted syzkaller #0
[  318.849371][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  318.859451][ T9906] Call Trace:
[  318.862758][ T9906]  <TASK>
[  318.865720][ T9906]  dump_stack_lvl+0x18c/0x250
[  318.870448][ T9906]  ? show_regs_print_info+0x20/0x20
[  318.875695][ T9906]  ? load_image+0x420/0x420
[  318.880248][ T9906]  ? __might_sleep+0xe0/0xe0
[  318.884883][ T9906]  ? __lock_acquire+0x7d80/0x7d80
[  318.889948][ T9906]  should_fail_ex+0x394/0x4c0
[  318.894672][ T9906]  should_failslab+0x9/0x20
[  318.899226][ T9906]  slab_pre_alloc_hook+0x59/0x300
[  318.904302][ T9906]  ? __lock_acquire+0x7d80/0x7d80
[  318.909382][ T9906]  kmem_cache_alloc_node+0x5e/0x310
[  318.914791][ T9906]  ? __alloc_skb+0x103/0x2c0
[  318.919406][ T9906]  __alloc_skb+0x103/0x2c0
[  318.923853][ T9906]  netlink_sendmsg+0x66a/0xbf0
[  318.928645][ T9906]  ? netlink_getsockopt+0x590/0x590
[  318.933871][ T9906]  ? apparmor_socket_sendmsg+0x8e/0x330
[  318.939479][ T9906]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  318.944808][ T9906]  ? security_socket_sendmsg+0x80/0xa0
[  318.950289][ T9906]  ? netlink_getsockopt+0x590/0x590
[  318.955509][ T9906]  ____sys_sendmsg+0x61b/0x980
[  318.960471][ T9906]  ? __asan_memset+0x22/0x40
[  318.965076][ T9906]  ? __sys_sendmsg_sock+0x30/0x30
[  318.970115][ T9906]  ? __import_iovec+0x5f2/0x850
[  318.974985][ T9906]  ? import_iovec+0x73/0xa0
[  318.979500][ T9906]  ___sys_sendmsg+0x2a6/0x360
[  318.984199][ T9906]  ? get_pid_task+0x20/0x1e0
[  318.988811][ T9906]  ? __sys_sendmsg+0x2b0/0x2b0
[  318.993613][ T9906]  ? __lock_acquire+0x7d80/0x7d80
[  318.998683][ T9906]  __se_sys_sendmsg+0x1d0/0x2c0
[  319.003569][ T9906]  ? __x64_sys_sendmsg+0x80/0x80
[  319.008622][ T9906]  ? lockdep_hardirqs_on+0x98/0x150
[  319.013833][ T9906]  do_syscall_64+0x55/0xb0
[  319.018259][ T9906]  ? clear_bhb_loop+0x40/0x90
[  319.022938][ T9906]  ? clear_bhb_loop+0x40/0x90
[  319.027621][ T9906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.033526][ T9906] RIP: 0033:0x7f1292f9de59
[  319.037960][ T9906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.057691][ T9906] RSP: 002b:00007f1293d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.066136][ T9906] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9de59
[  319.074117][ T9906] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003
[  319.082092][ T9906] RBP: 00007f1293d83090 R08: 0000000000000000 R09: 0000000000000000
[  319.090073][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.098057][ T9906] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffee36ebdc8
[  319.106056][ T9906]  </TASK>
[  319.250341][ T9917] netlink: 'syz.3.1468': attribute type 39 has an invalid length.
[  319.461844][ T9923] netlink: 'syz.0.1471': attribute type 10 has an invalid length.
[  319.892534][ T9937] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1473'.
[  323.174866][ T9978] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1490'.
[  325.274845][T10007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1498'.
[  325.398890][T10007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1498'.
[  325.494418][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1498'.
[  326.792268][T10022] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1502'.
[  326.981424][T10031] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1504'.
[  327.019559][T10031] netlink: 'syz.1.1504': attribute type 4 has an invalid length.
[  327.041502][T10031] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1504'.
[  327.567758][T10038] netlink: 'syz.1.1509': attribute type 3 has an invalid length.
[  327.583365][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'.
[  327.596948][T10038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  328.137739][T10062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.145301][T10062] IPv6: NLM_F_CREATE should be set when creating new route
[  328.152963][T10062] IPv6: NLM_F_CREATE should be set when creating new route
[  328.160617][T10062] IPv6: NLM_F_CREATE should be set when creating new route
[  328.284218][T10063] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1518'.
[  328.381291][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  328.957638][T10070] netlink: 'syz.0.1522': attribute type 3 has an invalid length.
[  328.980764][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'.
[  329.018483][T10070] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  329.410673][T10086] netlink: 'syz.2.1528': attribute type 10 has an invalid length.
[  329.533968][T10092] pim6reg1: tun_chr_ioctl cmd 2147767507
[  329.881553][T10100] netlink: 'syz.2.1532': attribute type 3 has an invalid length.
[  329.906957][T10100] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  331.155173][T10137] __nla_validate_parse: 2 callbacks suppressed
[  331.155192][T10137] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1545'.
[  331.376378][T10135] sit0: left promiscuous mode
[  331.503792][T10138] sit0: entered promiscuous mode
[  332.036831][T10148] netlink: 'syz.3.1551': attribute type 2 has an invalid length.
[  332.057847][T10148] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1551'.
[  334.218090][T10152] netlink: 'syz.3.1553': attribute type 33 has an invalid length.
[  334.227138][T10152] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1553'.
[  334.720273][T10185] netlink: 'syz.1.1565': attribute type 10 has an invalid length.
[  334.736859][T10185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1565'.
[  334.775443][T10185] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  334.922516][T10192] netlink: set zone limit has 8 unknown bytes
[  335.092794][T10191] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  335.241720][T10195] syzkaller0: entered promiscuous mode
[  335.261591][T10195] syzkaller0: entered allmulticast mode
[  337.288768][T10219] netlink: 'syz.1.1575': attribute type 21 has an invalid length.
[  337.408024][T10221] netlink: 'syz.2.1577': attribute type 21 has an invalid length.
[  337.470670][T10223] syzkaller0: entered promiscuous mode
[  337.476701][T10223] syzkaller0: entered allmulticast mode
[  340.250842][T10259] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1587'.
[  340.562274][T10269] netlink: 'syz.2.1591': attribute type 10 has an invalid length.
[  340.570916][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1591'.
[  340.881290][T10280] netlink: 'syz.1.1595': attribute type 10 has an invalid length.
[  340.942387][T10280] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  341.040979][T10281] netlink: set zone limit has 8 unknown bytes
[  341.428722][T10299] netlink: 'syz.0.1601': attribute type 10 has an invalid length.
[  341.438612][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'.
[  341.455891][T10299] batman_adv: batadv0: Adding interface: veth0_vlan
[  341.462893][T10299] batman_adv: batadv0: Interface activated: veth0_vlan
[  341.812054][T10311] netlink: 'syz.0.1607': attribute type 10 has an invalid length.
[  341.837748][T10311] team0: Device wg1 is of different type
[  341.975706][T10317] netlink: 'syz.0.1609': attribute type 10 has an invalid length.
[  342.015363][T10317] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  342.141563][T10321] netlink: set zone limit has 8 unknown bytes
[  342.339673][T10328] netlink: 'syz.0.1613': attribute type 21 has an invalid length.
[  342.348413][T10328] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1613'.
[  343.349574][T10348] netlink: 'syz.1.1621': attribute type 4 has an invalid length.
[  343.414087][T10348] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1621'.
[  343.552488][T10352] netlink: 'syz.2.1622': attribute type 10 has an invalid length.
[  343.946535][T10357] netlink: set zone limit has 8 unknown bytes
[  344.042666][T10352] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  346.726174][T10395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.084502][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'.
[  347.410366][T10420] netlink: 'syz.1.1650': attribute type 10 has an invalid length.
[  347.418395][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1650'.
[  347.428534][T10420] dummy0: entered promiscuous mode
[  347.435268][T10420] dummy0: entered allmulticast mode
[  347.441732][T10420] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  347.872594][T10436] Q�6�`Ҙ: renamed from lo
[  348.088786][T10447] netlink: 'syz.3.1658': attribute type 10 has an invalid length.
[  348.112299][T10447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1658'.
[  348.131835][T10447] team0: entered promiscuous mode
[  348.143060][T10447] C: entered promiscuous mode
[  348.151538][T10447] team_slave_1: entered promiscuous mode
[  348.157721][T10447] geneve1: entered promiscuous mode
[  348.163252][T10447] team0: entered allmulticast mode
[  348.172202][T10447] C: entered allmulticast mode
[  348.178358][T10447] team_slave_1: entered allmulticast mode
[  348.187304][T10447] geneve1: entered allmulticast mode
[  348.194671][T10447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  348.242287][T10449] syzkaller1: tun_chr_ioctl cmd 1074025673
[  349.021325][T10472] netlink: 'syz.3.1667': attribute type 10 has an invalid length.
[  349.097539][T10472] .`: (slave wlan1): Releasing backup interface
[  349.133208][T10472] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  349.154829][T10472] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  349.179065][T10472] team0: Port device wlan1 added
[  349.405607][T10483] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1673'.
[  349.460100][T10487] netlink: 'syz.2.1674': attribute type 21 has an invalid length.
[  349.483667][T10487] netlink: 'syz.2.1674': attribute type 6 has an invalid length.
[  349.512684][T10487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1674'.
[  350.078588][T10510] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1684'.
