last executing test programs:

5.805428017s ago: executing program 2 (id=18530):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={r0, &(0x7f0000000500), 0x0}, 0x20)

5.641989241s ago: executing program 2 (id=18535):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x13fff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xc070, 0x0, 0x0, 0x3, 0x7f, 0x1fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async, rerun: 32)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1898ef, 0xca, 0x2, 0x0, 0xf, 0x401000, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async, rerun: 64)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (rerun: 64)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20488, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES32=r3], 0x9a) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000200)}, 0x10)

5.516500235s ago: executing program 4 (id=18537):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03316845268cb89614f00800", 0x0, 0x6060, 0x60000060, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.020411647s ago: executing program 4 (id=18543):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)

4.916762139s ago: executing program 1 (id=18545):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x0, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit={0x95, 0x0, 0x21}], &(0x7f00000000c0)='GPL\x00'}, 0x78)

4.9005323s ago: executing program 4 (id=18546):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f065581bff88fbffff4000632f77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x300}, 0x2c)

4.888606519s ago: executing program 2 (id=18547):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r3}, 0x94)
perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0xa, 0x6, 0x1, 0xc, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x2021, 0x2db, 0x7, 0x6, 0x200000000000, 0x2, 0x1, 0x0, 0xb5ea, 0x0, 0x80}, r3, 0x4, 0xffffffffffffffff, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(r3)
socket$kcm(0x1e, 0x4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x800})
r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x9, r6, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x1, 0x8, 0x84, 0x0, 0xfffffffffffffff9, 0x4000, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfff, 0x4000}, 0x808, 0x3ff, 0x3, 0x1, 0x100, 0x7, 0x7, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast})
socket$kcm(0x29, 0x2, 0x0)

4.771534743s ago: executing program 0 (id=18548):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff020000000000bfffffff01ffaaaaaa"], 0xfdef)

4.764857462s ago: executing program 1 (id=18549):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791", 0x69}, {&(0x7f0000000240)="54f6d4d87eb3f140c57ef85e5c797ead9c0983f5b458fc0a37df3849f5afe7c1f6cf21ccf78bd59324607a92475593b8b60f319d0c28b9070683764d7f1fd5b97245a5c88c3ef216f1054fa4ca6e8dda6c9e5a9aabbf1abf319bce020cddc4e18efa804ed7192e081e891cb8c0b95e", 0x6f}], 0x2, 0x0, 0xf0ff, 0x7400}, 0x10)

4.527444049s ago: executing program 0 (id=18550):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x8)
close(r0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
syz_clone(0xa43c7506, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x24, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)

4.320523184s ago: executing program 4 (id=18551):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x22, 0x0, &(0x7f0000000800)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400005000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x10}, 0x8080)

4.257466935s ago: executing program 1 (id=18552):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.800483726s ago: executing program 3 (id=18553):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000004119b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="67e4dd9eeba3271dc700b581440284", 0xfd03}], 0x4}, 0x0)

3.678607s ago: executing program 1 (id=18554):
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0xe2a0a06278963d97)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000004000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x8065, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00200000db5b686158bbcfe8875a06030000112300000000000000000000000000000001"], 0xfdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0x10, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x73)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x541b, &(0x7f0000000240))

1.721964988s ago: executing program 0 (id=18555):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x4c000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

970.400686ms ago: executing program 1 (id=18556):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\xfd\x82q\xee'}, 0x30)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x6, 0x85, 0x0, 0x0, 0x7602, 0x0, 0x6d41000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x3400, 0xfa99, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9)

954.558607ms ago: executing program 4 (id=18557):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext={0x81, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x3) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext={0x81, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=@base={0x5, 0x4, 0xc, 0xc}, 0x50)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x800}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) (async)
write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d020000000000000002bf000000020200000000009b0b974087f7ddf4f58224cad30ddf25c115b34c1f95f6a3799dd45724d4fac65ae676aa9f770a2d6e3b78e0696439328c3588732bec671f1daae2b862ad0766b5a70cbff329513ee0f1b0f784ab707a6a6816a1f64a0c61e0aa1a5fc5bc9dc293ee3d5b7f9e269e3bdec490f6ca95b59d4185d98d8386348c823da153280f53ea12d0a5393ad8008bae9ad5"], &(0x7f0000000200)=""/217, 0x32, 0xd9, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="04000000040000000400000005000100000000005c15afb72bc5f98869e2e78086df1c3679ccbef545646548bcc387ab4a520ffca5183061600274bfe87b1b806fc288ec1ff33e85ed57e60e9eb49c67bf2fe2a3ef8edc0f5458b4108af7a02fb4272d6b292a2567841c1bd79c6a7d0109dc7afa2cb80ab79ee7ce49d2aefeb9e963", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0400000003000000e60000008500000041000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000004efd28a29b65672d5731923ad01f1487d00ec08fa000b7b2eded1fe735906e08afee6975e7a6a4a20fa0dc311f63dc3bd5c07413c20b"], 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0400000003000000e60000008500000041000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000004efd28a29b65672d5731923ad01f1487d00ec08fa000b7b2eded1fe735906e08afee6975e7a6a4a20fa0dc311f63dc3bd5c07413c20b"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38)
openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async)
openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
openat$cgroup_int(r4, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0)

884.290398ms ago: executing program 3 (id=18558):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x400001, 0x80000000}, 0x0, 0xffffffffffffffff, r0, 0xb)

719.390632ms ago: executing program 1 (id=18559):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0xe, 0x9, 0xfffffff9, 0x220, r0, 0x5, '\x00', r1, r2, 0x1, 0x1, 0x2}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0x3)
r5 = socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r2, 0x20, &(0x7f0000000980)={&(0x7f0000000540)=""/178, 0xb2, 0x0, &(0x7f0000000840)=""/230, 0xe6}}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff91}, 0x20000001)
close(0x3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r0, &(0x7f0000000600)="b366315a10beba06229df0b7882fbe106f1edaec8453443616ba4792d951438d68e9da766b99c70a4c65ae1928340b8ce0fec012b3"}, 0x20)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0)

707.143642ms ago: executing program 3 (id=18560):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8"], 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffa894792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff1eec72b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000080000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6e33ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b2724b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c4c314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829be1827f9df303160df18597efba46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406200b3b1c321cc158dbe17123eace3000000000000000000000000000000000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b675639a26c76840cce40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba474eeaf083ca429689da94ea26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5e25cca4db93ea65175973de08f0b4a4dfc90314466b2b94de855c26187581ad809dd2791a0b27ed668ce5357f8a0ce583b26758cbd271e842e7ba84f749d86818435ec52017ed5a927aa27640aff407e0cc59b19ab334e306852008ec8ddcb400da98432dcb6e2373a926024d6df726b4e0d4b07257cb778b9d445663e5bb3490494397bc6b402afc6ad4fdab3a1cc363cc8c7285adbe90de4874f5d886160e173be8c7e7a8f00451202d4ed03a2ae77a8428a67"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18464584851ead9954711dc8395f62ad321ee90000000200040000535c343e0000e23791e6006100000085cb29576d130f28cc6f291e165f0491d5593e0e6c9e767ff76bca74db8e4b8e7eb973fee81969"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r6=>0x0, <r7=>0x0})
close(r6)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127)
close(r7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

642.350744ms ago: executing program 2 (id=18561):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003421000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20)

560.417736ms ago: executing program 0 (id=18562):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000001406ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000)

472.650308ms ago: executing program 2 (id=18563):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r1 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x28, 0x3c, 0x0, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0xa}, 0x40012100) (async)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)

396.7149ms ago: executing program 3 (id=18564):
socket$kcm(0xa, 0x5, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x9, 0x12)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x2004, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7001800000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

396.32723ms ago: executing program 4 (id=18565):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x6, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4088, 0xff8}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000a00053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="090000000400000100000000ff", @ANYRES8=0x0], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, r2}, @generic={0x66, 0x8}, @ldst={0x1, 0x3, 0x6, 0x0, 0x4, 0xc, 0x10}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r5}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00"/49], 0xfdef)

342.281502ms ago: executing program 0 (id=18566):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x3}, 0x2040, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x86a90000, @remote, 0x5, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0xffd1}], 0x1}, 0xc9)

283.754873ms ago: executing program 3 (id=18567):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRES32, @ANYRESOCT, @ANYRES16=r0, @ANYRES8=r0, @ANYRES16=r0], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000060, 0x0, 0x0, 0x0, 0x0}, 0x50)

45.052309ms ago: executing program 2 (id=18568):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x3, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000080000004000000003000000410000", @ANYRES32=0x0], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
socket$kcm(0x2, 0x3, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000000000500000000070000"], 0x30}, 0x7e8166965e22236a)

44.257389ms ago: executing program 3 (id=18569):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100420, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3300}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f00000002c0)="00000095", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x50)

0s ago: executing program 0 (id=18570):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r0, &(0x7f0000003a00)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0xe, 0x2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)="3793a58c4b", 0x5}], 0x1}, 0x2004050)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a1bc000f000200142603600e12080005007f3704d373000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d1684683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x14040894)

kernel console output (not intermixed with test programs):

