last executing test programs:

10.294709432s ago: executing program 1 (id=4850):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000480)="b8200905601700108acd07d1786d", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async)
r3 = openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) (async)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async)
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c 6:* m'], 0x8) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x400) (async)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/202, 0xca}, {&(0x7f0000000840)=""/122, 0x7a}], 0x2, &(0x7f0000000940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x1) (async)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
recvmsg$unix(r6, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x2020) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)

9.99294964s ago: executing program 1 (id=4853):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0xb, 0x12}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38)

9.522908782s ago: executing program 1 (id=4856):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90)
r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x81, 0xf, 0x5, 0xee, 0x0, 0xa, 0x44000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x33, 0x2, @perf_config_ext={0x5, 0x7}, 0x423, 0x5, 0xfff, 0x1, 0x10000, 0x280000, 0x0, 0x0, 0xfff, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x1b, &(0x7f00000001c0)=r6, 0xa1)
sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)="e0559010ef87edf69cfb34fd71de9e269a87", 0x12}, {&(0x7f0000000600)="8b20d4bea3a07ec7304a3930557fcf8ea32db72cab07a9a576abe34fda5e21fa165e00b32b818b0ae5394e3272ec8b7744235d90800c2576cf2f309967568a2163d264a1a7f9283ac139f0c8ac4ed2340880544846e1bff05d92e98857701885c77a033987d9497ec72d4ecc8fa51d5471247fe41a0d1a61f6d24c91fb285e70d2f60caf49877e3721b8e131277a92b1e9c8ee0986b4503e83bb8a49e27375eda00fed139c1bec820c33756659f706ddd067ab24716d93d7d59ea153aa21b5aaa09cc1d006a40550f6d353c567b1211433fba43e25482e0553527990fd985524b68cf436b253c8ad", 0xe8}], 0x2, &(0x7f0000000900)=[{0xd0, 0x11, 0x6, "a7b36afac8a0cfa115de6b088dccb24a6175d5d6f0a05b59320dfa810e6ae9bbe264d354a19b3bd3df72feb26674932ea9c3cf1da8e2d5b07ffb78310c22ec4827853c55e4112071e88f20607c987aa87d2afb69dd90525bb63070c739dfb0f3364c9140dc0c19d78e2cd029915c90e92214f7bc1662e0270539c0a29e93ca9e53463335655d7844c85f3a9a69dcbe8d4522b5c267e1d34544569a4430f066cf697caf56e701b9e241ec69d7ddc37341d7fa4ca6685edef553ca7e"}, {0x18, 0x10a, 0xd3, "80918ea3"}], 0xe8}, 0x8010)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000ec0)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0xe, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x9c}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x4, 0x8, 0x3}, 0x10, 0x0, r8, 0x1, &(0x7f0000000d00)=[r5, r4], &(0x7f0000000d40)=[{0x3, 0x1, 0xd, 0x6}], 0x10, 0x9}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
close(r9)

9.333464836s ago: executing program 1 (id=4860):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0301683a267dab5696170464", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

8.853810459s ago: executing program 1 (id=4866):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000240)="2acaf902a2e849782154c4e69d9f6b4682b09ee8175266e7c9e7c5806422b09202d14b29507d3f98280d24b454f2002e535e214f2c43ae02d522c31b38598e3d3a792659d697", 0x46}, {&(0x7f00000002c0)="b4049692914e275062dc3e51ae5586d2c201420ff1a9957939d5b780874ed32a0494830f0aa860996a376cae5b59502f1392f2c9bb18c982d1b5bf4835a8c1ab5b0da840482798a90c99bcf1ba4583fb217b13ee55414c6f24f6f298a4c5b801b6613fad5c48ee53fccc6b4ae70d76537de5d1a36fbce902dc4f0e219a49721d191d809a7460944bd8875a38b8bc59f5d385728b2bc97942366f0118b683d08cc2414d4e5ce536821bafef0f9c35ef691504a2a416977c4729642425ceb2af9a6bb36678cb0b5c16ac4928ed0d6a7a6a1d7822d09c32e21ef6927e", 0xdb}, {&(0x7f0000000480)="181c2a0397e1e810927432a7a27e1c8dbbca514b06ec9a5d0a00a9b5fa7c2ef1ba744df6e3bd744146918c10b7287709a547e0ca7840a6efb189766f4512fee5af79086dfc02415bfca2cbf19d31e5bee19b115e8e7fc7aa8fc81dca134a54396cf0083720042578a328b8bd630ced823ad4861ba82f2185813e3413a7c402c725e70a599d4283e9d9900a483e0a61daaa1ad3d330f9a9118de33b060ae8221ca8c70fbe98f1027ab1458718f2aa9eb2309ca1cc61bd4e31a447e28f6367134fe9d25df86da31d3c4d29df931ff4225b74e446e6a3112600be0e20e64de2d608c6d87cac154e7a4dc28388490f702636e010cb2f38c800b9cc5277", 0xfb}, {&(0x7f0000000580)="1fb1bac4dceb", 0x6}, {&(0x7f00000005c0)="963c496f885b3dcc6d223b1ae01c0617e6051e0d6c4239c407dc4e51abbc96fec42703034b9e43f550467e5bea964e03f7f1e47aa4621d0f41f16bc745ec28d3a8c0fdb2c7ed85ab27f2d32d5d60fc3194ba1ef1f7354c33bae1a4b649b81cbd0223b621f462a3b8a17b87c1eaa5c79907539d9b4299f8aa685deed91cad397e48d5e41b73645619889ae7e94d698fec18631265c1c8c5593405afaf57e33ba20aaaf71aa7b46541724cbc5a01885309cbfc82fb476028535f5e8caa490daae5e6dab1e09e801ead974a0b4e70e6c3e569ac7120d12cc3b9db5c2a468693ff591553bada8b3034f04d5c43bd4e4f840a64509ed2", 0xf4}, {&(0x7f00000006c0)="b99853fa2e4ccaac289505a4d9d149bec279a78e494f779e2b6ed972b871a012c09cf9e57d672e79ec4e6821cefd7cde6eb470f253f34fd32d7a0c506828716cf6a5ebb131c16261595f0d9e2da292708889ac0ee3e915895bb5c7b690317c9881c4431dd7c53f480cc408ecc5937652d9ef8532efbc355279c802cc6b1b7091947215c87da4a71a08df99e0ad526b11024faf3db8525c54292fd24c546086633bc801a354e650abea", 0xa9}, {&(0x7f0000000780)="0402f2ae843ad0160d3dd6abe532d3c8c22df2099fae6354f37a06adccacf4b53f5f544eaa8d34e4a752792e3067", 0x2e}], 0x7}, 0x4008804)
sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="c109000000000000001d1e01", 0xc}, {0x0}], 0x2}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0})
socket$kcm(0x2, 0x3, 0x84) (async)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000240)="2acaf902a2e849782154c4e69d9f6b4682b09ee8175266e7c9e7c5806422b09202d14b29507d3f98280d24b454f2002e535e214f2c43ae02d522c31b38598e3d3a792659d697", 0x46}, {&(0x7f00000002c0)="b4049692914e275062dc3e51ae5586d2c201420ff1a9957939d5b780874ed32a0494830f0aa860996a376cae5b59502f1392f2c9bb18c982d1b5bf4835a8c1ab5b0da840482798a90c99bcf1ba4583fb217b13ee55414c6f24f6f298a4c5b801b6613fad5c48ee53fccc6b4ae70d76537de5d1a36fbce902dc4f0e219a49721d191d809a7460944bd8875a38b8bc59f5d385728b2bc97942366f0118b683d08cc2414d4e5ce536821bafef0f9c35ef691504a2a416977c4729642425ceb2af9a6bb36678cb0b5c16ac4928ed0d6a7a6a1d7822d09c32e21ef6927e", 0xdb}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="1fb1bac4dceb", 0x6}, {&(0x7f00000005c0)="963c496f885b3dcc6d223b1ae01c0617e6051e0d6c4239c407dc4e51abbc96fec42703034b9e43f550467e5bea964e03f7f1e47aa4621d0f41f16bc745ec28d3a8c0fdb2c7ed85ab27f2d32d5d60fc3194ba1ef1f7354c33bae1a4b649b81cbd0223b621f462a3b8a17b87c1eaa5c79907539d9b4299f8aa685deed91cad397e48d5e41b73645619889ae7e94d698fec18631265c1c8c5593405afaf57e33ba20aaaf71aa7b46541724cbc5a01885309cbfc82fb476028535f5e8caa490daae5e6dab1e09e801ead974a0b4e70e6c3e569ac7120d12cc3b9db5c2a468693ff591553bada8b3034f04d5c43bd4e4f840a64509ed2", 0xf4}, {&(0x7f00000006c0)="b99853fa2e4ccaac289505a4d9d149bec279a78e494f779e2b6ed972b871a012c09cf9e57d672e79ec4e6821cefd7cde6eb470f253f34fd32d7a0c506828716cf6a5ebb131c16261595f0d9e2da292708889ac0ee3e915895bb5c7b690317c9881c4431dd7c53f480cc408ecc5937652d9ef8532efbc355279c802cc6b1b7091947215c87da4a71a08df99e0ad526b11024faf3db8525c54292fd24c546086633bc801a354e650abea", 0xa9}, {&(0x7f0000000780)="0402f2ae843ad0160d3dd6abe532d3c8c22df2099fae6354f37a06adccacf4b53f5f544eaa8d34e4a752792e3067", 0x2e}], 0x7}, 0x4008804) (async)
sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="c109000000000000001d1e01", 0xc}, {0x0}], 0x2}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) (async)

7.658911709s ago: executing program 1 (id=4877):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14)
r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0xb, 0x5, 0x5, 0x3, 0x0, 0xa269, 0x211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd1, 0x1, @perf_config_ext={0x1, 0x6}, 0x8806, 0xfff, 0x4, 0x6, 0x4, 0x6, 0xcbb, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8)

4.229331204s ago: executing program 0 (id=4881):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @remote, 0x8}}, 0x80, 0x0}, 0x20000001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8948, &(0x7f0000000080)={'vlan1\x00', @random="00009e0c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41)

4.017118039s ago: executing program 0 (id=4884):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
recvmsg(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001140)=""/3, 0x3}, {&(0x7f00000011c0)=""/120, 0x78}, {&(0x7f0000001240)=""/134, 0x86}, {&(0x7f0000001300)=""/233, 0xe9}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/14, 0xe}, {&(0x7f0000002480)=""/179, 0xb3}, {&(0x7f0000002540)=""/122, 0x7a}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0xa, &(0x7f0000003680)}, 0x100)

2.935848436s ago: executing program 0 (id=4888):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/15, @ANYRES32=0x1], 0x48)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r0, &(0x7f0000001e80)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000002080)='&:Ee\x00', 0x5}], 0x1}, 0x8050)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r2, 0x8)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9, 0x6, 0x7, 0x4, 0x0, 0x9, 0x1, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xbe6, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x2, 0x0, 0x80000001, 0x4, 0x8000000000000000, 0x0, 0xd5, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r2, 0xa)

2.933943417s ago: executing program 2 (id=4889):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000005e0000b704000000000000850000005700000095"], 0x0}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x4880)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080))

2.017827499s ago: executing program 3 (id=4890):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x112792, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x80000}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100ffbabe4d3277fb080660017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.98004352s ago: executing program 2 (id=4891):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x9, 0x40, 0x7, 0x9, 0x0, 0x5, 0x800, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xd}, 0x100, 0x6, 0x4, 0x7, 0x8, 0x5, 0x0, 0x0, 0x5, 0x0, 0x5}, r1, 0x3, r0, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.876179833s ago: executing program 0 (id=4892):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_clone(0x880080, &(0x7f0000000000)="5d32ec5a621732730c6b33", 0xb, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)="8f72ea58a3ee9118690942a34512ce4835cfeaeb6a31aca5c97f0a10510e5b046a3cb03127b17a9ca39dcb7117ecf6857bfd0a9e6ad7ed9257288d510acd82")
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x23, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2480, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
socket$kcm(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x40, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.766390076s ago: executing program 3 (id=4893):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90)
r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x81, 0xf, 0x5, 0xee, 0x0, 0xa, 0x44000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x33, 0x2, @perf_config_ext={0x5, 0x7}, 0x423, 0x5, 0xfff, 0x1, 0x10000, 0x280000, 0x0, 0x0, 0xfff, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x1b, &(0x7f00000001c0)=r6, 0xa1)
sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa1}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)="8b20d4bea3a07ec7304a3930557fcf8ea32db72cab07a9a576abe34fda5e21fa165e00b32b818b0ae5394e3272ec8b7744235d90800c2576cf2f309967568a2163d264a1a7f9283ac139f0c8ac4ed2340880544846e1bff05d92e98857701885c77a033987d9497ec72d4ecc8fa51d5471247fe41a0d1a61f6d24c91fb285e70d2f60caf49877e3721b8e131277a92b1e9c8ee0986b4503e83bb8a49e27375eda00fed139c1bec820c33756659f706ddd067ab24716d93d7d59ea153aa21b5aaa09cc1d006a40550f6d353c567b1211433fba43e25482e0553527990fd985524b68cf436b253c8ad", 0xe8}], 0x2, &(0x7f0000000900)=[{0xd0, 0x11, 0x6, "a7b36afac8a0cfa115de6b088dccb24a6175d5d6f0a05b59320dfa810e6ae9bbe264d354a19b3bd3df72feb26674932ea9c3cf1da8e2d5b07ffb78310c22ec4827853c55e4112071e88f20607c987aa87d2afb69dd90525bb63070c739dfb0f3364c9140dc0c19d78e2cd029915c90e92214f7bc1662e0270539c0a29e93ca9e53463335655d7844c85f3a9a69dcbe8d4522b5c267e1d34544569a4430f066cf697caf56e701b9e241ec69d7ddc37341d7fa4ca6685edef553ca7e"}, {0x18, 0x10a, 0xd3, "80918ea3"}], 0xe8}, 0x8010)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000ec0)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0xe, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x9c}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x4, 0x8, 0x3}, 0x10, 0x0, r8, 0x1, &(0x7f0000000d00)=[r5, r4], &(0x7f0000000d40)=[{0x3, 0x1, 0xd, 0x6}], 0x10, 0x9}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
close(r9)

1.409503565s ago: executing program 2 (id=4894):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90)
r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x81, 0xf, 0x5, 0xee, 0x0, 0xa, 0x44000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x33, 0x2, @perf_config_ext={0x5, 0x7}, 0x423, 0x5, 0xfff, 0x1, 0x10000, 0x280000, 0x0, 0x0, 0xfff, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x1b, &(0x7f00000001c0)=r6, 0xa1)
sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)="e0559010ef87edf69cfb34fd71de9e269a87", 0x12}, {0x0}, {&(0x7f0000000600)="8b20d4bea3a07ec7304a3930557fcf8ea32db72cab07a9a576abe34fda5e21fa165e00b32b818b0ae5394e3272ec8b7744235d90800c2576cf2f309967568a2163d264a1a7f9283ac139f0c8ac4ed2340880544846e1bff05d92e98857701885c77a033987d9497ec72d4ecc8fa51d5471247fe41a0d1a61f6d24c91fb285e70d2f60caf49877e3721b8e131277a92b1e9c8ee0986b4503e83bb8a49e27375eda00fed139c1bec820c33756659f706ddd067ab24716d93d7d59ea153aa21b5aaa09cc1d006a40550f6d353c567b1211433fba43e25482e0553527990fd985524b68cf436b253c8ad", 0xe8}], 0x3, &(0x7f0000000900)=[{0xd0, 0x11, 0x6, "a7b36afac8a0cfa115de6b088dccb24a6175d5d6f0a05b59320dfa810e6ae9bbe264d354a19b3bd3df72feb26674932ea9c3cf1da8e2d5b07ffb78310c22ec4827853c55e4112071e88f20607c987aa87d2afb69dd90525bb63070c739dfb0f3364c9140dc0c19d78e2cd029915c90e92214f7bc1662e0270539c0a29e93ca9e53463335655d7844c85f3a9a69dcbe8d4522b5c267e1d34544569a4430f066cf697caf56e701b9e241ec69d7ddc37341d7fa4ca6685edef553ca7e"}, {0x18, 0x10a, 0xd3, "80918ea3"}], 0xe8}, 0x8010)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000ec0)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0xe, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x9c}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x4, 0x8, 0x3}, 0x10, 0x0, r8, 0x1, &(0x7f0000000d00)=[r5, r4], &(0x7f0000000d40)=[{0x3, 0x1, 0xd, 0x6}], 0x10, 0x9}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
close(r9)

1.140066181s ago: executing program 3 (id=4895):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00f63f3f6a2739ff64c21ab8000100000076695a1b"])
ioctl$SIOCSIFHWADDR(r0, 0x8b33, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000027000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a400050001", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0xb701, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e0000000500000004000000ffffffff00000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000007961697e000000007c6f6d5050223c77c572adaf343da83a8a4879ed97065d340852b562f3bd44e1fda9de916677b4502fb2f8ca0445cb3c8c0d23b94979b6719841100301d2989f9f3646c5ab25f874f86f79e95c65da78db5045a3a1a033735e3f006f6764da9ba30666", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

842.145969ms ago: executing program 0 (id=4896):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async)
close(r0) (async)

