last executing test programs:

2.944379328s ago: executing program 4 (id=4737):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r1, &(0x7f00000002c0)="85dd0313c82e97be744f995fd9c0b06adf6741067c152eed7eb3f070fd233d4e9ee1b726c284fd8e3a2884413ec1521c974685a24cf7b9875ae0568fcd556fad0f0ada62c15a79e28a84590973ff06888c3dbdd7d12572c9c7237b2bd960", &(0x7f0000000880)=""/254}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x3a, 0x3, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="803c5721118cd8eedfce439cc1e7549955eba42f2e31970a0363ff78260f764d244aa00a89262f010823c18d4ff2c5bc256c77af850818e17a621df5afc8082fffd05350c85b0f1bb89692a8eb6d0eae136b19d1dfca2062185149468a3227a387987634a88150d1f98f139a54b79ac74e3167b9", 0x74}], 0x1}, 0x40010)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x2, 0x0, 0x8c, 0x0, 0x4d31, 0x40248, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x20, 0x2, 0xfffffffe, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

2.682861395s ago: executing program 1 (id=4741):
r0 = socket$kcm(0x2, 0x200000000000006, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
close(0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="b6", 0x18}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4008005)

2.024068226s ago: executing program 4 (id=4750):
r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xc)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.975479408s ago: executing program 2 (id=4751):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x40000)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa500000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}, {0x3, 0x4, 0x9}, {0x2c, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x2}]})
socket$kcm(0x10, 0x2, 0x10)
socketpair(0x25, 0x1, 0x401, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080))
sendmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000)

1.821275983s ago: executing program 4 (id=4753):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400f7ffb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0)

1.752553875s ago: executing program 3 (id=4754):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xc, 0x8400, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0)

1.731545996s ago: executing program 1 (id=4755):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

1.579509181s ago: executing program 4 (id=4756):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], 0x0, 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)}, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000}, 0x6000, 0xc8, 0x0, 0x5, 0x0, 0x0, 0xbfff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xffc0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x53)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)

1.559531902s ago: executing program 1 (id=4757):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001900)=0x1)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x25, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e6"], 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
unlink(&(0x7f0000000140)='./cgroup\x00')
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r5, r4})
setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x22, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @const]}}, &(0x7f0000000580)=""/211, 0x3e, 0xd3, 0x1}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.534638622s ago: executing program 3 (id=4758):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1, r0}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000100000000000000000180100"], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x90)
sendmsg$kcm(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000040)
close(r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80494, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000001240)}, 0x100600, 0xfffffffffffffffd, 0x5, 0x7, 0x4, 0x5, 0x8, 0x0, 0x82000008, 0x0, 0x7}, 0x0, 0x11, 0xffffffffffffffff, 0x2)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)

1.401829687s ago: executing program 2 (id=4759):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720aa3fe00000000850000000a000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f587e05000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc9271aa8b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d1b4b8345f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d5100000000b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb82e4541f92cb59b197a600331887e92dbcbad7b6b9af3c6f2d42ab9e591f57cc93d629b634518686492e0378547e1a33df35cbc133308dc1a87371bba153f03b8f177560732000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.28037848s ago: executing program 3 (id=4761):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/188, 0xbc}], 0x1}, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r3 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000280)="5f9482", 0x3}], 0x1}, 0x50890)

1.27987759s ago: executing program 2 (id=4762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x2}, 0x0, 0x4, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r6)
write$cgroup_devices(r6, 0x0, 0xfffffeff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x10, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x70000000}, @ldst={0x1, 0x0, 0x0, 0x8, 0xb, 0x100, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x18, &(0x7f00000002c0)=""/24, 0x41000, 0x7, '\x00', 0x0, @fallback=0x54, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=[{0x2, 0x5, 0x6, 0x1}, {0x0, 0x5, 0x8, 0xb}, {0x2, 0x3, 0x2, 0x6}, {0x2, 0x3, 0x4, 0x6}], 0x10, 0xb6}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r7, 0x4, r0}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68a", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

1.191260623s ago: executing program 3 (id=4764):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f0000000480)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000600400095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0)
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000002)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0)

1.171917083s ago: executing program 2 (id=4765):
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
close(r0)
r2 = socket$kcm(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000009f183d93baf42062a712303f3980ee94d6890747812cc29cf8f301b1a884ad4445f1deb94b9bfabf3b635773b00ba65ec3d3286abed900c29ed41fc451511901f44e02e8ac7f7119b64ace35c7dd2d274672b1c573364f0db1f56fd4121cd6b94f0084c0dc2700008f544139f824f7ed00a4b95c740fc8d6cbbbbc516755dfe447dea728bc75d8de96ae43f69bbbad1cbbefd9c8f85366292ae32698708ef84b1a9ade9f907dfaac23b4c03aa73045ad5edde7cd33cdc737ebf80ad3163e3f8c4e42b30428946b8026d9d58b45aea7cf"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
perf_event_open(&(0x7f0000001540)={0x3, 0x80, 0xf7, 0x2, 0x2, 0x7, 0x0, 0xe2, 0x12022, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x5d, 0x4}, 0x100, 0x0, 0x2, 0x7, 0x3, 0x8, 0xfffd, 0x0, 0x5, 0x0, 0x29}, 0x0, 0x6, r3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0xa, 0x2, 0x0)
recvmsg$kcm(r6, &(0x7f0000001340)={&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001300)}, 0x2120)
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r2, 0x1, 0x19, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r0})
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000002640)=""/4104, 0x78b}, {&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000000340)=""/226, 0xdb}, {&(0x7f0000001340)=""/83, 0x53}], 0x4, &(0x7f0000001400)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2)
close(r1)

964.33983ms ago: executing program 3 (id=4766):
r0 = socket$kcm(0x2, 0x200000000000006, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
close(0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="b6", 0x18}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4008005)

845.540283ms ago: executing program 0 (id=4767):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)

705.262908ms ago: executing program 0 (id=4768):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xc, 0x8400, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0)

630.81436ms ago: executing program 1 (id=4769):
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x2000000000000235, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40000000, 0x10005}, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000040000", @ANYRESHEX], 0x50)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00')
r1 = socket$kcm(0x10, 0x400000002, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x4c, 0x1, 0x0, 0x7, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4, 0x5}, 0x100a, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12)
ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000000)={'lo\x00', @broadcast})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="63202a3a7a90486c41c1bde22b8fd4112a"], 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5})
r7 = socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666dc82078ccebcb9a4f187f7a4e98f09cdc2649fb7b2d967ef71b990a1ce70fd05a5611db2de716d383b692b01b49ad4973bf97dad11bfc9b50664d04fae788cf206beaed648c7ca7638616e93bf0b03a7f8afe082a0151b8118d58bb4312f3713804ad8a22346b3f3fa6cb6d2b8f19f4629646d722e15a8c850231bbecdeed4abb1b77e3307a8ea26a6a05561c3bae51ab28d31f2ddd85e37d0d9bece8437c8519971", 0xf6}], 0x1}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
close(r7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

630.424731ms ago: executing program 4 (id=4770):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a5ded7e4f9f680e865698", 0x14}], 0x1}, 0x20000800)
recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x10102)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')

606.280561ms ago: executing program 4 (id=4771):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc044)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00410000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)
recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x23, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2b, 0x4, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000200)='./cgroup\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x88)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x4)
setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4)

573.678212ms ago: executing program 0 (id=4772):
socket$kcm(0x2, 0x200000000000006, 0x0)
r0 = socket$kcm(0x2, 0x7, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x100005d31, 0x22080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x202000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
socket$kcm(0x2, 0x3, 0x84)
setsockopt$sock_attach_bpf(r1, 0x0, 0x7, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, 0x0, 0x4800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1838000000000000000000000800000018100000", @ANYRES32, @ANYBLOB="00040000000000009500000000710000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x22)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xe, 0xa}, 0x10003a, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440041, 0x0)
r5 = socket$kcm(0xa, 0x7, 0x0)
close(0x3)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="b6", 0x1}, {&(0x7f0000000500)="18091d31e945cb36e83f2b32420dc528730167351e8850996bc91e68a1243fb2bfb9295474d30252a614b6e337f8ec73116a3967c9185f706f477051cf7f09273685917fde34868c5a0c577644a21314c7eb04526a18724a99b26aee2afca50f4d3cde439b0fbfeebf516a00931beaef36222685bf8e2dafd50bedbda7936feb7ea799e49c401748006b892a90060d1574ec68469d1f07b8af5d515d95", 0x9d}], 0x2, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg(r5, &(0x7f0000002380)={0x0, 0xfffffffffffffdff, &(0x7f0000000140), 0x1}, 0x0)

292.478771ms ago: executing program 0 (id=4773):
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc601000020040000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

264.402972ms ago: executing program 2 (id=4774):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013300000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

241.422712ms ago: executing program 1 (id=4775):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x2}, 0x0, 0x4, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r6)
write$cgroup_devices(r6, 0x0, 0xfffffeff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x10, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x70000000}, @ldst={0x1, 0x0, 0x0, 0x8, 0xb, 0x100, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x18, &(0x7f00000002c0)=""/24, 0x41000, 0x7, '\x00', 0x0, @fallback=0x54, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=[{0x2, 0x5, 0x6, 0x1}, {0x0, 0x5, 0x8, 0xb}, {0x2, 0x3, 0x2, 0x6}, {0x2, 0x3, 0x4, 0x6}], 0x10, 0xb6}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r7, 0x4, r0}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68a", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

189.761085ms ago: executing program 0 (id=4776):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)
write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000011008188042f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x20}], 0x1}, 0x4044)
write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000600)="b9ff033168c3268cb89e14f00800b86efafaf697eead55841c6d5a815774d306", 0x0, 0xc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b40)=0xffffffffffffffff, 0x4)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000c00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000321b", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="01000000030000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x16, 0x1e, &(0x7f0000001a00)=ANY=[@ANYBLOB="18400000040000000000000082af000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001b00)='syzkaller\x00', 0xe61, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x9, r6, 0x8, &(0x7f0000001b80)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001d40)=[r7, 0xffffffffffffffff, r8, r9], &(0x7f0000001d80)=[{0x3, 0x3, 0x6}, {0x0, 0x2, 0x5, 0x9}, {0x3, 0x3, 0x5, 0x6}, {0x3, 0x5, 0x7, 0xa}], 0x10, 0x8}, 0x94)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r12 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r12, &(0x7f00000019c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000001880)=[{&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000001780)=""/254, 0xfe}], 0x5, &(0x7f0000001900)=""/183, 0xb7}, 0x1)
sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

135.012926ms ago: executing program 2 (id=4777):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x200408cc}, 0x4000001)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f00000004c0)}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0xf0ff1f00000000)
r4 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3ff, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x28}, 0x94)
ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d)
write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x58, &(0x7f0000000600)}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000300)={r4})
setsockopt$sock_attach_bpf(r4, 0x84, 0x78, &(0x7f0000000040), 0x4)

134.518496ms ago: executing program 1 (id=4778):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)

104.658857ms ago: executing program 3 (id=4779):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], 0x0, 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)}, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000}, 0x6000, 0xc8, 0x0, 0x5, 0x0, 0x0, 0xbfff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xffc0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x53)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)

0s ago: executing program 0 (id=4780):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000280)="5f9482", 0x3}], 0x1, 0x0, 0x0, 0x97}, 0x50890)

kernel console output (not intermixed with test programs):

me changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  442.888299][T14369] netlink: 279 bytes leftover after parsing attributes in process `syz.3.3334'.
[  442.983206][T14373] FAULT_INJECTION: forcing a failure.
[  442.983206][T14373] name failslab, interval 1, probability 0, space 0, times 0
[  443.045676][T14373] CPU: 0 PID: 14373 Comm: syz.0.3337 Not tainted syzkaller #0
[  443.053222][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  443.063314][T14373] Call Trace:
[  443.066635][T14373]  <TASK>
[  443.069595][T14373]  dump_stack_lvl+0x188/0x250
[  443.074449][T14373]  ? show_regs_print_info+0x20/0x20
[  443.079704][T14373]  ? load_image+0x400/0x400
[  443.084265][T14373]  ? __might_sleep+0xf0/0xf0
[  443.088911][T14373]  ? __lock_acquire+0x7d10/0x7d10
[  443.093999][T14373]  should_fail+0x38c/0x4c0
[  443.098484][T14373]  should_failslab+0x5/0x20
[  443.103028][T14373]  slab_pre_alloc_hook+0x51/0xc0
[  443.108031][T14373]  __kmalloc+0x6b/0x330
[  443.112238][T14373]  ? ieee80211_key_alloc+0x52/0x2750
[  443.117576][T14373]  ieee80211_key_alloc+0x52/0x2750
[  443.122748][T14373]  ieee80211_add_key+0x2d9/0xaf0
[  443.127757][T14373]  rdev_add_key+0x125/0x2b0
[  443.132361][T14373]  cfg80211_set_encryption+0x5f0/0x1390
[  443.138003][T14373]  __cfg80211_wext_siwencodeext+0x5c2/0x7f0
[  443.143963][T14373]  ? __might_fault+0xb7/0x110
[  443.148712][T14373]  ? __cfg80211_wext_giwauth+0x10/0x10
[  443.154237][T14373]  ? __might_fault+0xb3/0x110
[  443.158980][T14373]  ? _copy_from_user+0x111/0x170
[  443.163976][T14373]  ioctl_standard_iw_point+0x7d4/0xcf0
[  443.169519][T14373]  ? __cfg80211_wext_giwauth+0x10/0x10
[  443.175058][T14373]  ? iw_handler_get_iwstats+0x240/0x240
[  443.180668][T14373]  ? mutex_lock_io_nested+0x60/0x60
[  443.185923][T14373]  ? apparmor_capable+0x12c/0x190
[  443.190990][T14373]  ? full_name_hash+0x8e/0xe0
[  443.195707][T14373]  ? __cfg80211_wext_giwauth+0x10/0x10
[  443.201221][T14373]  ioctl_standard_call+0xb3/0x2b0
[  443.206295][T14373]  ? __cfg80211_wext_giwauth+0x10/0x10
[  443.211795][T14373]  wext_ioctl_dispatch+0x3da/0x470
[  443.216940][T14373]  ? wext_ioctl_dispatch+0x470/0x470
[  443.222263][T14373]  ? iw_handler_get_private+0x1e0/0x1e0
[  443.227858][T14373]  wext_handle_ioctl+0x113/0x1d0
[  443.232842][T14373]  ? call_commit_handler+0xf0/0xf0
[  443.238045][T14373]  sock_ioctl+0x143/0x710
[  443.242424][T14373]  ? sock_poll+0x410/0x410
[  443.246908][T14373]  ? bpf_lsm_file_ioctl+0x5/0x10
[  443.251899][T14373]  ? security_file_ioctl+0x7c/0xa0
[  443.257042][T14373]  ? sock_poll+0x410/0x410
[  443.261494][T14373]  __se_sys_ioctl+0xfa/0x170
[  443.266140][T14373]  do_syscall_64+0x4c/0xa0
[  443.270585][T14373]  ? clear_bhb_loop+0x30/0x80
[  443.275354][T14373]  ? clear_bhb_loop+0x30/0x80
[  443.280083][T14373]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  443.286013][T14373] RIP: 0033:0x7fa3e86ede59
[  443.290600][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.310235][T14373] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  443.318750][T14373] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  443.326767][T14373] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000005
[  443.334776][T14373] RBP: 00007fa3e6947090 R08: 0000000000000000 R09: 0000000000000000
[  443.342782][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.350785][T14373] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  443.358836][T14373]  </TASK>
[  444.110430][T14402] netlink: 'syz.2.3347': attribute type 1 has an invalid length.
[  444.122945][T14402] netlink: 'syz.2.3347': attribute type 4 has an invalid length.
[  444.163385][T14402] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3347'.
[  444.685606][T14416] netlink: 'syz.2.3350': attribute type 41 has an invalid length.
[  444.735474][T14416] netlink: 'syz.2.3350': attribute type 4 has an invalid length.
[  444.752847][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3350'.
[  444.823392][T14416] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  444.899022][T14418] netlink: 'syz.3.3351': attribute type 27 has an invalid length.
[  445.303445][T14448] device veth0_vlan left promiscuous mode
[  445.352558][T14448] device veth0_vlan entered promiscuous mode
[  445.361769][T14448] team0: Device veth0_vlan failed to register rx_handler
[  445.415495][T14451] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3360'.
[  445.431790][T14454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.439085][T14454] IPv6: NLM_F_CREATE should be set when creating new route
[  445.446387][T14454] IPv6: NLM_F_CREATE should be set when creating new route
[  445.453731][T14454] IPv6: NLM_F_CREATE should be set when creating new route
[  445.801933][T14458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3363'.
[  445.878962][T14461] netlink: 279 bytes leftover after parsing attributes in process `syz.2.3363'.
[  446.267696][T14467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3365'.
[  446.383362][T14467] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  446.958736][T14493] validate_nla: 4 callbacks suppressed
[  446.958754][T14493] netlink: 'syz.0.3373': attribute type 29 has an invalid length.
[  447.000798][T14490] netlink: 'syz.3.3372': attribute type 27 has an invalid length.
[  447.049699][T14493] netlink: 'syz.0.3373': attribute type 29 has an invalid length.
[  447.078659][T14494] netlink: 'syz.0.3373': attribute type 29 has an invalid length.
[  447.100097][T14496] netlink: 'syz.0.3373': attribute type 29 has an invalid length.
[  447.456897][T14499] netlink: 'syz.0.3374': attribute type 12 has an invalid length.
[  447.489430][T14499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3374'.
[  451.195833][T14539] netlink: 'syz.4.3390': attribute type 12 has an invalid length.
[  451.212176][T14539] __nla_validate_parse: 3 callbacks suppressed
[  451.212192][T14539] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3390'.
[  451.346716][T14539] netlink: 279 bytes leftover after parsing attributes in process `syz.4.3390'.
[  451.745867][T14552] netlink: 'syz.4.3393': attribute type 10 has an invalid length.
[  451.916128][T14548] netlink: 'syz.0.3392': attribute type 10 has an invalid length.
[  451.925897][T14548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3392'.
[  451.942903][T14548] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  451.971819][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  452.234135][T14569] netlink: 'syz.0.3399': attribute type 9 has an invalid length.
[  452.249860][T14569] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3399'.
[  452.424718][T14571] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3400'.
[  452.565757][T14571] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  452.944294][T14582] netlink: 'syz.0.3403': attribute type 12 has an invalid length.
[  452.987844][T14582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'.
[  453.009637][T14585] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3403'.
[  453.679366][T14598] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3411'.
[  453.909597][T14604] netlink: 'syz.0.3412': attribute type 10 has an invalid length.
[  453.984645][T14604] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.3412'.
[  454.013209][T14606] netlink: 'syz.4.3413': attribute type 2 has an invalid length.
[  454.017951][T14604] openvswitch: netlink: Flow key attr not present in new flow.
[  454.047243][T14606] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3413'.
[  454.361966][T14622] netlink: 'syz.1.3419': attribute type 12 has an invalid length.
[  454.529800][T14625] netlink: 'syz.4.3420': attribute type 21 has an invalid length.
[  454.557420][T14625] IPv6: NLM_F_CREATE should be specified when creating new route
[  454.570131][T14625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  454.577441][T14625] IPv6: NLM_F_CREATE should be set when creating new route
[  454.584839][T14625] IPv6: NLM_F_CREATE should be set when creating new route
[  454.592158][T14625] IPv6: NLM_F_CREATE should be set when creating new route
[  455.246663][T14634] delete_channel: no stack
[  455.260362][T14634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.346664][T14637] delete_channel: no stack
[  455.369176][T14637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.376485][T14637] IPv6: NLM_F_CREATE should be set when creating new route
[  456.484460][T14655] netlink: 'syz.4.3431': attribute type 12 has an invalid length.
[  456.541339][T14655] __nla_validate_parse: 2 callbacks suppressed
[  456.541369][T14655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3431'.
[  456.560850][T14657] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3432'.
[  456.586603][T14658] netlink: 279 bytes leftover after parsing attributes in process `syz.4.3431'.
[  457.090313][T14677] delete_channel: no stack
[  457.155260][T14679] netlink: 279 bytes leftover after parsing attributes in process `syz.4.3441'.
[  457.281364][T14683] netlink: 'syz.4.3443': attribute type 10 has an invalid length.
[  457.532255][T14688] netlink: 63747 bytes leftover after parsing attributes in process `syz.4.3444'.
[  457.736373][T14695] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  458.016707][T14705] delete_channel: no stack
[  458.072403][T14709] netlink: 'syz.2.3450': attribute type 2 has an invalid length.
[  458.151033][T14709] netlink: 'syz.2.3450': attribute type 1 has an invalid length.
[  458.164067][T14709] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3450'.
[  458.393531][T14717] netlink: 'syz.0.3456': attribute type 10 has an invalid length.
[  458.733997][T14730] netlink: 'syz.2.3461': attribute type 9 has an invalid length.
[  458.760374][T14730] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3461'.
[  459.019771][T14731] netlink: 'syz.2.3461': attribute type 9 has an invalid length.
[  459.036543][T14731] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3461'.
[  459.125788][T14740] device syzkaller0 entered promiscuous mode
[  459.154587][T14744] delete_channel: no stack
[  459.546713][T14754] netlink: 'syz.2.3469': attribute type 27 has an invalid length.
[  459.692741][T14747] device syzkaller0 entered promiscuous mode
[  459.800776][T14760] netlink: 'syz.1.3471': attribute type 11 has an invalid length.
[  459.837444][T14760] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.3471'.
[  460.459923][T14774] netlink: 'syz.0.3476': attribute type 12 has an invalid length.
[  460.476451][T14774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3476'.
[  460.701480][T14781] delete_channel: no stack
[  461.159464][T14789] netlink: 'syz.0.3482': attribute type 27 has an invalid length.
[  461.619078][T14789] bond0: (slave bond_slave_0): Releasing backup interface
[  461.746408][ T1643] wlan1: Trigger new scan to find an IBSS to join
[  461.909077][T14806] netlink: 'syz.1.3488': attribute type 12 has an invalid length.
[  461.931829][T14806] __nla_validate_parse: 1 callbacks suppressed
[  461.931844][T14806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3488'.
[  461.958033][T14805] delete_channel: no stack
[  462.011636][T14806] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3488'.
[  463.129275][T14841] delete_channel: no stack
[  463.564729][T14859] netlink: 'syz.0.3505': attribute type 12 has an invalid length.
[  463.672539][T14859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3505'.
[  463.713947][T14862] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3505'.
[  464.052595][T14871] netlink: 'syz.4.3509': attribute type 9 has an invalid length.
[  464.094872][T14871] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3509'.
[  464.214966][T14876] netlink: 'syz.0.3511': attribute type 3 has an invalid length.
[  464.277396][T14876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3511'.
[  464.396160][T14882] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3511'.
[  464.472886][T14863] delete_channel: no stack
[  464.671573][T14875] netlink: 'syz.4.3509': attribute type 9 has an invalid length.
[  464.679820][  T144] wlan1: Trigger new scan to find an IBSS to join
[  464.711927][T14895] delete_channel: no stack
[  464.740275][T14897] netlink: 'syz.0.3516': attribute type 10 has an invalid length.
[  464.760373][T14897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3516'.
[  464.790639][T14875] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3509'.
[  465.592140][T14921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3527'.
[  465.613111][  T144] wlan1: Creating new IBSS network, BSSID ba:f2:09:13:d9:42
[  465.630179][T14922] netlink: 'syz.2.3525': attribute type 10 has an invalid length.
[  465.672774][T14922] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  465.722409][T14922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  465.913833][T14931] netlink: 'syz.1.3530': attribute type 3 has an invalid length.
[  465.953873][T14931] netlink: 'syz.1.3530': attribute type 3 has an invalid length.
[  466.171320][T14928] netlink: 'syz.0.3529': attribute type 10 has an invalid length.
[  466.511489][T14928] team0 (unregistering): Port device team_slave_0 removed
[  466.744141][T14928] team0 (unregistering): Port device team_slave_1 removed
[  467.122022][T14952] netlink: 'syz.3.3534': attribute type 9 has an invalid length.
[  467.206555][T14952] __nla_validate_parse: 4 callbacks suppressed
[  467.206571][T14952] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3534'.
[  467.272713][T14949] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3534'.
[  467.310191][T14953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3536'.
[  467.462021][T14957] delete_channel: no stack
[  468.692275][T14998] delete_channel: no stack
[  468.890585][T15000] validate_nla: 2 callbacks suppressed
[  468.890670][T15000] netlink: 'syz.3.3553': attribute type 9 has an invalid length.
[  468.906959][T15000] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3553'.
[  469.500740][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'.
[  469.541387][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'.
[  469.655803][T15009] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3555'.
[  469.739035][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'.
[  469.793765][T15009] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3555'.
[  469.883517][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'.
[  469.888987][T15008] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  469.987009][T15012] netlink: 'syz.1.3557': attribute type 12 has an invalid length.
[  470.157168][T15024] netlink: 'syz.3.3560': attribute type 27 has an invalid length.
[  470.323381][T15033] netlink: 'syz.1.3574': attribute type 27 has an invalid length.
[  470.750234][T15044] delete_channel: no stack
[  471.546818][T15052] netlink: 'syz.2.3571': attribute type 12 has an invalid length.
[  471.811576][T15063] netlink: 'syz.3.3576': attribute type 4 has an invalid length.
[  471.830022][T15065] bridge: RTM_NEWNEIGH with invalid state 0x4
[  471.845878][T15061] netlink: 'syz.2.3577': attribute type 27 has an invalid length.
[  471.938372][T15067] netlink: 'syz.3.3578': attribute type 10 has an invalid length.
[  471.974555][T15067] device geneve0 entered promiscuous mode
[  472.051137][T15067] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  472.399325][T15083] __nla_validate_parse: 7 callbacks suppressed
[  472.399344][T15083] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3584'.
[  472.424819][T15081] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3582'.
[  472.447190][T15081] netlink: zone id is out of range
[  472.458016][T15081] netlink: zone id is out of range
[  472.473335][T15081] netlink: zone id is out of range
[  472.483922][T15081] netlink: zone id is out of range
[  472.506015][T15081] netlink: zone id is out of range
[  472.519131][T15081] netlink: zone id is out of range
[  472.546788][T15081] netlink: zone id is out of range
[  472.575443][T15081] netlink: zone id is out of range
[  472.588550][T15081] netlink: zone id is out of range
[  472.606789][T15081] netlink: zone id is out of range
[  473.178090][T15094] netlink: 'syz.0.3590': attribute type 27 has an invalid length.
[  473.419780][T15108] netlink: 'syz.1.3592': attribute type 9 has an invalid length.
[  473.440915][T15108] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3592'.
[  473.614374][T15114] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3595'.
[  473.998701][T15121] netlink: 'syz.3.3598': attribute type 10 has an invalid length.
[  474.044028][T15124] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3598'.
[  474.166220][T15131] netlink: 'syz.2.3601': attribute type 1 has an invalid length.
[  474.206492][T15131] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3601'.
[  474.661598][T15121] team0: Device wg1 is of different type
[  474.692868][T15118] delete_channel: no stack
[  474.724105][T15143] netlink: 'syz.2.3605': attribute type 10 has an invalid length.
[  474.737305][T15143] device veth0_vlan left promiscuous mode
[  474.749898][T15143] device veth0_vlan entered promiscuous mode
[  474.800022][T15143] team0: Device veth0_vlan failed to register rx_handler
[  474.844047][T15148] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3607'.
[  474.963068][T15146] netlink: 'syz.0.3606': attribute type 9 has an invalid length.
[  474.981171][T15146] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3606'.
[  475.248384][T15154] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3608'.
[  475.384267][T15159] netlink: 'syz.2.3611': attribute type 9 has an invalid length.
[  475.426914][T15159] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3611'.
[  476.351607][T15197] netlink: 'syz.0.3626': attribute type 10 has an invalid length.
[  476.752055][T15205] netlink: 'syz.4.3630': attribute type 11 has an invalid length.
[  476.777905][T15205] netlink: 'syz.4.3630': attribute type 1 has an invalid length.
[  476.811084][T15205] netlink: 'syz.4.3630': attribute type 1 has an invalid length.
