last executing test programs:

4.94058085s ago: executing program 1 (id=7073):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8953, &(0x7f0000000640))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

4.856954272s ago: executing program 1 (id=7075):
getpid()
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x1c, &(0x7f00000008c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x3f00}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.799685033s ago: executing program 1 (id=7077):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

4.666468856s ago: executing program 1 (id=7081):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990788480015000500fef32702d3001500030001400200000901223fc6ab1bab4023b09aab56e3fab1f9950a1ca4007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5d", 0xd8}], 0x1}, 0x20048812)

4.510295621s ago: executing program 1 (id=7093):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x266}, 0x94)
socketpair(0x9, 0x3, 0x1000004, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480)='FREEZING\x00', 0x9)
r3 = openat$cgroup_type(r2, &(0x7f00000004c0), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000500), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f00000005c0), 0x12)
r6 = openat$cgroup_ro(r5, &(0x7f0000000600)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000640)=0x1, 0x12)
r7 = openat$cgroup_procs(r1, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000006c0), 0x12)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000780)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071106d00000000001ca00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48)

4.139714959s ago: executing program 1 (id=7087):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x8}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@int={0x5, 0x0, 0x0, 0x1, 0xb, 0x6f, 0x0, 0x7, 0x6}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @enum64={0x6, 0x7, 0x0, 0x13, 0x1, 0x8, [{0x1, 0xfffffffc, 0x1}, {0xf, 0xf}, {0x9, 0x5598, 0x7f}, {0x4, 0x8, 0x10000}, {0xa, 0xfffffff5, 0x8}, {0x2, 0x8001}, {0x1, 0x9b, 0x10001}]}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, &(0x7f0000000ac0)=""/187, 0x99, 0xbb, 0x0, 0x3, 0x10000}, 0x28) (async)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x10, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000dc0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000e00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000f00)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async, rerun: 64)
close(r6) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r7}, &(0x7f0000000fc0), &(0x7f0000001000)=r6}, 0x20) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x42}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0xa, 0x0, 0xa, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb52}}]}, &(0x7f0000000440)='syzkaller\x00', 0xffffff7f, 0x71, &(0x7f0000000680)=""/113, 0x41000, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000bc0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x1, 0x6}, 0x10, 0x30b63, 0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r5, r7, r8, 0xffffffffffffffff], &(0x7f0000001100)=[{0x1, 0x1, 0xb, 0x9}, {0x5, 0x1, 0xc, 0xc}], 0x10, 0x1}, 0x94) (async, rerun: 64)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x5}, 0x8800, 0x0, 0x0, 0x4, 0x0, 0x8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x6, 0x2000005, 0x3}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
socketpair(0x10, 0x3, 0x4, &(0x7f0000000000)) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8983, &(0x7f0000000080)) (async)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

2.612981376s ago: executing program 4 (id=7109):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f00000028c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002900)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002940)={r1})
sendmsg$unix(r2, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="3306ce61270ecdba52f42c08d75e66f05334b6a58e5da59aa06492ca2935d4a6ba447f1b58417fbd65cdc017c84b0f78352b083ebb10528d7948fb8ae0e9afee7a3c97377be43db6441eeaa24106ff7c095dda7a234faea20f7753693d55325a11e6455cbd8e741f8a82b4690aa3c0608702c3287b7ff9535727219ab282326947c939074308b5b53c05be055bc6385b0470e962efa3edf0923d93736d0d2cdc7a3c9023d23672aa3e02f3a6c660b7a317f13ea4f85a0f70d45155430ee3afb95cb18673e6f85e207c095e5f376226628163b90546a6aef4a6c3492f7d78b1e6370c022d808000cd2c8f9e", 0xeb}, {&(0x7f0000000100)="5725e3a08d078fa4302a8ce879147a6eeb8a2f508f09d5e758d5dc7d457d625f767ffbd48306f65c1a19a599e8de9bd896e5e467a4b3a6e14a1b6f9b3d12ff5665dcedfc4e787cfecc8714bdb75c7a7374f915af3fec9d9815c23c1995cfafa3e54b1c7f11deb7ab0930d0b997af8635d401266c033b08fdddc8993b484823c8e677d3e548bd8c2a299edf8f96ae298f98689b884a03768c8bbf55b2cc7f7e5775f4913827476066e8b5b7fbfd8e29d8dc8396f2b1d5c06d341931cee69a49b11797c30fc46b42a27dafc9548a402c4855972add828bd44046ff", 0xda}, {&(0x7f0000000200)="d4273f39da1d585bb0eab71ef6d88efab4b846ae27173c309200621041cfd161f5632ffe883dc80ce8ff536d082b31e335e850522a4175d1d0f9e6fa6751f823a21e787d1b3e0567870fe0aea9f6308870cc1db530ba8567f6a2f416091999f44d2605062f49f2923e9230673987902f8aacf3867d46c5672d1a531933610382796b2bf886351b5d0432d052264d4d3c80df178e1951ebe039ed84665b25fcc16e0dec252836dc119198ae987d2c2b06727df76fa1bc5201a0ff0ce88f6c9fa75efa3807cd93a4c70614c9190508513dad692d46f0312970a22c9e1c2dd3a29e3f942855e6e1716dd5246e104491853723f07b", 0xf3}, {&(0x7f0000000300)="086c82fab7c107327dbd95e4eda8dc9aee05fe0bcd949e270614a6565aa881a3575f9eb9a06d5bfc9693567af1a1b298009e2035ed53a37e6344ce028f0c79c5cdebde1e71feab0a1fd8a9959ff36a1b801ac92a0857ceb9a73c3185ce31d9cdc5784e806e012ab2558fbfd2f2803694738aae9d51e9bccd62c872c6d7eb", 0x7e}, {&(0x7f0000000380)="1f12bf92fd94c925c7a56404196a1dd3cdf7d14a7da51cda18fde757b528d6c52433eb8aa52ea492ca9fdf55968aeed5f1d795079d0cf50dda5d46a4d20a90da90b873e3c907196a3d05c8", 0x4b}, {&(0x7f0000000400)="9d0aca7d9fcb93fc4c23fc21d16e321c7dd390649f298b561e9e20ed504e78636f4307274e35ceede66b512474692a7c52e4ac75d30137a980d9cd5becd6f3df0ec6c6f8ad2455a197c82be6247c564465e4f17c8a978dea51f48592", 0x5c}, {&(0x7f0000000480)="3ab9ca9fc005a2552556fa25bc2f567438a54ad65f8d6906847165fe8d7f1a27cf888a392e819b21c7ff956005f1eb371e479e0cee0a71073c49ad7c6371bfa84f32297662069e64d9b9ac09480681", 0x4f}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x88, 0x40}, 0x20000000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000002980)={r1})

2.293075544s ago: executing program 0 (id=7114):
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000e00)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

2.197563316s ago: executing program 0 (id=7116):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x6890)
setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x42, &(0x7f00000000c0)=""/66, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0xfd, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x4, 0xf, 0x3}, {0x2, 0x4, 0x1, 0xb}, {0x0, 0x4, 0x3, 0xb}, {0x4, 0x3, 0x1, 0xc}, {0x1, 0x4, 0x9, 0x4}, {0x4, 0x2, 0xa, 0x1}, {0x1, 0x2, 0x3, 0x3}], 0x10, 0xfffeffff}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x99, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
socket$kcm(0x21, 0x2, 0xa) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x6890) (async)
setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x42, &(0x7f00000000c0)=""/66, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0xfd, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x4, 0xf, 0x3}, {0x2, 0x4, 0x1, 0xb}, {0x0, 0x4, 0x3, 0xb}, {0x4, 0x3, 0x1, 0xc}, {0x1, 0x4, 0x9, 0x4}, {0x4, 0x2, 0xa, 0x1}, {0x1, 0x2, 0x3, 0x3}], 0x10, 0xfffeffff}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x99, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async)

2.028819681s ago: executing program 0 (id=7118):
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000a80)="ea0189", 0x3}], 0x2, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000040000000c"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000610300000000000095ec78af6824a66d2b02231c064e4430cab2"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe3d}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0xe2, &(0x7f0000000f40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000001000)}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb0137fc1024e4590fcb001000000010000000050000000700000000005014345f723e60c106040000005f00"], &(0x7f00000010c0)=""/247, 0x2d, 0xf7, 0x0, 0x3ff, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000300000008000000e900000004040000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000000000050000000d000000000000000000000020000000bdee6743003fe0334ded9760618b40833a325778f59ee4229b746460bcd9f0df59df5868a6ccbc31b1470e7b4482d406435c285eaaeba4bb231bd7ce6b3d6b46278805c6e1eee50ec1e555ddd11f63246690"], 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @volatile={0x5}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x9, 0x97c, 0x9}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0x9}, @int={0x1, 0x0, 0x0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x0, 0x2}]}, @float={0x10, 0x0, 0x0, 0x10, 0x1c}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x9, [{0xd, 0x3, 0x1ff}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x61, 0x5f, 0x0, 0x5f, 0x5f]}}, &(0x7f0000001340)=""/133, 0xb2, 0x85, 0x1, 0x29800000, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0200e69a1a01df13b4744ea47d1f58c3d6000004000016ef00000001000000800000005af46a5b0045e3c64277215ffa33550b1d8eb27936cfccc4745c6d98b5342b0011040cf24f065f980500000000000100718e0bee4720a4269ce6b231105fdacb246610d0aef3871b5b0add6bd30148d527b00cae89aee466c375a75ca2e5e676a9544189c9bf72fd92f189fe42793686cc1a6132c0f2dad6a3541935c09659", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="00000000020000000200"/28], 0x50)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)
r8 = perf_event_open$cgroup(&(0x7f0000000740)={0x4, 0x80, 0x25, 0xf, 0x2, 0xe, 0x0, 0x6a2, 0x98902, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000007c0), 0x3}, 0x20156, 0x0, 0x5, 0x1, 0xe5, 0x2, 0x8, 0x0, 0x9, 0x0, 0xc2d9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1)
r9 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r9, 0x84, 0x14, &(0x7f0000000200), 0x8)
recvmsg$kcm(r7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/204, 0xcc}, 0x40002040)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061122a0000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0xb, 0x0, 0x2632, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="0600000000200000", @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="c3b1f3d201fdbe1ef016f38350c370711b5ed9e895d4d00d93134b65285b3f240b5c98705bd996542cccbf7f9a5dd207c8a4f7113dbfa2d4ee3e7355f953136ca6fc9ac3f5f388b003bbae0ea57c1c6690f2b5c102990843c671c95f", @ANYRES64=r11], 0x20)

1.938951543s ago: executing program 0 (id=7120):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801f8ff2420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0)

1.757019517s ago: executing program 4 (id=7121):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8103f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000006, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="285485ccf5c4756dfb2fd6fa6c5b20d462a1771bfb5a41274cb8987b81f37300b0157fae74", 0x25}, {&(0x7f00000000c0)="22d5f6426c4e9af12c97f8c07d98e38d5388d2f5258c1b4fd32ef9e2d387dabb16ac58b7a6ae914df3dfb0d26bddf4fa217dffa0b6480de7dd915be058ebd96a5521a7247f319ffdfcd8", 0x4a}, {&(0x7f0000000200)="aa996dc9eaa40995842c6384ddc6a73c9aab729bdbfa2aca4e74f77b84bfd4bef81487411c49998cdaf81b5e8ef5a0e642a2b07800343cd45bb0b85e28a0c7bbd401", 0x42}], 0x3}, 0x800)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8103f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x2, 0x200000000000006, 0x0) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) (async)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="285485ccf5c4756dfb2fd6fa6c5b20d462a1771bfb5a41274cb8987b81f37300b0157fae74", 0x25}, {&(0x7f00000000c0)="22d5f6426c4e9af12c97f8c07d98e38d5388d2f5258c1b4fd32ef9e2d387dabb16ac58b7a6ae914df3dfb0d26bddf4fa217dffa0b6480de7dd915be058ebd96a5521a7247f319ffdfcd8", 0x4a}, {&(0x7f0000000200)="aa996dc9eaa40995842c6384ddc6a73c9aab729bdbfa2aca4e74f77b84bfd4bef81487411c49998cdaf81b5e8ef5a0e642a2b07800343cd45bb0b85e28a0c7bbd401", 0x42}], 0x3}, 0x800) (async)

1.433111215s ago: executing program 4 (id=7123):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0xd18c9b25, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x9000000)

1.123487873s ago: executing program 2 (id=7127):
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, 0x0, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x8, 0x10, &(0x7f0000000dc0), 0x10}, 0x94)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000e00)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

1.088836273s ago: executing program 4 (id=7128):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000600)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000e07e111dbad11c85f8a03e316b07245843f093a214dd1294e295fdf97988ef03d26fd9102e0f97b03bc97a55df063de07d344e7cf6eee7be73517e22af70e0fb74a763b52173afb80e19b8be5124b15250ef5866bf3682ef9a709f00d51f22", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2}, &(0x7f0000000b00), &(0x7f0000000b40)=r1}, 0x20)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x54174, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], &(0x7f0000000b80)=""/237, 0x37, 0xed, 0x1}, 0x28)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000080), 0x8)

990.462535ms ago: executing program 2 (id=7130):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400200142603600e1208000b0000000401a80016000c00014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0xfdff)

909.879368ms ago: executing program 0 (id=7131):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f00000028c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002900)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002940)={r1})
sendmsg$unix(r2, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="3306ce61270ecdba52f42c08d75e66f05334b6a58e5da59aa06492ca2935d4a6ba447f1b58417fbd65cdc017c84b0f78352b083ebb10528d7948fb8ae0e9afee7a3c97377be43db6441eeaa24106ff7c095dda7a234faea20f7753693d55325a11e6455cbd8e741f8a82b4690aa3c0608702c3287b7ff9535727219ab282326947c939074308b5b53c05be055bc6385b0470e962efa3edf0923d93736d0d2cdc7a3c9023d23672aa3e02f3a6c660b7a317f13ea4f85a0f70d45155430ee3afb95cb18673e6f85e207c095e5f376226628163b90546a6aef4a6c3492f7d78b1e6370c022d808000cd2c8f9e", 0xeb}, {&(0x7f0000000100)="5725e3a08d078fa4302a8ce879147a6eeb8a2f508f09d5e758d5dc7d457d625f767ffbd48306f65c1a19a599e8de9bd896e5e467a4b3a6e14a1b6f9b3d12ff5665dcedfc4e787cfecc8714bdb75c7a7374f915af3fec9d9815c23c1995cfafa3e54b1c7f11deb7ab0930d0b997af8635d401266c033b08fdddc8993b484823c8e677d3e548bd8c2a299edf8f96ae298f98689b884a03768c8bbf55b2cc7f7e5775f4913827476066e8b5b7fbfd8e29d8dc8396f2b1d5c06d341931cee69a49b11797c30fc46b42a27dafc9548a402c4855972add828bd44046ff", 0xda}, {&(0x7f0000000200)="d4273f39da1d585bb0eab71ef6d88efab4b846ae27173c309200621041cfd161f5632ffe883dc80ce8ff536d082b31e335e850522a4175d1d0f9e6fa6751f823a21e787d1b3e0567870fe0aea9f6308870cc1db530ba8567f6a2f416091999f44d2605062f49f2923e9230673987902f8aacf3867d46c5672d1a531933610382796b2bf886351b5d0432d052264d4d3c80df178e1951ebe039ed84665b25fcc16e0dec252836dc119198ae987d2c2b06727df76fa1bc5201a0ff0ce88f6c9fa75efa3807cd93a4c70614c9190508513dad692d46f0312970a22c9e1c2dd3a29e3f942855e6e1716dd5246e104491853723f07b", 0xf3}, {&(0x7f0000000300)="086c82fab7c107327dbd95e4eda8dc9aee05fe0bcd949e270614a6565aa881a3575f9eb9a06d5bfc9693567af1a1b298009e2035ed53a37e6344ce028f0c79c5cdebde1e71feab0a1fd8a9959ff36a1b801ac92a0857ceb9a73c3185ce31d9cdc5784e806e012ab2558fbfd2f2803694738aae9d51e9bccd62c872c6d7eb", 0x7e}, {&(0x7f0000000380)="1f12bf92fd94c925c7a56404196a1dd3cdf7d14a7da51cda18fde757b528d6c52433eb8aa52ea492ca9fdf55968aeed5f1d795079d0cf50dda5d46a4d20a90da90b873e3c907196a3d05c8", 0x4b}, {&(0x7f0000000400)="9d0aca7d9fcb93fc4c23fc21d16e321c7dd390649f298b561e9e20ed504e78636f4307274e35ceede66b512474692a7c52e4ac75d30137a980d9cd5becd6f3df0ec6c6f8ad2455a197c82be6247c564465e4f17c8a978dea51f48592", 0x5c}, {&(0x7f0000000480)="3ab9ca9fc005a2552556fa25bc2f567438a54ad65f8d6906847165fe8d7f1a27cf888a392e819b21c7ff956005f1eb371e479e0cee0a71073c49ad7c6371bfa84f32297662069e64d9b9ac09480681", 0x4f}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x88, 0x40}, 0x20000000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000002980)={r1})