831.849249ms ago: executing program 2 (id=4897):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3842, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x81, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0xfffffffffffffffd, 0x0, &(0x7f00000006c0)}, 0x4041800) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800110000000000fd090000000000009520000200000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000300", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2848c2, 0x0)
sendmsg$inet(r7, &(0x7f0000002600)={&(0x7f0000000700)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000740)="01cc2291a7f29ad3cfa093853b5aabd870e9adcd3f3cbedc0fffbc62510c099496a5f319609ccfd361a5e9b6a2bb0d53020a931b035c545657100a4b4d5637108f8e04fe7cb1ff8914210086ae7f9beabac0d8e68d59d72ecc1175c04b56434106ba487d5ac98b97a1425287655bfa18b6b05f36d68f046ff475d3b1b7fa08e428eb8c846b66840e99d47992bb03e9288b41ddeea0cde386c7443cdd5d5ea136a2a6877f74475d12ec1a31b1383a98c0f35bffd7307d0f201b412b8a4005f853a20be561b5ff7bf6e3404b34979fdaf5520970a04e02f3e1936de8483b09d3677882003578a8ae0ff0d3f80e88fa7582c751", 0xf2}, {&(0x7f0000000880)="9df2ff9dc16f16f0c15d1597c5473f302b8137e499d4bae7a2095235c2ddf17f66b9763862700b6cc258145f7f6b628dcbcd325148578398f91938f32203b1caa654d5917a8c69d0edc0f60aed7fb930667a7dc74b4147d9d0084ac19a8b893f5472add6b26368aa7b23ebb6e3b33c05860417d78f4bf205149cedeaac77093bbe47fb3c874d2099714efaf8402eaad95c2ac1383995f95b526f0b97b11a8919f8f68281dcdbc1fbbbe0bc5f05b410d49b1d5a9380e3a0afc5483ce81279c133fe3b477db9bca501e2f30d9d901182a5ebd2ed3333ffb2", 0xd7}, {&(0x7f0000000980)="ee4a49e4317ef8f4e80da72f16038f3fa73756d48e5b91aed4908a99e8b36d96875049e9cb31dfa7225a08491a0b29ac5683d1dfa66e0569ea24", 0x3a}, {&(0x7f00000009c0)="f58be205f00a4363aff796e50e4629895dc68205cad2b484254bc6ce8382d05357573a95f245dd6d422fb7d11e41011ce4e0af187ecdb7492acfc0a9a43cf129b835371bf0405291c36e6b0bf8feed7b4d", 0x51}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f00000022c0)="b7ea00331f7c78f57fae495c2220f23f6be72cf0dd318cc24e04c1e741b5e67015c41e756e1320fc0f13efa135fc98dc9db2d0eb934eed9e32ef1e4daa4013cff40544928d168ede3b9ad7f9c759d0e75452e3fb7cfa9509c3805b959c522f2339cc2d6d8f9d63cd5229a7783273c1bb92aa2eb098e7e06dcc5266303442432a7e0e9835946e8c513acf6288697042c792cbd74bcaad596e", 0x98}, {&(0x7f0000002380)="6ef1f3945dbbd0df908db17215aabf073b17dfae901a3c9ffb03ddefd7897fd8969a2493e0136aa8cff2718c02cc78d2e6d83d2b94d11713f1070369efe3fcb2bf377d01dadac7820c136aaef1199ddee68d5fc83441eb6f85b64dd552277643b7121cbc76ea53d55344e4524d065f48c5f2fcaf72b16e8af811f24e9feca1c06a99abdaa735a15b9972a4033ac61477153392b3e029e58ef37259b9", 0x9c}], 0x7, &(0x7f00000024c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xb4, [@empty]}, @noop, @lsrr={0x83, 0x13, 0x7a, [@local, @private=0xa010102, @multicast1, @multicast1]}, @ssrr={0x89, 0x27, 0x3e, [@multicast1, @empty, @broadcast, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @private=0xa010102]}, @lsrr={0x83, 0x1f, 0xd8, [@remote, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x9, "cc657e678a0b95"}]}, @lsrr={0x83, 0x13, 0x92, [@multicast2, @broadcast, @remote, @empty]}]}}}, @ip_ttl={{0x14}}], 0x118}, 0x20000) (async)
close(r8) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080))

572.230266ms ago: executing program 2 (id=4898):
r0 = socket$kcm(0x2, 0x3, 0x2)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="d80000001a0081044e81f782a11b02c4d6d6a88b03d9b4ef13962327f76a0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a800040020035c0461c9abe9bd0ac402f1649400375e6c9bbb1528962cbaaa00af2a7631b59038fed82d086d4a3dc0e713b8f4ea1ea1b44a0b745761", 0x78}], 0x1}, 0x300008d0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop, @generic={0x0, 0x2}]}}}], 0x38}, 0x0)

536.616776ms ago: executing program 3 (id=4899):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e000000100081", 0x7}], 0x1}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x886f5cad098fbc1) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8901, 0x0) (async)
r2 = socket$kcm(0x10, 0x400000002, 0x0) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x11, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0x5, 0x2}, {0x2}, {0xd, 0x4}, {0x7, 0x4}]}, @restrict={0xe}, @const={0x3, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000a80)=""/4096, 0x7f, 0x1000, 0x0, 0x1d3703a3}, 0x28) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3111, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000004000000010000000000000000000000000000000000000040706e6b3c14cc168947377cf0557783a67e0ae6e47c1875b5d8e4350d4731aa8b025fd973125d497dd178be2a3bb0759fed4c16fac1aa2a03fd5d9d0b9b56e193bf46d5aef88e6b65c405fb1602ba828125a7982df7085c720dfda860b080145145a12add23b4b25cee0c5b905246456994afb51223a3494c8d4d81d0fe98e645cc054c73"], 0x50) (async)
recvmsg(r2, &(0x7f0000000940)={&(0x7f00000000c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/61, 0x3d}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/185, 0xb9}], 0x9, &(0x7f0000000840)=""/236, 0xec}, 0x12002)

343.173571ms ago: executing program 0 (id=4900):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x112792, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100ffbabe4d3277fb080660017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

264.107753ms ago: executing program 3 (id=4901):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 64)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x9080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

149.405636ms ago: executing program 2 (id=4902):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90)
r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x81, 0xf, 0x5, 0xee, 0x0, 0xa, 0x44000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x33, 0x2, @perf_config_ext={0x5, 0x7}, 0x423, 0x5, 0xfff, 0x1, 0x10000, 0x280000, 0x0, 0x0, 0xfff, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x1b, &(0x7f00000001c0)=r6, 0xa1)
sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa1}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)="8b20d4bea3a07ec7304a3930557fcf8ea32db72cab07a9a576abe34fda5e21fa165e00b32b818b0ae5394e3272ec8b7744235d90800c2576cf2f309967568a2163d264a1a7f9283ac139f0c8ac4ed2340880544846e1bff05d92e98857701885c77a033987d9497ec72d4ecc8fa51d5471247fe41a0d1a61f6d24c91fb285e70d2f60caf49877e3721b8e131277a92b1e9c8ee0986b4503e83bb8a49e27375eda00fed139c1bec820c33756659f706ddd067ab24716d93d7d59ea153aa21b5aaa09cc1d006a40550f6d353c567b1211433fba43e25482e0553527990fd985524b68cf436b253c8ad", 0xe8}], 0x2, &(0x7f0000000900)=[{0xd0, 0x11, 0x6, "a7b36afac8a0cfa115de6b088dccb24a6175d5d6f0a05b59320dfa810e6ae9bbe264d354a19b3bd3df72feb26674932ea9c3cf1da8e2d5b07ffb78310c22ec4827853c55e4112071e88f20607c987aa87d2afb69dd90525bb63070c739dfb0f3364c9140dc0c19d78e2cd029915c90e92214f7bc1662e0270539c0a29e93ca9e53463335655d7844c85f3a9a69dcbe8d4522b5c267e1d34544569a4430f066cf697caf56e701b9e241ec69d7ddc37341d7fa4ca6685edef553ca7e"}, {0x18, 0x10a, 0xd3, "80918ea3"}], 0xe8}, 0x8010)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000ec0)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0xe, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x9c}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x4, 0x8, 0x3}, 0x10, 0x0, r8, 0x1, &(0x7f0000000d00)=[r5, r4], &(0x7f0000000d40)=[{0x3, 0x1, 0xd, 0x6}], 0x10, 0x9}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
close(r9)

0s ago: executing program 3 (id=4903):
socket$kcm(0x2b, 0x1, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x0, 0x60, 0x35, &(0x7f0000000b80)="f0faa75c15520326bcb9f14c325445e02b5116ad3796ad8926af5670d03072c2ba2c7e1476ea772c7dad9d489e067a1097544dae4b99d784de31edb67d3e5b3a658eedaf4985f153524c95ba40c6b0f02174d31957d00f658fc5de11b4056532", &(0x7f0000000c00)=""/53, 0xffffffff, 0x0, 0x4c, 0x0, &(0x7f0000000c40)="b730e0efff41dbc6e4d1c0958c692738feb56a65cc1fa165310d98f8adc61ba96afdc6dec65b5f6a542f3bfed21ec1f97d58456caebb393500e01b0ace8809012f9d7005b210a11968eedd16", 0x0, 0xcc9a3066a4ef2d58, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r1 = socket$kcm(0x2, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
write$cgroup_type(r4, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) (async)
r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x541b, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4a}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) (async)
socket$kcm(0x11, 0xa, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcff11997af0ce6ae066505acb612f691f3bd3508abca1be6eeb89c44ebb37392dc2bdb", 0x39}], 0x1}, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x1, 0x106)

kernel console output (not intermixed with test programs):