[  476.821791][T15205] netlink: 'syz.4.3630': attribute type 2 has an invalid length.
[  477.007634][T15218] FAULT_INJECTION: forcing a failure.
[  477.007634][T15218] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  477.101873][T15218] CPU: 0 PID: 15218 Comm: syz.4.3635 Not tainted syzkaller #0
[  477.109408][T15218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.119503][T15218] Call Trace:
[  477.122816][T15218]  <TASK>
[  477.125770][T15218]  dump_stack_lvl+0x188/0x250
[  477.130495][T15218]  ? show_regs_print_info+0x20/0x20
[  477.135736][T15218]  ? load_image+0x400/0x400
[  477.140322][T15218]  ? __lock_acquire+0x7d10/0x7d10
[  477.145422][T15218]  ? obj_cgroup_charge_pages+0xc5/0x1a0
[  477.151060][T15218]  should_fail+0x38c/0x4c0
[  477.155554][T15218]  prepare_alloc_pages+0x1e4/0x5f0
[  477.160740][T15218]  __alloc_pages+0x11b/0x480
[  477.165394][T15218]  ? zone_statistics+0x170/0x170
[  477.170430][T15218]  bpf_ringbuf_alloc+0x25d/0x510
[  477.175431][T15218]  ringbuf_map_alloc+0x1d1/0x300
[  477.180598][T15218]  map_create+0x485/0x2350
[  477.185085][T15218]  __sys_bpf+0x30a/0x6f0
[  477.189394][T15218]  ? bpf_link_show_fdinfo+0x380/0x380
[  477.194854][T15218]  ? vtime_user_exit+0x2c8/0x3e0
[  477.199860][T15218]  __x64_sys_bpf+0x78/0x90
[  477.204346][T15218]  do_syscall_64+0x4c/0xa0
[  477.208849][T15218]  ? clear_bhb_loop+0x30/0x80
[  477.213567][T15218]  ? clear_bhb_loop+0x30/0x80
[  477.218308][T15218]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  477.224261][T15218] RIP: 0033:0x7f086a753e59
[  477.228727][T15218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.248379][T15218] RSP: 002b:00007f08689ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  477.256831][T15218] RAX: ffffffffffffffda RBX: 00007f086a9ccfa0 RCX: 00007f086a753e59
[  477.264832][T15218] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  477.272841][T15218] RBP: 00007f08689ad090 R08: 0000000000000000 R09: 0000000000000000
[  477.280849][T15218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  477.288865][T15218] R13: 00007f086a9cd038 R14: 00007f086a9ccfa0 R15: 00007ffc236c8928
[  477.296936][T15218]  </TASK>
[  477.456065][T15224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.126652][T15250] __nla_validate_parse: 5 callbacks suppressed
[  478.126684][T15250] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3644'.
[  479.034019][T15264] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3648'.
[  481.187719][T15264] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  481.195770][T15264] CPU: 0 PID: 15264 Comm: syz.2.3648 Not tainted syzkaller #0
[  481.203261][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  481.213355][T15264] Call Trace:
[  481.216661][T15264]  <TASK>
[  481.219617][T15264]  dump_stack_lvl+0x188/0x250
[  481.224338][T15264]  ? show_regs_print_info+0x20/0x20
[  481.229571][T15264]  ? load_image+0x400/0x400
[  481.234122][T15264]  sysfs_warn_dup+0x8a/0xa0
[  481.238663][T15264]  sysfs_do_create_link_sd+0xc0/0x110
[  481.244078][T15264]  device_add+0x7f6/0x1000
[  481.248573][T15264]  wiphy_register+0x1e81/0x2c30
[  481.253499][T15264]  ? cfg80211_event_work+0x40/0x40
[  481.258657][T15264]  ? minstrel_ht_alloc+0x808/0x980
[  481.263818][T15264]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  481.270026][T15264]  ieee80211_register_hw+0x2aa1/0x3af0
[  481.275554][T15264]  ? ieee80211_tasklet_handler+0x20/0x20
[  481.281236][T15264]  ? rcu_is_watching+0x11/0xa0
[  481.286036][T15264]  ? memset+0x1e/0x40
[  481.290043][T15264]  ? hrtimer_init+0x10c/0x220
[  481.294777][T15264]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  481.300551][T15264]  hwsim_new_radio_nl+0xa6f/0xc40
[  481.305639][T15264]  genl_rcv_msg+0xcea/0xf90
[  481.310183][T15264]  ? lock_chain_count+0x20/0x20
[  481.315123][T15264]  ? genl_bind+0x380/0x380
[  481.319581][T15264]  ? verify_lock_unused+0x140/0x140
[  481.324823][T15264]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  481.331537][T15264]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  481.338100][T15264]  netlink_rcv_skb+0x1f5/0x440
[  481.342907][T15264]  ? genl_bind+0x380/0x380
[  481.347347][T15264]  ? netlink_ack+0xb50/0xb50
[  481.352009][T15264]  ? __lock_acquire+0x7d10/0x7d10
[  481.357084][T15264]  ? down_read+0x1aa/0x2e0
[  481.361538][T15264]  genl_rcv+0x24/0x40
[  481.365565][T15264]  netlink_unicast+0x774/0x920
[  481.370369][T15264]  netlink_sendmsg+0x8ba/0xbe0
[  481.375187][T15264]  ? netlink_getsockopt+0x570/0x570
[  481.380582][T15264]  ? aa_sock_msg_perm+0x94/0x150
[  481.385559][T15264]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  481.390869][T15264]  ? security_socket_sendmsg+0x7c/0xa0
[  481.396365][T15264]  ? netlink_getsockopt+0x570/0x570
[  481.401585][T15264]  ____sys_sendmsg+0x5b7/0x8f0
[  481.406401][T15264]  ? __sys_sendmsg_sock+0x30/0x30
[  481.411470][T15264]  ? import_iovec+0x6f/0xa0
[  481.416015][T15264]  ___sys_sendmsg+0x236/0x2e0
[  481.420744][T15264]  ? __sys_sendmsg+0x2a0/0x2a0
[  481.425580][T15264]  __se_sys_sendmsg+0x1af/0x290
[  481.430471][T15264]  ? __x64_sys_sendmsg+0x80/0x80
[  481.435433][T15264]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  481.441460][T15264]  ? trace_sys_enter+0x1f/0x80
[  481.446261][T15264]  do_syscall_64+0x4c/0xa0
[  481.450708][T15264]  ? clear_bhb_loop+0x30/0x80
[  481.455418][T15264]  ? clear_bhb_loop+0x30/0x80
[  481.460143][T15264]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  481.466073][T15264] RIP: 0033:0x7f36ed013e59
[  481.470516][T15264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.490172][T15264] RSP: 002b:00007f36eb24c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.498599][T15264] RAX: ffffffffffffffda RBX: 00007f36ed28d090 RCX: 00007f36ed013e59
[  481.506582][T15264] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  481.514595][T15264] RBP: 00007f36ed0a9d6f R08: 0000000000000000 R09: 0000000000000000
[  481.522591][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.530570][T15264] R13: 00007f36ed28d128 R14: 00007f36ed28d090 R15: 00007fff062a0888
[  481.538578][T15264]  </TASK>
[  481.759158][T15272] validate_nla: 2 callbacks suppressed
[  481.759200][T15272] netlink: 'syz.4.3650': attribute type 10 has an invalid length.
[  481.805517][T15279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3650'.
[  482.257753][T15272] team0: Device wg1 is of different type
[  482.369712][T15266] delete_channel: no stack
[  482.386970][T15281] netlink: 'syz.1.3655': attribute type 27 has an invalid length.
[  482.395388][T15290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.411702][T15290] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.445033][T15290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.454543][T15290] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.599426][T15292] netlink: 'syz.0.3658': attribute type 12 has an invalid length.
[  482.741651][T15311] netlink: 'syz.4.3664': attribute type 9 has an invalid length.
[  482.766031][T15311] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3664'.
[  482.929334][ T4232] Bluetooth: hci3: command 0x0406 tx timeout
[  483.255770][T15324] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3668'.
[  483.341594][T15324] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  483.666745][T15343] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.3677'.
[  483.696130][T15340] FAULT_INJECTION: forcing a failure.
[  483.696130][T15340] name failslab, interval 1, probability 0, space 0, times 0
[  483.750476][T15340] CPU: 0 PID: 15340 Comm: syz.3.3676 Not tainted syzkaller #0
[  483.758004][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  483.761977][T15338] netlink: 'syz.2.3675': attribute type 10 has an invalid length.
[  483.768080][T15340] Call Trace:
[  483.768091][T15340]  <TASK>
[  483.768100][T15340]  dump_stack_lvl+0x188/0x250
[  483.768128][T15340]  ? show_regs_print_info+0x20/0x20
[  483.768149][T15340]  ? load_image+0x400/0x400
[  483.768172][T15340]  ? __might_sleep+0xf0/0xf0
[  483.768193][T15340]  ? __lock_acquire+0x7d10/0x7d10
[  483.768215][T15340]  ? netlink_insert+0xe95/0x11f0
[  483.768239][T15340]  should_fail+0x38c/0x4c0
[  483.768268][T15340]  should_failslab+0x5/0x20
[  483.768288][T15340]  slab_pre_alloc_hook+0x51/0xc0
[  483.768311][T15340]  kmem_cache_alloc_node+0x47/0x2d0
[  483.768329][T15340]  ? __alloc_skb+0xf4/0x750
[  483.768357][T15340]  __alloc_skb+0xf4/0x750
[  483.768383][T15340]  netlink_sendmsg+0x654/0xbe0
[  483.768412][T15340]  ? netlink_getsockopt+0x570/0x570
[  483.768435][T15340]  ? aa_sock_msg_perm+0x94/0x150
[  483.768459][T15340]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  483.768481][T15340]  ? security_socket_sendmsg+0x7c/0xa0
[  483.768503][T15340]  ? netlink_getsockopt+0x570/0x570
[  483.768523][T15340]  ____sys_sendmsg+0x5b7/0x8f0
[  483.768555][T15340]  ? __sys_sendmsg_sock+0x30/0x30
[  483.768587][T15340]  ? import_iovec+0x6f/0xa0
[  483.768615][T15340]  ___sys_sendmsg+0x236/0x2e0
[  483.768646][T15340]  ? __sys_sendmsg+0x2a0/0x2a0
[  483.768682][T15340]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  483.768729][T15340]  __se_sys_sendmsg+0x1af/0x290
[  483.768756][T15340]  ? __x64_sys_sendmsg+0x80/0x80
[  483.768792][T15340]  ? syscall_enter_from_user_mode+0x2a/0x70
[  483.768833][T15340]  do_syscall_64+0x4c/0xa0
[  483.768852][T15340]  ? clear_bhb_loop+0x30/0x80
[  483.768873][T15340]  ? clear_bhb_loop+0x30/0x80
[  483.768895][T15340]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  483.768917][T15340] RIP: 0033:0x7f9e74ee5e59
[  483.768935][T15340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.768954][T15340] RSP: 002b:00007f9e7313f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.768977][T15340] RAX: ffffffffffffffda RBX: 00007f9e7515efa0 RCX: 00007f9e74ee5e59
[  483.768993][T15340] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000007
[  483.769007][T15340] RBP: 00007f9e7313f090 R08: 0000000000000000 R09: 0000000000000000
[  483.769021][T15340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.769033][T15340] R13: 00007f9e7515f038 R14: 00007f9e7515efa0 R15: 00007fff9ee93af8
[  483.769064][T15340]  </TASK>
[  483.884067][T15348] netlink: 'syz.0.3678': attribute type 29 has an invalid length.
[  483.914063][T15344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3675'.
[  484.503708][T15338] team0: Device wg1 is of different type
[  484.551956][T15335] delete_channel: no stack
[  484.611750][T15348] netlink: 'syz.0.3678': attribute type 29 has an invalid length.
[  484.626167][T15356] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3679'.
[  485.048062][T15375] netlink: 'syz.2.3684': attribute type 46 has an invalid length.
[  485.085957][T15375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3684'.
[  485.148758][T15373] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3686'.
[  485.198573][T15373] net_ratelimit: 505 callbacks suppressed
[  485.198587][T15373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  485.238219][T15383] netlink: 'syz.4.3688': attribute type 10 has an invalid length.
[  485.257209][T15383] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.3688'.
[  485.276334][T15383] openvswitch: netlink: Flow key attr not present in new flow.
[  485.489700][T15392] FAULT_INJECTION: forcing a failure.
[  485.489700][T15392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  485.523890][T15392] CPU: 1 PID: 15392 Comm: syz.0.3691 Not tainted syzkaller #0
[  485.531504][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  485.541580][T15392] Call Trace:
[  485.544874][T15392]  <TASK>
[  485.547823][T15392]  dump_stack_lvl+0x188/0x250
[  485.552525][T15392]  ? show_regs_print_info+0x20/0x20
[  485.557741][T15392]  ? load_image+0x400/0x400
[  485.562263][T15392]  ? __lock_acquire+0x7d10/0x7d10
[  485.567312][T15392]  ? perf_trace_lock_acquire+0xed/0x3e0
[  485.572889][T15392]  should_fail+0x38c/0x4c0
[  485.577347][T15392]  _copy_from_user+0x2e/0x170
[  485.582064][T15392]  __copy_msghdr_from_user+0xc9/0x630
[  485.587462][T15392]  ? verify_lock_unused+0x140/0x140
[  485.592695][T15392]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  485.598078][T15392]  ___sys_sendmsg+0x19a/0x2e0
[  485.602790][T15392]  ? __sys_sendmsg+0x2a0/0x2a0
[  485.607601][T15392]  ? vfs_write+0x8b2/0xd60
[  485.612058][T15392]  __se_sys_sendmsg+0x1af/0x290
[  485.616933][T15392]  ? __x64_sys_sendmsg+0x80/0x80
[  485.621919][T15392]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  485.627962][T15392]  ? lockdep_hardirqs_on+0x94/0x140
[  485.633381][T15392]  do_syscall_64+0x4c/0xa0
[  485.637833][T15392]  ? clear_bhb_loop+0x30/0x80
[  485.642531][T15392]  ? clear_bhb_loop+0x30/0x80
[  485.647216][T15392]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  485.653118][T15392] RIP: 0033:0x7fa3e86ede59
[  485.657557][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.677175][T15392] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  485.685619][T15392] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  485.693606][T15392] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003
[  485.701594][T15392] RBP: 00007fa3e6947090 R08: 0000000000000000 R09: 0000000000000000
[  485.709597][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.717613][T15392] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  485.725623][T15392]  </TASK>
[  486.023136][T15400] netlink: 'syz.0.3692': attribute type 10 has an invalid length.
[  486.078617][T15407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3692'.
[  486.343865][T15415] delete_channel: no stack
[  486.633333][T15399] delete_channel: no stack
[  487.083862][T15431] netlink: 'syz.2.3704': attribute type 21 has an invalid length.
[  487.116483][T15431] IPv6: NLM_F_CREATE should be specified when creating new route
[  487.124302][T15431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  487.131618][T15431] IPv6: NLM_F_CREATE should be set when creating new route
[  487.138910][T15431] IPv6: NLM_F_CREATE should be set when creating new route
[  487.146140][T15431] IPv6: NLM_F_CREATE should be set when creating new route
[  487.518164][T15447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3710'.
[  487.803388][T15462] delete_channel: no stack
[  488.110102][T15478] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3722'.
[  488.166386][T15478] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  488.226773][T15476] delete_channel: no stack
[  488.390569][T15493] netlink: 279 bytes leftover after parsing attributes in process `syz.2.3726'.
[  488.846422][T15504] delete_channel: no stack
[  489.272597][T15524] netlink: 'syz.0.3738': attribute type 12 has an invalid length.
[  489.289836][T15524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3738'.
[  489.325713][T15524] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3738'.
[  489.350387][T15528] netlink: 'syz.4.3740': attribute type 10 has an invalid length.
[  489.423334][T15528] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.482228][T15528] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.497884][T15528] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  489.977296][T15543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.061136][T15543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.184533][T15543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.202937][T15543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.560222][T15546] netlink: 'syz.4.3745': attribute type 12 has an invalid length.
[  490.593856][T15557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  490.633652][T15557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  490.695240][T15557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.721018][T15558] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3750'.
[  490.883183][T15573] delete_channel: no stack
[  491.019251][T15578] delete_channel: no stack
[  491.614478][T15599] device syzkaller0 entered promiscuous mode
[  491.765571][T15607] delete_channel: no stack
[  491.992549][T15613] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  492.085918][T15615] device syzkaller0 entered promiscuous mode
[  492.676431][T15648] delete_channel: no stack
[  492.746642][T15647] netlink: 'syz.0.3781': attribute type 10 has an invalid length.
[  492.761594][T15649] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3782'.
[  492.773975][T15650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3781'.
[  493.366320][T15655] delete_channel: no stack
[  493.429515][T15663] mac80211_hwsim hwsim60 »»»»»»: renamed from wlan0
[  493.879477][T15679] netlink: 'syz.3.3791': attribute type 12 has an invalid length.
[  493.928033][T15679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3791'.
[  493.986149][T15684] netlink: 279 bytes leftover after parsing attributes in process `syz.3.3791'.
[  494.532565][T15697] delete_channel: no stack
[  494.545705][T15693] netlink: 'syz.0.3796': attribute type 10 has an invalid length.
[  494.583031][T15698] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3796'.
[  495.166801][T15715] delete_channel: no stack
[  495.388779][T15728] netlink: 'syz.1.3808': attribute type 10 has an invalid length.
[  495.426562][T15728] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.467403][T15728] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  495.505424][T15732] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3809'.
[  495.590994][T15734] delete_channel: no stack
[  496.579462][T15756] netlink: 'syz.0.3816': attribute type 10 has an invalid length.
[  496.600910][T15756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3816'.
[  496.855773][T15752] delete_channel: no stack
[  497.012144][T15773] netlink: 'syz.3.3822': attribute type 1 has an invalid length.
[  497.197336][T15780] tap0: tun_chr_ioctl cmd 1074025677
[  497.231650][T15780] tap0: linktype set to 270
[  497.363394][T15785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  497.457151][T15792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3827'.