908.778668ms ago: executing program 4 (id=7132):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700ff0015000500fef32702d3001500030001400200000901223fc6ab1bab4023b09aab56e3fab1f9950a1ca4007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5d", 0xd8}], 0x1}, 0x20048812)

828.45156ms ago: executing program 2 (id=7134):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000efd0a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)

828.17729ms ago: executing program 4 (id=7135):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8001600040001", 0x37}], 0x1}, 0x4004)
r0 = socket$kcm(0x2b, 0x1, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="d9dcae75e99a9da0419607e767733085b29d18cf7a7cf3c8522c6bf5ffa9e1dc814725d1b3bc5fc7bc4b8b9cb46ba3413a7988b183121aa049e4113bebf3f2ef6edd88a61ba6859f3959b9d7a67551c7d056f73a0b3e55e64a98f11afd1717f8eb3922e86e0e3318eae47c", 0x6b}, {&(0x7f0000000500)="cd85927cea948762dd25185c2acb97835c7409128e7af0ebea8f53e4c0777a9f38884e2a179dc3f1df8963c0171a025e142a11c6b015abb06aee6b095cdef18076a392db222bdb84b74d0a271e00dc8286a60231b5e4b682f7237cfc46e0c3475816c178a0b8cf062c546039601ee51dc6493c633be935f07aa7c8f2cbccef6016bb04dae40ac18dffa4c672181adb020df0f21ffe20aaaec80d8d4fb584120f18a45202c154e9cb660e7c1243ab0d3ba3a30de264e6b49d9dbbbf4abc413befd5321dfa68a5589b395d29c64088643c0a", 0xd1}, {&(0x7f0000000600)="5c93254a4c66565251a8c6deb25f0940b82c147d1e85866c2b7d86d861fc6b8bdd18bddb1cc8537cb19984e09222fe72d31edf0249c79cd57721820a17d16af88db634445164631cd975870cb6bf56dcf2a933462e909ee106e87141ef909cd9067dcb9e85d8c38bf3c32ccfc11387036bfa34d24c779e319cff02b8b3b4a187928cfaa15642dbdc6da642f4e094f8", 0x8f}, {&(0x7f00000006c0)="24cdae8129f7b00c7ac874ece7b579079481fcedd2a7ab4c7bd0b929cf609db68807b56a0a146c748c25ed7f7755ff80a8f0e707f044f372f010636789dcd738ff60ad80ee698c119920b4bb92a5234ae029af203eebdf6ca74c169101c70df2dcaf6cee62840411329017eed844bcf9a2d5910d89e486669541251b7ebda81fc0ba1ededf5e18f798e24a8c3cb8b6a1c6", 0x91}], 0x4}, 0x40001) (async)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5b, &(0x7f00000002c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x801) (async)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}], 0x20}, 0x10022)
syz_open_procfs$namespace(r5, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2d7465745f70ba862182cfde6b6d3118a86a"], 0x12) (async)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x84, 0x5, 0xd, 0x7, 0x0, 0x1e9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8aa3, 0x4, @perf_config_ext={0x8000, 0x8000}, 0x100003, 0xd14d, 0x3, 0x4, 0xc6, 0x4003, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8672, 0x0, 0x7120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000440)={'pimreg0\x00', 0x7c2})
r7 = perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x4100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x4072, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xb, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000621800000000000018110000", @ANYRES64=r7, @ANYRES32=r0], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1e, 0x4, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d254361fc4aed40e6007f3bcdec5b3380dd0420dbf7b3a16f012099cb93b1f0b0fdcd29089604cf5f8988d1930531fee94672060cc97abec5c049db9f18108c938ebb101587ada861538f50cd06524fe4cbfb8e70ab7ad7fe443522e52c7824665b1f4d0ac4db94ec2e6ba851c6811a3a2e4c069b8ff523830e3755931027da35d01e11da43f53541ec5207f344426fae4204270e021987d847211c25c88c4f3a7075f5c479b8e63108c088d2052f417a4c59709623e935a5e", @ANYBLOB="0000000008000000b70000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000875e501c05984d7000000b704000000006723d0b7a8ce4184a79e3f362c320089773f5feed6e9d8d0db0035027fe9003ac4cbb7c2f21abf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x14, &(0x7f0000001100)=ANY=[], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

730.959492ms ago: executing program 2 (id=7136):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000100008402030000000e0000030000000100002101000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28)

679.483054ms ago: executing program 2 (id=7137):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="850000009e000000720a00ff0000000079005816000006fe9500000000000000181000008261c61e82b9f12d9ec3fae99f4d80719134f6429e1775498699bfa64e8d7f98cbd2f96df513f567a75f5413c9bef5740d82d627302914d7f43f706891d243080d9faed466146a0ae6dca1ac186519eb20153d9f05191c3d6351e1456b974cd9d6c5f21059a806747b3a6c2aed24493649748cb43c9a0af02941465a0476dc229e9bef14364a6b29343ac6c695ccdcc5c21d1e82", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000001400)='GPL\x00', 0x2, 0xffa0, &(0x7f0000001440)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x40000)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001f40)=ANY=[], 0x48)

461.084008ms ago: executing program 3 (id=7139):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000001800)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001880)=[{&(0x7f00000018c0)="b88a000000810000000000008100", 0x5bc}], 0x1}, 0x0)

404.1685ms ago: executing program 3 (id=7140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000030000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)

361.015761ms ago: executing program 3 (id=7141):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="0218030002000000e4a17c45c8d360c9", 0x10}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32], 0x18, 0xc1}, 0x0)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc8a9, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
close(r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x4ea}, {&(0x7f0000000a00)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdca", 0x3a}, {&(0x7f0000000a40)="bdfab68185b785e3c167ab2657460058b917894b312a1f2952fd364ee6a6fd1bb018691103edaa3c7ccd73843b47b661f7e40cb8237d41dc7e1178dfb7e41bf2b331b3fd80a6053c3d5f0f3b2bf2982d12fb05dcf73729ab22", 0x59}, {0x0, 0x11}], 0x4}, 0x800)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33)

199.538105ms ago: executing program 2 (id=7142):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f00000000c0)=[{&(0x7f0000000400)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000280)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x87, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x1, &(0x7f00000008c0)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001c00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000001c40)={&(0x7f0000001c80)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r3, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000900)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0xffffff2d, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4b, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r6}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0x6, 0x1}, {0x1, 0x1}, {0xd, 0x5}, {0xa, 0x5}, {0x4, 0x3}, {0x3, 0x5}]}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f00000004c0)=""/112, 0x61, 0x70, 0x0, 0xffff, 0x10000, @value=r5}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

198.290755ms ago: executing program 3 (id=7143):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x116, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000cf389000000080000000200e307ddff00001f52a4e48d38a20bdfa2f1f9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000001001060101"], 0x18}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000800000004000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000440)=r3}, 0x20)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r6, 0x0, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x20)

18.232289ms ago: executing program 3 (id=7144):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.78874ms ago: executing program 3 (id=7145):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000800)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000840)={'wlan0\x00', @random='\x00\x00\x00\x00\x00 '})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) (async)
openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000880)={0x0, 0x3e1, &(0x7f00000008c0)=[{&(0x7f0000000900)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r9}, &(0x7f0000001380), &(0x7f00000013c0)='%ps    \x00'}, 0x20) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000640)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r10, 0x4) (async)
sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000004)

0s ago: executing program 0 (id=7146):
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000020000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r5, r3, 0x20, 0x0, 0x0, @void, @value=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x100000, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x6, 0x16, &(0x7f0000000200), 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x36, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x1, 0x0, 0x9, 0x82688ab42beb25a0, 0x18, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x1, 0x8, 0xb}, 0x10, 0x1ccfb, r4, 0x0, &(0x7f0000000ac0)=[r2, r2, r1], 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB="00000000d3ec66ecc053c543da2e2e"], 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