56]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2743.129575][T25156]  ? lock_chain_count+0x20/0x20
[ 2743.134456][T25156]  do_group_exit+0x229/0x2e0
[ 2743.139069][T25156]  ? lockdep_hardirqs_on+0x94/0x140
[ 2743.144300][T25156]  get_signal+0x1259/0x1340
[ 2743.148890][T25156]  arch_do_signal_or_restart+0xc4/0x1310
[ 2743.154557][T25156]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 2743.160489][T25156]  ? xdp_convert_buff_to_md+0x200/0x200
[ 2743.166072][T25156]  ? get_sigframe_size+0x10/0x10
[ 2743.171033][T25156]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 2743.176885][T25156]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2743.182372][T25156]  exit_to_user_mode_loop+0x70/0x110
[ 2743.187687][T25156]  exit_to_user_mode_prepare+0xee/0x180
[ 2743.193260][T25156]  syscall_exit_to_user_mode+0x16/0x40
[ 2743.198736][T25156]  do_syscall_64+0x58/0xa0
[ 2743.203195][T25156]  ? clear_bhb_loop+0x60/0xb0
[ 2743.207887][T25156]  ? clear_bhb_loop+0x60/0xb0
[ 2743.212584][T25156]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2743.218490][T25156] RIP: 0033:0x7f894319e199
[ 2743.222927][T25156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2743.242550][T25156] RSP: 002b:00007f8944080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2743.250982][T25156] RAX: fffffffffffffffc RBX: 00007f8943425fa0 RCX: 00007f894319e199
[ 2743.258968][T25156] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a
[ 2743.266950][T25156] RBP: 00007f8944080090 R08: 0000000000000000 R09: 0000000000000000
[ 2743.274933][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2743.282914][T25156] R13: 00007f8943426038 R14: 00007f8943425fa0 R15: 00007fff9ede8298
[ 2743.290911][T25156]  </TASK>
[ 2743.580600][T25175] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17010'.
[ 2743.610974][T25175] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2743.667186][T25175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2744.391806][T25188] netlink: 'syz.3.17012': attribute type 3 has an invalid length.
[ 2744.414537][T25188] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17012'.
[ 2744.460717][T25172] delete_channel: no stack
[ 2745.169462][T25200] netlink: 'syz.2.17015': attribute type 27 has an invalid length.
[ 2745.210124][T25200] netlink: 'syz.2.17015': attribute type 3 has an invalid length.
[ 2745.348656][T25197] netlink: 'syz.1.17024': attribute type 39 has an invalid length.
[ 2748.867547][T25240] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17029'.
[ 2748.886501][T25237] netlink: 'syz.1.17026': attribute type 10 has an invalid length.
[ 2748.966593][T25244] netlink: 'syz.3.17028': attribute type 3 has an invalid length.
[ 2748.983884][T25244] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17028'.
[ 2749.010400][T25240] netlink: 'syz.2.17029': attribute type 10 has an invalid length.
[ 2749.355816][T25257] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.17032'.
[ 2750.001792][T25303] netlink: 'syz.3.17036': attribute type 29 has an invalid length.
[ 2750.037852][T25303] netlink: 'syz.3.17036': attribute type 29 has an invalid length.
[ 2750.081144][T25303] netlink: 'syz.3.17036': attribute type 29 has an invalid length.
[ 2750.277547][T25315] netlink: 'syz.0.17040': attribute type 27 has an invalid length.
[ 2750.319578][T25315] netlink: 'syz.0.17040': attribute type 3 has an invalid length.
[ 2750.902423][T25327] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.17044'.
[ 2750.981087][T25327] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 2751.019987][T25327] CPU: 0 PID: 25327 Comm: syz.4.17044 Not tainted syzkaller #0
[ 2751.027652][T25327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2751.037743][T25327] Call Trace:
[ 2751.041061][T25327]  <TASK>
[ 2751.044027][T25327]  dump_stack_lvl+0x188/0x24e
[ 2751.048770][T25327]  ? show_regs_print_info+0x12/0x12
[ 2751.054013][T25327]  ? load_image+0x410/0x410
[ 2751.058590][T25327]  sysfs_warn_dup+0x8a/0xa0
[ 2751.063175][T25327]  sysfs_do_create_link_sd+0xc0/0x110
[ 2751.068596][T25327]  device_add+0x83b/0x1050
[ 2751.073063][T25327]  wiphy_register+0x1d8b/0x2aa0
[ 2751.077970][T25327]  ? cfg80211_event_work+0x40/0x40
[ 2751.083121][T25327]  ? minstrel_ht_alloc+0x894/0xa20
[ 2751.088279][T25327]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2751.094393][T25327]  ieee80211_register_hw+0x2e33/0x3b00
[ 2751.099912][T25327]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2751.105498][T25327]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2751.111094][T25327]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2751.116794][T25327]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2751.122734][T25327]  ? __debug_object_init+0xed/0x440
[ 2751.127989][T25327]  ? memset+0x1e/0x40
[ 2751.132022][T25327]  ? __hrtimer_init+0x189/0x270
[ 2751.136937][T25327]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2751.142707][T25327]  ? memcpy+0x3c/0x60
[ 2751.146742][T25327]  hwsim_new_radio_nl+0xab7/0xc90
[ 2751.151823][T25327]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2751.157411][T25327]  ? end_current_label_crit_section+0x170/0x170
[ 2751.163718][T25327]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2751.169656][T25327]  ? bpf_lsm_capable+0x5/0x10
[ 2751.174367][T25327]  ? security_capable+0x85/0xb0
[ 2751.179265][T25327]  genl_rcv_msg+0x601/0x790
[ 2751.183820][T25327]  ? genl_bind+0x360/0x360
[ 2751.188301][T25327]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2751.194682][T25327]  netlink_rcv_skb+0x1ef/0x440
[ 2751.199491][T25327]  ? genl_bind+0x360/0x360
[ 2751.203947][T25327]  ? netlink_ack+0x1160/0x1160
[ 2751.208767][T25327]  ? down_read+0x1a8/0x2d0
[ 2751.213227][T25327]  genl_rcv+0x24/0x40
[ 2751.217247][T25327]  netlink_unicast+0x7ad/0x920
[ 2751.222062][T25327]  netlink_sendmsg+0x8ad/0xbd0
[ 2751.226895][T25327]  ? netlink_getsockopt+0x550/0x550
[ 2751.232143][T25327]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2751.237744][T25327]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2751.243081][T25327]  ? security_socket_sendmsg+0x7c/0xa0
[ 2751.248601][T25327]  ? netlink_getsockopt+0x550/0x550
[ 2751.253839][T25327]  ____sys_sendmsg+0x5ed/0x9a0
[ 2751.258661][T25327]  ? __sys_sendmsg_sock+0x30/0x30
[ 2751.263748][T25327]  ? __import_iovec+0x306/0x510
[ 2751.268673][T25327]  ? import_iovec+0x6f/0xa0
[ 2751.273224][T25327]  ___sys_sendmsg+0x2a2/0x360
[ 2751.277955][T25327]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2751.282824][T25327]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2751.287713][T25327]  ? ct_nmi_exit+0x145/0x1c0
[ 2751.292345][T25327]  ? __x64_sys_sendmsg+0x80/0x80
[ 2751.297337][T25327]  ? lockdep_hardirqs_on+0x94/0x140
[ 2751.302586][T25327]  do_syscall_64+0x4c/0xa0
[ 2751.307046][T25327]  ? clear_bhb_loop+0x60/0xb0
[ 2751.311786][T25327]  ? clear_bhb_loop+0x60/0xb0
[ 2751.316509][T25327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2751.322445][T25327] RIP: 0033:0x7f894319e199
[ 2751.326899][T25327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2751.346532][T25327] RSP: 002b:00007f894405f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2751.354984][T25327] RAX: ffffffffffffffda RBX: 00007f8943426090 RCX: 00007f894319e199
[ 2751.362991][T25327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2751.370998][T25327] RBP: 00007f89432350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2751.378999][T25327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2751.387000][T25327] R13: 00007f8943426128 R14: 00007f8943426090 R15: 00007fff9ede8298
[ 2751.395012][T25327]  </TASK>
[ 2751.411925][T25305] delete_channel: no stack
[ 2751.485563][T25326] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.17045'.
[ 2751.623993][T25336] netlink: 'syz.2.17046': attribute type 3 has an invalid length.
[ 2751.644810][T25336] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17046'.
[ 2752.041923][T25354] netlink: 186712 bytes leftover after parsing attributes in process `syz.4.17052'.
[ 2752.116638][T25354] netlink: zone id is out of range
[ 2752.125213][T25356] netlink: 'syz.3.17055': attribute type 29 has an invalid length.
[ 2752.133412][T25354] netlink: zone id is out of range
[ 2752.138562][T25354] netlink: zone id is out of range
[ 2752.144538][T25356] netlink: 'syz.3.17055': attribute type 29 has an invalid length.
[ 2752.164481][T25354] netlink: zone id is out of range
[ 2752.169706][T25354] netlink: zone id is out of range
[ 2752.192351][T25358] netlink: 'syz.1.17054': attribute type 10 has an invalid length.
[ 2752.199857][T25354] netlink: zone id is out of range
[ 2752.208261][T25356] netlink: 'syz.3.17055': attribute type 7 has an invalid length.
[ 2752.216492][T25354] netlink: zone id is out of range
[ 2752.222014][T25354] netlink: zone id is out of range
[ 2752.227325][T25358] netlink: 55 bytes leftover after parsing attributes in process `syz.1.17054'.
[ 2752.232411][T25354] netlink: zone id is out of range
[ 2752.239237][T25356] netlink: 'syz.3.17055': attribute type 7 has an invalid length.
[ 2752.254110][T25354] netlink: zone id is out of range
[ 2752.269336][T25356] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.17055'.
[ 2752.299850][T25359] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.17055'.
[ 2752.418027][T25365] netlink: 'syz.4.17058': attribute type 10 has an invalid length.
[ 2753.423660][T25390] netlink: 'syz.4.17066': attribute type 41 has an invalid length.
[ 2755.096863][T25431] __nla_validate_parse: 3 callbacks suppressed
[ 2755.096900][T25431] netlink: 168 bytes leftover after parsing attributes in process `syz.1.17083'.
[ 2755.625059][T25451] netlink: 10 bytes leftover after parsing attributes in process `syz.4.17091'.
[ 2756.164914][T25469] validate_nla: 3 callbacks suppressed
[ 2756.164932][T25469] netlink: 'syz.1.17095': attribute type 4 has an invalid length.
[ 2757.019639][T25481] netlink: 'syz.3.17099': attribute type 10 has an invalid length.
[ 2757.040996][T25481] netlink: 168 bytes leftover after parsing attributes in process `syz.3.17099'.
[ 2757.235518][T25495] netlink: 'syz.1.17112': attribute type 3 has an invalid length.
[ 2757.293909][T25495] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17112'.
[ 2757.419130][T25501] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.17106'.
[ 2757.675996][T25508] netlink: 'syz.3.17109': attribute type 10 has an invalid length.
[ 2757.946024][T25517] netlink: 'syz.0.17113': attribute type 10 has an invalid length.
[ 2757.982663][T25517] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17113'.
[ 2759.208740][T25537] delete_channel: no stack
[ 2759.561125][T25556] netlink: 'syz.4.17129': attribute type 3 has an invalid length.
[ 2759.658872][T25556] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17129'.
[ 2760.636026][T25594] netlink: 'syz.1.17140': attribute type 3 has an invalid length.
[ 2760.647685][T25585] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.17137'.
[ 2760.662904][T25594] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17140'.
[ 2760.843066][T25609] netlink: 'syz.1.17143': attribute type 10 has an invalid length.
[ 2760.875987][T25609] batman_adv: batadv0: Adding interface: netdevsim0
[ 2760.898323][T25609] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2760.972299][T25609] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[ 2760.995230][T25610] netlink: 'syz.1.17143': attribute type 10 has an invalid length.
[ 2761.015811][T25613] netlink: 'syz.1.17143': attribute type 13 has an invalid length.
[ 2761.029937][T25613] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17143'.
[ 2761.062575][T25611] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17143'.
[ 2761.502687][T25629] validate_nla: 3 callbacks suppressed
[ 2761.502704][T25629] netlink: 'syz.0.17148': attribute type 3 has an invalid length.
[ 2761.590950][T25629] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17148'.
[ 2761.625605][T25628] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2761.657502][T25628] netlink: 1 bytes leftover after parsing attributes in process `syz.1.17146'.
[ 2763.505203][T25681] netlink: 'syz.1.17165': attribute type 3 has an invalid length.
[ 2763.527365][T25681] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17165'.
[ 2763.707030][T25670] netlink: 'syz.0.17161': attribute type 16 has an invalid length.
[ 2763.742123][T25670] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17161'.
[ 2763.756691][T25677] netlink: 'syz.4.17163': attribute type 10 has an invalid length.
[ 2764.449081][T25703] netlink: 'syz.2.17174': attribute type 2 has an invalid length.
[ 2764.505176][T25703] netlink: 'syz.2.17174': attribute type 8 has an invalid length.
[ 2764.522801][T25703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17174'.
[ 2766.481326][T25723] netlink: 'syz.1.17181': attribute type 10 has an invalid length.
[ 2766.510141][T25725] netlink: 'syz.0.17180': attribute type 10 has an invalid length.
[ 2766.531374][T25729] netlink: 'syz.3.17182': attribute type 10 has an invalid length.
[ 2766.771296][T25742] netlink: 'syz.1.17185': attribute type 3 has an invalid length.
[ 2766.787595][T25742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17185'.
[ 2770.127909][T25776] delete_channel: no stack
[ 2770.402796][T25796] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.17208'.
[ 2770.420683][T25797] netlink: 'syz.3.17206': attribute type 3 has an invalid length.
[ 2770.439958][T25797] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17206'.
[ 2770.785691][T25807] delete_channel: no stack
[ 2771.943935][T25829] netlink: 140 bytes leftover after parsing attributes in process `syz.4.17217'.
[ 2772.371510][T25841] netlink: 91092 bytes leftover after parsing attributes in process `syz.4.17221'.
[ 2772.433688][T25848] netlink: 'syz.0.17223': attribute type 3 has an invalid length.
[ 2772.459584][T25848] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17223'.
[ 2772.513256][T25852] netlink: 'syz.2.17224': attribute type 3 has an invalid length.
[ 2772.529157][T25852] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17224'.
[ 2772.969707][T25868] netlink: 'syz.3.17230': attribute type 2 has an invalid length.
[ 2773.637882][T25872] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2773.779291][T25868] device 0 entered promiscuous mode
[ 2773.785030][T25873] netlink: 'syz.0.17229': attribute type 10 has an invalid length.
[ 2773.947609][T25881] netlink: 'syz.0.17233': attribute type 3 has an invalid length.
[ 2773.991168][T25882] netlink: 'syz.0.17233': attribute type 3 has an invalid length.
[ 2774.024573][T25881] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17233'.
[ 2774.080046][T25882] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17233'.
[ 2774.463172][T25905] netlink: 'syz.0.17241': attribute type 3 has an invalid length.
[ 2774.488503][T25905] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17241'.
[ 2774.768009][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2774.774393][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2775.154157][T25908] netlink: 'syz.2.17243': attribute type 10 has an invalid length.
[ 2775.176159][T25908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17243'.
[ 2775.220176][T25912] netlink: 'syz.4.17245': attribute type 4 has an invalid length.
[ 2775.387558][T25918] netlink: 830 bytes leftover after parsing attributes in process `syz.1.17246'.
[ 2775.536460][T18081] Bluetooth: hci1: Malformed HCI Event: 0x22
[ 2776.326959][T25923] delete_channel: no stack
[ 2776.413899][T25936] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.17253'.
[ 2776.439175][T25936] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 2776.489350][T25936] CPU: 1 PID: 25936 Comm: syz.1.17253 Not tainted syzkaller #0
[ 2776.496970][T25936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2776.507071][T25936] Call Trace:
[ 2776.510374][T25936]  <TASK>
[ 2776.513343][T25936]  dump_stack_lvl+0x188/0x24e
[ 2776.518083][T25936]  ? show_regs_print_info+0x12/0x12
[ 2776.523324][T25936]  ? load_image+0x410/0x410
[ 2776.527886][T25936]  sysfs_warn_dup+0x8a/0xa0
[ 2776.532442][T25936]  sysfs_do_create_link_sd+0xc0/0x110
[ 2776.537859][T25936]  device_add+0x83b/0x1050
[ 2776.542340][T25936]  wiphy_register+0x1d8b/0x2aa0
[ 2776.547237][T25936]  ? cfg80211_event_work+0x40/0x40
[ 2776.552367][T25936]  ? minstrel_ht_alloc+0x894/0xa20
[ 2776.557518][T25936]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2776.563618][T25936]  ieee80211_register_hw+0x2e33/0x3b00
[ 2776.569109][T25936]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2776.574667][T25936]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2776.580244][T25936]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2776.585896][T25936]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2776.591824][T25936]  ? __debug_object_init+0xed/0x440
[ 2776.597044][T25936]  ? memset+0x1e/0x40
[ 2776.601042][T25936]  ? __hrtimer_init+0x189/0x270
[ 2776.605915][T25936]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2776.611661][T25936]  ? memcpy+0x3c/0x60
[ 2776.615678][T25936]  hwsim_new_radio_nl+0xab7/0xc90
[ 2776.620726][T25936]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2776.626299][T25936]  ? end_current_label_crit_section+0x170/0x170
[ 2776.632566][T25936]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2776.638493][T25936]  ? bpf_lsm_capable+0x5/0x10
[ 2776.643192][T25936]  ? security_capable+0x85/0xb0
[ 2776.648157][T25936]  genl_rcv_msg+0x601/0x790
[ 2776.652695][T25936]  ? genl_bind+0x360/0x360
[ 2776.657146][T25936]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2776.663535][T25936]  netlink_rcv_skb+0x1ef/0x440
[ 2776.668319][T25936]  ? genl_bind+0x360/0x360
[ 2776.672770][T25936]  ? netlink_ack+0x1160/0x1160
[ 2776.677557][T25936]  ? down_read+0x1a8/0x2d0
[ 2776.681995][T25936]  genl_rcv+0x24/0x40
[ 2776.685994][T25936]  netlink_unicast+0x7ad/0x920
[ 2776.690782][T25936]  netlink_sendmsg+0x8ad/0xbd0
[ 2776.695577][T25936]  ? netlink_getsockopt+0x550/0x550
[ 2776.700793][T25936]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2776.706368][T25936]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2776.711674][T25936]  ? security_socket_sendmsg+0x7c/0xa0
[ 2776.717148][T25936]  ? netlink_getsockopt+0x550/0x550
[ 2776.722364][T25936]  ____sys_sendmsg+0x5ed/0x9a0
[ 2776.727146][T25936]  ? __sys_sendmsg_sock+0x30/0x30
[ 2776.732190][T25936]  ? __import_iovec+0x306/0x510
[ 2776.737081][T25936]  ? import_iovec+0x6f/0xa0
[ 2776.741613][T25936]  ___sys_sendmsg+0x2a2/0x360
[ 2776.746319][T25936]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2776.751145][T25936]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2776.756019][T25936]  ? __x64_sys_sendmsg+0x80/0x80
[ 2776.761008][T25936]  ? lockdep_hardirqs_on+0x94/0x140
[ 2776.766238][T25936]  do_syscall_64+0x4c/0xa0
[ 2776.770668][T25936]  ? clear_bhb_loop+0x60/0xb0
[ 2776.775363][T25936]  ? clear_bhb_loop+0x60/0xb0
[ 2776.780077][T25936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2776.786003][T25936] RIP: 0033:0x7f5f0059e199
[ 2776.790446][T25936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2776.810103][T25936] RSP: 002b:00007f5f013c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2776.818533][T25936] RAX: ffffffffffffffda RBX: 00007f5f00826090 RCX: 00007f5f0059e199
[ 2776.826519][T25936] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2776.834498][T25936] RBP: 00007f5f006350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2776.842487][T25936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2776.850510][T25936] R13: 00007f5f00826128 R14: 00007f5f00826090 R15: 00007fffac5188e8
[ 2776.858518][T25936]  </TASK>
[ 2777.328811][T25963] netlink: 'syz.2.17258': attribute type 3 has an invalid length.
[ 2777.357871][T25963] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17258'.
[ 2777.484118][T25970] netlink: 'syz.3.17264': attribute type 10 has an invalid length.
[ 2777.504228][T25973] netlink: 'syz.4.17265': attribute type 3 has an invalid length.
[ 2777.504592][T25970] netlink: 55 bytes leftover after parsing attributes in process `syz.3.17264'.
[ 2777.513835][T25973] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.17265'.
[ 2777.891381][T25984] netlink: 124 bytes leftover after parsing attributes in process `syz.3.17269'.
[ 2777.927735][T25982] netlink: 'syz.0.17268': attribute type 10 has an invalid length.
[ 2778.066179][T25988] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.17271'.