[  497.463582][T15787] netlink: 'syz.1.3827': attribute type 10 has an invalid length.
[  497.960822][T15777] delete_channel: no stack
[  498.104000][T15787] team0: Device wg1 is of different type
[  498.138771][T15786] delete_channel: no stack
[  498.180472][T15791] netlink: 'syz.4.3829': attribute type 10 has an invalid length.
[  498.205869][T15801] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3832'.
[  498.219175][T15799] netlink: 'syz.0.3831': attribute type 10 has an invalid length.
[  498.239130][T15801] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8
[  498.239783][T15799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3831'.
[  498.694593][T15820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3841'.
[  498.923955][T15826] netlink: 'syz.4.3844': attribute type 10 has an invalid length.
[  498.971645][T15833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3844'.
[  499.189395][T15826] team0: Device wg1 is of different type
[  499.385283][T15837] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3846'.
[  499.397590][T15837] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8
[  499.691041][T15826] delete_channel: no stack
[  499.981089][T15855] netlink: 'syz.4.3852': attribute type 10 has an invalid length.
[  500.285038][T15855] team0 (unregistering): Port device team_slave_0 removed
[  500.411401][T15855] team0 (unregistering): Port device team_slave_1 removed
[  501.174720][T15879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3859'.
[  501.268310][T15882] netlink: 'syz.1.3859': attribute type 10 has an invalid length.
[  501.285532][T15882] team0: Device wg1 is of different type
[  501.315836][T15876] netlink: 'syz.0.3858': attribute type 10 has an invalid length.
[  501.331015][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.343484][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  501.452723][T15884] delete_channel: no stack
[  501.495381][T15888] netlink: 144452 bytes leftover after parsing attributes in process `syz.4.3861'.
[  501.563057][T15888] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  501.574432][T15888] CPU: 1 PID: 15888 Comm: syz.4.3861 Not tainted syzkaller #0
[  501.581945][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  501.592030][T15888] Call Trace:
[  501.595346][T15888]  <TASK>
[  501.598327][T15888]  dump_stack_lvl+0x188/0x250
[  501.603036][T15888]  ? show_regs_print_info+0x20/0x20
[  501.608255][T15888]  ? load_image+0x400/0x400
[  501.612788][T15888]  sysfs_warn_dup+0x8a/0xa0
[  501.617312][T15888]  sysfs_do_create_link_sd+0xc0/0x110
[  501.622704][T15888]  device_add+0x7f6/0x1000
[  501.627150][T15888]  wiphy_register+0x1e81/0x2c30
[  501.632030][T15888]  ? cfg80211_event_work+0x40/0x40
[  501.637158][T15888]  ? minstrel_ht_alloc+0x808/0x980
[  501.642284][T15888]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  501.648376][T15888]  ieee80211_register_hw+0x2aa1/0x3af0
[  501.653869][T15888]  ? ieee80211_tasklet_handler+0x20/0x20
[  501.659524][T15888]  ? rcu_is_watching+0x11/0xa0
[  501.664338][T15888]  ? memset+0x1e/0x40
[  501.668369][T15888]  ? hrtimer_init+0x10c/0x220
[  501.673072][T15888]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  501.678841][T15888]  hwsim_new_radio_nl+0xa6f/0xc40
[  501.683935][T15888]  genl_rcv_msg+0xcea/0xf90
[  501.688461][T15888]  ? lock_chain_count+0x20/0x20
[  501.693332][T15888]  ? genl_bind+0x380/0x380
[  501.697778][T15888]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  501.703786][T15888]  ? lock_chain_count+0x20/0x20
[  501.708672][T15888]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  501.714839][T15888]  ? lockdep_hardirqs_on+0x94/0x140
[  501.720059][T15888]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  501.726224][T15888]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  501.732758][T15888]  netlink_rcv_skb+0x1f5/0x440
[  501.737535][T15888]  ? genl_bind+0x380/0x380
[  501.741966][T15888]  ? netlink_ack+0xb50/0xb50
[  501.746568][T15888]  ? __lock_acquire+0x7d10/0x7d10
[  501.751735][T15888]  ? down_read+0x1aa/0x2e0
[  501.756177][T15888]  genl_rcv+0x24/0x40
[  501.760160][T15888]  netlink_unicast+0x774/0x920
[  501.764954][T15888]  netlink_sendmsg+0x8ba/0xbe0
[  501.769741][T15888]  ? netlink_getsockopt+0x570/0x570
[  501.774951][T15888]  ? apparmor_socket_sendmsg+0xe/0x30
[  501.780343][T15888]  ? aa_sock_msg_perm+0x94/0x150
[  501.785293][T15888]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  501.790594][T15888]  ? security_socket_sendmsg+0x7c/0xa0
[  501.796064][T15888]  ? netlink_getsockopt+0x570/0x570
[  501.801276][T15888]  ____sys_sendmsg+0x5b7/0x8f0
[  501.806071][T15888]  ? __sys_sendmsg_sock+0x30/0x30
[  501.811109][T15888]  ? import_iovec+0x6f/0xa0
[  501.815710][T15888]  ___sys_sendmsg+0x236/0x2e0
[  501.820432][T15888]  ? __sys_sendmsg+0x2a0/0x2a0
[  501.825253][T15888]  __se_sys_sendmsg+0x1af/0x290
[  501.830122][T15888]  ? __x64_sys_sendmsg+0x80/0x80
[  501.835078][T15888]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  501.841089][T15888]  ? lockdep_hardirqs_on+0x94/0x140
[  501.846303][T15888]  do_syscall_64+0x4c/0xa0
[  501.850742][T15888]  ? clear_bhb_loop+0x30/0x80
[  501.855431][T15888]  ? clear_bhb_loop+0x30/0x80
[  501.860125][T15888]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  501.866029][T15888] RIP: 0033:0x7f086a753e59
[  501.870460][T15888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.890079][T15888] RSP: 002b:00007f08689ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.898509][T15888] RAX: ffffffffffffffda RBX: 00007f086a9ccfa0 RCX: 00007f086a753e59
[  501.906594][T15888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  501.914574][T15888] RBP: 00007f086a7e9d6f R08: 0000000000000000 R09: 0000000000000000
[  501.922562][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.930539][T15888] R13: 00007f086a9cd038 R14: 00007f086a9ccfa0 R15: 00007ffc236c8928
[  501.938538][T15888]  </TASK>
[  502.041869][T15893] netlink: 'syz.0.3862': attribute type 10 has an invalid length.
[  502.058391][T15893] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3862'.
[  502.976824][T15920] delete_channel: no stack
[  503.397028][T15930] netlink: 'syz.1.3876': attribute type 46 has an invalid length.
[  503.398342][T13307] Bluetooth: hci0: command 0x0406 tx timeout
[  503.425470][T15930] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3876'.
[  503.524815][T15930] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3876'.
[  503.577345][T15930] netlink: zone id is out of range
[  503.596217][T15930] netlink: zone id is out of range
[  503.626782][T15930] netlink: zone id is out of range
[  503.679803][T15930] netlink: zone id is out of range
[  503.700011][T15930] netlink: zone id is out of range
[  503.733503][T15930] netlink: zone id is out of range
[  503.779665][T15930] netlink: zone id is out of range
[  503.825315][T15935] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3878'.
[  503.845488][T15930] netlink: zone id is out of range
[  503.860477][T15930] netlink: zone id is out of range
[  503.884849][T15935] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  504.423517][T15941] netlink: 'syz.1.3880': attribute type 10 has an invalid length.
[  504.447684][T15945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3880'.
[  504.476866][T15944] netlink: 'syz.2.3882': attribute type 1 has an invalid length.
[  504.506699][T15944] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3882'.
[  504.879276][T15941] team0: Device wg1 is of different type
[  505.105648][T15948] delete_channel: no stack
[  505.133656][T15951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3883'.
[  505.216905][T15953] delete_channel: no stack
[  505.466621][T15958] netlink: 'syz.1.3886': attribute type 2 has an invalid length.
[  505.494518][T15958] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3886'.
[  505.549224][T15960] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3887'.
[  505.624777][T15960] netlink: 'syz.0.3887': attribute type 27 has an invalid length.
[  505.669861][T15960] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3887'.
[  506.214436][T15969] device syzkaller0 entered promiscuous mode
[  506.287999][T15972] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3892'.
[  506.341440][T15969] syzkaller0: tun_net_xmit 1280
[  506.395546][T15969] syzkaller0: create flow: hash 152164289 index 1
[  506.456314][T15968] syzkaller0: delete flow: hash 152164289 index 1
[  506.522103][T15979] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.3895'.
[  506.896957][T15985] netlink: 'syz.3.3896': attribute type 10 has an invalid length.
[  506.947765][T15986] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3896'.
[  507.174841][T15985] team0: Device wg1 is of different type
[  507.252614][T15993] delete_channel: no stack
[  507.512085][T15981] device syzkaller0 entered promiscuous mode
[  507.523708][T15984] delete_channel: no stack
[  507.553751][T15995] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3898'.
[  507.971569][T16003] netlink: 'syz.3.3902': attribute type 12 has an invalid length.
[  508.064050][T16008] netlink: 'syz.2.3904': attribute type 21 has an invalid length.
[  508.299501][T16020] delete_channel: no stack
[  508.537643][T16023] ¥: port 1(erspan0) entered blocking state
[  508.566909][T16023] ¥: port 1(erspan0) entered disabled state
[  508.620595][T16023] device erspan0 entered promiscuous mode
[  508.673124][T16032] À: port 1(vlan0) entered blocking state
[  508.680122][T16032] À: port 1(vlan0) entered disabled state
[  508.692743][T16032] device vlan0 entered promiscuous mode
[  508.700671][T16034] netlink: 'syz.3.3913': attribute type 7 has an invalid length.
[  509.155553][T16045] netlink: 'syz.2.3916': attribute type 2 has an invalid length.
[  509.184346][T16045] netlink: 'syz.2.3916': attribute type 8 has an invalid length.
[  509.457117][T16050] netlink: 'syz.3.3918': attribute type 10 has an invalid length.
[  509.540742][T16060] delete_channel: no stack
[  509.627246][T16050] team0: Device wg1 is of different type
[  509.825866][T16049] delete_channel: no stack
[  509.951814][T16071] netlink: 'syz.2.3924': attribute type 10 has an invalid length.
[  509.960606][T16071] device veth0_vlan left promiscuous mode
[  509.972317][T16071] device veth0_vlan entered promiscuous mode
[  509.991186][T16071] team0: Device veth0_vlan failed to register rx_handler
[  510.512254][T16099] __nla_validate_parse: 11 callbacks suppressed
[  510.512272][T16099] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3931'.
[  510.533362][T16106] delete_channel: no stack
[  510.636668][T16110] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3931'.
[  510.654201][T16110] net_ratelimit: 250 callbacks suppressed
[  510.654219][T16110] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  510.736510][T16110] ¥: port 1(erspan0) entered blocking state
[  510.743029][T16110] ¥: port 1(erspan0) entered disabled state
[  510.783585][T16110] device erspan0 entered promiscuous mode
[  510.842519][T16120] netlink: 'syz.4.3940': attribute type 21 has an invalid length.
[  510.850700][T16120] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3940'.
[  510.900350][T16122] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3940'.
[  511.013992][T16127] netlink: 'syz.4.3942': attribute type 3 has an invalid length.
[  511.023008][T16127] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3942'.
[  511.121843][T16129] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3941'.
[  511.373835][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  511.687850][T16143] FAULT_INJECTION: forcing a failure.
[  511.687850][T16143] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  511.747217][T16143] CPU: 1 PID: 16143 Comm: syz.0.3947 Not tainted syzkaller #0
[  511.754761][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  511.764844][T16143] Call Trace:
[  511.768178][T16143]  <TASK>
[  511.771130][T16143]  dump_stack_lvl+0x188/0x250
[  511.775869][T16143]  ? show_regs_print_info+0x20/0x20
[  511.781112][T16143]  ? load_image+0x400/0x400
[  511.785645][T16143]  ? __lock_acquire+0x7d10/0x7d10
[  511.790694][T16143]  ? obj_cgroup_charge_pages+0xc5/0x1a0
[  511.796271][T16143]  should_fail+0x38c/0x4c0
[  511.800762][T16143]  prepare_alloc_pages+0x1e4/0x5f0
[  511.805913][T16143]  __alloc_pages+0x11b/0x480
[  511.810546][T16143]  ? zone_statistics+0x170/0x170
[  511.815530][T16143]  bpf_ringbuf_alloc+0x25d/0x510
[  511.820508][T16143]  ringbuf_map_alloc+0x1d1/0x300
[  511.825479][T16143]  map_create+0x485/0x2350
[  511.829936][T16143]  __sys_bpf+0x30a/0x6f0
[  511.834218][T16143]  ? bpf_link_show_fdinfo+0x380/0x380
[  511.839630][T16143]  ? vtime_user_exit+0x2c8/0x3e0
[  511.844602][T16143]  __x64_sys_bpf+0x78/0x90
[  511.849054][T16143]  do_syscall_64+0x4c/0xa0
[  511.853510][T16143]  ? clear_bhb_loop+0x30/0x80
[  511.858213][T16143]  ? clear_bhb_loop+0x30/0x80
[  511.862927][T16143]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  511.868854][T16143] RIP: 0033:0x7fa3e86ede59
[  511.873394][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.893013][T16143] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  511.901470][T16143] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  511.909470][T16143] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  511.917451][T16143] RBP: 00007fa3e6947090 R08: 0000000000000000 R09: 0000000000000000
[  511.925458][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  511.933446][T16143] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  511.941500][T16143]  </TASK>
[  512.356534][T16156] delete_channel: no stack
[  512.484256][T16165] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3956'.
[  512.630399][T16169] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3956'.
[  512.677793][T16169] team0: Port device team_slave_0 removed
[  512.685830][T16169] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  512.719511][T16173] netlink: 'syz.0.3959': attribute type 3 has an invalid length.
[  512.740117][T16173] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3959'.
[  516.096711][T16193] netlink: 'syz.1.3963': attribute type 10 has an invalid length.
[  516.179122][T16199] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3963'.
[  516.347420][T16208] delete_channel: no stack
[  516.378472][T16193] team0: Device wg1 is of different type
[  516.459927][T16209] delete_channel: no stack
[  516.475009][T16209] delete_channel: no stack
[  516.511858][T16206] netlink: 'syz.2.3969': attribute type 21 has an invalid length.
[  516.520503][T16206] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3969'.
[  516.531440][T16207] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3969'.
[  516.570399][T16191] delete_channel: no stack
[  516.720919][T16221] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3974'.
[  516.735640][T16223] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3972'.
[  516.769612][T16224] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3975'.
[  516.788227][T16225] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3972'.
[  516.835943][T16223] netlink: 'syz.0.3972': attribute type 21 has an invalid length.
[  516.867479][T16223] IPv6: NLM_F_CREATE should be specified when creating new route
[  516.875855][T16223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  516.883227][T16223] IPv6: NLM_F_CREATE should be set when creating new route
[  516.890648][T16223] IPv6: NLM_F_CREATE should be set when creating new route
[  516.988010][T16228] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3976'.
[  517.014858][T16233] netlink: 'syz.1.3978': attribute type 10 has an invalid length.
[  517.028025][T16233] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.3978'.
[  517.048961][T16233] openvswitch: netlink: Flow key attr not present in new flow.
[  517.095422][T16235] netlink: 'syz.2.3979': attribute type 2 has an invalid length.
[  517.105477][T16235] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3979'.
[  517.222255][T16239] FAULT_INJECTION: forcing a failure.
[  517.222255][T16239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.292118][T16239] CPU: 0 PID: 16239 Comm: syz.1.3981 Not tainted syzkaller #0
[  517.299719][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  517.309964][T16239] Call Trace:
[  517.313270][T16239]  <TASK>
[  517.316222][T16239]  dump_stack_lvl+0x188/0x250
[  517.320954][T16239]  ? show_regs_print_info+0x20/0x20
[  517.326186][T16239]  ? load_image+0x400/0x400
[  517.330724][T16239]  ? __lock_acquire+0x7d10/0x7d10
[  517.335797][T16239]  should_fail+0x38c/0x4c0
[  517.340267][T16239]  _copy_from_user+0x2e/0x170
[  517.344989][T16239]  iovec_from_user+0x142/0x370
[  517.349889][T16239]  __import_iovec+0x70/0x490
[  517.354666][T16239]  import_iovec+0x6f/0xa0
[  517.359056][T16239]  ___sys_sendmsg+0x1fd/0x2e0
[  517.363801][T16239]  ? __sys_sendmsg+0x2a0/0x2a0
[  517.368669][T16239]  __se_sys_sendmsg+0x1af/0x290
[  517.373584][T16239]  ? __x64_sys_sendmsg+0x80/0x80
[  517.378573][T16239]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  517.384627][T16239]  ? lockdep_hardirqs_on+0x94/0x140
[  517.389884][T16239]  do_syscall_64+0x4c/0xa0
[  517.394357][T16239]  ? clear_bhb_loop+0x30/0x80
[  517.399087][T16239]  ? clear_bhb_loop+0x30/0x80
[  517.403812][T16239]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  517.409751][T16239] RIP: 0033:0x7f69c4d9de59
[  517.414204][T16239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.433841][T16239] RSP: 002b:00007f69c2ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.442294][T16239] RAX: ffffffffffffffda RBX: 00007f69c5016fa0 RCX: 00007f69c4d9de59
[  517.450309][T16239] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003
[  517.458303][T16239] RBP: 00007f69c2ff7090 R08: 0000000000000000 R09: 0000000000000000
[  517.466379][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.474362][T16239] R13: 00007f69c5017038 R14: 00007f69c5016fa0 R15: 00007fff1f73bb08
[  517.482369][T16239]  </TASK>
