last executing test programs:

2.332728352s ago: executing program 3 (id=2628):
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x59, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000bd, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x2000000000000045, &(0x7f0000000a40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000e95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x6, 0x3, 0x0, 0x0, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x1, 0x8, 0x6, 0x50}, @jmp={0x5, 0x0, 0x3, 0x7, 0x5, 0x2, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4914, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x0, 0x9, 0x5, 0x10, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x80000000, 0x73, &(0x7f0000000280)=""/115, 0x40f00, 0x59, '\x00', r2, 0x18, r4, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x5, 0x6, 0x5}, 0x10, 0x40, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r5, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x6}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pimreg\x00', @random="616834efb52c"})
r6 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x114, 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000007000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

1.951796941s ago: executing program 3 (id=2631):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0)

1.727012966s ago: executing program 0 (id=2633):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b40011000001", 0x2c}], 0x1}, 0x0)

1.726443366s ago: executing program 3 (id=2634):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffaf}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xf2, &(0x7f0000000280)=""/242, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x1, 0x6}, {0x1, 0x1, 0x3, 0x9}, {0x2, 0x2, 0xf}, {0x1, 0x3, 0x8, 0x8}, {0x5, 0x3, 0x10, 0x7}], 0x10, 0x6}, 0x94)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x80020000}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000800000000000000000000000000000000000e6ae00000000"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e2978296329cdae664315115bd5dc53136264f16bc9e986a0e5dceec59de7e11990f8a302c2e6213818896e645050f5ce1b2ca9d22974a534e44de0f4f8bf31a58aa3459b182446beffb012fe653e8f25231ec1dbcae747a0382ef6fe4cfebe503e66db579db5d1efc0320590830f84ace48ffd45830fa5bdd8b2bc388e531228a82c04592f02bfe7a0fd0a1dd14ecb46820661cb5bc7c9b260f2f542438cec3eafe5f22ec92201d0c60d8f8cba729", 0xaf}], 0x1}, 0x81)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, &(0x7f0000000100), 0x0}, 0x20)
syz_clone(0x1000880, &(0x7f0000000540)="7276e594ec72f3bf73f0a96fff495b21c20a9bb55a1691a160a540a78d796e2be1d3acbf73e2dabadfed4bbdb79c8311702dd58f8cb699bc3e4c783f4ad7788eb39af8e48918e4352ca977fdfc5d87ffce147eb4f7046de4ebecc3f85fba67145f16848b21cea8565b4b98593fad251adf83069810a17dfa81d9ea3e7bf0fa9dad554708d5c66970396c37aed88e133c96e5f5c6c60784aff85f4db5c63abad374eba29ee76045d7d2fe3d26", 0xac, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5a2c0e2e0c4d73b5f0962d844becbcd6f2f955559e5eca8d4c8b6d9c36c99c3088718b93dfca529ec7694de7ff45b117e13b816b1d4f69a8912d64b0fbbe711b496bccf622ffea8c6439f2c66242c229f2d73d89df4a6a7545c3e33013e023b2b87f528f9d5bf806ab873b5b8115a65fa31ae4299878730ab374ee0928591ae7ad393c289d79437fa00cedb4a87dab11182ea6fe666e1f967d79d1f51de652d3b8d8a80bc86afe139752deea")
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3a6, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r8 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x0, 0x27, 0x0, 0xc)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

1.456090413s ago: executing program 1 (id=2635):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000004000dc8b850f238466ccfe807a000000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6873e747a7d941b56d12f6ba03ffb406f519394b9783e78cc0dd80cf7", 0x53}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc)
socket$kcm(0xa, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r6, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xffffff19}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.441615514s ago: executing program 0 (id=2636):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfff8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.221417369s ago: executing program 1 (id=2637):
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x3fef8000}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c25d0000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000004380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x0, &(0x7f00000002c0)="0000ffffffffa000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0)
close(r1)

1.143488251s ago: executing program 3 (id=2638):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x2)
socket$kcm(0x23, 0x5, 0x0) (async)
r2 = socket$kcm(0x23, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB='b\x00\x00:* rm\x00'], 0x9) (async)
write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB='b\x00\x00:* rm\x00'], 0x9)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008", @ANYRES64=r6, @ANYRES8=r6], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
socket$kcm(0x2, 0x6, 0x0) (async)
r8 = socket$kcm(0x2, 0x6, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xa1}], 0x1}, 0x8000) (async)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xa1}], 0x1}, 0x8000)
setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28008840)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

1.143145591s ago: executing program 2 (id=2639):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value=0xb000000}, 0x20)

1.142945311s ago: executing program 0 (id=2640):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b3a25fe80000060000000dc8b850f238466ccfe807a000000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6", 0x37}], 0x1}, 0x0)

1.041654454s ago: executing program 0 (id=2641):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x61, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x6}, 0x94)

966.418496ms ago: executing program 2 (id=2642):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000040004851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

851.764878ms ago: executing program 1 (id=2643):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd", 0x1a}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d0000000000000000030000000000000003000000040020000300000000000000000000020000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28)

840.144839ms ago: executing program 2 (id=2644):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b40011000001", 0x2c}], 0x1}, 0x0)

765.117481ms ago: executing program 1 (id=2645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)=0x20000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0]}, 0x94)

615.219625ms ago: executing program 2 (id=2646):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000004000dc8b850f238466ccfe807a000000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6873e747a7d941b56d12f6ba03ffb406f519394b9783e78cc0dd80cf7", 0x53}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc)
socket$kcm(0xa, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r6, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xffffff19}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

507.774687ms ago: executing program 1 (id=2647):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

403.45607ms ago: executing program 2 (id=2648):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000006000dc8b850f238466ccfe807a000000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6873e747a7d941b56d12f6ba03ffb406f519394b9783e78cc0dd80cf7", 0x53}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc)
socket$kcm(0xa, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r6, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xffffff19}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

318.612082ms ago: executing program 0 (id=2649):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000011c0)="b543b9055562ecba87aa1085ff5280880391d03f9126cc8a7b5bbd8677a5f02c2e95c272fde936e8404b320b8ef55adfedf262ecd0866f5572b58cad57b48a711b56311ac1bdc3a98954a4c9d266", 0x4e}, {&(0x7f0000001240)="45b4a2f8731434f4c7a8f36b045ebf8e5d5e773c041fbb9053bda23135c96d87b73e12563d57bcf5d023d90a1a03e4078f80bec872b30a7dc56ab4034135f93b22875a0b7680e8b96efc30050fa4d6aa820ae9d85813416b90d6e20f92c7d35c6e21acb1208151176abe083d30af20bfb195e258990d138d70961a36b2bc29c1dc4bd2359d1f2a64a3470673d248a79061b8b7e0d41bd4945e722c3357279d6c332b02aa6b79dec0bd7eb3c9ee15512d93d47721d3d4a9aef7a9e033406d6eb60ae19f241d70acd03c74a4", 0xcb}, {&(0x7f0000001340)="6cdb3a7ea092b589f00aed604671cc5f0537e1be26869144d9d054ce2c66715033346c1b28784d12d8228eb463b643af53ad5f36422e12", 0x37}, {&(0x7f0000001380)="8d14354578bcdcd3f320ca32259c5c9f4b7259d252fa3557251398a9f9c8e8d1de5a74e1589b602842c0b2679c81d686b7e0d24d38fe8c033b1d9819928ae12789222babcb50f342d48f108a6e6da41b8da869a8e38537d7f28232e9479512969ced7d662c11fa9bc2cf6da5126405c90d", 0x71}, {&(0x7f0000001400)="3949645a4260ac44bdc82fd4a0e37d15b09a940b4f213e8dadbbeefe1be3e479b85b0244828038a5e8869c04e2bc42668e0296547c12ff3cd170dd9000a7a7fb8ba1086ac83baeb6deb21632d755e1787aa9be083af2a884496dd54bf212e340468997deda865878e30de0dac96924e1bb7e747fa87a132ea45297dbfb03fdaa5dd2f25b78e8453e69f84e114a65e4ae6791659666658ba51acd8a7082131388c501c06da433b1f0ffaf17b85cd1eaffc27f28cb1a981181e0e1093304e9e86a3b3788528a2f9138d6f2f38b13653787d8a919e33455df55dd3b1435cc53f49199401c38f67787849ea3616cc481146d06", 0xf1}, {&(0x7f0000001500)="366abe3608032566543e1eb3309a98b1dad525aafdce5ad6ede65e20f41e50f4db01291ef8c845f43f54e6bf4baad6b692aa2db50e96745dfa4ce8f41e8e05844e6c5990b829f22ddbc4ccd52e625e047628c320bd2388484f08e5d8abac60b9ffab9447c4f24087c8f18c9335a36b9b540d2846a474d17893f885b688ed19f89792662d93b7a23f4df69d7b0959eaa8abaa247e", 0x94}, {&(0x7f00000015c0)="5559aeccecc0ae00862ff009181213a745bb2a", 0x13}, {&(0x7f0000001600)="d5486f770689a915c79dc6e4264ae7bf31dcfaec44c5677aefba04", 0x1b}], 0x8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x11e8}, 0xc800) (async, rerun: 64)
r1 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xc2, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="04000100000100000000000000000000d3", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02000000030000008100"/28], 0x50) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000002a80), 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002ac0)={0x0, 0x3, 0x8}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b80)=@bpf_tracing={0x1a, 0x15, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb}}, @jmp={0x5, 0x1, 0x0, 0xb, 0x3, 0x1, 0xfffffffffffffffc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x4, 0x4, 0x1, 0xcd2a}, @ldst={0x1, 0x3, 0x6, 0xa, 0x13, 0x20}, @call={0x85, 0x0, 0x0, 0x89}, @generic={0xfb, 0xa, 0x2, 0x2ef7, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000029c0)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x20, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002a00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002a40)={0x1, 0xd, 0x1, 0xffffff7f}, 0x10, 0xc19, r4, 0x4, &(0x7f0000002b00)=[r5, r6], &(0x7f0000002b40)=[{0x5, 0x3, 0x6, 0x3}, {0x0, 0x4, 0x8, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x1, 0xa, 0x7}], 0x10, 0x7}, 0x94)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x2000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x43, 0x300}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50, 0x2000}, 0x0)

223.676734ms ago: executing program 3 (id=2650):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000800)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000ffb000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000b61e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

157.398876ms ago: executing program 1 (id=2651):
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf05000000bf00001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x59, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000bd, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x2000000000000045, &(0x7f0000000a40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000e95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x6, 0x3, 0x0, 0x0, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x1, 0x8, 0x6, 0x50}, @jmp={0x5, 0x0, 0x3, 0x7, 0x5, 0x2, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4914, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x0, 0x9, 0x5, 0x10, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x80000000, 0x73, &(0x7f0000000280)=""/115, 0x40f00, 0x59, '\x00', r2, 0x18, r4, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x5, 0x6, 0x5}, 0x10, 0x40, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r5, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x6}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pimreg\x00', @random="616834efb52c"})
r6 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x114, 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000007000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

121.481746ms ago: executing program 0 (id=2652):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x1, 0x2, 0x2}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x90)

35.538029ms ago: executing program 2 (id=2653):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x891e, &(0x7f0000000040)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000200)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000080), &(0x7f0000000280)='%pK    \x00'}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500050002008178a8001500030001400200000901ac0400", 0x40}], 0x1}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2100000000f3ea19030e00000900000012100600", @ANYRES32, @ANYBLOB="3a1a00"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000010000000300"/28], 0x50)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000780))
ioctl$TUNGETFEATURES(r10, 0x5452, &(0x7f00000013c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000004000000000200000500000000100000", @ANYRES32=r10, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0200000000180100020400000500"/28], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)

0s ago: executing program 3 (id=2654):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b40011000001", 0x2c}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