[ 2778.212022][T25993] netlink: 'syz.0.17273': attribute type 11 has an invalid length.
[ 2778.229963][T25993] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17273'.
[ 2778.253891][T25993] netlink: 'syz.0.17273': attribute type 11 has an invalid length.
[ 2778.276006][T25993] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17273'.
[ 2778.324060][T25992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2778.494697][T26008] netlink: 91092 bytes leftover after parsing attributes in process `syz.1.17277'.
[ 2778.591508][T26015] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.17280'.
[ 2778.615417][T26015] netlink: 'syz.3.17280': attribute type 29 has an invalid length.
[ 2778.642127][T26015] netlink: 'syz.3.17280': attribute type 29 has an invalid length.
[ 2778.862592][T26030] netlink: 'syz.3.17284': attribute type 3 has an invalid length.
[ 2778.900306][T26030] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17284'.
[ 2778.983135][T26027] device lo entered promiscuous mode
[ 2778.989600][T26027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2780.565671][T26066] netlink: 'syz.2.17298': attribute type 41 has an invalid length.
[ 2781.324732][T26095] netlink: 'syz.1.17310': attribute type 3 has an invalid length.
[ 2781.549348][T26100] netlink: 'syz.2.17313': attribute type 21 has an invalid length.
[ 2782.778985][T26159] netlink: 'syz.2.17333': attribute type 3 has an invalid length.
[ 2782.793112][T26159] __nla_validate_parse: 7 callbacks suppressed
[ 2782.793126][T26159] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17333'.
[ 2783.502871][T26173] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.17339'.
[ 2783.742648][T26180] netlink: 'syz.0.17342': attribute type 25 has an invalid length.
[ 2783.774253][T26180] netlink: 'syz.0.17342': attribute type 28 has an invalid length.
[ 2786.722661][T26182] netlink: 'syz.2.17343': attribute type 25 has an invalid length.
[ 2786.730878][T26182] netlink: 'syz.2.17343': attribute type 29 has an invalid length.
[ 2787.484951][T26216] netlink: 'syz.2.17353': attribute type 3 has an invalid length.
[ 2787.523918][T26216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17353'.
[ 2787.537916][T26219] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.17354'.
[ 2787.588176][T26219] net_ratelimit: 59 callbacks suppressed
[ 2787.588191][T26219] netlink: zone id is out of range
[ 2787.632692][T26219] netlink: zone id is out of range
[ 2787.638125][T26219] netlink: zone id is out of range
[ 2787.650115][T26219] netlink: zone id is out of range
[ 2787.711371][T26219] netlink: zone id is out of range
[ 2787.773777][T26219] netlink: zone id is out of range
[ 2787.847761][T26219] netlink: zone id is out of range
[ 2787.860160][T26219] netlink: zone id is out of range
[ 2787.865661][T26219] netlink: get zone limit has 8 unknown bytes
[ 2788.206857][T26228] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.17357'.
[ 2788.330580][T26228] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.17357'.
[ 2788.389809][T26231] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.17357'.
[ 2788.403693][T26232] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.17357'.
[ 2789.069258][T26265] netlink: 'syz.0.17369': attribute type 3 has an invalid length.
[ 2789.104778][T26265] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17369'.
[ 2789.348192][T26281] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17375'.
[ 2789.376913][T26281] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17375'.
[ 2789.396461][T26281] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17375'.
[ 2789.410572][T26281] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17375'.
[ 2789.426520][T26281] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17375'.
[ 2789.830950][T26294] netlink: 'syz.3.17380': attribute type 3 has an invalid length.
[ 2790.244504][T26303] netlink: 'syz.4.17383': attribute type 4 has an invalid length.
[ 2790.649247][T26313] FAULT_INJECTION: forcing a failure.
[ 2790.649247][T26313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2790.686669][T26313] CPU: 1 PID: 26313 Comm: syz.1.17385 Not tainted syzkaller #0
[ 2790.694270][T26313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2790.704353][T26313] Call Trace:
[ 2790.707650][T26313]  <TASK>
[ 2790.710611][T26313]  dump_stack_lvl+0x188/0x24e
[ 2790.715327][T26313]  ? show_regs_print_info+0x12/0x12
[ 2790.720583][T26313]  ? load_image+0x410/0x410
[ 2790.725140][T26313]  ? __might_fault+0xa6/0x120
[ 2790.729858][T26313]  should_fail_ex+0x390/0x4c0
[ 2790.734582][T26313]  copyin+0x1b/0x120
[ 2790.738517][T26313]  _copy_from_iter+0x447/0x1130
[ 2790.743421][T26313]  ? copyout_mc+0x110/0x110
[ 2790.747977][T26313]  ? verify_lock_unused+0x140/0x140
[ 2790.753216][T26313]  ? __check_object_size+0x86/0xa70
[ 2790.758449][T26313]  ? ping_common_sendmsg+0x93/0x2a0
[ 2790.763709][T26313]  ping_common_sendmsg+0xb8/0x2a0
[ 2790.768800][T26313]  ping_v6_sendmsg+0x1f9/0x1170
[ 2790.773756][T26313]  ? trace_event_raw_event_lock+0x230/0x230
[ 2790.779753][T26313]  ? ping_v6_pre_connect+0x30/0x30
[ 2790.784973][T26313]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2790.791005][T26313]  ? lock_chain_count+0x20/0x20
[ 2790.795935][T26313]  ? inet_sendmsg+0x109/0x2a0
[ 2790.800684][T26313]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2790.806089][T26313]  ? lockdep_hardirqs_on+0x94/0x140
[ 2790.811334][T26313]  ? _local_bh_enable+0xa0/0xa0
[ 2790.816230][T26313]  ? do_raw_spin_unlock+0x11d/0x230
[ 2790.821471][T26313]  ? inet_sendmsg+0x109/0x2a0
[ 2790.826200][T26313]  ? inet_sendmsg+0x109/0x2a0
[ 2790.830919][T26313]  ? inet_send_prepare+0x250/0x250
[ 2790.836073][T26313]  ____sys_sendmsg+0x5ed/0x9a0
[ 2790.840886][T26313]  ? __sys_sendmsg_sock+0x30/0x30
[ 2790.845966][T26313]  ? __import_iovec+0x306/0x510
[ 2790.850867][T26313]  ? import_iovec+0x6f/0xa0
[ 2790.855424][T26313]  ___sys_sendmsg+0x2a2/0x360
[ 2790.860182][T26313]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2790.865034][T26313]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2790.870132][T26313]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2790.875021][T26313]  ? __x64_sys_sendmsg+0x80/0x80
[ 2790.880008][T26313]  ? lockdep_hardirqs_on+0x94/0x140
[ 2790.885254][T26313]  do_syscall_64+0x4c/0xa0
[ 2790.889706][T26313]  ? clear_bhb_loop+0x60/0xb0
[ 2790.894473][T26313]  ? clear_bhb_loop+0x60/0xb0
[ 2790.899192][T26313]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2790.905115][T26313] RIP: 0033:0x7f5f0059e199
[ 2790.909561][T26313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2790.929211][T26313] RSP: 002b:00007f5f013e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2790.937664][T26313] RAX: ffffffffffffffda RBX: 00007f5f00825fa0 RCX: 00007f5f0059e199
[ 2790.945679][T26313] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[ 2790.953704][T26313] RBP: 00007f5f013e2090 R08: 0000000000000000 R09: 0000000000000000
[ 2790.961721][T26313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2790.969725][T26313] R13: 00007f5f00826038 R14: 00007f5f00825fa0 R15: 00007fffac5188e8
[ 2790.977759][T26313]  </TASK>
[ 2793.048835][T26337] netlink: 'syz.4.17389': attribute type 10 has an invalid length.
[ 2793.365032][T26342] __nla_validate_parse: 1 callbacks suppressed
[ 2793.365073][T26342] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17392'.
[ 2793.608554][T26342] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17392'.
[ 2793.635908][T26351] netlink: 'syz.2.17394': attribute type 3 has an invalid length.
[ 2793.660151][T26343] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17392'.
[ 2793.678251][T26351] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17394'.
[ 2793.698556][T26346] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17392'.
[ 2793.996885][T26363] delete_channel: no stack
[ 2794.558953][T26371] netlink: 'syz.4.17398': attribute type 2 has an invalid length.
[ 2794.580193][T26371] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17398'.
[ 2794.619292][T26372] netlink: 'syz.4.17398': attribute type 21 has an invalid length.
[ 2794.789629][T26380] netlink: 'syz.1.17404': attribute type 21 has an invalid length.
[ 2795.279070][T26400] device syzkaller0 entered promiscuous mode
[ 2795.417248][T26410] netlink: 'syz.4.17413': attribute type 3 has an invalid length.
[ 2795.459820][T26410] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17413'.
[ 2795.476761][T26412] netlink: 'syz.0.17415': attribute type 11 has an invalid length.
[ 2795.486315][T26412] netlink: 140 bytes leftover after parsing attributes in process `syz.0.17415'.
[ 2796.349441][T26406] delete_channel: no stack
[ 2796.733439][T26436] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.17420'.
[ 2798.158388][T26436] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 2798.565581][T26469] netlink: 'syz.2.17427': attribute type 10 has an invalid length.
[ 2798.577489][T26469] netlink: 'syz.2.17427': attribute type 4 has an invalid length.
[ 2798.591117][T26470] netlink: 'syz.1.17429': attribute type 3 has an invalid length.
[ 2798.609965][T26470] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17429'.
[ 2798.619491][T26469] netlink: 116 bytes leftover after parsing attributes in process `syz.2.17427'.
[ 2799.900912][T26501] netlink: 'syz.2.17439': attribute type 4 has an invalid length.
[ 2800.282408][T26532] netlink: 'syz.1.17448': attribute type 3 has an invalid length.
[ 2800.430155][T26532] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17448'.
[ 2800.807989][T26541] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17454'.
[ 2800.901080][T26541] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 2801.777066][T26557] netlink: 'syz.2.17457': attribute type 10 has an invalid length.
[ 2802.012334][T26567] netlink: 'syz.1.17461': attribute type 10 has an invalid length.
[ 2802.029935][T26567] netlink: 55 bytes leftover after parsing attributes in process `syz.1.17461'.
[ 2802.281429][T26584] netlink: 'syz.3.17468': attribute type 4 has an invalid length.
[ 2802.314016][T26588] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17469'.
[ 2802.329071][T26589] netlink: 'syz.4.17466': attribute type 3 has an invalid length.
[ 2802.347091][T26589] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17466'.
[ 2802.496084][T26594] netlink: 'syz.1.17472': attribute type 10 has an invalid length.
[ 2803.495216][T26606] netlink: 'syz.1.17474': attribute type 10 has an invalid length.
[ 2804.146129][T26606] device veth0_macvtap left promiscuous mode
[ 2804.527565][T26622] netlink: 'syz.3.17480': attribute type 2 has an invalid length.
[ 2804.556646][T26622] netlink: 'syz.3.17480': attribute type 11 has an invalid length.
[ 2804.599139][T26622] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17480'.
[ 2804.642079][T26622] netlink: 'syz.3.17480': attribute type 11 has an invalid length.
[ 2804.669976][T26622] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17480'.
[ 2804.726297][T26621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2804.888034][T26641] netlink: 'syz.1.17486': attribute type 3 has an invalid length.
[ 2804.908046][T26641] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17486'.
[ 2804.954028][T26640] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17488'.
[ 2804.992759][T26640] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2805.051360][T26640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2805.727487][T26669] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17496'.
[ 2806.877290][T26633] delete_channel: no stack
[ 2807.140958][T26700] netlink: 'syz.3.17508': attribute type 3 has an invalid length.
[ 2807.148849][T26700] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17508'.
[ 2807.490083][T26711] netlink: 'syz.4.17514': attribute type 10 has an invalid length.
[ 2807.600871][T26714] netlink: 'syz.0.17513': attribute type 41 has an invalid length.
[ 2807.851656][T26717] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17515'.
[ 2807.930467][T26717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2808.054157][T26717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2808.627539][T26735] netlink: 'syz.0.17522': attribute type 3 has an invalid length.
[ 2808.635728][T26735] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17522'.
[ 2808.929921][T26741] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.17533'.
[ 2808.947333][T26741] netlink: 3067 bytes leftover after parsing attributes in process `syz.2.17533'.
[ 2809.178135][T26747] netlink: 'syz.0.17524': attribute type 21 has an invalid length.
[ 2810.107235][T26737] delete_channel: no stack
[ 2810.223566][T26775] netlink: 'syz.0.17535': attribute type 3 has an invalid length.
[ 2810.255274][T26775] __nla_validate_parse: 4 callbacks suppressed
[ 2810.255299][T26775] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17535'.
[ 2810.806618][T26783] netlink: 'syz.3.17539': attribute type 29 has an invalid length.
[ 2810.852545][T26783] netlink: 'syz.3.17539': attribute type 29 has an invalid length.
[ 2811.199532][T26795] netlink: 'syz.3.17543': attribute type 21 has an invalid length.
[ 2811.448509][T26809] netlink: 'syz.2.17547': attribute type 3 has an invalid length.
[ 2811.466637][T26809] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17547'.
[ 2812.319643][T26838] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17557'.
[ 2812.483869][T26843] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17557'.
[ 2812.803906][T26862] netlink: 'syz.3.17562': attribute type 3 has an invalid length.
[ 2812.817606][T26862] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17562'.
[ 2812.861966][T26815] delete_channel: no stack
[ 2813.273461][T26881] netlink: 'syz.3.17567': attribute type 5 has an invalid length.
[ 2813.681220][T26900] netlink: 'syz.3.17574': attribute type 25 has an invalid length.
[ 2813.720702][T26900] netlink: 'syz.3.17574': attribute type 29 has an invalid length.
[ 2814.015468][T26915] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.17581'.
[ 2814.070472][T26915] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 2814.091806][T26915] CPU: 1 PID: 26915 Comm: syz.3.17581 Not tainted syzkaller #0
[ 2814.099410][T26915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2814.109511][T26915] Call Trace:
[ 2814.112821][T26915]  <TASK>
[ 2814.115790][T26915]  dump_stack_lvl+0x188/0x24e
[ 2814.120541][T26915]  ? show_regs_print_info+0x12/0x12
[ 2814.125793][T26915]  ? load_image+0x410/0x410
[ 2814.130367][T26915]  sysfs_warn_dup+0x8a/0xa0
[ 2814.134919][T26915]  sysfs_do_create_link_sd+0xc0/0x110
[ 2814.140348][T26915]  device_add+0x83b/0x1050
[ 2814.144825][T26915]  wiphy_register+0x1d8b/0x2aa0
[ 2814.149733][T26915]  ? cfg80211_event_work+0x40/0x40
[ 2814.154885][T26915]  ? minstrel_ht_alloc+0x894/0xa20
[ 2814.160041][T26915]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2814.166162][T26915]  ieee80211_register_hw+0x2e33/0x3b00
[ 2814.171665][T26915]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2814.177884][T26915]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2814.183471][T26915]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2814.189086][T26915]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2814.194752][T26915]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2814.200681][T26915]  ? __debug_object_init+0xed/0x440
[ 2814.205909][T26915]  ? memset+0x1e/0x40
[ 2814.209910][T26915]  ? __hrtimer_init+0x189/0x270
[ 2814.214799][T26915]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2814.220555][T26915]  ? memcpy+0x3c/0x60
[ 2814.224561][T26915]  hwsim_new_radio_nl+0xab7/0xc90
[ 2814.229610][T26915]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2814.235170][T26915]  ? rcu_is_watching+0x11/0xa0
[ 2814.239972][T26915]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2814.245900][T26915]  ? lockdep_hardirqs_on+0x94/0x140
[ 2814.251136][T26915]  ? genl_rcv_msg+0x5d9/0x790
[ 2814.255847][T26915]  genl_rcv_msg+0x601/0x790
[ 2814.260377][T26915]  ? genl_bind+0x360/0x360
[ 2814.264813][T26915]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2814.271166][T26915]  netlink_rcv_skb+0x1ef/0x440
[ 2814.275958][T26915]  ? genl_bind+0x360/0x360
[ 2814.280396][T26915]  ? netlink_ack+0x1160/0x1160
[ 2814.285185][T26915]  ? down_read+0x1a8/0x2d0
[ 2814.289622][T26915]  genl_rcv+0x24/0x40
[ 2814.293616][T26915]  netlink_unicast+0x7ad/0x920
[ 2814.298400][T26915]  netlink_sendmsg+0x8ad/0xbd0
[ 2814.303183][T26915]  ? netlink_getsockopt+0x550/0x550
[ 2814.308398][T26915]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2814.313970][T26915]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2814.319266][T26915]  ? security_socket_sendmsg+0x7c/0xa0
[ 2814.324757][T26915]  ? netlink_getsockopt+0x550/0x550
[ 2814.329979][T26915]  ____sys_sendmsg+0x5ed/0x9a0
[ 2814.334775][T26915]  ? __sys_sendmsg_sock+0x30/0x30
[ 2814.339810][T26915]  ? __import_iovec+0x306/0x510
[ 2814.344694][T26915]  ? import_iovec+0x6f/0xa0
[ 2814.349223][T26915]  ___sys_sendmsg+0x2a2/0x360
[ 2814.353922][T26915]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2814.358743][T26915]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2814.363613][T26915]  ? __x64_sys_sendmsg+0x80/0x80
[ 2814.368592][T26915]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 2814.374508][T26915]  do_syscall_64+0x4c/0xa0
[ 2814.378940][T26915]  ? clear_bhb_loop+0x60/0xb0
[ 2814.383669][T26915]  ? clear_bhb_loop+0x60/0xb0
[ 2814.388375][T26915]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2814.394289][T26915] RIP: 0033:0x7fc7cc99e199
[ 2814.398721][T26915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2814.418341][T26915] RSP: 002b:00007fc7cd78e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2814.426770][T26915] RAX: ffffffffffffffda RBX: 00007fc7ccc25fa0 RCX: 00007fc7cc99e199
[ 2814.434751][T26915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 2814.442736][T26915] RBP: 00007fc7cca350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2814.450729][T26915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2814.458714][T26915] R13: 00007fc7ccc26038 R14: 00007fc7ccc25fa0 R15: 00007ffff0c7c7d8
[ 2814.466710][T26915]  </TASK>
[ 2816.884936][T26984] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17604'.
[ 2817.382580][T27002] netlink: 'syz.3.17611': attribute type 39 has an invalid length.
[ 2819.002952][T27018] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17616'.
[ 2819.409622][T27033] netlink: 'syz.2.17617': attribute type 10 has an invalid length.
[ 2819.468785][T27033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2820.071858][T27044] FAULT_INJECTION: forcing a failure.
[ 2820.071858][T27044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2820.123630][T27044] CPU: 1 PID: 27044 Comm: syz.3.17625 Not tainted syzkaller #0
[ 2820.131323][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2820.141407][T27044] Call Trace:
[ 2820.144713][T27044]  <TASK>
[ 2820.147660][T27044]  dump_stack_lvl+0x188/0x24e
[ 2820.152376][T27044]  ? show_regs_print_info+0x12/0x12
[ 2820.157613][T27044]  ? load_image+0x410/0x410
[ 2820.162161][T27044]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2820.167225][T27044]  ? snprintf+0xe5/0x140
[ 2820.171510][T27044]  should_fail_ex+0x390/0x4c0
[ 2820.176238][T27044]  _copy_to_user+0x2c/0x130
[ 2820.180783][T27044]  simple_read_from_buffer+0xe3/0x150
[ 2820.186190][T27044]  proc_fail_nth_read+0x1a6/0x220
[ 2820.191250][T27044]  ? proc_fault_inject_write+0x310/0x310
[ 2820.196902][T27044]  ? fsnotify_perm+0x248/0x550
[ 2820.201693][T27044]  ? proc_fault_inject_write+0x310/0x310
[ 2820.207339][T27044]  vfs_read+0x2db/0x960
[ 2820.211602][T27044]  ? kernel_read+0x1e0/0x1e0
[ 2820.216214][T27044]  ? __fget_files+0x28/0x460
[ 2820.220822][T27044]  ? __fget_files+0x3fc/0x460
[ 2820.225522][T27044]  ? __fdget_pos+0x2ae/0x360
[ 2820.230128][T27044]  ? ksys_read+0x70/0x260
[ 2820.234475][T27044]  ksys_read+0x14d/0x260
[ 2820.238734][T27044]  ? vfs_write+0x9a0/0x9a0
[ 2820.243172][T27044]  ? lockdep_hardirqs_on+0x94/0x140
[ 2820.248392][T27044]  do_syscall_64+0x4c/0xa0
[ 2820.252825][T27044]  ? clear_bhb_loop+0x60/0xb0
[ 2820.257514][T27044]  ? clear_bhb_loop+0x60/0xb0
[ 2820.262202][T27044]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2820.268109][T27044] RIP: 0033:0x7fc7cc95e9ce
[ 2820.272533][T27044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2820.292154][T27044] RSP: 002b:00007fc7cd78dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2820.300614][T27044] RAX: ffffffffffffffda RBX: 00007fc7cd78e6c0 RCX: 00007fc7cc95e9ce