la_validate_parse: 3 callbacks suppressed
[  856.750781][T21552] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5783'.
[  856.928675][T21443] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  856.971196][T21443] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  857.031238][T21443] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  857.068612][T21443] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  857.277642][T21569] netlink: 'syz.0.5790': attribute type 21 has an invalid length.
[  857.318255][T21569] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5790'.
[  857.343156][T21569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  857.403271][T21569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  857.489623][T21443] 8021q: adding VLAN 0 to HW filter on device bond0
[  857.559332][T21443] 8021q: adding VLAN 0 to HW filter on device team0
[  857.577513][T21590] netlink: 'syz.4.5795': attribute type 10 has an invalid length.
[  857.585469][T21590] team0: Device gre0 is up. Set it down before adding it as a team port
[  857.610369][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  857.631004][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  857.673959][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  857.694583][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  857.713357][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.720799][ T8234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.763553][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  857.793139][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  857.820601][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.827740][ T8234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  857.841102][T21596] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.5797'.
[  857.964960][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  857.982505][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  858.023131][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  858.035939][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  858.044602][T21619] netlink: 'syz.0.5805': attribute type 29 has an invalid length.
[  858.057539][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  858.067132][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  858.079012][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  858.103836][T21619] netlink: 'syz.0.5805': attribute type 29 has an invalid length.
[  858.120046][T21622] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5805'.
[  858.171520][T21443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  858.188114][T21443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  858.200723][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  858.224089][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  858.233377][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  858.268597][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  858.324497][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  858.361308][T21629] netlink: 'syz.2.5809': attribute type 9 has an invalid length.
[  858.369201][T21629] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5809'.
[  858.420194][T21626] netlink: 'syz.4.5808': attribute type 21 has an invalid length.
[  858.443179][T21626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5808'.
[  858.474667][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  858.536559][T21619] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.5805'.
[  858.612423][T21626] netlink: 'syz.4.5808': attribute type 21 has an invalid length.
[  858.625342][T21626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5808'.
[  858.666018][T21626] netlink: 'syz.4.5808': attribute type 21 has an invalid length.
[  858.666225][T15691] Bluetooth: hci2: command 0x041b tx timeout
[  858.736224][T21626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5808'.
[  858.792749][T21626] netlink: 'syz.4.5808': attribute type 21 has an invalid length.
[  858.814210][T21626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5808'.
[  858.854836][T21638] netlink: 'syz.2.5811': attribute type 21 has an invalid length.
[  858.898269][ T4274] device hsr_slave_0 left promiscuous mode
[  858.905849][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  858.932671][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  858.961071][ T4274] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  858.973374][ T4274] batman_adv: batadv0: Removing interface: virt_wifi0
[  858.995446][ T4274] bridge0: port 3(batadv_slave_0) entered disabled state
[  859.009946][ T4274] device bridge_slave_1 left promiscuous mode
[  859.016672][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.024648][ T4274] device bridge_slave_0 left promiscuous mode
[  859.031176][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.044158][ T4274] device veth1_vlan left promiscuous mode
[  859.056633][ T4274] device veth0_vlan left promiscuous mode
[  859.143004][ T4274] team0 (unregistering): Port device geneve1 removed
[  859.200033][ T4274] team0 (unregistering): Port device team_slave_1 removed
[  859.212324][ T4274] team0 (unregistering): Port device team_slave_0 removed
[  859.226050][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  859.242471][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  859.283365][ T4274] team0 (unregistering): Port device batadv0 removed
[  859.301377][ T4274] bond0 (unregistering): (slave team0): Releasing backup interface
[  859.325634][ T4274] bond0 (unregistering): Released all slaves
[  859.341100][T21626] netlink: 'syz.4.5808': attribute type 21 has an invalid length.
[  859.412091][T21650] device syzkaller0 entered promiscuous mode
[  859.429449][T21443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  859.451787][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  859.466553][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  859.573311][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  859.597267][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  859.626861][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  859.636057][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  859.657501][T21443] device veth0_vlan entered promiscuous mode
[  859.664863][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  859.679081][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  859.722841][T21443] device veth1_vlan entered promiscuous mode
[  859.808073][T21443] device veth0_macvtap entered promiscuous mode
[  859.825692][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  859.845756][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  859.865151][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  859.895662][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  859.915015][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  859.962734][T21443] device veth1_macvtap entered promiscuous mode
[  860.017596][T21443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  860.084654][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  860.093418][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  860.109839][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  860.126516][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.147124][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.164314][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.184374][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.204092][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.235143][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.279963][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.303758][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.324613][T21443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  860.335546][T21684] netlink: 'syz.4.5823': attribute type 39 has an invalid length.
[  860.416633][T21684] device hsr_slave_1 left promiscuous mode
[  860.453517][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  860.462780][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  860.514257][T21443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.532298][T21443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.548291][T21443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.564640][T21443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.579066][T21689] netlink: 'syz.0.5825': attribute type 10 has an invalid length.
[  860.626524][T21665] rxe_eth0 speed is unknown, defaulting to 1000
[  860.748037][T15689] Bluetooth: hci2: command 0x040f tx timeout
[  860.836812][ T8217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.844695][ T8217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  860.898524][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  860.919183][ T8230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.935822][ T8230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  860.973142][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  861.163151][T21707] device batadv_slave_0 entered promiscuous mode
[  861.188132][T21707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  861.213710][T21707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  861.253144][T21707] bridge0: port 3(batadv_slave_0) entered blocking state
[  861.276855][T21707] bridge0: port 3(batadv_slave_0) entered disabled state
[  861.330463][T21707] bridge0: port 3(batadv_slave_0) entered blocking state
[  861.338084][T21707] bridge0: port 3(batadv_slave_0) entered forwarding state
[  862.141989][T21744] FAULT_INJECTION: forcing a failure.
[  862.141989][T21744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  862.169574][T21747] __nla_validate_parse: 6 callbacks suppressed
[  862.169591][T21747] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5843'.
[  862.216676][T21744] CPU: 0 PID: 21744 Comm: syz.0.5853 Not tainted syzkaller #0
[  862.224186][T21744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  862.234266][T21744] Call Trace:
[  862.237563][T21744]  <TASK>
[  862.240521][T21744]  dump_stack_lvl+0x188/0x250
[  862.245229][T21744]  ? show_regs_print_info+0x20/0x20
[  862.250451][T21744]  ? load_image+0x410/0x410
[  862.255059][T21744]  ? __lock_acquire+0x7d40/0x7d40
[  862.260109][T21744]  should_fail+0x383/0x4b0
[  862.264553][T21744]  _copy_from_user+0x2e/0x170
[  862.269246][T21744]  __copy_msghdr_from_user+0xc9/0x630
[  862.274641][T21744]  ? verify_lock_unused+0x140/0x140
[  862.279946][T21744]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  862.285352][T21744]  ___sys_sendmsg+0x19a/0x2e0
[  862.290147][T21744]  ? __sys_sendmsg+0x290/0x290
[  862.294961][T21744]  __se_sys_sendmsg+0x1b7/0x2a0
[  862.299827][T21744]  ? __x64_sys_sendmsg+0x80/0x80
[  862.304776][T21744]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  862.310869][T21744]  ? lockdep_hardirqs_on+0x94/0x140
[  862.316279][T21744]  do_syscall_64+0x4c/0xa0
[  862.320711][T21744]  ? clear_bhb_loop+0x30/0x80
[  862.325412][T21744]  ? clear_bhb_loop+0x30/0x80
[  862.330107][T21744]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  862.336017][T21744] RIP: 0033:0x7f34ec251559
[  862.340446][T21744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.360066][T21744] RSP: 002b:00007f34ea4a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  862.368502][T21744] RAX: ffffffffffffffda RBX: 00007f34ec4d8fa0 RCX: 00007f34ec251559
[  862.376579][T21744] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000000000000003
[  862.384674][T21744] RBP: 00007f34ea4a9090 R08: 0000000000000000 R09: 0000000000000000
[  862.392751][T21744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  862.400754][T21744] R13: 00007f34ec4d9038 R14: 00007f34ec4d8fa0 R15: 00007ffc99e5eca8
[  862.408756][T21744]  </TASK>
[  862.562855][T21749] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5843'.
[  862.826569][T15691] Bluetooth: hci2: command 0x0419 tx timeout
[  862.963161][T21763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5848'.
[  863.073235][T21765] rxe_eth0 speed is unknown, defaulting to 1000
[  863.439618][T21787] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.5862'.
[  863.935142][T21765] chnl_net:caif_netlink_parms(): no params data found
[  864.042149][T21806] validate_nla: 5 callbacks suppressed
[  864.042194][T21806] netlink: 'syz.3.5861': attribute type 3 has an invalid length.
[  864.085528][T21806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5861'.
[  864.200823][T21806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5861'.
[  864.217969][T21765] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.236916][T21765] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.245147][T21765] device bridge_slave_0 entered promiscuous mode
[  864.294793][T21824] netlink: 'syz.4.5868': attribute type 1 has an invalid length.
[  864.303439][T21824] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5868'.
[  864.317640][T21765] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.324737][T21765] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.365701][T21765] device bridge_slave_1 entered promiscuous mode
[  864.384169][T21828] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.5869'.
[  864.443234][T21765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  864.472012][T21765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  864.599435][T21765] team0: Port device team_slave_0 added
[  864.653042][T21765] team0: Port device team_slave_1 added
[  864.753135][T21765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.761258][T21842] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  864.765599][T21765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  864.876387][T21765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  864.902629][T21844] netlink: 'syz.3.5875': attribute type 21 has an invalid length.
[  864.923495][T21844] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5875'.
[  864.967485][T21864] netlink: 'syz.0.5879': attribute type 21 has an invalid length.
[  864.985429][T21843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  865.000975][T21843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.066191][T20430] Bluetooth: hci3: command 0x0409 tx timeout
[  865.080468][T21849] netlink: 'syz.4.5877': attribute type 10 has an invalid length.
[  865.093214][T21765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.106167][T21765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.113127][T21869] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.5881'.
[  865.138651][T21765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  865.173128][T21864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  865.194966][T21864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  865.228628][ T4274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.290820][T21765] device hsr_slave_0 entered promiscuous mode
[  865.313828][T21765] device hsr_slave_1 entered promiscuous mode
[  865.343380][T21765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  865.371331][T21765] Cannot create hsr debugfs directory
[  865.389634][ T4274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.464028][T21894] netlink: 'syz.3.5889': attribute type 10 has an invalid length.
[  865.476831][T21894] team0: Device gre0 is up. Set it down before adding it as a team port
[  865.502883][ T4274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.629563][ T4274] batman_adv: batadv0: Removing interface: netdevsim0
[  865.652249][ T4274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.929861][T21907] netlink: 'syz.3.5895': attribute type 10 has an invalid length.
[  866.115210][T21907] bridge0: port 3(batadv_slave_0) entered disabled state
[  866.184918][T21907] device batadv_slave_0 left promiscuous mode
[  866.204474][T21907] bridge0: port 3(batadv_slave_0) entered disabled state
[  866.407735][T21907] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  866.433683][T21906] netlink: 'syz.3.5895': attribute type 10 has an invalid length.
[  866.682890][T21954] netlink: 'syz.0.5915': attribute type 9 has an invalid length.
[  867.147742][T15691] Bluetooth: hci3: command 0x041b tx timeout
[  867.186327][T22000] netlink: 'syz.1.5919': attribute type 29 has an invalid length.
[  867.251536][T22003] __nla_validate_parse: 5 callbacks suppressed
[  867.251552][T22003] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5919'.
[  867.284430][T22005] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.5921'.
[  867.423681][T22012] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5919'.
[  867.480042][T21765] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  867.528353][T22016] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5922'.
[  867.601782][T21765] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  867.623178][T21765] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  867.654905][T21765] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  867.849680][T21765] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.916519][T22032] device syzkaller0 entered promiscuous mode
[  867.953602][T21765] 8021q: adding VLAN 0 to HW filter on device team0
[  867.979251][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  867.989006][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  868.030712][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  868.071058][T22038] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.5931'.
[  868.087204][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  868.103705][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.110895][ T8217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.246693][T22041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5930'.
[  868.275427][T22041] device batadv_slave_0 entered promiscuous mode
[  868.305490][T22041] bond0: (slave batadv_slave_0): Releasing backup interface
[  868.332146][T22041] bridge0: port 3(batadv_slave_0) entered blocking state
[  868.347857][T22041] bridge0: port 3(batadv_slave_0) entered disabled state
[  868.358522][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  868.372705][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  868.382006][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  868.391204][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.398560][ T8217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.429449][T22048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5934'.
[  868.438266][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  868.449505][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  868.460158][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  868.472283][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  868.484108][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  868.511863][T22048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5934'.
[  868.587975][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  868.602945][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  868.624536][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  868.648219][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  868.660521][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  868.670107][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  868.701444][T22064] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.5942'.
[  868.703172][T21765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  868.762889][T22065] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5940'.
[  868.775267][T22065] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  868.790537][T22065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  869.189780][T22087] validate_nla: 7 callbacks suppressed
[  869.189801][T22087] netlink: 'syz.0.5948': attribute type 10 has an invalid length.
[  869.226296][T15691] Bluetooth: hci3: command 0x040f tx timeout
[  869.262454][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  869.271576][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  869.306866][T21765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  869.385067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  869.394925][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  869.485954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  869.504708][T22099] FAULT_INJECTION: forcing a failure.