attribute type 10 has an invalid length.
[  706.552157][T17434] netlink: 'syz.0.3253': attribute type 10 has an invalid length.
[  706.675204][T17439] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3255'.
[  707.656097][T17463] netlink: 'syz.2.3260': attribute type 29 has an invalid length.
[  707.860464][T17463] netlink: 'syz.2.3260': attribute type 29 has an invalid length.
[  707.947168][T17472] netlink: 'syz.2.3260': attribute type 29 has an invalid length.
[  708.013949][T17461] netlink: 'syz.0.3259': attribute type 10 has an invalid length.
[  708.117264][T17461] team0: Device wg1 is of different type
[  708.309331][T17475] netlink: 'syz.2.3260': attribute type 29 has an invalid length.
[  708.345146][T17492] FAULT_INJECTION: forcing a failure.
[  708.345146][T17492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.413383][T17492] CPU: 0 PID: 17492 Comm: syz.1.3266 Not tainted syzkaller #0
[  708.421438][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  708.432322][T17492] Call Trace:
[  708.436043][T17492]  <TASK>
[  708.439161][T17492]  dump_stack_lvl+0x18c/0x250
[  708.444222][T17492]  ? show_regs_print_info+0x20/0x20
[  708.449648][T17492]  ? load_image+0x420/0x420
[  708.454351][T17492]  ? __might_fault+0xaa/0x120
[  708.459033][T17492]  ? __lock_acquire+0x7d80/0x7d80
[  708.464059][T17492]  should_fail_ex+0x394/0x4c0
[  708.468923][T17492]  _copy_from_user+0x2f/0xe0
[  708.473625][T17492]  ___sys_sendmsg+0x1c7/0x360
[  708.478710][T17492]  ? __sys_sendmsg+0x2b0/0x2b0
[  708.483780][T17492]  ? ktime_get+0x7f/0x280
[  708.488157][T17492]  __se_sys_sendmsg+0x1d0/0x2c0
[  708.493256][T17492]  ? perf_trace_preemptirq_template+0x269/0x330
[  708.500180][T17492]  ? __x64_sys_sendmsg+0x80/0x80
[  708.505546][T17492]  ? lockdep_hardirqs_on+0x98/0x150
[  708.510976][T17492]  do_syscall_64+0x55/0xb0
[  708.517779][T17492]  ? clear_bhb_loop+0x40/0x90
[  708.523340][T17492]  ? clear_bhb_loop+0x40/0x90
[  708.528562][T17492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  708.536324][T17492] RIP: 0033:0x7efe11b9e019
[  708.541057][T17492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.564135][T17492] RSP: 002b:00007efe129f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  708.572959][T17492] RAX: ffffffffffffffda RBX: 00007efe11e25fa0 RCX: 00007efe11b9e019
[  708.582489][T17492] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  708.591097][T17492] RBP: 00007efe129f9090 R08: 0000000000000000 R09: 0000000000000000
[  708.599972][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.608647][T17492] R13: 00007efe11e26038 R14: 00007efe11e25fa0 R15: 00007fff2a0c2fa8
[  708.617431][T17492]  </TASK>
[  708.675531][T17494] netlink: 'syz.3.3267': attribute type 10 has an invalid length.
[  708.957256][T17504] netlink: 'syz.3.3271': attribute type 21 has an invalid length.
[  708.986739][T17504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3271'.
[  709.100162][T17506] netlink: 'syz.0.3272': attribute type 10 has an invalid length.
[  709.121182][T17506] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3272'.
[  709.351219][ T5776] Bluetooth: hci0: command 0x0406 tx timeout
[  709.729196][T17525] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3277'.
[  710.039238][T17532] FAULT_INJECTION: forcing a failure.
[  710.039238][T17532] name failslab, interval 1, probability 0, space 0, times 0
[  710.066898][T17532] CPU: 1 PID: 17532 Comm: syz.1.3279 Not tainted syzkaller #0
[  710.074616][T17532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  710.085457][T17532] Call Trace:
[  710.088890][T17532]  <TASK>
[  710.091909][T17532]  dump_stack_lvl+0x18c/0x250
[  710.097140][T17532]  ? show_regs_print_info+0x20/0x20
[  710.102711][T17532]  ? load_image+0x420/0x420
[  710.107678][T17532]  ? __might_sleep+0xe0/0xe0
[  710.112660][T17532]  ? __lock_acquire+0x7d80/0x7d80
[  710.118028][T17532]  should_fail_ex+0x394/0x4c0
[  710.123099][T17532]  should_failslab+0x9/0x20
[  710.127673][T17532]  slab_pre_alloc_hook+0x59/0x300
[  710.132943][T17532]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  710.139335][T17532]  kmem_cache_alloc_node+0x5e/0x310
[  710.144594][T17532]  ? __alloc_skb+0x103/0x2c0
[  710.149458][T17532]  __alloc_skb+0x103/0x2c0
[  710.153913][T17532]  netlink_sendmsg+0x66a/0xbf0
[  710.158815][T17532]  ? lockdep_hardirqs_on+0x98/0x150
[  710.164072][T17532]  ? netlink_getsockopt+0x590/0x590
[  710.169401][T17532]  ? netlink_getsockopt+0x590/0x590
[  710.174915][T17532]  ____sys_sendmsg+0x61b/0x980
[  710.179902][T17532]  ? __asan_memset+0x22/0x40
[  710.184913][T17532]  ? __sys_sendmsg_sock+0x30/0x30
[  710.190643][T17532]  ? __import_iovec+0x3fa/0x850
[  710.195806][T17532]  ? import_iovec+0x73/0xa0
[  710.200441][T17532]  ___sys_sendmsg+0x2a6/0x360
[  710.205289][T17532]  ? __sys_sendmsg+0x2b0/0x2b0
[  710.210386][T17532]  __se_sys_sendmsg+0x1d0/0x2c0
[  710.215387][T17532]  ? __x64_sys_sendmsg+0x80/0x80
[  710.220900][T17532]  ? syscall_enter_from_user_mode+0x2e/0x80
[  710.227005][T17532]  do_syscall_64+0x55/0xb0
[  710.231536][T17532]  ? clear_bhb_loop+0x40/0x90
[  710.236515][T17532]  ? clear_bhb_loop+0x40/0x90
[  710.241406][T17532]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  710.247419][T17532] RIP: 0033:0x7efe11b9e019
[  710.251868][T17532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.271944][T17532] RSP: 002b:00007efe129d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  710.280675][T17532] RAX: ffffffffffffffda RBX: 00007efe11e26090 RCX: 00007efe11b9e019
[  710.288698][T17532] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  710.296790][T17532] RBP: 00007efe129d8090 R08: 0000000000000000 R09: 0000000000000000
[  710.305141][T17532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  710.313196][T17532] R13: 00007efe11e26128 R14: 00007efe11e26090 R15: 00007fff2a0c2fa8
[  710.321566][T17532]  </TASK>
[  711.676069][T17568] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3292'.
[  711.687511][T17568] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  711.723873][T17568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  712.197769][T17576] validate_nla: 3 callbacks suppressed
[  712.197793][T17576] netlink: 'syz.2.3295': attribute type 1 has an invalid length.
[  712.221259][T17576] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3295'.
[  714.896960][T17592] netlink: 'syz.2.3299': attribute type 10 has an invalid length.
[  714.961798][T17591] netlink: 'syz.0.3296': attribute type 10 has an invalid length.
[  715.076449][T17597] FAULT_INJECTION: forcing a failure.
[  715.076449][T17597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.141662][T17597] CPU: 0 PID: 17597 Comm: syz.1.3300 Not tainted syzkaller #0
[  715.149392][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  715.159825][T17597] Call Trace:
[  715.163309][T17597]  <TASK>
[  715.166524][T17597]  dump_stack_lvl+0x18c/0x250
[  715.171506][T17597]  ? show_regs_print_info+0x20/0x20
[  715.177059][T17597]  ? load_image+0x420/0x420
[  715.181613][T17597]  ? __might_fault+0xaa/0x120
[  715.186951][T17597]  should_fail_ex+0x394/0x4c0
[  715.191873][T17597]  copyin+0x1a/0x90
[  715.195818][T17597]  _copy_from_iter+0x3ec/0x1290
[  715.200805][T17597]  ? copyout_mc+0x70/0x70
[  715.205301][T17597]  ? __virt_addr_valid+0x10c/0x380
[  715.210653][T17597]  ? __virt_addr_valid+0x10c/0x380
[  715.216134][T17597]  ? __virt_addr_valid+0x10c/0x380
[  715.221532][T17597]  ? __check_object_size+0x4fc/0xa40
[  715.226912][T17597]  netlink_sendmsg+0x76b/0xbf0
[  715.231685][T17597]  ? netlink_getsockopt+0x590/0x590
[  715.237411][T17597]  ? apparmor_socket_sendmsg+0x8e/0x330
[  715.243052][T17597]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  715.248511][T17597]  ? security_socket_sendmsg+0x80/0xa0
[  715.254142][T17597]  ? netlink_getsockopt+0x590/0x590
[  715.259721][T17597]  ____sys_sendmsg+0x61b/0x980
[  715.264706][T17597]  ? __asan_memset+0x22/0x40
[  715.269652][T17597]  ? __sys_sendmsg_sock+0x30/0x30
[  715.275121][T17597]  ? __import_iovec+0x3fa/0x850
[  715.280251][T17597]  ? import_iovec+0x73/0xa0
[  715.284920][T17597]  ___sys_sendmsg+0x2a6/0x360
[  715.289870][T17597]  ? __sys_sendmsg+0x2b0/0x2b0
[  715.294790][T17597]  __se_sys_sendmsg+0x1d0/0x2c0
[  715.299858][T17597]  ? __x64_sys_sendmsg+0x80/0x80
[  715.305120][T17597]  ? syscall_enter_from_user_mode+0x2e/0x80
[  715.311213][T17597]  do_syscall_64+0x55/0xb0
[  715.315899][T17597]  ? clear_bhb_loop+0x40/0x90
[  715.320750][T17597]  ? clear_bhb_loop+0x40/0x90
[  715.325432][T17597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  715.331506][T17597] RIP: 0033:0x7efe11b9e019
[  715.336548][T17597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.356860][T17597] RSP: 002b:00007efe129f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  715.365663][T17597] RAX: ffffffffffffffda RBX: 00007efe11e25fa0 RCX: 00007efe11b9e019
[  715.373653][T17597] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  715.381746][T17597] RBP: 00007efe129f9090 R08: 0000000000000000 R09: 0000000000000000
[  715.389996][T17597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.398154][T17597] R13: 00007efe11e26038 R14: 00007efe11e25fa0 R15: 00007fff2a0c2fa8
[  715.407660][T17597]  </TASK>
[  715.857565][T17618] netlink: 'syz.1.3307': attribute type 10 has an invalid length.
[  715.867333][T17618] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3307'.
[  715.878101][T17618] hsr0: entered promiscuous mode
[  715.888101][T17618] bridge0: port 4(hsr0) entered blocking state
[  715.913918][T17618] bridge0: port 4(hsr0) entered disabled state
[  715.929176][T17618] hsr0: entered allmulticast mode
[  715.937975][T17618] hsr_slave_0: entered allmulticast mode
[  715.945252][T17618] hsr_slave_1: entered allmulticast mode
[  715.976755][T17618] bridge0: port 4(hsr0) entered blocking state
[  715.984017][T17618] bridge0: port 4(hsr0) entered forwarding state
[  716.003986][T17623] netlink: 'syz.3.3309': attribute type 10 has an invalid length.
[  716.026087][T17626] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3310'.
[  716.159109][T17634] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3312'.
[  716.320809][T17639] FAULT_INJECTION: forcing a failure.
[  716.320809][T17639] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  716.354271][T17639] CPU: 0 PID: 17639 Comm: syz.2.3315 Not tainted syzkaller #0
[  716.362544][T17639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  716.373339][T17639] Call Trace:
[  716.376637][T17639]  <TASK>
[  716.379588][T17639]  dump_stack_lvl+0x18c/0x250
[  716.384307][T17639]  ? show_regs_print_info+0x20/0x20
[  716.389653][T17639]  ? load_image+0x420/0x420
[  716.394199][T17639]  ? __might_fault+0xaa/0x120
[  716.398907][T17639]  should_fail_ex+0x394/0x4c0
[  716.403909][T17639]  copyin+0x1a/0x90
[  716.407809][T17639]  _copy_from_iter+0x532/0x1290
[  716.412904][T17639]  ? copyout_mc+0x70/0x70
[  716.417388][T17639]  ? __virt_addr_valid+0x10c/0x380
[  716.423314][T17639]  ? __virt_addr_valid+0x10c/0x380
[  716.429286][T17639]  ? __virt_addr_valid+0x10c/0x380
[  716.436546][T17639]  ? __check_object_size+0x4fc/0xa40
[  716.442307][T17639]  netlink_sendmsg+0x76b/0xbf0
[  716.447746][T17639]  ? netlink_getsockopt+0x590/0x590
[  716.453084][T17639]  ? apparmor_socket_sendmsg+0x8e/0x330
[  716.458915][T17639]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  716.464526][T17639]  ? security_socket_sendmsg+0x80/0xa0
[  716.470195][T17639]  ? netlink_getsockopt+0x590/0x590
[  716.475524][T17639]  ____sys_sendmsg+0x61b/0x980
[  716.480639][T17639]  ? __asan_memset+0x22/0x40
[  716.485796][T17639]  ? __sys_sendmsg_sock+0x30/0x30
[  716.491339][T17639]  ? __import_iovec+0x3fa/0x850
[  716.496454][T17639]  ? import_iovec+0x73/0xa0
[  716.501457][T17639]  ___sys_sendmsg+0x2a6/0x360
[  716.506380][T17639]  ? __sys_sendmsg+0x2b0/0x2b0
[  716.513004][T17639]  ? ktime_get+0x7f/0x280
[  716.517718][T17639]  __se_sys_sendmsg+0x1d0/0x2c0
[  716.522726][T17639]  ? perf_trace_preemptirq_template+0x269/0x330
[  716.529639][T17639]  ? __x64_sys_sendmsg+0x80/0x80
[  716.535290][T17639]  ? lockdep_hardirqs_on+0x98/0x150
[  716.542021][T17639]  do_syscall_64+0x55/0xb0
[  716.550970][T17639]  ? clear_bhb_loop+0x40/0x90
[  716.556396][T17639]  ? clear_bhb_loop+0x40/0x90
[  716.561419][T17639]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  716.568330][T17639] RIP: 0033:0x7fd59619e019
[  716.573081][T17639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.593798][T17639] RSP: 002b:00007fd596ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  716.603204][T17639] RAX: ffffffffffffffda RBX: 00007fd596425fa0 RCX: 00007fd59619e019
[  716.611814][T17639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  716.619924][T17639] RBP: 00007fd596ff2090 R08: 0000000000000000 R09: 0000000000000000
[  716.628648][T17639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.636720][T17639] R13: 00007fd596426038 R14: 00007fd596425fa0 R15: 00007fff97a7ab78
[  716.644981][T17639]  </TASK>
[  716.680198][T17649] netlink: 'syz.0.3316': attribute type 10 has an invalid length.
[  716.689071][T17649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3316'.
[  716.703349][T17649] caif0: entered promiscuous mode
[  716.710098][T17649] caif0: entered allmulticast mode
[  716.760681][T17649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  716.841977][T17652] netlink: 'syz.1.3317': attribute type 10 has an invalid length.
[  716.919386][T17652] team0: Port device macvlan0 added
[  717.037235][T17660] : port 1(ip6gretap0) entered blocking state
[  717.058932][T17660] : port 1(ip6gretap0) entered disabled state
[  717.075771][T17660] ip6gretap0: entered allmulticast mode
[  717.083356][T17660] ip6gretap0: entered promiscuous mode
[  717.110081][T17658] netlink: 'syz.3.3319': attribute type 10 has an invalid length.
[  717.322549][T17658] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  717.540467][T17670] netlink: 'syz.0.3322': attribute type 16 has an invalid length.
[  717.561368][T17670] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3322'.
[  717.778792][T17679] FAULT_INJECTION: forcing a failure.
[  717.778792][T17679] name failslab, interval 1, probability 0, space 0, times 0
[  717.806273][T17681] netlink: 'syz.3.3325': attribute type 21 has an invalid length.
[  717.819369][T17679] CPU: 1 PID: 17679 Comm: syz.1.3326 Not tainted syzkaller #0
[  717.827283][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  717.837766][T17679] Call Trace:
[  717.841421][T17679]  <TASK>
[  717.844549][T17679]  dump_stack_lvl+0x18c/0x250
[  717.849718][T17679]  ? show_regs_print_info+0x20/0x20
[  717.855052][T17679]  ? load_image+0x420/0x420
[  717.860009][T17679]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  717.866118][T17679]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  717.873625][T17679]  ? lock_chain_count+0x20/0x20
[  717.878887][T17679]  should_fail_ex+0x394/0x4c0
[  717.883882][T17679]  should_failslab+0x9/0x20
[  717.888684][T17679]  slab_pre_alloc_hook+0x59/0x300
[  717.893856][T17679]  kmem_cache_alloc+0x5a/0x2c0
[  717.898664][T17679]  ? skb_clone+0x1eb/0x370
[  717.902705][T17681] netlink: 'syz.3.3325': attribute type 25 has an invalid length.
[  717.903188][T17679]  skb_clone+0x1eb/0x370
[  717.903234][T17679]  __netlink_deliver_tap+0x411/0x7f0
[  717.911576][T17681] netlink: 'syz.3.3325': attribute type 6 has an invalid length.
[  717.915284][T17679]  ? netlink_deliver_tap+0x2e/0x1b0
[  717.915315][T17679]  netlink_deliver_tap+0x19c/0x1b0
[  717.939741][T17679]  netlink_unicast+0x77b/0x930
[  717.945151][T17679]  netlink_sendmsg+0x8d0/0xbf0
[  717.950288][T17679]  ? netlink_getsockopt+0x590/0x590
[  717.955585][T17679]  ? apparmor_socket_sendmsg+0x8e/0x330
[  717.961308][T17679]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  717.966996][T17679]  ? security_socket_sendmsg+0x80/0xa0
[  717.972488][T17679]  ? netlink_getsockopt+0x590/0x590
[  717.977878][T17679]  ____sys_sendmsg+0x61b/0x980
[  717.983230][T17679]  ? __asan_memset+0x22/0x40
[  717.987853][T17679]  ? __sys_sendmsg_sock+0x30/0x30
[  717.992993][T17679]  ? __import_iovec+0x3fa/0x850
[  717.998069][T17679]  ? import_iovec+0x73/0xa0
[  718.002701][T17679]  ___sys_sendmsg+0x2a6/0x360
[  718.007704][T17679]  ? __sys_sendmsg+0x2b0/0x2b0
[  718.012748][T17679]  ? ktime_get+0x7f/0x280
[  718.017290][T17679]  __se_sys_sendmsg+0x1d0/0x2c0
[  718.022254][T17679]  ? __x64_sys_sendmsg+0x80/0x80
[  718.027600][T17679]  ? lockdep_hardirqs_on+0x98/0x150
[  718.032916][T17679]  do_syscall_64+0x55/0xb0
[  718.037542][T17679]  ? clear_bhb_loop+0x40/0x90
[  718.042320][T17679]  ? clear_bhb_loop+0x40/0x90
[  718.047265][T17679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.053680][T17679] RIP: 0033:0x7efe11b9e019
[  718.058688][T17679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.079034][T17679] RSP: 002b:00007efe129f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  718.088021][T17679] RAX: ffffffffffffffda RBX: 00007efe11e25fa0 RCX: 00007efe11b9e019
[  718.096263][T17679] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  718.104410][T17679] RBP: 00007efe129f9090 R08: 0000000000000000 R09: 0000000000000000
[  718.112385][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.120544][T17679] R13: 00007efe11e26038 R14: 00007efe11e25fa0 R15: 00007fff2a0c2fa8
[  718.128804][T17679]  </TASK>
[  718.137941][T17681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3325'.
[  718.185935][T17679] netlink: 'syz.1.3326': attribute type 10 has an invalid length.
[  718.539338][T17701] netlink: 'syz.3.3332': attribute type 21 has an invalid length.
[  718.665444][T17704] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  719.214944][T17707] delete_channel: no stack
[  719.461681][T17728] FAULT_INJECTION: forcing a failure.
[  719.461681][T17728] name failslab, interval 1, probability 0, space 0, times 0
[  719.502820][T17728] CPU: 0 PID: 17728 Comm: syz.1.3339 Not tainted syzkaller #0
[  719.510755][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  719.521409][T17728] Call Trace:
[  719.525250][T17728]  <TASK>
[  719.528826][T17728]  dump_stack_lvl+0x18c/0x250
[  719.533723][T17728]  ? show_regs_print_info+0x20/0x20
[  719.539573][T17728]  ? load_image+0x420/0x420
[  719.544207][T17728]  ? __might_sleep+0xe0/0xe0
[  719.549012][T17728]  ? __lock_acquire+0x7d80/0x7d80
[  719.554157][T17728]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  719.560354][T17728]  should_fail_ex+0x394/0x4c0
[  719.565065][T17728]  should_failslab+0x9/0x20
[  719.569689][T17728]  slab_pre_alloc_hook+0x59/0x300
[  719.575869][T17728]  ? lockdep_hardirqs_on+0x98/0x150
[  719.581097][T17728]  ? rtnl_newlink+0x10d/0x2170
[  719.586052][T17728]  __kmem_cache_alloc_node+0x53/0x250
[  719.591549][T17728]  ? rtnl_newlink+0x10d/0x2170
[  719.596527][T17728]  kmalloc_trace+0x2a/0xe0
[  719.601155][T17728]  rtnl_newlink+0x10d/0x2170
[  719.605879][T17728]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  719.612075][T17728]  ? __mutex_trylock_common+0x160/0x270
[  719.617907][T17728]  ? rtnl_setlink+0x4e0/0x4e0
[  719.622616][T17728]  ? trace_raw_output_contention_end+0xd0/0xd0
[  719.629155][T17728]  ? rcu_is_watching+0x15/0xb0
[  719.634065][T17728]  ? trace_contention_end+0x39/0xe0
[  719.639759][T17728]  ? __mutex_lock+0x30d/0xc80
[  719.645121][T17728]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  719.650745][T17728]  ? mutex_lock_nested+0x20/0x20
[  719.655914][T17728]  ? rtnl_setlink+0x4e0/0x4e0
[  719.661061][T17728]  rtnetlink_rcv_msg+0x843/0xf90
[  719.666214][T17728]  ? rtnetlink_rcv_msg+0x220/0xf90
[  719.672057][T17728]  ? rtnetlink_bind+0x80/0x80
[  719.677031][T17728]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  719.684082][T17728]  ? lockdep_hardirqs_on+0x98/0x150
[  719.689587][T17728]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  719.696369][T17728]  ? __dev_queue_xmit+0x275/0x3630
[  719.701615][T17728]  ? __local_bh_enable_ip+0x142/0x1c0
[  719.707216][T17728]  ? _local_bh_enable+0xa0/0xa0
[  719.712466][T17728]  ? __dev_queue_xmit+0x275/0x3630
[  719.717727][T17728]  ? __dev_queue_xmit+0x1bc2/0x3630
[  719.723196][T17728]  ? __dev_queue_xmit+0x275/0x3630
[  719.728839][T17728]  ? perf_trace_lock+0xfc/0x3b0
[  719.733920][T17728]  netlink_rcv_skb+0x235/0x4c0
[  719.739706][T17728]  ? rtnetlink_bind+0x80/0x80
[  719.744885][T17728]  ? netlink_ack+0x1160/0x1160
[  719.750644][T17728]  ? __lock_acquire+0x7d80/0x7d80
[  719.756070][T17728]  ? netlink_deliver_tap+0x2e/0x1b0
[  719.761755][T17728]  netlink_unicast+0x7b1/0x930
[  719.766600][T17728]  netlink_sendmsg+0x8d0/0xbf0
[  719.771403][T17728]  ? netlink_getsockopt+0x590/0x590
[  719.777204][T17728]  ? apparmor_socket_sendmsg+0x8e/0x330
[  719.782974][T17728]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  719.788859][T17728]  ? security_socket_sendmsg+0x80/0xa0
[  719.794354][T17728]  ? netlink_getsockopt+0x590/0x590
[  719.800054][T17728]  ____sys_sendmsg+0x61b/0x980
[  719.805462][T17728]  ? __asan_memset+0x22/0x40
[  719.812444][T17728]  ? __sys_sendmsg_sock+0x30/0x30
[  719.817710][T17728]  ? __import_iovec+0x3fa/0x850
[  719.822801][T17728]  ? import_iovec+0x73/0xa0
[  719.828324][T17728]  ___sys_sendmsg+0x2a6/0x360
[  719.833054][T17728]  ? __sys_sendmsg+0x2b0/0x2b0
[  719.838367][T17728]  __se_sys_sendmsg+0x1d0/0x2c0
[  719.843665][T17728]  ? __x64_sys_sendmsg+0x80/0x80
[  719.849759][T17728]  ? syscall_enter_from_user_mode+0x2e/0x80
[  719.856321][T17728]  do_syscall_64+0x55/0xb0
[  719.860941][T17728]  ? clear_bhb_loop+0x40/0x90
[  719.865653][T17728]  ? clear_bhb_loop+0x40/0x90
[  719.870732][T17728]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  719.877841][T17728] RIP: 0033:0x7efe11b9e019