[ 2820.308617][T27044] RDX: 000000000000000f RSI: 00007fc7cd78e0a0 RDI: 0000000000000004
[ 2820.316629][T27044] RBP: 00007fc7cd78e090 R08: 0000000000000000 R09: 0000000000000000
[ 2820.324614][T27044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2820.332606][T27044] R13: 00007fc7ccc26038 R14: 00007fc7ccc25fa0 R15: 00007ffff0c7c7d8
[ 2820.340605][T27044]  </TASK>
[ 2820.769421][T27056] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.17630'.
[ 2820.967995][T27068] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.17634'.
[ 2821.018508][T27068] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 2821.730046][T27085] netlink: 'syz.4.17641': attribute type 21 has an invalid length.
[ 2821.738201][T27085] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17641'.
[ 2821.747848][T27085] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17641'.
[ 2821.958990][T27092] delete_channel: no stack
[ 2822.549399][T27130] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17651'.
[ 2822.578752][T27130] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 2822.595457][T27130] CPU: 1 PID: 27130 Comm: syz.2.17651 Not tainted syzkaller #0
[ 2822.603051][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2822.613135][T27130] Call Trace:
[ 2822.616439][T27130]  <TASK>
[ 2822.619395][T27130]  dump_stack_lvl+0x188/0x24e
[ 2822.624115][T27130]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2822.630301][T27130]  ? show_regs_print_info+0x12/0x12
[ 2822.635526][T27130]  ? load_image+0x410/0x410
[ 2822.640072][T27130]  ? sysfs_warn_dup+0x61/0xa0
[ 2822.644792][T27130]  sysfs_warn_dup+0x8a/0xa0
[ 2822.649330][T27130]  sysfs_do_create_link_sd+0xc0/0x110
[ 2822.654736][T27130]  device_add+0x83b/0x1050
[ 2822.659192][T27130]  wiphy_register+0x1d8b/0x2aa0
[ 2822.664101][T27130]  ? cfg80211_event_work+0x40/0x40
[ 2822.669248][T27130]  ? minstrel_ht_alloc+0x894/0xa20
[ 2822.674400][T27130]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2822.680504][T27130]  ieee80211_register_hw+0x2e33/0x3b00
[ 2822.686043][T27130]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2822.691634][T27130]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2822.697269][T27130]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2822.702932][T27130]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2822.708860][T27130]  ? __debug_object_init+0xed/0x440
[ 2822.714102][T27130]  ? memset+0x1e/0x40
[ 2822.718118][T27130]  ? __hrtimer_init+0x189/0x270
[ 2822.723001][T27130]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2822.728761][T27130]  ? memcpy+0x3c/0x60
[ 2822.732788][T27130]  hwsim_new_radio_nl+0xab7/0xc90
[ 2822.737858][T27130]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2822.743447][T27130]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2822.749379][T27130]  ? bpf_lsm_capable+0x5/0x10
[ 2822.754104][T27130]  ? security_capable+0x85/0xb0
[ 2822.759104][T27130]  genl_rcv_msg+0x601/0x790
[ 2822.763659][T27130]  ? rcu_is_watching+0x11/0xa0
[ 2822.768464][T27130]  ? genl_bind+0x360/0x360
[ 2822.772912][T27130]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2822.779280][T27130]  ? netlink_rcv_skb+0x1ce/0x440
[ 2822.784261][T27130]  netlink_rcv_skb+0x1ef/0x440
[ 2822.789062][T27130]  ? genl_bind+0x360/0x360
[ 2822.793515][T27130]  ? netlink_ack+0x1160/0x1160
[ 2822.798320][T27130]  ? down_read+0x1a8/0x2d0
[ 2822.802774][T27130]  genl_rcv+0x24/0x40
[ 2822.806790][T27130]  netlink_unicast+0x7ad/0x920
[ 2822.811598][T27130]  netlink_sendmsg+0x8ad/0xbd0
[ 2822.816414][T27130]  ? netlink_getsockopt+0x550/0x550
[ 2822.821653][T27130]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2822.827243][T27130]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2822.832551][T27130]  ? security_socket_sendmsg+0x7c/0xa0
[ 2822.838054][T27130]  ? netlink_getsockopt+0x550/0x550
[ 2822.843282][T27130]  ____sys_sendmsg+0x5ed/0x9a0
[ 2822.848084][T27130]  ? __sys_sendmsg_sock+0x30/0x30
[ 2822.853164][T27130]  ? __import_iovec+0x306/0x510
[ 2822.858092][T27130]  ? import_iovec+0x6f/0xa0
[ 2822.862656][T27130]  ___sys_sendmsg+0x2a2/0x360
[ 2822.867390][T27130]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2822.872209][T27130]  ? ktime_get+0x7b/0x270
[ 2822.876601][T27130]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2822.881500][T27130]  ? __x64_sys_sendmsg+0x80/0x80
[ 2822.886495][T27130]  ? lockdep_hardirqs_on+0x94/0x140
[ 2822.891737][T27130]  do_syscall_64+0x4c/0xa0
[ 2822.896184][T27130]  ? clear_bhb_loop+0x60/0xb0
[ 2822.900891][T27130]  ? clear_bhb_loop+0x60/0xb0
[ 2822.905634][T27130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2822.911554][T27130] RIP: 0033:0x7ffab299e199
[ 2822.916012][T27130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2822.935663][T27130] RSP: 002b:00007ffab0bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2822.944113][T27130] RAX: ffffffffffffffda RBX: 00007ffab2c26180 RCX: 00007ffab299e199
[ 2822.952110][T27130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[ 2822.960107][T27130] RBP: 00007ffab2a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2822.968112][T27130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2822.976112][T27130] R13: 00007ffab2c26218 R14: 00007ffab2c26180 R15: 00007ffeeed60738
[ 2822.984155][T27130]  </TASK>
[ 2823.495698][T27147] netlink: 'syz.0.17663': attribute type 41 has an invalid length.
[ 2823.590030][T27154] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.17662'.
[ 2823.766134][T27156] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.17664'.
[ 2823.905669][T27156] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 2824.636827][T27170] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.17669'.
[ 2824.740858][ T8984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2824.750407][ T8984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2824.758747][ T8984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2824.803662][ T8984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2824.828546][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2824.853609][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2825.403011][T27174] chnl_net:caif_netlink_parms(): no params data found
[ 2825.645933][T27174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2825.661329][T27174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2825.693032][T27174] device bridge_slave_0 entered promiscuous mode
[ 2825.751614][T25282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2825.788338][T27174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2825.800567][T27174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2825.830136][T27174] device bridge_slave_1 entered promiscuous mode
[ 2825.896409][T25282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2825.916368][T27191] bond0: (slave bond_slave_0): Releasing backup interface
[ 2825.928020][T27190] delete_channel: no stack
[ 2825.967046][T27191] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 2825.995582][T27194] netlink: 'syz.4.17675': attribute type 21 has an invalid length.
[ 2826.024614][T27192] netlink: 91092 bytes leftover after parsing attributes in process `syz.2.17672'.
[ 2826.041938][T27194] netlink: 'syz.4.17675': attribute type 1 has an invalid length.
[ 2826.105733][T25282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2826.167493][T27174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2826.193134][T27195] netlink: 'syz.4.17675': attribute type 17 has an invalid length.
[ 2826.216938][T27195] netlink: 'syz.4.17675': attribute type 16 has an invalid length.
[ 2826.237286][T27195] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17675'.
[ 2826.320576][T27194] netlink: 148 bytes leftover after parsing attributes in process `syz.4.17675'.
[ 2826.429324][T25282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2826.476994][T27199] netlink: 'syz.1.17676': attribute type 15 has an invalid length.
[ 2826.498810][T27199] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.17676'.
[ 2826.550117][T27174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2826.682380][T27174] team0: Port device team_slave_0 added
[ 2826.721958][T27174] team0: Port device team_slave_1 added
[ 2826.834606][T27174] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2826.870321][T27174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2826.938621][T27174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2826.972404][T27174] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2827.001848][T27174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2827.067104][T27174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2827.610175][T18081] Bluetooth: hci2: command 0x0409 tx timeout
[ 2827.629310][T27174] device hsr_slave_0 entered promiscuous mode
[ 2827.776287][T27174] device hsr_slave_1 entered promiscuous mode
[ 2827.796256][T27174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2827.816900][T27174] Cannot create hsr debugfs directory
[ 2827.861268][T27220] netlink: 'syz.0.17683': attribute type 7 has an invalid length.
[ 2827.879355][T27226] netlink: 'syz.1.17684': attribute type 41 has an invalid length.
[ 2827.906439][T27228] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17685'.
[ 2827.952662][T27231] delete_channel: no stack
[ 2827.994816][T27228] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 2828.065916][T27228] CPU: 0 PID: 27228 Comm: syz.2.17685 Not tainted syzkaller #0
[ 2828.073626][T27228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2828.083710][T27228] Call Trace:
[ 2828.087019][T27228]  <TASK>
[ 2828.089992][T27228]  dump_stack_lvl+0x188/0x24e
[ 2828.094714][T27228]  ? show_regs_print_info+0x12/0x12
[ 2828.099982][T27228]  ? load_image+0x410/0x410
[ 2828.104547][T27228]  sysfs_warn_dup+0x8a/0xa0
[ 2828.109097][T27228]  sysfs_do_create_link_sd+0xc0/0x110
[ 2828.114533][T27228]  device_add+0x83b/0x1050
[ 2828.118995][T27228]  wiphy_register+0x1d8b/0x2aa0
[ 2828.123902][T27228]  ? cfg80211_event_work+0x40/0x40
[ 2828.129054][T27228]  ? minstrel_ht_alloc+0x894/0xa20
[ 2828.134217][T27228]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2828.140339][T27228]  ieee80211_register_hw+0x2e33/0x3b00
[ 2828.145874][T27228]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2828.151483][T27228]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2828.157086][T27228]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2828.162768][T27228]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2828.168709][T27228]  ? __debug_object_init+0xed/0x440
[ 2828.173993][T27228]  ? memset+0x1e/0x40
[ 2828.178016][T27228]  ? __hrtimer_init+0x189/0x270
[ 2828.182910][T27228]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2828.188675][T27228]  ? memcpy+0x3c/0x60
[ 2828.192686][T27228]  hwsim_new_radio_nl+0xab7/0xc90
[ 2828.197750][T27228]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2828.203329][T27228]  ? end_current_label_crit_section+0x170/0x170
[ 2828.209602][T27228]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2828.215528][T27228]  ? bpf_lsm_capable+0x5/0x10
[ 2828.220242][T27228]  ? security_capable+0x85/0xb0
[ 2828.225122][T27228]  genl_rcv_msg+0x601/0x790
[ 2828.229648][T27228]  ? lock_chain_count+0x20/0x20
[ 2828.234518][T27228]  ? genl_bind+0x360/0x360
[ 2828.238946][T27228]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2828.245299][T27228]  netlink_rcv_skb+0x1ef/0x440
[ 2828.250101][T27228]  ? genl_bind+0x360/0x360
[ 2828.254561][T27228]  ? netlink_ack+0x1160/0x1160
[ 2828.259355][T27228]  ? down_read+0x1a8/0x2d0
[ 2828.263795][T27228]  genl_rcv+0x24/0x40
[ 2828.267794][T27228]  netlink_unicast+0x7ad/0x920
[ 2828.272588][T27228]  netlink_sendmsg+0x8ad/0xbd0
[ 2828.277377][T27228]  ? netlink_getsockopt+0x550/0x550
[ 2828.282602][T27228]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2828.288184][T27228]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2828.293512][T27228]  ? security_socket_sendmsg+0x7c/0xa0
[ 2828.299002][T27228]  ? netlink_getsockopt+0x550/0x550
[ 2828.304228][T27228]  ____sys_sendmsg+0x5ed/0x9a0
[ 2828.309023][T27228]  ? __sys_sendmsg_sock+0x30/0x30
[ 2828.314067][T27228]  ? __import_iovec+0x306/0x510
[ 2828.318957][T27228]  ? import_iovec+0x6f/0xa0
[ 2828.323492][T27228]  ___sys_sendmsg+0x2a2/0x360
[ 2828.328195][T27228]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2828.333015][T27228]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2828.337890][T27228]  ? __x64_sys_sendmsg+0x80/0x80
[ 2828.342900][T27228]  ? lockdep_hardirqs_on+0x94/0x140
[ 2828.348135][T27228]  do_syscall_64+0x4c/0xa0
[ 2828.352572][T27228]  ? clear_bhb_loop+0x60/0xb0
[ 2828.357265][T27228]  ? clear_bhb_loop+0x60/0xb0
[ 2828.361965][T27228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2828.367891][T27228] RIP: 0033:0x7ffab299e199
[ 2828.372343][T27228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2828.391999][T27228] RSP: 002b:00007ffab378a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2828.400423][T27228] RAX: ffffffffffffffda RBX: 00007ffab2c26090 RCX: 00007ffab299e199
[ 2828.408405][T27228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2828.416390][T27228] RBP: 00007ffab2a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2828.424373][T27228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2828.432369][T27228] R13: 00007ffab2c26128 R14: 00007ffab2c26090 R15: 00007ffeeed60738
[ 2828.440377][T27228]  </TASK>
[ 2828.728926][T27237] netlink: 'syz.0.17688': attribute type 10 has an invalid length.
[ 2828.807028][T27237] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2828.824051][T27246] netlink: 'syz.4.17690': attribute type 4 has an invalid length.
[ 2828.890839][T25282] device 0 left promiscuous mode
[ 2829.321612][T27255] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17691'.
[ 2829.580382][T27259] netlink: 'syz.4.17692': attribute type 10 has an invalid length.
[ 2829.690312][T18081] Bluetooth: hci2: command 0x041b tx timeout
[ 2830.660448][T27174] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2830.748795][T27174] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2830.783021][T27174] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2830.907068][T27174] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2831.251733][T27174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2831.780089][T18081] Bluetooth: hci2: command 0x040f tx timeout
[ 2833.860087][T18081] Bluetooth: hci2: command 0x0419 tx timeout
[ 2834.456082][T27332] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17709'.
[ 2834.540563][T27326] device syzkaller0 entered promiscuous mode
[ 2836.180307][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.186795][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2836.682557][T27355] netlink: 148 bytes leftover after parsing attributes in process `syz.1.17716'.
[ 2836.694198][T27368] validate_nla: 1 callbacks suppressed
[ 2836.694210][T27368] netlink: 'syz.2.17721': attribute type 41 has an invalid length.
[ 2836.865160][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2836.875472][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2836.919439][T27174] 8021q: adding VLAN 0 to HW filter on device team0
[ 2836.953580][T26859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2836.974081][T26859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2836.998352][T26859] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2837.005535][T26859] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2837.024240][T25282] device hsr_slave_0 left promiscuous mode
[ 2837.038326][T25282] device hsr_slave_1 left promiscuous mode
[ 2837.048137][T27381] netlink: 'syz.4.17726': attribute type 29 has an invalid length.
[ 2837.085692][T25282] device bridge_slave_0 left promiscuous mode
[ 2837.093133][T25282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2837.131591][T25282] device veth1_vlan left promiscuous mode
[ 2837.423073][T27395] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17731'.
[ 2837.896760][T25282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2837.941377][T25282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2838.212102][T25282] bond0 (unregistering): Released all slaves
[ 2838.262913][T26859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2838.275427][T27381] netlink: 'syz.4.17726': attribute type 29 has an invalid length.
[ 2838.284213][T27390] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.17729'.
[ 2838.313240][T25262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2838.335768][T25262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2838.354492][T25262] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2838.361668][T25262] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2838.475287][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2838.495786][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2838.509217][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2838.529650][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2838.549096][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2838.558521][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2838.602929][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2838.622419][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2838.651310][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2838.699119][T27174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2838.738474][T27174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2838.751117][T27402] netlink: 'syz.2.17734': attribute type 41 has an invalid length.
[ 2838.780384][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2838.794760][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2838.810153][T27412] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2839.197827][T27425] netlink: 188 bytes leftover after parsing attributes in process `syz.0.17742'.
[ 2839.222611][T27428] netlink: 'syz.2.17741': attribute type 4 has an invalid length.
[ 2839.485767][T25262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2839.494982][T25262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2839.519314][T27174] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2839.559990][T25262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2839.579525][T25262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2839.654213][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2839.669558][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2839.687271][T27174] device veth0_vlan entered promiscuous mode
[ 2839.719498][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2839.736227][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2839.748993][T27174] device veth1_vlan entered promiscuous mode
[ 2839.798884][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2839.807702][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2839.822951][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2839.835451][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2839.855807][T27174] device veth0_macvtap entered promiscuous mode
[ 2839.866003][T27455] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.17752'.
[ 2839.895896][T27174] device veth1_macvtap entered promiscuous mode
[ 2839.919772][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2839.938085][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2839.949497][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2839.966539][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2839.977136][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2839.998348][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2840.026473][T27174] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2840.092977][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2840.127351][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2840.139494][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2840.159209][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2840.176695][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2840.189175][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2840.200204][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2840.211041][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2840.222646][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2840.233872][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2840.255491][T27174] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2840.288641][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2840.307889][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2840.333059][T27174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2840.359885][T27174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2840.388928][T27174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2840.406102][T27174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2840.579122][T25262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2840.609011][T25262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2840.635739][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2840.698162][T23778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2840.720121][T23778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2840.737943][T23771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2840.893729][T27479] delete_channel: no stack