[  869.504708][T22099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  869.514537][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  869.537865][T22099] CPU: 1 PID: 22099 Comm: syz.0.5953 Not tainted syzkaller #0
[  869.538984][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  869.545371][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  869.545385][T22099] Call Trace:
[  869.545392][T22099]  <TASK>
[  869.545399][T22099]  dump_stack_lvl+0x188/0x250
[  869.545427][T22099]  ? show_regs_print_info+0x20/0x20
[  869.579080][T22099]  ? load_image+0x410/0x410
[  869.583601][T22099]  ? __lock_acquire+0x7d40/0x7d40
[  869.588650][T22099]  should_fail+0x383/0x4b0
[  869.593095][T22099]  _copy_from_user+0x2e/0x170
[  869.597794][T22099]  __copy_msghdr_from_user+0x48a/0x630
[  869.599682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  869.603280][T22099]  ? verify_lock_unused+0x140/0x140
[  869.603309][T22099]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  869.603340][T22099]  ___sys_sendmsg+0x19a/0x2e0
[  869.603363][T22099]  ? __sys_sendmsg+0x290/0x290
[  869.603411][T22099]  __se_sys_sendmsg+0x1b7/0x2a0
[  869.635709][T22099]  ? __x64_sys_sendmsg+0x80/0x80
[  869.640766][T22099]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  869.646877][T22099]  ? lockdep_hardirqs_on+0x94/0x140
[  869.652104][T22099]  do_syscall_64+0x4c/0xa0
[  869.656549][T22099]  ? clear_bhb_loop+0x30/0x80
[  869.661240][T22099]  ? clear_bhb_loop+0x30/0x80
[  869.666065][T22099]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  869.671974][T22099] RIP: 0033:0x7f34ec251559
[  869.676406][T22099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  869.696545][T22099] RSP: 002b:00007f34ea4a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  869.704984][T22099] RAX: ffffffffffffffda RBX: 00007f34ec4d8fa0 RCX: 00007f34ec251559
[  869.712973][T22099] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000000000000003
[  869.720962][T22099] RBP: 00007f34ea4a9090 R08: 0000000000000000 R09: 0000000000000000
[  869.728946][T22099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  869.736998][T22099] R13: 00007f34ec4d9038 R14: 00007f34ec4d8fa0 R15: 00007ffc99e5eca8
[  869.745181][T22099]  </TASK>
[  869.768442][T21765] device veth0_vlan entered promiscuous mode
[  869.829800][T21765] device veth1_vlan entered promiscuous mode
[  869.901026][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  869.917126][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  869.942466][T22105] device sit0 entered promiscuous mode
[  869.962854][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  869.969238][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  869.997402][T22108] device sit0 left promiscuous mode
[  870.048072][T21765] device veth0_macvtap entered promiscuous mode
[  870.069800][T21765] device veth1_macvtap entered promiscuous mode
[  870.166319][T22116] netlink: 'syz.1.5959': attribute type 10 has an invalid length.
[  870.226747][T21765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.239256][T21765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.275540][T21765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.285624][T21765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.299149][T21765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.325437][T21765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.350005][T21765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.367224][T21765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.382257][T21765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.406533][T21765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  870.414024][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  870.424739][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  870.433352][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  870.442445][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  870.452656][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  870.461871][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  870.489566][T22132] netlink: 'syz.3.5972': attribute type 10 has an invalid length.
[  870.504594][ T4274] device hsr_slave_0 left promiscuous mode
[  870.513970][ T4274] device hsr_slave_1 left promiscuous mode
[  870.523261][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  870.532818][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  870.541115][ T4274] batman_adv: batadv0: Interface deactivated: vlan0
[  870.548357][ T4274] batman_adv: batadv0: Removing interface: vlan0
[  870.557999][ T4274] bridge0: port 3(batadv_slave_0) entered disabled state
[  870.573211][ T4274] device bridge_slave_1 left promiscuous mode
[  870.579969][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.589334][ T4274] device ÿÿÿÿÿÿ left promiscuous mode
[  870.594988][ T4274] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state
[  870.608195][ T4274] device veth1_macvtap left promiscuous mode
[  870.614398][ T4274] device veth0_macvtap left promiscuous mode
[  870.620827][ T4274] device veth1_vlan left promiscuous mode
[  870.626971][ T4274] device veth0_vlan left promiscuous mode
[  870.766752][ T4274] team0 (unregistering): Port device team_slave_1 removed
[  870.819082][ T4274] team0 (unregistering): Port device batadv0 removed
[  870.844913][ T4274] team0 (unregistering): Port device bridge0 removed
[  870.877248][T22135] netlink: 'syz.0.5964': attribute type 10 has an invalid length.
[  870.888608][T21765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  870.900091][T21765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  870.911985][T21765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  870.922495][T21765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  870.936173][T22118] rxe_eth0 speed is unknown, defaulting to 1000
[  870.975403][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  870.993255][ T8234] bridge0: port 3(batadv_slave_0) entered blocking state
[  871.000751][ T8234] bridge0: port 3(batadv_slave_0) entered forwarding state
[  871.113356][T17695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.132840][T17695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.159451][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  871.205243][ T8217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.251473][ T8217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.265476][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  871.314754][T15690] Bluetooth: hci3: command 0x0419 tx timeout
[  871.343068][T22150] netlink: 'syz.0.5971': attribute type 1 has an invalid length.
[  871.696733][T22169] netlink: 'syz.4.5976': attribute type 10 has an invalid length.
[  871.838067][T22174] netlink: 'syz.2.5978': attribute type 10 has an invalid length.
[  871.857543][T22174] device batadv_slave_0 entered promiscuous mode
[  871.928662][T22174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  871.964594][T22174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  872.112922][T22174] bridge0: port 3(batadv_slave_0) entered blocking state
[  872.144566][T22174] bridge0: port 3(batadv_slave_0) entered disabled state
[  872.206124][T22174] bridge0: port 3(batadv_slave_0) entered blocking state
[  872.213656][T22174] bridge0: port 3(batadv_slave_0) entered forwarding state
[  872.313075][T22179] netlink: 'syz.1.5979': attribute type 10 has an invalid length.
[  872.348710][T22179] batman_adv: batadv0: Interface deactivated: netdevsim0
[  872.397412][T22183] __nla_validate_parse: 76 callbacks suppressed
[  872.397432][T22183] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5980'.
[  872.471146][T22183] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  872.496071][T22184] netlink: 'syz.4.5981': attribute type 21 has an invalid length.
[  872.524079][T22186] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5981'.
[  872.580542][T22186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  872.669303][T22197] netlink: 'syz.0.5986': attribute type 10 has an invalid length.
[  872.723571][T22197] team0: Device gre0 is up. Set it down before adding it as a team port
[  872.883196][T22213] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5993'.
[  872.883836][T22209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5991'.
[  872.969825][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'.
[  873.000051][T22212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5992'.
[  873.183685][T22218] device hsr_slave_1 left promiscuous mode
[  873.802873][T22244] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6003'.
[  874.059721][T22246] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6005'.
[  874.475650][T22252] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6006'.
[  874.553385][T22252] validate_nla: 7 callbacks suppressed
[  874.553471][T22252] netlink: 'syz.2.6006': attribute type 10 has an invalid length.
[  874.579312][T22252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6006'.
[  874.987016][T22274] netlink: 'syz.0.6016': attribute type 10 has an invalid length.
[  875.315411][T22295] device syzkaller0 entered promiscuous mode
[  875.352522][T22296] netlink: 'syz.1.6021': attribute type 10 has an invalid length.
[  875.638498][T22321] FAULT_INJECTION: forcing a failure.
[  875.638498][T22321] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  875.677430][T22321] CPU: 0 PID: 22321 Comm: syz.0.6031 Not tainted syzkaller #0
[  875.685077][T22321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  875.695240][T22321] Call Trace:
[  875.698536][T22321]  <TASK>
[  875.701482][T22321]  dump_stack_lvl+0x188/0x250
[  875.706441][T22321]  ? show_regs_print_info+0x20/0x20
[  875.711660][T22321]  ? load_image+0x410/0x410
[  875.716313][T22321]  ? __lock_acquire+0x7d40/0x7d40
[  875.721783][T22321]  ? perf_trace_lock+0xe4/0x390
[  875.726644][T22321]  should_fail+0x383/0x4b0
[  875.731172][T22321]  _copy_from_user+0x2e/0x170
[  875.735850][T22321]  iovec_from_user+0x142/0x370
[  875.740608][T22321]  __import_iovec+0x70/0x490
[  875.745202][T22321]  ? perf_trace_lock+0xe4/0x390
[  875.750044][T22321]  import_iovec+0x6f/0xa0
[  875.754367][T22321]  ___sys_sendmsg+0x1fd/0x2e0
[  875.759155][T22321]  ? __sys_sendmsg+0x290/0x290
[  875.764009][T22321]  ? trace_event_raw_event_lock+0x250/0x250
[  875.770002][T22321]  __se_sys_sendmsg+0x1b7/0x2a0
[  875.774848][T22321]  ? __x64_sys_sendmsg+0x80/0x80
[  875.779776][T22321]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  875.785756][T22321]  ? lockdep_hardirqs_on+0x94/0x140
[  875.790959][T22321]  do_syscall_64+0x4c/0xa0
[  875.795368][T22321]  ? clear_bhb_loop+0x30/0x80
[  875.800044][T22321]  ? clear_bhb_loop+0x30/0x80
[  875.804718][T22321]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  875.810600][T22321] RIP: 0033:0x7f34ec251559
[  875.815009][T22321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  875.834617][T22321] RSP: 002b:00007f34ea4a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  875.843036][T22321] RAX: ffffffffffffffda RBX: 00007f34ec4d8fa0 RCX: 00007f34ec251559
[  875.850996][T22321] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000000000000003
[  875.859045][T22321] RBP: 00007f34ea4a9090 R08: 0000000000000000 R09: 0000000000000000
[  875.867007][T22321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  875.874967][T22321] R13: 00007f34ec4d9038 R14: 00007f34ec4d8fa0 R15: 00007ffc99e5eca8
[  875.882942][T22321]  </TASK>
[  877.525874][T22373] __nla_validate_parse: 7 callbacks suppressed
[  877.525920][T22373] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6051'.
[  877.663253][T22382] netlink: 'syz.4.6052': attribute type 2 has an invalid length.
[  877.714523][T22379] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6052'.
[  878.404988][T22415] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6064'.
[  878.578208][T22424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6068'.
[  878.726976][T22433] bridge0: port 3(batadv_slave_0) entered disabled state
[  878.734242][T22433] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.741647][T22433] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.801437][T22443] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6076'.
[  878.871276][T22437] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6074'.
[  878.886035][T22444] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6077'.
[  878.976307][T22437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  879.061473][T22437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  879.095139][T22449] netlink: 'syz.4.6078': attribute type 9 has an invalid length.
[  879.131672][T22449] netlink: 165200 bytes leftover after parsing attributes in process `syz.4.6078'.
[  879.315646][T22447] netlink: 'syz.4.6078': attribute type 9 has an invalid length.
[  879.324715][T22447] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6078'.
[  879.392010][T22456] device syzkaller0 entered promiscuous mode
[  879.702657][T22466] netlink: 'syz.1.6083': attribute type 10 has an invalid length.
[  879.835173][T22474] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6086'.
[  879.908465][T22474] netlink: 'syz.2.6086': attribute type 10 has an invalid length.
[  880.099613][T22492] netlink: 'syz.0.6095': attribute type 3 has an invalid length.
[  880.332249][T22509] netlink: 'syz.3.6102': attribute type 17 has an invalid length.
[  880.411615][T22514] FAULT_INJECTION: forcing a failure.
[  880.411615][T22514] name failslab, interval 1, probability 0, space 0, times 0
[  880.455727][T22516] netlink: 'syz.3.6105': attribute type 10 has an invalid length.
[  880.475438][T22514] CPU: 1 PID: 22514 Comm: syz.2.6104 Not tainted syzkaller #0
[  880.483122][T22514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  880.493950][T22514] Call Trace:
[  880.497310][T22514]  <TASK>
[  880.500345][T22514]  dump_stack_lvl+0x188/0x250
[  880.505043][T22514]  ? show_regs_print_info+0x20/0x20
[  880.510347][T22514]  ? load_image+0x410/0x410
[  880.514864][T22514]  ? __might_sleep+0xf0/0xf0
[  880.519466][T22514]  ? __lock_acquire+0x7d40/0x7d40
[  880.524517][T22514]  should_fail+0x383/0x4b0
[  880.528953][T22514]  should_failslab+0x5/0x20
[  880.533471][T22514]  slab_pre_alloc_hook+0x51/0xc0
[  880.538418][T22514]  kmem_cache_alloc_node+0x47/0x2c0
[  880.543626][T22514]  ? __alloc_skb+0xf4/0x750
[  880.548140][T22514]  __alloc_skb+0xf4/0x750
[  880.552487][T22514]  alloc_skb_with_frags+0xa7/0x720
[  880.557621][T22514]  sock_alloc_send_pskb+0x87f/0x9a0
[  880.562998][T22514]  ? sock_kzfree_s+0x50/0x50
[  880.567825][T22514]  ? __lock_acquire+0x13b3/0x7d40
[  880.572976][T22514]  packet_sendmsg+0x31b0/0x4de0
[  880.577857][T22514]  ? __lock_acquire+0x12df/0x7d40
[  880.582897][T22514]  ? __might_sleep+0xf0/0xf0
[  880.587603][T22514]  ? aa_sk_perm+0x7dc/0x910
[  880.592120][T22514]  ? packet_getsockopt+0x9a0/0x9a0
[  880.597251][T22514]  ? aa_setprocattr_changehat+0x310/0x580
[  880.602990][T22514]  ? apparmor_socket_sendmsg+0x88/0x230
[  880.608555][T22514]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  880.613860][T22514]  ? security_socket_sendmsg+0x7c/0xa0
[  880.619450][T22514]  ? packet_getsockopt+0x9a0/0x9a0
[  880.624758][T22514]  ____sys_sendmsg+0x5be/0x8f0
[  880.629559][T22514]  ? __sys_sendmsg_sock+0x30/0x30
[  880.634742][T22514]  ? import_iovec+0x6f/0xa0
[  880.639288][T22514]  ___sys_sendmsg+0x236/0x2e0
[  880.644135][T22514]  ? __sys_sendmsg+0x290/0x290
[  880.648958][T22514]  __se_sys_sendmsg+0x1b7/0x2a0
[  880.653825][T22514]  ? __x64_sys_sendmsg+0x80/0x80
[  880.658767][T22514]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  880.664775][T22514]  ? lockdep_hardirqs_on+0x94/0x140
[  880.670003][T22514]  do_syscall_64+0x4c/0xa0
[  880.674429][T22514]  ? clear_bhb_loop+0x30/0x80
[  880.679150][T22514]  ? clear_bhb_loop+0x30/0x80
[  880.683842][T22514]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  880.689773][T22514] RIP: 0033:0x7fe86afa6559
[  880.694209][T22514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  880.713924][T22514] RSP: 002b:00007fe8691fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  880.722369][T22514] RAX: ffffffffffffffda RBX: 00007fe86b22dfa0 RCX: 00007fe86afa6559
[  880.730356][T22514] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000000000000003
[  880.738339][T22514] RBP: 00007fe8691fe090 R08: 0000000000000000 R09: 0000000000000000
[  880.746329][T22514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  880.754410][T22514] R13: 00007fe86b22e038 R14: 00007fe86b22dfa0 R15: 00007ffca21fdb28
[  880.762432][T22514]  </TASK>
[  881.032928][T22540] device syzkaller0 entered promiscuous mode
[  881.249375][T22554] netlink: 'syz.1.6118': attribute type 10 has an invalid length.
[  881.376870][T22569] netlink: 'syz.1.6121': attribute type 10 has an invalid length.
[  881.482939][T22569] netlink: 'syz.1.6121': attribute type 10 has an invalid length.
[  881.510517][T22569] netlink: 'syz.1.6121': attribute type 10 has an invalid length.
[  881.526927][T22569] netlink: 'syz.1.6121': attribute type 10 has an invalid length.
[  881.715906][T22582] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  882.630092][T22633] __nla_validate_parse: 19 callbacks suppressed
[  882.630135][T22633] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6146'.
[  882.713607][T22640] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6147'.
[  882.753739][T22633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6146'.
[  882.880420][T22643] rxe_eth0 speed is unknown, defaulting to 1000
[  882.973120][T17695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.043902][T17695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.149951][T17695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.170269][T22665] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6157'.
[  883.265266][T22671] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6158'.
[  883.290827][T22665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6157'.
[  883.320838][T17695] batman_adv: batadv0: Removing interface: netdevsim0
[  883.333108][T17695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.435146][T22681] netlink: set zone limit has 8 unknown bytes
[  883.475440][T22684] team0: Device gre0 is up. Set it down before adding it as a team port
[  883.490549][T22681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  883.497880][T22681] IPv6: NLM_F_CREATE should be set when creating new route
[  883.505151][T22681] IPv6: NLM_F_CREATE should be set when creating new route
[  883.512445][T22681] IPv6: NLM_F_CREATE should be set when creating new route
[  883.968960][T22643] chnl_net:caif_netlink_parms(): no params data found
[  884.309471][T22715] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6170'.
[  884.363475][T22704] team0 (unregistering): Port device team_slave_0 removed
[  884.388558][T22704] team0 (unregistering): Port device team_slave_1 removed
[  884.480245][T22715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6170'.
[  884.750213][T22643] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.777985][T22643] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.819396][T22724] validate_nla: 39 callbacks suppressed
[  884.819458][T22724] netlink: 'syz.0.6171': attribute type 9 has an invalid length.
[  884.821486][T22643] device bridge_slave_0 entered promiscuous mode
[  884.825376][T22724] netlink: 165200 bytes leftover after parsing attributes in process `syz.0.6171'.
[  884.833540][T15691] Bluetooth: hci1: command 0x0409 tx timeout
[  884.932465][T22643] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.942680][T22643] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.974962][T22643] device bridge_slave_1 entered promiscuous mode
[  885.112683][T22728] netlink: 'syz.0.6171': attribute type 9 has an invalid length.
[  885.124507][T22728] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6171'.
[  885.181562][T22643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  885.196845][T22643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  885.234321][T22643] team0: Port device team_slave_0 added