7979]  ? import_iovec+0x73/0xa0
[  226.114903][ T7979]  ___sys_sendmsg+0x2a6/0x360
[  226.121154][ T7979]  ? get_pid_task+0x20/0x1e0
[  226.127100][ T7979]  ? __sys_sendmsg+0x2b0/0x2b0
[  226.133312][ T7979]  ? __lock_acquire+0x7d80/0x7d80
[  226.139852][ T7979]  __se_sys_sendmsg+0x1d0/0x2c0
[  226.148239][ T7979]  ? __x64_sys_sendmsg+0x80/0x80
[  226.155410][ T7979]  ? lockdep_hardirqs_on+0x98/0x150
[  226.163733][ T7979]  do_syscall_64+0x55/0xb0
[  226.171448][ T7979]  ? clear_bhb_loop+0x40/0x90
[  226.177885][ T7979]  ? clear_bhb_loop+0x40/0x90
[  226.183250][ T7979]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.189874][ T7979] RIP: 0033:0x7fe41339e0d9
[  226.195066][ T7979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.219745][ T7979] RSP: 002b:00007fe414294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.229761][ T7979] RAX: ffffffffffffffda RBX: 00007fe413625fa0 RCX: 00007fe41339e0d9
[  226.239421][ T7979] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  226.248898][ T7979] RBP: 00007fe414294090 R08: 0000000000000000 R09: 0000000000000000
[  226.258426][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.267923][ T7979] R13: 00007fe413626038 R14: 00007fe413625fa0 R15: 00007ffd05980f58
[  226.277878][ T7979]  </TASK>
[  226.511537][ T7986] netlink: 'syz.2.668': attribute type 9 has an invalid length.
[  226.525040][ T7986] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.668'.
[  226.543907][ T7990] netlink: 14 bytes leftover after parsing attributes in process `syz.2.668'.
[  226.659958][ T7990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.682023][ T7990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.703766][ T7990] bond0 (unregistering): Released all slaves
[  226.718040][ T7988] netlink: 'syz.0.669': attribute type 10 has an invalid length.
[  226.736480][ T7988] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  226.787078][ T7991] netlink: 'syz.3.670': attribute type 10 has an invalid length.
[  226.812207][ T7991] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  227.344029][ T8015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.272071][ T8011] netlink: 'syz.1.676': attribute type 2 has an invalid length.
[  229.365863][ T8021] syzkaller0: entered promiscuous mode
[  229.379582][ T8021] syzkaller0: entered allmulticast mode
[  229.824393][ T8038] netlink: 'syz.3.683': attribute type 9 has an invalid length.
[  229.850370][ T8038] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.683'.
[  231.553526][ T8028] 
@0�: renamed from bridge_slave_0 (while UP)
[  231.571445][ T8042] netlink: 14 bytes leftover after parsing attributes in process `syz.3.683'.
[  231.705265][ T8042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.750941][ T8042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.788208][ T8042] bond0 (unregistering): Released all slaves
[  231.928948][ T8048] netlink: 'syz.2.685': attribute type 10 has an invalid length.
[  232.103685][ T8054] netlink: 'syz.3.688': attribute type 10 has an invalid length.
[  233.589479][ T8078] netlink: 'syz.1.698': attribute type 9 has an invalid length.
[  233.619634][ T8078] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.698'.
[  235.322306][ T8080] netlink: 14 bytes leftover after parsing attributes in process `syz.1.698'.
[  235.363283][ T8080] bridge0: port 3(bond0) entered disabled state
[  235.508376][ T8080] bond0 (unregistering): left allmulticast mode
[  235.533130][ T8080] bond_slave_0: left allmulticast mode
[  235.541586][ T8080] bond_slave_1: left allmulticast mode
[  235.560166][ T8080] bridge0: port 3(bond0) entered disabled state
[  235.589204][ T8080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.635806][ T8080] bond_slave_0: left promiscuous mode
[  235.659046][ T8080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.676144][ T8080] bond_slave_1: left promiscuous mode
[  235.702956][ T8080] bond0 (unregistering): Released all slaves
[  235.721009][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.422119][ T8112] netlink: 'syz.2.712': attribute type 10 has an invalid length.
[  237.055071][ T8127] netlink: 'syz.0.715': attribute type 9 has an invalid length.
[  237.066442][ T8127] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.715'.
[  237.133534][ T8127] netlink: 14 bytes leftover after parsing attributes in process `syz.0.715'.
[  237.885216][ T8127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.906437][ T8127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.923279][ T8127] bond0 (unregistering): Released all slaves
[  238.251840][ T8141] netlink: 'syz.0.723': attribute type 10 has an invalid length.
[  238.272311][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.770807][ T8178] netlink: 'syz.1.736': attribute type 10 has an invalid length.
[  240.248053][ T8192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.160452][ T8210] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.750'.
[  241.442982][ T8213] netlink: 'syz.2.751': attribute type 10 has an invalid length.
[  241.782569][ T8223] netlink: 'syz.0.754': attribute type 11 has an invalid length.
[  241.825336][ T8223] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.754'.
[  242.920597][ T8249] netlink: 'syz.0.765': attribute type 10 has an invalid length.
[  243.059319][ T8253] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.767'.
[  243.102003][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'.
[  243.145797][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.767'.
[  244.718949][ T8279] netlink: 'syz.2.777': attribute type 10 has an invalid length.
[  244.913981][ T8288] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.780'.
[  245.378266][ T8301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.682216][ T8309] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.788'.
[  245.869161][ T8314] netlink: 'syz.0.790': attribute type 10 has an invalid length.
[  246.529416][ T8331] netlink: 'syz.0.795': attribute type 10 has an invalid length.
[  246.557407][ T8331] netlink: 55 bytes leftover after parsing attributes in process `syz.0.795'.
[  247.008317][ T8338] netlink: 'syz.1.797': attribute type 10 has an invalid length.
[  247.573936][ T8351] netlink: 128 bytes leftover after parsing attributes in process `syz.0.800'.
[  247.623882][ T8351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.646150][ T8350] netlink: 168 bytes leftover after parsing attributes in process `syz.2.801'.
[  247.690620][ T8351] syz.0.800 (8351) used greatest stack depth: 19352 bytes left
[  250.001568][ T8358] netlink: 'syz.0.803': attribute type 10 has an invalid length.
[  250.367241][ T8372] netlink: 'syz.0.807': attribute type 10 has an invalid length.
[  250.480417][ T8374] netlink: 'syz.3.808': attribute type 3 has an invalid length.
[  250.834866][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.814'.
[  250.848128][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.814'.
[  250.862661][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.814'.
[  250.993370][ T8391] netlink: 'syz.2.813': attribute type 1 has an invalid length.
[  251.045223][ T8391] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.813'.
[  251.273679][ T8395] netlink: 'syz.3.815': attribute type 10 has an invalid length.
[  251.715470][ T8408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.854824][ T8410] netlink: 'syz.1.820': attribute type 3 has an invalid length.
[  252.031257][ T8414] netlink: 'syz.2.822': attribute type 10 has an invalid length.
[  252.968167][ T8439] netlink: 'syz.3.836': attribute type 10 has an invalid length.
[  252.982614][ T8440] netlink: 'syz.0.835': attribute type 3 has an invalid length.
[  253.247746][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'.
[  253.265967][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'.
[  253.306323][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'.
[  254.358305][ T8469] netlink: 'syz.2.848': attribute type 2 has an invalid length.
[  254.408452][ T8469] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.848'.
[  254.482017][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.943622][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.952002][ T8489] bridge0: port 1(
c
@0�) entered disabled state
[  254.983053][ T8489] bridge0: entered allmulticast mode
[  255.023379][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.032188][ T8494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.043166][ T8494] bridge0: port 1(
c
@0�) entered blocking state
[  255.052841][ T8494] bridge0: port 1(
c
@0�) entered forwarding state
[  255.067696][ T8494] bridge0: entered promiscuous mode
[  255.108767][ T8493] validate_nla: 2 callbacks suppressed
[  255.108803][ T8493] netlink: 'syz.3.858': attribute type 1 has an invalid length.
[  255.146581][ T8493] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.858'.
[  255.306902][ T8499] netlink: 'syz.0.860': attribute type 10 has an invalid length.
[  256.206514][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.225440][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  257.021770][ T8528] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.870'.
[  257.051555][ T8528] netlink: 'syz.1.870': attribute type 1 has an invalid length.
[  257.119487][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.164125][ T8535] bridge0: port 3(ip6gretap0) entered blocking state
[  257.255428][ T8535] bridge0: port 3(ip6gretap0) entered disabled state
[  257.321825][ T8535] ip6gretap0: entered allmulticast mode
[  257.452866][ T8535] ip6gretap0: entered promiscuous mode
[  257.537299][ T8535] bridge0: port 3(ip6gretap0) entered blocking state
[  257.546028][ T8535] bridge0: port 3(ip6gretap0) entered forwarding state
[  257.766330][ T8528] ip6gretap0: left allmulticast mode
[  257.771834][ T8528] ip6gretap0: left promiscuous mode
[  257.903622][ T8528] bridge0: port 3(ip6gretap0) entered disabled state
[  258.031492][ T8538] netlink: 'syz.0.874': attribute type 10 has an invalid length.
[  259.258641][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.347371][ T8576] netlink: 'syz.3.888': attribute type 10 has an invalid length.
[  260.389847][ T8602] netlink: 'syz.0.900': attribute type 10 has an invalid length.
[  260.868924][ T8613] netlink: 'syz.0.904': attribute type 10 has an invalid length.
[  261.932406][ T8639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.623410][ T8642] netlink: 'syz.1.912': attribute type 10 has an invalid length.
[  262.810536][ T8646] netlink: 'syz.3.914': attribute type 10 has an invalid length.
[  263.329061][ T8665] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.921'.
[  263.765605][ T8675] netlink: 'syz.3.925': attribute type 10 has an invalid length.
[  263.878450][ T8679] netlink: 'syz.1.928': attribute type 10 has an invalid length.
[  264.114304][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.470687][ T8693] raw_sendmsg: syz.2.935 forgot to set AF_INET. Fix it!
[  265.043425][ T8706] netlink: 'syz.0.938': attribute type 10 has an invalid length.
[  265.156546][ T8711] netlink: 'syz.2.941': attribute type 10 has an invalid length.
[  265.421643][ T8716] netlink: 'syz.1.943': attribute type 10 has an invalid length.
[  265.716462][ T8721] netlink: 'syz.2.945': attribute type 6 has an invalid length.
[  265.752377][ T8721] netlink: 164 bytes leftover after parsing attributes in process `syz.2.945'.
[  266.698613][ T8742] netlink: 'syz.3.953': attribute type 10 has an invalid length.
[  267.267304][ T8745] netlink: 'syz.0.952': attribute type 10 has an invalid length.
[  267.355683][ T8742] syz.3.953 (8742) used greatest stack depth: 18536 bytes left
[  267.518657][ T8749] netlink: 'syz.2.955': attribute type 21 has an invalid length.
[  267.555393][ T8749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.955'.
[  267.818468][ T8761] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.959'.
[  267.831919][ T8763] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.959'.
[  268.107094][ T8769] netlink: 'syz.0.961': attribute type 10 has an invalid length.
[  268.149962][ T8769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.961'.
[  268.180310][ T8769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.716097][ T8790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.492087][ T8816] netlink: 'syz.3.978': attribute type 10 has an invalid length.
[  271.917350][ T8824] FAULT_INJECTION: forcing a failure.
[  271.917350][ T8824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.010203][ T8824] CPU: 1 PID: 8824 Comm: syz.3.981 Not tainted syzkaller #0
[  272.020017][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  272.031843][ T8824] Call Trace:
[  272.035466][ T8824]  <TASK>
[  272.040164][ T8824]  dump_stack_lvl+0x18c/0x250
[  272.046461][ T8824]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  272.056641][ T8824]  ? show_regs_print_info+0x20/0x20
[  272.064563][ T8824]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  272.072279][ T8824]  should_fail_ex+0x394/0x4c0
[  272.078187][ T8824]  _copy_from_user+0x2f/0xe0
[  272.084176][ T8824]  __copy_msghdr+0x388/0x560
[  272.089479][ T8824]  ___sys_sendmsg+0x214/0x360
[  272.095182][ T8824]  ? get_pid_task+0x20/0x1e0
[  272.100608][ T8824]  ? __sys_sendmsg+0x2b0/0x2b0
[  272.105907][ T8824]  ? __lock_acquire+0x7d80/0x7d80
[  272.111526][ T8824]  __se_sys_sendmsg+0x1d0/0x2c0
[  272.118171][ T8824]  ? __x64_sys_sendmsg+0x80/0x80
[  272.124046][ T8824]  ? lockdep_hardirqs_on+0x98/0x150
[  272.130435][ T8824]  do_syscall_64+0x55/0xb0
[  272.137406][ T8824]  ? clear_bhb_loop+0x40/0x90
[  272.143452][ T8824]  ? clear_bhb_loop+0x40/0x90