[  350.087867][T10511] netlink: 'syz.1.1683': attribute type 29 has an invalid length.
[  350.104612][T10511] netlink: 'syz.1.1683': attribute type 29 has an invalid length.
[  350.124427][T10511] netlink: 'syz.1.1683': attribute type 29 has an invalid length.
[  350.134004][T10510] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  350.142369][T10510] CPU: 0 PID: 10510 Comm: syz.3.1684 Not tainted syzkaller #0
[  350.149911][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  350.159998][T10510] Call Trace:
[  350.163292][T10510]  <TASK>
[  350.166242][T10510]  dump_stack_lvl+0x18c/0x250
[  350.171046][T10510]  ? show_regs_print_info+0x20/0x20
[  350.176278][T10510]  ? load_image+0x420/0x420
[  350.180827][T10510]  sysfs_warn_dup+0x8e/0xa0
[  350.185363][T10510]  sysfs_do_create_link_sd+0xc0/0x110
[  350.190772][T10510]  device_add_class_symlinks+0x1cf/0x240
[  350.196454][T10510]  device_add+0x4f9/0xc40
[  350.200820][T10510]  wiphy_register+0x1d99/0x2ac0
[  350.205714][T10510]  ? cfg80211_event_work+0x40/0x40
[  350.210938][T10510]  ? minstrel_ht_alloc+0x88a/0x990
[  350.216080][T10510]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  350.222178][T10510]  ieee80211_register_hw+0x2dd8/0x3b30
[  350.227668][T10510]  ? ieee80211_register_hw+0xef1/0x3b30
[  350.233240][T10510]  ? ieee80211_tasklet_handler+0x20/0x20
[  350.238886][T10510]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  350.244814][T10510]  ? __debug_object_init+0xec/0x450
[  350.250033][T10510]  ? __asan_memset+0x22/0x40
[  350.254645][T10510]  ? __hrtimer_init+0x189/0x270
[  350.259517][T10510]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  350.265288][T10510]  ? mac80211_hwsim_free+0x220/0x220
[  350.270596][T10510]  ? rcu_is_watching+0x15/0xb0
[  350.275384][T10510]  ? kstrndup+0xbd/0x140
[  350.279894][T10510]  hwsim_new_radio_nl+0xdad/0x1a70
[  350.285304][T10510]  ? __nla_validate+0x50/0x50
[  350.290027][T10510]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  350.296404][T10510]  ? __nla_parse+0x40/0x50
[  350.300846][T10510]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  350.307201][T10510]  genl_family_rcv_msg_doit+0x21a/0x310
[  350.312795][T10510]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  350.318729][T10510]  ? bpf_lsm_capable+0x9/0x10
[  350.323431][T10510]  ? security_capable+0x89/0xb0
[  350.328324][T10510]  genl_rcv_msg+0x611/0x7a0
[  350.332861][T10510]  ? genl_bind+0x360/0x360
[  350.337300][T10510]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  350.343658][T10510]  ? ref_tracker_free+0x686/0x830
[  350.348721][T10510]  ? __kasan_kmalloc_large+0x8b/0xa0
[  350.354034][T10510]  netlink_rcv_skb+0x235/0x4c0
[  350.358816][T10510]  ? genl_bind+0x360/0x360
[  350.363257][T10510]  ? netlink_ack+0x1160/0x1160
[  350.368063][T10510]  ? __lock_acquire+0x7d80/0x7d80
[  350.373109][T10510]  ? down_read+0x1ac/0x2e0
[  350.377570][T10510]  genl_rcv+0x28/0x40
[  350.381589][T10510]  netlink_unicast+0x7b1/0x930
[  350.386392][T10510]  netlink_sendmsg+0x8d0/0xbf0
[  350.391218][T10510]  ? netlink_getsockopt+0x590/0x590
[  350.396446][T10510]  ? apparmor_socket_sendmsg+0x8e/0x330
[  350.402010][T10510]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  350.407309][T10510]  ? security_socket_sendmsg+0x80/0xa0
[  350.412789][T10510]  ? netlink_getsockopt+0x590/0x590
[  350.418009][T10510]  ____sys_sendmsg+0x61b/0x980
[  350.422804][T10510]  ? __asan_memset+0x22/0x40
[  350.427420][T10510]  ? __sys_sendmsg_sock+0x30/0x30
[  350.432470][T10510]  ? __import_iovec+0x5f2/0x850
[  350.437360][T10510]  ? import_iovec+0x73/0xa0
[  350.441970][T10510]  ___sys_sendmsg+0x2a6/0x360
[  350.446678][T10510]  ? __sys_sendmsg+0x2b0/0x2b0
[  350.451512][T10510]  __se_sys_sendmsg+0x1d0/0x2c0
[  350.456381][T10510]  ? __x64_sys_sendmsg+0x80/0x80
[  350.461365][T10510]  ? lockdep_hardirqs_on+0x98/0x150
[  350.466672][T10510]  do_syscall_64+0x55/0xb0
[  350.471108][T10510]  ? clear_bhb_loop+0x40/0x90
[  350.475793][T10510]  ? clear_bhb_loop+0x40/0x90
[  350.480481][T10510]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  350.486390][T10510] RIP: 0033:0x7fba1719de59
[  350.490819][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.510444][T10510] RSP: 002b:00007fba18024028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.518874][T10510] RAX: ffffffffffffffda RBX: 00007fba17425fa0 RCX: 00007fba1719de59
[  350.526860][T10510] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  350.534845][T10510] RBP: 00007fba17233e6f R08: 0000000000000000 R09: 0000000000000000
[  350.542832][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.550857][T10510] R13: 00007fba17426038 R14: 00007fba17425fa0 R15: 00007ffc5e7e97f8
[  350.558859][T10510]  </TASK>
[  352.927075][T10559] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1698'.
[  353.698631][T10578] netlink: 'syz.3.1704': attribute type 33 has an invalid length.
[  353.707554][T10578] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1704'.
[  354.056415][T10586] syzkaller0: entered promiscuous mode
[  354.062083][T10586] syzkaller0: entered allmulticast mode
[  354.215920][T10594] TCP: TCP_TX_DELAY enabled
[  354.246054][T10594] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.1711'.
[  355.138998][T10603] netlink: set zone limit has 8 unknown bytes
[  356.174751][T10598] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1712'.
[  357.362284][T10620] syzkaller0: entered promiscuous mode
[  357.446047][T10620] syzkaller0: entered allmulticast mode
[  360.763053][T10657] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1730'.
[  361.368160][T10664] netlink: 'syz.0.1734': attribute type 39 has an invalid length.
[  361.503447][T10666] netlink: 'syz.3.1735': attribute type 13 has an invalid length.
[  361.511405][T10666] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1735'.
[  361.580190][T10669] FAULT_INJECTION: forcing a failure.
[  361.580190][T10669] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.594635][T10669] CPU: 1 PID: 10669 Comm: syz.2.1736 Not tainted syzkaller #0
[  361.602232][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  361.612300][T10669] Call Trace:
[  361.615590][T10669]  <TASK>
[  361.618533][T10669]  dump_stack_lvl+0x18c/0x250
[  361.623220][T10669]  ? show_regs_print_info+0x20/0x20
[  361.628434][T10669]  ? load_image+0x420/0x420
[  361.632936][T10669]  ? __might_fault+0xaa/0x120
[  361.637611][T10669]  ? __lock_acquire+0x7d80/0x7d80
[  361.642636][T10669]  should_fail_ex+0x394/0x4c0
[  361.647313][T10669]  _copy_from_iter+0x1cd/0x1290
[  361.652181][T10669]  ? rcu_is_watching+0x15/0xb0
[  361.656962][T10669]  ? copyout_mc+0x70/0x70
[  361.661286][T10669]  ? __virt_addr_valid+0x10c/0x380
[  361.666411][T10669]  ? __virt_addr_valid+0x10c/0x380
[  361.671545][T10669]  ? __virt_addr_valid+0x10c/0x380
[  361.676664][T10669]  ? __check_object_size+0x4fc/0xa40
[  361.681961][T10669]  netlink_sendmsg+0x76b/0xbf0
[  361.686730][T10669]  ? netlink_getsockopt+0x590/0x590
[  361.691980][T10669]  ? apparmor_socket_sendmsg+0x8e/0x330
[  361.697520][T10669]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  361.702811][T10669]  ? security_socket_sendmsg+0x80/0xa0
[  361.708279][T10669]  ? netlink_getsockopt+0x590/0x590
[  361.713504][T10669]  ____sys_sendmsg+0x61b/0x980
[  361.718274][T10669]  ? __asan_memset+0x22/0x40
[  361.722869][T10669]  ? __sys_sendmsg_sock+0x30/0x30
[  361.727913][T10669]  ? __import_iovec+0x5f2/0x850
[  361.732765][T10669]  ? import_iovec+0x73/0xa0
[  361.737274][T10669]  ___sys_sendmsg+0x2a6/0x360
[  361.741965][T10669]  ? get_pid_task+0x20/0x1e0
[  361.746599][T10669]  ? __sys_sendmsg+0x2b0/0x2b0
[  361.751645][T10669]  ? __lock_acquire+0x7d80/0x7d80
[  361.756682][T10669]  __se_sys_sendmsg+0x1d0/0x2c0
[  361.761541][T10669]  ? __x64_sys_sendmsg+0x80/0x80
[  361.766489][T10669]  ? lockdep_hardirqs_on+0x98/0x150
[  361.771689][T10669]  do_syscall_64+0x55/0xb0
[  361.776118][T10669]  ? clear_bhb_loop+0x40/0x90
[  361.780815][T10669]  ? clear_bhb_loop+0x40/0x90
[  361.785497][T10669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.791389][T10669] RIP: 0033:0x7f6ebe19de59
[  361.795801][T10669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.815532][T10669] RSP: 002b:00007f6ebefe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.823945][T10669] RAX: ffffffffffffffda RBX: 00007f6ebe425fa0 RCX: 00007f6ebe19de59
[  361.831918][T10669] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003
[  361.839882][T10669] RBP: 00007f6ebefe5090 R08: 0000000000000000 R09: 0000000000000000
[  361.847859][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.855848][T10669] R13: 00007f6ebe426038 R14: 00007f6ebe425fa0 R15: 00007ffdd9f52b58
[  361.863827][T10669]  </TASK>
[  362.030700][T10675] netlink: 'syz.3.1740': attribute type 10 has an invalid length.