[  517.672236][T16251] netlink: 'syz.0.3985': attribute type 21 has an invalid length.
[  517.941473][T16261] netlink: 'syz.1.3989': attribute type 12 has an invalid length.
[  518.079573][T16269] delete_channel: no stack
[  518.168367][T16278] netlink: 'syz.1.3993': attribute type 21 has an invalid length.
[  518.180094][T16278] IPv6: NLM_F_CREATE should be specified when creating new route
[  518.188074][T16278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  518.195327][T16278] IPv6: NLM_F_CREATE should be set when creating new route
[  518.202660][T16278] IPv6: NLM_F_CREATE should be set when creating new route
[  518.210024][T16278] IPv6: NLM_F_CREATE should be set when creating new route
[  518.651484][T16296] netlink: 'syz.4.3997': attribute type 21 has an invalid length.
[  518.671407][T16296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  518.678978][T16296] IPv6: NLM_F_CREATE should be set when creating new route
[  518.687185][T16296] IPv6: NLM_F_CREATE should be set when creating new route
[  518.752770][T16301] netlink: 'syz.1.4002': attribute type 12 has an invalid length.
[  518.761107][T11783] Bluetooth: hci5: command 0x0406 tx timeout
[  518.956367][T16300] team0: Device wg1 is of different type
[  519.226834][T16298] delete_channel: no stack
[  519.453670][T16313] delete_channel: no stack
[  519.587008][T16320] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  520.093728][T16328] delete_channel: no stack
[  522.503704][T16328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  522.511106][T16328] IPv6: NLM_F_CREATE should be set when creating new route
[  522.744658][T16335] __nla_validate_parse: 10 callbacks suppressed
[  522.744689][T16335] netlink: 279 bytes leftover after parsing attributes in process `syz.2.4014'.
[  522.785646][T16337] validate_nla: 2 callbacks suppressed
[  522.785662][T16337] netlink: 'syz.1.4015': attribute type 12 has an invalid length.
[  522.819532][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4015'.
[  522.837682][T16340] netlink: 'syz.3.4016': attribute type 10 has an invalid length.
[  522.845598][T16340] device bridge_slave_1 left promiscuous mode
[  522.858044][T16340] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.936560][T16340] device bridge_slave_1 entered promiscuous mode
[  522.955452][T16340] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  522.975407][T16337] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4015'.
[  523.224780][T16346] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4018'.
[  523.394684][T16359] delete_channel: no stack
[  523.420492][T16347] delete_channel: no stack
[  523.804346][T16376] netlink: 'syz.2.4029': attribute type 10 has an invalid length.
[  523.913075][T16376] team0: Device hsr_slave_0 failed to register rx_handler
[  524.073771][T16380] netlink: 'syz.4.4031': attribute type 12 has an invalid length.
[  524.114988][T16380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4031'.
[  524.178626][T16381] netlink: 279 bytes leftover after parsing attributes in process `syz.4.4031'.
[  524.661959][T16386] delete_channel: no stack
[  525.349424][T16421] delete_channel: no stack
[  525.369592][T16428] netlink: 'syz.1.4044': attribute type 10 has an invalid length.
[  525.831515][T16431] delete_channel: no stack
[  525.962194][T16452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4053'.
[  526.060911][T16452] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  526.284402][T16461] netlink: 'syz.2.4058': attribute type 10 has an invalid length.
[  526.311880][T16463] delete_channel: no stack
[  526.521805][T16461] team0 (unregistering): Port device team_slave_1 removed
[  526.646780][T16461] team0 (unregistering): Port device veth1_to_bond removed
[  526.758459][T16468] netlink: 'syz.4.4059': attribute type 10 has an invalid length.
[  526.994119][T16471] netlink: 'syz.1.4060': attribute type 12 has an invalid length.
[  527.046554][T16471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4060'.
[  527.130309][T16475] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4060'.
[  527.911592][T16495] netlink: 'syz.4.4067': attribute type 10 has an invalid length.
[  528.155540][T16502] netlink: 'syz.3.4073': attribute type 9 has an invalid length.
[  528.185397][T16502] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4073'.
[  528.319374][T16507] delete_channel: no stack
[  528.504688][T16510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4072'.
[  529.073663][T16514] netlink: 'syz.2.4077': attribute type 12 has an invalid length.
[  529.168920][T16514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4077'.
[  529.184154][T16515] netlink: 279 bytes leftover after parsing attributes in process `syz.2.4077'.
[  529.239850][T16521] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4080'.
[  529.275531][T16522] netlink: 'syz.0.4078': attribute type 40 has an invalid length.
[  529.296463][T16521] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  529.388159][T16530] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4082'.
[  529.433675][T16522] FAULT_INJECTION: forcing a failure.
[  529.433675][T16522] name failslab, interval 1, probability 0, space 0, times 0
[  529.481031][T16530] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  529.509014][T16522] CPU: 1 PID: 16522 Comm: syz.0.4078 Not tainted syzkaller #0
[  529.516527][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  529.526619][T16522] Call Trace:
[  529.529923][T16522]  <TASK>
[  529.532875][T16522]  dump_stack_lvl+0x188/0x250
[  529.537588][T16522]  ? show_regs_print_info+0x20/0x20
[  529.542825][T16522]  ? load_image+0x400/0x400
[  529.547372][T16522]  should_fail+0x38c/0x4c0
[  529.551833][T16522]  should_failslab+0x5/0x20
[  529.556367][T16522]  slab_pre_alloc_hook+0x51/0xc0
[  529.561341][T16522]  __kmalloc_node_track_caller+0x68/0x3a0
[  529.567083][T16522]  ? rtmsg_ifinfo_build_skb+0x80/0x180
[  529.572569][T16522]  ? kmem_cache_alloc_node+0x162/0x2d0
[  529.578053][T16522]  ? __alloc_skb+0xf4/0x750
[  529.582578][T16522]  ? rtmsg_ifinfo_build_skb+0x80/0x180
[  529.588170][T16522]  __alloc_skb+0x22c/0x750
[  529.592619][T16522]  rtmsg_ifinfo_build_skb+0x80/0x180
[  529.597938][T16522]  rtmsg_ifinfo+0x71/0x120
[  529.602397][T16522]  __dev_notify_flags+0xdc/0x300
[  529.607371][T16522]  ? __dev_change_flags+0x6a0/0x6a0
[  529.612598][T16522]  ? __dev_change_flags+0x4d0/0x6a0
[  529.617829][T16522]  ? dev_get_flags+0x1c0/0x1c0
[  529.622621][T16522]  ? preempt_schedule_common+0xa5/0xd0
[  529.628111][T16522]  ? preempt_schedule+0xbc/0xd0
[  529.632999][T16522]  dev_change_flags+0xe3/0x1a0
[  529.637798][T16522]  do_setlink+0xcdb/0x3d60
[  529.642276][T16522]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  529.648463][T16522]  ? load_image+0x400/0x400
[  529.653014][T16522]  ? stack_trace_save+0xa6/0xf0
[  529.657904][T16522]  ? perf_trace_lock+0xe4/0x390
[  529.662796][T16522]  ? __nla_validate_parse+0x1fe0/0x2940
[  529.668384][T16522]  ? __kasan_kmalloc+0xcc/0xf0
[  529.673211][T16522]  ? __nla_validate+0x50/0x50
[  529.677943][T16522]  ? validate_linkmsg+0x3db/0x4c0
[  529.683000][T16522]  rtnl_newlink+0x1658/0x1a50
[  529.687725][T16522]  ? trace_event_raw_event_lock+0x270/0x270
[  529.693674][T16522]  ? rtnl_setlink+0x500/0x500
[  529.698387][T16522]  ? mark_lock+0x94/0x320
[  529.702749][T16522]  ? __lock_acquire+0x13bc/0x7d10
[  529.707853][T16522]  ? kmem_cache_free+0x8f/0x210
[  529.712815][T16522]  ? rtnl_setlink+0x500/0x500
[  529.717528][T16522]  rtnetlink_rcv_msg+0x844/0xf30
[  529.722518][T16522]  ? rtnetlink_bind+0x80/0x80
[  529.727260][T16522]  ? __local_bh_enable_ip+0x136/0x1c0
[  529.732660][T16522]  ? lockdep_hardirqs_on+0x94/0x140
[  529.737899][T16522]  ? __local_bh_enable_ip+0x136/0x1c0
[  529.743301][T16522]  ? _local_bh_enable+0xa0/0xa0
[  529.748196][T16522]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  529.753446][T16522]  ? perf_trace_lock+0xe4/0x390
[  529.758373][T16522]  ? trace_event_raw_event_lock+0x270/0x270
[  529.764305][T16522]  ? __skb_clone+0x480/0x790
[  529.768941][T16522]  netlink_rcv_skb+0x1f5/0x440
[  529.773738][T16522]  ? rtnetlink_bind+0x80/0x80
[  529.778459][T16522]  ? netlink_ack+0xb50/0xb50
[  529.783104][T16522]  netlink_unicast+0x774/0x920
[  529.787901][T16522]  netlink_sendmsg+0x8ba/0xbe0
[  529.792701][T16522]  ? netlink_getsockopt+0x570/0x570
[  529.797937][T16522]  ? aa_sock_msg_perm+0x94/0x150
[  529.802937][T16522]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  529.808258][T16522]  ? security_socket_sendmsg+0x7c/0xa0
[  529.813834][T16522]  ? netlink_getsockopt+0x570/0x570
[  529.819168][T16522]  ____sys_sendmsg+0x5b7/0x8f0
[  529.823988][T16522]  ? __sys_sendmsg_sock+0x30/0x30
[  529.829061][T16522]  ? import_iovec+0x6f/0xa0
[  529.833606][T16522]  ___sys_sendmsg+0x236/0x2e0
[  529.838322][T16522]  ? __sys_sendmsg+0x2a0/0x2a0
[  529.843131][T16522]  ? trace_event_raw_event_lock+0x270/0x270
[  529.849094][T16522]  ? vfs_write+0x8b2/0xd60
[  529.853604][T16522]  __se_sys_sendmsg+0x1af/0x290
[  529.858513][T16522]  ? __x64_sys_sendmsg+0x80/0x80
[  529.863581][T16522]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  529.869611][T16522]  ? lockdep_hardirqs_on+0x94/0x140
[  529.874862][T16522]  do_syscall_64+0x4c/0xa0
[  529.879310][T16522]  ? clear_bhb_loop+0x30/0x80
[  529.884007][T16522]  ? clear_bhb_loop+0x30/0x80
[  529.888713][T16522]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  529.894633][T16522] RIP: 0033:0x7fa3e86ede59
[  529.899088][T16522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.918725][T16522] RSP: 002b:00007fa3e6926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.927253][T16522] RAX: ffffffffffffffda RBX: 00007fa3e8967090 RCX: 00007fa3e86ede59
[  529.935248][T16522] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000004
[  529.943244][T16522] RBP: 00007fa3e6926090 R08: 0000000000000000 R09: 0000000000000000
[  529.951292][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.959301][T16522] R13: 00007fa3e8967128 R14: 00007fa3e8967090 R15: 00007ffdee650148
[  529.967304][T16522]  </TASK>
[  530.283324][T16544] netlink: 189520 bytes leftover after parsing attributes in process `syz.3.4086'.
[  530.307020][T16544] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.4086'.
[  530.351650][T16522] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.619418][T16555] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4089'.
[  530.656411][T16555] bridge_slave_1: default FDB implementation only supports local addresses
[  530.702421][T16563] delete_channel: no stack
[  530.995761][T16574] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4096'.
[  531.032563][T16574] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  531.584947][T16587] openvswitch: netlink: Flow key attribute not present in set flow.
[  531.629118][T16581] delete_channel: no stack
[  532.254739][T16608] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  532.634003][T16619] delete_channel: no stack
[  533.095553][T16638] netlink: 'syz.2.4118': attribute type 10 has an invalid length.
[  533.440831][T16658] netlink: 'syz.0.4127': attribute type 10 has an invalid length.
[  533.955236][T16675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.023259][T16679] __nla_validate_parse: 5 callbacks suppressed
[  534.023289][T16679] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4136'.
[  534.054585][T16679] device hsr_slave_0 left promiscuous mode
[  534.087524][T16679] device hsr_slave_1 left promiscuous mode
[  534.122197][T16683] FAULT_INJECTION: forcing a failure.
[  534.122197][T16683] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  534.138239][T11780] Bluetooth: hci2: command 0x0406 tx timeout
[  534.174387][T16683] CPU: 0 PID: 16683 Comm: syz.3.4137 Not tainted syzkaller #0
[  534.182094][T16683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  534.192194][T16683] Call Trace:
[  534.195493][T16683]  <TASK>
[  534.198447][T16683]  dump_stack_lvl+0x188/0x250
[  534.203159][T16683]  ? show_regs_print_info+0x20/0x20
[  534.208385][T16683]  ? load_image+0x400/0x400
[  534.212924][T16683]  ? __lock_acquire+0x7d10/0x7d10
[  534.217987][T16683]  ? obj_cgroup_charge_pages+0xc5/0x1a0
[  534.223575][T16683]  should_fail+0x38c/0x4c0
[  534.228036][T16683]  prepare_alloc_pages+0x1e4/0x5f0
[  534.233192][T16683]  __alloc_pages+0x11b/0x480
[  534.237834][T16683]  ? zone_statistics+0x170/0x170
[  534.242828][T16683]  bpf_ringbuf_alloc+0x25d/0x510
[  534.247809][T16683]  ringbuf_map_alloc+0x1d1/0x300
[  534.252783][T16683]  map_create+0x485/0x2350
[  534.257255][T16683]  __sys_bpf+0x30a/0x6f0
[  534.261533][T16683]  ? bpf_link_show_fdinfo+0x380/0x380
[  534.266944][T16683]  ? vtime_user_exit+0x2c8/0x3e0
[  534.271918][T16683]  __x64_sys_bpf+0x78/0x90
[  534.276360][T16683]  do_syscall_64+0x4c/0xa0
[  534.280813][T16683]  ? clear_bhb_loop+0x30/0x80
[  534.285520][T16683]  ? clear_bhb_loop+0x30/0x80
[  534.290237][T16683]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  534.296170][T16683] RIP: 0033:0x7f9e74ee5e59
[  534.300618][T16683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.320248][T16683] RSP: 002b:00007f9e7313f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  534.328706][T16683] RAX: ffffffffffffffda RBX: 00007f9e7515efa0 RCX: 00007f9e74ee5e59
[  534.336734][T16683] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  534.344736][T16683] RBP: 00007f9e7313f090 R08: 0000000000000000 R09: 0000000000000000
[  534.352737][T16683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  534.360732][T16683] R13: 00007f9e7515f038 R14: 00007f9e7515efa0 R15: 00007fff9ee93af8
[  534.368864][T16683]  </TASK>
[  534.453620][T16682] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4134'.
[  534.777626][T16690] delete_channel: no stack
[  535.406024][T16721] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4150'.
[  535.754929][T16736] delete_channel: no stack
[  535.832744][T16720] device syzkaller0 entered promiscuous mode
[  536.774300][T16762] netlink: 'syz.0.4162': attribute type 9 has an invalid length.
[  536.831243][T16762] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4162'.
[  536.950715][T16767] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4164'.
[  536.968444][T16767] device hsr_slave_0 left promiscuous mode
[  536.989891][T16767] device hsr_slave_1 left promiscuous mode
[  537.090596][T16771] FAULT_INJECTION: forcing a failure.
[  537.090596][T16771] name failslab, interval 1, probability 0, space 0, times 0
[  537.103549][T16771] CPU: 1 PID: 16771 Comm: syz.0.4166 Not tainted syzkaller #0
[  537.111037][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  537.121109][T16771] Call Trace:
[  537.124409][T16771]  <TASK>
[  537.127355][T16771]  dump_stack_lvl+0x188/0x250
[  537.132046][T16771]  ? show_regs_print_info+0x20/0x20
[  537.137258][T16771]  ? load_image+0x400/0x400
[  537.141947][T16771]  ? __might_sleep+0xf0/0xf0
[  537.146545][T16771]  ? __lock_acquire+0x7d10/0x7d10
[  537.151567][T16771]  ? netlink_insert+0xe95/0x11f0
[  537.156566][T16771]  should_fail+0x38c/0x4c0
[  537.161022][T16771]  should_failslab+0x5/0x20
[  537.165540][T16771]  slab_pre_alloc_hook+0x51/0xc0
[  537.170488][T16771]  kmem_cache_alloc_node+0x47/0x2d0
[  537.175784][T16771]  ? __alloc_skb+0xf4/0x750
[  537.180313][T16771]  __alloc_skb+0xf4/0x750
[  537.184656][T16771]  netlink_sendmsg+0x654/0xbe0
[  537.189475][T16771]  ? netlink_getsockopt+0x570/0x570
[  537.194726][T16771]  ? aa_sock_msg_perm+0x94/0x150
[  537.199709][T16771]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  537.204999][T16771]  ? security_socket_sendmsg+0x7c/0xa0
[  537.210458][T16771]  ? netlink_getsockopt+0x570/0x570
[  537.215692][T16771]  ____sys_sendmsg+0x5b7/0x8f0
[  537.220487][T16771]  ? __sys_sendmsg_sock+0x30/0x30
[  537.225521][T16771]  ? import_iovec+0x6f/0xa0
[  537.230032][T16771]  ___sys_sendmsg+0x236/0x2e0
[  537.234737][T16771]  ? __sys_sendmsg+0x2a0/0x2a0
[  537.239537][T16771]  ? vfs_write+0x8b2/0xd60
[  537.244017][T16771]  __se_sys_sendmsg+0x1af/0x290
[  537.248898][T16771]  ? __x64_sys_sendmsg+0x80/0x80
[  537.253849][T16771]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  537.259860][T16771]  ? lockdep_hardirqs_on+0x94/0x140
[  537.265109][T16771]  do_syscall_64+0x4c/0xa0
[  537.269520][T16771]  ? clear_bhb_loop+0x30/0x80
[  537.274205][T16771]  ? clear_bhb_loop+0x30/0x80
[  537.278929][T16771]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  537.284881][T16771] RIP: 0033:0x7fa3e86ede59
[  537.289321][T16771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.308962][T16771] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.317393][T16771] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  537.325397][T16771] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003
[  537.333394][T16771] RBP: 00007fa3e6947090 R08: 0000000000000000 R09: 0000000000000000
[  537.341505][T16771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.349468][T16771] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  537.357457][T16771]  </TASK>
[  537.678658][T16782] delete_channel: no stack
[  537.710610][T16781] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4171'.
[  537.891849][T16781] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  537.905680][T16781] CPU: 1 PID: 16781 Comm: syz.0.4171 Not tainted syzkaller #0
[  537.913291][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  537.923391][T16781] Call Trace:
[  537.926705][T16781]  <TASK>
[  537.929682][T16781]  dump_stack_lvl+0x188/0x250
[  537.934421][T16781]  ? show_regs_print_info+0x20/0x20
[  537.939677][T16781]  ? load_image+0x400/0x400
[  537.944258][T16781]  sysfs_warn_dup+0x8a/0xa0
[  537.948821][T16781]  sysfs_do_create_link_sd+0xc0/0x110
[  537.954288][T16781]  device_add+0x7f6/0x1000
[  537.958784][T16781]  wiphy_register+0x1e81/0x2c30
[  537.963852][T16781]  ? cfg80211_event_work+0x40/0x40
[  537.969012][T16781]  ? minstrel_ht_alloc+0x808/0x980
[  537.974184][T16781]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  537.980317][T16781]  ieee80211_register_hw+0x2aa1/0x3af0