[  719.882562][T17728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.903500][T17728] RSP: 002b:00007efe129f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.912836][T17728] RAX: ffffffffffffffda RBX: 00007efe11e25fa0 RCX: 00007efe11b9e019
[  719.921788][T17728] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  719.929954][T17728] RBP: 00007efe129f9090 R08: 0000000000000000 R09: 0000000000000000
[  719.938198][T17728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.946278][T17728] R13: 00007efe11e26038 R14: 00007efe11e25fa0 R15: 00007fff2a0c2fa8
[  719.954820][T17728]  </TASK>
[  720.097645][T17733] netlink: 'syz.3.3341': attribute type 10 has an invalid length.
[  721.790017][T17768] netlink: 'syz.3.3351': attribute type 10 has an invalid length.
[  721.804255][T17768] FAULT_INJECTION: forcing a failure.
[  721.804255][T17768] name failslab, interval 1, probability 0, space 0, times 0
[  721.820194][T17768] CPU: 1 PID: 17768 Comm: syz.3.3351 Not tainted syzkaller #0
[  721.828641][T17768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  721.839164][T17768] Call Trace:
[  721.842654][T17768]  <TASK>
[  721.845787][T17768]  dump_stack_lvl+0x18c/0x250
[  721.851639][T17768]  ? show_regs_print_info+0x20/0x20
[  721.857148][T17768]  ? load_image+0x420/0x420
[  721.861744][T17768]  ? __might_sleep+0xe0/0xe0
[  721.866472][T17768]  ? __lock_acquire+0x7d80/0x7d80
[  721.873105][T17768]  ? lock_chain_count+0x20/0x20
[  721.878912][T17768]  should_fail_ex+0x394/0x4c0
[  721.884093][T17768]  should_failslab+0x9/0x20
[  721.888850][T17768]  slab_pre_alloc_hook+0x59/0x300
[  721.895395][T17768]  kmem_cache_alloc_node+0x5e/0x310
[  721.901269][T17768]  ? __alloc_skb+0x103/0x2c0
[  721.907089][T17768]  __alloc_skb+0x103/0x2c0
[  721.912998][T17768]  netlink_ack+0x377/0x1160
[  721.919540][T17768]  ? netlink_dump+0xec0/0xec0
[  721.924707][T17768]  ? ref_tracker_free+0x686/0x830
[  721.930078][T17768]  netlink_rcv_skb+0x2b3/0x4c0
[  721.935071][T17768]  ? rtnetlink_bind+0x80/0x80
[  721.939806][T17768]  ? netlink_ack+0x1160/0x1160
[  721.944979][T17768]  ? __lock_acquire+0x7d80/0x7d80
[  721.950571][T17768]  ? netlink_deliver_tap+0x2e/0x1b0
[  721.956141][T17768]  netlink_unicast+0x7b1/0x930
[  721.961054][T17768]  netlink_sendmsg+0x8d0/0xbf0
[  721.965997][T17768]  ? netlink_getsockopt+0x590/0x590
[  721.971508][T17768]  ? apparmor_socket_sendmsg+0x8e/0x330
[  721.977411][T17768]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  721.983042][T17768]  ? security_socket_sendmsg+0x80/0xa0
[  721.988995][T17768]  ? netlink_getsockopt+0x590/0x590
[  721.994673][T17768]  ____sys_sendmsg+0x61b/0x980
[  722.000019][T17768]  ? __asan_memset+0x22/0x40
[  722.004907][T17768]  ? __sys_sendmsg_sock+0x30/0x30
[  722.010185][T17768]  ? __import_iovec+0x3fa/0x850
[  722.015261][T17768]  ? import_iovec+0x73/0xa0
[  722.019810][T17768]  ___sys_sendmsg+0x2a6/0x360
[  722.024523][T17768]  ? __sys_sendmsg+0x2b0/0x2b0
[  722.029317][T17768]  ? __fget_files+0x1d7/0x460
[  722.034036][T17768]  __se_sys_sendmsg+0x1d0/0x2c0
[  722.039240][T17768]  ? __x64_sys_sendmsg+0x80/0x80
[  722.044302][T17768]  ? lockdep_hardirqs_on+0x98/0x150
[  722.049823][T17768]  do_syscall_64+0x55/0xb0
[  722.054779][T17768]  ? clear_bhb_loop+0x40/0x90
[  722.059505][T17768]  ? clear_bhb_loop+0x40/0x90
[  722.064377][T17768]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  722.070617][T17768] RIP: 0033:0x7f1ef2d9e019
[  722.075102][T17768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.097019][T17768] RSP: 002b:00007f1ef3bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  722.105798][T17768] RAX: ffffffffffffffda RBX: 00007f1ef3026090 RCX: 00007f1ef2d9e019
[  722.115125][T17768] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  722.123586][T17768] RBP: 00007f1ef3bbd090 R08: 0000000000000000 R09: 0000000000000000
[  722.132455][T17768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.141226][T17768] R13: 00007f1ef3026128 R14: 00007f1ef3026090 R15: 00007ffe45df6e38
[  722.149958][T17768]  </TASK>
[  724.813682][T17774] netlink: 'syz.1.3352': attribute type 10 has an invalid length.
[  725.181627][T17782] netlink: 'syz.3.3356': attribute type 46 has an invalid length.
[  725.589561][T17787] netlink: 'syz.2.3358': attribute type 3 has an invalid length.
[  725.731199][T17787] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3358'.
[  725.816714][T17791] netlink: 'syz.3.3359': attribute type 10 has an invalid length.
[  726.774291][T17808] netlink: 'syz.2.3361': attribute type 10 has an invalid length.
[  727.056945][T17799] syzkaller0: entered promiscuous mode
[  727.062895][T17799] syzkaller0: entered allmulticast mode
[  727.196843][T17813] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3363'.
[  731.004514][T17834] netlink: 'syz.3.3367': attribute type 25 has an invalid length.
[  731.027667][T17834] netlink: 'syz.3.3367': attribute type 9 has an invalid length.
[  731.148713][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 3846
[  731.323554][T17844] netlink: 'syz.1.3372': attribute type 10 has an invalid length.
[  731.362083][T17844] FAULT_INJECTION: forcing a failure.
[  731.362083][T17844] name failslab, interval 1, probability 0, space 0, times 0
[  731.365310][T17842] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3371'.
[  731.424579][T17844] CPU: 0 PID: 17844 Comm: syz.1.3372 Not tainted syzkaller #0
[  731.432395][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  731.442949][T17844] Call Trace:
[  731.446270][T17844]  <TASK>
[  731.449233][T17844]  dump_stack_lvl+0x18c/0x250
[  731.454222][T17844]  ? show_regs_print_info+0x20/0x20
[  731.459648][T17844]  ? load_image+0x420/0x420
[  731.464301][T17844]  ? lockdep_hardirqs_on+0x98/0x150
[  731.469806][T17844]  ? verify_lock_unused+0x140/0x140
[  731.475425][T17844]  should_fail_ex+0x394/0x4c0
[  731.480328][T17844]  should_failslab+0x9/0x20
[  731.484886][T17844]  slab_pre_alloc_hook+0x59/0x300
[  731.490197][T17844]  kmem_cache_alloc+0x5a/0x2c0
[  731.495145][T17844]  ? skb_clone+0x1eb/0x370
[  731.500010][T17844]  skb_clone+0x1eb/0x370
[  731.504573][T17844]  __netlink_deliver_tap+0x411/0x7f0
[  731.510593][T17844]  ? netlink_deliver_tap+0x2e/0x1b0
[  731.516097][T17844]  netlink_deliver_tap+0x19c/0x1b0
[  731.521431][T17844]  netlink_sendskb+0x68/0x130
[  731.526385][T17844]  netlink_ack+0xcd5/0x1160
[  731.530915][T17844]  ? netlink_dump+0xec0/0xec0
[  731.535877][T17844]  ? ref_tracker_free+0x686/0x830
[  731.541276][T17844]  netlink_rcv_skb+0x2b3/0x4c0
[  731.546766][T17844]  ? rtnetlink_bind+0x80/0x80
[  731.551796][T17844]  ? netlink_ack+0x1160/0x1160
[  731.556803][T17844]  ? __lock_acquire+0x7d80/0x7d80
[  731.562014][T17844]  ? netlink_deliver_tap+0x2e/0x1b0
[  731.567734][T17844]  netlink_unicast+0x7b1/0x930
[  731.572601][T17844]  netlink_sendmsg+0x8d0/0xbf0
[  731.577466][T17844]  ? netlink_getsockopt+0x590/0x590
[  731.583024][T17844]  ? apparmor_socket_sendmsg+0x8e/0x330
[  731.588744][T17844]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  731.594325][T17844]  ? security_socket_sendmsg+0x80/0xa0
[  731.600009][T17844]  ? netlink_getsockopt+0x590/0x590
[  731.605387][T17844]  ____sys_sendmsg+0x61b/0x980
[  731.610508][T17844]  ? __asan_memset+0x22/0x40
[  731.615185][T17844]  ? __sys_sendmsg_sock+0x30/0x30
[  731.620657][T17844]  ? __import_iovec+0x3fa/0x850
[  731.625816][T17844]  ? import_iovec+0x73/0xa0
[  731.630621][T17844]  ___sys_sendmsg+0x2a6/0x360
[  731.636028][T17844]  ? __sys_sendmsg+0x2b0/0x2b0
[  731.640845][T17844]  ? ktime_get+0x7f/0x280
[  731.646392][T17844]  __se_sys_sendmsg+0x1d0/0x2c0
[  731.651778][T17844]  ? __x64_sys_sendmsg+0x80/0x80
[  731.656919][T17844]  ? lockdep_hardirqs_on+0x98/0x150
[  731.662227][T17844]  do_syscall_64+0x55/0xb0
[  731.666738][T17844]  ? clear_bhb_loop+0x40/0x90
[  731.671436][T17844]  ? clear_bhb_loop+0x40/0x90
[  731.676155][T17844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  731.682982][T17844] RIP: 0033:0x7efe11b9e019
[  731.688754][T17844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.710743][T17844] RSP: 002b:00007efe129f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  731.720485][T17844] RAX: ffffffffffffffda RBX: 00007efe11e25fa0 RCX: 00007efe11b9e019
[  731.730993][T17844] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  731.739774][T17844] RBP: 00007efe129f9090 R08: 0000000000000000 R09: 0000000000000000
[  731.750112][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  731.758723][T17844] R13: 00007efe11e26038 R14: 00007efe11e25fa0 R15: 00007fff2a0c2fa8
[  731.766915][T17844]  </TASK>
[  732.017121][T17863] netlink: 'syz.1.3378': attribute type 6 has an invalid length.
[  732.040744][T17863] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3378'.
[  732.152296][T17866] netlink: 'syz.0.3379': attribute type 10 has an invalid length.
[  733.017678][T17883] syzkaller0: entered promiscuous mode
[  733.029476][T17883] syzkaller0: entered allmulticast mode
[  733.031937][T17892] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3385'.
[  733.097517][T17892] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  733.145564][T17892] openvswitch: netlink: Message has 1 unknown bytes.
[  739.117955][T17904] netlink: 'syz.1.3388': attribute type 10 has an invalid length.
[  739.223582][T17908] netlink: 'syz.3.3389': attribute type 10 has an invalid length.
[  739.613208][T17924] C: renamed from team_slave_0
[  739.709143][T17933] tap0: tun_chr_ioctl cmd 1074025675
[  739.727286][T17933] tap0: persist enabled
[  739.737836][T17933] tap0: tun_chr_ioctl cmd 1074025675
[  739.757145][T17933] tap0: persist enabled
[  739.906855][T17938] netlink: 'syz.0.3398': attribute type 10 has an invalid length.
[  739.946578][T17938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3398'.
[  739.984865][T17938] batman_adv: batadv0: Adding interface: veth0_vlan
[  740.025200][T17938] batman_adv: batadv0: Interface activated: veth0_vlan
[  740.034372][T17946] netlink: 'syz.3.3400': attribute type 29 has an invalid length.
[  740.052399][T17946] netlink: 'syz.3.3400': attribute type 3 has an invalid length.
[  740.066362][T17941] netlink: 'syz.2.3399': attribute type 10 has an invalid length.
[  740.083480][ T5782] Bluetooth: hci4: command 0x0406 tx timeout
[  740.094081][T17946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3400'.
[  740.133162][T17950] netlink: 'syz.3.3400': attribute type 29 has an invalid length.
[  740.141437][T17950] netlink: 'syz.3.3400': attribute type 29 has an invalid length.
[  740.378396][T17953] delete_channel: no stack
[  740.918525][T17977] netlink: 'syz.2.3410': attribute type 6 has an invalid length.
[  740.927643][T17977] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3410'.
[  740.945071][T17979] netlink: 'syz.1.3411': attribute type 1 has an invalid length.
[  741.067677][T17985] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3413'.
[  741.393097][ T5776] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  742.257819][T18006] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3420'.
[  742.340902][T18006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.367388][T18006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.400179][T18006] bond0 (unregistering): Released all slaves
[  743.329474][T18035] syzkaller0: entered promiscuous mode
[  743.449635][T18041] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3430'.
[  743.465485][T18042] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3430'.
[  745.906780][T18066] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3436'.
[  746.043745][T18067] validate_nla: 2 callbacks suppressed
[  746.043847][T18067] netlink: 'syz.3.3435': attribute type 10 has an invalid length.
[  746.184713][T18076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  746.230752][T18078] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3440'.
[  746.248659][T18078] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  746.281178][T18080] netlink: 'syz.3.3441': attribute type 4 has an invalid length.
[  746.289234][T18080] netlink: 'syz.3.3441': attribute type 16 has an invalid length.
[  746.326879][T18080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3441'.
[  746.808723][T18099] netlink: 'syz.0.3447': attribute type 10 has an invalid length.
[  747.395686][T18123] netlink: 'syz.1.3457': attribute type 10 has an invalid length.
[  747.524293][T18127] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3458'.
[  747.677668][T18132] netlink: 'syz.1.3460': attribute type 3 has an invalid length.
[  747.687210][T18132] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3460'.
[  747.932811][T18134] netlink: 'syz.1.3461': attribute type 40 has an invalid length.
[  748.238896][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  748.254606][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  748.335043][T18147] netlink: 'syz.0.3465': attribute type 9 has an invalid length.
[  748.392892][T18147] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3465'.
[  748.610455][T18154] netlink: 'syz.1.3467': attribute type 10 has an invalid length.
[  751.963677][T18182] netlink: 'syz.0.3473': attribute type 3 has an invalid length.
[  751.987213][T18182] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3473'.
[  751.988213][T18185] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3475'.
[  752.271588][T18192] netlink: 'syz.1.3478': attribute type 10 has an invalid length.
[  752.317285][T18196] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3479'.
[  752.502503][T18196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  752.544714][T18196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  752.591331][T18196] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  752.632883][T18196] bond0 (unregistering): Released all slaves
[  752.902804][ T5776] Bluetooth: hci1: Malformed LE Event: 0x1b
[  752.932620][ T5776] Bluetooth: hci4: ISO packet for unknown connection handle 1
[  753.015988][T18221] ref_ctr_offset mismatch. inode: 0x3ef offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  753.139262][T18226] netlink: 'syz.2.3490': attribute type 10 has an invalid length.
[  754.218747][T18278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3504'.
[  754.700395][T18294] syzkaller0: entered promiscuous mode
[  754.708323][T18294] syzkaller0: entered allmulticast mode
[  757.109655][T18297] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3511'.
[  757.283661][T18307] netlink: 'syz.1.3515': attribute type 1 has an invalid length.
[  757.292214][T18307] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3515'.
[  757.377608][T18308] netlink: 'syz.2.3514': attribute type 10 has an invalid length.
[  757.779810][T18314] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3515'.
[  757.792272][T18314] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3515'.
[  757.815295][T18307] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3515'.
[  757.852088][T18314] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3515'.
[  758.008249][T18314] netlink: 'syz.1.3515': attribute type 10 has an invalid length.
[  758.027417][T18314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3515'.
[  758.047803][T18314] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  758.066697][T18314] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.131089][T18314] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  758.603967][T18327] netlink: 'syz.3.3520': attribute type 2 has an invalid length.
[  758.629285][T18327] netlink: 'syz.3.3520': attribute type 8 has an invalid length.
[  758.658408][T18327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3520'.
[  758.693385][T18334] netlink: 'syz.3.3520': attribute type 11 has an invalid length.
[  758.730799][T18327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3520'.
[  759.815370][T18353] netlink: 'syz.3.3528': attribute type 12 has an invalid length.
[  759.841911][T18353] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3528'.
[  760.726563][T18386] netlink: 'syz.0.3537': attribute type 10 has an invalid length.
[  761.680359][T18406] netlink: 'syz.2.3544': attribute type 2 has an invalid length.
[  761.699063][T18406] netlink: 'syz.2.3544': attribute type 3 has an invalid length.
[  761.835537][T18404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  761.922537][ T5776] Bluetooth: hci4: unknown advertising packet type: 0xff
[  762.255606][T18428] __nla_validate_parse: 5 callbacks suppressed
[  762.255625][T18428] netlink: 703 bytes leftover after parsing attributes in process `syz.0.3551'.
[  762.302887][T18431] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3552'.
[  762.313585][T18431] syzkaller0: entered promiscuous mode
[  762.319103][T18431] syzkaller0: entered allmulticast mode
[  762.330389][T18431] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3552'.
[  762.659568][T18443] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3555'.
[  762.862971][T18451] validate_nla: 2 callbacks suppressed
[  762.863006][T18451] netlink: 'syz.0.3559': attribute type 6 has an invalid length.
[  762.901444][T18451] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3559'.
[  762.944512][T18452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3558'.
[  762.965516][T18452] openvswitch: netlink: Key type 29 is not supported
[  763.344501][T18466] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3563'.
[  763.391109][T18466] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  763.391319][T18467] netlink: 'syz.2.3563': attribute type 17 has an invalid length.
[  763.399472][T18466] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  763.485111][T18467] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3563'.
[  763.521915][T18467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  764.021197][T18476] netlink: 'syz.0.3566': attribute type 21 has an invalid length.
[  764.043567][T18476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3566'.
[  764.577104][T18497] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3573'.
[  765.368427][T18512] netlink: 'syz.1.3578': attribute type 2 has an invalid length.
[  765.377974][T18512] netlink: 'syz.1.3578': attribute type 1 has an invalid length.
[  765.397706][T18512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.617158][T18519] netlink: 'syz.2.3581': attribute type 21 has an invalid length.
[  765.653444][T18519] netlink: 'syz.2.3581': attribute type 20 has an invalid length.
[  765.667281][T18522] bridge0: port 3(hsr0) entered disabled state
[  765.685986][T18522] bridge0: entered allmulticast mode
[  765.791281][T18525] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  765.811062][T18525] openvswitch: netlink: Message has 1 unknown bytes.
[  767.357256][ T5776] Bluetooth: hci0: ISO packet for unknown connection handle 3079
[  767.392310][T18563] __nla_validate_parse: 1 callbacks suppressed
[  767.392327][T18563] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.3596'.
[  767.504964][T18565] netlink: 'syz.2.3597': attribute type 3 has an invalid length.
[  767.607403][T18565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3597'.
[  769.256211][T18595] netlink: 'syz.3.3606': attribute type 22 has an invalid length.
[  770.009763][T18611] syzkaller0: entered promiscuous mode
[  770.017390][T18611] syzkaller0: entered allmulticast mode
[  772.568924][T18631] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3614'.
[  772.575396][T18633] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3615'.
[  772.614995][T18633] bridge0: port 4(hsr0) entered disabled state
[  773.358869][T18661] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3624'.
[  773.505047][T18669] netlink: 'syz.0.3627': attribute type 28 has an invalid length.
[  773.759484][T18680] netlink: 'syz.0.3631': attribute type 39 has an invalid length.
[  774.354072][T18702] netlink: 'syz.2.3639': attribute type 9 has an invalid length.
[  774.387087][T18702] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3639'.
[  774.454792][T18704] syz.0.3640[18704] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  774.455047][T18704] syz.0.3640[18704] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  774.783672][T18707] netlink: 'syz.2.3639': attribute type 9 has an invalid length.
[  774.820671][T18707] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3639'.
[  774.964876][T18715] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.3642'.
[  775.821326][T18751] netlink: 'syz.1.3651': attribute type 19 has an invalid length.
[  775.836765][T18751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3651'.
[  775.877735][T18751] netlink: 'syz.1.3651': attribute type 21 has an invalid length.
[  776.592322][T18759] netlink: 'syz.3.3653': attribute type 10 has an invalid length.
[  776.616026][T18759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3653'.
[  776.679839][T18759] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  776.698662][T18759] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  776.742452][T18759] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  778.960401][T18772] netlink: 'syz.0.3657': attribute type 10 has an invalid length.
[  778.969794][T18772] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3657'.
[  779.069109][T18781] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3659'.
[  779.766445][T18804] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3666'.
[  781.045592][T18822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3669'.
[  781.576759][T18838] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3674'.
[  781.643261][T18836] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3675'.
[  781.750063][T18836] hsr_slave_0: left promiscuous mode
[  781.816154][T18836] hsr_slave_1: left promiscuous mode
[  783.680875][T18873] netlink: 'syz.2.3683': attribute type 25 has an invalid length.
[  783.722301][T18873] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3683'.