[ 2841.094878][T27493] netlink: 'syz.2.17766': attribute type 11 has an invalid length.
[ 2841.258115][T27499] netlink: 'syz.0.17768': attribute type 25 has an invalid length.
[ 2841.284709][T27499] netlink: 'syz.0.17768': attribute type 29 has an invalid length.
[ 2842.571160][T27542] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.17783'.
[ 2842.815740][T27550] netlink: 'syz.1.17786': attribute type 41 has an invalid length.
[ 2842.860770][T27555] netlink: 'syz.2.17789': attribute type 10 has an invalid length.
[ 2842.882787][T27555] device veth0_macvtap left promiscuous mode
[ 2843.845855][T27572] netlink: 'syz.3.17796': attribute type 10 has an invalid length.
[ 2846.464322][T27572] device veth0_vlan left promiscuous mode
[ 2846.496748][T27572] device veth0_vlan entered promiscuous mode
[ 2846.535348][T27572] team0: Device veth0_vlan failed to register rx_handler
[ 2846.850986][T27594] netlink: 'syz.2.17803': attribute type 41 has an invalid length.
[ 2847.191493][T27612] netlink: 'syz.0.17810': attribute type 4 has an invalid length.
[ 2847.263388][T27616] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17812'.
[ 2847.694189][T27635] netlink: 'syz.0.17816': attribute type 21 has an invalid length.
[ 2847.743333][T27635] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2848.177059][T27633] netlink: 'syz.0.17816': attribute type 21 has an invalid length.
[ 2848.392059][T27641] netlink: 'syz.2.17820': attribute type 41 has an invalid length.
[ 2851.970512][T27671] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.17827'.
[ 2852.085120][T27680] netlink: 'syz.3.17831': attribute type 10 has an invalid length.
[ 2852.108636][T27680] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2852.116291][T27680] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2852.154342][T27680] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2852.161567][T27680] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2852.169085][T27680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2852.176322][T27680] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2852.313099][T27680] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2852.379249][T27686] netlink: 'syz.3.17831': attribute type 10 has an invalid length.
[ 2853.995100][T27687] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2854.027112][T27690] netlink: 'syz.0.17832': attribute type 10 has an invalid length.
[ 2854.295013][T27706] netlink: 'syz.1.17837': attribute type 41 has an invalid length.
[ 2857.499620][T27721] netlink: 'syz.1.17853': attribute type 41 has an invalid length.
[ 2858.386392][T27733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17845'.
[ 2858.691969][T27728] delete_channel: no stack
[ 2859.152048][T27740] device pim6reg1 left promiscuous mode
[ 2860.559049][T27751] netlink: 'syz.1.17850': attribute type 3 has an invalid length.
[ 2860.567231][T27751] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17850'.
[ 2860.648668][T27752] netlink: 'syz.4.17849': attribute type 10 has an invalid length.
[ 2860.719542][T27748] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.17848'.
[ 2860.973860][T27765] netlink: 'syz.0.17858': attribute type 41 has an invalid length.
[ 2860.992497][T27768] netlink: 'syz.4.17856': attribute type 10 has an invalid length.
[ 2861.005894][T27768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17856'.
[ 2861.161481][T27774] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17860'.
[ 2861.354206][T27787] netlink: 'syz.4.17864': attribute type 2 has an invalid length.
[ 2861.404830][T27787] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17864'.
[ 2861.584618][T27796] syzkaller0: tun_chr_ioctl cmd 1074025680
[ 2861.594015][T27799] netlink: 'syz.1.17868': attribute type 29 has an invalid length.
[ 2861.605253][T27797] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2861.617262][T27799] netlink: 'syz.1.17868': attribute type 29 has an invalid length.
[ 2861.635750][T27797] netlink: 'syz.3.17867': attribute type 10 has an invalid length.
[ 2861.645169][T27797] device bridge_slave_1 left promiscuous mode
[ 2861.653072][T27797] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2861.669318][T27799] netlink: 'syz.1.17868': attribute type 29 has an invalid length.
[ 2861.794379][T27804] netlink: 830 bytes leftover after parsing attributes in process `syz.1.17871'.
[ 2861.878348][T27809] netlink: 'syz.4.17874': attribute type 4 has an invalid length.
[ 2862.008187][T27815] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.17875'.
[ 2862.113654][T27815] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 2862.514272][T27841] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17885'.
[ 2862.533678][T27843] FAULT_INJECTION: forcing a failure.
[ 2862.533678][T27843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2862.561893][T27843] CPU: 1 PID: 27843 Comm: syz.2.17886 Not tainted syzkaller #0
[ 2862.569493][T27843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2862.579577][T27843] Call Trace:
[ 2862.582901][T27843]  <TASK>
[ 2862.585853][T27843]  dump_stack_lvl+0x188/0x24e
[ 2862.590576][T27843]  ? show_regs_print_info+0x12/0x12
[ 2862.595806][T27843]  ? load_image+0x410/0x410
[ 2862.600356][T27843]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2862.605413][T27843]  ? perf_trace_lock_acquire+0x101/0x3f0
[ 2862.611100][T27843]  should_fail_ex+0x390/0x4c0
[ 2862.615828][T27843]  _copy_from_user+0x2c/0x170
[ 2862.620537][T27843]  ___sys_sendmsg+0x1c3/0x360
[ 2862.625259][T27843]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2862.630080][T27843]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2862.635175][T27843]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2862.640067][T27843]  ? __x64_sys_sendmsg+0x80/0x80
[ 2862.645049][T27843]  ? lockdep_hardirqs_on+0x94/0x140
[ 2862.650313][T27843]  do_syscall_64+0x4c/0xa0
[ 2862.654791][T27843]  ? clear_bhb_loop+0x60/0xb0
[ 2862.659517][T27843]  ? clear_bhb_loop+0x60/0xb0
[ 2862.664239][T27843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2862.670178][T27843] RIP: 0033:0x7ffab299e199
[ 2862.674630][T27843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2862.694283][T27843] RSP: 002b:00007ffab37ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2862.702743][T27843] RAX: ffffffffffffffda RBX: 00007ffab2c25fa0 RCX: 00007ffab299e199
[ 2862.710741][T27843] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2862.718736][T27843] RBP: 00007ffab37ab090 R08: 0000000000000000 R09: 0000000000000000
[ 2862.726736][T27843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2862.734731][T27843] R13: 00007ffab2c26038 R14: 00007ffab2c25fa0 R15: 00007ffeeed60738
[ 2862.742747][T27843]  </TASK>
[ 2863.182942][T27873] netlink: 'syz.3.17897': attribute type 11 has an invalid length.
[ 2863.233366][T27873] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.17897'.
[ 2863.261983][T27878] netlink: 'syz.3.17897': attribute type 11 has an invalid length.
[ 2863.289480][T27870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2863.879027][T27892] __nla_validate_parse: 1 callbacks suppressed
[ 2863.879050][T27892] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17901'.
[ 2863.950402][T27892] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2863.993574][T27892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2864.013405][T27867] delete_channel: no stack
[ 2864.274468][T27908] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17908'.
[ 2865.300791][T27927] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17914'.
[ 2865.353882][T27927] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17914'.
[ 2868.014789][T27952] validate_nla: 9 callbacks suppressed
[ 2868.014805][T27952] netlink: 'syz.4.17921': attribute type 10 has an invalid length.
[ 2868.028757][T27952] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17921'.
[ 2868.038434][T27952] device hsr0 entered promiscuous mode
[ 2868.219628][T27962] netlink: 'syz.1.17923': attribute type 41 has an invalid length.
[ 2868.251161][T27967] netlink: 'syz.4.17927': attribute type 41 has an invalid length.
[ 2868.259660][T27969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17925'.
[ 2868.302157][T27969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17925'.
[ 2868.365724][T27971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17925'.
[ 2868.423593][T27969] netlink: 'syz.0.17925': attribute type 21 has an invalid length.
[ 2868.460356][T27969] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17925'.
[ 2869.300083][T27999] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17937'.
[ 2869.314921][T27999] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17937'.
[ 2869.326511][T27999] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17937'.
[ 2870.758507][T28002] netlink: 'syz.0.17937': attribute type 21 has an invalid length.
[ 2870.796188][T28017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2870.834172][T28017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2870.849920][T28017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2870.872006][T28017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2870.894116][T28017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2870.905301][T28017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2870.928044][T28024] netlink: 'syz.2.17940': attribute type 41 has an invalid length.
[ 2870.945272][T28030] netlink: 'syz.1.17941': attribute type 33 has an invalid length.
[ 2870.959461][T28030] netlink: 164 bytes leftover after parsing attributes in process `syz.1.17941'.
[ 2871.003481][T28027] delete_channel: no stack
[ 2871.054037][T28030] sctp: [Deprecated]: syz.1.17941 (pid 28030) Use of int in max_burst socket option deprecated.
[ 2871.054037][T28030] Use struct sctp_assoc_value instead
[ 2872.416289][T28036] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17941'.
[ 2872.527529][T28036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2872.556918][T28036] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2872.567396][T28054] netlink: 'syz.4.17947': attribute type 29 has an invalid length.
[ 2872.580160][T28036] bond0 (unregistering): Released all slaves
[ 2872.592350][T28044] device wlan1 entered promiscuous mode
[ 2872.684336][T28047] device syzkaller0 entered promiscuous mode
[ 2872.837043][T28054] netlink: 'syz.4.17947': attribute type 29 has an invalid length.
[ 2873.013184][T28064] netlink: 'syz.4.17950': attribute type 3 has an invalid length.
[ 2873.031364][T28064] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17950'.
[ 2877.809983][T28084] netlink: 'syz.1.17955': attribute type 41 has an invalid length.
[ 2878.130314][T28099] netlink: 'syz.3.17958': attribute type 10 has an invalid length.
[ 2878.232458][T28099] device veth0_macvtap left promiscuous mode
[ 2878.648579][T28110] device wlan1 left promiscuous mode
[ 2878.712338][T28110] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17961'.
[ 2879.625725][T28133] netlink: 'syz.3.17969': attribute type 41 has an invalid length.
[ 2881.327600][T28151] netlink: 'syz.4.17975': attribute type 10 has an invalid length.
[ 2881.876425][T28151] device syz_tun entered promiscuous mode
[ 2881.950631][T28151] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2882.131973][T28159] netlink: 'syz.0.17977': attribute type 21 has an invalid length.
[ 2882.160517][T28159] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17977'.
[ 2882.174421][T28159] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17977'.
[ 2882.265159][T28166] netlink: 'syz.2.17980': attribute type 21 has an invalid length.
[ 2882.278985][T28166] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.17980'.
[ 2882.944095][T28181] netlink: 'syz.2.17986': attribute type 41 has an invalid length.
[ 2883.485574][T28201] netlink: 'syz.1.17999': attribute type 41 has an invalid length.
[ 2886.255301][T28222] netlink: 'syz.1.17997': attribute type 21 has an invalid length.
[ 2886.291033][T28222] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.17997'.
[ 2886.370917][T28228] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18009'.
[ 2886.385199][T28228] netlink: 18 bytes leftover after parsing attributes in process `syz.3.18009'.
[ 2886.396462][T28228] bond0: (slave bond_slave_0): Releasing backup interface
[ 2886.426057][T28228] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 2886.638191][T28233] netlink: 'syz.2.18001': attribute type 10 has an invalid length.
[ 2886.661252][T28233] bridge0: port 3(dummy0) entered disabled state
[ 2886.667892][T28233] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2886.721912][T28233] bridge0: port 3(dummy0) entered blocking state
[ 2886.728406][T28233] bridge0: port 3(dummy0) entered forwarding state
[ 2886.735288][T28233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2886.742531][T28233] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2886.788425][T28233] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2886.797626][T28234] netlink: 'syz.2.18001': attribute type 10 has an invalid length.
[ 2886.883048][T28238] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.18003'.
[ 2886.940580][T28238] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 2886.980104][T28238] CPU: 0 PID: 28238 Comm: syz.1.18003 Not tainted syzkaller #0
[ 2886.987709][T28238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2886.997792][T28238] Call Trace:
[ 2887.001099][T28238]  <TASK>
[ 2887.004056][T28238]  dump_stack_lvl+0x188/0x24e
[ 2887.008772][T28238]  ? show_regs_print_info+0x12/0x12
[ 2887.014018][T28238]  ? load_image+0x410/0x410
[ 2887.018577][T28238]  sysfs_warn_dup+0x8a/0xa0
[ 2887.023124][T28238]  sysfs_do_create_link_sd+0xc0/0x110
[ 2887.028542][T28238]  device_add+0x83b/0x1050
[ 2887.033006][T28238]  wiphy_register+0x1d8b/0x2aa0
[ 2887.037896][T28238]  ? cfg80211_event_work+0x40/0x40
[ 2887.043027][T28238]  ? minstrel_ht_alloc+0x894/0xa20
[ 2887.048161][T28238]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2887.054261][T28238]  ieee80211_register_hw+0x2e33/0x3b00
[ 2887.059741][T28238]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2887.065297][T28238]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2887.070871][T28238]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2887.076538][T28238]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2887.082452][T28238]  ? __debug_object_init+0xed/0x440
[ 2887.087667][T28238]  ? memset+0x1e/0x40
[ 2887.091672][T28238]  ? __hrtimer_init+0x189/0x270
[ 2887.096551][T28238]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2887.102291][T28238]  ? memcpy+0x3c/0x60
[ 2887.106294][T28238]  hwsim_new_radio_nl+0xab7/0xc90
[ 2887.111354][T28238]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2887.116936][T28238]  ? end_current_label_crit_section+0x170/0x170
[ 2887.123213][T28238]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2887.129132][T28238]  ? bpf_lsm_capable+0x5/0x10
[ 2887.133831][T28238]  ? security_capable+0x85/0xb0
[ 2887.138706][T28238]  genl_rcv_msg+0x601/0x790
[ 2887.143250][T28238]  ? lockdep_hardirqs_on+0x94/0x140
[ 2887.148474][T28238]  ? genl_bind+0x360/0x360
[ 2887.152913][T28238]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2887.159267][T28238]  netlink_rcv_skb+0x1ef/0x440
[ 2887.164041][T28238]  ? genl_bind+0x360/0x360
[ 2887.168472][T28238]  ? netlink_ack+0x1160/0x1160
[ 2887.173254][T28238]  ? down_read+0x1a8/0x2d0
[ 2887.177710][T28238]  genl_rcv+0x24/0x40
[ 2887.181718][T28238]  netlink_unicast+0x7ad/0x920
[ 2887.186506][T28238]  netlink_sendmsg+0x8ad/0xbd0
[ 2887.191299][T28238]  ? aa_sock_msg_perm+0xa4/0x150
[ 2887.196253][T28238]  ? netlink_getsockopt+0x550/0x550
[ 2887.201468][T28238]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2887.207039][T28238]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2887.212345][T28238]  ? security_socket_sendmsg+0x7c/0xa0
[ 2887.217827][T28238]  ? netlink_getsockopt+0x550/0x550
[ 2887.223066][T28238]  ____sys_sendmsg+0x5ed/0x9a0
[ 2887.227862][T28238]  ? __sys_sendmsg_sock+0x30/0x30
[ 2887.232900][T28238]  ? __import_iovec+0x306/0x510
[ 2887.237797][T28238]  ? import_iovec+0x6f/0xa0
[ 2887.242332][T28238]  ___sys_sendmsg+0x2a2/0x360
[ 2887.247029][T28238]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2887.251851][T28238]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2887.256717][T28238]  ? ct_nmi_exit+0x145/0x1c0
[ 2887.261340][T28238]  ? __x64_sys_sendmsg+0x80/0x80
[ 2887.266305][T28238]  ? lockdep_hardirqs_on+0x94/0x140
[ 2887.271527][T28238]  do_syscall_64+0x4c/0xa0
[ 2887.275956][T28238]  ? clear_bhb_loop+0x60/0xb0
[ 2887.280653][T28238]  ? clear_bhb_loop+0x60/0xb0
[ 2887.285352][T28238]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2887.291254][T28238] RIP: 0033:0x7f5f0059e199
[ 2887.295686][T28238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2887.315300][T28238] RSP: 002b:00007f5f013e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2887.323743][T28238] RAX: ffffffffffffffda RBX: 00007f5f00825fa0 RCX: 00007f5f0059e199
[ 2887.331741][T28238] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[ 2887.339722][T28238] RBP: 00007f5f006350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2887.347705][T28238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2887.355690][T28238] R13: 00007f5f00826038 R14: 00007f5f00825fa0 R15: 00007fffac5188e8
[ 2887.363692][T28238]  </TASK>
[ 2890.663674][T28254] netlink: 'syz.3.18008': attribute type 41 has an invalid length.
[ 2890.852745][T28266] netlink: 91092 bytes leftover after parsing attributes in process `syz.2.18012'.
[ 2891.008311][T28280] netlink: 'syz.4.18016': attribute type 4 has an invalid length.
[ 2891.021125][T28281] netlink: 'syz.3.18015': attribute type 21 has an invalid length.
[ 2891.029704][T28281] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.18015'.
[ 2891.582426][T28285] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.18018'.
[ 2891.707838][T28296] FAULT_INJECTION: forcing a failure.
[ 2891.707838][T28296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2891.749161][T28289] netlink: 'syz.1.18020': attribute type 2 has an invalid length.
[ 2891.789404][T28296] CPU: 1 PID: 28296 Comm: syz.3.18022 Not tainted syzkaller #0
[ 2891.797006][T28296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2891.807091][T28296] Call Trace:
[ 2891.810402][T28296]  <TASK>
[ 2891.813364][T28296]  dump_stack_lvl+0x188/0x24e
[ 2891.818092][T28296]  ? show_regs_print_info+0x12/0x12
[ 2891.823327][T28296]  ? load_image+0x410/0x410
[ 2891.827880][T28296]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2891.832952][T28296]  ? ktime_get+0x7b/0x270
[ 2891.837332][T28296]  should_fail_ex+0x390/0x4c0
[ 2891.842071][T28296]  _copy_from_user+0x2c/0x170
[ 2891.846792][T28296]  __sys_bpf+0x2ea/0x780
[ 2891.851085][T28296]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2891.856523][T28296]  ? lock_chain_count+0x20/0x20
[ 2891.861417][T28296]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2891.867445][T28296]  __x64_sys_bpf+0x78/0x90
[ 2891.871907][T28296]  do_syscall_64+0x4c/0xa0
[ 2891.876362][T28296]  ? clear_bhb_loop+0x60/0xb0
[ 2891.881101][T28296]  ? clear_bhb_loop+0x60/0xb0
[ 2891.885843][T28296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2891.891767][T28296] RIP: 0033:0x7f611e59e199
[ 2891.896209][T28296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2891.915871][T28296] RSP: 002b:00007f611f443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2891.924324][T28296] RAX: ffffffffffffffda RBX: 00007f611e825fa0 RCX: 00007f611e59e199