[  537.985864][T16781]  ? ieee80211_tasklet_handler+0x20/0x20
[  537.991559][T16781]  ? rcu_is_watching+0x11/0xa0
[  537.996401][T16781]  ? memset+0x1e/0x40
[  538.000431][T16781]  ? hrtimer_init+0x10c/0x220
[  538.005171][T16781]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  538.010989][T16781]  hwsim_new_radio_nl+0xa6f/0xc40
[  538.016100][T16781]  genl_rcv_msg+0xcea/0xf90
[  538.020672][T16781]  ? genl_bind+0x380/0x380
[  538.025153][T16781]  ? rcu_preempt_deferred_qs_irqrestore+0x37a/0xc30
[  538.031802][T16781]  ? verify_lock_unused+0x140/0x140
[  538.037060][T16781]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  538.042841][T16781]  ? perf_trace_lock+0x301/0x390
[  538.047843][T16781]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  538.054429][T16781]  netlink_rcv_skb+0x1f5/0x440
[  538.059245][T16781]  ? genl_bind+0x380/0x380
[  538.063715][T16781]  ? netlink_ack+0xb50/0xb50
[  538.068360][T16781]  ? __lock_acquire+0x7d10/0x7d10
[  538.073446][T16781]  ? down_read+0x1aa/0x2e0
[  538.077988][T16781]  genl_rcv+0x24/0x40
[  538.082014][T16781]  netlink_unicast+0x774/0x920
[  538.086948][T16781]  netlink_sendmsg+0x8ba/0xbe0
[  538.091808][T16781]  ? netlink_getsockopt+0x570/0x570
[  538.097058][T16781]  ? aa_sock_msg_perm+0x94/0x150
[  538.102045][T16781]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  538.107378][T16781]  ? security_socket_sendmsg+0x7c/0xa0
[  538.112892][T16781]  ? netlink_getsockopt+0x570/0x570
[  538.118133][T16781]  ____sys_sendmsg+0x5b7/0x8f0
[  538.122967][T16781]  ? __sys_sendmsg_sock+0x30/0x30
[  538.128066][T16781]  ? import_iovec+0x6f/0xa0
[  538.132627][T16781]  ___sys_sendmsg+0x236/0x2e0
[  538.137370][T16781]  ? __sys_sendmsg+0x2a0/0x2a0
[  538.142275][T16781]  __se_sys_sendmsg+0x1af/0x290
[  538.147181][T16781]  ? __x64_sys_sendmsg+0x80/0x80
[  538.152169][T16781]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  538.158224][T16781]  ? lockdep_hardirqs_on+0x94/0x140
[  538.163484][T16781]  do_syscall_64+0x4c/0xa0
[  538.167953][T16781]  ? clear_bhb_loop+0x30/0x80
[  538.172667][T16781]  ? clear_bhb_loop+0x30/0x80
[  538.177402][T16781]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  538.183343][T16781] RIP: 0033:0x7fa3e86ede59
[  538.187807][T16781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.207455][T16781] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  538.215912][T16781] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  538.223925][T16781] RDX: 000000003f000000 RSI: 0000200000000000 RDI: 000000000000000d
[  538.231937][T16781] RBP: 00007fa3e8783d6f R08: 0000000000000000 R09: 0000000000000000
[  538.239945][T16781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.247959][T16781] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  538.256027][T16781]  </TASK>
[  538.400140][T16795] FAULT_INJECTION: forcing a failure.
[  538.400140][T16795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.438574][T16795] CPU: 0 PID: 16795 Comm: syz.2.4176 Not tainted syzkaller #0
[  538.446105][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  538.456187][T16795] Call Trace:
[  538.459491][T16795]  <TASK>
[  538.462448][T16795]  dump_stack_lvl+0x188/0x250
[  538.467165][T16795]  ? show_regs_print_info+0x20/0x20
[  538.472397][T16795]  ? load_image+0x400/0x400
[  538.476936][T16795]  ? __lock_acquire+0x7d10/0x7d10
[  538.482006][T16795]  should_fail+0x38c/0x4c0
[  538.486470][T16795]  _copy_from_iter+0x22e/0x1170
[  538.491373][T16795]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  538.496784][T16795]  ? __check_object_size+0x244/0x410
[  538.502110][T16795]  ? kmalloc_large_node+0x190/0x190
[  538.507362][T16795]  ? __phys_addr_symbol+0x2b/0x70
[  538.512424][T16795]  ? __check_object_size+0x30c/0x410
[  538.517752][T16795]  netlink_sendmsg+0x758/0xbe0
[  538.522562][T16795]  ? netlink_getsockopt+0x570/0x570
[  538.527882][T16795]  ? aa_sock_msg_perm+0x94/0x150
[  538.532853][T16795]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  538.538168][T16795]  ? security_socket_sendmsg+0x7c/0xa0
[  538.543664][T16795]  ? netlink_getsockopt+0x570/0x570
[  538.548893][T16795]  ____sys_sendmsg+0x5b7/0x8f0
[  538.553702][T16795]  ? __sys_sendmsg_sock+0x30/0x30
[  538.558794][T16795]  ? import_iovec+0x6f/0xa0
[  538.563343][T16795]  ___sys_sendmsg+0x236/0x2e0
[  538.568072][T16795]  ? __sys_sendmsg+0x2a0/0x2a0
[  538.572915][T16795]  __se_sys_sendmsg+0x1af/0x290
[  538.577813][T16795]  ? __x64_sys_sendmsg+0x80/0x80
[  538.582812][T16795]  ? syscall_enter_from_user_mode+0x2a/0x70
[  538.588754][T16795]  do_syscall_64+0x4c/0xa0
[  538.593210][T16795]  ? clear_bhb_loop+0x30/0x80
[  538.597926][T16795]  ? clear_bhb_loop+0x30/0x80
[  538.602726][T16795]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  538.608680][T16795] RIP: 0033:0x7f36ed013e59
[  538.613124][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.632763][T16795] RSP: 002b:00007f36eb26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  538.641223][T16795] RAX: ffffffffffffffda RBX: 00007f36ed28cfa0 RCX: 00007f36ed013e59
[  538.649229][T16795] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000007
[  538.657239][T16795] RBP: 00007f36eb26d090 R08: 0000000000000000 R09: 0000000000000000
[  538.665236][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.673241][T16795] R13: 00007f36ed28d038 R14: 00007f36ed28cfa0 R15: 00007fff062a0888
[  538.681269][T16795]  </TASK>
[  538.784553][T16804] netlink: 'syz.3.4178': attribute type 21 has an invalid length.
[  538.792787][T16804] IPv6: NLM_F_CREATE should be specified when creating new route
[  538.801838][T16804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  538.809230][T16804] IPv6: NLM_F_CREATE should be set when creating new route
[  538.816527][T16804] IPv6: NLM_F_CREATE should be set when creating new route
[  538.823819][T16804] IPv6: NLM_F_CREATE should be set when creating new route
[  539.037041][T16811] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4181'.
[  539.110646][T16811] device hsr_slave_0 left promiscuous mode
[  539.218294][T16811] device hsr_slave_1 left promiscuous mode
[  539.371164][T16822] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4184'.
[  539.412107][T16826] delete_channel: no stack
[  539.705399][T16838] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4190'.
[  540.273356][T16863] delete_channel: no stack
[  540.284287][T16862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4199'.
[  540.370786][T16862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4199'.
[  540.389146][T16867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4199'.
[  540.412461][T16862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4199'.
[  540.442037][T16868] netlink: 'syz.0.4198': attribute type 3 has an invalid length.
[  540.602252][T16872] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4202'.
[  540.603622][T16868] netlink: 'syz.0.4198': attribute type 16 has an invalid length.
[  540.624332][T16872] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  540.658265][T16868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4198'.
[  541.305645][T16887] delete_channel: no stack
[  541.613376][T16897] netlink: 279 bytes leftover after parsing attributes in process `syz.0.4213'.
[  542.171856][T16916] netlink: 'syz.2.4219': attribute type 29 has an invalid length.
[  542.213827][T16917] netlink: 'syz.3.4218': attribute type 9 has an invalid length.
[  542.217355][T16918] netlink: 'syz.0.4217': attribute type 1 has an invalid length.
[  542.273431][T16916] netlink: 'syz.2.4219': attribute type 29 has an invalid length.
[  542.352129][T16919] netlink: 'syz.2.4219': attribute type 29 has an invalid length.
[  542.367189][T16913] netlink: 'syz.3.4218': attribute type 9 has an invalid length.
[  542.648399][T16929] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  543.909633][T16969] delete_channel: no stack
[  544.126983][T16988] __nla_validate_parse: 14 callbacks suppressed
[  544.127036][T16988] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4243'.
[  544.206640][T16990] netlink: 'syz.4.4245': attribute type 2 has an invalid length.
[  544.219781][T16990] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.4245'.
[  544.948191][T16989] delete_channel: no stack
[  544.969140][T17017] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4255'.
[  545.205811][T17025] netlink: 'syz.2.4257': attribute type 10 has an invalid length.
[  545.317073][T17032] delete_channel: no stack
[  545.384020][T17039] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4261'.
[  545.442705][T17039] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  545.464898][T17041] netlink: 'syz.3.4272': attribute type 2 has an invalid length.
[  545.503596][T17041] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4272'.
[  545.607125][T17043] netlink: 'syz.4.4262': attribute type 9 has an invalid length.
[  545.635732][T17043] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4262'.
[  545.879531][T17047] netlink: 'syz.4.4262': attribute type 9 has an invalid length.
[  545.924918][T17047] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4262'.
[  546.304133][T17067] netlink: 279 bytes leftover after parsing attributes in process `syz.2.4271'.
[  546.347742][T17074] delete_channel: no stack
[  546.565717][T17079] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4276'.
[  546.598471][T17082] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.4277'.
[  546.621972][T17079] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  546.719908][T17081] netlink: 'syz.0.4277': attribute type 40 has an invalid length.
[  547.000277][T17094] FAULT_INJECTION: forcing a failure.
[  547.000277][T17094] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  547.049486][T17093] netlink: 'syz.0.4283': attribute type 2 has an invalid length.
[  547.066466][T17094] CPU: 1 PID: 17094 Comm: syz.4.4280 Not tainted syzkaller #0
[  547.074072][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  547.084370][T17094] Call Trace:
[  547.087689][T17094]  <TASK>
[  547.090636][T17094]  dump_stack_lvl+0x188/0x250
[  547.095340][T17094]  ? show_regs_print_info+0x20/0x20
[  547.100613][T17094]  ? load_image+0x400/0x400
[  547.105150][T17094]  ? __lock_acquire+0x7d10/0x7d10
[  547.110212][T17094]  should_fail+0x38c/0x4c0
[  547.114663][T17094]  _copy_from_user+0x2e/0x170
[  547.119383][T17094]  iovec_from_user+0x142/0x370
[  547.124183][T17094]  __import_iovec+0x70/0x490
[  547.128812][T17094]  import_iovec+0x6f/0xa0
[  547.133196][T17094]  ___sys_sendmsg+0x1fd/0x2e0
[  547.137907][T17094]  ? __sys_sendmsg+0x2a0/0x2a0
[  547.142707][T17094]  ? vfs_write+0x8b2/0xd60
[  547.147181][T17094]  __se_sys_sendmsg+0x1af/0x290
[  547.152093][T17094]  ? __x64_sys_sendmsg+0x80/0x80
[  547.157092][T17094]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  547.163121][T17094]  ? lockdep_hardirqs_on+0x94/0x140
[  547.168373][T17094]  do_syscall_64+0x4c/0xa0
[  547.172813][T17094]  ? clear_bhb_loop+0x30/0x80
[  547.177609][T17094]  ? clear_bhb_loop+0x30/0x80
[  547.182316][T17094]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  547.188236][T17094] RIP: 0033:0x7f086a753e59
[  547.192689][T17094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.212410][T17094] RSP: 002b:00007f086898c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  547.220848][T17094] RAX: ffffffffffffffda RBX: 00007f086a9cd090 RCX: 00007f086a753e59
[  547.228837][T17094] RDX: 0000000004008005 RSI: 0000200000002380 RDI: 0000000000000003
[  547.236831][T17094] RBP: 00007f086898c090 R08: 0000000000000000 R09: 0000000000000000
[  547.244835][T17094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.252831][T17094] R13: 00007f086a9cd128 R14: 00007f086a9cd090 R15: 00007ffc236c8928
[  547.260843][T17094]  </TASK>
[  547.435082][T17108] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  547.584018][T17115] delete_channel: no stack
[  547.677124][T17119] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  547.930405][T17127] netlink: 'syz.4.4295': attribute type 9 has an invalid length.
[  548.717285][T17151] netlink: 'syz.4.4303': attribute type 2 has an invalid length.
[  549.239473][T17175] delete_channel: no stack
[  549.459602][T17182] netlink: 'syz.0.4316': attribute type 27 has an invalid length.
[  549.590814][T17186] __nla_validate_parse: 10 callbacks suppressed
[  549.590836][T17186] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4317'.
[  550.879984][T17215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4327'.
[  551.057567][T17220] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4328'.
[  552.138127][T17228] device syzkaller0 entered promiscuous mode
[  552.174813][T17243] netlink: 279 bytes leftover after parsing attributes in process `syz.0.4337'.
[  552.472232][T17253] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4342'.
[  552.494054][T17253] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  552.634475][T17260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  552.732072][T17263] netlink: 'syz.0.4346': attribute type 10 has an invalid length.
[  552.987811][T17271] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.4348'.
[  553.034126][T17271] netlink: zone id is out of range
[  553.077705][T17267] netlink: 'syz.1.4348': attribute type 9 has an invalid length.
[  553.118322][T17268] netlink: 279 bytes leftover after parsing attributes in process `syz.4.4349'.
[  553.430734][T17284] netlink: 'syz.3.4353': attribute type 3 has an invalid length.
[  553.439773][T17284] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4353'.
[  553.464866][T17285] TCP: TCP_TX_DELAY enabled
[  553.680243][T17290] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4356'.
[  553.725208][T17290] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  553.950314][T17298] FAULT_INJECTION: forcing a failure.
[  553.950314][T17298] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  553.983997][T17298] CPU: 1 PID: 17298 Comm: syz.3.4359 Not tainted syzkaller #0
[  553.991512][T17298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.001615][T17298] Call Trace:
[  554.004913][T17298]  <TASK>
[  554.007860][T17298]  dump_stack_lvl+0x188/0x250
[  554.012567][T17298]  ? show_regs_print_info+0x20/0x20
[  554.017820][T17298]  ? load_image+0x400/0x400
[  554.022357][T17298]  ? __lock_acquire+0x7d10/0x7d10
[  554.027409][T17298]  ? obj_cgroup_charge_pages+0xc5/0x1a0
[  554.032996][T17298]  should_fail+0x38c/0x4c0
[  554.037455][T17298]  prepare_alloc_pages+0x1e4/0x5f0
[  554.042608][T17298]  __alloc_pages+0x11b/0x480
[  554.047230][T17298]  ? zone_statistics+0x170/0x170
[  554.052204][T17298]  bpf_ringbuf_alloc+0x25d/0x510
[  554.057174][T17298]  ringbuf_map_alloc+0x1d1/0x300
[  554.062152][T17298]  map_create+0x485/0x2350
[  554.066602][T17298]  __sys_bpf+0x30a/0x6f0
[  554.070871][T17298]  ? bpf_link_show_fdinfo+0x380/0x380
[  554.076272][T17298]  ? vtime_user_exit+0x2c8/0x3e0
[  554.081242][T17298]  __x64_sys_bpf+0x78/0x90
[  554.085702][T17298]  do_syscall_64+0x4c/0xa0
[  554.090149][T17298]  ? clear_bhb_loop+0x30/0x80
[  554.094979][T17298]  ? clear_bhb_loop+0x30/0x80
[  554.099694][T17298]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  554.105842][T17298] RIP: 0033:0x7f9e74ee5e59
[  554.110278][T17298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.129901][T17298] RSP: 002b:00007f9e7313f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  554.138342][T17298] RAX: ffffffffffffffda RBX: 00007f9e7515efa0 RCX: 00007f9e74ee5e59
[  554.146338][T17298] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  554.154340][T17298] RBP: 00007f9e7313f090 R08: 0000000000000000 R09: 0000000000000000
[  554.162329][T17298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  554.170323][T17298] R13: 00007f9e7515f038 R14: 00007f9e7515efa0 R15: 00007fff9ee93af8
[  554.178336][T17298]  </TASK>
[  554.462014][T17305] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4362'.
[  554.597707][ T4236] Bluetooth: hci4: command 0x0406 tx timeout
[  554.780905][T17318] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4368'.
[  554.879837][T17320] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4369'.
[  554.953652][T17320] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  555.163742][T17329] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4374'.
[  556.183111][T17370] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4389'.
[  556.377763][T17382] netlink: 'syz.1.4392': attribute type 9 has an invalid length.
[  556.418850][T17382] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4392'.
[  556.582820][T17389] netlink: 'syz.4.4396': attribute type 4 has an invalid length.
[  556.627951][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4396'.
[  556.639174][T17392] FAULT_INJECTION: forcing a failure.
[  556.639174][T17392] name failslab, interval 1, probability 0, space 0, times 0
[  556.662204][T17391] netlink: 'syz.4.4396': attribute type 39 has an invalid length.
[  556.662948][T17392] CPU: 1 PID: 17392 Comm: syz.0.4397 Not tainted syzkaller #0
[  556.677661][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  556.687914][T17392] Call Trace:
[  556.691218][T17392]  <TASK>
[  556.694180][T17392]  dump_stack_lvl+0x188/0x250
[  556.698900][T17392]  ? show_regs_print_info+0x20/0x20
[  556.704130][T17392]  ? load_image+0x400/0x400
[  556.708677][T17392]  ? __might_sleep+0xf0/0xf0
[  556.713290][T17392]  ? __lock_acquire+0x7d10/0x7d10
[  556.718349][T17392]  should_fail+0x38c/0x4c0
[  556.722809][T17392]  should_failslab+0x5/0x20
[  556.727365][T17392]  slab_pre_alloc_hook+0x51/0xc0
[  556.732336][T17392]  __kmalloc_node_track_caller+0x68/0x3a0
[  556.738093][T17392]  ? netlink_sendmsg+0x654/0xbe0
[  556.743072][T17392]  ? kmem_cache_alloc_node+0x162/0x2d0
[  556.748557][T17392]  ? __alloc_skb+0xf4/0x750
[  556.753090][T17392]  ? netlink_sendmsg+0x654/0xbe0
[  556.758065][T17392]  __alloc_skb+0x22c/0x750
[  556.762524][T17392]  netlink_sendmsg+0x654/0xbe0
[  556.767361][T17392]  ? netlink_getsockopt+0x570/0x570