[  362.435968][T10690] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1745'.
[  362.447310][T10691] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1743'.
[  362.597801][T10694] netlink: 'syz.2.1746': attribute type 10 has an invalid length.
[  362.615513][T10694] 8021q: adding VLAN 0 to HW filter on device team0
[  362.629904][T10694] .`: (slave team0): Enslaving as an active interface with an up link
[  362.770088][T10698] netlink: 'syz.3.1748': attribute type 10 has an invalid length.
[  362.778517][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1748'.
[  362.791940][T10698] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  363.441993][T10717] syzkaller0: entered promiscuous mode
[  363.449351][T10717] syzkaller0: entered allmulticast mode
[  363.547541][T10722] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1758'.
[  366.293598][T10731] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1761'.
[  366.887853][T10764] netlink: 'syz.2.1774': attribute type 29 has an invalid length.
[  366.912575][T10764] netlink: 'syz.2.1774': attribute type 29 has an invalid length.
[  366.941249][T10764] netlink: 'syz.2.1774': attribute type 29 has an invalid length.
[  366.981868][T10764] netlink: 'syz.2.1774': attribute type 29 has an invalid length.
[  366.999741][T10764] netlink: 'syz.2.1774': attribute type 29 has an invalid length.
[  367.221843][T10772] netlink: 'syz.3.1778': attribute type 10 has an invalid length.
[  367.258992][T10772] wg1: entered promiscuous mode
[  367.264576][T10772] wg1: entered allmulticast mode
[  367.269821][T10772] team0: Device wg1 is of different type
[  367.468940][T10778] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1781'.
[  368.627667][T10815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1792'.
[  372.005808][T10850] netlink: 'syz.3.1806': attribute type 4 has an invalid length.
[  372.032250][T10850] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1806'.
[  372.490586][T10865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  372.644488][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.663983][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  372.682436][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.695107][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  372.706413][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.714979][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  372.755833][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.792901][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  372.820430][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.837463][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  372.852566][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.866527][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  372.888956][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  372.947403][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  373.053235][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  373.072261][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  373.095683][T10867] netlink: 'syz.0.1812': attribute type 58 has an invalid length.
[  373.110573][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1812'.
[  373.587939][T10895] syzkaller0: entered promiscuous mode
[  373.603088][T10895] syzkaller0: entered allmulticast mode
[  376.078175][T10930] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  377.487700][T10971] validate_nla: 25 callbacks suppressed
[  377.487718][T10971] netlink: 'syz.3.1849': attribute type 21 has an invalid length.
[  377.555924][T10971] netlink: 'syz.3.1849': attribute type 6 has an invalid length.
[  377.586918][T10971] __nla_validate_parse: 27 callbacks suppressed
[  377.586935][T10971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1849'.
[  377.676959][T10977] netlink: 'syz.1.1852': attribute type 1 has an invalid length.
[  377.884656][T10979] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1851'.
[  378.061964][T10986] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1855'.
[  378.211298][T10989] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1857'.
[  378.440752][T10989] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  378.472169][T10989] CPU: 1 PID: 10989 Comm: syz.1.1857 Not tainted syzkaller #0
[  378.479800][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  378.489890][T10989] Call Trace:
[  378.493180][T10989]  <TASK>
[  378.496121][T10989]  dump_stack_lvl+0x18c/0x250
[  378.500909][T10989]  ? show_regs_print_info+0x20/0x20
[  378.506120][T10989]  ? load_image+0x420/0x420
[  378.510641][T10989]  sysfs_warn_dup+0x8e/0xa0
[  378.515144][T10989]  sysfs_do_create_link_sd+0xc0/0x110
[  378.520523][T10989]  device_add_class_symlinks+0x1cf/0x240
[  378.526167][T10989]  device_add+0x4f9/0xc40
[  378.530508][T10989]  wiphy_register+0x1d99/0x2ac0
[  378.535375][T10989]  ? cfg80211_event_work+0x40/0x40
[  378.540487][T10989]  ? minstrel_ht_alloc+0x88a/0x990
[  378.545614][T10989]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  378.551690][T10989]  ieee80211_register_hw+0x2dd8/0x3b30
[  378.557162][T10989]  ? ieee80211_register_hw+0xef1/0x3b30
[  378.562714][T10989]  ? ieee80211_tasklet_handler+0x20/0x20
[  378.568348][T10989]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  378.574260][T10989]  ? __debug_object_init+0xec/0x450
[  378.579486][T10989]  ? __asan_memset+0x22/0x40
[  378.584088][T10989]  ? __hrtimer_init+0x189/0x270
[  378.588952][T10989]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  378.594705][T10989]  ? mac80211_hwsim_free+0x220/0x220
[  378.600116][T10989]  ? rcu_is_watching+0x15/0xb0
[  378.604913][T10989]  ? kstrndup+0xbd/0x140
[  378.609178][T10989]  hwsim_new_radio_nl+0xdad/0x1a70
[  378.614313][T10989]  ? __nla_validate+0x50/0x50
[  378.619015][T10989]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  378.625366][T10989]  ? __nla_parse+0x40/0x50
[  378.629800][T10989]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  378.636141][T10989]  genl_family_rcv_msg_doit+0x21a/0x310
[  378.641705][T10989]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  378.647706][T10989]  ? bpf_lsm_capable+0x9/0x10
[  378.652396][T10989]  ? security_capable+0x89/0xb0
[  378.657258][T10989]  genl_rcv_msg+0x611/0x7a0
[  378.661777][T10989]  ? genl_bind+0x360/0x360
[  378.666202][T10989]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  378.672552][T10989]  ? ref_tracker_free+0x686/0x830
[  378.677678][T10989]  ? __kasan_kmalloc_large+0x8b/0xa0
[  378.682978][T10989]  netlink_rcv_skb+0x235/0x4c0
[  378.687770][T10989]  ? genl_bind+0x360/0x360
[  378.692209][T10989]  ? netlink_ack+0x1160/0x1160
[  378.696990][T10989]  ? __lock_acquire+0x7d80/0x7d80
[  378.702019][T10989]  ? down_read+0x1ac/0x2e0
[  378.706446][T10989]  genl_rcv+0x28/0x40
[  378.710435][T10989]  netlink_unicast+0x7b1/0x930
[  378.715222][T10989]  netlink_sendmsg+0x8d0/0xbf0
[  378.720094][T10989]  ? netlink_getsockopt+0x590/0x590
[  378.725306][T10989]  ? apparmor_socket_sendmsg+0x8e/0x330
[  378.730862][T10989]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  378.736147][T10989]  ? security_socket_sendmsg+0x80/0xa0
[  378.741618][T10989]  ? netlink_getsockopt+0x590/0x590
[  378.746858][T10989]  ____sys_sendmsg+0x61b/0x980
[  378.751686][T10989]  ? __asan_memset+0x22/0x40
[  378.756316][T10989]  ? __sys_sendmsg_sock+0x30/0x30
[  378.761349][T10989]  ? __import_iovec+0x5f2/0x850
[  378.766214][T10989]  ? import_iovec+0x73/0xa0
[  378.770723][T10989]  ___sys_sendmsg+0x2a6/0x360
[  378.775416][T10989]  ? __sys_sendmsg+0x2b0/0x2b0
[  378.780231][T10989]  __se_sys_sendmsg+0x1d0/0x2c0
[  378.785091][T10989]  ? __x64_sys_sendmsg+0x80/0x80
[  378.790058][T10989]  ? lockdep_hardirqs_on+0x98/0x150
[  378.795271][T10989]  do_syscall_64+0x55/0xb0
[  378.799704][T10989]  ? clear_bhb_loop+0x40/0x90
[  378.804381][T10989]  ? clear_bhb_loop+0x40/0x90
[  378.809061][T10989]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  378.814962][T10989] RIP: 0033:0x7f1292f9de59
[  378.819389][T10989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.839013][T10989] RSP: 002b:00007f1293d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.847438][T10989] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9de59
[  378.855500][T10989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  378.863477][T10989] RBP: 00007f1293033e6f R08: 0000000000000000 R09: 0000000000000000
[  378.871451][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.879427][T10989] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffee36ebdc8
[  378.887517][T10989]  </TASK>
[  378.912231][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  378.918746][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  379.293109][T11001] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1862'.
[  380.745965][T11033] netlink: 'syz.0.1875': attribute type 33 has an invalid length.
[  380.763045][T11033] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1875'.
[  381.499223][T11058] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1882'.