[  784.341173][T18886] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3686'.
[  784.350849][T18886] netlink: 6260 bytes leftover after parsing attributes in process `syz.2.3686'.
[  784.360363][T18886] netlink: 65 bytes leftover after parsing attributes in process `syz.2.3686'.
[  786.805263][T18931] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3699'.
[  787.521574][T18945] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  787.545695][T18945] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  788.279637][T18965] netlink: 'syz.1.3708': attribute type 21 has an invalid length.
[  788.558663][T18973] netlink: 'syz.1.3710': attribute type 39 has an invalid length.
[  788.719865][T18978] netlink: 'syz.2.3712': attribute type 3 has an invalid length.
[  788.738265][T18978] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3712'.
[  789.783499][T18998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  789.791106][T18998] IPv6: NLM_F_CREATE should be set when creating new route
[  789.799385][T18998] IPv6: NLM_F_CREATE should be set when creating new route
[  789.808649][T18998] IPv6: NLM_F_CREATE should be set when creating new route
[  790.883359][T19020] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3722'.
[  791.646560][T19037] netlink: 'syz.0.3725': attribute type 1 has an invalid length.
[  791.661800][T19037] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3725'.
[  792.017189][T19049] netlink: 'syz.2.3727': attribute type 2 has an invalid length.
[  792.045149][T19049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3727'.
[  792.458799][T19065] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3732'.
[  794.090263][T19098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  794.424760][T19110] netlink: 'syz.1.3744': attribute type 21 has an invalid length.
[  794.428694][T19109] netlink: 'syz.2.3743': attribute type 4 has an invalid length.
[  794.438405][T19110] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3744'.
[  794.477456][T19109] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3743'.
[  794.833288][T19118] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3746'.
[  794.902136][T19118] openvswitch: netlink: Duplicate key (type 0).
[  796.731662][T19141] netlink: 'syz.0.3751': attribute type 10 has an invalid length.
[  796.816773][T19141] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[  797.644150][T19176] netlink: 'syz.1.3762': attribute type 4 has an invalid length.
[  797.948543][T19185] sctp: [Deprecated]: syz.0.3764 (pid 19185) Use of struct sctp_assoc_value in delayed_ack socket option.
[  797.948543][T19185] Use struct sctp_sack_info instead
[  797.985720][T19183] netlink: 'syz.1.3763': attribute type 3 has an invalid length.
[  798.013889][T19183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3763'.
[  799.085821][T19232] netlink: 'syz.0.3776': attribute type 46 has an invalid length.
[  799.112169][T19232] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3776'.
[  799.508290][T19248] netlink: 'syz.3.3780': attribute type 1 has an invalid length.
[  799.569932][T19248] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3780'.
[  799.635739][T19258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3784'.
[  799.666286][T19259] netlink: 'syz.2.3784': attribute type 46 has an invalid length.
[  799.693528][T19259] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3784'.
[  801.330019][T19286] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3791'.
[  802.715820][T19296] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode
[  802.755135][T19296] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  802.877418][T19303] netlink: 'syz.2.3795': attribute type 3 has an invalid length.
[  802.916132][T19303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3795'.
[  803.641422][T19323] netlink: 'syz.0.3800': attribute type 33 has an invalid length.
[  803.672611][T19323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3800'.
[  803.711351][T19323] `: renamed from ip6tnl0 (while UP)
[  803.749489][T19323] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  803.924225][T19335] netlink: 'syz.1.3803': attribute type 29 has an invalid length.
[  804.004584][T19337] netlink: 'syz.1.3803': attribute type 27 has an invalid length.
[  804.021059][T19337] netlink: 'syz.1.3803': attribute type 3 has an invalid length.
[  804.041314][T19337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3803'.
[  804.078094][T19335] netlink: 'syz.1.3803': attribute type 29 has an invalid length.
[  804.104977][T19336] netlink: 'syz.1.3803': attribute type 29 has an invalid length.
[  804.276773][T19340] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3804'.
[  804.307762][T19340] ksmbd: Unknown IPC event: 0, ignore.
[  804.343983][T19346] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3804'.
[  804.405202][T19346] ksmbd: Unknown IPC event: 0, ignore.
[  804.700728][T19351] syzkaller0: entered promiscuous mode
[  804.725358][T19351] syzkaller0: entered allmulticast mode
[  805.137678][T19348] syzkaller0: entered promiscuous mode
[  805.148276][T19348] syzkaller0: entered allmulticast mode
[  809.685694][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  809.695976][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  811.562471][T19380] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.3813'.
[  811.579233][T19380] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.3813'.
[  811.618912][T19380] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.3813'.
[  811.629184][T19380] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.3813'.
[  812.936540][T19395] netlink: 'syz.0.3817': attribute type 1 has an invalid length.
[  812.945485][T19395] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3817'.
[  813.165869][T19397] bridge0: port 5(batadv0) entered blocking state
[  813.181681][T19397] bridge0: port 5(batadv0) entered disabled state
[  813.189475][T19397] batadv0: entered allmulticast mode
[  813.216995][T19397] batadv0: entered promiscuous mode
[  813.226673][T19397] bridge0: port 5(batadv0) entered blocking state
[  813.234430][T19397] bridge0: port 5(batadv0) entered forwarding state
[  813.250502][T19400] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3819'.
[  813.269614][ T5776] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  813.424081][ T2916] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  813.434295][ T2916] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  813.472701][T19404] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3822'.
[  814.033955][T19419] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3826'.
[  814.431805][T19419] syz.0.3826 (19419) used greatest stack depth: 18312 bytes left
[  814.698367][T19430] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3830'.
[  814.785984][T19433] netlink: 'syz.0.3831': attribute type 33 has an invalid length.
[  814.807864][T19433] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3831'.
[  814.824544][T19433] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  815.025723][T19439] syzkaller0: entered promiscuous mode
[  815.034437][T19439] syzkaller0: entered allmulticast mode
[  818.470153][T19450] netlink: 'syz.0.3842': attribute type 1 has an invalid length.
[  818.478798][T19450] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.3842'.
[  818.664552][T19470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3841'.
[  818.676936][T19470] bridge_slave_0: entered allmulticast mode
[  818.693100][T19470] sctp: [Deprecated]: syz.2.3841 (pid 19470) Use of int in max_burst socket option deprecated.
[  818.693100][T19470] Use struct sctp_assoc_value instead
[  818.911576][T19485] netlink: 'syz.0.3844': attribute type 39 has an invalid length.
[  819.412458][T19494] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3849'.
[  819.545065][T19494] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3849'.
[  821.096504][T19545] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3862'.
[  821.318850][T19547] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3863'.
[  821.344065][T19547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  823.085128][T19593] netlink: 'syz.3.3879': attribute type 3 has an invalid length.
[  823.112034][T19593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3879'.
[  823.825376][T19636] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3890'.
[  824.090328][T19644] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3894'.
[  827.883911][T19714] netlink: 'syz.3.3913': attribute type 10 has an invalid length.
[  827.904801][T19714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3913'.
[  828.209091][T19729] netlink: 'syz.0.3918': attribute type 2 has an invalid length.
[  828.238663][T19729] netlink: 'syz.0.3918': attribute type 8 has an invalid length.
[  828.258219][T19729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3918'.
[  828.442869][T19741] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3920'.
[  828.632332][T19748] netlink: 'syz.3.3921': attribute type 7 has an invalid length.
[  828.701955][T19748] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.3921'.
[  829.139373][T19772] netlink: 'syz.3.3930': attribute type 10 has an invalid length.
[  829.151589][T19772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3930'.
[  830.184109][T19799] syzkaller0: entered promiscuous mode
[  830.189664][T19799] syzkaller0: entered allmulticast mode
[  830.236615][T19799] C: renamed from team_slave_0 (while UP)
[  830.255321][T19804] netlink: 'syz.3.3938': attribute type 3 has an invalid length.
[  830.274061][T19804] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3938'.
[  830.418216][T19808] netlink: 'syz.2.3940': attribute type 1 has an invalid length.
[  830.430392][T19808] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3940'.
[  830.816767][T19815] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3942'.
[  830.998142][T19818] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3944'.
[  831.367376][T19834] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3947'.
[  831.402706][T19834] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3947'.
[  831.437410][T19834] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3947'.
[  831.460468][T19834] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3947'.
[  831.487700][T19834] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3947'.
[  834.208543][T19859] netlink: 'syz.1.3953': attribute type 1 has an invalid length.
[  834.226544][T19859] __nla_validate_parse: 63 callbacks suppressed
[  834.226562][T19859] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3953'.
[  834.304610][T19862] batadv_slave_0: mtu less than device minimum
[  834.579186][T19868] IPv6: NLM_F_CREATE should be specified when creating new route
[  834.620217][T19868] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3956'.
[  835.088892][T19877] netlink: 'syz.1.3959': attribute type 39 has an invalid length.
[  835.108648][T19877] macvlan0: entered promiscuous mode
[  835.122768][T19877] macvlan0: entered allmulticast mode
[  835.148147][T19877] veth1_vlan: entered allmulticast mode
[  835.626081][T19889] netlink: 'syz.2.3964': attribute type 33 has an invalid length.
[  835.645310][T19889] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3964'.
[  835.681245][T19889] `: renamed from ip6tnl0
[  835.699406][T19889] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  835.802561][T19898] netlink: 'syz.1.3965': attribute type 21 has an invalid length.
[  835.826714][T19898] netlink: 'syz.1.3965': attribute type 10 has an invalid length.
[  835.845720][T19898] netlink: 'syz.1.3965': attribute type 12 has an invalid length.
[  835.865841][T19898] netlink: 'syz.1.3965': attribute type 13 has an invalid length.
[  835.905053][T19901] netlink: 'syz.1.3965': attribute type 29 has an invalid length.
[  835.919678][T19898] netlink: 'syz.1.3965': attribute type 14 has an invalid length.
[  835.949285][T19898] netlink: 'syz.1.3965': attribute type 15 has an invalid length.
[  836.003004][T19898] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.3965'.
[  836.102597][T19908] geneve0: entered promiscuous mode
[  836.294418][T19912] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3968'.
[  836.531417][T19917] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.3971'.
[  836.781093][T19925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3974'.
[  836.966769][T19925] netlink: 167736 bytes leftover after parsing attributes in process `syz.3.3974'.
[  837.004078][T19925] netlink: 6116 bytes leftover after parsing attributes in process `syz.3.3974'.
[  837.028497][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'.
[  839.649367][T19979] veth1_to_bond: entered allmulticast mode
[  839.895255][T19980] __nla_validate_parse: 1 callbacks suppressed
[  839.895274][T19980] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3988'.
[  839.951225][T19980] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  840.001389][T19980] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  840.975875][T20003] netlink: 7218 bytes leftover after parsing attributes in process `syz.0.3992'.
[  843.059805][T20015] validate_nla: 10 callbacks suppressed
[  843.059824][T20015] netlink: 'syz.2.3996': attribute type 10 has an invalid length.
[  843.091033][T20015] netlink: 'syz.2.3996': attribute type 10 has an invalid length.
[  843.109870][T20015] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3996'.
[  843.128399][T20015] openvswitch: netlink: Message has 4 unknown bytes.
[  844.168731][T20047] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4005'.
[  844.236195][T20047] netlink: zone id is out of range
[  844.253670][T20047] netlink: zone id is out of range
[  844.258900][T20047] netlink: zone id is out of range
[  844.291237][T20047] netlink: zone id is out of range
[  844.297149][T20047] netlink: zone id is out of range
[  844.312638][T20047] netlink: zone id is out of range
[  844.328705][T20047] netlink: zone id is out of range
[  847.326948][T20058] netlink: 'syz.1.4007': attribute type 39 has an invalid length.
[  847.425132][T20058] hsr_slave_1 (unregistering): left promiscuous mode
[  847.508024][T20064] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4009'.
[  847.530686][T20063] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4009'.
[  847.551915][T20071] sit0: entered allmulticast mode
[  847.614532][T20071] sit0: entered promiscuous mode
[  847.791780][T20079] netlink: 'syz.2.4016': attribute type 10 has an invalid length.
[  847.845507][T20079] sctp: [Deprecated]: syz.2.4016 (pid 20079) Use of struct sctp_assoc_value in delayed_ack socket option.
[  847.845507][T20079] Use struct sctp_sack_info instead
[  848.272010][T20098] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.4020'.
[  848.311355][T20096] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.4020'.
[  851.513201][T20118] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  851.520838][T20118] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  852.231187][T20187] netlink: 'syz.0.4036': attribute type 21 has an invalid length.
[  852.239871][T20187] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4036'.
[  852.275052][T20191] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4035'.
[  852.290542][T20191] netlink: 'syz.3.4035': attribute type 27 has an invalid length.
[  852.298828][T20191] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.4035'.
[  852.336615][T20187] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4036'.
[  852.355484][T20186] delete_channel: no stack
[  852.544071][T20204] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4041'.
[  852.818620][T20212] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4044'.
[  853.286655][T20230] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4049'.
[  853.695418][T20239] netlink: 'syz.3.4051': attribute type 21 has an invalid length.
[  853.734036][T20239] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4051'.
[  853.829649][T20251] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4051'.
[  853.954491][T20238] delete_channel: no stack
[  854.342482][T20264] netlink: 'syz.0.4058': attribute type 10 has an invalid length.
[  854.425641][T20266] netlink: 'syz.0.4058': attribute type 9 has an invalid length.
[  854.447522][T20266] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4058'.
[  855.030596][T20264] team0 (unregistering): Port device C removed
[  855.225944][T20264] team0 (unregistering): Port device team_slave_1 removed
[  855.425018][T20258] netlink: 'syz.1.4055': attribute type 4 has an invalid length.
[  855.750457][T20281] netlink: 'syz.1.4065': attribute type 21 has an invalid length.
[  855.779245][T20281] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4065'.
[  855.811634][T20281] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4065'.
[  855.824387][T20288] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4066'.
[  855.853861][T20280] delete_channel: no stack
[  856.037267][T20291] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4067'.
[  857.381375][T20315] netlink: 'syz.3.4077': attribute type 10 has an invalid length.
[  857.425239][T20321] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  857.436311][T20321] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  857.448729][T20321] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  857.466788][T20321] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  857.478579][T20321] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  857.488859][T20321] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  858.167717][T20335] __nla_validate_parse: 2 callbacks suppressed
[  858.167739][T20335] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4078'.
[  858.216783][T20330] netlink: 'syz.2.4078': attribute type 21 has an invalid length.
[  858.283795][T20330] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4078'.
[  858.481976][T20329] delete_channel: no stack
[  858.764369][T20348] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4084'.
[  859.632525][T20385] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4094'.
[  859.647826][T20385] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.4094'.
[  861.244828][T20426] delete_channel: no stack
[  861.704518][T20445] netlink: 'syz.3.4114': attribute type 10 has an invalid length.
[  861.731023][T20445] netlink: 'syz.3.4114': attribute type 4 has an invalid length.
[  861.762040][T20445] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4114'.
[  862.927886][T20453] netlink: 'syz.0.4118': attribute type 39 has an invalid length.
[  863.404303][ T5776] Bluetooth: hci1: ISO packet for unknown connection handle 2366
[  863.833858][T20496] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4128'.
[  863.871208][T20502] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4130'.
[  863.942786][ T5776] Bluetooth: hci0: ISO packet for unknown connection handle 19
[  864.785547][T20515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4133'.
[  865.470782][T20533] netlink: 'syz.1.4140': attribute type 9 has an invalid length.
[  865.596545][T20533] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4140'.
[  866.435018][T20541] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4141'.
[  866.883612][T20551] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4148'.
[  867.006867][T20558] netlink: 'syz.0.4147': attribute type 21 has an invalid length.
[  867.060756][T20559] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.4146'.
[  867.262593][T20567] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4150'.
[  867.301210][T20567] bridge_slave_1: default FDB implementation only supports local addresses
[  867.347828][T20573] netlink: 'syz.0.4151': attribute type 9 has an invalid length.
[  867.361587][T20573] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4151'.
[  867.406274][T20576] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4153'.
[  868.857774][T20604] delete_channel: no stack
[  869.254620][T20623] syzkaller0: entered promiscuous mode
[  871.120767][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  871.128886][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  871.679369][T20631] netlink: 'syz.1.4167': attribute type 6 has an invalid length.
[  873.029033][T20664] netlink: 'syz.0.4175': attribute type 21 has an invalid length.
[  874.570540][T20680] __nla_validate_parse: 8 callbacks suppressed
[  874.570562][T20680] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4180'.
[  878.264267][T20717] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4191'.
[  884.574151][T20726] netlink: 'syz.0.4193': attribute type 13 has an invalid length.
[  884.587995][T20726] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.4193'.
[  885.152620][T20764] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4202'.
[  885.169893][T20764] netlink: 'syz.3.4202': attribute type 9 has an invalid length.
[  885.180136][T20764] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4202'.
[  885.192383][T20766] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4203'.
[  886.497201][T20798] netlink: 'syz.2.4213': attribute type 29 has an invalid length.
[  888.986566][T20792] netlink: 'syz.3.4211': attribute type 5 has an invalid length.
[  889.025617][T20798] netlink: 'syz.2.4213': attribute type 29 has an invalid length.
[  889.155300][T20815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4214'.
[  889.215436][T20820] netlink: 'syz.1.4217': attribute type 9 has an invalid length.
[  889.244659][T20820] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4217'.
[  889.687097][T20852] netlink: 'syz.0.4223': attribute type 21 has an invalid length.
[  890.132945][T20870] tap0: tun_chr_ioctl cmd 1074025677
[  890.181097][T20870] tap0: linktype set to 270