[  272.149153][ T8824]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.157120][ T8824] RIP: 0033:0x7f2b98b9e0d9
[  272.161845][ T8824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.185408][ T8824] RSP: 002b:00007f2b99995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.195091][ T8824] RAX: ffffffffffffffda RBX: 00007f2b98e25fa0 RCX: 00007f2b98b9e0d9
[  272.203535][ T8824] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  272.213533][ T8824] RBP: 00007f2b99995090 R08: 0000000000000000 R09: 0000000000000000
[  272.226458][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.236379][ T8824] R13: 00007f2b98e26038 R14: 00007f2b98e25fa0 R15: 00007ffe0a636798
[  272.246334][ T8824]  </TASK>
[  273.087787][ T8848] netlink: 'syz.0.988': attribute type 10 has an invalid length.
[  273.107567][ T8846] netlink: 'syz.2.989': attribute type 10 has an invalid length.
[  273.487980][ T8855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.078178][ T8876] netlink: 'syz.2.1000': attribute type 10 has an invalid length.
[  274.107640][ T8875] netlink: 'syz.3.999': attribute type 10 has an invalid length.
[  274.495541][  T175] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  274.892264][ T8904] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  274.925545][ T8904] netlink: 'syz.0.1013': attribute type 3 has an invalid length.
[  274.942925][ T8904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1013'.
[  274.982464][ T8906] netlink: 'syz.3.1014': attribute type 10 has an invalid length.
[  275.056453][ T8909] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  276.003792][ T8929] netlink: 'syz.1.1024': attribute type 10 has an invalid length.
[  277.221545][ T8961] validate_nla: 2 callbacks suppressed
[  277.221582][ T8961] netlink: 'syz.0.1036': attribute type 10 has an invalid length.
[  277.306256][ T8963] netlink: 'syz.1.1037': attribute type 10 has an invalid length.
[  277.517332][ T8968] netlink: 'syz.3.1039': attribute type 10 has an invalid length.
[  278.547997][ T8993] netlink: 'syz.1.1048': attribute type 10 has an invalid length.
[  278.899695][ T8999] netlink: 'syz.2.1051': attribute type 10 has an invalid length.
[  279.048873][ T9001] netlink: 'syz.1.1052': attribute type 10 has an invalid length.
[  279.511709][ T9013] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1055'.
[  279.546282][ T9013] netlink: 'syz.1.1055': attribute type 6 has an invalid length.
[  279.601949][ T9015] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  279.903708][ T9023] netlink: 'syz.0.1060': attribute type 10 has an invalid length.
[  279.984347][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.003184][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.050010][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.066371][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.246622][ T9030] netlink: 'syz.3.1064': attribute type 10 has an invalid length.
[  280.962029][ T9059] netlink: 'syz.3.1072': attribute type 2 has an invalid length.
[  281.008299][ T9059] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1072'.
[  282.170932][ T9093] FAULT_INJECTION: forcing a failure.
[  282.170932][ T9093] name failslab, interval 1, probability 0, space 0, times 0
[  282.222732][ T9093] CPU: 1 PID: 9093 Comm: syz.3.1084 Not tainted syzkaller #0
[  282.231660][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  282.242548][ T9093] Call Trace:
[  282.247604][ T9093]  <TASK>
[  282.250874][ T9093]  dump_stack_lvl+0x18c/0x250
[  282.257044][ T9093]  ? show_regs_print_info+0x20/0x20
[  282.270399][ T9093]  ? load_image+0x420/0x420
[  282.276789][ T9093]  ? __might_sleep+0xe0/0xe0
[  282.282779][ T9093]  ? __lock_acquire+0x7d80/0x7d80
[  282.288443][ T9093]  ? __lock_acquire+0x1262/0x7d80
[  282.297155][ T9093]  should_fail_ex+0x394/0x4c0
[  282.303375][ T9093]  should_failslab+0x9/0x20
[  282.308846][ T9093]  slab_pre_alloc_hook+0x59/0x300
[  282.314978][ T9093]  kmem_cache_alloc_node+0x5e/0x310
[  282.322156][ T9093]  ? lock_chain_count+0x20/0x20
[  282.328260][ T9093]  ? __alloc_skb+0x103/0x2c0
[  282.334155][ T9093]  __alloc_skb+0x103/0x2c0
[  282.339378][ T9093]  alloc_skb_with_frags+0xcd/0x7a0
[  282.346154][ T9093]  sock_alloc_send_pskb+0x883/0x9a0
[  282.351777][ T9093]  ? sock_kzfree_s+0x50/0x50
[  282.357985][ T9093]  ? ip6_dst_lookup_tail+0xd65/0x1660
[  282.364976][ T9093]  rawv6_send_hdrinc+0x2fc/0x1660
[  282.371860][ T9093]  ? ip6_dst_hoplimit+0x96/0x350
[  282.378760][ T9093]  ? txopt_get+0x3f0/0x3f0
[  282.384535][ T9093]  ? ip6_dst_hoplimit+0x96/0x350
[  282.390560][ T9093]  ? ip6_dst_hoplimit+0x96/0x350
[  282.396097][ T9093]  rawv6_sendmsg+0x128f/0x1740
[  282.402337][ T9093]  ? compat_rawv6_ioctl+0x70/0x70
[  282.408023][ T9093]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  282.415476][ T9093]  ? aa_sock_msg_perm+0x94/0x150
[  282.420891][ T9093]  ? inet_sendmsg+0x7e/0x2a0
[  282.426396][ T9093]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  282.432131][ T9093]  ? inet_send_prepare+0x250/0x250
[  282.438614][ T9093]  ____sys_sendmsg+0x61b/0x980
[  282.446805][ T9093]  ? __asan_memset+0x22/0x40
[  282.453258][ T9093]  ? __sys_sendmsg_sock+0x30/0x30
[  282.460069][ T9093]  ? __import_iovec+0x5f2/0x850
[  282.466102][ T9093]  ? import_iovec+0x73/0xa0
[  282.473045][ T9093]  ___sys_sendmsg+0x2a6/0x360
[  282.478646][ T9093]  ? __sys_sendmsg+0x2b0/0x2b0
[  282.484227][ T9093]  ? __lock_acquire+0x7d80/0x7d80
[  282.490347][ T9093]  __se_sys_sendmsg+0x1d0/0x2c0
[  282.495497][ T9093]  ? __x64_sys_sendmsg+0x80/0x80
[  282.502255][ T9093]  ? lockdep_hardirqs_on+0x98/0x150
[  282.508049][ T9093]  do_syscall_64+0x55/0xb0
[  282.513792][ T9093]  ? clear_bhb_loop+0x40/0x90
[  282.519770][ T9093]  ? clear_bhb_loop+0x40/0x90
[  282.525535][ T9093]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  282.532630][ T9093] RIP: 0033:0x7f2b98b9e0d9
[  282.538895][ T9093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.563667][ T9093] RSP: 002b:00007f2b99995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.573080][ T9093] RAX: ffffffffffffffda RBX: 00007f2b98e25fa0 RCX: 00007f2b98b9e0d9
[  282.582914][ T9093] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  282.593105][ T9093] RBP: 00007f2b99995090 R08: 0000000000000000 R09: 0000000000000000
[  282.602696][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.612531][ T9093] R13: 00007f2b98e26038 R14: 00007f2b98e25fa0 R15: 00007ffe0a636798
[  282.620936][ T9093]  </TASK>
[  282.704019][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1086'.
[  282.953874][ T9095] validate_nla: 3 callbacks suppressed
[  282.953891][ T9095] netlink: 'syz.1.1085': attribute type 10 has an invalid length.
[  283.012729][ T9106] netlink: 'syz.2.1088': attribute type 10 has an invalid length.
[  283.668833][ T9120] netlink: 'syz.2.1091': attribute type 10 has an invalid length.
[  283.696106][ T9121] netlink: 'syz.1.1099': attribute type 10 has an invalid length.
[  284.149777][ T9132] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1095'.
[  284.199828][ T9132] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1095'.
[  284.401781][ T9136] netlink: 'syz.0.1098': attribute type 10 has an invalid length.
[  284.928513][ T9153] netlink: 'syz.2.1104': attribute type 10 has an invalid length.
[  285.234965][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.285428][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.444340][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.526807][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.739460][ T9176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.882106][ T9172] netlink: 'syz.2.1111': attribute type 10 has an invalid length.
[  286.434031][ T9190] netlink: 'syz.2.1119': attribute type 10 has an invalid length.
[  287.046457][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1120'.
[  287.230146][ T9206] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1125'.
[  287.649475][ T9211] netlink: 'syz.2.1127': attribute type 10 has an invalid length.
[  287.821820][ T9220] netlink: 'syz.0.1130': attribute type 10 has an invalid length.
[  288.444671][ T9235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.763434][ T9246] netlink: 'syz.3.1139': attribute type 10 has an invalid length.
[  288.948076][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1142'.
[  289.167885][ T9253] bridge0: port 1(
c
@0�) entered disabled state
[  289.381986][ T9253] 
@0� (unregistering): left allmulticast mode
[  289.408275][ T9253] 
@0� (unregistering): left promiscuous mode
[  289.447585][ T9253] bridge0: port 1(
c
@0�) entered disabled state
[  289.609728][ T9261] netlink: 'syz.3.1144': attribute type 10 has an invalid length.
[  290.407294][ T9286] netlink: 'syz.3.1153': attribute type 10 has an invalid length.
[  290.660024][ T9292] FAULT_INJECTION: forcing a failure.
[  290.660024][ T9292] name failslab, interval 1, probability 0, space 0, times 0
[  290.687549][ T9292] CPU: 0 PID: 9292 Comm: syz.2.1156 Not tainted syzkaller #0
[  290.696553][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.707121][ T9292] Call Trace:
[  290.713328][ T9292]  <TASK>
[  290.716819][ T9292]  dump_stack_lvl+0x18c/0x250
[  290.722076][ T9292]  ? show_regs_print_info+0x20/0x20
[  290.729640][ T9292]  ? load_image+0x420/0x420
[  290.734490][ T9292]  should_fail_ex+0x394/0x4c0
[  290.739913][ T9292]  should_failslab+0x9/0x20
[  290.745141][ T9292]  slab_pre_alloc_hook+0x59/0x300
[  290.750652][ T9292]  kmem_cache_alloc+0x5a/0x2c0
[  290.755573][ T9292]  ? inet_frag_find+0x91f/0x1f70
[  290.761189][ T9292]  inet_frag_find+0x91f/0x1f70
[  290.766950][ T9292]  ? ip6frag_obj_hashfn+0x20/0x20
[  290.772594][ T9292]  ? inet_frag_find+0x140/0x1f70
[  290.778174][ T9292]  ? inet_frag_destroy_rcu+0xc0/0xc0
[  290.786293][ T9292]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  290.793732][ T9292]  ? nf_frag_pernet+0x23/0x230
[  290.799418][ T9292]  ? nf_frag_pernet+0x23/0x230
[  290.806210][ T9292]  nf_ct_frag6_gather+0x70e/0x1ef0
[  290.812291][ T9292]  ? verify_lock_unused+0x140/0x140
[  290.817734][ T9292]  ? ipv6_defrag+0x3a0/0x3a0
[  290.823505][ T9292]  ? __might_fault+0xc6/0x120
[  290.828525][ T9292]  ipv6_defrag+0x2a9/0x3a0
[  290.832983][ T9292]  ? defrag6_net_exit+0xb0/0xb0
[  290.838219][ T9292]  nf_hook_slow+0xbd/0x200
[  290.843638][ T9292]  ? rawv6_send_hdrinc+0xb76/0x1660
[  290.849383][ T9292]  rawv6_send_hdrinc+0x150e/0x1660
[  290.854921][ T9292]  ? txopt_get+0x3f0/0x3f0
[  290.859690][ T9292]  ? rawv6_push_pending_frames+0x930/0x930
[  290.866166][ T9292]  ? ip6_dst_hoplimit+0x96/0x350
[  290.871318][ T9292]  ? ip6_dst_hoplimit+0x96/0x350
[  290.881616][ T9292]  rawv6_sendmsg+0x128f/0x1740
[  290.889984][ T9292]  ? compat_rawv6_ioctl+0x70/0x70
[  290.896058][ T9292]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  290.903410][ T9292]  ? aa_sock_msg_perm+0x94/0x150
[  290.909647][ T9292]  ? inet_sendmsg+0x7e/0x2a0
[  290.914968][ T9292]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  290.920858][ T9292]  ? inet_send_prepare+0x250/0x250
[  290.926380][ T9292]  ____sys_sendmsg+0x61b/0x980
[  290.931417][ T9292]  ? __asan_memset+0x22/0x40
[  290.936030][ T9292]  ? __sys_sendmsg_sock+0x30/0x30
[  290.941326][ T9292]  ? __import_iovec+0x5f2/0x850
[  290.946474][ T9292]  ? import_iovec+0x73/0xa0
[  290.951011][ T9292]  ___sys_sendmsg+0x2a6/0x360
[  290.956003][ T9292]  ? __sys_sendmsg+0x2b0/0x2b0
[  290.961088][ T9292]  ? __lock_acquire+0x7d80/0x7d80
[  290.966167][ T9292]  __se_sys_sendmsg+0x1d0/0x2c0
[  290.971529][ T9292]  ? __x64_sys_sendmsg+0x80/0x80
[  290.976678][ T9292]  ? lockdep_hardirqs_on+0x98/0x150
[  290.982948][ T9292]  do_syscall_64+0x55/0xb0
[  290.988362][ T9292]  ? clear_bhb_loop+0x40/0x90
[  290.993123][ T9292]  ? clear_bhb_loop+0x40/0x90
[  290.998122][ T9292]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.005090][ T9292] RIP: 0033:0x7f020a79e0d9
[  291.012061][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.035687][ T9292] RSP: 002b:00007f020b5ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.045317][ T9292] RAX: ffffffffffffffda RBX: 00007f020aa25fa0 RCX: 00007f020a79e0d9
[  291.054778][ T9292] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  291.064447][ T9292] RBP: 00007f020b5ed090 R08: 0000000000000000 R09: 0000000000000000
[  291.073584][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.082118][ T9292] R13: 00007f020aa26038 R14: 00007f020aa25fa0 R15: 00007ffc9fc5ad58
[  291.090155][ T9292]  </TASK>
[  291.191195][ T9296] netlink: 'syz.3.1158': attribute type 10 has an invalid length.
[  291.453996][ T9311] netlink: 'syz.0.1162': attribute type 29 has an invalid length.
[  291.501419][ T9311] netlink: 'syz.0.1162': attribute type 29 has an invalid length.
[  291.512063][ T9316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.529638][ T9317] netlink: 'syz.0.1162': attribute type 29 has an invalid length.
[  291.724712][ T9320] netlink: 'syz.1.1166': attribute type 10 has an invalid length.
[  292.269166][ T9344] netlink: 'syz.2.1173': attribute type 10 has an invalid length.
[  292.599455][ T9360] netlink: 'syz.2.1179': attribute type 10 has an invalid length.
[  292.989598][ T9372] FAULT_INJECTION: forcing a failure.
[  292.989598][ T9372] name failslab, interval 1, probability 0, space 0, times 0
[  293.036039][ T9372] CPU: 0 PID: 9372 Comm: syz.1.1185 Not tainted syzkaller #0
[  293.044528][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  293.055897][ T9372] Call Trace:
[  293.060723][ T9372]  <TASK>
[  293.064483][ T9372]  dump_stack_lvl+0x18c/0x250
[  293.069567][ T9372]  ? do_syscall_64+0x55/0xb0