[  382.199092][T11070] syzkaller0: entered promiscuous mode
[  382.215001][T11070] syzkaller0: entered allmulticast mode
[  382.340515][T11074] netlink: set zone limit has 8 unknown bytes
[  382.368078][T11076] netlink: 'syz.1.1887': attribute type 11 has an invalid length.
[  382.377182][T11076] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1887'.
[  382.393430][T11076] netlink: 174100 bytes leftover after parsing attributes in process `syz.1.1887'.
[  383.839830][T11077] netlink: 174100 bytes leftover after parsing attributes in process `syz.1.1887'.
[  385.377017][T11105] syzkaller0: entered promiscuous mode
[  385.384237][T11105] syzkaller0: entered allmulticast mode
[  387.415006][T11134] FAULT_INJECTION: forcing a failure.
[  387.415006][T11134] name failslab, interval 1, probability 0, space 0, times 0
[  387.452578][T11134] CPU: 1 PID: 11134 Comm: syz.2.1905 Not tainted syzkaller #0
[  387.460115][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  387.470293][T11134] Call Trace:
[  387.473601][T11134]  <TASK>
[  387.476554][T11134]  dump_stack_lvl+0x18c/0x250
[  387.481279][T11134]  ? show_regs_print_info+0x20/0x20
[  387.486521][T11134]  ? load_image+0x420/0x420
[  387.491131][T11134]  ? perf_trace_lock_acquire+0x105/0x400
[  387.493237][T11137] netlink: 'syz.0.1904': attribute type 21 has an invalid length.
[  387.496796][T11134]  ? verify_lock_unused+0x140/0x140
[  387.496830][T11134]  ? perf_trace_lock_acquire+0x105/0x400
[  387.496860][T11134]  should_fail_ex+0x394/0x4c0
[  387.496886][T11134]  should_failslab+0x9/0x20
[  387.496908][T11134]  slab_pre_alloc_hook+0x59/0x300
[  387.496938][T11134]  kmem_cache_alloc+0x5a/0x2c0
[  387.496960][T11134]  ? skb_clone+0x1eb/0x370
[  387.497017][T11134]  skb_clone+0x1eb/0x370
[  387.497038][T11134]  __netlink_deliver_tap+0x411/0x7f0
[  387.548875][T11134]  ? netlink_deliver_tap+0x2e/0x1b0
[  387.554102][T11134]  netlink_deliver_tap+0x19c/0x1b0
[  387.559254][T11134]  netlink_unicast+0x77b/0x930
[  387.564077][T11134]  netlink_sendmsg+0x8d0/0xbf0
[  387.568889][T11134]  ? netlink_getsockopt+0x590/0x590
[  387.574128][T11134]  ? apparmor_socket_sendmsg+0x8e/0x330
[  387.579714][T11134]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  387.585041][T11134]  ? security_socket_sendmsg+0x80/0xa0
[  387.590538][T11134]  ? netlink_getsockopt+0x590/0x590
[  387.595769][T11134]  ____sys_sendmsg+0x61b/0x980
[  387.600589][T11134]  ? __asan_memset+0x22/0x40
[  387.605246][T11134]  ? __sys_sendmsg_sock+0x30/0x30
[  387.610324][T11134]  ? __import_iovec+0x5f2/0x850
[  387.615233][T11134]  ? import_iovec+0x73/0xa0
[  387.619788][T11134]  ___sys_sendmsg+0x2a6/0x360
[  387.624506][T11134]  ? get_pid_task+0x20/0x1e0
[  387.629110][T11134]  ? __sys_sendmsg+0x2b0/0x2b0
[  387.633930][T11134]  ? __lock_acquire+0x7d80/0x7d80
[  387.638980][T11134]  __se_sys_sendmsg+0x1d0/0x2c0
[  387.643838][T11134]  ? __x64_sys_sendmsg+0x80/0x80
[  387.648806][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  387.654094][T11134]  do_syscall_64+0x55/0xb0
[  387.658511][T11134]  ? clear_bhb_loop+0x40/0x90
[  387.663211][T11134]  ? clear_bhb_loop+0x40/0x90
[  387.667888][T11134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  387.673780][T11134] RIP: 0033:0x7f6ebe19de59
[  387.678195][T11134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.697814][T11134] RSP: 002b:00007f6ebefe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  387.706260][T11134] RAX: ffffffffffffffda RBX: 00007f6ebe425fa0 RCX: 00007f6ebe19de59
[  387.714267][T11134] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003
[  387.722291][T11134] RBP: 00007f6ebefe5090 R08: 0000000000000000 R09: 0000000000000000
[  387.730298][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.738302][T11134] R13: 00007f6ebe426038 R14: 00007f6ebe425fa0 R15: 00007ffdd9f52b58
[  387.746327][T11134]  </TASK>
[  387.758832][T11134] netlink: 'syz.2.1905': attribute type 21 has an invalid length.
[  387.789352][T11139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1908'.
[  387.947305][T11145] netlink: 'syz.2.1909': attribute type 10 has an invalid length.
[  388.151629][T11151] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1911'.
[  388.265772][T11155] netlink: 'syz.0.1913': attribute type 39 has an invalid length.
[  388.374576][T11157] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1914'.
[  388.393838][T11157] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  388.450361][T11157] netlink: 'syz.2.1914': attribute type 3 has an invalid length.
[  388.464124][T11157] netlink: 'syz.2.1914': attribute type 1 has an invalid length.
[  388.472198][T11157] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1914'.
[  388.919815][T11170] netlink: 'syz.3.1919': attribute type 10 has an invalid length.
[  388.931595][T11170] team0: left promiscuous mode
[  388.936515][T11170] C: left promiscuous mode
[  388.941267][T11170] team_slave_1: left promiscuous mode
[  388.946998][T11170] geneve1: left promiscuous mode
[  388.952775][T11170] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  388.961156][T11170] team0: left allmulticast mode
[  388.966177][T11170] C: left allmulticast mode
[  388.970760][T11170] team_slave_1: left allmulticast mode
[  388.977073][T11170] geneve1: left allmulticast mode
[  388.982360][T11170] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  389.014663][T11170] 8021q: adding VLAN 0 to HW filter on device team0
[  389.026083][T11170] .`: (slave team0): Enslaving as an active interface with an up link
[  389.035472][T11172] -1: renamed from syzkaller0
[  389.444173][T11184] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1921'.
[  389.682434][T11190] netlink: 'syz.2.1927': attribute type 3 has an invalid length.
[  389.691646][T11190] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1927'.
[  389.970887][T11195] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1929'.
[  391.534922][T11218] syzkaller0: entered promiscuous mode
[  391.542995][T11218] syzkaller0: entered allmulticast mode
[  391.785028][T11226] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1939'.
[  391.851342][T11231] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1940'.
[  391.851375][T11229] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1940'.
[  394.477646][T11250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'.
[  395.356298][T11264] netlink: 'syz.2.1951': attribute type 10 has an invalid length.
[  395.371221][T11264] team0: Device wg1 is of different type
[  396.544801][T11294] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1961'.
[  396.633169][T11295] netlink: 'syz.2.1963': attribute type 3 has an invalid length.
[  396.641278][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'.
[  396.650931][T11295] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  397.781099][T11324] netlink: 'syz.1.1972': attribute type 21 has an invalid length.
[  397.789685][T11324] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1972'.
[  398.285032][T11334] netlink: 'syz.2.1977': attribute type 10 has an invalid length.
[  398.317547][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1977'.
[  398.353550][T11334] team0: entered promiscuous mode
[  398.370190][T11335] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.1977'.
[  398.393423][T11334] C: entered promiscuous mode
[  398.400775][T11334] team_slave_1: entered promiscuous mode
[  398.435764][T11334] geneve1: entered promiscuous mode
[  398.459480][T11334] team0: entered allmulticast mode
[  398.485131][T11334] C: entered allmulticast mode
[  398.505304][T11334] team_slave_1: entered allmulticast mode
[  398.511415][T11334] geneve1: entered allmulticast mode
[  398.529785][T11334] .`: (slave team0): Releasing backup interface
[  398.580291][T11334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  398.670690][T11340] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1974'.
[  398.695734][T11337] netlink: 'syz.1.1978': attribute type 4 has an invalid length.
[  398.748896][T11337] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1978'.
[  398.933021][T11351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  399.700347][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'.
[  400.049300][T11380] netlink: 'syz.3.1990': attribute type 11 has an invalid length.
[  400.069020][T11380] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1990'.
[  400.330420][T11391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'.
[  401.668712][T11434] netlink: 'syz.3.2011': attribute type 39 has an invalid length.
[  401.706731][ T5786] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10
[  402.251711][T11435] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2011'.
[  402.280253][T11435] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2011'.
[  402.298378][T11434] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2011'.
[  402.325730][T11442] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2011'.
[  402.377517][T11446] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2014'.
[  402.645003][T11453] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2016'.
[  402.721276][T11455] netlink: 'syz.0.2019': attribute type 21 has an invalid length.
[  402.731658][T11455] netlink: 'syz.0.2019': attribute type 6 has an invalid length.
[  402.740458][T11455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2019'.