[  890.186320][T20872] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4228'.
[  890.227710][T20872] netlink: 'syz.0.4228': attribute type 9 has an invalid length.
[  890.247555][T20872] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4228'.
[  890.351916][T20883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4230'.
[  890.497409][T20883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4230'.
[  890.562188][T20879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4230'.
[  890.697709][T20891] netlink: 'syz.2.4233': attribute type 21 has an invalid length.
[  890.707537][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'.
[  890.818255][T20893] netlink: 'syz.3.4234': attribute type 10 has an invalid length.
[  890.851259][T20893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4234'.
[  890.883628][T20893] net_ratelimit: 45 callbacks suppressed
[  890.883733][T20893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  891.021016][T20893] netlink: 'syz.3.4234': attribute type 29 has an invalid length.
[  891.030190][T20893] netlink: 'syz.3.4234': attribute type 29 has an invalid length.
[  892.375802][ T5776] Bluetooth: hci3: Malformed HCI Event
[  892.427251][T20945] tap0: tun_chr_ioctl cmd 35108
[  892.541774][T20948] dvmrp1: tun_chr_ioctl cmd 1074025677
[  892.575077][T20948] dvmrp1: linktype set to 768
[  893.165971][T20959] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4253'.
[  893.200104][T20959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  893.374319][T20964] bridge0: port 5(batadv0) entered disabled state
[  893.381930][T20964] bridge0: port 3(dummy0) entered disabled state
[  893.389474][T20964] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.397203][T20964] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.474248][T20964] bridge0: entered allmulticast mode
[  893.519594][T20973] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4256'.
[  894.666110][T21003] netlink: 'syz.1.4263': attribute type 29 has an invalid length.
[  894.697284][T21003] netlink: 'syz.1.4263': attribute type 29 has an invalid length.
[  894.728665][T21008] netlink: 'syz.1.4263': attribute type 29 has an invalid length.
[  896.371750][T21025] syzkaller0: entered promiscuous mode
[  896.387917][T21025] syzkaller0: entered allmulticast mode
[  901.246268][T21070] netlink: 'syz.0.4283': attribute type 10 has an invalid length.
[  901.255584][T21070] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4283'.
[  901.396450][T21075] netlink: 'syz.2.4284': attribute type 9 has an invalid length.
[  901.406907][T21075] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4284'.
[  901.545624][T21080] netlink: 'syz.2.4284': attribute type 9 has an invalid length.
[  901.554248][T21080] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4284'.
[  901.564658][T21082] netlink: 'syz.0.4287': attribute type 10 has an invalid length.
[  901.573502][T21082] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.4287'.
[  901.589828][T21077] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4286'.
[  902.654483][T21124] netlink: 135056 bytes leftover after parsing attributes in process `syz.2.4298'.
[  902.759964][T21124] openvswitch: netlink: Tunnel attr 8545 out of range max 16
[  903.244447][ T5776] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  903.718634][T21158] delete_channel: no stack
[  904.941745][T21186] delete_channel: no stack
[  905.183144][T21194] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4318'.
[  905.315004][T21197] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4319'.
[  907.990051][T21201] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4322'.
[  908.974173][T21234] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.4330'.
[  909.473319][T21244] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  909.720736][T21252] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4339'.
[  909.908995][T21257] netlink: 'syz.2.4341': attribute type 29 has an invalid length.
[  909.932660][T21257] netlink: 'syz.2.4341': attribute type 29 has an invalid length.
[  909.956564][T21257] netlink: 'syz.2.4341': attribute type 29 has an invalid length.
[  910.332579][T21273] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4346'.
[  910.929188][T21300] netlink: 'syz.1.4354': attribute type 3 has an invalid length.
[  910.938833][T21300] netlink: 'syz.1.4354': attribute type 5 has an invalid length.
[  912.054202][T21327] netlink: 'syz.3.4359': attribute type 2 has an invalid length.
[  912.067175][T21327] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4359'.
[  914.466818][T21348] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4367'.
[  914.480663][T21348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  914.973385][T21362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  914.991550][T21362] batman_adv: batadv0: Removing interface: batadv_slave_0
[  915.267770][T21362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  915.291112][T21362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  915.317411][T21362] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  915.335675][T21362] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  915.372638][T21362] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  915.390619][T21362] batman_adv: batadv0: Removing interface: virt_wifi0
[  916.420634][T21385] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4378'.
[  916.457109][T21385] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4378'.
[  916.493072][T21390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4378'.
[  917.498271][T21405] netlink: 'syz.0.4383': attribute type 10 has an invalid length.
[  917.527852][T21405] mac80211_hwsim hwsim36 wlan1: left promiscuous mode
[  917.541160][T21405] mac80211_hwsim hwsim36 wlan1: left allmulticast mode
[  918.076815][T21433] netlink: 'syz.2.4391': attribute type 10 has an invalid length.
[  918.115659][T21433] veth0_vlan: left promiscuous mode
[  918.126567][T21433] veth0_vlan: entered promiscuous mode
[  918.135046][T21433] team0: Device veth0_vlan failed to register rx_handler
[  918.662490][T20160] tipc: Subscription rejected, illegal request
[  918.682805][T21465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4400'.
[  919.365075][T21502] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4407'.
[  919.423990][T21502] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  919.461046][T21502] CPU: 1 PID: 21502 Comm: syz.2.4407 Not tainted syzkaller #0
[  919.471018][T21502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  919.483104][T21502] Call Trace:
[  919.487127][T21502]  <TASK>
[  919.490380][T21502]  dump_stack_lvl+0x18c/0x250
[  919.495508][T21502]  ? show_regs_print_info+0x20/0x20
[  919.501201][T21502]  ? load_image+0x420/0x420
[  919.506193][T21502]  sysfs_warn_dup+0x8e/0xa0
[  919.511108][T21502]  sysfs_do_create_link_sd+0xc0/0x110
[  919.517622][T21502]  device_add_class_symlinks+0x1cf/0x240
[  919.524554][T21502]  device_add+0x4f9/0xc40
[  919.530170][T21502]  wiphy_register+0x1d99/0x2ac0
[  919.535802][T21502]  ? cfg80211_event_work+0x40/0x40
[  919.541141][T21502]  ? minstrel_ht_alloc+0x88a/0x990
[  919.546761][T21502]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  919.553174][T21502]  ieee80211_register_hw+0x2dd8/0x3b30
[  919.553276][T21505] netlink: 'syz.3.4410': attribute type 29 has an invalid length.
[  919.559208][T21502]  ? ieee80211_register_hw+0xed1/0x3b30
[  919.573231][T21502]  ? ieee80211_tasklet_handler+0x20/0x20
[  919.579219][T21502]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  919.586480][T21502]  ? __debug_object_init+0xec/0x450
[  919.591947][T21502]  ? __asan_memset+0x22/0x40
[  919.596859][T21502]  ? __hrtimer_init+0x189/0x270
[  919.602213][T21502]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  919.608315][T21502]  ? mac80211_hwsim_free+0x220/0x220
[  919.614087][T21502]  ? rcu_is_watching+0x15/0xb0
[  919.618987][T21502]  ? kstrndup+0xbd/0x140
[  919.623611][T21502]  hwsim_new_radio_nl+0xdad/0x1a70
[  919.629363][T21502]  ? __nla_validate+0x50/0x50
[  919.634350][T21502]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  919.641418][T21502]  ? __nla_parse+0x40/0x50
[  919.646131][T21502]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  919.654283][T21502]  genl_family_rcv_msg_doit+0x21a/0x310
[  919.660414][T21502]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  919.666512][T21502]  ? bpf_lsm_capable+0x9/0x10
[  919.671964][T21502]  ? security_capable+0x89/0xb0
[  919.677357][T21502]  genl_rcv_msg+0x611/0x7a0
[  919.682503][T21502]  ? genl_bind+0x360/0x360
[  919.687850][T21502]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  919.694572][T21502]  ? perf_trace_lock+0xfc/0x3b0
[  919.699695][T21502]  ? __kasan_kmalloc_large+0x8b/0xa0
[  919.705898][T21502]  netlink_rcv_skb+0x235/0x4c0
[  919.711674][T21502]  ? genl_bind+0x360/0x360
[  919.716593][T21502]  ? netlink_ack+0x1160/0x1160
[  919.721951][T21502]  ? __lock_acquire+0x7d80/0x7d80
[  919.727652][T21502]  ? down_read+0x1ac/0x2e0
[  919.732423][T21502]  genl_rcv+0x28/0x40
[  919.736590][T21502]  netlink_unicast+0x7b1/0x930
[  919.741573][T21502]  netlink_sendmsg+0x8d0/0xbf0
[  919.746616][T21502]  ? netlink_getsockopt+0x590/0x590
[  919.752086][T21502]  ? apparmor_socket_sendmsg+0x8e/0x330
[  919.757926][T21502]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  919.763494][T21502]  ? security_socket_sendmsg+0x80/0xa0
[  919.769318][T21502]  ? netlink_getsockopt+0x590/0x590
[  919.774874][T21502]  ____sys_sendmsg+0x61b/0x980
[  919.780094][T21502]  ? __asan_memset+0x22/0x40
[  919.784881][T21502]  ? __sys_sendmsg_sock+0x30/0x30
[  919.790430][T21502]  ? __import_iovec+0x5f2/0x850
[  919.795308][T21502]  ? import_iovec+0x73/0xa0
[  919.800173][T21502]  ___sys_sendmsg+0x2a6/0x360
[  919.804963][T21502]  ? __sys_sendmsg+0x2b0/0x2b0
[  919.810105][T21502]  ? trace_call_bpf+0xc3/0x6c0
[  919.815058][T21502]  __se_sys_sendmsg+0x1d0/0x2c0
[  919.820123][T21502]  ? __x64_sys_sendmsg+0x80/0x80
[  919.825739][T21502]  ? lockdep_hardirqs_on+0x98/0x150
[  919.831769][T21502]  do_syscall_64+0x55/0xb0
[  919.836658][T21502]  ? clear_bhb_loop+0x40/0x90
[  919.841623][T21502]  ? clear_bhb_loop+0x40/0x90
[  919.846598][T21502]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  919.853032][T21502] RIP: 0033:0x7fd59619e019
[  919.857459][T21502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.878827][T21502] RSP: 002b:00007fd596fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  919.887822][T21502] RAX: ffffffffffffffda RBX: 00007fd596426090 RCX: 00007fd59619e019
[  919.896440][T21502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011
[  919.904620][T21502] RBP: 00007fd59623500c R08: 0000000000000000 R09: 0000000000000000
[  919.913239][T21502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.921956][T21502] R13: 00007fd596426128 R14: 00007fd596426090 R15: 00007fff97a7ab78
[  919.930772][T21502]  </TASK>
[  919.946796][T21505] netlink: 'syz.3.4410': attribute type 29 has an invalid length.
[  919.961603][T21506] netlink: 'syz.3.4410': attribute type 29 has an invalid length.
[  920.095946][T21511] netlink: 'syz.3.4412': attribute type 9 has an invalid length.
[  920.119860][T21511] netlink: 'syz.3.4412': attribute type 23 has an invalid length.
[  920.161483][T21511] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.4412'.
[  920.732589][T21524] netlink: 'syz.1.4416': attribute type 10 has an invalid length.
[  920.742508][T21524] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4416'.
[  921.278812][T21552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4426'.
[  921.289075][T21552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4426'.
[  921.299896][T21552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4426'.
[  921.462798][T21558] netlink: 'syz.1.4429': attribute type 153 has an invalid length.
[  921.471553][T21558] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4429'.
[  921.544152][T21560] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.4428'.
[  921.555955][T21560] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4428'.
[  921.899260][T21580] netlink: 'syz.0.4432': attribute type 10 has an invalid length.
[  921.921504][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  921.934291][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  921.945317][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  921.960832][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  921.975019][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  921.993839][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  922.007245][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  922.019591][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  922.034319][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  922.045936][T21580] netlink: 'syz.0.4432': attribute type 11 has an invalid length.
[  922.059291][T21580] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.4432'.
[  922.188453][T21588] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4435'.
[  922.457106][T21595] netlink: zone id is out of range
[  922.463993][T21595] netlink: zone id is out of range
[  922.469943][T21595] netlink: zone id is out of range
[  922.491804][T21595] netlink: zone id is out of range
[  922.497435][T21595] netlink: zone id is out of range
[  922.508652][T21595] netlink: zone id is out of range
[  922.549618][T21595] netlink: zone id is out of range
[  922.566898][T21595] netlink: zone id is out of range
[  922.589315][T21595] netlink: zone id is out of range
[  922.608409][T21595] netlink: zone id is out of range
[  923.352103][T21620] validate_nla: 4 callbacks suppressed
[  923.352122][T21620] netlink: 'syz.0.4445': attribute type 10 has an invalid length.
[  923.378450][T21620] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  923.454927][T21620] batman_adv: batadv0: Removing interface: veth0_vlan
[  925.089309][T21661] netlink: 'syz.3.4457': attribute type 10 has an invalid length.
[  925.184924][T21664] __nla_validate_parse: 1 callbacks suppressed
[  925.184943][T21664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4460'.
[  925.252463][T21669] netlink: 'syz.1.4458': attribute type 33 has an invalid length.
[  925.269603][T21669] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4458'.
[  925.291411][T21669] `: renamed from ip6tnl0 (while UP)
[  925.350380][T21673] netlink: 'syz.3.4461': attribute type 21 has an invalid length.
[  925.480292][T21673] syzkaller0: entered promiscuous mode
[  925.487602][T21673] syzkaller0: entered allmulticast mode
[  928.302125][T21691] netlink: 'syz.1.4465': attribute type 17 has an invalid length.
[  928.310545][T21691] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4465'.
[  928.323527][T21692] netlink: 'syz.1.4465': attribute type 17 has an invalid length.
[  928.337345][T21692] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4465'.
[  928.350936][T21701] netlink: 'syz.2.4468': attribute type 10 has an invalid length.
[  928.419814][T21701] team0: Port device geneve1 added
[  928.554611][T21713] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4472'.
[  928.607936][T21711] netlink: 'syz.2.4471': attribute type 19 has an invalid length.
[  928.621591][T21711] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.4471'.
[  928.731307][T21716] syzkaller0: entered promiscuous mode
[  928.737464][T21716] syzkaller0: entered allmulticast mode
[  929.993393][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  930.004971][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  930.014688][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  930.029017][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  930.048523][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  930.057360][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  931.975891][T21749] netlink: 'syz.1.4481': attribute type 10 has an invalid length.
[  932.006252][T21749] team0: Port device wlan1 added
[  932.019056][T21750] netlink: 'syz.1.4481': attribute type 10 has an invalid length.
[  932.152059][ T5776] Bluetooth: hci1: command tx timeout
[  932.269786][T20151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.431129][T20151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.475372][T21775] netlink: 'syz.1.4488': attribute type 10 has an invalid length.
[  932.556859][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  932.564059][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  932.614383][T20151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.634493][T21781] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4490'.
[  932.755113][T20151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.815008][T21741] chnl_net:caif_netlink_parms(): no params data found
[  932.919505][T21791] netlink: 'syz.0.4492': attribute type 10 has an invalid length.
[  933.004835][T21741] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.014698][T21741] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.027132][T21741] bridge_slave_0: entered allmulticast mode
[  933.051822][T21741] bridge_slave_0: entered promiscuous mode
[  933.080383][T21741] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.089987][T21741] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.099123][T21741] bridge_slave_1: entered allmulticast mode
[  933.107756][T21741] bridge_slave_1: entered promiscuous mode
[  933.230082][T21741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.274036][T21741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.354515][T21741] team0: Port device team_slave_0 added
[  933.367263][T21741] team0: Port device team_slave_1 added
[  933.470536][T21741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.478658][T21741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.520741][T21741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.547295][T21741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  933.562329][T21741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.619148][T21741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  933.829792][T21814] netlink: 'syz.0.4496': attribute type 3 has an invalid length.
[  933.877220][T21810] netlink: 'syz.3.4495': attribute type 10 has an invalid length.
[  933.884139][T21814] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4496'.
[  933.901045][T21810] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4495'.
[  934.072882][T21741] hsr_slave_0: entered promiscuous mode
[  934.105993][T21741] hsr_slave_1: entered promiscuous mode
[  934.233440][ T5776] Bluetooth: hci1: command tx timeout
[  934.388699][T21831] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4500'.
[  934.604630][T20162] tipc: Subscription rejected, illegal request
[  934.687973][T21846] netlink: 'syz.1.4506': attribute type 29 has an invalid length.
[  934.820507][T21846] netlink: 'syz.1.4506': attribute type 29 has an invalid length.
[  934.843366][T21848] netlink: 'syz.1.4506': attribute type 29 has an invalid length.
[  934.919466][T21851] netlink: 'syz.1.4506': attribute type 29 has an invalid length.
[  935.019508][T21856] netlink: 'syz.1.4506': attribute type 29 has an invalid length.
[  935.138883][T21868] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4509'.
[  936.106202][T21892] netlink: 209628 bytes leftover after parsing attributes in process `syz.0.4515'.
[  936.140568][T21892] net_ratelimit: 373 callbacks suppressed
[  936.140586][T21892] netlink: get zone limit has 4 unknown bytes
[  936.311298][ T5776] Bluetooth: hci1: command tx timeout
[  936.325941][T21741] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  936.378786][T21741] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  936.404352][T21741] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  936.480708][T21741] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  936.607374][T21907] syzkaller0: entered promiscuous mode
[  936.616823][T21907] syzkaller0: entered allmulticast mode
[  936.639615][T21909] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4519'.
[  938.400999][ T5776] Bluetooth: hci1: command tx timeout
[  939.670162][T21946] netlink: 'syz.0.4524': attribute type 64 has an invalid length.
[  939.844609][T20151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  939.870035][T20151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  939.879054][T20151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  939.892211][T20151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  940.153028][T20151] team0 (unregistering): Port device geneve1 removed
[  940.660060][T20151] team0 (unregistering): Port device 
5
 removed
[  940.717271][T20151] team0 (unregistering): Port device C removed
[  941.235468][T21951] netlink: 'syz.3.4525': attribute type 21 has an invalid length.
[  941.244472][T21951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4525'.
[  941.369397][T21741] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.463223][T21741] 8021q: adding VLAN 0 to HW filter on device team0
[  941.504599][T20162] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.512024][T20162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  941.539566][T20162] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.547094][T20162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  941.812399][T21982] netlink: 'syz.3.4533': attribute type 29 has an invalid length.
[  941.829726][T21982] netlink: 'syz.3.4533': attribute type 29 has an invalid length.
[  941.843866][T21984] netlink: 'syz.3.4533': attribute type 29 has an invalid length.
[  941.855288][T21982] netlink: 'syz.3.4533': attribute type 29 has an invalid length.
[  941.904083][T21988] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4534'.
[  941.932634][T21982] netlink: 'syz.3.4533': attribute type 29 has an invalid length.