[  293.075307][ T9372]  ? show_regs_print_info+0x20/0x20
[  293.081799][ T9372]  ? load_image+0x420/0x420
[  293.087048][ T9372]  should_fail_ex+0x394/0x4c0
[  293.092987][ T9372]  should_failslab+0x9/0x20
[  293.099993][ T9372]  slab_pre_alloc_hook+0x59/0x300
[  293.105862][ T9372]  kmem_cache_alloc+0x5a/0x2c0
[  293.111886][ T9372]  ? __nf_conntrack_alloc+0x93/0x370
[  293.118133][ T9372]  __nf_conntrack_alloc+0x93/0x370
[  293.123570][ T9372]  init_conntrack+0x166/0xdb0
[  293.129043][ T9372]  ? early_drop+0x7f0/0x7f0
[  293.134436][ T9372]  ? nf_conntrack_find_get+0x670/0x670
[  293.140375][ T9372]  ? __siphash_unaligned+0x25c/0x3d0
[  293.147617][ T9372]  nf_conntrack_in+0xc29/0x15b0
[  293.154095][ T9372]  ? nf_ct_pernet+0x270/0x270
[  293.160220][ T9372]  ? ip6t_do_table+0x1cb/0x1570
[  293.166267][ T9372]  ? ip6t_alloc_initial_table+0x640/0x640
[  293.173126][ T9372]  ? ipv6_defrag+0x2d6/0x3a0
[  293.178279][ T9372]  ? ipv6_conntrack_in+0x20/0x20
[  293.183581][ T9372]  nf_hook_slow+0xbd/0x200
[  293.190027][ T9372]  ? rawv6_send_hdrinc+0xb76/0x1660
[  293.195548][ T9372]  rawv6_send_hdrinc+0x150e/0x1660
[  293.201194][ T9372]  ? txopt_get+0x3f0/0x3f0
[  293.206624][ T9372]  ? rawv6_push_pending_frames+0x930/0x930
[  293.215003][ T9372]  ? ip6_dst_hoplimit+0x96/0x350
[  293.220528][ T9372]  ? ip6_dst_hoplimit+0x96/0x350
[  293.226835][ T9372]  rawv6_sendmsg+0x128f/0x1740
[  293.232382][ T9372]  ? compat_rawv6_ioctl+0x70/0x70
[  293.237879][ T9372]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  293.246360][ T9372]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  293.253601][ T9372]  ? inet_send_prepare+0x250/0x250
[  293.259410][ T9372]  ? inet_sendmsg+0x7e/0x2a0
[  293.265346][ T9372]  ? inet_send_prepare+0x250/0x250
[  293.272246][ T9372]  ____sys_sendmsg+0x61b/0x980
[  293.280459][ T9372]  ? __asan_memset+0x22/0x40
[  293.287556][ T9372]  ? __sys_sendmsg_sock+0x30/0x30
[  293.293157][ T9372]  ? __import_iovec+0x5f2/0x850
[  293.299046][ T9372]  ? import_iovec+0x73/0xa0
[  293.304006][ T9372]  ___sys_sendmsg+0x2a6/0x360
[  293.308742][ T9372]  ? get_pid_task+0x20/0x1e0
[  293.314435][ T9372]  ? __sys_sendmsg+0x2b0/0x2b0
[  293.320738][ T9372]  ? __lock_acquire+0x7d80/0x7d80
[  293.326741][ T9372]  __se_sys_sendmsg+0x1d0/0x2c0
[  293.332350][ T9372]  ? __x64_sys_sendmsg+0x80/0x80
[  293.337888][ T9372]  ? lockdep_hardirqs_on+0x98/0x150
[  293.344263][ T9372]  do_syscall_64+0x55/0xb0
[  293.349070][ T9372]  ? clear_bhb_loop+0x40/0x90
[  293.354498][ T9372]  ? clear_bhb_loop+0x40/0x90
[  293.359481][ T9372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.366466][ T9372] RIP: 0033:0x7f23ff59e0d9
[  293.373151][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.398191][ T9372] RSP: 002b:00007f24003c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.408629][ T9372] RAX: ffffffffffffffda RBX: 00007f23ff825fa0 RCX: 00007f23ff59e0d9
[  293.418215][ T9372] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  293.428787][ T9372] RBP: 00007f24003c6090 R08: 0000000000000000 R09: 0000000000000000
[  293.438004][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.452205][ T9372] R13: 00007f23ff826038 R14: 00007f23ff825fa0 R15: 00007ffd108407c8
[  293.463033][ T9372]  </TASK>
[  293.832439][ T9377] syzkaller0: entered promiscuous mode
[  293.848942][ T9377] syzkaller0: entered allmulticast mode
[  294.093481][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  294.097992][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[  294.117810][ T9379] netlink: 'syz.3.1187': attribute type 10 has an invalid length.
[  296.024026][ T9388] mac80211_hwsim hwsim13 .3�c��: renamed from wlan1 (while UP)
[  296.038918][ T9394] netlink: 'syz.1.1192': attribute type 10 has an invalid length.
[  296.391141][ T9402] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  296.421399][ T9402] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  296.491439][ T9402] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  296.534493][ T9402] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  296.587417][ T9402] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  297.153949][ T9419] netlink: 'syz.1.1203': attribute type 10 has an invalid length.
[  297.244686][ T9421] netlink: 'syz.0.1204': attribute type 10 has an invalid length.
[  297.303230][ T9423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.884055][ T9445] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1215'.
[  298.150381][ T9448] netlink: 'syz.0.1217': attribute type 10 has an invalid length.
[  298.732671][ T9474] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1228'.
[  299.192483][ T9484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.436165][ T9486] validate_nla: 3 callbacks suppressed
[  299.436245][ T9486] netlink: 'syz.0.1234': attribute type 10 has an invalid length.
[  299.671621][ T9494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1237'.
[  300.083545][ T9504] netlink: 'syz.1.1242': attribute type 10 has an invalid length.
[  300.532726][ T9519] netlink: 'syz.1.1248': attribute type 10 has an invalid length.
[  301.110858][ T9535] netlink: 'syz.3.1255': attribute type 29 has an invalid length.
[  301.154789][ T9535] netlink: 'syz.3.1255': attribute type 29 has an invalid length.
[  301.211484][ T9535] netlink: 'syz.3.1255': attribute type 29 has an invalid length.
[  301.273825][ T9537] netlink: 'syz.1.1256': attribute type 10 has an invalid length.
[  301.404059][ T9539] netlink: 'syz.0.1257': attribute type 10 has an invalid length.
[  301.824899][ T9547] bridge_slave_1: left allmulticast mode
[  301.832261][ T9547] bridge_slave_1: left promiscuous mode
[  301.843985][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.182134][ T9549] netlink: 'syz.1.1260': attribute type 10 has an invalid length.
[  302.503243][ T9571] FAULT_INJECTION: forcing a failure.
[  302.503243][ T9571] name failslab, interval 1, probability 0, space 0, times 0
[  302.519230][ T9571] CPU: 0 PID: 9571 Comm: syz.0.1269 Not tainted syzkaller #0
[  302.526830][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  302.537841][ T9571] Call Trace:
[  302.541154][ T9571]  <TASK>
[  302.544202][ T9571]  dump_stack_lvl+0x18c/0x250
[  302.548921][ T9571]  ? show_regs_print_info+0x20/0x20
[  302.554153][ T9571]  ? load_image+0x420/0x420
[  302.559043][ T9571]  ? mark_lock+0x94/0x320
[  302.563420][ T9571]  ? mark_lock+0x94/0x320
[  302.567799][ T9571]  should_fail_ex+0x394/0x4c0
[  302.572617][ T9571]  should_failslab+0x9/0x20
[  302.577163][ T9571]  slab_pre_alloc_hook+0x59/0x300
[  302.582235][ T9571]  kmem_cache_alloc_node+0x5e/0x310
[  302.587512][ T9571]  ? __alloc_skb+0x103/0x2c0
[  302.592164][ T9571]  __alloc_skb+0x103/0x2c0
[  302.596796][ T9571]  alloc_skb_with_frags+0xcd/0x7a0
[  302.604134][ T9571]  ? mark_lock+0x94/0x320
[  302.609354][ T9571]  ? __lock_acquire+0x1262/0x7d80
[  302.615255][ T9571]  sock_alloc_send_pskb+0x883/0x9a0
[  302.621427][ T9571]  ? sock_kzfree_s+0x50/0x50
[  302.626388][ T9571]  ? verify_lock_unused+0x140/0x140
[  302.634476][ T9571]  __ip6_append_data+0x2b18/0x3d40
[  302.640040][ T9571]  ? __in6_dev_get+0xd0/0xd0
[  302.645067][ T9571]  ? ip6_mtu+0x7d/0x3f0
[  302.649486][ T9571]  ? ip6_setup_cork+0xff0/0xff0
[  302.654844][ T9571]  ? __lock_acquire+0x7d80/0x7d80
[  302.660355][ T9571]  ip6_append_data+0x1b0/0x350
[  302.665486][ T9571]  ? __in6_dev_get+0xd0/0xd0
[  302.670181][ T9571]  icmp6_send+0x1384/0x1b60
[  302.674837][ T9571]  ? icmp6_send+0x236/0x1b60
[  302.679496][ T9571]  ? icmpv6_push_pending_frames+0x3f0/0x3f0
[  302.685496][ T9571]  ? ip6_neigh_lookup+0x14c/0x490
[  302.690839][ T9571]  ? ip6_neigh_lookup+0x32e/0x490
[  302.695935][ T9571]  ? __ipv6_addr_type+0x103/0x2e0
[  302.701014][ T9571]  ip6_link_failure+0x3b/0x4c0
[  302.706292][ T9571]  ? ip6_negative_advice+0x310/0x310
[  302.712168][ T9571]  ip6_tnl_xmit+0xe8b/0x2a90
[  302.716975][ T9571]  ? is_bpf_text_address+0x28f/0x2a0
[  302.722426][ T9571]  ? arch_stack_walk+0x160/0x190
[  302.727746][ T9571]  ? ip6_tnl_xmit_ctl+0x640/0x640
[  302.732920][ T9571]  ? __put_user_ns+0x50/0x50
[  302.737855][ T9571]  ? iptunnel_handle_offloads+0x2f7/0x620
[  302.744374][ T9571]  ip6_tnl_start_xmit+0xcc9/0x1230
[  302.751173][ T9571]  ? ip6_tnl_dev_uninit+0x160/0x160
[  302.756821][ T9571]  dev_hard_start_xmit+0x269/0x790
[  302.763348][ T9571]  ? __dev_queue_xmit+0x275/0x3630
[  302.768777][ T9571]  __dev_queue_xmit+0x198c/0x3630
[  302.774591][ T9571]  ? __dev_queue_xmit+0x275/0x3630
[  302.780071][ T9571]  ? lockdep_hardirqs_on+0x98/0x150
[  302.785497][ T9571]  ? read_seqbegin+0x1b6/0x250
[  302.790637][ T9571]  ? netdev_core_pick_tx+0x370/0x370
[  302.797861][ T9571]  ? neigh_connected_output+0x3b7/0x460
[  302.804748][ T9571]  ip6_finish_output2+0xe2e/0x1620
[  302.810588][ T9571]  ? ip6_finish_output2+0x642/0x1620
[  302.818053][ T9571]  ? nf_hook+0x390/0x390
[  302.822145][ T9585] netlink: 'syz.3.1268': attribute type 10 has an invalid length.
[  302.825326][ T9571]  ? ip6_mtu+0x321/0x3f0
[  302.825411][ T9571]  ? ip6_finish_output+0x567/0x7f0
[  302.825440][ T9571]  rawv6_send_hdrinc+0xdba/0x1660
[  302.825479][ T9571]  ? txopt_get+0x3f0/0x3f0
[  302.825502][ T9571]  ? rawv6_push_pending_frames+0x930/0x930
[  302.865181][ T9571]  ? rawv6_sendmsg+0xec9/0x1740
[  302.870627][ T9571]  rawv6_sendmsg+0x128f/0x1740
[  302.876591][ T9571]  ? compat_rawv6_ioctl+0x70/0x70
[  302.882682][ T9571]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  302.890681][ T9571]  ? aa_sock_msg_perm+0x94/0x150
[  302.896295][ T9571]  ? inet_sendmsg+0x7e/0x2a0
[  302.902452][ T9571]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  302.908117][ T9571]  ? inet_send_prepare+0x250/0x250
[  302.913399][ T9571]  ____sys_sendmsg+0x61b/0x980
[  302.920496][ T9571]  ? __asan_memset+0x22/0x40
[  302.925302][ T9571]  ? __sys_sendmsg_sock+0x30/0x30
[  302.931164][ T9571]  ? __import_iovec+0x5f2/0x850
[  302.936782][ T9571]  ? import_iovec+0x73/0xa0
[  302.942399][ T9571]  ___sys_sendmsg+0x2a6/0x360
[  302.948106][ T9571]  ? __sys_sendmsg+0x2b0/0x2b0
[  302.952979][ T9571]  ? __lock_acquire+0x7d80/0x7d80
[  302.958210][ T9571]  __se_sys_sendmsg+0x1d0/0x2c0
[  302.963997][ T9571]  ? __x64_sys_sendmsg+0x80/0x80
[  302.969826][ T9571]  ? lockdep_hardirqs_on+0x98/0x150
[  302.975872][ T9571]  do_syscall_64+0x55/0xb0
[  302.981113][ T9571]  ? clear_bhb_loop+0x40/0x90
[  302.985995][ T9571]  ? clear_bhb_loop+0x40/0x90
[  302.993780][ T9571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.000135][ T9571] RIP: 0033:0x7fe41339e0d9
[  303.004607][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.024860][ T9571] RSP: 002b:00007fe414294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.033679][ T9571] RAX: ffffffffffffffda RBX: 00007fe413625fa0 RCX: 00007fe41339e0d9
[  303.043434][ T9571] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  303.051460][ T9571] RBP: 00007fe414294090 R08: 0000000000000000 R09: 0000000000000000
[  303.059672][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  303.067869][ T9571] R13: 00007fe413626038 R14: 00007fe413625fa0 R15: 00007ffd05980f58
[  303.077503][ T9571]  </TASK>
[  303.305649][ T9594] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  303.317925][ T9594] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  303.545609][ T9596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.891812][ T9605] syzkaller0: entered promiscuous mode
[  303.916220][ T9605] syzkaller0: entered allmulticast mode
[  305.875726][ T9623] validate_nla: 1 callbacks suppressed
[  305.875741][ T9623] netlink: 'syz.3.1285': attribute type 10 has an invalid length.
[  305.890813][ T9625] netlink: 'syz.0.1287': attribute type 10 has an invalid length.
[  306.168980][ T9643] netlink: 'syz.3.1292': attribute type 10 has an invalid length.
[  306.648566][ T9658] netlink: 'syz.3.1300': attribute type 10 has an invalid length.
[  307.176720][ T9680] netlink: 'syz.3.1308': attribute type 10 has an invalid length.
[  307.757146][ T9693] netlink: 'syz.0.1313': attribute type 10 has an invalid length.
[  308.089764][ T9708] C: renamed from team_slave_0 (while UP)
[  308.108674][ T9708] netlink: 'syz.0.1318': attribute type 1 has an invalid length.
[  308.116746][ T9708] netlink: 'syz.0.1318': attribute type 4 has an invalid length.
[  308.124881][ T9708] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1318'.
[  308.129815][ T9710] FAULT_INJECTION: forcing a failure.
[  308.129815][ T9710] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.143905][ T9708] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  308.170873][ T9710] CPU: 0 PID: 9710 Comm: syz.2.1319 Not tainted syzkaller #0
[  308.180421][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  308.190515][ T9710] Call Trace:
[  308.193997][ T9710]  <TASK>
[  308.196934][ T9710]  dump_stack_lvl+0x18c/0x250
[  308.201624][ T9710]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  308.207883][ T9710]  ? show_regs_print_info+0x20/0x20
[  308.213969][ T9710]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  308.221661][ T9710]  should_fail_ex+0x394/0x4c0
[  308.226739][ T9710]  _copy_to_user+0x2f/0xa0
[  308.232520][ T9710]  simple_read_from_buffer+0xe7/0x150
[  308.238205][ T9710]  proc_fail_nth_read+0x1e8/0x260
[  308.243510][ T9710]  ? proc_fault_inject_write+0x360/0x360
[  308.249512][ T9710]  ? vfs_read+0x282/0x990
[  308.253846][ T9710]  ? proc_fault_inject_write+0x360/0x360
[  308.260855][ T9710]  vfs_read+0x298/0x990
[  308.265050][ T9710]  ? kernel_read+0x1e0/0x1e0
[  308.269675][ T9710]  ? __fget_files+0x28/0x460
[  308.274611][ T9710]  ? __fget_files+0x3fc/0x460