[  403.520506][T11479] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  403.555847][T11479] CPU: 1 PID: 11479 Comm: syz.2.2027 Not tainted syzkaller #0
[  403.563660][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  403.573750][T11479] Call Trace:
[  403.577058][T11479]  <TASK>
[  403.580018][T11479]  dump_stack_lvl+0x18c/0x250
[  403.584755][T11479]  ? show_regs_print_info+0x20/0x20
[  403.590007][T11479]  ? load_image+0x420/0x420
[  403.594829][T11479]  sysfs_warn_dup+0x8e/0xa0
[  403.599376][T11479]  sysfs_do_create_link_sd+0xc0/0x110
[  403.604804][T11479]  device_add_class_symlinks+0x1cf/0x240
[  403.610485][T11479]  device_add+0x4f9/0xc40
[  403.614884][T11479]  wiphy_register+0x1d99/0x2ac0
[  403.619806][T11479]  ? cfg80211_event_work+0x40/0x40
[  403.624956][T11479]  ? minstrel_ht_alloc+0x88a/0x990
[  403.630122][T11479]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  403.636237][T11479]  ieee80211_register_hw+0x2dd8/0x3b30
[  403.641759][T11479]  ? ieee80211_register_hw+0xef1/0x3b30
[  403.647364][T11479]  ? ieee80211_tasklet_handler+0x20/0x20
[  403.653044][T11479]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  403.659080][T11479]  ? __debug_object_init+0xec/0x450
[  403.664342][T11479]  ? __asan_memset+0x22/0x40
[  403.669085][T11479]  ? __hrtimer_init+0x189/0x270
[  403.673981][T11479]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  403.679783][T11479]  ? mac80211_hwsim_free+0x220/0x220
[  403.685133][T11479]  ? rcu_is_watching+0x15/0xb0
[  403.689948][T11479]  ? kstrndup+0xbd/0x140
[  403.694247][T11479]  hwsim_new_radio_nl+0xdad/0x1a70
[  403.699419][T11479]  ? __nla_validate+0x50/0x50
[  403.704167][T11479]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  403.710646][T11479]  ? __nla_parse+0x40/0x50
[  403.715117][T11479]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  403.721493][T11479]  genl_family_rcv_msg_doit+0x21a/0x310
[  403.727105][T11479]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  403.733062][T11479]  ? bpf_lsm_capable+0x9/0x10
[  403.737790][T11479]  ? security_capable+0x89/0xb0
[  403.742698][T11479]  genl_rcv_msg+0x611/0x7a0
[  403.747273][T11479]  ? genl_bind+0x360/0x360
[  403.751750][T11479]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  403.758133][T11479]  ? ref_tracker_free+0x686/0x830
[  403.763209][T11479]  ? __kasan_kmalloc_large+0x8b/0xa0
[  403.768551][T11479]  netlink_rcv_skb+0x235/0x4c0
[  403.773369][T11479]  ? genl_bind+0x360/0x360
[  403.777884][T11479]  ? netlink_ack+0x1160/0x1160
[  403.782713][T11479]  ? __lock_acquire+0x7d80/0x7d80
[  403.787799][T11479]  ? down_read+0x1ac/0x2e0
[  403.792275][T11479]  genl_rcv+0x28/0x40
[  403.796310][T11479]  netlink_unicast+0x7b1/0x930
[  403.801143][T11479]  netlink_sendmsg+0x8d0/0xbf0
[  403.805979][T11479]  ? netlink_getsockopt+0x590/0x590
[  403.811235][T11479]  ? apparmor_socket_sendmsg+0x8e/0x330
[  403.813933][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  403.816798][T11479]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  403.828532][T11479]  ? security_socket_sendmsg+0x80/0xa0
[  403.834075][T11479]  ? netlink_getsockopt+0x590/0x590
[  403.839327][T11479]  ____sys_sendmsg+0x61b/0x980
[  403.844152][T11479]  ? __asan_memset+0x22/0x40
[  403.848790][T11479]  ? __sys_sendmsg_sock+0x30/0x30
[  403.853872][T11479]  ? __import_iovec+0x5f2/0x850
[  403.858794][T11479]  ? import_iovec+0x73/0xa0
[  403.863373][T11479]  ___sys_sendmsg+0x2a6/0x360
[  403.868109][T11479]  ? __sys_sendmsg+0x2b0/0x2b0
[  403.872978][T11479]  __se_sys_sendmsg+0x1d0/0x2c0
[  403.877919][T11479]  ? __x64_sys_sendmsg+0x80/0x80
[  403.882925][T11479]  ? lockdep_hardirqs_on+0x98/0x150
[  403.888188][T11479]  do_syscall_64+0x55/0xb0
[  403.892661][T11479]  ? clear_bhb_loop+0x40/0x90
[  403.897392][T11479]  ? clear_bhb_loop+0x40/0x90
[  403.902201][T11479]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.908151][T11479] RIP: 0033:0x7f6ebe19de59
[  403.912609][T11479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.932867][T11479] RSP: 002b:00007f6ebefe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.941418][T11479] RAX: ffffffffffffffda RBX: 00007f6ebe425fa0 RCX: 00007f6ebe19de59
[  403.949438][T11479] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  403.957711][T11479] RBP: 00007f6ebe233e6f R08: 0000000000000000 R09: 0000000000000000
[  403.966166][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.974190][T11479] R13: 00007f6ebe426038 R14: 00007f6ebe425fa0 R15: 00007ffdd9f52b58
[  403.982324][T11479]  </TASK>
[  405.053261][T11504] __nla_validate_parse: 2 callbacks suppressed
[  405.053281][T11504] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2032'.
[  407.471897][T11521] tap0: tun_chr_ioctl cmd 1074812117
[  408.283713][T11536] netlink: 'syz.3.2043': attribute type 33 has an invalid length.
[  408.294150][T11536] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2043'.
[  410.386265][T11567] netlink: set zone limit has 8 unknown bytes
[  410.559171][T11572] syzkaller0: entered promiscuous mode
[  410.568340][T11572] syzkaller0: entered allmulticast mode
[  410.735800][T11577] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2057'.
[  413.683853][T11595] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2062'.
[  413.958340][T11614] syzkaller0: entered promiscuous mode
[  413.965525][T11614] syzkaller0: entered allmulticast mode
[  415.694684][T11624] netlink: 'syz.0.2074': attribute type 21 has an invalid length.
[  415.702570][T11624] FAULT_INJECTION: forcing a failure.
[  415.702570][T11624] name failslab, interval 1, probability 0, space 0, times 0
[  415.715352][T11624] CPU: 0 PID: 11624 Comm: syz.0.2074 Not tainted syzkaller #0
[  415.722842][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  415.732911][T11624] Call Trace:
[  415.736213][T11624]  <TASK>
[  415.739160][T11624]  dump_stack_lvl+0x18c/0x250
[  415.743851][T11624]  ? show_regs_print_info+0x20/0x20
[  415.749065][T11624]  ? load_image+0x420/0x420
[  415.753573][T11624]  ? __might_sleep+0xe0/0xe0
[  415.758260][T11624]  ? __lock_acquire+0x7d80/0x7d80
[  415.763280][T11624]  should_fail_ex+0x394/0x4c0
[  415.767967][T11624]  should_failslab+0x9/0x20
[  415.772464][T11624]  slab_pre_alloc_hook+0x59/0x300
[  415.777490][T11624]  ? fib6_info_alloc+0x30/0xf0
[  415.782329][T11624]  ? fib6_info_alloc+0x30/0xf0
[  415.787094][T11624]  __kmem_cache_alloc_node+0x53/0x250
[  415.792483][T11624]  ? fib6_info_alloc+0x30/0xf0
[  415.797252][T11624]  __kmalloc+0xa7/0x240
[  415.801411][T11624]  fib6_info_alloc+0x30/0xf0
[  415.806011][T11624]  ip6_route_info_create+0x455/0x1260
[  415.811383][T11624]  ? inet6_rtm_newroute+0x3cc/0x1d00
[  415.816666][T11624]  ? nla_find+0x12a/0x150
[  415.820997][T11624]  inet6_rtm_newroute+0x5bc/0x1d00
[  415.826125][T11624]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  415.832028][T11624]  ? do_raw_spin_unlock+0x121/0x230
[  415.837252][T11624]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  415.843142][T11624]  rtnetlink_rcv_msg+0x843/0xf90
[  415.848152][T11624]  ? rtnetlink_rcv_msg+0x220/0xf90
[  415.853356][T11624]  ? rtnetlink_bind+0x80/0x80
[  415.858210][T11624]  ? perf_trace_preemptirq_template+0xac/0x330
[  415.864370][T11624]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  415.870354][T11624]  ? lock_chain_count+0x20/0x20
[  415.875220][T11624]  ? __local_bh_enable_ip+0x13a/0x1c0
[  415.880590][T11624]  ? lockdep_hardirqs_on+0x98/0x150
[  415.885883][T11624]  ? __local_bh_enable_ip+0x13a/0x1c0
[  415.891257][T11624]  ? _local_bh_enable+0xa0/0xa0
[  415.896485][T11624]  ? __dev_queue_xmit+0x275/0x3630
[  415.901664][T11624]  ? __dev_queue_xmit+0x1bc2/0x3630
[  415.906972][T11624]  ? __dev_queue_xmit+0x275/0x3630
[  415.912120][T11624]  ? ref_tracker_free+0x686/0x830
[  415.917169][T11624]  netlink_rcv_skb+0x235/0x4c0
[  415.921941][T11624]  ? rtnetlink_bind+0x80/0x80
[  415.926617][T11624]  ? netlink_ack+0x1160/0x1160
[  415.931387][T11624]  ? __lock_acquire+0x7d80/0x7d80
[  415.936414][T11624]  ? netlink_deliver_tap+0x2e/0x1b0
[  415.941644][T11624]  netlink_unicast+0x7b1/0x930
[  415.946505][T11624]  netlink_sendmsg+0x8d0/0xbf0
[  415.951310][T11624]  ? netlink_getsockopt+0x590/0x590
[  415.956515][T11624]  ? apparmor_socket_sendmsg+0x8e/0x330
[  415.962071][T11624]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  415.967453][T11624]  ? security_socket_sendmsg+0x80/0xa0
[  415.972924][T11624]  ? netlink_getsockopt+0x590/0x590
[  415.978128][T11624]  ____sys_sendmsg+0x61b/0x980
[  415.982911][T11624]  ? __asan_memset+0x22/0x40
[  415.987500][T11624]  ? __sys_sendmsg_sock+0x30/0x30
[  415.992529][T11624]  ? __import_iovec+0x5f2/0x850
[  415.997392][T11624]  ? import_iovec+0x73/0xa0
[  416.001899][T11624]  ___sys_sendmsg+0x2a6/0x360
[  416.006584][T11624]  ? get_pid_task+0x20/0x1e0
[  416.011178][T11624]  ? __sys_sendmsg+0x2b0/0x2b0
[  416.015958][T11624]  ? __lock_acquire+0x7d80/0x7d80
[  416.020999][T11624]  __se_sys_sendmsg+0x1d0/0x2c0
[  416.025855][T11624]  ? __x64_sys_sendmsg+0x80/0x80
[  416.030854][T11624]  ? lockdep_hardirqs_on+0x98/0x150
[  416.036054][T11624]  do_syscall_64+0x55/0xb0
[  416.040471][T11624]  ? clear_bhb_loop+0x40/0x90
[  416.045144][T11624]  ? clear_bhb_loop+0x40/0x90
[  416.049817][T11624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  416.055709][T11624] RIP: 0033:0x7efee579de59
[  416.060128][T11624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.079739][T11624] RSP: 002b:00007efee66e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.088158][T11624] RAX: ffffffffffffffda RBX: 00007efee5a25fa0 RCX: 00007efee579de59
[  416.096134][T11624] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003
[  416.104103][T11624] RBP: 00007efee66e2090 R08: 0000000000000000 R09: 0000000000000000
[  416.112067][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.120034][T11624] R13: 00007efee5a26038 R14: 00007efee5a25fa0 R15: 00007fffd5de03e8
[  416.128018][T11624]  </TASK>
[  416.261196][T11628] netlink: 'syz.2.2076': attribute type 10 has an invalid length.