[  885.243567][T22643] team0: Port device team_slave_1 added
[  885.341998][T22761] netlink: 'syz.0.6181': attribute type 10 has an invalid length.
[  885.361889][T22643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  885.369413][T22643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  885.396756][T22643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  885.433349][T22643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  885.467763][T22643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  885.506259][T22643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  885.605231][T22643] device hsr_slave_0 entered promiscuous mode
[  885.640843][T22643] device hsr_slave_1 entered promiscuous mode
[  885.651028][T22643] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  885.661087][T22643] Cannot create hsr debugfs directory
[  885.680185][T22776] netlink: 'syz.1.6185': attribute type 10 has an invalid length.
[  885.703464][T22776] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  885.851078][T22782] device syzkaller0 entered promiscuous mode
[  885.984552][T22797] netlink: 'syz.1.6189': attribute type 10 has an invalid length.
[  886.103636][T22805] netlink: 'syz.3.6191': attribute type 9 has an invalid length.
[  886.245778][T22810] netlink: 'syz.1.6193': attribute type 10 has an invalid length.
[  886.259441][T22802] netlink: 'syz.3.6191': attribute type 9 has an invalid length.
[  886.906183][T15691] Bluetooth: hci1: command 0x041b tx timeout
[  887.194913][T22817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  887.231453][T22817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  887.480228][T22838] netlink: 'syz.0.6204': attribute type 10 has an invalid length.
[  887.507178][T22838] device veth1_macvtap left promiscuous mode
[  887.566810][T22844] netlink: 'syz.2.6206': attribute type 17 has an invalid length.
[  887.741321][T22853] __nla_validate_parse: 9 callbacks suppressed
[  887.741358][T22853] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6208'.
[  887.773778][T22643] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  887.839384][T22643] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  887.921090][T22853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6208'.
[  887.944971][T22643] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  887.968203][T22643] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  888.011715][T22866] FAULT_INJECTION: forcing a failure.
[  888.011715][T22866] name failslab, interval 1, probability 0, space 0, times 0
[  888.031419][T22866] CPU: 1 PID: 22866 Comm: syz.0.6210 Not tainted syzkaller #0
[  888.038935][T22866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  888.049308][T22866] Call Trace:
[  888.052611][T22866]  <TASK>
[  888.055559][T22866]  dump_stack_lvl+0x188/0x250
[  888.060263][T22866]  ? show_regs_print_info+0x20/0x20
[  888.065569][T22866]  ? load_image+0x410/0x410
[  888.070100][T22866]  ? __might_sleep+0xf0/0xf0
[  888.074717][T22866]  ? __lock_acquire+0x7d40/0x7d40
[  888.079772][T22866]  should_fail+0x383/0x4b0
[  888.084329][T22866]  should_failslab+0x5/0x20
[  888.089107][T22866]  slab_pre_alloc_hook+0x51/0xc0
[  888.094231][T22866]  __kmalloc_node_track_caller+0x68/0x3a0
[  888.099966][T22866]  ? alloc_skb_with_frags+0xa7/0x720
[  888.105340][T22866]  ? __alloc_skb+0xf4/0x750
[  888.109839][T22866]  ? alloc_skb_with_frags+0xa7/0x720
[  888.115118][T22866]  __alloc_skb+0x22c/0x750
[  888.119533][T22866]  alloc_skb_with_frags+0xa7/0x720
[  888.124738][T22866]  ? trace_event_raw_event_lock+0x250/0x250
[  888.130811][T22866]  sock_alloc_send_pskb+0x87f/0x9a0
[  888.136164][T22866]  ? sock_kzfree_s+0x50/0x50
[  888.140919][T22866]  ? __lock_acquire+0x13b3/0x7d40
[  888.146058][T22866]  packet_sendmsg+0x31b0/0x4de0
[  888.150965][T22866]  ? perf_trace_lock+0xe4/0x390
[  888.155811][T22866]  ? __might_sleep+0xf0/0xf0
[  888.160424][T22866]  ? trace_event_raw_event_lock+0x250/0x250
[  888.166424][T22866]  ? aa_sk_perm+0x7dc/0x910
[  888.171016][T22866]  ? packet_getsockopt+0x9a0/0x9a0
[  888.176167][T22866]  ? aa_setprocattr_changehat+0x310/0x580
[  888.181999][T22866]  ? apparmor_socket_sendmsg+0x88/0x230
[  888.187536][T22866]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  888.192918][T22866]  ? security_socket_sendmsg+0x7c/0xa0
[  888.198825][T22866]  ? packet_getsockopt+0x9a0/0x9a0
[  888.203938][T22866]  ____sys_sendmsg+0x5be/0x8f0
[  888.208802][T22866]  ? __sys_sendmsg_sock+0x30/0x30
[  888.213997][T22866]  ? import_iovec+0x6f/0xa0
[  888.218587][T22866]  ___sys_sendmsg+0x236/0x2e0
[  888.223352][T22866]  ? __sys_sendmsg+0x290/0x290
[  888.228223][T22866]  ? trace_event_raw_event_lock+0x250/0x250
[  888.234140][T22866]  __se_sys_sendmsg+0x1b7/0x2a0
[  888.239037][T22866]  ? __x64_sys_sendmsg+0x80/0x80
[  888.243973][T22866]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  888.249974][T22866]  ? lockdep_hardirqs_on+0x94/0x140
[  888.255189][T22866]  do_syscall_64+0x4c/0xa0
[  888.259609][T22866]  ? clear_bhb_loop+0x30/0x80
[  888.264280][T22866]  ? clear_bhb_loop+0x30/0x80
[  888.268945][T22866]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  888.274831][T22866] RIP: 0033:0x7f34ec251559
[  888.279247][T22866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.298944][T22866] RSP: 002b:00007f34ea4a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  888.307466][T22866] RAX: ffffffffffffffda RBX: 00007f34ec4d8fa0 RCX: 00007f34ec251559
[  888.315607][T22866] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000000000000003
[  888.323598][T22866] RBP: 00007f34ea4a9090 R08: 0000000000000000 R09: 0000000000000000
[  888.331560][T22866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.339521][T22866] R13: 00007f34ec4d9038 R14: 00007f34ec4d8fa0 R15: 00007ffc99e5eca8
[  888.347510][T22866]  </TASK>
[  888.480278][T22857] device syzkaller0 entered promiscuous mode
[  888.986206][T15691] Bluetooth: hci1: command 0x040f tx timeout
[  889.050064][T22891] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6216'.
[  889.093096][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'.
[  889.220156][T22643] 8021q: adding VLAN 0 to HW filter on device bond0
[  889.247464][T22896] netlink: 'syz.2.6218': attribute type 11 has an invalid length.
[  889.261738][T22896] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.6218'.
[  889.299477][T22643] 8021q: adding VLAN 0 to HW filter on device team0
[  889.315114][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  889.323894][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  889.339397][T22904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6218'.
[  889.396910][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  889.422449][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  889.432482][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.439643][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  889.562659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  889.580505][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  889.596564][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  889.605669][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.612836][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  889.629842][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  889.641141][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  889.650937][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  889.662207][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  889.671099][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  889.680956][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  889.690466][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  889.734519][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  889.744533][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  889.761119][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  889.774673][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  889.798791][T22643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  889.970105][T22934] validate_nla: 4 callbacks suppressed
[  889.970125][T22934] netlink: 'syz.1.6223': attribute type 16 has an invalid length.
[  889.994714][T17695] device hsr_slave_0 left promiscuous mode
[  889.999941][T22934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6223'.
[  890.010107][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  890.028521][T17695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  891.066278][T15691] Bluetooth: hci1: command 0x0419 tx timeout
[  892.179554][T17695] bridge0: port 4(batadv_slave_0) entered disabled state
[  892.210099][T17695] bridge0: port 3(team0) entered disabled state
[  892.252282][T17695] device bridge_slave_1 left promiscuous mode
[  892.260202][T17695] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.269944][T17695] device bridge_slave_0 left promiscuous mode
[  892.276750][T17695] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.287914][T17695] device veth1_macvtap left promiscuous mode
[  892.294100][T17695] device veth0_macvtap left promiscuous mode
[  892.300374][T17695] device veth1_vlan left promiscuous mode
[  892.306291][T17695] device veth0_vlan left promiscuous mode
[  892.379589][T17695] device geneve1 left promiscuous mode
[  892.389595][T17695] team0 (unregistering): Port device geneve1 removed
[  892.422176][T17695] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  892.472273][T17695] device team_slave_1 left promiscuous mode
[  892.479422][T17695] team0 (unregistering): Port device team_slave_1 removed
[  892.493991][T17695] device team_slave_0 left promiscuous mode
[  892.505043][T17695] team0 (unregistering): Port device team_slave_0 removed
[  892.518613][T17695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  892.534167][T17695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  892.597608][T17695] bond0 (unregistering): Released all slaves
[  892.649635][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  892.659997][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  892.674190][T22643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.805529][T22981] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6230'.
[  892.925181][T22981] netlink: 'syz.1.6230': attribute type 10 has an invalid length.
[  892.943226][T22981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6230'.
[  892.984321][T22990] netlink: 'syz.2.6231': attribute type 39 has an invalid length.
[  893.247309][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  893.268737][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  893.314712][T23003] rxe_eth0 speed is unknown, defaulting to 1000
[  893.341281][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  893.353309][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  893.402040][T22643] device veth0_vlan entered promiscuous mode
[  893.416364][T23017] netlink: 'syz.2.6241': attribute type 21 has an invalid length.
[  893.438732][T23017] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6241'.
[  893.483971][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  893.507552][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  893.538063][T22643] device veth1_vlan entered promiscuous mode
[  893.547089][T23022] netlink: 'syz.0.6243': attribute type 10 has an invalid length.
[  893.626534][T23026] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.6245'.
[  893.644855][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  893.658116][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  893.673461][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  893.697801][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  893.724449][T22643] device veth0_macvtap entered promiscuous mode
[  893.763731][T22643] device veth1_macvtap entered promiscuous mode
[  893.801244][T23034] netlink: 'syz.3.6248': attribute type 10 has an invalid length.
[  893.834832][T22643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  893.857900][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  893.877551][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  893.901054][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  893.938237][T22643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.968245][T22643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.998210][T22643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  894.018535][T22643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  894.042484][T22643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  894.078770][T22643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  894.143910][T22643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  894.181417][T23038] netlink: 'syz.0.6249': attribute type 39 has an invalid length.
[  894.266944][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  894.275738][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  894.342609][T22643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  894.359561][T22643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  894.380088][T22643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  894.399444][T22643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  894.454766][T23044] device syzkaller0 entered promiscuous mode
[  894.771482][T23053] device syzkaller0 entered promiscuous mode
[  894.860047][ T8230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.916001][ T8230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.968033][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  898.030502][ T8234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.039953][ T8234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.069842][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  898.391578][T23085] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6261'.
[  898.542370][T23091] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6264'.
[  898.584099][T23093] netlink: 'syz.3.6263': attribute type 39 has an invalid length.
[  899.502349][T23091] netlink: 'syz.2.6264': attribute type 10 has an invalid length.
[  899.517912][T23091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6264'.
[  899.870735][T23118] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6276'.
[  899.904339][T23118] openvswitch: netlink: Flow actions attr not present in new flow.
[  900.083891][T23131] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.6290'.
[  900.145106][T23135] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.6282'.
[  900.212284][T23135] netlink: 'syz.4.6282': attribute type 10 has an invalid length.
[  900.236459][T23135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6282'.
[  900.263084][T23135] device batadv_slave_0 entered promiscuous mode
[  900.287518][T23135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  900.315071][T23135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  900.359792][T23135] bridge0: port 3(batadv_slave_0) entered blocking state
[  900.368325][T23135] bridge0: port 3(batadv_slave_0) entered disabled state
[  900.388700][T23135] bridge0: port 3(batadv_slave_0) entered blocking state
[  900.396662][T23135] bridge0: port 3(batadv_slave_0) entered forwarding state
[  900.422091][T23143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6283'.
[  900.582146][T23147] delete_channel: no stack
[  900.772159][T23150] rxe_eth0 speed is unknown, defaulting to 1000
[  900.899372][T23162] netlink: 'syz.3.6289': attribute type 10 has an invalid length.
[  901.157207][T23168] netlink: 'syz.1.6294': attribute type 10 has an invalid length.
[  901.186903][T23168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6294'.
[  901.273938][T23168] batman_adv: batadv0: Adding interface: virt_wifi0
[  901.344162][T23168] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  901.460082][T23168] batman_adv: batadv0: Interface activated: virt_wifi0
[  901.494328][T23171] netlink: 'syz.4.6295': attribute type 10 has an invalid length.
[  901.507739][T23171] team0: Device gre0 is up. Set it down before adding it as a team port
[  901.530632][T23174] rxe_eth0 speed is unknown, defaulting to 1000
[  901.737332][T23187] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6298'.
[  901.773582][T23187] netlink: 'syz.0.6298': attribute type 10 has an invalid length.
[  901.923550][T23193] netlink: 'syz.0.6302': attribute type 10 has an invalid length.
[  901.943288][T23193] device geneve0 entered promiscuous mode
[  901.982316][T23193] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  902.169036][T23199] rxe_eth0 speed is unknown, defaulting to 1000
[  902.355666][T23211] netlink: 'syz.3.6309': attribute type 21 has an invalid length.
[  902.408204][T23211] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  902.448912][T23211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.039948][T23232] netlink: 'syz.3.6317': attribute type 10 has an invalid length.
[  903.101909][T23232] bridge0: port 3(batadv_slave_0) entered disabled state
[  903.109365][T23232] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.116848][T23232] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.202086][T23232] bridge0: port 3(batadv_slave_0) entered blocking state
[  903.209385][T23232] bridge0: port 3(batadv_slave_0) entered forwarding state
[  903.216913][T23232] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.224091][T23232] bridge0: port 2(bridge_slave_1) entered forwarding state
[  903.231584][T23232] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.238735][T23232] bridge0: port 1(bridge_slave_0) entered forwarding state
[  903.384518][T23232] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  903.598463][T23254] validate_nla: 1 callbacks suppressed
[  903.598483][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.694033][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.755804][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.805803][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.846482][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.876870][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.912049][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.933806][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.970202][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  903.986399][T23254] netlink: 'syz.2.6326': attribute type 27 has an invalid length.
[  904.803378][T23290] __nla_validate_parse: 3 callbacks suppressed
[  904.803399][T23290] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6338'.
[  904.834322][T23287] device syzkaller0 entered promiscuous mode
[  905.834477][T23308] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6344'.
[  906.318994][T23338] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.6353'.
[  906.414607][T23336] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6355'.
[  906.551626][T23347] FAULT_INJECTION: forcing a failure.
[  906.551626][T23347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  906.586197][T23347] CPU: 1 PID: 23347 Comm: syz.2.6359 Not tainted syzkaller #0
[  906.593817][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  906.603882][T23347] Call Trace:
[  906.607171][T23347]  <TASK>
[  906.610226][T23347]  dump_stack_lvl+0x188/0x250
[  906.615011][T23347]  ? show_regs_print_info+0x20/0x20
[  906.620237][T23347]  ? load_image+0x410/0x410
[  906.624788][T23347]  ? __lock_acquire+0x7d40/0x7d40
[  906.629833][T23347]  should_fail+0x383/0x4b0
[  906.634285][T23347]  _copy_to_user+0x2e/0x130
[  906.639276][T23347]  simple_read_from_buffer+0xe3/0x150
[  906.645135][T23347]  proc_fail_nth_read+0x1a6/0x220
[  906.650345][T23347]  ? proc_fault_inject_write+0x310/0x310
[  906.656063][T23347]  ? fsnotify_perm+0x254/0x560
[  906.660829][T23347]  ? proc_fault_inject_write+0x310/0x310
[  906.666463][T23347]  vfs_read+0x2ff/0xd50
[  906.670708][T23347]  ? __lock_acquire+0x7d40/0x7d40
[  906.676087][T23347]  ? kernel_read+0x1e0/0x1e0
[  906.680706][T23347]  ? mutex_lock_nested+0x17/0x20
[  906.685802][T23347]  ? __fdget_pos+0x2bf/0x370
[  906.690468][T23347]  ? ksys_read+0x70/0x260