[ 2891.932319][T28296] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 2891.940329][T28296] RBP: 00007f611f443090 R08: 0000000000000000 R09: 0000000000000000
[ 2891.940722][T28289] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.18020'.
[ 2891.948314][T28296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2891.948331][T28296] R13: 00007f611e826038 R14: 00007f611e825fa0 R15: 00007ffc3b587b38
[ 2891.948386][T28296]  </TASK>
[ 2892.014103][T28302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.030023][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.153167][T28302] netlink: 33 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.231773][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.333707][T28302] netlink: 33 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.398706][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.420234][T28302] netlink: 33 bytes leftover after parsing attributes in process `syz.2.18024'.
[ 2892.753497][T28321] netlink: 'syz.3.18025': attribute type 41 has an invalid length.
[ 2892.940432][T28325] netlink: 'syz.4.18027': attribute type 21 has an invalid length.
[ 2892.952992][T28325] netlink: 156 bytes leftover after parsing attributes in process `syz.4.18027'.
[ 2892.975588][T28330] netlink: 'syz.4.18027': attribute type 21 has an invalid length.
[ 2894.872164][T28334] netlink: 'syz.0.18029': attribute type 2 has an invalid length.
[ 2894.945910][T28338] netlink: 'syz.4.18031': attribute type 29 has an invalid length.
[ 2894.967255][T28338] netlink: 'syz.4.18031': attribute type 29 has an invalid length.
[ 2896.455125][T28394] validate_nla: 3 callbacks suppressed
[ 2896.455141][T28394] netlink: 'syz.2.18045': attribute type 10 has an invalid length.
[ 2896.543341][T28396] FAULT_INJECTION: forcing a failure.
[ 2896.543341][T28396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2896.557187][T28396] CPU: 1 PID: 28396 Comm: syz.1.18046 Not tainted syzkaller #0
[ 2896.564786][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2896.574879][T28396] Call Trace:
[ 2896.578188][T28396]  <TASK>
[ 2896.581149][T28396]  dump_stack_lvl+0x188/0x24e
[ 2896.585882][T28396]  ? show_regs_print_info+0x12/0x12
[ 2896.591102][T28396]  ? load_image+0x410/0x410
[ 2896.595639][T28396]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2896.600711][T28396]  should_fail_ex+0x390/0x4c0
[ 2896.605416][T28396]  _copy_from_user+0x2c/0x170
[ 2896.610123][T28396]  iovec_from_user+0x143/0x360
[ 2896.614930][T28396]  __import_iovec+0x6c/0x510
[ 2896.619554][T28396]  import_iovec+0x6f/0xa0
[ 2896.623905][T28396]  ___sys_sendmsg+0x252/0x360
[ 2896.628601][T28396]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2896.633393][T28396]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2896.638473][T28396]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2896.643344][T28396]  ? ct_nmi_exit+0x145/0x1c0
[ 2896.647953][T28396]  ? __x64_sys_sendmsg+0x80/0x80
[ 2896.652920][T28396]  ? lockdep_hardirqs_on+0x94/0x140
[ 2896.658138][T28396]  do_syscall_64+0x4c/0xa0
[ 2896.662576][T28396]  ? clear_bhb_loop+0x60/0xb0
[ 2896.667272][T28396]  ? clear_bhb_loop+0x60/0xb0
[ 2896.671970][T28396]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2896.677880][T28396] RIP: 0033:0x7f5f0059e199
[ 2896.682323][T28396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2896.701938][T28396] RSP: 002b:00007f5f013e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2896.710379][T28396] RAX: ffffffffffffffda RBX: 00007f5f00825fa0 RCX: 00007f5f0059e199
[ 2896.718362][T28396] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2896.726347][T28396] RBP: 00007f5f013e2090 R08: 0000000000000000 R09: 0000000000000000
[ 2896.734346][T28396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2896.742322][T28396] R13: 00007f5f00826038 R14: 00007f5f00825fa0 R15: 00007fffac5188e8
[ 2896.750324][T28396]  </TASK>
[ 2897.085713][T28414] netlink: 'syz.0.18054': attribute type 10 has an invalid length.
[ 2897.095355][T28414] __nla_validate_parse: 3 callbacks suppressed
[ 2897.095369][T28414] netlink: 55 bytes leftover after parsing attributes in process `syz.0.18054'.
[ 2897.236087][T28421] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18056'.
[ 2897.245548][T28421] device ipvlan0 entered promiscuous mode
[ 2897.612580][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2897.619184][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2898.138753][T28449] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18064'.
[ 2898.200934][T28449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2898.285586][T28449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2899.040158][T28471] netlink: 'syz.3.18071': attribute type 10 has an invalid length.
[ 2899.397042][T28488] : port 1(ip6gretap0) entered blocking state
[ 2899.419460][T28488] : port 1(ip6gretap0) entered disabled state
[ 2899.433270][T28488] device ip6gretap0 entered promiscuous mode
[ 2899.459410][T28485] device ip6gretap0 left promiscuous mode
[ 2899.466998][T28485] : port 1(ip6gretap0) entered disabled state
[ 2900.676209][T28465] delete_channel: no stack
[ 2901.443926][T28538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18090'.
[ 2902.430852][T28563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18097'.
[ 2902.487751][T28563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18097'.
[ 2902.512355][T28566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18097'.
[ 2902.586214][T28565] netlink: 'syz.0.18100': attribute type 41 has an invalid length.
[ 2902.615742][T28566] netlink: 'syz.1.18097': attribute type 21 has an invalid length.
[ 2902.652539][T28566] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18097'.
[ 2904.902658][T18081] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[ 2904.976965][T28583] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.18106'.
[ 2908.268921][T28613] netlink: 'syz.1.18115': attribute type 25 has an invalid length.
[ 2908.279911][T28613] netlink: 'syz.1.18115': attribute type 29 has an invalid length.
[ 2908.414928][T28618] netlink: 'syz.3.18116': attribute type 29 has an invalid length.
[ 2908.456960][T28618] netlink: 'syz.3.18116': attribute type 29 has an invalid length.
[ 2908.503131][T28624] netlink: 'syz.3.18116': attribute type 29 has an invalid length.
[ 2908.781140][T28636] syzkaller1: tun_chr_ioctl cmd 1074025694
[ 2908.795910][T28643] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 2908.819512][T28636] syzkaller1: tun_chr_ioctl cmd 2147767506
[ 2909.692100][T26859] tipc: Subscription rejected, illegal request
[ 2910.008965][T28660] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.18131'.
[ 2910.307207][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2910.322531][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2910.339123][ T8984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2910.352780][ T8984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2910.361303][ T8984] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2910.368756][ T8984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2910.663446][T25262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2910.722177][T28682] netlink: 'syz.4.18137': attribute type 10 has an invalid length.
[ 2910.741351][T28682] netlink: 'syz.4.18137': attribute type 4 has an invalid length.
[ 2910.768351][T28682] netlink: 116 bytes leftover after parsing attributes in process `syz.4.18137'.
[ 2910.786069][T28682] wlan1: mtu greater than device maximum
[ 2910.800245][T28682] team0: Device wlan1 failed to change mtu
[ 2910.842138][T25262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2910.884665][T28685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18139'.
[ 2910.912027][T28685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2910.981049][T28689] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18140'.
[ 2912.410231][T18081] Bluetooth: hci3: command 0x0409 tx timeout
[ 2913.722927][T25262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2913.796196][T28697] netlink: 'syz.2.18143': attribute type 10 has an invalid length.
[ 2913.984918][T25262] bond0: (slave netdevsim0): Releasing backup interface
[ 2914.003276][T25262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2914.358541][T28673] chnl_net:caif_netlink_parms(): no params data found
[ 2914.424644][T28718] netlink: 'syz.4.18148': attribute type 41 has an invalid length.
[ 2914.490261][T18081] Bluetooth: hci3: command 0x041b tx timeout
[ 2914.656197][T28673] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2914.674314][T28673] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2914.726871][T28673] device bridge_slave_0 entered promiscuous mode
[ 2914.840473][T28673] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2914.900559][T28673] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2914.908745][T28673] device bridge_slave_1 entered promiscuous mode
[ 2915.100154][T28735] netlink: 'syz.3.18150': attribute type 41 has an invalid length.
[ 2915.246344][T28673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2915.317096][T28673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2915.447666][T28673] team0: Port device team_slave_0 added
[ 2915.488899][T28673] team0: Port device team_slave_1 added
[ 2915.629342][T28673] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2915.646702][T28673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2915.703326][T28673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2915.734664][T28673] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2915.754657][T28673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2915.819042][T28673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2916.570221][T18081] Bluetooth: hci3: command 0x040f tx timeout
[ 2917.055336][T28673] device hsr_slave_0 entered promiscuous mode
[ 2917.072845][T28673] device hsr_slave_1 entered promiscuous mode
[ 2917.483952][T28750] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.18151'.
[ 2917.808147][T28764] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.18156'.
[ 2918.052681][T28764] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 2918.609336][T28790] netlink: 'syz.4.18161': attribute type 10 has an invalid length.
[ 2918.650225][T18081] Bluetooth: hci3: command 0x0419 tx timeout
[ 2921.729222][T28802] netlink: 'syz.2.18164': attribute type 41 has an invalid length.
[ 2921.947545][T28809] netlink: 'syz.4.18166': attribute type 11 has an invalid length.
[ 2922.001547][T28673] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2922.804013][T28673] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2922.828952][T28673] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2922.856713][T28673] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2923.038604][T28842] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18172'.
[ 2923.056924][T28842] netlink: 10 bytes leftover after parsing attributes in process `syz.2.18172'.
[ 2923.101335][T28842] bond0: (slave bond_slave_0): Releasing backup interface
[ 2923.454813][T28842] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 2924.269610][T28851] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18175'.
[ 2926.055110][T28857] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2926.072615][T28859] netlink: 'syz.3.18176': attribute type 10 has an invalid length.
[ 2926.322428][T25262] device hsr_slave_0 left promiscuous mode
[ 2926.334294][T25262] device hsr_slave_1 left promiscuous mode
[ 2926.350255][T25262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2926.376408][T28872] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.18180'.
[ 2926.386094][T25262] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2926.394734][T25262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2926.405951][T25262] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2926.414006][T25262] device bridge_slave_0 left promiscuous mode
[ 2926.436618][T25262] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2926.869265][T25262] device veth1_macvtap left promiscuous mode
[ 2926.875556][T25262] device veth1_vlan left promiscuous mode
[ 2928.370552][T25262] team0 (unregistering): Port device team_slave_1 removed
[ 2928.420793][T25262] team0 (unregistering): Port device team_slave_0 removed
[ 2928.469581][T25262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2928.595416][T25262] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2928.950449][T25262] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 2928.968521][T25262] bond0 (unregistering): Released all slaves
[ 2929.033940][T28673] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2929.188435][T28876] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18181'.
[ 2929.258564][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2929.311131][T23778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2929.346458][T28673] 8021q: adding VLAN 0 to HW filter on device team0
[ 2929.385663][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2929.452722][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2929.511397][T25288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2929.518597][T25288] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2929.560697][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2929.604719][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2929.623924][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2929.654494][T25288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2929.661677][T25288] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2929.678941][T28914] netlink: 'syz.1.18193': attribute type 29 has an invalid length.
[ 2929.726825][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2929.727564][T28910] delete_channel: no stack
[ 2929.752009][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2929.782157][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2929.814959][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2929.853366][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2929.879017][T28914] netlink: 'syz.1.18193': attribute type 29 has an invalid length.
[ 2929.890376][T28917] netlink: 'syz.1.18193': attribute type 29 has an invalid length.
[ 2929.917223][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2929.943982][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2929.973887][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2930.008877][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2930.037847][T28673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2930.068646][T28673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2930.105156][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2930.122700][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2930.592591][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2930.602443][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2930.620649][T28673] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2930.660371][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2930.670066][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2930.698708][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2930.710452][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2930.721415][T28673] device veth0_vlan entered promiscuous mode
[ 2930.737524][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2930.749775][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2930.762989][T28673] device veth1_vlan entered promiscuous mode
[ 2930.803396][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2930.820082][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2930.828685][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2930.844103][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2930.860756][T28673] device veth0_macvtap entered promiscuous mode
[ 2930.880125][T28673] device veth1_macvtap entered promiscuous mode
[ 2930.914588][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2930.932160][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2930.946127][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2930.969766][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2930.986536][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2930.997369][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2931.015587][T28673] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2931.025660][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2931.042759][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2931.055931][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2931.066115][T25260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2931.086148][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2931.099654][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2931.113499][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2931.127727][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2931.141951][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2931.158899][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2931.173380][T28673] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2931.191197][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2931.207419][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2931.221756][T28673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2931.237472][T28673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2931.247199][T28673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2931.262396][T28673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2932.482816][T26859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2932.539878][T26859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2932.603490][T26859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2932.647466][T25260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2932.671692][T25260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2932.704293][T25288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2932.761239][T28934] netlink: 'syz.2.18195': attribute type 2 has an invalid length.
[ 2932.769181][T28934] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18195'.
[ 2932.808346][T28937] netlink: 'syz.1.18197': attribute type 15 has an invalid length.
[ 2932.880363][T28937] netlink: 'syz.1.18197': attribute type 7 has an invalid length.
[ 2932.922433][T28937] netlink: 'syz.1.18197': attribute type 15 has an invalid length.
[ 2932.959927][T28937] netlink: 'syz.1.18197': attribute type 7 has an invalid length.
[ 2932.986644][T28937] netlink: 'syz.1.18197': attribute type 15 has an invalid length.
[ 2933.003510][T28937] netlink: 'syz.1.18197': attribute type 7 has an invalid length.
[ 2933.354192][T28950] FAULT_INJECTION: forcing a failure.
[ 2933.354192][T28950] name failslab, interval 1, probability 0, space 0, times 0
[ 2933.373605][T28950] CPU: 0 PID: 28950 Comm: syz.2.18199 Not tainted syzkaller #0
[ 2933.381217][T28950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2933.391302][T28950] Call Trace:
[ 2933.394614][T28950]  <TASK>
[ 2933.397572][T28950]  dump_stack_lvl+0x188/0x24e
[ 2933.402289][T28950]  ? show_regs_print_info+0x12/0x12
[ 2933.407529][T28950]  ? load_image+0x410/0x410
[ 2933.412082][T28950]  ? __might_sleep+0xd0/0xd0
[ 2933.416712][T28950]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2933.421776][T28950]  should_fail_ex+0x390/0x4c0
[ 2933.426505][T28950]  should_failslab+0x5/0x20
[ 2933.431041][T28950]  slab_pre_alloc_hook+0x59/0x300
[ 2933.436111][T28950]  kmem_cache_alloc_node+0x5a/0x310
[ 2933.441368][T28950]  ? __alloc_skb+0xf9/0x7d0
[ 2933.445916][T28950]  __alloc_skb+0xf9/0x7d0
[ 2933.450281][T28950]  netlink_sendmsg+0x654/0xbd0
[ 2933.455096][T28950]  ? netlink_getsockopt+0x550/0x550
[ 2933.460335][T28950]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2933.465930][T28950]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2933.471227][T28950]  ? security_socket_sendmsg+0x7c/0xa0
[ 2933.476713][T28950]  ? netlink_getsockopt+0x550/0x550
[ 2933.481930][T28950]  ____sys_sendmsg+0x5ed/0x9a0
[ 2933.486714][T28950]  ? __sys_sendmsg_sock+0x30/0x30
[ 2933.491762][T28950]  ? __import_iovec+0x306/0x510
[ 2933.496671][T28950]  ? import_iovec+0x6f/0xa0
[ 2933.501204][T28950]  ___sys_sendmsg+0x2a2/0x360
[ 2933.505902][T28950]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2933.510695][T28950]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2933.515756][T28950]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2933.520630][T28950]  ? __x64_sys_sendmsg+0x80/0x80
[ 2933.525595][T28950]  ? lockdep_hardirqs_on+0x94/0x140
[ 2933.530836][T28950]  do_syscall_64+0x4c/0xa0