[  416.282331][T11626] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2075'.
[  416.292908][T11626] netlink: 'syz.0.2075': attribute type 1 has an invalid length.
[  416.305752][T11626] netlink: 21820 bytes leftover after parsing attributes in process `syz.0.2075'.
[  416.359839][T11626] netlink: 'syz.0.2075': attribute type 19 has an invalid length.
[  416.393111][T11626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2075'.
[  416.577558][T11631] netlink: 'syz.2.2077': attribute type 21 has an invalid length.
[  417.037247][T11651] netlink: 'syz.3.2085': attribute type 1 has an invalid length.
[  417.045255][T11650] netlink: 'syz.3.2085': attribute type 1 has an invalid length.
[  417.053026][T11650] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2085'.
[  417.053345][T11651] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2085'.
[  417.091031][T11653] netlink: 'syz.1.2086': attribute type 10 has an invalid length.
[  417.194861][T11657] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2088'.
[  417.529648][T11671] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  417.545371][T11671] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  417.568876][T11672] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2094'.
[  418.035652][T11682] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2098'.
[  418.152896][T11684] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2100'.
[  419.367535][T11705] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2106'.
[  419.628530][T11709] syzkaller0: entered promiscuous mode
[  419.636388][T11709] syzkaller0: entered allmulticast mode
[  421.943398][T11723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2115'.
[  422.123805][T11727] netlink: 'syz.2.2118': attribute type 10 has an invalid length.
[  422.141995][T11727] wg1: entered promiscuous mode
[  422.149804][T11727] wg1: entered allmulticast mode
[  422.158269][T11727] team0: Device wg1 is of different type
[  422.248575][T11731] netlink: 'syz.1.2117': attribute type 29 has an invalid length.
[  422.279485][T11731] netlink: 'syz.1.2117': attribute type 29 has an invalid length.
[  422.343076][T11729] netlink: 'syz.1.2117': attribute type 29 has an invalid length.
[  422.361638][T11729] netlink: 'syz.1.2117': attribute type 29 has an invalid length.
[  422.476863][T11741] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.2121'.
[  422.979352][T11756] netlink: 'syz.1.2127': attribute type 10 has an invalid length.
[  423.023116][T11756] team0: Device vxcan1 is of different type
[  423.459882][T11780] netlink: 'syz.3.2135': attribute type 21 has an invalid length.
[  423.477456][T11780] netlink: 'syz.3.2135': attribute type 6 has an invalid length.
[  423.493992][T11780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2135'.
[  423.728150][T11787] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2137'.
[  424.108405][T11804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  424.210611][T11806] raw_sendmsg: syz.0.2145 forgot to set AF_INET. Fix it!
[  424.786778][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'.
[  425.065060][T11835] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2155'.
[  425.528337][T11848] netlink: 'syz.2.2160': attribute type 10 has an invalid length.
[  425.577764][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2160'.
[  426.086776][T11858] delete_channel: no stack
[  426.700408][T11870] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2170'.
[  430.850620][T11919] netlink: 'syz.0.2185': attribute type 21 has an invalid length.
[  430.868620][T11919] netlink: 'syz.0.2185': attribute type 6 has an invalid length.
[  430.937485][T11919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2185'.
[  431.188236][T11923] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2186'.
[  431.523025][T11944] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2194'.
[  431.591435][T11944] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  431.617940][T11944] CPU: 1 PID: 11944 Comm: syz.2.2194 Not tainted syzkaller #0
[  431.625756][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  431.635852][T11944] Call Trace:
[  431.639258][T11944]  <TASK>
[  431.642351][T11944]  dump_stack_lvl+0x18c/0x250
[  431.647085][T11944]  ? show_regs_print_info+0x20/0x20
[  431.652338][T11944]  ? load_image+0x420/0x420
[  431.656906][T11944]  sysfs_warn_dup+0x8e/0xa0
[  431.661459][T11944]  sysfs_do_create_link_sd+0xc0/0x110
[  431.666884][T11944]  device_add_class_symlinks+0x1cf/0x240
[  431.672569][T11944]  device_add+0x4f9/0xc40
[  431.676962][T11944]  wiphy_register+0x1d99/0x2ac0
[  431.681849][T11944]  ? cfg80211_event_work+0x40/0x40
[  431.687160][T11944]  ? minstrel_ht_alloc+0x88a/0x990
[  431.692406][T11944]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  431.698528][T11944]  ieee80211_register_hw+0x2dd8/0x3b30
[  431.704151][T11944]  ? ieee80211_register_hw+0xef1/0x3b30
[  431.709794][T11944]  ? ieee80211_tasklet_handler+0x20/0x20
[  431.715686][T11944]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  431.721685][T11944]  ? __debug_object_init+0xec/0x450
[  431.726907][T11944]  ? __asan_memset+0x22/0x40
[  431.731513][T11944]  ? __hrtimer_init+0x189/0x270
[  431.736389][T11944]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  431.742138][T11944]  ? mac80211_hwsim_free+0x220/0x220
[  431.747521][T11944]  ? rcu_is_watching+0x15/0xb0
[  431.752297][T11944]  ? kstrndup+0xbd/0x140
[  431.756589][T11944]  hwsim_new_radio_nl+0xdad/0x1a70
[  431.761723][T11944]  ? __nla_validate+0x50/0x50
[  431.766416][T11944]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  431.773198][T11944]  ? __nla_parse+0x40/0x50
[  431.777627][T11944]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  431.783960][T11944]  genl_family_rcv_msg_doit+0x21a/0x310
[  431.789526][T11944]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  431.795440][T11944]  ? bpf_lsm_capable+0x9/0x10
[  431.800123][T11944]  ? security_capable+0x89/0xb0
[  431.804978][T11944]  genl_rcv_msg+0x611/0x7a0
[  431.809503][T11944]  ? genl_bind+0x360/0x360
[  431.814021][T11944]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  431.820362][T11944]  ? ref_tracker_free+0x686/0x830
[  431.825402][T11944]  ? __kasan_kmalloc_large+0x8b/0xa0
[  431.830702][T11944]  netlink_rcv_skb+0x235/0x4c0
[  431.835480][T11944]  ? genl_bind+0x360/0x360
[  431.839927][T11944]  ? netlink_ack+0x1160/0x1160
[  431.844719][T11944]  ? __lock_acquire+0x7d80/0x7d80
[  431.849755][T11944]  ? down_read+0x1ac/0x2e0
[  431.854175][T11944]  genl_rcv+0x28/0x40
[  431.858162][T11944]  netlink_unicast+0x7b1/0x930
[  431.862941][T11944]  netlink_sendmsg+0x8d0/0xbf0
[  431.867723][T11944]  ? netlink_getsockopt+0x590/0x590
[  431.872956][T11944]  ? apparmor_socket_sendmsg+0x8e/0x330
[  431.878614][T11944]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  431.883912][T11944]  ? security_socket_sendmsg+0x80/0xa0
[  431.889384][T11944]  ? netlink_getsockopt+0x590/0x590
[  431.894682][T11944]  ____sys_sendmsg+0x61b/0x980
[  431.899463][T11944]  ? __asan_memset+0x22/0x40
[  431.904240][T11944]  ? __sys_sendmsg_sock+0x30/0x30
[  431.909274][T11944]  ? __import_iovec+0x5f2/0x850
[  431.914139][T11944]  ? import_iovec+0x73/0xa0
[  431.918735][T11944]  ___sys_sendmsg+0x2a6/0x360
[  431.923427][T11944]  ? __sys_sendmsg+0x2b0/0x2b0
[  431.928413][T11944]  __se_sys_sendmsg+0x1d0/0x2c0
[  431.933271][T11944]  ? __x64_sys_sendmsg+0x80/0x80
[  431.938244][T11944]  ? lockdep_hardirqs_on+0x98/0x150
[  431.943453][T11944]  do_syscall_64+0x55/0xb0
[  431.947882][T11944]  ? clear_bhb_loop+0x40/0x90
[  431.952559][T11944]  ? clear_bhb_loop+0x40/0x90
[  431.957238][T11944]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.963280][T11944] RIP: 0033:0x7f6ebe19de59
[  431.967717][T11944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.988067][T11944] RSP: 002b:00007f6ebefe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.996611][T11944] RAX: ffffffffffffffda RBX: 00007f6ebe425fa0 RCX: 00007f6ebe19de59
[  432.004695][T11944] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  432.013031][T11944] RBP: 00007f6ebe233e6f R08: 0000000000000000 R09: 0000000000000000
[  432.021095][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.029071][T11944] R13: 00007f6ebe426038 R14: 00007f6ebe425fa0 R15: 00007ffdd9f52b58
[  432.037069][T11944]  </TASK>
[  433.185798][T11984] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2206'.