[  906.694881][T23347]  ksys_read+0x153/0x260
[  906.699119][T23347]  ? vfs_write+0xd70/0xd70
[  906.703612][T23347]  ? lockdep_hardirqs_on+0x94/0x140
[  906.708892][T23347]  do_syscall_64+0x4c/0xa0
[  906.713479][T23347]  ? clear_bhb_loop+0x30/0x80
[  906.718144][T23347]  ? clear_bhb_loop+0x30/0x80
[  906.722939][T23347]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  906.729208][T23347] RIP: 0033:0x7fe86af66d8e
[  906.733711][T23347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  906.753609][T23347] RSP: 002b:00007fe8691fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  906.762199][T23347] RAX: ffffffffffffffda RBX: 00007fe8691fe6c0 RCX: 00007fe86af66d8e
[  906.770180][T23347] RDX: 000000000000000f RSI: 00007fe8691fe0a0 RDI: 0000000000000004
[  906.778667][T23347] RBP: 00007fe8691fe090 R08: 0000000000000000 R09: 0000000000000000
[  906.786636][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  906.794607][T23347] R13: 00007fe86b22e038 R14: 00007fe86b22dfa0 R15: 00007ffca21fdb28
[  906.802680][T23347]  </TASK>
[  906.813808][T23349] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6360'.
[  907.168755][T23386] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6372'.
[  907.448422][T23413] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.6386'.
[  907.474938][T23416] tap0: tun_chr_ioctl cmd 1074025678
[  907.490828][T23416] tap0: group set to 0
[  907.614205][T23425] bond0: (slave geneve0): Error: Slave device does not support XDP
[  907.866382][T15692] Bluetooth: hci0: command 0x0406 tx timeout
[  908.090828][T23440] batman_adv: batadv0: Adding interface: netdevsim0
[  908.141065][T23440] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  908.240049][T23440] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  908.353354][T23445] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6396'.
[  908.651902][T23458] validate_nla: 61 callbacks suppressed
[  908.651921][T23458] netlink: 'syz.2.6403': attribute type 9 has an invalid length.
[  908.694791][T23458] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6403'.
[  908.776830][T23452] rxe_eth0 speed is unknown, defaulting to 1000
[  909.123051][T23474] device syzkaller0 entered promiscuous mode
[  909.167554][T23473] netlink: 'syz.1.6407': attribute type 10 has an invalid length.
[  909.339337][T23486] netlink: 'syz.0.6411': attribute type 29 has an invalid length.
[  909.385186][T23486] netlink: 'syz.0.6411': attribute type 29 has an invalid length.
[  909.409573][T23486] netlink: 'syz.0.6411': attribute type 29 has an invalid length.
[  909.427129][T23486] netlink: 'syz.0.6411': attribute type 29 has an invalid length.
[  909.451009][T23492] netlink: 'syz.2.6414': attribute type 21 has an invalid length.
[  909.480881][T23492] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6414'.
[  909.507341][T23492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  909.545774][T23492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  910.074632][T23529] __nla_validate_parse: 1 callbacks suppressed
[  910.074665][T23529] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6430'.
[  910.208226][T23533] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.6432'.
[  910.753029][T23550] netlink: 'syz.3.6439': attribute type 10 has an invalid length.
[  910.786468][T23550] device hsr0 entered promiscuous mode
[  910.792866][T23550] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  910.871094][T23554] netlink: 'syz.0.6441': attribute type 10 has an invalid length.
[  910.926587][T23558] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.6443'.
[  911.055867][T23564] netlink: 'syz.1.6445': attribute type 10 has an invalid length.
[  911.086179][T23564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6445'.
[  911.206917][T23566] rxe_eth0 speed is unknown, defaulting to 1000
[  912.153409][T23587] device syzkaller0 entered promiscuous mode
[  912.418329][T23596] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6458'.
[  912.648284][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6461'.
[  912.845102][T23608] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6463'.
[  912.956580][T23616] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6467'.
[  913.123471][T23630] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6472'.
[  913.146932][T23630] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0
[  913.187580][T23639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6473'.
[  913.240514][T23639] batman_adv: batadv0: Adding interface: virt_wifi0
[  913.289551][T23639] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.393234][T23639] batman_adv: batadv0: Interface activated: virt_wifi0
[  913.449743][T23645] rxe_eth0 speed is unknown, defaulting to 1000
[  914.157647][T23679] validate_nla: 10 callbacks suppressed
[  914.157664][T23679] netlink: 'syz.3.6488': attribute type 11 has an invalid length.
[  914.293552][T23679] netlink: 'syz.3.6488': attribute type 11 has an invalid length.
[  914.322331][T23685] rxe_eth0 speed is unknown, defaulting to 1000
[  914.463775][T23679] netlink: 'syz.3.6488': attribute type 11 has an invalid length.
[  914.532410][T23692] Dead loop on virtual device ip6_vti0, fix it urgently!
[  914.588980][T23679] netlink: 'syz.3.6488': attribute type 11 has an invalid length.
[  914.768305][T23679] netlink: 'syz.3.6488': attribute type 11 has an invalid length.
[  914.931901][T23685] chnl_net:caif_netlink_parms(): no params data found
[  915.229264][T23685] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.276444][T23685] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.316384][T23685] device bridge_slave_0 entered promiscuous mode
[  915.367582][T23724] netlink: 'syz.3.6500': attribute type 10 has an invalid length.
[  915.377995][T23685] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.402677][T23685] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.447237][T23685] device bridge_slave_1 entered promiscuous mode
[  915.522610][T23685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.572674][T23685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.641942][T23685] team0: Port device team_slave_0 added
[  915.678649][T23685] team0: Port device team_slave_1 added
[  915.724542][T23685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.772204][T23685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.863333][T23685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.937723][T23685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.944705][T23685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.046118][T23685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.076723][T23739] netlink: 'syz.4.6506': attribute type 13 has an invalid length.
[  916.105763][T23739] __nla_validate_parse: 3 callbacks suppressed
[  916.105804][T23739] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6506'.
[  916.346398][T15690] Bluetooth: hci4: command 0x0409 tx timeout
[  918.426276][T15690] Bluetooth: hci4: command 0x041b tx timeout
[  918.729104][T23739] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  918.939543][T23685] device hsr_slave_0 entered promiscuous mode
[  918.982280][T23685] device hsr_slave_1 entered promiscuous mode
[  919.026260][T23685] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  919.034164][T23685] Cannot create hsr debugfs directory
[  919.779888][T23772] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6518'.
[  919.986596][T23685] batman_adv: batadv0: Removing interface: netdevsim0
[  920.208058][T23794] FAULT_INJECTION: forcing a failure.
[  920.208058][T23794] name failslab, interval 1, probability 0, space 0, times 0
[  920.225067][T23789] nr0: port 1(hsr0) entered blocking state
[  920.231937][T23794] CPU: 0 PID: 23794 Comm: syz.0.6526 Not tainted syzkaller #0
[  920.239512][T23794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  920.246672][T23789] nr0: port 1(hsr0) entered disabled state
[  920.250035][T23794] Call Trace:
[  920.250047][T23794]  <TASK>
[  920.250056][T23794]  dump_stack_lvl+0x188/0x250
[  920.250082][T23794]  ? show_regs_print_info+0x20/0x20
[  920.250100][T23794]  ? load_image+0x410/0x410
[  920.250120][T23794]  ? __might_sleep+0xf0/0xf0
[  920.250139][T23794]  ? __lock_acquire+0x7d40/0x7d40
[  920.250164][T23794]  should_fail+0x383/0x4b0
[  920.290788][T23794]  should_failslab+0x5/0x20
[  920.295288][T23794]  slab_pre_alloc_hook+0x51/0xc0
[  920.300420][T23794]  __kmalloc+0x6b/0x340
[  920.304571][T23794]  ? bpf_test_init+0xf8/0x1b0
[  920.309238][T23794]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  920.315241][T23794]  bpf_test_init+0xf8/0x1b0
[  920.319742][T23794]  bpf_prog_test_run_skb+0x181/0x1190
[  920.325191][T23794]  ? lockdep_hardirqs_on+0x94/0x140
[  920.330421][T23794]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  920.336576][T23794]  ? cpu_online+0x60/0x60
[  920.340898][T23794]  bpf_prog_test_run+0x31c/0x390
[  920.345850][T23794]  __sys_bpf+0x5a5/0x6f0
[  920.350081][T23794]  ? bpf_link_show_fdinfo+0x380/0x380
[  920.355475][T23794]  __x64_sys_bpf+0x78/0x90
[  920.359914][T23794]  do_syscall_64+0x4c/0xa0
[  920.364329][T23794]  ? clear_bhb_loop+0x30/0x80
[  920.368993][T23794]  ? clear_bhb_loop+0x30/0x80
[  920.373847][T23794]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  920.379748][T23794] RIP: 0033:0x7f34ec251559
[  920.384155][T23794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  920.403922][T23794] RSP: 002b:00007f34ea4a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  920.412325][T23794] RAX: ffffffffffffffda RBX: 00007f34ec4d8fa0 RCX: 00007f34ec251559
[  920.420369][T23794] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  920.428336][T23794] RBP: 00007f34ea4a9090 R08: 0000000000000000 R09: 0000000000000000
[  920.436379][T23794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  920.444439][T23794] R13: 00007f34ec4d9038 R14: 00007f34ec4d8fa0 R15: 00007ffc99e5eca8
[  920.452414][T23794]  </TASK>
[  920.483304][T23789] device hsr0 entered promiscuous mode
[  920.506439][T15690] Bluetooth: hci4: command 0x040f tx timeout
[  920.539726][T23795] nr0: port 1(hsr0) entered blocking state
[  920.545663][T23795] nr0: port 1(hsr0) entered forwarding state
[  920.578103][T23685] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  920.617730][T23685] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  920.676536][T23685] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  920.782079][T23685] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  920.945694][T23820] netlink: 'syz.2.6535': attribute type 10 has an invalid length.
[  921.027446][T23823] netlink: 'syz.2.6535': attribute type 29 has an invalid length.
[  921.794453][T23823] netlink: 'syz.2.6535': attribute type 29 has an invalid length.
[  921.957019][T23685] 8021q: adding VLAN 0 to HW filter on device bond0
[  922.014063][T23685] 8021q: adding VLAN 0 to HW filter on device team0
[  922.028038][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  922.040565][T23838] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.6545'.
[  922.047536][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  922.070666][T23836] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.6544'.
[  922.098708][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  922.127746][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  922.152230][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.159559][ T8217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  922.174382][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  922.183398][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  922.193501][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state
[  922.200679][ T8217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  922.208766][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  922.221279][T23838] netlink: 'syz.4.6545': attribute type 10 has an invalid length.
[  922.230379][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6545'.
[  922.292194][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  922.332698][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  922.368216][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  922.397113][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  922.429740][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  922.460813][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  922.527510][T23685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  922.586498][T15691] Bluetooth: hci4: command 0x0419 tx timeout
[  922.598646][T23685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  922.643544][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  922.659715][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  922.692783][T23867] netlink: 'syz.3.6553': attribute type 9 has an invalid length.
[  922.697046][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  922.701070][T23867] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6553'.
[  922.739917][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  922.767321][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  922.801373][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  923.091772][T23885] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6558'.
[  923.214248][T23885] netlink: 'syz.2.6558': attribute type 10 has an invalid length.
[  923.244648][T23885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6558'.
[  923.285976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  923.310653][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  923.350661][T23685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.367799][T23896] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6560'.
[  923.405306][ T8234] device hsr_slave_0 left promiscuous mode
[  923.413477][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  923.421618][ T8234] batman_adv: batadv0: Removing interface: batadv_slave_1
[  923.433610][ T8234] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  923.442951][ T8234] batman_adv: batadv0: Removing interface: virt_wifi0
[  923.454877][ T8234] bridge0: port 3(batadv_slave_0) entered disabled state
[  923.465462][T23903] netlink: zone id is out of range
[  923.472015][ T8234] device bridge_slave_1 left promiscuous mode
[  923.475966][T23903] netlink: set zone limit has 8 unknown bytes
[  923.478408][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.493100][ T8234] device bridge_slave_0 left promiscuous mode
[  923.499923][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.622111][T23911] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6566'.
[  923.742887][ T8234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  923.759274][ T8234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  923.821424][ T8234] bond0 (unregistering): Released all slaves
[  923.903717][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  923.924207][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  924.090005][T23685] device veth0_vlan entered promiscuous mode
[  924.111128][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  924.152562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  924.214933][T23685] device veth1_vlan entered promiscuous mode
[  924.326552][T23921] device syzkaller0 entered promiscuous mode
[  924.343130][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  924.360247][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  924.368877][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  924.384221][T23931] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6572'.
[  924.386457][T23929] netlink: 'syz.4.6570': attribute type 19 has an invalid length.
[  924.404460][T23929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6570'.
[  924.416545][T23926] rxe_eth0 speed is unknown, defaulting to 1000
[  924.440832][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  924.467020][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  924.505563][T23931] netlink: 'syz.0.6572': attribute type 10 has an invalid length.
[  924.522593][T23685] device veth0_macvtap entered promiscuous mode
[  924.544581][T23685] device veth1_macvtap entered promiscuous mode
[  924.619907][T23685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  924.681288][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  924.697379][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  924.722658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  924.762433][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  924.782033][T23685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  924.800548][T23685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.812567][T23685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  924.826829][T23685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.841406][T23685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  924.853510][T23685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.870271][T23685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  924.928447][T17695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  924.937605][T17695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  924.952932][T23685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  924.962680][T23685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  924.979572][T23685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  924.990235][T23685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  925.052704][T23936] netlink: 'syz.0.6574': attribute type 10 has an invalid length.
[  925.182243][T17695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.217674][T17695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  925.251458][T17695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  925.274830][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.289717][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  925.346897][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  926.115624][T23973] netlink: 'syz.0.6589': attribute type 27 has an invalid length.
[  926.146334][T23973] netlink: 'syz.0.6589': attribute type 4 has an invalid length.
[  926.450772][T23991] netlink: 'syz.3.6597': attribute type 1 has an invalid length.
[  926.686844][T23997] FAULT_INJECTION: forcing a failure.
[  926.686844][T23997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  926.766375][T23997] CPU: 1 PID: 23997 Comm: syz.3.6599 Not tainted syzkaller #0
[  926.773888][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  926.783962][T23997] Call Trace:
[  926.787256][T23997]  <TASK>
[  926.790211][T23997]  dump_stack_lvl+0x188/0x250
[  926.794994][T23997]  ? show_regs_print_info+0x20/0x20
[  926.800291][T23997]  ? load_image+0x410/0x410
[  926.804905][T23997]  ? __lock_acquire+0x7d40/0x7d40
[  926.810035][T23997]  ? perf_trace_buf_update+0xa8/0x230
[  926.815605][T23997]  should_fail+0x383/0x4b0
[  926.820046][T23997]  _copy_from_user+0x2e/0x170
[  926.824745][T23997]  kstrtouint_from_user+0xd3/0x220
[  926.830046][T23997]  ? kstrtol_from_user+0x2a0/0x2a0
[  926.835193][T23997]  proc_fail_nth_write+0x8b/0x200
[  926.840361][T23997]  ? proc_fail_nth_read+0x220/0x220
[  926.845662][T23997]  ? common_file_perm+0x171/0x1c0
[  926.850698][T23997]  ? proc_fail_nth_read+0x220/0x220
[  926.855894][T23997]  vfs_write+0x304/0xd70
[  926.860136][T23997]  ? file_end_write+0x250/0x250
[  926.865000][T23997]  ? mutex_lock_nested+0x17/0x20
[  926.869937][T23997]  ? __fdget_pos+0x2bf/0x370
[  926.874704][T23997]  ? ksys_write+0x70/0x260
[  926.879127][T23997]  ksys_write+0x153/0x260
[  926.883537][T23997]  ? __ia32_sys_read+0x80/0x80
[  926.888289][T23997]  ? lockdep_hardirqs_on+0x94/0x140
[  926.893537][T23997]  do_syscall_64+0x4c/0xa0
[  926.898054][T23997]  ? clear_bhb_loop+0x30/0x80
[  926.902730][T23997]  ? clear_bhb_loop+0x30/0x80
[  926.907400][T23997]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  926.913281][T23997] RIP: 0033:0x7f8972e2ed8e
[  926.917784][T23997] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  926.937399][T23997] RSP: 002b:00007f89710a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  926.946352][T23997] RAX: ffffffffffffffda RBX: 00007f89710a56c0 RCX: 00007f8972e2ed8e