[ 2933.535300][T28950]  ? clear_bhb_loop+0x60/0xb0
[ 2933.539987][T28950]  ? clear_bhb_loop+0x60/0xb0
[ 2933.544675][T28950]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2933.550604][T28950] RIP: 0033:0x7ffab299e199
[ 2933.555031][T28950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2933.574644][T28950] RSP: 002b:00007ffab37ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2933.583069][T28950] RAX: ffffffffffffffda RBX: 00007ffab2c25fa0 RCX: 00007ffab299e199
[ 2933.591055][T28950] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2933.599051][T28950] RBP: 00007ffab37ab090 R08: 0000000000000000 R09: 0000000000000000
[ 2933.607027][T28950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2933.615019][T28950] R13: 00007ffab2c26038 R14: 00007ffab2c25fa0 R15: 00007ffeeed60738
[ 2933.623015][T28950]  </TASK>
[ 2934.117204][T28957] : port 1(ip6gretap0) entered blocking state
[ 2934.147549][T28957] : port 1(ip6gretap0) entered disabled state
[ 2934.168728][T28957] device ip6gretap0 entered promiscuous mode
[ 2936.079162][T28968] validate_nla: 3 callbacks suppressed
[ 2936.079185][T28968] netlink: 'syz.4.18203': attribute type 10 has an invalid length.
[ 2936.106712][T28968] netlink: 55 bytes leftover after parsing attributes in process `syz.4.18203'.
[ 2936.130060][T28970] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18204'.
[ 2936.139435][T28970] device ipvlan0 entered promiscuous mode
[ 2936.278806][T28977] netlink: 'syz.0.18206': attribute type 21 has an invalid length.
[ 2936.333815][T28977] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2936.355705][T28977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2936.362990][T28977] IPv6: NLM_F_CREATE should be set when creating new route
[ 2936.370302][T28977] IPv6: NLM_F_CREATE should be set when creating new route
[ 2936.498872][T28979] netlink: 144 bytes leftover after parsing attributes in process `syz.0.18206'.
[ 2937.134350][T28979] team0: Port device team_slave_0 removed
[ 2937.164423][T28979] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 2937.209174][T28992] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18210'.
[ 2937.371131][T28996] netlink: 'syz.0.18212': attribute type 29 has an invalid length.
[ 2939.452963][T28994] netlink: 'syz.1.18211': attribute type 10 has an invalid length.
[ 2939.465878][T28996] netlink: 'syz.0.18212': attribute type 29 has an invalid length.
[ 2939.634418][T18081] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 2939.683705][T29010] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.18214'.
[ 2939.776097][T29010] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 2939.859512][T29010] CPU: 0 PID: 29010 Comm: syz.2.18214 Not tainted syzkaller #0
[ 2939.867125][T29010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2939.877214][T29010] Call Trace:
[ 2939.880527][T29010]  <TASK>
[ 2939.883500][T29010]  dump_stack_lvl+0x188/0x24e
[ 2939.888224][T29010]  ? show_regs_print_info+0x12/0x12
[ 2939.893458][T29010]  ? load_image+0x410/0x410
[ 2939.898012][T29010]  sysfs_warn_dup+0x8a/0xa0
[ 2939.902557][T29010]  sysfs_do_create_link_sd+0xc0/0x110
[ 2939.907981][T29010]  device_add+0x83b/0x1050
[ 2939.912432][T29010]  wiphy_register+0x1d8b/0x2aa0
[ 2939.917316][T29010]  ? cfg80211_event_work+0x40/0x40
[ 2939.922442][T29010]  ? minstrel_ht_alloc+0x894/0xa20
[ 2939.927594][T29010]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2939.933688][T29010]  ieee80211_register_hw+0x2e33/0x3b00
[ 2939.939172][T29010]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2939.944745][T29010]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2939.950317][T29010]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2939.955969][T29010]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2939.961888][T29010]  ? __debug_object_init+0xed/0x440
[ 2939.967114][T29010]  ? memset+0x1e/0x40
[ 2939.971132][T29010]  ? __hrtimer_init+0x189/0x270
[ 2939.976013][T29010]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2939.981759][T29010]  ? memcpy+0x3c/0x60
[ 2939.985773][T29010]  hwsim_new_radio_nl+0xab7/0xc90
[ 2939.990846][T29010]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2939.996421][T29010]  ? end_current_label_crit_section+0x170/0x170
[ 2940.002700][T29010]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2940.008652][T29010]  ? bpf_lsm_capable+0x5/0x10
[ 2940.013354][T29010]  ? security_capable+0x85/0xb0
[ 2940.018225][T29010]  genl_rcv_msg+0x601/0x790
[ 2940.022756][T29010]  ? lock_chain_count+0x20/0x20
[ 2940.027640][T29010]  ? genl_bind+0x360/0x360
[ 2940.032093][T29010]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2940.038464][T29010]  netlink_rcv_skb+0x1ef/0x440
[ 2940.043246][T29010]  ? genl_bind+0x360/0x360
[ 2940.047694][T29010]  ? netlink_ack+0x1160/0x1160
[ 2940.052482][T29010]  ? down_read+0x1a8/0x2d0
[ 2940.056919][T29010]  genl_rcv+0x24/0x40
[ 2940.060920][T29010]  netlink_unicast+0x7ad/0x920
[ 2940.065712][T29010]  netlink_sendmsg+0x8ad/0xbd0
[ 2940.070499][T29010]  ? netlink_getsockopt+0x550/0x550
[ 2940.075734][T29010]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2940.081316][T29010]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2940.086612][T29010]  ? security_socket_sendmsg+0x7c/0xa0
[ 2940.092106][T29010]  ? netlink_getsockopt+0x550/0x550
[ 2940.097321][T29010]  ____sys_sendmsg+0x5ed/0x9a0
[ 2940.102114][T29010]  ? __sys_sendmsg_sock+0x30/0x30
[ 2940.107162][T29010]  ? __import_iovec+0x306/0x510
[ 2940.112046][T29010]  ? import_iovec+0x6f/0xa0
[ 2940.116571][T29010]  ___sys_sendmsg+0x2a2/0x360
[ 2940.121271][T29010]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2940.126093][T29010]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2940.130984][T29010]  ? __x64_sys_sendmsg+0x80/0x80
[ 2940.135946][T29010]  ? lockdep_hardirqs_on+0x94/0x140
[ 2940.141163][T29010]  do_syscall_64+0x4c/0xa0
[ 2940.145596][T29010]  ? clear_bhb_loop+0x60/0xb0
[ 2940.150292][T29010]  ? clear_bhb_loop+0x60/0xb0
[ 2940.154985][T29010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2940.160922][T29010] RIP: 0033:0x7ffab299e199
[ 2940.165356][T29010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2940.184972][T29010] RSP: 002b:00007ffab378a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2940.193399][T29010] RAX: ffffffffffffffda RBX: 00007ffab2c26090 RCX: 00007ffab299e199
[ 2940.201383][T29010] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2940.209367][T29010] RBP: 00007ffab2a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2940.217364][T29010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2940.225360][T29010] R13: 00007ffab2c26128 R14: 00007ffab2c26090 R15: 00007ffeeed60738
[ 2940.233354][T29010]  </TASK>
[ 2942.641724][T29085] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2942.831671][T29096] netlink: 'syz.1.18244': attribute type 4 has an invalid length.
[ 2942.867258][T29097] netlink: 'syz.2.18245': attribute type 10 has an invalid length.
[ 2942.900025][T29097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18245'.
[ 2943.035171][T29097] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2945.952361][T29113] tipc: Started in network mode
[ 2945.958888][T29113] tipc: Node identity 9215a268, cluster identity 4711
[ 2946.002226][T29113] tipc: Node number set to 2450891368
[ 2946.089345][T29118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18251'.
[ 2946.104724][T29118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18251'.
[ 2946.126038][T29118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18251'.
[ 2946.175543][T29118] netlink: 'syz.0.18251': attribute type 21 has an invalid length.
[ 2946.189036][T29118] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18251'.
[ 2946.428861][T29130] netlink: 'syz.2.18255': attribute type 10 has an invalid length.
[ 2946.480516][T29142] netlink: 'syz.2.18255': attribute type 10 has an invalid length.
[ 2947.085003][T29154] netlink: 'syz.0.18259': attribute type 2 has an invalid length.
[ 2947.130071][T29154] netlink: 'syz.0.18259': attribute type 8 has an invalid length.
[ 2947.217320][T29154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18259'.
[ 2947.308909][T29149] netlink: 'syz.0.18259': attribute type 2 has an invalid length.
[ 2947.414994][T29149] netlink: 'syz.0.18259': attribute type 8 has an invalid length.
[ 2947.483786][T29149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18259'.
[ 2949.998470][T29148] delete_channel: no stack
[ 2950.145211][T29168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18263'.
[ 2950.262543][T29175] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.18266'.
[ 2950.290085][T29175] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[ 2950.366955][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18267'.
[ 2950.433479][T29182] netlink: 'syz.1.18267': attribute type 4 has an invalid length.
[ 2950.890306][ T8984] Bluetooth: hci2: command 0x0406 tx timeout
[ 2951.337587][T29206] netlink: 'syz.3.18275': attribute type 2 has an invalid length.
[ 2951.369932][T29206] netlink: 'syz.3.18275': attribute type 8 has an invalid length.
[ 2951.444913][T29206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18275'.
[ 2951.510494][T29208] netlink: 'syz.3.18275': attribute type 2 has an invalid length.
[ 2951.521939][T29208] netlink: 'syz.3.18275': attribute type 8 has an invalid length.
[ 2951.530410][T29208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18275'.
[ 2951.602925][T29210] sctp: [Deprecated]: syz.0.18276 (pid 29210) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2951.602925][T29210] Use struct sctp_sack_info instead
[ 2951.859562][T29216] netlink: 164 bytes leftover after parsing attributes in process `syz.0.18277'.
[ 2953.580683][T29247] netlink: 'syz.2.18289': attribute type 10 has an invalid length.
[ 2953.724251][T29254] netlink: 'syz.4.18290': attribute type 21 has an invalid length.
[ 2953.734933][T29254] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18290'.
[ 2953.764631][T29254] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18290'.
[ 2954.010993][T29218] delete_channel: no stack
[ 2954.059985][T29259] netlink: 'syz.4.18291': attribute type 10 has an invalid length.
[ 2954.069025][T29257] netlink: 'syz.2.18292': attribute type 27 has an invalid length.
[ 2954.082982][T29257] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18292'.
[ 2954.502258][T29265] netlink: 'syz.2.18293': attribute type 2 has an invalid length.
[ 2954.534482][T29265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18293'.
[ 2954.916796][T29292] FAULT_INJECTION: forcing a failure.
[ 2954.916796][T29292] name failslab, interval 1, probability 0, space 0, times 0
[ 2954.988854][T29292] CPU: 1 PID: 29292 Comm: syz.0.18305 Not tainted syzkaller #0
[ 2954.996465][T29292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2955.006548][T29292] Call Trace:
[ 2955.009849][T29292]  <TASK>
[ 2955.012816][T29292]  dump_stack_lvl+0x188/0x24e
[ 2955.017548][T29292]  ? show_regs_print_info+0x12/0x12
[ 2955.022791][T29292]  ? load_image+0x410/0x410
[ 2955.027339][T29292]  ? __might_sleep+0xd0/0xd0
[ 2955.031974][T29292]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2955.037063][T29292]  should_fail_ex+0x390/0x4c0
[ 2955.041789][T29292]  should_failslab+0x5/0x20
[ 2955.046323][T29292]  slab_pre_alloc_hook+0x59/0x300
[ 2955.051387][T29292]  ? vmemdup_user+0x45/0x1d0
[ 2955.056025][T29292]  __kmem_cache_alloc_node+0x4f/0x270
[ 2955.061451][T29292]  ? vmemdup_user+0x45/0x1d0
[ 2955.066075][T29292]  __kmalloc_node+0xa2/0x240
[ 2955.070692][T29292]  vmemdup_user+0x45/0x1d0
[ 2955.075162][T29292]  map_get_next_key+0x21d/0x620
[ 2955.080048][T29292]  ? bpf_lsm_bpf+0x5/0x10
[ 2955.084428][T29292]  __sys_bpf+0x466/0x780
[ 2955.088709][T29292]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2955.094129][T29292]  ? lock_chain_count+0x20/0x20
[ 2955.099041][T29292]  __x64_sys_bpf+0x78/0x90
[ 2955.103485][T29292]  do_syscall_64+0x4c/0xa0
[ 2955.107948][T29292]  ? clear_bhb_loop+0x60/0xb0
[ 2955.112663][T29292]  ? clear_bhb_loop+0x60/0xb0
[ 2955.117379][T29292]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2955.123304][T29292] RIP: 0033:0x7f273c79e199
[ 2955.127753][T29292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2955.147387][T29292] RSP: 002b:00007f273a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2955.155833][T29292] RAX: ffffffffffffffda RBX: 00007f273ca25fa0 RCX: 00007f273c79e199
[ 2955.163833][T29292] RDX: 0000000000000020 RSI: 0000200000000d00 RDI: 0000000000000004
[ 2955.171865][T29292] RBP: 00007f273a9f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2955.179866][T29292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2955.187861][T29292] R13: 00007f273ca26038 R14: 00007f273ca25fa0 R15: 00007ffd915efe68
[ 2955.195863][T29292]  </TASK>
[ 2955.361848][T29300] delete_channel: no stack
[ 2955.603171][T29311] __nla_validate_parse: 1 callbacks suppressed
[ 2955.603190][T29311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18310'.
[ 2956.202952][T29327] validate_nla: 4 callbacks suppressed
[ 2956.202990][T29327] netlink: 'syz.2.18315': attribute type 41 has an invalid length.
[ 2957.244596][T20036] bond0: (slave syz_tun): Releasing backup interface
[ 2957.254590][T18081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2957.267893][T18081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2957.275890][T18081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2957.284632][T18081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2957.297883][T18081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2957.306079][T18081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2957.317858][T29351] netlink: 'syz.1.18323': attribute type 10 has an invalid length.
[ 2957.346489][T29304] delete_channel: no stack
[ 2957.410498][T29351] netlink: 'syz.1.18323': attribute type 10 has an invalid length.
[ 2957.801388][T29360] netlink: 'syz.2.18326': attribute type 3 has an invalid length.
[ 2957.930885][T29360] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18326'.
[ 2959.054368][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2959.060850][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2959.370065][ T8984] Bluetooth: hci0: command 0x0409 tx timeout
[ 2960.426460][T28478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2960.532876][T28478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2960.609678][T29343] chnl_net:caif_netlink_parms(): no params data found
[ 2960.737061][T28478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2960.821386][T29377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18330'.
[ 2960.870517][T28478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2960.962627][T29343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2960.987659][T29343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2961.014880][T29343] device bridge_slave_0 entered promiscuous mode
[ 2961.057743][T29343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2961.076316][T29343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2961.088013][T29343] device bridge_slave_1 entered promiscuous mode
[ 2961.187514][T29343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2961.229709][T29343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2961.328498][T29343] team0: Port device team_slave_0 added
[ 2961.370969][T29343] team0: Port device team_slave_1 added
[ 2961.450500][ T8984] Bluetooth: hci0: command 0x041b tx timeout
[ 2961.885637][T29343] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2961.893163][T29343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2961.964207][T29343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2961.996493][T29343] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2962.043468][T29343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2962.106310][T29343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2962.551430][T29343] device hsr_slave_0 entered promiscuous mode
[ 2962.586621][T29343] device hsr_slave_1 entered promiscuous mode
[ 2962.641911][T29343] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2962.722815][T29343] Cannot create hsr debugfs directory
[ 2962.870751][T28478] device .*! left promiscuous mode
[ 2962.950094][T28478] tipc: Left network mode
[ 2963.156417][T29428] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.18346'.
[ 2963.540525][ T8984] Bluetooth: hci0: command 0x040f tx timeout
[ 2963.651871][T29450] netlink: 'syz.2.18362': attribute type 29 has an invalid length.
[ 2964.173737][T29435] netlink: 'syz.1.18348': attribute type 22 has an invalid length.
[ 2964.185335][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18348'.
[ 2964.229357][T29450] netlink: 'syz.2.18362': attribute type 29 has an invalid length.
[ 2964.287883][T29451] netlink: 'syz.2.18362': attribute type 29 has an invalid length.
[ 2964.496575][T29462] netlink: 'syz.1.18354': attribute type 10 has an invalid length.
[ 2964.684757][T29464] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18355'.
[ 2965.218005][T29343] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2965.275326][T29343] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2965.420828][T29343] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2965.455700][T29343] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2965.610009][ T8984] Bluetooth: hci0: command 0x0419 tx timeout
[ 2965.871476][T28478] team0: Port device wlan1 removed
[ 2965.964952][T29343] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2966.066951][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2966.104429][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2966.149051][T29343] 8021q: adding VLAN 0 to HW filter on device team0
[ 2966.461227][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2966.504313][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2966.574321][T28081] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2966.581534][T28081] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2966.590612][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2966.617629][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2966.628763][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2966.643491][T29521] netlink: 'syz.3.18368': attribute type 2 has an invalid length.
[ 2966.679376][T29521] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18368'.
[ 2966.698821][T28081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2966.706011][T28081] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2966.796289][T28478] device hsr_slave_0 left promiscuous mode
[ 2966.809053][T28478] device hsr_slave_1 left promiscuous mode
[ 2966.845184][T28478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2966.880947][T28478] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2966.906871][T28478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2966.919959][T28478] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2966.968068][T28478] device veth1_macvtap left promiscuous mode
[ 2967.567943][T28478] team0 (unregistering): Port device team_slave_1 removed
[ 2967.612445][T28478] team0 (unregistering): Port device team_slave_0 removed
[ 2967.653853][T28478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2967.968373][T28478] bond0 (unregistering): Released all slaves
[ 2968.014609][T29526] netlink: 'syz.0.18369': attribute type 4 has an invalid length.
[ 2968.024124][T29525] netlink: 'syz.3.18371': attribute type 10 has an invalid length.
[ 2968.071041][T29525] team0: Device wg1 is of different type
[ 2968.109279][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2968.130787][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2968.149677][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2968.179161][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2968.195888][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2968.205385][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2968.287826][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2968.305147][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2968.380246][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2968.420374][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2968.463703][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2968.513666][T29343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2969.152946][T29560] netlink: 830 bytes leftover after parsing attributes in process `syz.3.18383'.
[ 2969.333050][T29566] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18384'.