[  556.772593][T17392]  ? aa_sock_msg_perm+0x94/0x150
[  556.777736][T17392]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  556.783046][T17392]  ? security_socket_sendmsg+0x7c/0xa0
[  556.788534][T17392]  ? netlink_getsockopt+0x570/0x570
[  556.793748][T17392]  ____sys_sendmsg+0x5b7/0x8f0
[  556.798539][T17392]  ? __sys_sendmsg_sock+0x30/0x30
[  556.803596][T17392]  ? import_iovec+0x6f/0xa0
[  556.808138][T17392]  ___sys_sendmsg+0x236/0x2e0
[  556.812852][T17392]  ? __sys_sendmsg+0x2a0/0x2a0
[  556.817673][T17392]  ? trace_event_raw_event_lock+0x270/0x270
[  556.823600][T17392]  ? vfs_write+0x8b2/0xd60
[  556.828068][T17392]  __se_sys_sendmsg+0x1af/0x290
[  556.832961][T17392]  ? __x64_sys_sendmsg+0x80/0x80
[  556.837929][T17392]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  556.843949][T17392]  ? lockdep_hardirqs_on+0x94/0x140
[  556.849176][T17392]  do_syscall_64+0x4c/0xa0
[  556.853626][T17392]  ? clear_bhb_loop+0x30/0x80
[  556.858349][T17392]  ? clear_bhb_loop+0x30/0x80
[  556.863076][T17392]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  556.869004][T17392] RIP: 0033:0x7fa3e86ede59
[  556.873450][T17392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.893229][T17392] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  556.901664][T17392] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  556.909737][T17392] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003
[  556.917718][T17392] RBP: 00007fa3e6947090 R08: 0000000000000000 R09: 0000000000000000
[  556.925705][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.933695][T17392] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  556.941706][T17392]  </TASK>
[  556.957968][T17391] device veth0_macvtap left promiscuous mode
[  557.272843][T17411] netlink: 'syz.2.4404': attribute type 2 has an invalid length.
[  557.290081][T17410] netlink: 279 bytes leftover after parsing attributes in process `syz.0.4402'.
[  557.322224][T17411] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4404'.
[  557.374854][T17414] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4406'.
[  557.388793][T17414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  557.438967][T17414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  557.473931][T17415] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4406'.
[  557.493123][T17415] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  557.520614][T17415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  558.382903][T17430] device syzkaller0 entered promiscuous mode
[  558.792610][T17440] netlink: 'syz.0.4414': attribute type 10 has an invalid length.
[  558.963726][T17440] openvswitch: netlink: Flow key attr not present in new flow.
[  559.720859][T17448] netlink: 'syz.0.4418': attribute type 2 has an invalid length.
[  561.535306][T17455] netlink: 'syz.3.4420': attribute type 4 has an invalid length.
[  561.600457][T17455] __nla_validate_parse: 2 callbacks suppressed
[  561.600474][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4420'.
[  561.873731][T17458] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4422'.
[  562.759912][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  562.769006][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  562.857829][T17482] netlink: 279 bytes leftover after parsing attributes in process `syz.4.4429'.
[  563.016618][T17484] netlink: 'syz.2.4430': attribute type 12 has an invalid length.
[  563.450830][T17491] netlink: 'syz.4.4433': attribute type 2 has an invalid length.
[  563.486497][T17491] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4433'.
[  564.349540][T17498] device syzkaller0 entered promiscuous mode
[  564.380710][T17505] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4439'.
[  564.456563][T17505] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  564.831498][T17507] netlink: 'syz.4.4440': attribute type 10 has an invalid length.
[  564.926813][T17509] netlink: 279 bytes leftover after parsing attributes in process `syz.2.4441'.
[  565.465169][T17520] netlink: 'syz.1.4446': attribute type 2 has an invalid length.
[  565.523870][T17520] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4446'.
[  566.073282][T17530] netlink: 'syz.4.4449': attribute type 11 has an invalid length.
[  566.101386][T17530] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4449'.
[  566.419053][T17534] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4451'.
[  566.446585][T17534] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  566.979206][T17545] netlink: 279 bytes leftover after parsing attributes in process `syz.0.4454'.
[  567.892941][T17565] netlink: 'syz.0.4461': attribute type 2 has an invalid length.
[  567.988380][T17565] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4461'.
[  568.481018][T17577] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4466'.
[  568.547363][T17577] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  568.803455][T17581] netlink: 'syz.2.4467': attribute type 9 has an invalid length.
[  568.900682][T17581] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4467'.
[  568.918239][T17580] netlink: 'syz.2.4467': attribute type 9 has an invalid length.
[  568.942201][T17580] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4467'.
[  569.273522][T17589] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4471'.
[  569.629116][T17602] netlink: 'syz.2.4475': attribute type 2 has an invalid length.
[  569.656243][T17602] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4475'.
[  570.045812][T17613] netlink: 'syz.0.4480': attribute type 1 has an invalid length.
[  570.100881][T17613] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4480'.
[  570.348917][T17622] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4480'.
[  570.953712][T17625] netlink: 'syz.1.4485': attribute type 39 has an invalid length.
[  570.960083][T17615] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4480'.
[  571.006179][T17625] device hsr_slave_0 left promiscuous mode
[  571.340690][T17645] netlink: 'syz.1.4491': attribute type 2 has an invalid length.
[  571.834705][T17670] delete_channel: no stack
[  572.062577][T17676] netlink: 'syz.2.4501': attribute type 1 has an invalid length.
[  572.071759][T17676] __nla_validate_parse: 3 callbacks suppressed
[  572.071773][T17676] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4501'.
[  572.094942][T17676] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4501'.
[  572.110053][T17639] delete_channel: no stack
[  572.150938][T17678] netlink: 279 bytes leftover after parsing attributes in process `syz.0.4511'.
[  572.180949][T17679] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4501'.
[  572.254864][T17683] netlink: 'syz.0.4503': attribute type 2 has an invalid length.
[  572.296411][T17683] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4503'.
[  572.323840][T17685] netlink: 'syz.4.4504': attribute type 39 has an invalid length.
[  572.562497][T17694] netlink: 127592 bytes leftover after parsing attributes in process `syz.0.4507'.
[  572.831286][T17708] netlink: 279 bytes leftover after parsing attributes in process `syz.4.4515'.
[  572.859858][T17710] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4516'.
[  573.054364][T17715] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4518'.
[  573.118700][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'.
[  573.214265][T17715] validate_nla: 1 callbacks suppressed
[  573.214285][T17715] netlink: 'syz.2.4518': attribute type 1 has an invalid length.
[  573.515150][T17732] netlink: 'syz.0.4522': attribute type 39 has an invalid length.
[  573.671020][T17736] netlink: 'syz.3.4527': attribute type 2 has an invalid length.
[  573.979147][T17747] netlink: 'syz.1.4530': attribute type 1 has an invalid length.
[  573.994792][T17746] netlink: 'syz.2.4531': attribute type 2 has an invalid length.
[  574.370319][T17765] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  574.516670][T17770] netlink: 'syz.0.4539': attribute type 2 has an invalid length.
[  574.683503][T17777] FAULT_INJECTION: forcing a failure.
[  574.683503][T17777] name failslab, interval 1, probability 0, space 0, times 0
[  574.700948][T17777] CPU: 1 PID: 17777 Comm: syz.0.4542 Not tainted syzkaller #0
[  574.708478][T17777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  574.718691][T17777] Call Trace:
[  574.721989][T17777]  <TASK>
[  574.724943][T17777]  dump_stack_lvl+0x188/0x250
[  574.729651][T17777]  ? show_regs_print_info+0x20/0x20
[  574.734868][T17777]  ? load_image+0x400/0x400
[  574.739389][T17777]  ? __might_sleep+0xf0/0xf0
[  574.744010][T17777]  ? __lock_acquire+0x7d10/0x7d10
[  574.749064][T17777]  ? mark_lock+0x94/0x320
[  574.753422][T17777]  should_fail+0x38c/0x4c0
[  574.757885][T17777]  should_failslab+0x5/0x20
[  574.762413][T17777]  slab_pre_alloc_hook+0x51/0xc0
[  574.767402][T17777]  kmem_cache_alloc_node+0x47/0x2d0
[  574.772655][T17777]  ? __alloc_skb+0xf4/0x750
[  574.777192][T17777]  __alloc_skb+0xf4/0x750
[  574.781558][T17777]  sk_stream_alloc_skb+0x1fa/0xa60
[  574.786724][T17777]  tcp_sendmsg_locked+0xc31/0x3320
[  574.791899][T17777]  ? tcp_free_fastopen_req+0x70/0x70
[  574.797241][T17777]  tcp_sendmsg+0x2b/0x40
[  574.801510][T17777]  ? inet_send_prepare+0x260/0x260
[  574.806651][T17777]  ____sys_sendmsg+0x5b7/0x8f0
[  574.811450][T17777]  ? __sys_sendmsg_sock+0x30/0x30
[  574.816629][T17777]  ? import_iovec+0x6f/0xa0
[  574.821169][T17777]  ___sys_sendmsg+0x236/0x2e0
[  574.825889][T17777]  ? __sys_sendmsg+0x2a0/0x2a0
[  574.830712][T17777]  ? ktime_get_real_ts64+0x440/0x440
[  574.836048][T17777]  __se_sys_sendmsg+0x1af/0x290
[  574.840941][T17777]  ? __x64_sys_sendmsg+0x80/0x80
[  574.845909][T17777]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  574.851926][T17777]  ? lockdep_hardirqs_on+0x94/0x140
[  574.857157][T17777]  do_syscall_64+0x4c/0xa0
[  574.861610][T17777]  ? clear_bhb_loop+0x30/0x80
[  574.866314][T17777]  ? clear_bhb_loop+0x30/0x80
[  574.871022][T17777]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  574.876987][T17777] RIP: 0033:0x7fa3e86ede59
[  574.881437][T17777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.901075][T17777] RSP: 002b:00007fa3e6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  574.909508][T17777] RAX: ffffffffffffffda RBX: 00007fa3e8966fa0 RCX: 00007fa3e86ede59
[  574.917497][T17777] RDX: 0000000004008005 RSI: 0000200000002380 RDI: 0000000000000003
[  574.925496][T17777] RBP: 00007fa3e6947090 R08: 0000000000000000 R09: 0000000000000000
[  574.933493][T17777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.941496][T17777] R13: 00007fa3e8967038 R14: 00007fa3e8966fa0 R15: 00007ffdee650148
[  574.949510][T17777]  </TASK>
[  575.094767][T17786] netlink: 'syz.1.4544': attribute type 10 has an invalid length.
[  575.111453][T17786] device geneve0 entered promiscuous mode
[  575.221858][T17786] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  575.335164][T17795] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  575.551375][T17799] netlink: 'syz.2.4548': attribute type 21 has an invalid length.
[  575.619072][T17799] netlink: 'syz.2.4548': attribute type 1 has an invalid length.
[  575.652715][T17802] netlink: 'syz.4.4551': attribute type 2 has an invalid length.
[  575.820861][T17806] team0: Device wg1 is of different type
[  576.211164][T17810] device veth0_macvtap left promiscuous mode
[  576.713230][T17834] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  577.197771][T17851] __nla_validate_parse: 20 callbacks suppressed
[  577.197793][T17851] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4570'.
[  577.270461][T17851] netlink: zone id is out of range
[  577.305102][T17851] netlink: zone id is out of range
[  577.319604][T17851] netlink: zone id is out of range
[  577.358658][T17851] netlink: zone id is out of range
[  577.364837][T17851] netlink: zone id is out of range
[  577.402761][T17851] netlink: zone id is out of range
[  577.417163][T17851] netlink: zone id is out of range
[  577.679388][T17874] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4577'.
[  577.714695][T17876] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4587'.
[  578.587439][T17890] device syzkaller0 entered promiscuous mode
[  578.619099][T17904] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4585'.
[  578.761371][T17908] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4588'.
[  578.968684][T17917] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4591'.
[  578.990198][T17912] validate_nla: 5 callbacks suppressed
[  578.990215][T17912] netlink: 'syz.0.4590': attribute type 2 has an invalid length.
[  579.005215][T17912] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4590'.
[  579.275912][T17923] netlink: 'syz.0.4594': attribute type 10 has an invalid length.
[  579.538665][T17934] netlink: 'syz.3.4597': attribute type 3 has an invalid length.
[  579.578663][T17934] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4597'.
[  579.653845][T17935] netlink: 279 bytes leftover after parsing attributes in process `syz.0.4598'.
[  579.729902][T17940] FAULT_INJECTION: forcing a failure.
[  579.729902][T17940] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  579.758947][T17940] CPU: 1 PID: 17940 Comm: syz.1.4600 Not tainted syzkaller #0
[  579.766594][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  579.776675][T17940] Call Trace:
[  579.779971][T17940]  <TASK>
[  579.782910][T17940]  dump_stack_lvl+0x188/0x250
[  579.787601][T17940]  ? show_regs_print_info+0x20/0x20
[  579.792813][T17940]  ? load_image+0x400/0x400
[  579.797339][T17940]  ? __lock_acquire+0x7d10/0x7d10
[  579.802469][T17940]  ? obj_cgroup_charge_pages+0xc5/0x1a0
[  579.808024][T17940]  should_fail+0x38c/0x4c0
[  579.812461][T17940]  prepare_alloc_pages+0x1e4/0x5f0
[  579.817694][T17940]  __alloc_pages+0x11b/0x480
[  579.822383][T17940]  ? zone_statistics+0x170/0x170
[  579.827344][T17940]  bpf_ringbuf_alloc+0x25d/0x510
[  579.832305][T17940]  ringbuf_map_alloc+0x1d1/0x300
[  579.837268][T17940]  map_create+0x485/0x2350
[  579.841701][T17940]  __sys_bpf+0x30a/0x6f0
[  579.845956][T17940]  ? bpf_link_show_fdinfo+0x380/0x380
[  579.851341][T17940]  ? vtime_user_exit+0x2c8/0x3e0
[  579.856286][T17940]  __x64_sys_bpf+0x78/0x90
[  579.860715][T17940]  do_syscall_64+0x4c/0xa0
[  579.865134][T17940]  ? clear_bhb_loop+0x30/0x80
[  579.869815][T17940]  ? clear_bhb_loop+0x30/0x80
[  579.874504][T17940]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  579.880408][T17940] RIP: 0033:0x7f69c4d9de59
[  579.884829][T17940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.904446][T17940] RSP: 002b:00007f69c2ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  579.912877][T17940] RAX: ffffffffffffffda RBX: 00007f69c5016fa0 RCX: 00007f69c4d9de59
[  579.920956][T17940] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  579.928939][T17940] RBP: 00007f69c2ff7090 R08: 0000000000000000 R09: 0000000000000000
[  579.936918][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  579.944891][T17940] R13: 00007f69c5017038 R14: 00007f69c5016fa0 R15: 00007fff1f73bb08
[  579.952886][T17940]  </TASK>
[  580.007644][T17944] netlink: 'syz.4.4601': attribute type 10 has an invalid length.
[  580.022646][T17944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4601'.
[  580.053985][T17947] net_ratelimit: 166 callbacks suppressed
[  580.054004][T17947] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  580.070642][T17944] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  581.143902][T17989] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  581.383397][T17994] netlink: 'syz.4.4618': attribute type 2 has an invalid length.
[  581.507875][T17996] device wlan1 entered promiscuous mode
[  582.562331][T18014] netlink: 'syz.4.4624': attribute type 2 has an invalid length.
[  582.597597][T18014] __nla_validate_parse: 3 callbacks suppressed
[  582.597612][T18014] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.4624'.
[  582.692394][T18016] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4627'.
[  582.740798][T18016] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  582.876050][T18028] netlink: 'syz.1.4630': attribute type 2 has an invalid length.
[  582.916953][T18031] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4633'.
[  582.939829][T18028] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4630'.
[  583.031701][T18037] FAULT_INJECTION: forcing a failure.
[  583.031701][T18037] name failslab, interval 1, probability 0, space 0, times 0
[  583.068491][T18037] CPU: 0 PID: 18037 Comm: syz.4.4635 Not tainted syzkaller #0
[  583.076020][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  583.086106][T18037] Call Trace:
[  583.089406][T18037]  <TASK>
[  583.092370][T18037]  dump_stack_lvl+0x188/0x250
[  583.097094][T18037]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  583.103307][T18037]  ? show_regs_print_info+0x20/0x20
[  583.108534][T18037]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  583.114741][T18037]  should_fail+0x38c/0x4c0
[  583.119292][T18037]  should_failslab+0x5/0x20
[  583.123834][T18037]  slab_pre_alloc_hook+0x51/0xc0
[  583.128800][T18037]  ? skb_clone+0x1bd/0x350
[  583.133238][T18037]  kmem_cache_alloc+0x3d/0x290
[  583.138025][T18037]  skb_clone+0x1bd/0x350
[  583.142299][T18037]  __netlink_deliver_tap+0x3cd/0x7c0
[  583.147648][T18037]  netlink_deliver_tap+0x16c/0x180
[  583.152785][T18037]  netlink_unicast+0x74f/0x920
[  583.157595][T18037]  netlink_sendmsg+0x8ba/0xbe0
[  583.162545][T18037]  ? netlink_getsockopt+0x570/0x570
[  583.167769][T18037]  ? aa_sock_msg_perm+0x94/0x150
[  583.172731][T18037]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  583.178103][T18037]  ? security_socket_sendmsg+0x7c/0xa0
[  583.183604][T18037]  ? netlink_getsockopt+0x570/0x570
[  583.188827][T18037]  ____sys_sendmsg+0x5b7/0x8f0
[  583.193626][T18037]  ? __sys_sendmsg_sock+0x30/0x30
[  583.198701][T18037]  ? import_iovec+0x6f/0xa0
[  583.203274][T18037]  ___sys_sendmsg+0x236/0x2e0
[  583.208024][T18037]  ? __sys_sendmsg+0x2a0/0x2a0