[  308.280639][ T9710]  ? __fdget_pos+0x2a3/0x330
[  308.285328][ T9710]  ? ksys_read+0x74/0x260
[  308.291592][ T9710]  ksys_read+0x151/0x260
[  308.295906][ T9710]  ? vfs_write+0x9a0/0x9a0
[  308.300539][ T9710]  ? syscall_enter_from_user_mode+0x2e/0x80
[  308.306443][ T9710]  do_syscall_64+0x55/0xb0
[  308.311917][ T9710]  ? clear_bhb_loop+0x40/0x90
[  308.316734][ T9710]  ? clear_bhb_loop+0x40/0x90
[  308.321859][ T9710]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  308.329303][ T9710] RIP: 0033:0x7f020a75e90e
[  308.333919][ T9710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  308.355018][ T9710] RSP: 002b:00007f020b5ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  308.363741][ T9710] RAX: ffffffffffffffda RBX: 00007f020b5ed6c0 RCX: 00007f020a75e90e
[  308.372480][ T9710] RDX: 000000000000000f RSI: 00007f020b5ed0a0 RDI: 0000000000000007
[  308.381272][ T9710] RBP: 00007f020b5ed090 R08: 0000000000000000 R09: 0000000000000000
[  308.391140][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  308.399879][ T9710] R13: 00007f020aa26038 R14: 00007f020aa25fa0 R15: 00007ffc9fc5ad58
[  308.408715][ T9710]  </TASK>
[  308.557874][ T9713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.693766][ T9720] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1323'.
[  308.711747][ T9720] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  308.729771][ T9718] netlink: 'syz.2.1322': attribute type 10 has an invalid length.
[  309.087650][ T9732] netlink: 'syz.2.1327': attribute type 10 has an invalid length.
[  310.568332][ T9781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.440569][ T9800] validate_nla: 2 callbacks suppressed
[  311.440632][ T9800] netlink: 'syz.0.1349': attribute type 10 has an invalid length.
[  311.475365][ T9801] netlink: 'syz.3.1351': attribute type 10 has an invalid length.
[  312.400524][ T9840] netlink: 'syz.0.1364': attribute type 10 has an invalid length.
[  312.698589][ T9852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.963077][ T9866] sock: sock_timestamping_bind_phc: sock not bind to device
[  313.397474][ T9875] netlink: 'syz.0.1377': attribute type 46 has an invalid length.
[  313.710018][ T9875] netlink: 'syz.0.1377': attribute type 46 has an invalid length.
[  314.413280][ T9884] netlink: 'syz.1.1379': attribute type 10 has an invalid length.
[  315.008965][ T9901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.092466][ T9895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.444112][ T9913] netlink: 'syz.0.1391': attribute type 10 has an invalid length.
[  317.213798][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.631397][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.641348][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.744397][ T9969] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1412'.
[  319.314042][ T9958] netlink: 'syz.3.1407': attribute type 10 has an invalid length.
[  320.031727][ T9984] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1418'.
[  320.341011][ T9998] netlink: 'syz.0.1423': attribute type 10 has an invalid length.
[  320.544137][T10006] netlink: 'syz.2.1425': attribute type 9 has an invalid length.
[  320.565527][T10006] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1425'.
[  320.589419][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'.
[  321.074325][T10017] bridge_slave_1: left allmulticast mode
[  321.108364][T10017] bridge_slave_1: left promiscuous mode
[  321.114344][T10017] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.168023][T10017] bridge_slave_0: left allmulticast mode
[  321.175323][T10017] bridge_slave_0: left promiscuous mode
[  321.182365][T10017] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.452712][T10023] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1434'.
[  321.494918][T10031] netlink: 'syz.3.1435': attribute type 10 has an invalid length.
[  322.660837][T10062] netlink: 'syz.1.1447': attribute type 10 has an invalid length.
[  323.030557][T10069] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1452'.
[  323.055589][T10072] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1452'.
[  323.118968][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'.
[  323.464067][T10094] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1459'.
[  323.529774][T10093] netlink: 'syz.0.1461': attribute type 10 has an invalid length.
[  324.009706][T10113] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1467'.
[  324.928240][T10122] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1478'.
[  325.194711][T10136] netlink: 'syz.0.1475': attribute type 10 has an invalid length.
[  325.599074][T10153] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1484'.
[  325.716861][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.288557][T10171] netlink: 'syz.1.1491': attribute type 10 has an invalid length.
[  326.583714][T10182] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1495'.
[  327.097078][T10204] netlink: 'syz.2.1502': attribute type 10 has an invalid length.
[  327.452853][T10216] netlink: 'syz.3.1506': attribute type 10 has an invalid length.
[  330.723047][T10247] netlink: 'syz.3.1520': attribute type 10 has an invalid length.
[  330.831146][T10251] netlink: 'syz.1.1521': attribute type 10 has an invalid length.
[  331.125594][T10259] netlink: 'syz.2.1525': attribute type 7 has an invalid length.
[  331.451237][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'.
[  333.594500][T10278] netlink: 'syz.3.1531': attribute type 2 has an invalid length.
[  333.870795][T10289] cgroup: fork rejected by pids controller in /syz2
[  333.953480][T10332] netlink: 'syz.3.1537': attribute type 21 has an invalid length.
[  333.963006][T10332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1537'.
[  334.404045][T10405] netlink: 'syz.3.1541': attribute type 10 has an invalid length.
[  334.648547][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.256095][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  335.279307][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  335.309928][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  335.343049][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  335.356350][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  335.368089][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.355785][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.369889][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  337.382003][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'.
[  337.396287][T10412] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1544'.
[  337.409905][T10412] bridge_slave_0: entered allmulticast mode
[  337.417585][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'.
[  337.443974][T10412] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1544'.
[  337.459588][ T5785] Bluetooth: hci0: command tx timeout
[  337.553310][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.682566][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.701690][T10436] netlink: 'syz.1.1550': attribute type 7 has an invalid length.
[  338.249331][T10414] chnl_net:caif_netlink_parms(): no params data found
[  338.462441][T10456] netlink: 'syz.1.1557': attribute type 10 has an invalid length.
[  338.488572][T10455] netlink: 'syz.0.1558': attribute type 10 has an invalid length.
[  339.535096][ T5785] Bluetooth: hci0: command tx timeout
[  341.625212][ T5785] Bluetooth: hci0: command tx timeout
[  341.671938][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'.
[  341.683037][T10491] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1565'.
[  341.876548][T10500] netlink: 'syz.0.1567': attribute type 3 has an invalid length.
[  341.898907][T10500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1567'.
[  342.058932][T10414] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.069857][T10414] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.082950][T10414] bridge_slave_0: entered allmulticast mode
[  342.093056][T10414] bridge_slave_0: entered promiscuous mode
[  342.187206][T10414] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.199817][T10414] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.220329][T10414] bridge_slave_1: entered allmulticast mode
[  342.236425][T10414] bridge_slave_1: entered promiscuous mode
[  342.513335][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.548994][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.744363][T10526] netlink: 'syz.3.1573': attribute type 3 has an invalid length.
[  342.775356][T10522] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  342.786546][T10526] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1573'.
[  343.010549][T10414] team0: Port device team_slave_0 added
[  343.097640][T10414] team0: Port device team_slave_1 added
[  343.175843][T10535] netlink: 'syz.0.1575': attribute type 10 has an invalid length.
[  343.206487][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.221535][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.259718][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.443672][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.475075][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.547328][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.695178][ T5785] Bluetooth: hci0: command tx timeout
[  343.717860][   T12] hsr_slave_0: left promiscuous mode
[  343.755484][   T12] hsr_slave_1: left promiscuous mode
[  343.773519][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.795091][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.827225][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.837789][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.864321][   T12] veth1_macvtap: left promiscuous mode
[  343.870365][   T12] veth0_macvtap: left promiscuous mode
[  343.877837][   T12] veth1_vlan: left promiscuous mode
[  343.885536][   T12] veth0_vlan: left promiscuous mode
[  345.092528][   T12] team0 (unregistering): Port device team_slave_1 removed
[  345.171058][   T12] team0 (unregistering): Port device team_slave_0 removed
[  345.819802][T10544] netlink: 'syz.3.1577': attribute type 10 has an invalid length.
[  348.095235][T10414] hsr_slave_0: entered promiscuous mode
[  348.103532][T10414] hsr_slave_1: entered promiscuous mode
[  348.111816][T10565] netlink: 'syz.1.1584': attribute type 10 has an invalid length.
[  348.458193][T10570] netlink: 'syz.0.1593': attribute type 10 has an invalid length.
[  348.935260][T10579] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1588'.
[  348.956998][T10591] netlink: 'syz.1.1587': attribute type 3 has an invalid length.
[  348.964856][T10591] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1587'.
[  352.048537][T10596] netlink: 'syz.3.1589': attribute type 10 has an invalid length.
[  352.313575][T10618] netlink: 'syz.0.1595': attribute type 10 has an invalid length.
[  352.703191][T10414] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  352.739583][T10414] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  352.773804][T10414] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  352.803872][T10414] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  352.943304][T10635] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1600'.
[  353.112778][T10633] sit0: entered allmulticast mode
[  353.203813][T10641] sit0: entered promiscuous mode
[  353.341932][T10639] netlink: 'syz.0.1602': attribute type 10 has an invalid length.
[  353.445138][T10414] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.580984][T10414] 8021q: adding VLAN 0 to HW filter on device team0
[  353.639980][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.652698][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.718119][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.729484][ T7772] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.781088][T10655] netlink: 'syz.0.1606': attribute type 10 has an invalid length.
[  353.822904][T10650] netlink: 'syz.3.1604': attribute type 10 has an invalid length.
[  354.107469][T10664] netlink: 'syz.1.1607': attribute type 10 has an invalid length.
[  356.780353][T10414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  357.519639][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.698017][T10414] veth0_vlan: entered promiscuous mode
[  357.789896][T10414] veth1_vlan: entered promiscuous mode
[  357.908844][T10414] veth0_macvtap: entered promiscuous mode
[  357.927777][T10414] veth1_macvtap: entered promiscuous mode
[  358.899346][T10738] sit0: entered allmulticast mode
[  358.996304][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.016660][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.034089][T10414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.073744][T10741] sit0: entered promiscuous mode
[  359.115590][T10742] netlink: 'syz.1.1616': attribute type 10 has an invalid length.
[  359.186346][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.225420][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.248792][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.290330][T10414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.324046][T10414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.355804][T10414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.373792][T10414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.401430][T10764] netlink: 'syz.3.1618': attribute type 10 has an invalid length.
[  362.305118][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.335320][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.376597][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.387716][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.421534][T10788] netlink: 'syz.0.1629': attribute type 10 has an invalid length.