[  941.968545][T21984] netlink: 'syz.3.4533': attribute type 29 has an invalid length.
[  942.124343][T21741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  942.135045][T21998] netlink: 'syz.3.4536': attribute type 2 has an invalid length.
[  942.144651][T21998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4536'.
[  942.224914][T21741] veth0_vlan: entered promiscuous mode
[  942.248991][T21741] veth1_vlan: entered promiscuous mode
[  942.308497][T21741] veth0_macvtap: entered promiscuous mode
[  942.334297][T21741] veth1_macvtap: entered promiscuous mode
[  942.359774][T21741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  942.375440][T21741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.386958][T21741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.398174][T21741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.412318][T21741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.425833][T21741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  942.442006][T21741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  942.452924][T21741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  942.464178][T21741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  942.484582][T21741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  942.760351][T20142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  942.775803][T20142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.824848][T20151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  942.839650][T20151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  943.888685][T22065] netlink: 'syz.0.4552': attribute type 2 has an invalid length.
[  943.897238][T22065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4552'.
[  944.160087][T22071] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4553'.
[  947.200585][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4562'.
[  947.397695][T22112] validate_nla: 1 callbacks suppressed
[  947.397711][T22112] netlink: 'syz.1.4566': attribute type 13 has an invalid length.
[  947.414599][T22112] netlink: 'syz.1.4566': attribute type 58 has an invalid length.
[  947.424914][T22112] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4566'.
[  947.461681][T22115] netlink: 'syz.2.4567': attribute type 2 has an invalid length.
[  947.470174][T22115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4567'.
[  949.765139][T22174] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4579'.
[  951.445093][T22214] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4592'.
[  951.469139][T22214] openvswitch: netlink: Flow key attr not present in new flow.
[  954.423062][T22279] veth1_to_bond: entered allmulticast mode
[  954.682556][T22279] netlink: 'syz.1.4610': attribute type 17 has an invalid length.
[  955.126705][T22290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4616'.
[  955.141338][T22290] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4616'.
[  955.252686][T22290] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4616'.
[  955.920619][T22310] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4621'.
[  955.941075][T22310] netlink: zone id is out of range
[  955.946649][T22310] netlink: zone id is out of range
[  955.961678][T22310] netlink: zone id is out of range
[  955.980643][T22310] netlink: zone id is out of range
[  955.988871][T22310] netlink: zone id is out of range
[  955.999751][T22310] netlink: zone id is out of range
[  956.003514][T22312] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4622'.
[  956.019099][T22310] netlink: zone id is out of range
[  956.019136][T22310] netlink: zone id is out of range
[  956.019152][T22310] netlink: zone id is out of range
[  956.080181][T22312] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4622'.
[  956.502221][T22339] netlink: 'syz.1.4632': attribute type 4 has an invalid length.
[  957.136305][T22359] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4639'.
[  957.700741][T22378] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4643'.
[  957.728665][T22378] net_ratelimit: 81 callbacks suppressed
[  957.728684][T22378] openvswitch: netlink: Flow key attribute not present in set flow.
[  957.795332][T22380] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4642'.
[  957.823904][T22376] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4642'.
[  957.962937][T22389] netlink: 'syz.1.4646': attribute type 3 has an invalid length.
[  958.581084][T22413] netlink: 'syz.2.4654': attribute type 2 has an invalid length.
[  958.762551][T22423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.041269][T22431] netlink: 'syz.2.4659': attribute type 4 has an invalid length.
[  959.660069][T22451] bridge_slave_0 (unregistering): left allmulticast mode
[  959.677692][T22451] bridge_slave_0 (unregistering): left promiscuous mode
[  959.686255][T22451] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.977450][T22470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  960.406986][T22483] netlink: 'syz.0.4671': attribute type 4 has an invalid length.
[  960.902915][T22493] __nla_validate_parse: 9 callbacks suppressed
[  960.902952][T22493] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4676'.
[  961.682968][T22519] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4683'.
[  961.702149][T22513] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4683'.
[  961.738519][T22521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4686'.
[  961.755098][T22520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4686'.
[  961.814411][T22521] netlink: 'syz.1.4686': attribute type 21 has an invalid length.
[  961.865086][T22521] netlink: 'syz.1.4686': attribute type 1 has an invalid length.
[  961.920984][T22521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4686'.
[  962.181706][T22538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4694'.
[  962.662657][T22550] netlink: 'syz.3.4697': attribute type 21 has an invalid length.
[  962.830111][T22560] netlink: 'syz.3.4701': attribute type 29 has an invalid length.
[  962.857728][T22561] netlink: 'syz.3.4701': attribute type 29 has an invalid length.
[  962.896097][T22560] netlink: 'syz.3.4701': attribute type 29 has an invalid length.
[  963.093518][T22582] netlink: 'syz.0.4707': attribute type 1 has an invalid length.
[  963.128412][T22582] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4707'.
[  963.288984][T22580] netlink: 'syz.2.4706': attribute type 10 has an invalid length.
[  963.306676][T22580] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4706'.
[  963.684984][T22595] pim6reg0: tun_chr_ioctl cmd 1074812118
[  964.817556][T22627] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4721'.
[  964.866165][T22627] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  966.171042][T22649] macvlan1: mtu less than device minimum
[  966.393037][T22655] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4730'.
[  966.957917][T22668] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4734'.
[  967.069190][T22673] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4735'.
[  967.110753][T22668] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  967.111315][T22673] openvswitch: netlink: Duplicate key (type 0).
[  967.133728][T22668] CPU: 1 PID: 22668 Comm: syz.3.4734 Not tainted syzkaller #0
[  967.141292][T22668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  967.151397][T22668] Call Trace:
[  967.154909][T22668]  <TASK>
[  967.157975][T22668]  dump_stack_lvl+0x18c/0x250
[  967.163710][T22668]  ? show_regs_print_info+0x20/0x20
[  967.170104][T22668]  ? load_image+0x420/0x420
[  967.174745][T22668]  sysfs_warn_dup+0x8e/0xa0
[  967.179353][T22668]  sysfs_do_create_link_sd+0xc0/0x110
[  967.185069][T22668]  device_add_class_symlinks+0x1cf/0x240
[  967.191385][T22668]  device_add+0x4f9/0xc40
[  967.195866][T22668]  wiphy_register+0x1d99/0x2ac0
[  967.201083][T22668]  ? cfg80211_event_work+0x40/0x40
[  967.206447][T22668]  ? minstrel_ht_alloc+0x88a/0x990
[  967.211746][T22668]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  967.218066][T22668]  ieee80211_register_hw+0x2dd8/0x3b30
[  967.223914][T22668]  ? ieee80211_register_hw+0xed1/0x3b30
[  967.229548][T22668]  ? ieee80211_tasklet_handler+0x20/0x20
[  967.235360][T22668]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  967.241687][T22668]  ? __debug_object_init+0xec/0x450
[  967.247752][T22668]  ? __asan_memset+0x22/0x40
[  967.252605][T22668]  ? __hrtimer_init+0x189/0x270
[  967.257695][T22668]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  967.263726][T22668]  ? mac80211_hwsim_free+0x220/0x220
[  967.269170][T22668]  ? rcu_is_watching+0x15/0xb0
[  967.274175][T22668]  ? kstrndup+0xbd/0x140
[  967.278506][T22668]  hwsim_new_radio_nl+0xdad/0x1a70
[  967.283689][T22668]  ? __nla_validate+0x50/0x50
[  967.288536][T22668]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  967.294953][T22668]  ? __nla_parse+0x40/0x50
[  967.299452][T22668]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  967.306027][T22668]  genl_family_rcv_msg_doit+0x21a/0x310
[  967.312201][T22668]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  967.318667][T22668]  ? bpf_lsm_capable+0x9/0x10
[  967.323413][T22668]  ? security_capable+0x89/0xb0
[  967.328377][T22668]  genl_rcv_msg+0x611/0x7a0
[  967.333038][T22668]  ? genl_bind+0x360/0x360
[  967.337683][T22668]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  967.344156][T22668]  ? perf_trace_lock+0x303/0x3b0
[  967.349339][T22668]  netlink_rcv_skb+0x235/0x4c0
[  967.354699][T22668]  ? genl_bind+0x360/0x360
[  967.359344][T22668]  ? netlink_ack+0x1160/0x1160
[  967.364284][T22668]  ? __lock_acquire+0x7d80/0x7d80
[  967.369554][T22668]  ? down_read+0x1ac/0x2e0
[  967.374269][T22668]  genl_rcv+0x28/0x40
[  967.378594][T22668]  netlink_unicast+0x7b1/0x930
[  967.383645][T22668]  netlink_sendmsg+0x8d0/0xbf0
[  967.389016][T22668]  ? netlink_getsockopt+0x590/0x590
[  967.394385][T22668]  ? apparmor_socket_sendmsg+0x8e/0x330
[  967.399995][T22668]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  967.405612][T22668]  ? security_socket_sendmsg+0x80/0xa0
[  967.411955][T22668]  ? netlink_getsockopt+0x590/0x590
[  967.417388][T22668]  ____sys_sendmsg+0x61b/0x980
[  967.422666][T22668]  ? __asan_memset+0x22/0x40
[  967.427572][T22668]  ? __sys_sendmsg_sock+0x30/0x30
[  967.433178][T22668]  ? __import_iovec+0x5f2/0x850
[  967.438095][T22668]  ? import_iovec+0x73/0xa0
[  967.442924][T22668]  ___sys_sendmsg+0x2a6/0x360
[  967.447833][T22668]  ? __sys_sendmsg+0x2b0/0x2b0
[  967.452728][T22668]  __se_sys_sendmsg+0x1d0/0x2c0
[  967.457818][T22668]  ? __x64_sys_sendmsg+0x80/0x80
[  967.462905][T22668]  ? lockdep_hardirqs_on+0x98/0x150
[  967.468697][T22668]  do_syscall_64+0x55/0xb0
[  967.473161][T22668]  ? clear_bhb_loop+0x40/0x90
[  967.478045][T22668]  ? clear_bhb_loop+0x40/0x90
[  967.482925][T22668]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  967.489233][T22668] RIP: 0033:0x7f1ef2d9e019
[  967.493973][T22668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.514861][T22668] RSP: 002b:00007f1ef3bde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  967.523410][T22668] RAX: ffffffffffffffda RBX: 00007f1ef3025fa0 RCX: 00007f1ef2d9e019
[  967.531609][T22668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  967.540085][T22668] RBP: 00007f1ef2e3500c R08: 0000000000000000 R09: 0000000000000000
[  967.548402][T22668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  967.556686][T22668] R13: 00007f1ef3026038 R14: 00007f1ef3025fa0 R15: 00007ffe45df6e38
[  967.564819][T22668]  </TASK>
[  968.204030][T22695] netlink: 'syz.0.4742': attribute type 10 has an invalid length.
[  972.524671][T22742] netlink: 'syz.0.4755': attribute type 3 has an invalid length.
[  972.536438][T22742] netlink: 122792 bytes leftover after parsing attributes in process `syz.0.4755'.
[  973.535579][T20151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.602413][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  973.616281][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  973.635475][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  973.646335][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  973.657945][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  973.666594][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  973.745705][T20151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.873120][T20151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.965619][T22772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4767'.
[  973.983270][T20151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.007106][T22772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4767'.
[  974.422964][T22764] chnl_net:caif_netlink_parms(): no params data found
[  974.721194][T22764] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.728943][T22764] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.736935][T22764] bridge_slave_0: entered allmulticast mode
[  974.744770][T22764] bridge_slave_0: entered promiscuous mode
[  974.756830][T22764] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.764729][T22764] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.772504][T22764] bridge_slave_1: entered allmulticast mode
[  974.792649][T22764] bridge_slave_1: entered promiscuous mode
[  974.889262][T22764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  974.942105][T22764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.033597][T22764] team0: Port device team_slave_0 added
[  975.075226][T22764] team0: Port device team_slave_1 added
[  975.114140][T22764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  975.121631][T22764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  975.171003][T22764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  975.254342][T22764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  975.265352][T22764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  975.304192][T22764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  975.751178][ T5776] Bluetooth: hci2: command tx timeout
[  976.398229][T22764] hsr_slave_0: entered promiscuous mode
[  976.408216][T22764] hsr_slave_1: entered promiscuous mode
[  976.428480][T22764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  976.448613][T22764] Cannot create hsr debugfs directory
[  977.054437][T22857] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4787'.
[  977.831186][ T5776] Bluetooth: hci2: command tx timeout
[  978.011898][T20151] hsr_slave_0: left promiscuous mode
[  978.029939][T20151] hsr_slave_1: left promiscuous mode
[  978.055782][T20151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  978.091265][T20151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.110194][T20151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  978.120953][T20151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  978.134517][T20151] hsr0: left allmulticast mode
[  978.139657][T20151] bridge0: port 3(hsr0) entered disabled state
[  978.197806][T20151] veth1_macvtap: left promiscuous mode
[  978.214605][T20151] veth0_macvtap: left promiscuous mode
[  978.223162][T20151] veth1_vlan: left promiscuous mode
[  979.304794][T20151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  979.359399][T20151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  979.413849][T20151] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  979.446290][T20151] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface
[  979.637419][T20151] bond0 (unregistering): Released all slaves
[  979.817516][T22764] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  979.852859][T22764] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  979.892349][T22764] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  979.913359][ T5776] Bluetooth: hci2: command tx timeout
[  979.943420][T22764] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  980.206277][T22764] 8021q: adding VLAN 0 to HW filter on device bond0
[  980.255490][T22764] 8021q: adding VLAN 0 to HW filter on device team0
[  980.288257][T20157] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.296472][T20157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  980.343527][T20142] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.350961][T20142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  981.017114][T22764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.675401][T22764] veth0_vlan: entered promiscuous mode
[  981.730177][T22764] veth1_vlan: entered promiscuous mode
[  981.876187][T22764] veth0_macvtap: entered promiscuous mode
[  981.913171][T22764] veth1_macvtap: entered promiscuous mode
[  981.953469][T22764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  981.968070][T22764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  981.983085][T22764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  981.991454][ T5776] Bluetooth: hci2: command tx timeout
[  982.053948][T22764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  982.087295][T22967] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4808'.
[  982.102807][T22764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.126055][T22764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  982.139883][T22764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.175459][T22764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.236654][T22764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.267930][T22764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.307637][T22764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.317207][T22764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  982.531103][T20164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.567869][T20164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  982.663964][T20148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.695275][T20148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.346705][T23010] netlink: 'syz.1.4816': attribute type 29 has an invalid length.
[  983.356937][T23012] netlink: 'syz.3.4815': attribute type 10 has an invalid length.
[  983.381692][T23012] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4815'.
[  983.453298][T23010] netlink: 'syz.1.4816': attribute type 29 has an invalid length.
[  983.494276][T23013] netlink: 'syz.1.4816': attribute type 29 has an invalid length.
[  983.529387][T23015] netlink: 'syz.1.4816': attribute type 29 has an invalid length.
[  986.725696][T23030] netlink: 'syz.2.4819': attribute type 2 has an invalid length.
[  986.758281][T23030] netlink: 'syz.2.4819': attribute type 8 has an invalid length.
[  986.796710][T23030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4819'.
[  986.937048][T23048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4822'.
[  986.961820][T23048] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4822'.
[  987.239157][T23051] syzkaller0: entered promiscuous mode
[  987.261227][T23051] syzkaller0: entered allmulticast mode
[  988.183011][T23090] netlink: 'syz.2.4832': attribute type 1 has an invalid length.
[  988.205109][T23090] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4832'.
[  988.217739][T23090] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4832'.
[  990.341374][T23099] netlink: 'syz.1.4833': attribute type 3 has an invalid length.
[  990.349383][T23099] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4833'.
[  990.755101][T23117] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4838'.
[  990.773358][T23117] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  991.963128][T23160] netlink: 'syz.2.4852': attribute type 1 has an invalid length.
[  991.994736][T23160] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4852'.
[  992.361196][T23183] netlink: 'syz.3.4858': attribute type 29 has an invalid length.
[  992.383395][T23183] netlink: 'syz.3.4858': attribute type 29 has an invalid length.
[  992.416992][T23183] netlink: 'syz.3.4858': attribute type 29 has an invalid length.
[  992.438038][T23183] netlink: 'syz.3.4858': attribute type 29 has an invalid length.
[  992.455049][T23184] netlink: 'syz.3.4858': attribute type 29 has an invalid length.
[  992.584816][T23184] netlink: 'syz.3.4858': attribute type 29 has an invalid length.
[  992.809617][T23198] netlink: 'syz.2.4863': attribute type 2 has an invalid length.
[  992.839859][T23198] netlink: 'syz.2.4863': attribute type 9 has an invalid length.
[  992.863151][T23198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4863'.
[  994.061576][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  994.069390][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  994.131148][T23223] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4877'.
[  996.552093][T23232] validate_nla: 2 callbacks suppressed
[  996.552129][T23232] netlink: 'syz.0.4872': attribute type 13 has an invalid length.
[  996.741561][T23238] netlink: 'syz.2.4873': attribute type 10 has an invalid length.
[  996.770716][T23238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4873'.
[  996.809031][T23238] caif0: entered promiscuous mode
[  996.825180][T23238] caif0: entered allmulticast mode
[  996.830740][T23238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  997.040156][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  997.054168][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  997.063368][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  997.073550][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  997.091903][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  997.131155][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  997.337010][ T7421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.433257][ T7421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.554021][ T7421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.655256][ T7421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.844609][T23276] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4885'.