[  433.862700][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  433.874001][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  433.882961][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  433.891599][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  433.913749][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  433.921327][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  434.216702][T11996] netlink: 'syz.1.2211': attribute type 33 has an invalid length.
[  434.226677][T11996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2211'.
[  434.519466][ T2933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.572421][T11991] chnl_net:caif_netlink_parms(): no params data found
[  434.719665][ T2933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.752035][T12010] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2213'.
[  434.967251][ T2933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.025843][ T5785] Bluetooth: hci2: command tx timeout
[  436.817291][T12013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  436.859318][T12010] netlink: 'syz.1.2213': attribute type 4 has an invalid length.
[  436.873283][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'.
[  436.936741][ T2933] .`: (slave netdevsim0): Releasing backup interface
[  436.959891][ T2933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.118193][T11991] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.135886][T11991] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.154500][T11991] bridge_slave_0: entered allmulticast mode
[  437.193719][T11991] bridge_slave_0: entered promiscuous mode
[  437.214832][T12022] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2218'.
[  437.317706][T12028] netlink: set zone limit has 8 unknown bytes
[  437.334526][T11991] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.346563][T11991] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.364251][T11991] bridge_slave_1: entered allmulticast mode
[  437.377664][T11991] bridge_slave_1: entered promiscuous mode
[  437.559996][T11991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.591370][T11991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.748591][T11991] team0: Port device team_slave_0 added
[  437.826335][T11991] team0: Port device team_slave_1 added
[  438.103795][ T5785] Bluetooth: hci2: command tx timeout
[  438.386423][T11991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.417618][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.497590][T11991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.704310][T11991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.725729][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.821079][T11991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.667051][T12083] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2232'.
[  439.719100][T12085] syzkaller0: entered promiscuous mode
[  439.724759][T12085] syzkaller0: entered allmulticast mode
[  439.773447][T11991] hsr_slave_0: entered promiscuous mode
[  439.784438][T11991] hsr_slave_1: entered promiscuous mode
[  439.791052][T11991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  439.806943][T11991] Cannot create hsr debugfs directory
[  440.183659][ T5785] Bluetooth: hci2: command tx timeout
[  440.283111][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.293048][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  442.265915][ T5785] Bluetooth: hci2: command tx timeout
[  446.210382][T12125] syzkaller0: entered promiscuous mode
[  446.216229][T12125] syzkaller0: entered allmulticast mode
[  448.002627][T12148] netlink: 'syz.3.2243': attribute type 10 has an invalid length.
[  448.244536][T11991] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  448.262144][T12151] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2244'.
[  448.275526][T11991] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  448.298659][T11991] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  448.363118][ T2933] hsr_slave_0: left promiscuous mode
[  448.399669][ T2933] hsr_slave_1: left promiscuous mode
[  448.408662][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.419909][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.441568][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.458120][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.773626][ T2933] geneve1 (unregistering): left promiscuous mode
[  448.780184][ T2933] geneve1 (unregistering): left allmulticast mode
[  448.796304][ T2933] team0 (unregistering): Port device geneve1 removed
[  449.292401][ T2933] team_slave_1 (unregistering): left promiscuous mode
[  449.303463][ T2933] team_slave_1 (unregistering): left allmulticast mode
[  449.317441][ T2933] team0 (unregistering): Port device team_slave_1 removed
[  449.361533][ T2933] C (unregistering): left promiscuous mode
[  449.368579][ T2933] C (unregistering): left allmulticast mode
[  449.376568][ T2933] team0 (unregistering): Port device C removed
[  449.420732][ T2933] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.885449][ T2933] .` (unregistering): Released all slaves
[  449.929891][T11991] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  449.943147][T12160] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2246'.
[  449.980285][T12178] netlink: 'syz.1.2253': attribute type 10 has an invalid length.
[  450.301025][T11991] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.382884][T11991] 8021q: adding VLAN 0 to HW filter on device team0
[  450.424349][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.431856][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.515434][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.522665][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.643222][T11991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.398457][T11991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.535853][T11991] veth0_vlan: entered promiscuous mode
[  451.587482][T11991] veth1_vlan: entered promiscuous mode
[  451.632085][T12221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.673406][T12221] netlink: 'syz.3.2262': attribute type 9 has an invalid length.
[  451.695818][T12221] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2262'.
[  451.890062][T11991] veth0_macvtap: entered promiscuous mode
[  451.918301][T11991] veth1_macvtap: entered promiscuous mode
[  452.044149][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.051332][T12226] netlink: 'syz.3.2262': attribute type 9 has an invalid length.
[  452.064199][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.088269][T11991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.097988][T12226] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2262'.
[  452.129392][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.162431][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.168466][T12234] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2265'.
[  452.197561][T11991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.231920][T11991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.249960][T11991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.273742][T11991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.282514][T11991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.258303][T10642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.304871][T10642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.500617][T10642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.543753][T10642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.586576][T12277] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2272'.
[  453.704102][T12284] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2274'.
[  455.836504][T12332] bridge_slave_1: left allmulticast mode
[  455.842318][T12332] bridge_slave_1: left promiscuous mode
[  455.867023][T12332] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.908867][T12332] bridge_slave_0: left allmulticast mode
[  455.917097][T12332] bridge_slave_0: left promiscuous mode
[  455.923252][T12332] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.297376][T12349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2284'.
[  456.502933][T12358] netlink: 'syz.3.2287': attribute type 10 has an invalid length.
[  457.287605][T12358] team0: Device wg1 is of different type
[  458.233236][T12383] netlink: 'syz.2.2296': attribute type 10 has an invalid length.
[  458.313951][T12383] team0: Port device netdevsim0 added
[  458.490720][T12395] netlink: 'syz.1.2300': attribute type 23 has an invalid length.
[  458.508583][T12393] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2297'.
[  459.630459][    C1] 
[  459.630468][    C1] ================================
[  459.630473][    C1] WARNING: inconsistent lock state
[  459.630492][    C1] syzkaller #0 Not tainted
[  459.630502][    C1] --------------------------------
[  459.630507][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  459.630514][    C1] syz.3.2308/12414 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  459.630533][    C1] ffff88801da6bba0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  459.630587][    C1] {INITIAL USE} state was registered at:
[  459.630593][    C1]   lock_acquire+0x19e/0x420
[  459.630611][    C1]   _raw_spin_lock+0x2e/0x40
[  459.630630][    C1]   htab_lock_bucket+0x17d/0x300
[  459.630645][    C1]   htab_lru_map_update_elem+0x2be/0x990
[  459.630660][    C1]   bpf_map_update_value+0x64b/0x710
[  459.630673][    C1]   map_update_elem+0x586/0x710
[  459.630688][    C1]   __sys_bpf+0x6b5/0x890
[  459.630701][    C1]   __x64_sys_bpf+0x7c/0x90
[  459.630714][    C1]   do_syscall_64+0x55/0xb0
[  459.630735][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  459.630762][    C1] irq event stamp: 4688
[  459.630768][    C1] hardirqs last  enabled at (4687): [<ffffffff81aeba76>] perf_swevent_event+0x476/0x570
[  459.630792][    C1] hardirqs last disabled at (4688): [<ffffffff8a8b9673>] exc_debug+0x73/0x140
[  459.630810][    C1] softirqs last  enabled at (4406): [<ffffffff81525883>] __irq_exit_rcu+0xd3/0x190
[  459.630830][    C1] softirqs last disabled at (4213): [<ffffffff81525883>] __irq_exit_rcu+0xd3/0x190
[  459.630848][    C1] 
[  459.630848][    C1] other info that might help us debug this:
[  459.630853][    C1]  Possible unsafe locking scenario:
[  459.630853][    C1] 
[  459.630856][    C1]        CPU0
[  459.630859][    C1]        ----
[  459.630862][    C1]   lock(&htab->lockdep_key);
[  459.630872][    C1]   <Interrupt>
[  459.630875][    C1]     lock(&htab->lockdep_key);
[  459.630885][    C1] 
[  459.630885][    C1]  *** DEADLOCK ***
[  459.630885][    C1] 
[  459.630889][    C1] no locks held by syz.3.2308/12414.