[  362.892259][T10806] netlink: 'syz.0.1642': attribute type 10 has an invalid length.
[  363.469726][T10817] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1638'.
[  363.777915][T10828] netlink: 'syz.1.1639': attribute type 10 has an invalid length.
[  366.781212][T10834] netlink: 'syz.3.1645': attribute type 10 has an invalid length.
[  367.370856][T10856] syzkaller0: entered promiscuous mode
[  367.396713][T10856] syzkaller0: entered allmulticast mode
[  367.827402][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.261336][T10874] netlink: 'syz.1.1659': attribute type 10 has an invalid length.
[  370.287454][T10875] netlink: 'syz.2.1658': attribute type 10 has an invalid length.
[  370.301388][T10875] hsr0: entered promiscuous mode
[  370.311937][T10875] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  370.749147][T10914] netlink: 'syz.3.1671': attribute type 11 has an invalid length.
[  370.768410][T10914] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1671'.
[  371.619561][T10932] netlink: 'syz.2.1678': attribute type 10 has an invalid length.
[  371.656301][T10932] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  372.213637][T10943] netlink: 'syz.3.1684': attribute type 10 has an invalid length.
[  372.225401][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.724520][T10971] veth1_to_bond: entered allmulticast mode
[  373.771575][T10943] syz.3.1684 (10943) used greatest stack depth: 18344 bytes left
[  374.129337][T10981] netlink: 'syz.1.1697': attribute type 4 has an invalid length.
[  374.160842][T10982] netlink: 'syz.2.1695': attribute type 6 has an invalid length.
[  374.181643][T10982] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1695'.
[  375.025640][T10998] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1700'.
[  375.518540][T11006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.294482][T11022] can: request_module (can-proto-3) failed.
[  376.312106][T11024] netlink: 'syz.3.1713': attribute type 10 has an invalid length.
[  376.620072][T11034] netlink: 'syz.3.1716': attribute type 10 has an invalid length.
[  376.687424][T11034] team0: Port device geneve1 added
[  376.972512][T11044] netlink: 'syz.0.1718': attribute type 4 has an invalid length.
[  377.904756][T11060] netlink: 'syz.0.1725': attribute type 10 has an invalid length.
[  378.229935][T11073] netlink: 'syz.2.1731': attribute type 4 has an invalid length.
[  378.355630][T11076] netlink: 'syz.1.1732': attribute type 10 has an invalid length.
[  378.603878][T11088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1736'.
[  378.833356][T11082] netlink: 'syz.0.1734': attribute type 6 has an invalid length.
[  378.870962][T11082] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1734'.
[  379.045245][T11084] netlink: 'syz.2.1735': attribute type 10 has an invalid length.
[  379.054379][T11084] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  379.074658][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  379.081802][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  383.267890][T11117] netlink: 'syz.1.1743': attribute type 10 has an invalid length.
[  383.495922][T11126] netlink: 'syz.2.1746': attribute type 10 has an invalid length.
[  383.524326][T11126] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  384.560169][T11151] netlink: 'syz.2.1754': attribute type 10 has an invalid length.
[  384.569900][T11151] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  384.805751][T11154] netlink: 'syz.3.1752': attribute type 10 has an invalid length.
[  388.057473][T11179] netlink: 'syz.2.1763': attribute type 10 has an invalid length.
[  388.068858][T11179] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  388.554906][T11191] netlink: 'syz.0.1767': attribute type 10 has an invalid length.
[  389.328629][T11206] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1773'.
[  389.332412][T11209] netlink: 'syz.0.1774': attribute type 10 has an invalid length.
[  389.939263][T11226] netlink: 'syz.3.1779': attribute type 10 has an invalid length.
[  390.546054][T11242] netlink: 'syz.3.1785': attribute type 10 has an invalid length.
[  390.704038][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.162177][T11258] netlink: 'syz.1.1792': attribute type 10 has an invalid length.
[  391.859579][T11270] netlink: 'syz.2.1797': attribute type 10 has an invalid length.
[  391.953202][T11270] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  392.615795][T11281] netlink: 'syz.1.1802': attribute type 10 has an invalid length.
[  392.976653][T11291] netlink: 'syz.1.1807': attribute type 10 has an invalid length.
[  393.148287][T11294] netlink: 'syz.2.1806': attribute type 10 has an invalid length.
[  393.161102][T11294] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  393.463491][T11307] netlink: 'syz.0.1809': attribute type 10 has an invalid length.
[  396.482489][T11316] lo: entered allmulticast mode
[  396.724600][T11324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.853101][T11327] netlink: 'syz.1.1817': attribute type 10 has an invalid length.
[  396.884265][T11329] netlink: 'syz.2.1818': attribute type 10 has an invalid length.
[  396.903749][T11329] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  396.927200][T11331] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1819'.
[  396.942496][T11331] netlink: 6260 bytes leftover after parsing attributes in process `syz.0.1819'.
[  396.954308][T11331] netlink: 65 bytes leftover after parsing attributes in process `syz.0.1819'.
[  397.068594][T11333] netlink: 'syz.3.1820': attribute type 10 has an invalid length.
[  397.559830][T11353] netlink: 'syz.0.1827': attribute type 29 has an invalid length.
[  397.586168][T11353] netlink: 'syz.0.1827': attribute type 29 has an invalid length.
[  397.609077][T11353] netlink: 'syz.0.1827': attribute type 29 has an invalid length.
[  397.621154][T11353] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1827'.
[  397.811602][T11359] netlink: 'syz.3.1830': attribute type 10 has an invalid length.
[  398.146004][T11366] netlink: 'syz.1.1833': attribute type 10 has an invalid length.
[  398.606319][T11375] netlink: 'syz.0.1837': attribute type 1 has an invalid length.
[  398.628004][T11375] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1837'.
[  398.967906][T11386] lo: entered allmulticast mode
[  399.068723][T11388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.269124][T11395] netlink: 'syz.0.1843': attribute type 10 has an invalid length.
[  399.343583][T11394] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.1842'.
[  400.508404][T11432] lo: entered allmulticast mode
[  400.867698][T11442] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  401.370577][T11460] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  402.282268][T11486] validate_nla: 5 callbacks suppressed
[  402.282289][T11486] netlink: 'syz.1.1875': attribute type 10 has an invalid length.
[  402.446617][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.949032][T11500] netlink: 'syz.1.1882': attribute type 10 has an invalid length.
[  403.571473][T11512] netlink: 'syz.3.1887': attribute type 10 has an invalid length.
[  403.853112][T11521] Q�6�`Ҙ: renamed from lo
[  404.376229][T11538] netlink: 'syz.2.1897': attribute type 10 has an invalid length.
[  404.408059][T11538] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  406.848894][T11557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.281620][T11575] netlink: 'syz.1.1910': attribute type 10 has an invalid length.
[  410.030557][T11637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.309925][T11685] netlink: 'syz.0.1955': attribute type 1 has an invalid length.
[  411.334715][T11685] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1955'.
[  411.582964][T11695] netlink: 'syz.2.1959': attribute type 2 has an invalid length.
[  411.593231][T11697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.512964][T11713] FAULT_INJECTION: forcing a failure.
[  412.512964][T11713] name failslab, interval 1, probability 0, space 0, times 0
[  412.553808][T11713] CPU: 1 PID: 11713 Comm: syz.0.1966 Not tainted syzkaller #0
[  412.562314][T11713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  412.572813][T11713] Call Trace:
[  412.576354][T11713]  <TASK>
[  412.579513][T11713]  dump_stack_lvl+0x18c/0x250
[  412.585461][T11713]  ? show_regs_print_info+0x20/0x20
[  412.591689][T11713]  ? load_image+0x420/0x420
[  412.596405][T11713]  ? rt6_remove_exception+0x270/0x270
[  412.604756][T11713]  should_fail_ex+0x394/0x4c0
[  412.613725][T11713]  should_failslab+0x9/0x20
[  412.620546][T11713]  slab_pre_alloc_hook+0x59/0x300
[  412.628140][T11713]  kmem_cache_alloc+0x5a/0x2c0
[  412.636712][T11713]  ? dst_alloc+0x105/0x170
[  412.642342][T11713]  ? ipv6_sysctl_rtcache_flush+0xf0/0xf0
[  412.649197][T11713]  dst_alloc+0x105/0x170
[  412.654981][T11713]  ip6_rt_cache_alloc+0x3b0/0xa20
[  412.660358][T11713]  ? rt6_find_cached_rt+0x270/0x270
[  412.666286][T11713]  ? ip6_pol_route+0x171/0x1230
[  412.672506][T11713]  ip6_pol_route+0xffa/0x1230
[  412.678398][T11713]  ? ip6_pol_route+0x171/0x1230
[  412.684447][T11713]  ? trace_fib6_table_lookup+0x1b0/0x1b0
[  412.691838][T11713]  fib6_rule_lookup+0x35d/0x580
[  412.697004][T11713]  ? skb_header_pointer+0x120/0x120
[  412.703706][T11713]  ? fib6_lookup+0x2d0/0x2d0
[  412.709705][T11713]  ? tomoyo_profile+0x11/0x50
[  412.715649][T11713]  ? read_lock_is_recursive+0x20/0x20
[  412.722608][T11713]  ? dev_get_by_index_rcu+0xee/0x110
[  412.729342][T11713]  ip6_route_output_flags+0x364/0x5d0
[  412.735729][T11713]  ? ip6_route_output_flags+0x2e/0x5d0
[  412.741950][T11713]  ip6_dst_lookup_tail+0x1a5/0x1660
[  412.748269][T11713]  ? ip6_dst_lookup+0x60/0x60
[  412.753310][T11713]  ? txopt_get+0x7a/0x3f0
[  412.757951][T11713]  ? txopt_get+0x7a/0x3f0
[  412.763249][T11713]  ? txopt_get+0x344/0x3f0
[  412.768093][T11713]  ? fl6_sock_lookup+0xc0/0xc0
[  412.773019][T11713]  ip6_dst_lookup_flow+0x48/0xe0
[  412.778639][T11713]  rawv6_sendmsg+0xd53/0x1740
[  412.783571][T11713]  ? compat_rawv6_ioctl+0x70/0x70
[  412.789632][T11713]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  412.796628][T11713]  ? aa_sock_msg_perm+0x94/0x150
[  412.802496][T11713]  ? inet_sendmsg+0x7e/0x2a0
[  412.807523][T11713]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  412.814137][T11713]  ? inet_send_prepare+0x250/0x250
[  412.819664][T11713]  ____sys_sendmsg+0x61b/0x980
[  412.824847][T11713]  ? __asan_memset+0x22/0x40
[  412.830731][T11713]  ? __sys_sendmsg_sock+0x30/0x30
[  412.837059][T11713]  ? __import_iovec+0x5f2/0x850
[  412.843054][T11713]  ? import_iovec+0x73/0xa0
[  412.848560][T11713]  ___sys_sendmsg+0x2a6/0x360
[  412.853915][T11713]  ? get_pid_task+0x20/0x1e0
[  412.859493][T11713]  ? __sys_sendmsg+0x2b0/0x2b0
[  412.865977][T11713]  ? __lock_acquire+0x7d80/0x7d80
[  412.872583][T11713]  __se_sys_sendmsg+0x1d0/0x2c0
[  412.879246][T11713]  ? __x64_sys_sendmsg+0x80/0x80
[  412.884495][T11713]  ? lockdep_hardirqs_on+0x98/0x150
[  412.890725][T11713]  do_syscall_64+0x55/0xb0
[  412.895546][T11713]  ? clear_bhb_loop+0x40/0x90
[  412.901479][T11713]  ? clear_bhb_loop+0x40/0x90
[  412.906909][T11713]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  412.914876][T11713] RIP: 0033:0x7fe41339e0d9
[  412.920362][T11713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.944190][T11713] RSP: 002b:00007fe414294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.955619][T11713] RAX: ffffffffffffffda RBX: 00007fe413625fa0 RCX: 00007fe41339e0d9
[  412.964400][T11713] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  412.973150][T11713] RBP: 00007fe414294090 R08: 0000000000000000 R09: 0000000000000000
[  412.981945][T11713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.991622][T11713] R13: 00007fe413626038 R14: 00007fe413625fa0 R15: 00007ffd05980f58
[  413.002419][T11713]  </TASK>
[  414.598121][T11743] netlink: zone id is out of range
[  414.647635][T11743] netlink: set zone limit has 8 unknown bytes
[  414.940505][T11759] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1984'.
[  414.980579][T11759] netlink: 'syz.2.1984': attribute type 2 has an invalid length.
[  415.041761][T11763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.302810][T11772] netlink: 'syz.3.1989': attribute type 3 has an invalid length.
[  415.332854][T11772] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1989'.
[  417.189025][T11792] netlink: zone id is out of range
[  417.196858][T11792] netlink: set zone limit has 8 unknown bytes
[  417.374872][T11813] sit0: entered allmulticast mode
[  417.405764][T11813] sit0: entered promiscuous mode
[  417.976404][T11838] FAULT_INJECTION: forcing a failure.
[  417.976404][T11838] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.007653][T11838] CPU: 1 PID: 11838 Comm: syz.0.2004 Not tainted syzkaller #0
[  418.018390][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  418.023720][T11842] netlink: 'syz.0.2004': attribute type 10 has an invalid length.
[  418.031464][T11838] Call Trace:
[  418.031484][T11838]  <TASK>
[  418.031493][T11838]  dump_stack_lvl+0x18c/0x250
[  418.031539][T11838]  ? show_regs_print_info+0x20/0x20
[  418.031558][T11838]  ? load_image+0x420/0x420
[  418.031582][T11838]  ? __might_fault+0xaa/0x120
[  418.031603][T11838]  ? __lock_acquire+0x7d80/0x7d80
[  418.031628][T11838]  should_fail_ex+0x394/0x4c0
[  418.031654][T11838]  _copy_from_user+0x2f/0xe0
[  418.031677][T11838]  __sys_bpf+0x23e/0x890
[  418.031699][T11838]  ? bpf_link_show_fdinfo+0x390/0x390