[ 2969.420589][T29567] netlink: 128 bytes leftover after parsing attributes in process `syz.3.18385'.
[ 2969.449214][T29567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2969.477497][T29567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2969.561848][T23768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2969.569351][T23768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2969.597587][T29343] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2969.801744][T29591] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.18391'.
[ 2969.868989][T29589] netlink: 'syz.1.18392': attribute type 10 has an invalid length.
[ 2970.175074][T29604] netlink: 'syz.0.18393': attribute type 10 has an invalid length.
[ 2970.259121][T29604] team0: Port device macvlan0 added
[ 2970.281159][T29608] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18397'.
[ 2970.528242][T29619] netlink: 'syz.0.18400': attribute type 10 has an invalid length.
[ 2970.647018][T29619] netlink: 55 bytes leftover after parsing attributes in process `syz.0.18400'.
[ 2970.756466][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2970.785812][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2970.911692][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2970.931122][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2970.981944][T29343] device veth0_vlan entered promiscuous mode
[ 2970.992439][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2971.032451][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2971.086451][T29343] device veth1_vlan entered promiscuous mode
[ 2971.193478][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2971.240813][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2971.261046][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2971.281456][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2971.294547][T29343] device veth0_macvtap entered promiscuous mode
[ 2971.325963][T29343] device veth1_macvtap entered promiscuous mode
[ 2971.341260][T29629] netlink: 'syz.0.18404': attribute type 3 has an invalid length.
[ 2971.349144][T29629] netlink: 'syz.0.18404': attribute type 1 has an invalid length.
[ 2971.379291][T29343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2971.394296][T29629] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.18404'.
[ 2971.404221][T29343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2971.432578][T29343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2971.479347][T29343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2971.507568][T29343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2971.529339][T29343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2971.566067][T29343] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2971.593793][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2971.606093][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2971.616659][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2971.632165][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2971.686665][T29343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2971.705303][T29343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2971.717465][T29343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2971.732413][T29343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2971.743580][T29343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2971.757337][T29343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2971.783735][T29343] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2971.795528][T29642] netlink: 'syz.3.18407': attribute type 10 has an invalid length.
[ 2971.805335][T29642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2972.190979][T29642] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2972.227709][T29642] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 2972.257950][T23768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2972.276769][T23768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2972.303569][T29343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2972.321493][T29343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2972.349937][T29343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2972.373393][T29343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2972.528640][T28478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2972.550069][T28478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2972.578281][T23768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2972.616458][T28478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2972.630072][T28478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2972.659327][T26859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2973.339462][T29683] netlink: 'syz.1.18420': attribute type 5 has an invalid length.
[ 2973.585703][T29687] netlink: 'syz.3.18423': attribute type 10 has an invalid length.
[ 2976.341579][T29707] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.18429'.
[ 2976.399548][T29707] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 2976.440016][T29707] CPU: 0 PID: 29707 Comm: syz.2.18429 Not tainted syzkaller #0
[ 2976.447624][T29707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2976.457719][T29707] Call Trace:
[ 2976.461024][T29707]  <TASK>
[ 2976.463991][T29707]  dump_stack_lvl+0x188/0x24e
[ 2976.468708][T29707]  ? show_regs_print_info+0x12/0x12
[ 2976.473939][T29707]  ? load_image+0x410/0x410
[ 2976.478531][T29707]  sysfs_warn_dup+0x8a/0xa0
[ 2976.483070][T29707]  sysfs_do_create_link_sd+0xc0/0x110
[ 2976.488468][T29707]  device_add+0x83b/0x1050
[ 2976.492916][T29707]  wiphy_register+0x1d8b/0x2aa0
[ 2976.497794][T29707]  ? cfg80211_event_work+0x40/0x40
[ 2976.502918][T29707]  ? minstrel_ht_alloc+0x894/0xa20
[ 2976.508048][T29707]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2976.514156][T29707]  ieee80211_register_hw+0x2e33/0x3b00
[ 2976.519639][T29707]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2976.525218][T29707]  ? ieee80211_register_hw+0xf61/0x3b00
[ 2976.530808][T29707]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2976.536474][T29707]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2976.542393][T29707]  ? __debug_object_init+0xed/0x440
[ 2976.547620][T29707]  ? memset+0x1e/0x40
[ 2976.551626][T29707]  ? __hrtimer_init+0x189/0x270
[ 2976.556502][T29707]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2976.562248][T29707]  ? memcpy+0x3c/0x60
[ 2976.566241][T29707]  hwsim_new_radio_nl+0xab7/0xc90
[ 2976.571319][T29707]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2976.576886][T29707]  ? end_current_label_crit_section+0x170/0x170
[ 2976.583143][T29707]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2976.589068][T29707]  ? bpf_lsm_capable+0x5/0x10
[ 2976.593761][T29707]  ? security_capable+0x85/0xb0
[ 2976.598623][T29707]  genl_rcv_msg+0x601/0x790
[ 2976.603145][T29707]  ? lock_chain_count+0x20/0x20
[ 2976.608027][T29707]  ? genl_bind+0x360/0x360
[ 2976.612455][T29707]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2976.618801][T29707]  netlink_rcv_skb+0x1ef/0x440
[ 2976.623575][T29707]  ? genl_bind+0x360/0x360
[ 2976.628007][T29707]  ? netlink_ack+0x1160/0x1160
[ 2976.632810][T29707]  ? down_read+0x1a8/0x2d0
[ 2976.637283][T29707]  genl_rcv+0x24/0x40
[ 2976.641296][T29707]  netlink_unicast+0x7ad/0x920
[ 2976.646091][T29707]  netlink_sendmsg+0x8ad/0xbd0
[ 2976.650880][T29707]  ? netlink_getsockopt+0x550/0x550
[ 2976.656099][T29707]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2976.661677][T29707]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2976.666981][T29707]  ? security_socket_sendmsg+0x7c/0xa0
[ 2976.672464][T29707]  ? netlink_getsockopt+0x550/0x550
[ 2976.677703][T29707]  ____sys_sendmsg+0x5ed/0x9a0
[ 2976.682487][T29707]  ? __sys_sendmsg_sock+0x30/0x30
[ 2976.687572][T29707]  ? __import_iovec+0x306/0x510
[ 2976.692463][T29707]  ? import_iovec+0x6f/0xa0
[ 2976.697002][T29707]  ___sys_sendmsg+0x2a2/0x360
[ 2976.701705][T29707]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2976.706515][T29707]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2976.711382][T29707]  ? __x64_sys_sendmsg+0x80/0x80
[ 2976.716352][T29707]  ? lockdep_hardirqs_on+0x94/0x140
[ 2976.721605][T29707]  do_syscall_64+0x4c/0xa0
[ 2976.726040][T29707]  ? clear_bhb_loop+0x60/0xb0
[ 2976.730734][T29707]  ? clear_bhb_loop+0x60/0xb0
[ 2976.735429][T29707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2976.741361][T29707] RIP: 0033:0x7ffab299e199
[ 2976.745792][T29707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2976.765413][T29707] RSP: 002b:00007ffab378a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2976.773836][T29707] RAX: ffffffffffffffda RBX: 00007ffab2c26090 RCX: 00007ffab299e199
[ 2976.781819][T29707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2976.789816][T29707] RBP: 00007ffab2a350b8 R08: 0000000000000000 R09: 0000000000000000
[ 2976.797798][T29707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2976.805786][T29707] R13: 00007ffab2c26128 R14: 00007ffab2c26090 R15: 00007ffeeed60738
[ 2976.813784][T29707]  </TASK>
[ 2979.106455][T29776] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18446'.
[ 2979.134469][T29776] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2979.171187][T29776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2979.980184][T29764] delete_channel: no stack
[ 2980.224369][T29784] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.18450'.
[ 2980.229550][T29781] delete_channel: no stack
[ 2980.268596][T29786] netlink: 'syz.2.18447': attribute type 10 has an invalid length.
[ 2980.277417][T29786] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.18447'.
[ 2980.505693][T29793] netlink: 'syz.0.18453': attribute type 4 has an invalid length.
[ 2980.573115][T29799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2980.607363][T29799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2980.629198][T29799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2980.646835][T29799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2980.657443][T29799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2980.676408][T29799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2981.748536][T29827] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.18462'.
[ 2981.805857][T29824] delete_channel: no stack
[ 2981.943890][T29832] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18462'.
[ 2981.980019][T29832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2982.074505][T29833] netlink: 'syz.3.18466': attribute type 10 has an invalid length.
[ 2982.179440][T29841] netlink: 'syz.1.18468': attribute type 25 has an invalid length.
[ 2982.195440][T29841] netlink: 'syz.1.18468': attribute type 29 has an invalid length.
[ 2982.249452][T29847] netlink: 'syz.2.18470': attribute type 29 has an invalid length.
[ 2982.293430][T29847] netlink: 'syz.2.18470': attribute type 29 has an invalid length.
[ 2982.949820][T29866] netlink: 'syz.0.18477': attribute type 2 has an invalid length.
[ 2983.019602][T29866] netlink: 10 bytes leftover after parsing attributes in process `syz.0.18477'.
[ 2983.864850][T29885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18481'.
[ 2984.299980][T29879] delete_channel: no stack
[ 2985.921658][T29894] netlink: 'syz.2.18483': attribute type 10 has an invalid length.
[ 2985.929650][T29894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18483'.
[ 2986.396858][T29916] netlink: 'syz.0.18491': attribute type 41 has an invalid length.
[ 2986.628590][T29926] mac80211_hwsim hwsim150 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2988.314358][T29949] netlink: 'syz.0.18500': attribute type 4 has an invalid length.
[ 2988.593008][T29962] device syzkaller0 entered promiscuous mode
[ 2988.699091][T29969] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18507'.
[ 2988.930171][T25295] wlan1: Trigger new scan to find an IBSS to join
[ 2990.537057][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.556816][T29984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.581402][T29984] netlink: 33 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.596055][T29984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.606519][T29984] netlink: 33 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.685314][T29984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.744557][T29984] netlink: 33 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2990.816102][T29993] netlink: 14098 bytes leftover after parsing attributes in process `syz.1.18512'.
[ 2991.192508][T30010] netlink: 'syz.1.18518': attribute type 21 has an invalid length.
[ 2991.219523][T30010] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18518'.
[ 2991.425233][T30015] netlink: 'syz.2.18520': attribute type 25 has an invalid length.
[ 2991.456352][T30015] netlink: 'syz.2.18520': attribute type 9 has an invalid length.
[ 2991.822595][T30018] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 2991.875598][T30018] netlink: 'syz.2.18521': attribute type 10 has an invalid length.
[ 2992.066007][T30026] netlink: 'syz.3.18525': attribute type 4 has an invalid length.
[ 2992.662282][T30062] FAULT_INJECTION: forcing a failure.
[ 2992.662282][T30062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2992.689851][T30062] CPU: 0 PID: 30062 Comm: syz.0.18539 Not tainted syzkaller #0
[ 2992.697458][T30062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2992.707539][T30062] Call Trace:
[ 2992.710844][T30062]  <TASK>
[ 2992.713797][T30062]  dump_stack_lvl+0x188/0x24e
[ 2992.718507][T30062]  ? show_regs_print_info+0x12/0x12
[ 2992.723755][T30062]  ? load_image+0x410/0x410
[ 2992.728320][T30062]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2992.733389][T30062]  should_fail_ex+0x390/0x4c0
[ 2992.738104][T30062]  _copy_from_user+0x2c/0x170
[ 2992.742819][T30062]  vmemdup_user+0xa8/0x1d0
[ 2992.747285][T30062]  map_get_next_key+0x21d/0x620
[ 2992.752178][T30062]  ? bpf_lsm_bpf+0x5/0x10
[ 2992.756560][T30062]  __sys_bpf+0x466/0x780
[ 2992.760848][T30062]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2992.766273][T30062]  ? lock_chain_count+0x20/0x20
[ 2992.771169][T30062]  __x64_sys_bpf+0x78/0x90
[ 2992.775623][T30062]  do_syscall_64+0x4c/0xa0
[ 2992.780084][T30062]  ? clear_bhb_loop+0x60/0xb0
[ 2992.784794][T30062]  ? clear_bhb_loop+0x60/0xb0
[ 2992.789496][T30062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2992.795419][T30062] RIP: 0033:0x7f273c79e199
[ 2992.799884][T30062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2992.819519][T30062] RSP: 002b:00007f273a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2992.827980][T30062] RAX: ffffffffffffffda RBX: 00007f273ca25fa0 RCX: 00007f273c79e199
[ 2992.836005][T30062] RDX: 0000000000000020 RSI: 0000200000000d00 RDI: 0000000000000004
[ 2992.844004][T30062] RBP: 00007f273a9f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2992.852009][T30062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2992.860000][T30062] R13: 00007f273ca26038 R14: 00007f273ca25fa0 R15: 00007ffd915efe68
[ 2992.868025][T30062]  </TASK>
[ 2992.890299][ T4645] wlan1: Trigger new scan to find an IBSS to join
[ 2992.988854][T30067] delete_channel: no stack
[ 2993.852558][T23776] wlan1: Creating new IBSS network, BSSID 00:8d:ff:00:00:00
[ 2996.468678][T30119] netlink: 'syz.0.18555': attribute type 10 has an invalid length.
Stopping sshd: stopped /usr/sbin/sshd (pid 4024)
OK
[ 2997.019905][T30119] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2997.027403][T30119] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2997.130619][T30119] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2997.137803][T30119] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2997.145312][T30119] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2997.152519][T30119] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2997.256114][T30119] bond0: (slave bridge0): Enslaving as an active interface with an up link
Stopping crond: [ 2997.304022][T30120] netlink: 'syz.0.18555': attribute type 10 has an invalid length.
stopped /usr/sbin/crond (pid 4011)
OK
[ 2997.648267][T30145] netlink: 'syz.2.18563': attribute type 29 has an invalid length.
[ 2997.684180][T30145] netlink: 'syz.2.18563': attribute type 29 has an invalid length.
[ 2997.709435][T30149] netlink: 'syz.2.18563': attribute type 29 has an invalid length.
[ 2997.735557][T30150] netlink: 'syz.2.18563': attribute type 29 has an invalid length.
[ 2997.757079][T30151] netlink: 'syz.2.18563': attribute type 29 has an invalid length.
[ 2998.039899][T30161] netlink: 'syz.4.18565': attribute type 2 has an invalid length.
[ 2998.048648][T30161] __nla_validate_parse: 2 callbacks suppressed
[ 2998.048662][T30161] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.18565'.
Stopping dhcpcd...
[ 2998.230310][T30170] netlink: 'syz.0.18570': attribute type 15 has an invalid length.
stopped /sbin/dhcpcd (pid 3932)
Stopping network: [ 3000.974082][T30207] FAULT_INJECTION: forcing a failure.
[ 3000.974082][T30207] name failslab, interval 1, probability 0, space 0, times 0
[ 3001.062416][T30207] CPU: 0 PID: 30207 Comm: syz.0.18575 Not tainted syzkaller #0
[ 3001.070035][T30207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 3001.080118][T30207] Call Trace:
[ 3001.083415][T30207]  <TASK>
[ 3001.086362][T30207]  dump_stack_lvl+0x188/0x24e
[ 3001.091067][T30207]  ? show_regs_print_info+0x12/0x12
[ 3001.096293][T30207]  ? load_image+0x410/0x410
[ 3001.100836][T30207]  ? __might_sleep+0xd0/0xd0
[ 3001.105446][T30207]  ? __lock_acquire+0x7ea0/0x7ea0
[ 3001.110491][T30207]  ? ct_irq_exit_irqson+0x113/0x170
[ 3001.115717][T30207]  should_fail_ex+0x390/0x4c0
[ 3001.120434][T30207]  should_failslab+0x5/0x20
[ 3001.124948][T30207]  slab_pre_alloc_hook+0x59/0x300
[ 3001.129990][T30207]  ? exc_page_fault+0x88/0x100
[ 3001.134777][T30207]  ? sk_prot_alloc+0xe7/0x210
[ 3001.139482][T30207]  __kmem_cache_alloc_node+0x4f/0x270
[ 3001.144872][T30207]  ? exc_page_fault+0x88/0x100
[ 3001.149665][T30207]  ? sk_prot_alloc+0xe7/0x210
[ 3001.154360][T30207]  __kmalloc+0xa3/0x240
[ 3001.158532][T30207]  sk_prot_alloc+0xe7/0x210
[ 3001.163073][T30207]  ? sk_alloc+0x20/0x330
[ 3001.167359][T30207]  sk_alloc+0x36/0x330
[ 3001.171456][T30207]  ? bpf_ctx_init+0x154/0x190
[ 3001.176167][T30207]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 3001.181572][T30207]  ? __fget_files+0x28/0x460
[ 3001.186199][T30207]  ? __fget_files+0x3fc/0x460
[ 3001.190913][T30207]  ? cpu_online+0xa0/0xa0
[ 3001.195262][T30207]  bpf_prog_test_run+0x31c/0x390
[ 3001.200240][T30207]  __sys_bpf+0x62b/0x780
[ 3001.204521][T30207]  ? bpf_link_show_fdinfo+0x380/0x380
[ 3001.209939][T30207]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 3001.216126][T30207]  __x64_sys_bpf+0x78/0x90
[ 3001.220565][T30207]  do_syscall_64+0x4c/0xa0
[ 3001.225011][T30207]  ? clear_bhb_loop+0x60/0xb0
[ 3001.229710][T30207]  ? clear_bhb_loop+0x60/0xb0
[ 3001.234411][T30207]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 3001.240335][T30207] RIP: 0033:0x7f273c79e199
[ 3001.244796][T30207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3001.264433][T30207] RSP: 002b:00007f273a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 3001.272872][T30207] RAX: ffffffffffffffda RBX: 00007f273ca25fa0 RCX: 00007f273c79e199
[ 3001.280882][T30207] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 3001.288886][T30207] RBP: 00007f273a9f6090 R08: 0000000000000000 R09: 0000000000000000
[ 3001.296885][T30207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3001.304882][T30207] R13: 00007f273ca26038 R14: 00007f273ca25fa0 R15: 00007ffd915efe68
[ 3001.312892][T30207]  </TASK>
[ 3001.370509][T30217] netlink: 91092 bytes leftover after parsing attributes in process `syz.2.18578'.
OK
Stopping iptables: OK
Stopping system message bus: done
Stopping klogd: OK
Stopping acpid: OK
Stopping syslogd: stopped /sbin/syslogd (pid 3620)
OK
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[ 3006.136644][T23776] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
Requesting system poweroff
[ 3006.254593][T23776] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3006.354250][T23776] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3006.445262][T23776] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3007.252974][T30248] kvm: exiting hardware virtualization
[ 3007.269580][T30248] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 3007.280360][T30248] ACPI: PM: Preparing to enter system sleep state S5
[ 3007.289185][T30248] reboot: Power down
serialport: VM disconnected.