[  459.630896][    C1] 
[  459.630896][    C1] stack backtrace:
[  459.630901][    C1] CPU: 1 PID: 12414 Comm: syz.3.2308 Not tainted syzkaller #0
[  459.630917][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  459.630926][    C1] Call Trace:
[  459.630932][    C1]  <#DB>
[  459.630944][    C1]  dump_stack_lvl+0x18c/0x250
[  459.630986][    C1]  ? show_regs_print_info+0x20/0x20
[  459.631042][    C1]  ? print_usage_bug+0x43d/0x6a0
[  459.631068][    C1]  ? verify_lock_unused+0x15/0x140
[  459.631105][    C1]  lock_acquire+0x2c2/0x420
[  459.631145][    C1]  ? htab_lock_bucket+0x17d/0x300
[  459.631184][    C1]  ? read_lock_is_recursive+0x20/0x20
[  459.631263][    C1]  _raw_spin_lock+0x2e/0x40
[  459.631283][    C1]  ? htab_lock_bucket+0x17d/0x300
[  459.631302][    C1]  htab_lock_bucket+0x17d/0x300
[  459.631337][    C1]  ? htab_lru_map_delete_node+0x770/0x770
[  459.631360][    C1]  ? look_up_lock_class+0x75/0x140
[  459.631391][    C1]  ? verify_lock_unused+0x15/0x140
[  459.631420][    C1]  ? jhash+0x34e/0x740
[  459.631453][    C1]  htab_lru_map_delete_elem+0x19f/0x640
[  459.631500][    C1]  ? htab_lru_map_update_elem+0x990/0x990
[  459.631525][    C1]  ? perf_callchain+0x220/0x220
[  459.631579][    C1]  bpf_prog_69bf374aa003a95d+0x46/0x4a
[  459.631612][    C1]  bpf_overflow_handler+0x1fc/0x510
[  459.631653][    C1]  ? bpf_overflow_handler+0xde/0x510
[  459.631679][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  459.631736][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  459.631772][    C1]  __perf_event_overflow+0x461/0x660
[  459.631822][    C1]  perf_swevent_event+0x319/0x570
[  459.631857][    C1]  ? perf_tp_event+0x1550/0x1550
[  459.631875][    C1]  ? perf_trace_lock_acquire+0x1a7/0x400
[  459.631951][    C1]  perf_bp_event+0x319/0x430
[  459.631998][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  459.632142][    C1]  ? lock_acquire+0x2c2/0x420
[  459.632206][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  459.632253][    C1]  notifier_call_chain+0x18f/0x380
[  459.632289][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  459.632323][    C1]  atomic_notifier_call_chain+0xda/0x180
[  459.632357][    C1]  notify_die+0x145/0x1a0
[  459.632393][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  459.632449][    C1]  ? rcu_is_watching+0x15/0xb0
[  459.632487][    C1]  notify_debug+0x2e/0x50
[  459.632539][    C1]  exc_debug+0xde/0x140
[  459.632573][    C1]  asm_exc_debug+0x1e/0x40
[  459.632595][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  459.632614][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  459.632628][    C1] RSP: 0018:ffffc90004fe7c08 EFLAGS: 00050202
[  459.632642][    C1] RAX: ffffffff84312701 RBX: 00000000000002d1 RCX: 0000000000000081
[  459.632653][    C1] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffff88805fb35290
[  459.632664][    C1] RBP: 00002000000000c0 R08: ffff88805fb35310 R09: 1ffff1100bf66a62
[  459.632676][    C1] R10: dffffc0000000000 R11: ffffed100bf66a63 R12: 0000200000000391
[  459.632687][    C1] R13: 00000000000002d1 R14: ffff88805fb35040 R15: 00002000000000c0
[  459.632728][    C1]  ? _copy_from_user+0x51/0xe0
[  459.632773][    C1]  </#DB>
[  459.632778][    C1]  <TASK>
[  459.632783][    C1]  _copy_from_user+0x8b/0xe0
[  459.632811][    C1]  bpf_prog_test_run_skb+0x267/0x18f0
[  459.632847][    C1]  ? __fget_files+0x28/0x460
[  459.632876][    C1]  ? __fget_files+0x3fc/0x460
[  459.632945][    C1]  ? cpu_online+0x60/0x60
[  459.632971][    C1]  bpf_prog_test_run+0x31f/0x390
[  459.633006][    C1]  __sys_bpf+0x49d/0x890
[  459.633039][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  459.633122][    C1]  ? lock_chain_count+0x20/0x20
[  459.633189][    C1]  __x64_sys_bpf+0x7c/0x90
[  459.633216][    C1]  do_syscall_64+0x55/0xb0
[  459.633237][    C1]  ? clear_bhb_loop+0x40/0x90
[  459.633251][    C1]  ? clear_bhb_loop+0x40/0x90
[  459.633278][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  459.633300][    C1] RIP: 0033:0x7fba1719de59
[  459.633319][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.633350][    C1] RSP: 002b:00007fba18024028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
SYZFAIL: failed to send rpc
fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe)
[  459.633366][    C1] RAX: ffffffffffffffda RBX: 00007fba17425fa0 RCX: 00007fba1719de59
[  459.633377][    C1] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  459.633387][    C1] RBP: 00007fba17233e6f R08: 0000000000000000 R09: 0000000000000000
[  459.633397][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.633405][    C1] R13: 00007fba17426038 R14: 00007fba17425fa0 R15: 00007ffc5e7e97f8
[  459.633477][    C1]  </TASK>
[  461.867868][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.941478][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.033377][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.100312][   T59] team0: Port device netdevsim0 removed
[  462.107616][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.202266][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.251253][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.290455][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.349336][   T59] .`: (slave netdevsim0): Releasing backup interface
[  462.358397][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.572087][   T59] ip6gretap0 (unregistering): left allmulticast mode
[  462.579528][   T59] ip6gretap0 (unregistering): left promiscuous mode
[  462.587201][   T59] : port 1(ip6gretap0) entered disabled state
[  463.728167][   T59] team0: Port device wlan1 removed
[  464.365069][   T59] team0: Port device wlan1 removed
[  464.490442][   T59] hsr_slave_0: left promiscuous mode
[  464.497578][   T59] hsr_slave_1: left promiscuous mode
[  464.506022][   T59] hsr_slave_0: left promiscuous mode
[  464.512307][   T59] hsr_slave_1: left promiscuous mode
[  464.518513][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.526029][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.533669][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.541076][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.550029][   T59] hsr_slave_0: left promiscuous mode
[  464.555828][   T59] hsr_slave_1: left promiscuous mode
[  464.561471][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.568927][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.576652][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.585858][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.593498][   T59] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  464.600648][   T59] batman_adv: batadv0: Removing interface: veth0_vlan
[  464.610896][   T59] veth1_vlan: left promiscuous mode
[  464.616276][   T59] veth0_vlan: left promiscuous mode
[  464.622134][   T59] veth1_macvtap: left promiscuous mode
[  464.627805][   T59] veth0_macvtap: left promiscuous mode
[  464.633449][   T59] veth1_vlan: left promiscuous mode
[  464.639502][   T59] veth0_vlan: left promiscuous mode
[  464.645537][   T59] veth1_vlan: left promiscuous mode
[  464.650797][   T59] veth0_vlan: left promiscuous mode
[  464.821859][   T59] team0 (unregistering): Port device geneve1 removed
[  464.934079][   T59] team0 (unregistering): Port device team_slave_1 removed
[  464.959584][   T59] team0 (unregistering): Port device C removed
[  464.987096][   T59] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.013292][   T59] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.083998][   T59] .` (unregistering): (slave team0): Releasing backup interface
[  465.112565][   T59] .` (unregistering): Released all slaves
[  465.212557][   T59] team0 (unregistering): Port device team_slave_1 removed
[  465.243461][   T59] team0 (unregistering): Port device team_slave_0 removed
[  465.270949][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.298830][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.347011][   T59] bond0 (unregistering): Released all slaves
[  465.382665][   T59] team0 (unregistering): Port device geneve1 removed
[  465.474090][ T5762] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  465.499541][   T59] team0 (unregistering): Port device team_slave_1 removed
[  465.510963][   T59] team0 (unregistering): Port device C removed
[  465.541181][   T59] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.659741][   T59] .` (unregistering): Released all slaves
[  466.369846][   T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.418497][   T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.471281][   T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.535057][   T59] .`: (slave netdevsim0): Releasing backup interface
[  466.542639][   T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.514967][   T59] hsr_slave_0: left promiscuous mode
[  467.521626][   T59] hsr_slave_1: left promiscuous mode
[  467.529324][   T59] veth1_vlan: left promiscuous mode
[  467.536226][   T59] veth0_vlan: left promiscuous mode
[  467.607427][   T59] team0 (unregistering): Port device geneve1 removed
[  467.737062][   T59] team0 (unregistering): Port device team_slave_1 removed
[  467.791024][   T59] .` (unregistering): (slave 
c
@0���): Releasing backup interface
[  467.895439][   T59] .` (unregistering): (slave team0): Releasing backup interface
[  467.922094][   T59] .` (unregistering): Released all slaves