[  418.031733][T11838]  ? lock_chain_count+0x20/0x20
[  418.031758][T11838]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  418.031787][T11838]  __x64_sys_bpf+0x7c/0x90
[  418.124585][T11838]  do_syscall_64+0x55/0xb0
[  418.130096][T11838]  ? clear_bhb_loop+0x40/0x90
[  418.140306][T11838]  ? clear_bhb_loop+0x40/0x90
[  418.146035][T11838]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  418.152970][T11838] RIP: 0033:0x7fe41339e0d9
[  418.158788][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.181358][T11838] RSP: 002b:00007fe414294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  418.190996][T11838] RAX: ffffffffffffffda RBX: 00007fe413625fa0 RCX: 00007fe41339e0d9
[  418.199331][T11838] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000001
[  418.209049][T11838] RBP: 00007fe414294090 R08: 0000000000000000 R09: 0000000000000000
[  418.218695][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.229032][T11838] R13: 00007fe413626038 R14: 00007fe413625fa0 R15: 00007ffd05980f58
[  418.237564][T11838]  </TASK>
[  418.674828][T11857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.752582][T11856] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2006'.
[  419.219993][T11865] netlink: 'syz.1.2010': attribute type 10 has an invalid length.
[  419.260999][T11865] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2010'.
[  419.528603][T11860] netlink: zone id is out of range
[  419.549679][T11860] netlink: set zone limit has 8 unknown bytes
[  419.982345][T11893] FAULT_INJECTION: forcing a failure.
[  419.982345][T11893] name failslab, interval 1, probability 0, space 0, times 0
[  420.055378][T11893] CPU: 1 PID: 11893 Comm: syz.3.2019 Not tainted syzkaller #0
[  420.066330][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  420.080689][T11893] Call Trace:
[  420.084799][T11893]  <TASK>
[  420.088673][T11893]  dump_stack_lvl+0x18c/0x250
[  420.093628][T11893]  ? show_regs_print_info+0x20/0x20
[  420.099975][T11893]  ? load_image+0x420/0x420
[  420.105956][T11893]  ? __might_sleep+0xe0/0xe0
[  420.111744][T11893]  ? __lock_acquire+0x7d80/0x7d80
[  420.117362][T11893]  ? __lock_acquire+0x1262/0x7d80
[  420.122874][T11893]  should_fail_ex+0x394/0x4c0
[  420.129961][T11893]  should_failslab+0x9/0x20
[  420.135704][T11893]  slab_pre_alloc_hook+0x59/0x300
[  420.142965][T11893]  kmem_cache_alloc_node+0x5e/0x310
[  420.150225][T11893]  ? __alloc_skb+0x103/0x2c0
[  420.155341][T11893]  __alloc_skb+0x103/0x2c0
[  420.162671][T11893]  alloc_skb_with_frags+0xcd/0x7a0
[  420.168735][T11893]  sock_alloc_send_pskb+0x883/0x9a0
[  420.174989][T11893]  ? sock_kzfree_s+0x50/0x50
[  420.179867][T11893]  ? ip6_dst_lookup_tail+0xd65/0x1660
[  420.185628][T11893]  rawv6_send_hdrinc+0x2fc/0x1660
[  420.193091][T11893]  ? ip6_dst_hoplimit+0x96/0x350
[  420.198406][T11893]  ? txopt_get+0x3f0/0x3f0
[  420.204690][T11893]  ? ip6_dst_hoplimit+0x96/0x350
[  420.210903][T11893]  ? ip6_dst_hoplimit+0x96/0x350
[  420.216663][T11893]  rawv6_sendmsg+0x128f/0x1740
[  420.223485][T11893]  ? compat_rawv6_ioctl+0x70/0x70
[  420.230845][T11893]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  420.237926][T11893]  ? aa_sock_msg_perm+0x94/0x150
[  420.245115][T11893]  ? inet_sendmsg+0x7e/0x2a0
[  420.250878][T11893]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  420.256834][T11893]  ? inet_send_prepare+0x250/0x250
[  420.263759][T11893]  ____sys_sendmsg+0x61b/0x980
[  420.270869][T11893]  ? __asan_memset+0x22/0x40
[  420.276889][T11893]  ? __sys_sendmsg_sock+0x30/0x30
[  420.284148][T11893]  ? __import_iovec+0x5f2/0x850
[  420.290751][T11893]  ? import_iovec+0x73/0xa0
[  420.298291][T11893]  ___sys_sendmsg+0x2a6/0x360
[  420.303654][T11893]  ? __sys_sendmsg+0x2b0/0x2b0
[  420.309893][T11893]  ? trace_call_bpf+0xc3/0x6c0
[  420.317478][T11893]  __se_sys_sendmsg+0x1d0/0x2c0
[  420.323338][T11893]  ? perf_trace_preemptirq_template+0x269/0x330
[  420.331473][T11893]  ? __x64_sys_sendmsg+0x80/0x80
[  420.336719][T11893]  ? lockdep_hardirqs_on+0x98/0x150
[  420.343347][T11893]  do_syscall_64+0x55/0xb0
[  420.348147][T11893]  ? clear_bhb_loop+0x40/0x90
[  420.353309][T11893]  ? clear_bhb_loop+0x40/0x90
[  420.359255][T11893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  420.370438][T11893] RIP: 0033:0x7f2b98b9e0d9
[  420.375793][T11893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.402736][T11893] RSP: 002b:00007f2b99995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.412667][T11893] RAX: ffffffffffffffda RBX: 00007f2b98e25fa0 RCX: 00007f2b98b9e0d9
[  420.422824][T11893] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  420.433366][T11893] RBP: 00007f2b99995090 R08: 0000000000000000 R09: 0000000000000000
[  420.443911][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.454286][T11893] R13: 00007f2b98e26038 R14: 00007f2b98e25fa0 R15: 00007ffe0a636798
[  420.466240][T11893]  </TASK>
[  420.974506][T11907] netlink: 'syz.0.2023': attribute type 28 has an invalid length.
[  420.991741][T11908] netlink: 'syz.0.2023': attribute type 28 has an invalid length.
[  421.004557][T11907] netlink: 'syz.0.2023': attribute type 3 has an invalid length.
[  421.015923][T11908] netlink: 'syz.0.2023': attribute type 3 has an invalid length.
[  421.058990][T11907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'.
[  421.095463][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'.
[  421.411385][T11915] netlink: 'syz.0.2025': attribute type 10 has an invalid length.
[  421.742058][T11922] netlink: 'syz.1.2028': attribute type 10 has an invalid length.
[  421.946395][T11927] netlink: 'syz.0.2030': attribute type 9 has an invalid length.
[  422.015519][T11927] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2030'.
[  422.202323][T11929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.654472][T11945] netlink: 'syz.3.2038': attribute type 10 has an invalid length.
[  423.486020][T11959] netlink: 'syz.2.2040': attribute type 10 has an invalid length.
[  423.501801][T11959] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  424.257252][T11981] netlink: 'syz.0.2050': attribute type 10 has an invalid length.
[  424.366157][T11983] netlink: 'syz.3.2052': attribute type 10 has an invalid length.
[  425.366181][T12016] netlink: 'syz.3.2061': attribute type 1 has an invalid length.
[  425.450155][T12019] netlink: 'syz.2.2063': attribute type 10 has an invalid length.
[  425.465615][T12019] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  425.671891][T12022] netlink: 'syz.0.2064': attribute type 10 has an invalid length.
[  425.831672][T12024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.417577][T12044] netlink: 'syz.1.2073': attribute type 10 has an invalid length.
[  426.502879][T12047] netlink: 'syz.2.2074': attribute type 10 has an invalid length.
[  426.515524][T12047] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  426.875602][T12057] FAULT_INJECTION: forcing a failure.
[  426.875602][T12057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.924622][T12057] CPU: 0 PID: 12057 Comm: syz.0.2080 Not tainted syzkaller #0
[  426.933225][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  426.945182][T12057] Call Trace:
[  426.952077][T12057]  <TASK>
[  426.955405][T12057]  dump_stack_lvl+0x18c/0x250
[  426.960829][T12057]  ? show_regs_print_info+0x20/0x20
[  426.968128][T12057]  ? load_image+0x420/0x420
[  426.973268][T12057]  ? __might_fault+0xaa/0x120
[  426.979228][T12057]  ? __lock_acquire+0x7d80/0x7d80
[  426.986965][T12057]  should_fail_ex+0x394/0x4c0
[  426.993321][T12057]  _copy_from_iter+0x1cd/0x1290
[  426.999518][T12057]  ? copyout_mc+0x70/0x70
[  427.004271][T12057]  ? __virt_addr_valid+0x10c/0x380
[  427.010725][T12057]  ? __virt_addr_valid+0x10c/0x380
[  427.017636][T12057]  ? __virt_addr_valid+0x10c/0x380
[  427.025846][T12057]  ? __check_object_size+0x4fc/0xa40
[  427.033407][T12057]  rawv6_send_hdrinc+0x7aa/0x1660
[  427.041099][T12057]  ? txopt_get+0x3f0/0x3f0
[  427.046773][T12057]  ? ip6_dst_hoplimit+0x96/0x350
[  427.053844][T12057]  ? ip6_dst_hoplimit+0x96/0x350
[  427.061994][T12057]  rawv6_sendmsg+0x128f/0x1740
[  427.069115][T12057]  ? compat_rawv6_ioctl+0x70/0x70
[  427.075122][T12057]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  427.082774][T12057]  ? aa_sock_msg_perm+0x94/0x150
[  427.088889][T12057]  ? inet_sendmsg+0x7e/0x2a0
[  427.095139][T12057]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  427.102158][T12057]  ? inet_send_prepare+0x250/0x250
[  427.109405][T12057]  ____sys_sendmsg+0x61b/0x980
[  427.117016][T12057]  ? __asan_memset+0x22/0x40
[  427.122223][T12057]  ? __sys_sendmsg_sock+0x30/0x30
[  427.129382][T12057]  ? __import_iovec+0x5f2/0x850
[  427.134406][T12057]  ? import_iovec+0x73/0xa0
[  427.140067][T12057]  ___sys_sendmsg+0x2a6/0x360
[  427.147795][T12057]  ? get_pid_task+0x20/0x1e0
[  427.154375][T12057]  ? __sys_sendmsg+0x2b0/0x2b0
[  427.160334][T12057]  ? __lock_acquire+0x7d80/0x7d80
[  427.165969][T12057]  __se_sys_sendmsg+0x1d0/0x2c0
[  427.170957][T12057]  ? __x64_sys_sendmsg+0x80/0x80
[  427.176058][T12057]  ? lockdep_hardirqs_on+0x98/0x150
[  427.182993][T12057]  do_syscall_64+0x55/0xb0
[  427.189284][T12057]  ? clear_bhb_loop+0x40/0x90
[  427.194395][T12057]  ? clear_bhb_loop+0x40/0x90
[  427.201214][T12057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  427.210851][T12057] RIP: 0033:0x7fe41339e0d9
[  427.216784][T12057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.241154][T12057] RSP: 002b:00007fe414294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.252168][T12057] RAX: ffffffffffffffda RBX: 00007fe413625fa0 RCX: 00007fe41339e0d9
[  427.262365][T12057] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  427.272670][T12057] RBP: 00007fe414294090 R08: 0000000000000000 R09: 0000000000000000
[  427.287053][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.297580][T12057] R13: 00007fe413626038 R14: 00007fe413625fa0 R15: 00007ffd05980f58
[  427.308002][T12057]  </TASK>
[  427.360693][T12059] netlink: 'syz.2.2079': attribute type 10 has an invalid length.
[  427.550609][T12059] team0: Port device geneve1 added
[  427.713818][T12072] netlink: 'syz.3.2085': attribute type 10 has an invalid length.
[  428.446998][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'.
[  428.655841][T12097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.792763][T12101] validate_nla: 1 callbacks suppressed
[  428.792801][T12101] netlink: 'syz.0.2096': attribute type 10 has an invalid length.
[  428.979027][T12101] team0: Port device geneve1 added
[  428.998362][T12103] netlink: 'syz.1.2097': attribute type 10 has an invalid length.
[  429.222074][T12109] netlink: 'syz.3.2099': attribute type 10 has an invalid length.
[  429.448766][T12113] netlink: 'syz.0.2101': attribute type 10 has an invalid length.
[  430.984795][T12142] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2109'.
[  432.958066][T12136] netlink: 'syz.1.2108': attribute type 10 has an invalid length.
[  432.971042][T12137] netlink: 'syz.2.2107': attribute type 10 has an invalid length.
[  432.982615][T12137] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  433.281111][T12150] netlink: 'syz.1.2113': attribute type 15 has an invalid length.
[  433.294866][T12148] netlink: 'syz.2.2112': attribute type 10 has an invalid length.
[  433.314601][T12148] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  434.572825][T12168] netlink: 'syz.1.2119': attribute type 10 has an invalid length.
[  434.977749][T12173] FAULT_INJECTION: forcing a failure.
[  434.977749][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.005862][T12176] netlink: 'syz.3.2122': attribute type 10 has an invalid length.
[  435.019263][T12176] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2122'.
[  435.038349][T12173] CPU: 0 PID: 12173 Comm: syz.2.2121 Not tainted syzkaller #0
[  435.048245][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  435.060881][T12173] Call Trace:
[  435.061826][T12176] openvswitch: netlink: Flow key attr not present in new flow.
[  435.067812][T12173]  <TASK>
[  435.067824][T12173]  dump_stack_lvl+0x18c/0x250
[  435.067853][T12173]  ? show_regs_print_info+0x20/0x20
[  435.067870][T12173]  ? load_image+0x420/0x420
[  435.067898][T12173]  ? __lock_acquire+0x7d80/0x7d80
[  435.067917][T12173]  ? __htab_map_lookup_elem+0x23a/0x2a0
[  435.067934][T12173]  ? bpf_fd_htab_map_lookup_elem+0x6b/0x2f0
[  435.067960][T12173]  should_fail_ex+0x394/0x4c0
[  435.067996][T12173]  _copy_to_user+0x2f/0xa0
[  435.068021][T12173]  map_lookup_elem+0x5ed/0x7f0
[  435.068046][T12173]  __sys_bpf+0x438/0x890
[  435.068066][T12173]  ? bpf_link_show_fdinfo+0x390/0x390
[  435.150266][T12173]  ? lock_chain_count+0x20/0x20
[  435.156344][T12173]  __x64_sys_bpf+0x7c/0x90
[  435.161510][T12173]  do_syscall_64+0x55/0xb0
[  435.167786][T12173]  ? clear_bhb_loop+0x40/0x90
[  435.173037][T12173]  ? clear_bhb_loop+0x40/0x90
[  435.177965][T12173]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.185815][T12173] RIP: 0033:0x7fe2b699e0d9
[  435.190346][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.215338][T12173] RSP: 002b:00007fe2b77c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  435.225982][T12173] RAX: ffffffffffffffda RBX: 00007fe2b6c25fa0 RCX: 00007fe2b699e0d9
[  435.235572][T12173] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000001
[  435.244458][T12173] RBP: 00007fe2b77c5090 R08: 0000000000000000 R09: 0000000000000000
[  435.254894][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.264976][T12173] R13: 00007fe2b6c26038 R14: 00007fe2b6c25fa0 R15: 00007ffce53b9778
[  435.275560][T12173]  </TASK>