[  926.954577][T23997] RDX: 0000000000000001 RSI: 00007f89710a50a0 RDI: 000000000000000c
[  926.962640][T23997] RBP: 00007f89710a5090 R08: 0000000000000000 R09: 0000000000000000
[  926.970734][T23997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  926.978692][T23997] R13: 00007f89730f6128 R14: 00007f89730f6090 R15: 00007fffe9d2ecc8
[  926.986693][T23997]  </TASK>
[  927.308222][T24020] __nla_validate_parse: 4 callbacks suppressed
[  927.308241][T24020] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6608'.
[  927.370102][T24020] tc_dump_action: action bad kind
[  927.684445][T24039] delete_channel: no stack
[  927.790927][T24046] netlink: 'syz.1.6619': attribute type 1 has an invalid length.
[  927.822723][T24046] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6619'.
[  928.482066][T24068] netlink: 'syz.1.6628': attribute type 27 has an invalid length.
[  928.535021][T24068] netlink: 'syz.1.6628': attribute type 4 has an invalid length.
[  928.575862][T24068] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6628'.
[  928.611205][T24073] netlink: 'syz.4.6629': attribute type 1 has an invalid length.
[  928.619159][T24073] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6629'.
[  928.825596][T24082] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6632'.
[  929.248472][T24104] netlink: 'syz.4.6642': attribute type 27 has an invalid length.
[  929.256975][T24104] netlink: 'syz.4.6642': attribute type 4 has an invalid length.
[  929.265592][T24104] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6642'.
[  929.382825][T24114] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6646'.
[  929.654457][T24121] netlink: 192444 bytes leftover after parsing attributes in process `syz.0.6648'.
[  929.657983][T24123] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6649'.
[  929.798356][T24127] netlink: 'syz.4.6651': attribute type 21 has an invalid length.
[  929.895176][T24131] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6653'.
[  929.974576][T24127] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  930.073139][T24127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  930.452106][T24159] delete_channel: no stack
[  930.524010][T24162] device syzkaller0 entered promiscuous mode
[  931.050475][T24191] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  931.400791][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  931.407436][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  933.873535][T24201] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  933.883421][T24201] CPU: 1 PID: 24201 Comm: syz.1.6676 Not tainted syzkaller #0
[  933.891014][T24201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  933.901261][T24201] Call Trace:
[  933.904736][T24201]  <TASK>
[  933.907679][T24201]  dump_stack_lvl+0x188/0x250
[  933.912573][T24201]  ? show_regs_print_info+0x20/0x20
[  933.917800][T24201]  ? load_image+0x410/0x410
[  933.922334][T24201]  sysfs_warn_dup+0x8a/0xa0
[  933.926884][T24201]  sysfs_do_create_link_sd+0xc0/0x110
[  933.932399][T24201]  device_add+0x83b/0x1050
[  933.936865][T24201]  wiphy_register+0x1e74/0x2c40
[  933.941738][T24201]  ? cfg80211_event_work+0x40/0x40
[  933.946851][T24201]  ? minstrel_ht_alloc+0x807/0x980
[  933.952051][T24201]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  933.958543][T24201]  ieee80211_register_hw+0x2a03/0x3a60
[  933.964092][T24201]  ? ieee80211_register_hw+0xb11/0x3a60
[  933.969726][T24201]  ? ieee80211_tasklet_handler+0x20/0x20
[  933.975443][T24201]  ? rcu_is_watching+0x11/0xa0
[  933.980289][T24201]  ? hrtimer_init+0x10c/0x220
[  933.985146][T24201]  mac80211_hwsim_new_radio+0x209d/0x4050
[  933.991058][T24201]  hwsim_new_radio_nl+0xa7d/0xc50
[  933.996177][T24201]  genl_rcv_msg+0xd0b/0xfa0
[  934.000847][T24201]  ? genl_bind+0x370/0x370
[  934.005358][T24201]  ? verify_lock_unused+0x140/0x140
[  934.010556][T24201]  ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0
[  934.017138][T24201]  ? perf_trace_lock+0xe4/0x390
[  934.022128][T24201]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  934.028658][T24201]  netlink_rcv_skb+0x1e9/0x430
[  934.033789][T24201]  ? genl_bind+0x370/0x370
[  934.038375][T24201]  ? netlink_ack+0xb10/0xb10
[  934.043053][T24201]  ? down_read+0x1aa/0x2e0
[  934.047459][T24201]  genl_rcv+0x24/0x40
[  934.051514][T24201]  netlink_unicast+0x78f/0x940
[  934.056319][T24201]  netlink_sendmsg+0x8ba/0xbe0
[  934.061080][T24201]  ? netlink_getsockopt+0x570/0x570
[  934.066262][T24201]  ? aa_sock_msg_perm+0x94/0x150
[  934.071193][T24201]  ? apparmor_socket_sendmsg+0x88/0x230
[  934.076812][T24201]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  934.082268][T24201]  ? security_socket_sendmsg+0x7c/0xa0
[  934.087803][T24201]  ? netlink_getsockopt+0x570/0x570
[  934.092996][T24201]  ____sys_sendmsg+0x5be/0x8f0
[  934.097763][T24201]  ? __sys_sendmsg_sock+0x30/0x30
[  934.102784][T24201]  ? import_iovec+0x6f/0xa0
[  934.107408][T24201]  ___sys_sendmsg+0x236/0x2e0
[  934.112093][T24201]  ? __sys_sendmsg+0x290/0x290
[  934.117047][T24201]  ? trace_event_raw_event_lock+0x250/0x250
[  934.123044][T24201]  __se_sys_sendmsg+0x1b7/0x2a0
[  934.128033][T24201]  ? __x64_sys_sendmsg+0x80/0x80
[  934.133572][T24201]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  934.139583][T24201]  ? lockdep_hardirqs_on+0x94/0x140
[  934.144989][T24201]  do_syscall_64+0x4c/0xa0
[  934.149595][T24201]  ? clear_bhb_loop+0x30/0x80
[  934.154354][T24201]  ? clear_bhb_loop+0x30/0x80
[  934.159282][T24201]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  934.165181][T24201] RIP: 0033:0x7f1af57b6559
[  934.169602][T24201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.189398][T24201] RSP: 002b:00007f1af3906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.197908][T24201] RAX: ffffffffffffffda RBX: 00007f1af5a3e720 RCX: 00007f1af57b6559
[  934.206130][T24201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  934.214198][T24201] RBP: 00007f1af584d8b0 R08: 0000000000000000 R09: 0000000000000000
[  934.222247][T24201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  934.230220][T24201] R13: 00007f1af5a3e7b8 R14: 00007f1af5a3e720 R15: 00007fff70719408
[  934.238351][T24201]  </TASK>
[  934.663154][T24232] validate_nla: 2 callbacks suppressed
[  934.663171][T24232] netlink: 'syz.1.6685': attribute type 10 has an invalid length.
[  934.681855][T24232] __nla_validate_parse: 7 callbacks suppressed
[  934.681873][T24232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6685'.
[  934.707396][T24232] batman_adv: batadv0: Adding interface: virt_wifi0
[  934.714162][T24232] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.759915][T24232] batman_adv: batadv0: Interface activated: virt_wifi0
[  934.768499][T24235] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6689'.
[  935.168800][T24256] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.6698'.
[  935.281228][T24259] device syzkaller0 entered promiscuous mode
[  935.948143][T24285] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6705'.
[  936.138040][T24296] netlink: 'syz.0.6713': attribute type 9 has an invalid length.
[  936.153824][T24296] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6713'.
[  936.201213][T24292] rxe_eth0 speed is unknown, defaulting to 1000
[  936.227745][T24300] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6715'.
[  936.381220][T24306] netlink: 'syz.1.6716': attribute type 10 has an invalid length.
[  936.469110][T24306] batman_adv: batadv0: Adding interface: netdevsim0
[  936.569547][T24306] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  937.152734][T24318] IPv6: …: Disabled Multicast RS
[  937.419790][T24330] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6725'.
[  938.833045][T24368] device syzkaller0 entered promiscuous mode
[  938.856023][T24364] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6735'.
[  938.883906][T24364] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  938.899866][T24364] CPU: 1 PID: 24364 Comm: syz.3.6735 Not tainted syzkaller #0
[  938.908318][T24364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  938.918409][T24364] Call Trace:
[  938.921729][T24364]  <TASK>
[  938.924864][T24364]  dump_stack_lvl+0x188/0x250
[  938.929616][T24364]  ? show_regs_print_info+0x20/0x20
[  938.934859][T24364]  ? load_image+0x410/0x410
[  938.939435][T24364]  sysfs_warn_dup+0x8a/0xa0
[  938.944072][T24364]  sysfs_do_create_link_sd+0xc0/0x110
[  938.949491][T24364]  device_add+0x83b/0x1050
[  938.953955][T24364]  wiphy_register+0x1e74/0x2c40
[  938.958890][T24364]  ? cfg80211_event_work+0x40/0x40
[  938.964039][T24364]  ? minstrel_ht_alloc+0x807/0x980
[  938.969214][T24364]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  938.975324][T24364]  ieee80211_register_hw+0x2a03/0x3a60
[  938.980845][T24364]  ? ieee80211_register_hw+0xb11/0x3a60
[  938.986712][T24364]  ? ieee80211_tasklet_handler+0x20/0x20
[  938.992393][T24364]  ? rcu_is_watching+0x11/0xa0
[  938.997252][T24364]  ? hrtimer_init+0x10c/0x220
[  939.001972][T24364]  mac80211_hwsim_new_radio+0x209d/0x4050
[  939.007786][T24364]  hwsim_new_radio_nl+0xa7d/0xc50
[  939.012925][T24364]  genl_rcv_msg+0xd0b/0xfa0
[  939.017496][T24364]  ? genl_bind+0x370/0x370
[  939.021983][T24364]  ? __dev_queue_xmit+0x1b64/0x2e50
[  939.027233][T24364]  ? verify_lock_unused+0x140/0x140
[  939.032734][T24364]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  939.038808][T24364]  ? perf_trace_lock+0x301/0x390
[  939.043802][T24364]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  939.050213][T24364]  netlink_rcv_skb+0x1e9/0x430
[  939.055009][T24364]  ? genl_bind+0x370/0x370
[  939.059466][T24364]  ? netlink_ack+0xb10/0xb10
[  939.064114][T24364]  ? down_read+0x1aa/0x2e0
[  939.068577][T24364]  genl_rcv+0x24/0x40
[  939.072586][T24364]  netlink_unicast+0x78f/0x940
[  939.077413][T24364]  netlink_sendmsg+0x8ba/0xbe0
[  939.082406][T24364]  ? netlink_getsockopt+0x570/0x570
[  939.087632][T24364]  ? aa_sock_msg_perm+0x94/0x150
[  939.092621][T24364]  ? apparmor_socket_sendmsg+0x88/0x230
[  939.098207][T24364]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  939.103523][T24364]  ? security_socket_sendmsg+0x7c/0xa0
[  939.109012][T24364]  ? netlink_getsockopt+0x570/0x570
[  939.114276][T24364]  ____sys_sendmsg+0x5be/0x8f0
[  939.119092][T24364]  ? __sys_sendmsg_sock+0x30/0x30
[  939.124176][T24364]  ? import_iovec+0x6f/0xa0
[  939.128735][T24364]  ___sys_sendmsg+0x236/0x2e0
[  939.133477][T24364]  ? __sys_sendmsg+0x290/0x290
[  939.138312][T24364]  ? trace_event_raw_event_lock+0x250/0x250
[  939.144307][T24364]  __se_sys_sendmsg+0x1b7/0x2a0
[  939.149290][T24364]  ? __x64_sys_sendmsg+0x80/0x80
[  939.154261][T24364]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  939.160307][T24364]  ? lockdep_hardirqs_on+0x94/0x140
[  939.165554][T24364]  do_syscall_64+0x4c/0xa0
[  939.170006][T24364]  ? clear_bhb_loop+0x30/0x80
[  939.174717][T24364]  ? clear_bhb_loop+0x30/0x80
[  939.179430][T24364]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  939.185352][T24364] RIP: 0033:0x7f8972e6e559
[  939.189796][T24364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.209434][T24364] RSP: 002b:00007f89710c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  939.217890][T24364] RAX: ffffffffffffffda RBX: 00007f89730f5fa0 RCX: 00007f8972e6e559
[  939.225893][T24364] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 000000000000000b
[  939.233897][T24364] RBP: 00007f8972f058b0 R08: 0000000000000000 R09: 0000000000000000
[  939.241907][T24364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.250426][T24364] R13: 00007f89730f6038 R14: 00007f89730f5fa0 R15: 00007fffe9d2ecc8
[  939.258471][T24364]  </TASK>
[  939.364720][T24369] rxe_eth0 speed is unknown, defaulting to 1000
[  939.971182][T24388] rxe_eth0 speed is unknown, defaulting to 1000
[  941.161078][T24424] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.6756'.
[  941.254672][T24426] netlink: 26 bytes leftover after parsing attributes in process `syz.0.6754'.
[  941.540470][T24434] netlink: 'syz.4.6757': attribute type 29 has an invalid length.
[  941.971906][T24434] netlink: 'syz.4.6757': attribute type 29 has an invalid length.
[  941.984501][T24437] netlink: 'syz.4.6757': attribute type 29 has an invalid length.
[  941.993048][T24436] netlink: 'syz.4.6757': attribute type 29 has an invalid length.
[  942.006642][T24438] netlink: 'syz.4.6757': attribute type 29 has an invalid length.
[  942.135475][T24442] rxe_eth0 speed is unknown, defaulting to 1000
[  942.171390][T24443] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.6759'.
[  944.821285][T24519] netlink: 'syz.4.6781': attribute type 21 has an invalid length.
[  944.875402][T24519] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6781'.
[  944.919588][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  944.981894][T24519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  945.040657][T24530] netlink: 'syz.1.6783': attribute type 21 has an invalid length.
[  945.072771][T24530] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6783'.
[  945.190609][T24534] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.6785'.
[  945.408395][T24539] netlink: 'syz.4.6787': attribute type 10 has an invalid length.
[  945.426432][T24539] device hsr0 entered promiscuous mode
[  945.434555][T24539] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  945.932647][T24560] netlink: 'syz.2.6798': attribute type 1 has an invalid length.
[  945.949886][T24560] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6798'.
[  946.018905][T24565] netlink: 'syz.0.6799': attribute type 10 has an invalid length.
[  946.036805][T24565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6799'.
[  946.066590][T24565] device team0 entered promiscuous mode
[  946.083180][T24565] device team_slave_0 entered promiscuous mode
[  946.164507][T24567] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6800'.
[  946.176302][T24565] device team_slave_1 entered promiscuous mode
[  946.233690][T24570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  946.253215][T24565] bridge0: port 4(team0) entered blocking state
[  946.316924][T24565] bridge0: port 4(team0) entered disabled state
[  946.885638][T24580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6803'.
[  947.113250][T24590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  947.215814][T24590] device syzkaller0 entered promiscuous mode
[  947.306657][T24607] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.6812'.
[  947.327059][T24606] validate_nla: 2 callbacks suppressed
[  947.327093][T24606] netlink: 'syz.0.6812': attribute type 3 has an invalid length.
[  947.385835][T24610] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6811'.
[  947.395723][T24606] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6812'.
[  947.455368][T24612] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.6812'.
[  948.185179][T24639] tun0: tun_chr_ioctl cmd 1074025675
[  948.191826][T24639] tun0: persist enabled
[  948.199001][T24639] tun0: tun_chr_ioctl cmd 1074025675
[  948.204747][T24639] tun0: persist disabled
[  948.295125][T24641] device syzkaller0 entered promiscuous mode
[  948.316031][T24653] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6826'.
[  948.581751][T24663] netlink: 'syz.3.6830': attribute type 10 has an invalid length.
[  948.686732][T24673] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.6833'.
[  948.803363][T24675] netlink: 'syz.2.6834': attribute type 10 has an invalid length.
[  948.815767][T24675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6834'.
[  948.835087][T24675] device team0 entered promiscuous mode
[  948.851480][T24675] device team_slave_0 entered promiscuous mode
[  948.892647][T24675] device team_slave_1 entered promiscuous mode
[  948.978052][T24675] bridge0: port 4(team0) entered blocking state
[  949.025962][T24675] bridge0: port 4(team0) entered disabled state
[  949.125568][T24675] bridge0: port 4(team0) entered blocking state
[  949.132649][T24675] bridge0: port 4(team0) entered forwarding state
[  949.152541][T24671] netlink: 'syz.0.6833': attribute type 10 has an invalid length.
[  949.203774][T24671] device geneve1 entered promiscuous mode
[  949.210584][T24671] team0: Port device geneve1 added
[  949.227897][T24671] netlink: 'syz.0.6833': attribute type 10 has an invalid length.
[  949.323735][T24683] FAULT_INJECTION: forcing a failure.
[  949.323735][T24683] name failslab, interval 1, probability 0, space 0, times 0
[  949.340405][T24683] CPU: 0 PID: 24683 Comm: syz.2.6837 Not tainted syzkaller #0
[  949.347917][T24683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  949.358344][T24683] Call Trace:
[  949.361628][T24683]  <TASK>
[  949.364651][T24683]  dump_stack_lvl+0x188/0x250
[  949.369482][T24683]  ? show_regs_print_info+0x20/0x20
[  949.374753][T24683]  ? load_image+0x410/0x410
[  949.379483][T24683]  ? __might_sleep+0xf0/0xf0
[  949.384177][T24683]  ? __lock_acquire+0x7d40/0x7d40
[  949.389569][T24683]  ? mark_lock+0x94/0x320
[  949.393921][T24683]  should_fail+0x383/0x4b0
[  949.398350][T24683]  should_failslab+0x5/0x20
[  949.403353][T24683]  slab_pre_alloc_hook+0x51/0xc0
[  949.408302][T24683]  __kmalloc+0x6b/0x340
[  949.412688][T24683]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  949.418821][T24683]  tomoyo_realpath_from_path+0xed/0x5e0
[  949.424759][T24683]  tomoyo_path_number_perm+0x251/0x6b0
[  949.430248][T24683]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  949.435777][T24683]  security_file_ioctl+0x6c/0xa0
[  949.440880][T24683]  __se_sys_ioctl+0x48/0x170
[  949.445615][T24683]  do_syscall_64+0x4c/0xa0
[  949.450222][T24683]  ? clear_bhb_loop+0x30/0x80
[  949.455089][T24683]  ? clear_bhb_loop+0x30/0x80
[  949.460231][T24683]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  949.466493][T24683] RIP: 0033:0x7fe86afa6559
[  949.471232][T24683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  949.491124][T24683] RSP: 002b:00007fe8691fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  949.499646][T24683] RAX: ffffffffffffffda RBX: 00007fe86b22dfa0 RCX: 00007fe86afa6559
[  949.507719][T24683] RDX: 0000200000000c80 RSI: 000000000000541b RDI: 0000000000000008
[  949.515877][T24683] RBP: 00007fe8691fe090 R08: 0000000000000000 R09: 0000000000000000
[  949.523860][T24683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.532370][T24683] R13: 00007fe86b22e038 R14: 00007fe86b22dfa0 R15: 00007ffca21fdb28
[  949.540388][T24683]  </TASK>
[  949.553585][T24683] ERROR: Out of memory at tomoyo_realpath_from_path.
[  949.565558][T24671] netlink: 'syz.0.6833': attribute type 10 has an invalid length.
[  949.832646][T24712] netlink: 'syz.0.6848': attribute type 21 has an invalid length.
[  949.857183][T24714] netlink: 'syz.3.6849': attribute type 9 has an invalid length.
[  949.865187][T24714] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6849'.
[  949.951864][T24717] pimreg: tun_chr_ioctl cmd 2147767519
[  950.044172][T24724] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6855'.
[  950.393348][T24747] netlink: 'syz.0.6864': attribute type 21 has an invalid length.
[  950.749448][T24760] device sit0 entered promiscuous mode
[  951.174502][T24774] netlink: 'syz.3.6873': attribute type 10 has an invalid length.
[  951.199315][T24774] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  951.630335][T24807] team0: Device hsr_slave_0 failed to register rx_handler
[  951.768164][T24806] team0: Device hsr_slave_0 failed to register rx_handler
[  952.210048][T24839] __nla_validate_parse: 5 callbacks suppressed
[  952.210089][T24839] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6898'.
[  952.473502][T24863] IPv6: Can't replace route, no match found
[  952.484452][T24863] IPv6: Can't replace route, no match found
[  952.494568][T24863] IPv6: Can't replace route, no match found
[  952.508493][T24863] IPv6: Can't replace route, no match found
[  952.514903][T24863] IPv6: Can't replace route, no match found
[  952.526697][T24863] IPv6: Can't replace route, no match found
[  952.538865][T24863] IPv6: Can't replace route, no match found