[  997.858679][T23244] chnl_net:caif_netlink_parms(): no params data found
[  997.879910][T23273] netlink: 'syz.0.4884': attribute type 21 has an invalid length.
[  997.897249][T23273] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4884'.
[  997.926740][T23276] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  997.937347][T23276] CPU: 0 PID: 23276 Comm: syz.3.4885 Not tainted syzkaller #0
[  997.944873][T23276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  997.955051][T23276] Call Trace:
[  997.958358][T23276]  <TASK>
[  997.961400][T23276]  dump_stack_lvl+0x18c/0x250
[  997.966323][T23276]  ? show_regs_print_info+0x20/0x20
[  997.971630][T23276]  ? load_image+0x420/0x420
[  997.976704][T23276]  sysfs_warn_dup+0x8e/0xa0
[  997.981532][T23276]  sysfs_do_create_link_sd+0xc0/0x110
[  997.987376][T23276]  device_add_class_symlinks+0x1cf/0x240
[  997.993060][T23276]  device_add+0x4f9/0xc40
[  997.997416][T23276]  wiphy_register+0x1d99/0x2ac0
[  998.002494][T23276]  ? cfg80211_event_work+0x40/0x40
[  998.007715][T23276]  ? minstrel_ht_alloc+0x88a/0x990
[  998.012982][T23276]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  998.019358][T23276]  ieee80211_register_hw+0x2dd8/0x3b30
[  998.024950][T23276]  ? ieee80211_register_hw+0xed1/0x3b30
[  998.031012][T23276]  ? ieee80211_tasklet_handler+0x20/0x20
[  998.037019][T23276]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  998.043214][T23276]  ? __debug_object_init+0xec/0x450
[  998.048679][T23276]  ? __asan_memset+0x22/0x40
[  998.053462][T23276]  ? __hrtimer_init+0x189/0x270
[  998.058665][T23276]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  998.064503][T23276]  ? mac80211_hwsim_free+0x220/0x220
[  998.070403][T23276]  ? rcu_is_watching+0x15/0xb0
[  998.075708][T23276]  ? kstrndup+0xbd/0x140
[  998.080053][T23276]  hwsim_new_radio_nl+0xdad/0x1a70
[  998.085560][T23276]  ? __nla_validate+0x50/0x50
[  998.090641][T23276]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  998.097379][T23276]  ? __nla_parse+0x40/0x50
[  998.102106][T23276]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  998.108844][T23276]  genl_family_rcv_msg_doit+0x21a/0x310
[  998.114712][T23276]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  998.121201][T23276]  ? bpf_lsm_capable+0x9/0x10
[  998.126146][T23276]  ? security_capable+0x89/0xb0
[  998.131096][T23276]  genl_rcv_msg+0x611/0x7a0
[  998.136413][T23276]  ? genl_bind+0x360/0x360
[  998.140947][T23276]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  998.148208][T23276]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  998.155087][T23276]  ? ref_tracker_free+0x686/0x830
[  998.160135][T23276]  netlink_rcv_skb+0x235/0x4c0
[  998.165449][T23276]  ? genl_bind+0x360/0x360
[  998.170249][T23276]  ? netlink_ack+0x1160/0x1160
[  998.175402][T23276]  ? __lock_acquire+0x7d80/0x7d80
[  998.182251][T23276]  ? down_read+0x1ac/0x2e0
[  998.187259][T23276]  genl_rcv+0x28/0x40
[  998.191992][T23276]  netlink_unicast+0x7b1/0x930
[  998.197530][T23276]  netlink_sendmsg+0x8d0/0xbf0
[  998.202864][T23276]  ? netlink_getsockopt+0x590/0x590
[  998.208288][T23276]  ? apparmor_socket_sendmsg+0x8e/0x330
[  998.214933][T23276]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  998.220486][T23276]  ? security_socket_sendmsg+0x80/0xa0
[  998.226065][T23276]  ? netlink_getsockopt+0x590/0x590
[  998.231284][T23276]  ____sys_sendmsg+0x61b/0x980
[  998.236620][T23276]  ? __asan_memset+0x22/0x40
[  998.241247][T23276]  ? __sys_sendmsg_sock+0x30/0x30
[  998.246473][T23276]  ? __import_iovec+0x5f2/0x850
[  998.251476][T23276]  ? import_iovec+0x73/0xa0
[  998.256014][T23276]  ___sys_sendmsg+0x2a6/0x360
[  998.261054][T23276]  ? __sys_sendmsg+0x2b0/0x2b0
[  998.265838][T23276]  ? trace_call_bpf+0xc3/0x6c0
[  998.270949][T23276]  __se_sys_sendmsg+0x1d0/0x2c0
[  998.275985][T23276]  ? __x64_sys_sendmsg+0x80/0x80
[  998.281302][T23276]  ? lockdep_hardirqs_on+0x98/0x150
[  998.286680][T23276]  do_syscall_64+0x55/0xb0
[  998.291383][T23276]  ? clear_bhb_loop+0x40/0x90
[  998.296175][T23276]  ? clear_bhb_loop+0x40/0x90
[  998.300866][T23276]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  998.307174][T23276] RIP: 0033:0x7f1ef2d9e019
[  998.311796][T23276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  998.332205][T23276] RSP: 002b:00007f1ef3bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  998.341107][T23276] RAX: ffffffffffffffda RBX: 00007f1ef3026090 RCX: 00007f1ef2d9e019
[  998.349264][T23276] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  998.357263][T23276] RBP: 00007f1ef2e3500c R08: 0000000000000000 R09: 0000000000000000
[  998.365420][T23276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  998.373501][T23276] R13: 00007f1ef3026128 R14: 00007f1ef3026090 R15: 00007ffe45df6e38
[  998.381579][T23276]  </TASK>
[  999.037049][T23244] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.052576][T23244] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.072594][T23244] bridge_slave_0: entered allmulticast mode
[  999.080224][T23244] bridge_slave_0: entered promiscuous mode
[  999.181511][T23244] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.188979][T23244] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.201433][ T5776] Bluetooth: hci0: command tx timeout
[  999.209143][T23244] bridge_slave_1: entered allmulticast mode
[  999.241877][T23244] bridge_slave_1: entered promiscuous mode
[  999.306549][T23293] netlink: 'syz.2.4889': attribute type 10 has an invalid length.
[  999.428441][T23293] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.450248][T23293] team0: Port device bond0 added
[  999.536995][T23244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.589935][T23244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.648660][T23244] team0: Port device team_slave_0 added
[  999.712731][T23244] team0: Port device team_slave_1 added
[  999.919364][T23244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  999.975529][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.034603][T23244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.130274][T23321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1000.139910][T23321] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1000.226349][T23321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1000.249291][T23321] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1000.421680][T23244] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.430423][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.458313][T23244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1000.633812][T23244] hsr_slave_0: entered promiscuous mode
[ 1000.672531][T23244] hsr_slave_1: entered promiscuous mode
[ 1000.689553][T23244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1000.713282][T23244] Cannot create hsr debugfs directory
[ 1000.974769][T23334] netlink: 'syz.3.4895': attribute type 1 has an invalid length.
[ 1000.988927][T23334] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.4895'.
[ 1001.270919][ T5776] Bluetooth: hci0: command tx timeout
[ 1001.750008][ T7421] 
[ 1001.752776][ T7421] ======================================================
[ 1001.760072][ T7421] WARNING: possible circular locking dependency detected
[ 1001.767377][ T7421] syzkaller #0 Not tainted
[ 1001.772069][ T7421] ------------------------------------------------------
[ 1001.779367][ T7421] kworker/u4:12/7421 is trying to acquire lock:
[ 1001.786058][ T7421] ffff88802b070d80 (team->team_lock_key#8){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0
[ 1001.796781][ T7421] 
[ 1001.796781][ T7421] but task is already holding lock:
[ 1001.804859][ T7421] ffff88801eef8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[ 1001.815736][ T7421] 
[ 1001.815736][ T7421] which lock already depends on the new lock.
[ 1001.815736][ T7421] 
[ 1001.827022][ T7421] 
[ 1001.827022][ T7421] the existing dependency chain (in reverse order) is:
[ 1001.836136][ T7421] 
[ 1001.836136][ T7421] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[ 1001.844054][ T7421]        __mutex_lock+0x135/0xc80
[ 1001.849605][ T7421]        ieee80211_open+0x144/0x200
[ 1001.855254][ T7421]        __dev_open+0x2cb/0x430
[ 1001.862772][ T7421]        dev_open+0xab/0x190
[ 1001.867647][ T7421]        team_add_slave+0x703/0x28a0
[ 1001.873568][ T7421]        do_setlink+0xcde/0x3f40
[ 1001.878864][ T7421]        rtnl_newlink+0x1848/0x2170
[ 1001.884431][ T7421]        rtnetlink_rcv_msg+0x843/0xf90
[ 1001.891104][ T7421]        netlink_rcv_skb+0x235/0x4c0
[ 1001.897068][ T7421]        netlink_unicast+0x7b1/0x930
[ 1001.903082][ T7421]        netlink_sendmsg+0x8d0/0xbf0
[ 1001.908830][ T7421]        ____sys_sendmsg+0x61b/0x980
[ 1001.914305][ T7421]        ___sys_sendmsg+0x2a6/0x360
[ 1001.919879][ T7421]        __se_sys_sendmsg+0x1d0/0x2c0
[ 1001.925832][ T7421]        do_syscall_64+0x55/0xb0
[ 1001.931691][ T7421]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1001.939382][ T7421] 
[ 1001.939382][ T7421] -> #0 (team->team_lock_key#8){+.+.}-{3:3}:
[ 1001.948611][ T7421]        __lock_acquire+0x37ef/0x7d80
[ 1001.954243][ T7421]        lock_acquire+0x19e/0x420
[ 1001.959791][ T7421]        __mutex_lock+0x135/0xc80
[ 1001.965358][ T7421]        team_del_slave+0x31/0x1b0
[ 1001.970580][ T7421]        team_device_event+0x297/0xa30
[ 1001.976233][ T7421]        notifier_call_chain+0x18f/0x380
[ 1001.982586][ T7421]        unregister_netdevice_many_notify+0x1037/0x1910
[ 1001.989900][ T7421]        unregister_netdevice_queue+0x2e9/0x330
[ 1001.996193][ T7421]        _cfg80211_unregister_wdev+0x16d/0x580
[ 1002.002975][ T7421]        ieee80211_remove_interfaces+0x4b3/0x690
[ 1002.009693][ T7421]        ieee80211_unregister_hw+0x5d/0x2a0
[ 1002.016745][ T7421]        mac80211_hwsim_del_radio+0x289/0x480
[ 1002.023347][ T7421]        hwsim_exit_net+0x58d/0x650
[ 1002.028720][ T7421]        cleanup_net+0x707/0xbb0
[ 1002.034032][ T7421]        process_scheduled_works+0xa60/0x1600
[ 1002.040899][ T7421]        worker_thread+0xa5e/0xfe0
[ 1002.046855][ T7421]        kthread+0x2fa/0x390
[ 1002.051663][ T7421]        ret_from_fork+0x48/0x80
[ 1002.056655][ T7421]        ret_from_fork_asm+0x11/0x20
[ 1002.062630][ T7421] 
[ 1002.062630][ T7421] other info that might help us debug this:
[ 1002.062630][ T7421] 
[ 1002.074108][ T7421]  Possible unsafe locking scenario:
[ 1002.074108][ T7421] 
[ 1002.083051][ T7421]        CPU0                    CPU1
[ 1002.089054][ T7421]        ----                    ----
[ 1002.094545][ T7421]   lock(&rdev->wiphy.mtx);
[ 1002.100115][ T7421]                                lock(team->team_lock_key#8);
[ 1002.109178][ T7421]                                lock(&rdev->wiphy.mtx);
[ 1002.116730][ T7421]   lock(team->team_lock_key#8);
[ 1002.122370][ T7421] 
[ 1002.122370][ T7421]  *** DEADLOCK ***
[ 1002.122370][ T7421] 
[ 1002.131467][ T7421] 5 locks held by kworker/u4:12/7421:
[ 1002.137283][ T7421]  #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1002.148537][ T7421]  #1: ffffc90004e8fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1002.160042][ T7421]  #2: ffffffff8e3c9b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[ 1002.169661][ T7421]  #3: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[ 1002.180572][ T7421]  #4: ffff88801eef8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[ 1002.191895][ T7421] 
[ 1002.191895][ T7421] stack backtrace:
[ 1002.198212][ T7421] CPU: 0 PID: 7421 Comm: kworker/u4:12 Not tainted syzkaller #0
[ 1002.206462][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1002.217043][ T7421] Workqueue: netns cleanup_net
[ 1002.221812][ T7421] Call Trace:
[ 1002.225117][ T7421]  <TASK>
[ 1002.228048][ T7421]  dump_stack_lvl+0x18c/0x250
[ 1002.232844][ T7421]  ? load_image+0x420/0x420
[ 1002.237649][ T7421]  ? show_regs_print_info+0x20/0x20
[ 1002.243070][ T7421]  ? print_circular_bug+0x12b/0x1a0
[ 1002.248438][ T7421]  check_noncircular+0x2fc/0x400
[ 1002.253395][ T7421]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1002.258681][ T7421]  ? lockdep_lock+0xf5/0x230
[ 1002.263303][ T7421]  ? _find_first_zero_bit+0xd6/0x100
[ 1002.268611][ T7421]  __lock_acquire+0x37ef/0x7d80
[ 1002.273506][ T7421]  ? verify_lock_unused+0x140/0x140
[ 1002.278795][ T7421]  ? verify_lock_unused+0x140/0x140
[ 1002.284075][ T7421]  ? __up_read+0x2b8/0x6b0
[ 1002.288486][ T7421]  lock_acquire+0x19e/0x420
[ 1002.293101][ T7421]  ? team_del_slave+0x31/0x1b0
[ 1002.297977][ T7421]  ? __might_sleep+0xe0/0xe0
[ 1002.302714][ T7421]  ? read_lock_is_recursive+0x20/0x20
[ 1002.308546][ T7421]  __mutex_lock+0x135/0xc80
[ 1002.313243][ T7421]  ? team_del_slave+0x31/0x1b0
[ 1002.318307][ T7421]  ? __mutex_lock+0x30d/0xc80
[ 1002.323435][ T7421]  ? team_del_slave+0x31/0x1b0
[ 1002.328304][ T7421]  ? mutex_lock_nested+0x20/0x20
[ 1002.333424][ T7421]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1002.339266][ T7421]  team_del_slave+0x31/0x1b0
[ 1002.343963][ T7421]  team_device_event+0x297/0xa30
[ 1002.349335][ T7421]  notifier_call_chain+0x18f/0x380
[ 1002.354881][ T7421]  unregister_netdevice_many_notify+0x1037/0x1910
[ 1002.361394][ T7421]  ? unregister_netdevice_many+0x20/0x20
[ 1002.367285][ T7421]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1002.373368][ T7421]  ? __lock_acquire+0x7d80/0x7d80
[ 1002.378653][ T7421]  unregister_netdevice_queue+0x2e9/0x330
[ 1002.384719][ T7421]  ? list_netdevice+0x730/0x730
[ 1002.389731][ T7421]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1002.395456][ T7421]  _cfg80211_unregister_wdev+0x16d/0x580
[ 1002.401799][ T7421]  ieee80211_remove_interfaces+0x4b3/0x690
[ 1002.408585][ T7421]  ? ieee80211_do_stop+0x1df0/0x1df0
[ 1002.415538][ T7421]  ? rcu_is_watching+0x15/0xb0
[ 1002.420485][ T7421]  ieee80211_unregister_hw+0x5d/0x2a0
[ 1002.426225][ T7421]  mac80211_hwsim_del_radio+0x289/0x480
[ 1002.431862][ T7421]  ? rhashtable_remove_fast+0xc00/0xc00
[ 1002.437581][ T7421]  hwsim_exit_net+0x58d/0x650
[ 1002.442347][ T7421]  ? hwsim_init_net+0x90/0x90
[ 1002.447016][ T7421]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[ 1002.452947][ T7421]  cleanup_net+0x707/0xbb0
[ 1002.457469][ T7421]  ? ops_free_list+0x3b0/0x3b0
[ 1002.462249][ T7421]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1002.467504][ T7421]  ? process_scheduled_works+0x975/0x1600
[ 1002.473551][ T7421]  ? process_scheduled_works+0x975/0x1600
[ 1002.479550][ T7421]  process_scheduled_works+0xa60/0x1600
[ 1002.485634][ T7421]  ? worker_attach_to_pool+0x370/0x370
[ 1002.491607][ T7421]  ? assign_work+0x3cc/0x5d0
[ 1002.496826][ T7421]  worker_thread+0xa5e/0xfe0
[ 1002.502642][ T7421]  kthread+0x2fa/0x390
[ 1002.506964][ T7421]  ? pr_cont_work+0x550/0x550
[ 1002.511830][ T7421]  ? kthread_blkcg+0xd0/0xd0
[ 1002.517149][ T7421]  ret_from_fork+0x48/0x80
[ 1002.522617][ T7421]  ? kthread_blkcg+0xd0/0xd0
[ 1002.527319][ T7421]  ret_from_fork_asm+0x11/0x20
[ 1002.532116][ T7421]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1002.708709][ T7421] team0: Port device wlan1 removed
[ 1002.994788][ T7421] hsr_slave_0: left promiscuous mode
[ 1003.020980][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1003.041116][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1003.104119][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1003.111849][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1003.141411][ T7421] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[ 1003.149060][ T7421] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[ 1003.214140][ T7421] batadv0: left allmulticast mode
[ 1003.219493][ T7421] batadv0: left promiscuous mode
[ 1003.251021][ T7421] bridge0: port 5(batadv0) entered disabled state
[ 1003.282162][ T7421] hsr0: left promiscuous mode
[ 1003.287527][ T7421] bridge0: port 4(hsr0) entered disabled state
[ 1003.338916][ T7421] bridge0: port 3(dummy0) entered disabled state
[ 1003.350973][ T5776] Bluetooth: hci0: command tx timeout
[ 1003.363735][ T7421] bridge_slave_1: left allmulticast mode
[ 1003.369758][ T7421] bridge_slave_1: left promiscuous mode
[ 1003.411137][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1003.461910][ T7421] bridge_slave_0: left allmulticast mode
[ 1003.468022][ T7421] bridge_slave_0: left promiscuous mode
[ 1003.501049][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1003.571403][ T7421] veth0_macvtap: left promiscuous mode
[ 1003.577344][ T7421] veth1_vlan: left allmulticast mode
[ 1003.605295][ T7421] veth1_vlan: left promiscuous mode
[ 1003.610658][ T7421] veth0_vlan: left promiscuous mode
[ 1003.968385][ T7421] team0 (unregistering): Port device macvlan0 removed
[ 1004.047541][ T7421] team0 (unregistering): Port device team_slave_1 removed
[ 1004.060010][ T7421] team0 (unregistering): Port device team_slave_0 removed
[ 1004.215368][ T7421] team0 (unregistering): Port device bridge0 removed
[ 1004.837476][ T7421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.918546][ T7421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.995500][ T7421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.048715][ T7421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.153876][ T7421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.208429][ T7421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.256630][ T7421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.311038][ T7421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.440651][ T7421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.518689][ T7421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.568168][ T7421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.630917][ T7421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.960945][ T7421] ip6gretap0 (unregistering): left allmulticast mode
[ 1005.968210][ T7421] ip6gretap0 (unregistering): left promiscuous mode
[ 1005.975258][ T7421] : port 1(ip6gretap0) entered disabled state
[ 1007.171364][ T7421] hsr_slave_0: left promiscuous mode
[ 1007.177689][ T7421] hsr_slave_1: left promiscuous mode
[ 1007.185462][ T7421] bridge_slave_1: left allmulticast mode
[ 1007.191472][ T7421] bridge_slave_1: left promiscuous mode
[ 1007.197572][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.206451][ T7421] bridge_slave_0: left allmulticast mode
[ 1007.213866][ T7421] bridge_slave_0: left promiscuous mode
[ 1007.219605][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.231188][ T7421] hsr_slave_0: left promiscuous mode
[ 1007.237398][ T7421] hsr_slave_1: left promiscuous mode
[ 1007.245019][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1007.252493][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.260060][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1007.267811][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.276301][ T7421] bridge_slave_1: left allmulticast mode
[ 1007.282331][ T7421] bridge_slave_1: left promiscuous mode
[ 1007.288161][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.296641][ T7421] bridge_slave_0: left allmulticast mode
[ 1007.302441][ T7421] bridge_slave_0: left promiscuous mode
[ 1007.308286][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.318907][ T7421] bridge_slave_1: left allmulticast mode
[ 1007.324686][ T7421] bridge_slave_1: left promiscuous mode
[ 1007.330619][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.344826][ T7421] bridge_slave_0: left allmulticast mode
[ 1007.350682][ T7421] bridge_slave_0: left promiscuous mode
[ 1007.358092][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.369782][ T7421] veth1_macvtap: left promiscuous mode
[ 1007.375898][ T7421] veth0_macvtap: left promiscuous mode
[ 1007.381792][ T7421] veth1_vlan: left promiscuous mode
[ 1007.387146][ T7421] veth0_vlan: left promiscuous mode
[ 1007.393495][ T7421] veth1_macvtap: left promiscuous mode
[ 1007.399519][ T7421] veth0_macvtap: left promiscuous mode
[ 1007.406032][ T7421] veth1_vlan: left promiscuous mode
[ 1007.411402][ T7421] veth0_vlan: left promiscuous mode
[ 1007.417455][ T7421] veth1_macvtap: left promiscuous mode
[ 1007.423654][ T7421] veth0_macvtap: left promiscuous mode
[ 1007.709542][ T7421] team0 (unregistering): Port device team_slave_1 removed
[ 1007.743198][ T7421] team0 (unregistering): Port device team_slave_0 removed
[ 1007.773303][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1007.802942][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1007.879862][ T7421] bond0 (unregistering): Released all slaves
[ 1008.020249][ T7421] team0 (unregistering): Port device team_slave_1 removed
[ 1008.053864][ T7421] team0 (unregistering): Port device team_slave_0 removed
[ 1008.087240][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.117010][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.169388][ T7421] team0 (unregistering): Port device bond0 removed
[ 1008.211745][ T7421] bond0 (unregistering): Released all slaves
[ 1009.964976][ T7421] hsr_slave_0: left promiscuous mode
[ 1009.971732][ T7421] hsr_slave_1: left promiscuous mode
[ 1009.977835][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1009.988107][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1009.996785][ T7421] bridge_slave_1: left allmulticast mode
[ 1010.002996][ T7421] bridge_slave_1: left promiscuous mode
[ 1010.009652][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.020858][ T7421] bridge_slave_0: left allmulticast mode
[ 1010.026737][ T7421] bridge_slave_0: left promiscuous mode
[ 1010.033784][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.172572][ T7421] team0 (unregistering): Port device team_slave_1 removed
[ 1010.213499][ T7421] team0 (unregistering): Port device team_slave_0 removed
[ 1010.227503][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1010.249041][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1010.346638][ T7421] bond0 (unregistering): Released all slaves