[  583.212851][T18037]  __se_sys_sendmsg+0x1af/0x290
[  583.217733][T18037]  ? __x64_sys_sendmsg+0x80/0x80
[  583.222694][T18037]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  583.228802][T18037]  ? lockdep_hardirqs_on+0x94/0x140
[  583.234023][T18037]  do_syscall_64+0x4c/0xa0
[  583.238458][T18037]  ? clear_bhb_loop+0x30/0x80
[  583.243157][T18037]  ? clear_bhb_loop+0x30/0x80
[  583.247854][T18037]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  583.253768][T18037] RIP: 0033:0x7f086a753e59
[  583.258200][T18037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  583.277843][T18037] RSP: 002b:00007f08689ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  583.286393][T18037] RAX: ffffffffffffffda RBX: 00007f086a9ccfa0 RCX: 00007f086a753e59
[  583.294566][T18037] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000007
[  583.302562][T18037] RBP: 00007f08689ad090 R08: 0000000000000000 R09: 0000000000000000
[  583.310560][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  583.318554][T18037] R13: 00007f086a9cd038 R14: 00007f086a9ccfa0 R15: 00007ffc236c8928
[  583.326673][T18037]  </TASK>
[  583.638632][T18048] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4639'.
[  583.771638][T18048] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  583.792458][T18048] CPU: 1 PID: 18048 Comm: syz.4.4639 Not tainted syzkaller #0
[  583.799992][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  583.810082][T18048] Call Trace:
[  583.813401][T18048]  <TASK>
[  583.816371][T18048]  dump_stack_lvl+0x188/0x250
[  583.821100][T18048]  ? show_regs_print_info+0x20/0x20
[  583.826337][T18048]  ? load_image+0x400/0x400
[  583.830910][T18048]  sysfs_warn_dup+0x8a/0xa0
[  583.835572][T18048]  sysfs_do_create_link_sd+0xc0/0x110
[  583.840996][T18048]  device_add+0x7f6/0x1000
[  583.845502][T18048]  wiphy_register+0x1e81/0x2c30
[  583.850445][T18048]  ? cfg80211_event_work+0x40/0x40
[  583.855598][T18048]  ? minstrel_ht_alloc+0x808/0x980
[  583.860764][T18048]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  583.866892][T18048]  ieee80211_register_hw+0x2aa1/0x3af0
[  583.872448][T18048]  ? ieee80211_tasklet_handler+0x20/0x20
[  583.878146][T18048]  ? hrtimer_init+0x3e/0x220
[  583.882792][T18048]  ? kasan_add_zero_shadow+0x50/0x50
[  583.888115][T18048]  ? memset+0x1e/0x40
[  583.892166][T18048]  ? hrtimer_init+0x10c/0x220
[  583.896905][T18048]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  583.902702][T18048]  hwsim_new_radio_nl+0xa6f/0xc40
[  583.907820][T18048]  genl_rcv_msg+0xcea/0xf90
[  583.912417][T18048]  ? genl_bind+0x380/0x380
[  583.916898][T18048]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  583.922130][T18048]  ? verify_lock_unused+0x140/0x140
[  583.927493][T18048]  ? perf_trace_lock_acquire+0xed/0x3e0
[  583.933101][T18048]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  583.939744][T18048]  ? perf_trace_lock+0x301/0x390
[  583.944755][T18048]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  583.951334][T18048]  netlink_rcv_skb+0x1f5/0x440
[  583.956141][T18048]  ? genl_bind+0x380/0x380
[  583.960614][T18048]  ? netlink_ack+0xb50/0xb50
[  583.965358][T18048]  ? __lock_acquire+0x7d10/0x7d10
[  583.970447][T18048]  ? down_read+0x1aa/0x2e0
[  583.974919][T18048]  genl_rcv+0x24/0x40
[  583.978945][T18048]  netlink_unicast+0x774/0x920
[  583.983782][T18048]  netlink_sendmsg+0x8ba/0xbe0
[  583.988615][T18048]  ? netlink_getsockopt+0x570/0x570
[  583.993861][T18048]  ? aa_sock_msg_perm+0x94/0x150
[  583.998855][T18048]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  584.004194][T18048]  ? security_socket_sendmsg+0x7c/0xa0
[  584.009707][T18048]  ? netlink_getsockopt+0x570/0x570
[  584.014952][T18048]  ____sys_sendmsg+0x5b7/0x8f0
[  584.019792][T18048]  ? __sys_sendmsg_sock+0x30/0x30
[  584.024879][T18048]  ? import_iovec+0x6f/0xa0
[  584.029456][T18048]  ___sys_sendmsg+0x236/0x2e0
[  584.034198][T18048]  ? __sys_sendmsg+0x2a0/0x2a0
[  584.039080][T18048]  __se_sys_sendmsg+0x1af/0x290
[  584.043964][T18048]  ? __x64_sys_sendmsg+0x80/0x80
[  584.048935][T18048]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  584.055056][T18048]  ? lockdep_hardirqs_on+0x94/0x140
[  584.060289][T18048]  do_syscall_64+0x4c/0xa0
[  584.064752][T18048]  ? clear_bhb_loop+0x30/0x80
[  584.069446][T18048]  ? clear_bhb_loop+0x30/0x80
[  584.074153][T18048]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  584.080070][T18048] RIP: 0033:0x7f086a753e59
[  584.084529][T18048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.104164][T18048] RSP: 002b:00007f08689ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  584.112607][T18048] RAX: ffffffffffffffda RBX: 00007f086a9ccfa0 RCX: 00007f086a753e59
[  584.120601][T18048] RDX: 0000100000000000 RSI: 0000200000000000 RDI: 000000000000000d
[  584.128589][T18048] RBP: 00007f086a7e9d6f R08: 0000000000000000 R09: 0000000000000000
[  584.136582][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  584.144571][T18048] R13: 00007f086a9cd038 R14: 00007f086a9ccfa0 R15: 00007ffc236c8928
[  584.152593][T18048]  </TASK>
[  584.175158][T18058] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4643'.
[  584.194405][T18058] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  584.400480][T18063] netlink: 'syz.1.4642': attribute type 2 has an invalid length.
[  584.440752][T18063] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4642'.
[  584.528665][T18070] netlink: 'syz.0.4646': attribute type 2 has an invalid length.
[  584.550449][T18070] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4646'.
[  584.686728][T18072] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4648'.
[  584.714849][T18072] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  584.803803][T18072] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  584.877722][T18071] delete_channel: no stack
[  588.056061][T18108] netlink: 'syz.3.4660': attribute type 2 has an invalid length.
[  588.121527][T18108] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.4660'.
[  588.173014][T18111] netlink: 'syz.1.4661': attribute type 2 has an invalid length.
[  588.184847][T18111] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4661'.
[  589.220931][T18152] netlink: 'syz.2.4677': attribute type 2 has an invalid length.
[  589.235574][T18152] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4677'.
[  589.382836][T18153] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4674'.
[  589.487630][T18154] device syzkaller0 entered promiscuous mode
[  589.827383][T18180] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4685'.
[  589.876368][T18180] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  590.062246][T18188] netlink: 'syz.4.4689': attribute type 2 has an invalid length.
[  590.082171][T18188] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4689'.
[  590.485083][T18192] netlink: 279 bytes leftover after parsing attributes in process `syz.4.4690'.
[  591.020273][T18212] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4700'.
[  591.068619][T18212] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  591.085321][T18214] netlink: 'syz.4.4702': attribute type 2 has an invalid length.
[  591.131671][T18214] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4702'.
[  592.380513][T18236] netlink: 'syz.3.4710': attribute type 29 has an invalid length.
[  592.414043][T18238] netlink: 'syz.0.4712': attribute type 2 has an invalid length.
[  592.424371][T18236] netlink: 'syz.3.4710': attribute type 29 has an invalid length.
[  592.446547][T18241] netlink: 'syz.3.4710': attribute type 29 has an invalid length.
[  592.459702][T18238] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4712'.
[  592.752743][T18248] netlink: 'syz.0.4713': attribute type 30 has an invalid length.
[  593.122175][T18252] netlink: 'syz.3.4714': attribute type 10 has an invalid length.
[  593.332475][T18256] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4716'.
[  593.365976][T18255] netlink: 'syz.4.4715': attribute type 10 has an invalid length.
[  593.375946][T18256] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  593.396350][T18255] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4715'.
[  593.456196][T18258] netlink: 'syz.2.4717': attribute type 2 has an invalid length.
[  593.479674][T18258] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4717'.
[  594.409203][T18286] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4729'.
[  594.463600][T18286] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  594.524867][T18284] delete_channel: no stack
[  594.800420][T18292] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4731'.
[  595.196416][T18311] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4739'.
[  595.210783][T18311] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  595.313463][T18315] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4740'.
[  595.413760][T18315] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  595.655748][T18332] validate_nla: 1 callbacks suppressed
[  595.655765][T18332] netlink: 'syz.2.4746': attribute type 2 has an invalid length.
[  595.674365][T18332] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4746'.
[  595.894653][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'.
[  596.068738][T18346] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4751'.
[  596.212428][T18352] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  596.303859][T18355] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  596.474923][T18364] netlink: 'syz.1.4757': attribute type 10 has an invalid length.
[  596.632867][T18371] netlink: 'syz.0.4760': attribute type 2 has an invalid length.
[  596.939408][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.950785][T18381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.977751][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.985861][T18381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  597.302677][T18395] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  597.394865][T18397] netlink: 'syz.1.4769': attribute type 10 has an invalid length.
[  597.414521][T18403] netlink: 'syz.4.4771': attribute type 30 has an invalid length.
[  597.653376][T18412] netlink: 'syz.0.4773': attribute type 2 has an invalid length.
[  597.904188][    C1] 
[  597.904198][    C1] ================================
[  597.904205][    C1] WARNING: inconsistent lock state
[  597.904229][    C1] syzkaller #0 Not tainted
[  597.904240][    C1] --------------------------------
[  597.904246][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  597.904255][    C1] syz.2.4777/18420 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  597.904277][    C1] ffff88801f6086a0 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520
[  597.904328][    C1] {INITIAL USE} state was registered at:
[  597.904341][    C1]   lock_acquire+0x19e/0x400
[  597.904364][    C1]   _raw_spin_lock_irqsave+0xb0/0x100
[  597.904384][    C1]   htab_map_delete_elem+0x1b2/0x520
[  597.904400][    C1]   bpf_prog_2c29ac5cdc6b1842+0x3a/0xd08
[  597.904416][    C1]   bpf_overflow_handler+0x1c2/0x4a0
[  597.904437][    C1]   __perf_event_overflow+0x364/0x530
[  597.904455][    C1]   perf_bp_event+0x276/0x320
[  597.904472][    C1]   hw_breakpoint_exceptions_notify+0x152/0x470
[  597.904492][    C1]   atomic_notifier_call_chain+0x15d/0x280
[  597.904511][    C1]   notify_die+0x141/0x1a0
[  597.904529][    C1]   notify_debug+0x20/0x30
[  597.904548][    C1]   noist_exc_debug+0x73/0x120
[  597.904567][    C1]   asm_exc_debug+0x2f/0x40
[  597.904585][    C1] irq event stamp: 2384
[  597.904592][    C1] hardirqs last  enabled at (2383): [<ffffffff81b563a6>] seqcount_lockdep_reader_access+0x106/0x190
[  597.904618][    C1] hardirqs last disabled at (2384): [<ffffffff89bd55ce>] exc_debug+0x6e/0x130
[  597.904642][    C1] softirqs last  enabled at (2140): [<ffffffff881d0825>] netlink_insert+0xe95/0x11f0
[  597.904666][    C1] softirqs last disabled at (2138): [<ffffffff87db850b>] release_sock+0x2b/0x1b0
[  597.904690][    C1] 
[  597.904690][    C1] other info that might help us debug this:
[  597.904696][    C1]  Possible unsafe locking scenario:
[  597.904696][    C1] 
[  597.904701][    C1]        CPU0
[  597.904705][    C1]        ----
[  597.904709][    C1]   lock(&htab->lockdep_key);
[  597.904721][    C1]   <Interrupt>
[  597.904725][    C1]     lock(&htab->lockdep_key);
[  597.904737][    C1] 
[  597.904737][    C1]  *** DEADLOCK ***
[  597.904737][    C1] 
[  597.904741][    C1] no locks held by syz.2.4777/18420.
[  597.904750][    C1] 
[  597.904750][    C1] stack backtrace:
[  597.904756][    C1] CPU: 1 PID: 18420 Comm: syz.2.4777 Not tainted syzkaller #0
[  597.904776][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  597.904788][    C1] Call Trace:
[  597.904795][    C1]  <#DB>
[  597.904802][    C1]  dump_stack_lvl+0x188/0x250
[  597.904825][    C1]  ? show_regs_print_info+0x20/0x20
[  597.904848][    C1]  ? print_usage_bug+0x42a/0x690
[  597.904866][    C1]  ? verify_lock_unused+0x18/0x140
[  597.904892][    C1]  lock_acquire+0x2c3/0x400
[  597.904916][    C1]  ? htab_map_delete_elem+0x1b2/0x520
[  597.904942][    C1]  ? read_lock_is_recursive+0x10/0x10
[  597.904964][    C1]  ? rcu_is_watching+0x11/0xa0
[  597.904983][    C1]  ? look_up_lock_class+0x71/0x110
[  597.905006][    C1]  ? verify_lock_unused+0x18/0x140
[  597.905032][    C1]  _raw_spin_lock_irqsave+0xb0/0x100
[  597.905052][    C1]  ? htab_map_delete_elem+0x1b2/0x520
[  597.905071][    C1]  ? _raw_spin_lock+0x40/0x40
[  597.905092][    C1]  ? htab_map_hash+0x315/0x6d0
[  597.905112][    C1]  htab_map_delete_elem+0x1b2/0x520
[  597.905136][    C1]  bpf_prog_2c29ac5cdc6b1842+0x3a/0xd08
[  597.905154][    C1]  bpf_overflow_handler+0x1c2/0x4a0
[  597.905177][    C1]  ? perf_get_page_size+0x430/0x430
[  597.905198][    C1]  ? perf_event_switch_output+0x730/0x730
[  597.905225][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  597.905248][    C1]  __perf_event_overflow+0x364/0x530
[  597.905272][    C1]  perf_bp_event+0x276/0x320
[  597.905295][    C1]  ? perf_event_free_bpf_prog+0x110/0x110
[  597.905316][    C1]  ? perf_trace_lock+0xe4/0x390
[  597.905351][    C1]  ? rcu_lock_acquire+0x9/0x30
[  597.905373][    C1]  ? read_lock_is_recursive+0x10/0x10
[  597.905400][    C1]  hw_breakpoint_exceptions_notify+0x152/0x470
[  597.905424][    C1]  atomic_notifier_call_chain+0x15d/0x280
[  597.905449][    C1]  notify_die+0x141/0x1a0
[  597.905471][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  597.905496][    C1]  ? exc_debug+0x6e/0x130
[  597.905516][    C1]  ? trace_hardirqs_off_finish+0x57/0x1f0
[  597.905540][    C1]  notify_debug+0x20/0x30
[  597.905561][    C1]  exc_debug+0xcf/0x130
[  597.905583][    C1]  asm_exc_debug+0x1a/0x40
[  597.905602][    C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  597.905627][    C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8
[  597.905645][    C1] RSP: 0018:ffffc90003d7f7f8 EFLAGS: 00050206
[  597.905662][    C1] RAX: ffffffff83e22601 RBX: 0000000000033fe0 RCX: 0000000000033ce0
[  597.905677][    C1] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc90003dc1300
[  597.905692][    C1] RBP: ffffc90003d7f950 R08: ffffc90003df4fdf R09: 1ffff920007be9fb
[  597.905708][    C1] R10: dffffc0000000000 R11: fffff520007be9fc R12: ffffc90003dc1000
[  597.905723][    C1] R13: dffffc00000000ff R14: 0000200000000040 R15: 0000000000000000
[  597.905741][    C1]  ? _copy_from_iter+0x241/0x1170
[  597.905768][    C1]  </#DB>
[  597.905774][    C1]  <TASK>
[  597.905780][    C1]  _copy_from_iter+0x318/0x1170
[  597.905808][    C1]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  597.905829][    C1]  ? __build_skb+0x26/0x2e0
[  597.905849][    C1]  ? rcu_is_watching+0x11/0xa0
[  597.905868][    C1]  ? __build_skb+0x26/0x2e0
[  597.905887][    C1]  ? kmem_cache_alloc+0x133/0x290
[  597.905907][    C1]  ? __virt_addr_valid+0xbd/0x470
[  597.905933][    C1]  ? __phys_addr_symbol+0x2b/0x70
[  597.905952][    C1]  ? __check_object_size+0x30c/0x410
[  597.905976][    C1]  netlink_sendmsg+0x758/0xbe0
[  597.905999][    C1]  ? netlink_getsockopt+0x570/0x570
[  597.906020][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  597.906042][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  597.906064][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  597.906085][    C1]  ? netlink_getsockopt+0x570/0x570
[  597.906104][    C1]  ____sys_sendmsg+0x5b7/0x8f0
[  597.906131][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  597.906158][    C1]  ? import_iovec+0x6f/0xa0
[  597.906182][    C1]  ___sys_sendmsg+0x236/0x2e0
[  597.906211][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  597.906237][    C1]  ? percpu_counter_add_batch+0x13b/0x160
[  597.906273][    C1]  __se_sys_sendmsg+0x1af/0x290
[  597.906296][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  597.906317][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  597.906347][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  597.906370][    C1]  do_syscall_64+0x4c/0xa0
[  597.906389][    C1]  ? clear_bhb_loop+0x30/0x80
[  597.906408][    C1]  ? clear_bhb_loop+0x30/0x80
[  597.906428][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  597.906449][    C1] RIP: 0033:0x7f36ed013e59
[  597.906465][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.906482][    C1] RSP: 002b:00007f36eb26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  597.906502][    C1] RAX: ffffffffffffffda RBX: 00007f36ed28cfa0 RCX: 00007f36ed013e59
[  597.906529][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  597.906542][    C1] RBP: 00007f36ed0a9d6f R08: 0000000000000000 R09: 0000000000000000
[  597.906553][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  597.906565][    C1] R13: 00007f36ed28d038 R14: 00007f36ed28cfa0 R15: 00007fff062a0888
[  597.906587][    C1]  </TASK>
[  598.688387][T18420] __nla_validate_parse: 7 callbacks suppressed
[  598.688405][T18420] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4777'.
[  598.745921][T18420] netlink: get zone limit has 8 unknown bytes