[  952.555501][T24863] IPv6: Can't replace route, no match found
[  952.575455][T24863] IPv6: Can't replace route, no match found
[  952.582895][T24863] IPv6: Can't replace route, no match found
[  952.595340][T24863] IPv6: Can't replace route, no match found
[  952.608038][T24863] IPv6: Can't replace route, no match found
[  952.614428][T24863] IPv6: Can't replace route, no match found
[  952.622208][T24863] IPv6: Can't replace route, no match found
[  952.636352][T24863] IPv6: Can't replace route, no match found
[  952.653719][T24863] IPv6: Can't replace route, no match found
[  952.667881][T24863] IPv6: Can't replace route, no match found
[  952.674853][T24863] IPv6: Can't replace route, no match found
[  952.682728][T24863] IPv6: Can't replace route, no match found
[  952.690037][T24863] IPv6: Can't replace route, no match found
[  952.696518][T24863] IPv6: Can't replace route, no match found
[  952.702916][T24863] IPv6: Can't replace route, no match found
[  952.709772][T24863] IPv6: Can't replace route, no match found
[  952.716228][T24863] IPv6: Can't replace route, no match found
[  952.722651][T24863] IPv6: Can't replace route, no match found
[  952.730625][T24863] IPv6: Can't replace route, no match found
[  952.740684][T24863] IPv6: Can't replace route, no match found
[  952.748661][T24863] IPv6: Can't replace route, no match found
[  952.760568][T24863] IPv6: Can't replace route, no match found
[  952.772586][T24863] IPv6: Can't replace route, no match found
[  952.783627][T24863] IPv6: Can't replace route, no match found
[  952.790571][T24863] IPv6: Can't replace route, no match found
[  952.804852][T24863] IPv6: Can't replace route, no match found
[  952.811634][T24863] IPv6: Can't replace route, no match found
[  952.822579][T24863] IPv6: Can't replace route, no match found
[  952.831126][T24863] IPv6: Can't replace route, no match found
[  952.842274][T24863] IPv6: Can't replace route, no match found
[  952.848898][T24863] IPv6: Can't replace route, no match found
[  952.863245][T24863] IPv6: Can't replace route, no match found
[  952.870213][T24863] IPv6: Can't replace route, no match found
[  952.882091][T24863] IPv6: Can't replace route, no match found
[  952.888654][T24863] IPv6: Can't replace route, no match found
[  952.895137][T24863] IPv6: Can't replace route, no match found
[  952.909444][T24863] IPv6: Can't replace route, no match found
[  952.919765][T24863] IPv6: Can't replace route, no match found
[  952.928483][T24863] IPv6: Can't replace route, no match found
[  952.941784][T24863] IPv6: Can't replace route, no match found
[  952.949978][T24863] IPv6: Can't replace route, no match found
[  952.961397][T24863] IPv6: Can't replace route, no match found
[  952.970273][T24863] IPv6: Can't replace route, no match found
[  952.980353][T24863] IPv6: Can't replace route, no match found
[  952.988315][T24863] IPv6: Can't replace route, no match found
[  952.994869][T24863] IPv6: Can't replace route, no match found
[  953.005176][T24863] IPv6: Can't replace route, no match found
[  953.013060][T24863] IPv6: Can't replace route, no match found
[  953.023281][T24863] IPv6: Can't replace route, no match found
[  953.031021][T24863] IPv6: Can't replace route, no match found
[  953.041030][T24863] IPv6: Can't replace route, no match found
[  953.048701][T24863] IPv6: Can't replace route, no match found
[  953.055311][T24863] IPv6: Can't replace route, no match found
[  953.073644][T24863] IPv6: Can't replace route, no match found
[  953.081302][T24863] IPv6: Can't replace route, no match found
[  953.089799][T24863] IPv6: Can't replace route, no match found
[  953.096574][T24863] IPv6: Can't replace route, no match found
[  953.104278][T24863] IPv6: Can't replace route, no match found
[  953.229601][T24880] rxe_eth0 speed is unknown, defaulting to 1000
[  953.423885][T24891] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.6915'.
[  953.461776][T24890] tun0: tun_chr_ioctl cmd 1074025675
[  953.477503][T24890] tun0: persist enabled
[  953.499141][T24890] tun0: tun_chr_ioctl cmd 1074025675
[  953.508935][T24890] tun0: persist disabled
[  954.463064][T24901] bond0: (slave geneve0): Error: Slave device does not support XDP
[  954.552068][T24907] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.6922'.
[  954.615176][T24914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6923'.
[  954.633828][T24914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6923'.
[  954.668450][T24909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6923'.
[  955.068619][T24933] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6933'.
[  955.130191][T24933] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  955.265996][T24941] validate_nla: 3 callbacks suppressed
[  955.266013][T24941] netlink: 'syz.4.6936': attribute type 2 has an invalid length.
[  955.280276][T24941] netlink: 119 bytes leftover after parsing attributes in process `syz.4.6936'.
[  955.296108][T24940] netlink: 'syz.4.6936': attribute type 2 has an invalid length.
[  955.315991][T24940] netlink: 119 bytes leftover after parsing attributes in process `syz.4.6936'.
[  955.365917][T24948] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6939'.
[  955.402925][T24950] netlink: 'syz.0.6940': attribute type 9 has an invalid length.
[  955.833816][T24975] device wlan1 entered promiscuous mode
[  955.868242][T24987] netlink: 'syz.0.6950': attribute type 21 has an invalid length.
[  956.154117][T25010] netlink: 'syz.1.6959': attribute type 4 has an invalid length.
[  956.196680][T25010] netlink: 'syz.1.6959': attribute type 16 has an invalid length.
[  956.259222][T25010] netlink: 'syz.1.6959': attribute type 4 has an invalid length.
[  956.308931][T25017] netlink: 'syz.0.6961': attribute type 1 has an invalid length.
[  956.390940][T25010] netlink: 'syz.1.6959': attribute type 16 has an invalid length.
[  956.440782][T25027] netlink: 'syz.4.6964': attribute type 39 has an invalid length.
[  956.778751][T25043] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  956.808094][T25043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  957.088808][T25067] device syzkaller0 entered promiscuous mode
[  957.600957][T25105] team0: Device gre0 is up. Set it down before adding it as a team port
[  957.697436][T25103] __nla_validate_parse: 42 callbacks suppressed
[  957.697456][T25103] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6997'.
[  957.720672][T25108] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6999'.
[  958.084812][T25133] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.7008'.
[  958.539436][T25160] FAULT_INJECTION: forcing a failure.
[  958.539436][T25160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  958.556512][T25160] CPU: 0 PID: 25160 Comm: syz.1.7019 Not tainted syzkaller #0
[  958.564295][T25160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  958.574462][T25160] Call Trace:
[  958.577985][T25160]  <TASK>
[  958.580935][T25160]  dump_stack_lvl+0x188/0x250
[  958.585631][T25160]  ? show_regs_print_info+0x20/0x20
[  958.590856][T25160]  ? load_image+0x410/0x410
[  958.595473][T25160]  ? __lock_acquire+0x7d40/0x7d40
[  958.600523][T25160]  should_fail+0x383/0x4b0
[  958.604964][T25160]  _copy_to_user+0x2e/0x130
[  958.609501][T25160]  simple_read_from_buffer+0xe3/0x150
[  958.614937][T25160]  proc_fail_nth_read+0x1a6/0x220
[  958.620162][T25160]  ? proc_fault_inject_write+0x310/0x310
[  958.625914][T25160]  ? fsnotify_perm+0x254/0x560
[  958.630717][T25160]  ? proc_fault_inject_write+0x310/0x310
[  958.636371][T25160]  vfs_read+0x2ff/0xd50
[  958.640542][T25160]  ? __lock_acquire+0x7d40/0x7d40
[  958.645597][T25160]  ? kernel_read+0x1e0/0x1e0
[  958.650219][T25160]  ? mutex_lock_nested+0x17/0x20
[  958.655177][T25160]  ? __fdget_pos+0x2bf/0x370
[  958.659781][T25160]  ? ksys_read+0x70/0x260
[  958.664304][T25160]  ksys_read+0x153/0x260
[  958.668723][T25160]  ? vfs_write+0xd70/0xd70
[  958.673171][T25160]  ? lockdep_hardirqs_on+0x94/0x140
[  958.678454][T25160]  do_syscall_64+0x4c/0xa0
[  958.682896][T25160]  ? clear_bhb_loop+0x30/0x80
[  958.688011][T25160]  ? clear_bhb_loop+0x30/0x80
[  958.692811][T25160]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  958.698819][T25160] RIP: 0033:0x7f1af5776d8e
[  958.703438][T25160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  958.723474][T25160] RSP: 002b:00007f1af3a0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  958.732173][T25160] RAX: ffffffffffffffda RBX: 00007f1af3a0e6c0 RCX: 00007f1af5776d8e
[  958.740425][T25160] RDX: 000000000000000f RSI: 00007f1af3a0e0a0 RDI: 0000000000000009
[  958.748504][T25160] RBP: 00007f1af3a0e090 R08: 0000000000000000 R09: 0000000000000000
[  958.757330][T25160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  958.765493][T25160] R13: 00007f1af5a3e038 R14: 00007f1af5a3dfa0 R15: 00007fff70719408
[  958.773671][T25160]  </TASK>
[  959.602469][T25191] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.7032'.
[  959.660683][T25191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7032'.
[  959.713011][T25199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7036'.
[  959.806660][T25207] pimreg: tun_chr_ioctl cmd 1074025677
[  959.836635][T25207] pimreg: linktype set to 1
[  959.855014][T25207] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.7039'.
[  960.053896][T25219] rxe_eth0 speed is unknown, defaulting to 1000
[  960.181941][T25233] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7048'.
[  960.247140][T25235] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.7051'.
[  960.263841][T25233] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7048'.
[  960.342549][T25235] validate_nla: 69 callbacks suppressed
[  960.342570][T25235] netlink: 'syz.4.7051': attribute type 10 has an invalid length.
[  960.505901][T25249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.624281][T25254] device syzkaller0 entered promiscuous mode
[  960.651813][T25258] netlink: 'syz.2.7061': attribute type 1 has an invalid length.
[  960.721750][T25261] netlink: 'syz.0.7062': attribute type 10 has an invalid length.
[  961.922876][T25298] netlink: 'syz.0.7072': attribute type 21 has an invalid length.
[  961.960095][T25299] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  961.980626][T25299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  962.141476][T25318] netlink: 'syz.3.7076': attribute type 10 has an invalid length.
[  962.304024][T25325] netlink: 'syz.2.7082': attribute type 11 has an invalid length.
[  962.363593][T25319] rxe_eth0 speed is unknown, defaulting to 1000
[  962.949955][T25356] __nla_validate_parse: 7 callbacks suppressed
[  962.949972][T25356] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7089'.
[  963.108557][T25351] rxe_eth0 speed is unknown, defaulting to 1000
[  963.131092][T25364] netlink: 'syz.2.7092': attribute type 10 has an invalid length.
[  963.169934][T25364] team0: Device gre0 is up. Set it down before adding it as a team port
[  963.381153][T25371] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7095'.
[  963.414673][T25371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  963.491506][T25371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  963.539896][T25382] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.7100'.
[  963.558429][T25383] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.7100'.
[  963.663386][T25385] device syzkaller0 entered promiscuous mode
[  963.770165][T25393] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7104'.
[  964.476301][T25411] rxe_eth0 speed is unknown, defaulting to 1000
[  964.847965][T25434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7117'.
[  964.888067][T25434] : renamed from caif0
[  964.934403][T25434] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  964.995302][T25435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  965.002773][T25435] IPv6: NLM_F_CREATE should be set when creating new route
[  965.010288][T25435] IPv6: NLM_F_CREATE should be set when creating new route
[  965.017749][T25435] IPv6: NLM_F_CREATE should be set when creating new route
[  965.092371][T25437] rxe_eth0 speed is unknown, defaulting to 1000
[  965.343611][T25445] netlink: 'syz.2.7122': attribute type 21 has an invalid length.
[  965.407434][T25447] netlink: 'syz.4.7123': attribute type 9 has an invalid length.
[  965.489365][T25447] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7123'.
[  966.012427][T25473] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7134'.
[  966.062804][T25475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7133'.
[  966.093455][T25475] : renamed from caif0
[  966.143703][T25475] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  966.192753][T25480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  966.554271][T25498] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7141'.
[  966.842713][    C1] 
[  966.842723][    C1] ================================
[  966.842728][    C1] WARNING: inconsistent lock state
[  966.842818][    C1] syzkaller #0 Not tainted
[  966.842826][    C1] --------------------------------
[  966.842831][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  966.842837][    C1] syz.2.7142/25501 [HC2[2]:SC0[0]:HE0:SE1] takes:
[  966.842854][    C1] ffff888021f0a420 (&htab->lockdep_key){....}-{2:2}, at: htab_lru_map_delete_elem+0x1ae/0x650
[  966.842903][    C1] {INITIAL USE} state was registered at:
[  966.842914][    C1]   lock_acquire+0x19f/0x400
[  966.842930][    C1]   _raw_spin_lock_irqsave+0xb0/0x100
[  966.842946][    C1]   htab_lru_map_update_elem+0x369/0xc60
[  966.842958][    C1]   bpf_map_update_value+0x57c/0x650
[  966.842972][    C1]   map_update_elem+0x603/0x760
[  966.842986][    C1]   __sys_bpf+0x46b/0x6f0
[  966.842997][    C1]   __x64_sys_bpf+0x78/0x90
[  966.843009][    C1]   do_syscall_64+0x4c/0xa0
[  966.843023][    C1]   entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  966.843038][    C1] irq event stamp: 9636
[  966.843043][    C1] hardirqs last  enabled at (9635): [<ffffffff89c1f42e>] noist_exc_debug+0xee/0x120
[  966.843061][    C1] hardirqs last disabled at (9636): [<ffffffff89c223ef>] irqentry_enter+0xf/0x50
[  966.843077][    C1] softirqs last  enabled at (9606): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230
[  966.843096][    C1] softirqs last disabled at (8757): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230
[  966.843114][    C1] 
[  966.843114][    C1] other info that might help us debug this:
[  966.843118][    C1]  Possible unsafe locking scenario:
[  966.843118][    C1] 
[  966.843122][    C1]        CPU0
[  966.843125][    C1]        ----
[  966.843128][    C1]   lock(&htab->lockdep_key);
[  966.843137][    C1]   <Interrupt>
[  966.843140][    C1]     lock(&htab->lockdep_key);
[  966.843148][    C1] 
[  966.843148][    C1]  *** DEADLOCK ***
[  966.843148][    C1] 
[  966.843151][    C1] 1 lock held by syz.2.7142/25501:
[  966.843160][    C1]  #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  966.843196][    C1] 
[  966.843196][    C1] stack backtrace:
[  966.843202][    C1] CPU: 1 PID: 25501 Comm: syz.2.7142 Not tainted syzkaller #0
[  966.843216][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  966.843225][    C1] Call Trace:
[  966.843231][    C1]  <#DB>
[  966.843238][    C1]  dump_stack_lvl+0x188/0x250
[  966.843255][    C1]  ? show_regs_print_info+0x20/0x20
[  966.843273][    C1]  ? print_usage_bug+0x43d/0x6a0
[  966.843287][    C1]  ? verify_lock_unused+0x15/0x140
[  966.843303][    C1]  lock_acquire+0x2c3/0x400
[  966.843316][    C1]  ? perf_swevent_get_recursion_context+0xda/0x150
[  966.843334][    C1]  ? htab_lru_map_delete_elem+0x1ae/0x650
[  966.843348][    C1]  ? read_lock_is_recursive+0x10/0x10
[  966.843365][    C1]  ? perf_trace_buf_update+0xa8/0x230
[  966.843389][    C1]  ? look_up_lock_class+0x71/0x110
[  966.843406][    C1]  ? verify_lock_unused+0x15/0x140
[  966.843424][    C1]  _raw_spin_lock_irqsave+0xb0/0x100
[  966.843441][    C1]  ? htab_lru_map_delete_elem+0x1ae/0x650
[  966.843455][    C1]  ? _raw_spin_lock+0x40/0x40
[  966.843472][    C1]  ? htab_map_hash+0x269/0x6d0
[  966.843488][    C1]  htab_lru_map_delete_elem+0x1ae/0x650
[  966.843509][    C1]  bpf_prog_c4ae881bb5a4a584+0x45/0xc54
[  966.843524][    C1]  bpf_overflow_handler+0x1c2/0x4a0
[  966.843544][    C1]  ? perf_event_switch_output+0x730/0x730
[  966.843565][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  966.843583][    C1]  __perf_event_overflow+0x35f/0x550
[  966.843601][    C1]  perf_bp_event+0x276/0x320
[  966.843626][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  966.843656][    C1]  ? rcu_lock_acquire+0x9/0x30
[  966.843675][    C1]  ? read_lock_is_recursive+0x10/0x10
[  966.843696][    C1]  hw_breakpoint_exceptions_notify+0x14d/0x470
[  966.843716][    C1]  atomic_notifier_call_chain+0x15d/0x280
[  966.843735][    C1]  notify_die+0x141/0x1a0
[  966.843751][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  966.843770][    C1]  ? exc_debug+0x6e/0x130
[  966.843786][    C1]  ? trace_hardirqs_off_finish+0x24/0x1f0
[  966.843803][    C1]  notify_debug+0x20/0x30
[  966.843820][    C1]  exc_debug+0xcf/0x130
[  966.843837][    C1]  asm_exc_debug+0x1a/0x40
[  966.843853][    C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13
[  966.843888][    C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00
[  966.843901][    C1] RSP: 0000:ffffc9000318f680 EFLAGS: 00040802
[  966.843914][    C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88802c16d940
[  966.843924][    C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0
[  966.843934][    C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000
[  966.843944][    C1] R10: dffffc0000000000 R11: fffff52000631f2f R12: ffff88802c16f0e8
[  966.843955][    C1] R13: 00000000ffffffff R14: 0000200000000300 R15: 000000000000007f
[  966.843974][    C1]  </#DB>
[  966.843979][    C1]  <TASK>
[  966.843984][    C1]  perf_callchain_user+0x423/0xf80
[  966.844008][    C1]  ? get_callchain_entry+0x181/0x3b0
[  966.844025][    C1]  get_perf_callchain+0x33d/0x460
[  966.844043][    C1]  ? put_callchain_entry+0xb0/0xb0
[  966.844061][    C1]  ? __perf_event_header__init_id+0x3ea/0x4f0
[  966.844080][    C1]  perf_prepare_sample+0x352/0x1cb0
[  966.844100][    C1]  ? perf_callchain+0x190/0x190
[  966.844119][    C1]  perf_event_output_forward+0x185/0x2e0
[  966.844137][    C1]  ? perf_get_page_size+0x430/0x430
[  966.844152][    C1]  ? __lock_acquire+0x13b3/0x7d40
[  966.844176][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  966.844200][    C1]  __perf_event_overflow+0x35f/0x550
[  966.844220][    C1]  perf_swevent_hrtimer+0x3c2/0x550
[  966.844238][    C1]  ? cpu_clock_event_read+0x50/0x50
[  966.844266][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  966.844283][    C1]  ? _raw_spin_unlock+0x40/0x40
[  966.844302][    C1]  ? cpu_clock_event_read+0x50/0x50
[  966.844317][    C1]  __hrtimer_run_queues+0x4b0/0xb60
[  966.844346][    C1]  ? hrtimer_interrupt+0x8b0/0x8b0
[  966.844369][    C1]  hrtimer_interrupt+0x397/0x8b0
[  966.844396][    C1]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  966.844415][    C1]  sysvec_apic_timer_interrupt+0x4d/0xc0
[  966.844434][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  966.844452][    C1] RIP: 0033:0x7fe86af852fd
[  966.844466][    C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f <c5> fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc
[  966.844479][    C1] RSP: 002b:00007fe8691fd8a8 EFLAGS: 00000283
[  966.844492][    C1] RAX: 0000000000000300 RBX: 00007fe8691fdde0 RCX: 2f666c65732f636f
[  966.844504][    C1] RDX: 0000200000000300 RSI: 00007fe86b068300 RDI: 0000200000000300
[  966.844515][    C1] RBP: 0000200000000300 R08: 00007fe8691fe010 R09: 00000000ffffffff
[  966.844526][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  966.844536][    C1] R13: 0000000000000073 R14: 00007fe86b03cc15 R15: 00007fe8691fdea0
[  966.844554][    C1]  </TASK>
[  967.568480][T25507] netlink: 'syz.0.7146': attribute type 1 has an invalid length.
[  967.582177][T25509] netlink: 'syz.3.7145': attribute type 21 has an invalid length.