[  437.712263][T12174] netlink: 'syz.2.2121': attribute type 10 has an invalid length.
[  437.722307][T12174] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  437.739903][T12184] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2123'.
[  437.988839][T12201] netlink: 'syz.1.2129': attribute type 10 has an invalid length.
[  438.134255][T12208] netlink: 'syz.0.2132': attribute type 3 has an invalid length.
[  438.152963][T12208] netlink: 'syz.0.2132': attribute type 1 has an invalid length.
[  438.162441][T12208] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2132'.
[  438.840120][T12223] netlink: 'syz.0.2138': attribute type 10 has an invalid length.
[  439.783893][T12246] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2145'.
[  440.513797][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.535078][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  442.685544][T12256] FAULT_INJECTION: forcing a failure.
[  442.685544][T12256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.741440][T12256] CPU: 0 PID: 12256 Comm: syz.2.2150 Not tainted syzkaller #0
[  442.749071][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  442.759506][T12256] Call Trace:
[  442.762813][T12256]  <TASK>
[  442.766223][T12256]  dump_stack_lvl+0x18c/0x250
[  442.771574][T12256]  ? show_regs_print_info+0x20/0x20
[  442.777765][T12256]  ? load_image+0x420/0x420
[  442.782417][T12256]  ? __lock_acquire+0x7d80/0x7d80
[  442.787581][T12256]  ? snprintf+0xe9/0x140
[  442.792512][T12256]  should_fail_ex+0x394/0x4c0
[  442.797418][T12256]  _copy_to_user+0x2f/0xa0
[  442.801957][T12256]  simple_read_from_buffer+0xe7/0x150
[  442.808033][T12256]  proc_fail_nth_read+0x1e8/0x260
[  442.813167][T12256]  ? proc_fault_inject_write+0x360/0x360
[  442.818845][T12256]  ? fsnotify_perm+0x271/0x5e0
[  442.824110][T12256]  ? proc_fault_inject_write+0x360/0x360
[  442.829844][T12256]  vfs_read+0x298/0x990
[  442.834202][T12256]  ? kernel_read+0x1e0/0x1e0
[  442.839262][T12256]  ? __fget_files+0x28/0x460
[  442.846065][T12256]  ? __fget_files+0x3fc/0x460
[  442.850791][T12256]  ? __fdget_pos+0x2a3/0x330
[  442.855429][T12256]  ? ksys_read+0x74/0x260
[  442.859871][T12256]  ksys_read+0x151/0x260
[  442.864137][T12256]  ? vfs_write+0x9a0/0x9a0
[  442.868560][T12256]  ? lockdep_hardirqs_on+0x98/0x150
[  442.876135][T12256]  do_syscall_64+0x55/0xb0
[  442.880944][T12256]  ? clear_bhb_loop+0x40/0x90
[  442.886579][T12256]  ? clear_bhb_loop+0x40/0x90
[  442.891691][T12256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  442.899037][T12256] RIP: 0033:0x7fe2b695e90e
[  442.904700][T12256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  442.925918][T12256] RSP: 002b:00007fe2b77c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  442.935153][T12256] RAX: ffffffffffffffda RBX: 00007fe2b77c56c0 RCX: 00007fe2b695e90e
[  442.943261][T12256] RDX: 000000000000000f RSI: 00007fe2b77c50a0 RDI: 000000000000000b
[  442.953358][T12256] RBP: 00007fe2b77c5090 R08: 0000000000000000 R09: 0000000000000000
[  442.961981][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.970347][T12256] R13: 00007fe2b6c26038 R14: 00007fe2b6c25fa0 R15: 00007ffce53b9778
[  442.979618][T12256]  </TASK>
[  443.008782][T12262] netlink: 'syz.2.2150': attribute type 10 has an invalid length.
[  443.032250][T12262] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  443.489751][T12279] netlink: 'syz.0.2159': attribute type 10 has an invalid length.
[  443.776537][T12285] netlink: 'syz.2.2170': attribute type 21 has an invalid length.
[  443.808930][T12285] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2170'.
[  446.982367][T12312] FAULT_INJECTION: forcing a failure.
[  446.982367][T12312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.023909][T12312] CPU: 1 PID: 12312 Comm: syz.0.2171 Not tainted syzkaller #0
[  447.032549][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.042897][T12312] Call Trace:
[  447.046214][T12312]  <TASK>
[  447.049181][T12312]  dump_stack_lvl+0x18c/0x250
[  447.054217][T12312]  ? show_regs_print_info+0x20/0x20
[  447.060184][T12312]  ? load_image+0x420/0x420
[  447.064729][T12312]  ? __lock_acquire+0x7d80/0x7d80
[  447.070683][T12312]  should_fail_ex+0x394/0x4c0
[  447.075699][T12312]  _copy_from_user+0x2f/0xe0
[  447.081036][T12312]  __copy_msghdr+0x388/0x560
[  447.086386][T12312]  ___sys_sendmsg+0x214/0x360
[  447.092074][T12312]  ? get_pid_task+0x20/0x1e0
[  447.097017][T12312]  ? __sys_sendmsg+0x2b0/0x2b0
[  447.103395][T12312]  ? __lock_acquire+0x7d80/0x7d80
[  447.108719][T12312]  __se_sys_sendmsg+0x1d0/0x2c0
[  447.114396][T12312]  ? __x64_sys_sendmsg+0x80/0x80
[  447.120799][T12312]  ? lockdep_hardirqs_on+0x98/0x150
[  447.128377][T12312]  do_syscall_64+0x55/0xb0
[  447.132983][T12312]  ? clear_bhb_loop+0x40/0x90
[  447.138568][T12312]  ? clear_bhb_loop+0x40/0x90
[  447.143393][T12312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  447.149729][T12312] RIP: 0033:0x7fe41339e0d9
[  447.154536][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.174723][T12312] RSP: 002b:00007fe414294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.183254][T12312] RAX: ffffffffffffffda RBX: 00007fe413625fa0 RCX: 00007fe41339e0d9
[  447.192273][T12312] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005
[  447.202633][T12312] RBP: 00007fe414294090 R08: 0000000000000000 R09: 0000000000000000
[  447.211089][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.220659][T12312] R13: 00007fe413626038 R14: 00007fe413625fa0 R15: 00007ffd05980f58
[  447.229866][T12312]  </TASK>
[  447.388440][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.827524][T12332] netlink: 'syz.0.2180': attribute type 10 has an invalid length.
[  448.217409][T12344] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2184'.
[  450.573673][T12345] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2184'.
[  451.232066][T12366] sctp: [Deprecated]: syz.2.2192 (pid 12366) Use of struct sctp_assoc_value in delayed_ack socket option.
[  451.232066][T12366] Use struct sctp_sack_info instead
[  451.470829][T12371] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2194'.
[  451.525280][T12371] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  451.534811][T12373] netlink: 'syz.0.2193': attribute type 10 has an invalid length.
[  451.589263][T12371] openvswitch: netlink: Message has 1 unknown bytes.
[  454.958035][T12379] netlink: 'syz.1.2195': attribute type 10 has an invalid length.
[  455.063132][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.376269][T12402] netlink: 'syz.1.2203': attribute type 10 has an invalid length.
[  456.088788][T12410] netlink: 'syz.1.2206': attribute type 3 has an invalid length.
[  456.125379][T12410] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2206'.
[  456.315010][T12414] netlink: 'syz.2.2207': attribute type 10 has an invalid length.
[  456.333620][T12414] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  456.774293][T12427] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2212'.
[  456.790608][T12427] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  458.019119][ T5794] Bluetooth: hci0: command 0x0406 tx timeout
[  459.524381][T12456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.656307][T12454] syzkaller0: entered promiscuous mode
[  459.665234][T12454] syzkaller0: entered allmulticast mode
[  459.963109][T12470] netlink: 'syz.3.2226': attribute type 10 has an invalid length.
[  460.125317][T12478] netlink: 'syz.2.2230': attribute type 10 has an invalid length.
[  460.141135][T12478] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  460.644618][T12476] netlink: 'syz.1.2229': attribute type 10 has an invalid length.
[  460.662957][T12479] vcan0: entered allmulticast mode
[  460.683711][T12484] netlink: 'syz.0.2228': attribute type 10 has an invalid length.
[  460.694025][T12484] veth0_macvtap: left promiscuous mode
[  461.586026][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  461.618259][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  461.657594][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  461.691814][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  461.719905][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  461.729721][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  463.667482][T12495] netlink: 'syz.0.2235': attribute type 10 has an invalid length.
[  463.855719][ T5794] Bluetooth: hci3: command tx timeout
[  463.969898][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.096487][T12508] netlink: 'syz.2.2237': attribute type 10 has an invalid length.
[  464.112868][T12508] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  464.375303][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.589295][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.763450][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.902510][T12500] chnl_net:caif_netlink_parms(): no params data found
[  465.028515][T12524] netlink: 'syz.1.2243': attribute type 10 has an invalid length.
[  465.251514][T12500] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.261963][T12500] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.270296][T12500] bridge_slave_0: entered allmulticast mode
[  465.278785][T12500] bridge_slave_0: entered promiscuous mode
[  465.290860][T12530] netlink: 'syz.0.2244': attribute type 10 has an invalid length.
[  465.334060][T12500] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.346619][T12500] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.355626][T12500] bridge_slave_1: entered allmulticast mode
[  465.363858][T12500] bridge_slave_1: entered promiscuous mode
[  465.402058][T12500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.488651][T12500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.941085][ T5794] Bluetooth: hci3: command tx timeout
[  467.843313][T12500] team0: Port device team_slave_0 added
[  467.930082][T12500] team0: Port device team_slave_1 added
[  467.974056][T12500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.997414][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  468.039308][ T5794] Bluetooth: hci3: command tx timeout
[  468.046392][T12500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.064123][T12500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.072457][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  468.102937][T12500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.199541][T12542] netlink: 'syz.0.2254': attribute type 10 has an invalid length.
[  468.683883][T12558] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2253'.
[  468.693994][T12558] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  468.706018][T12558] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  470.105128][ T5794] Bluetooth: hci3: command tx timeout
[  470.759850][T12500] hsr_slave_0: entered promiscuous mode
[  470.776511][T12500] hsr_slave_1: entered promiscuous mode
[  470.792183][T12500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  470.802908][T12500] Cannot create hsr debugfs directory
[  470.961643][T12570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.243582][T12578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2258'.
[  471.829241][T12596] netlink: 'syz.2.2263': attribute type 10 has an invalid length.
[  471.844058][T12596] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  471.939712][ T2955] hsr_slave_0: left promiscuous mode
[  471.948400][ T2955] hsr_slave_1: left promiscuous mode
[  471.955952][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.963774][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.973234][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.982261][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1
[  472.019809][ T2955] veth1_vlan: left promiscuous mode
[  472.028291][ T2955] veth0_vlan: left promiscuous mode
[  472.264085][ T2955] team0 (unregistering): Port device geneve1 removed
[  472.704425][ T2955] team0 (unregistering): Port device team_slave_1 removed
[  472.756709][ T2955] team0 (unregistering): Port device team_slave_0 removed
[  475.669164][T12623] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2272'.
[  475.813455][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.875020][T12500] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  475.905661][T12500] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  475.925997][T12500] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  475.961129][T12634] netlink: 'syz.2.2275': attribute type 10 has an invalid length.
[  475.985438][T12634] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  476.021278][T12500] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  476.325820][T12500] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.376202][T12500] 8021q: adding VLAN 0 to HW filter on device team0
[  476.408910][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.417484][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.446986][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.454708][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.572616][T12500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  476.767534][T12658] netlink: 'syz.2.2279': attribute type 10 has an invalid length.
[  476.785305][T12658] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  477.075893][T12674] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2284'.
[  477.089365][T12674] netlink: zone id is out of range
[  477.094664][T12674] netlink: zone id is out of range
[  477.101260][T12674] netlink: zone id is out of range
[  477.109258][T12674] netlink: zone id is out of range
[  477.116594][T12674] netlink: zone id is out of range
[  477.122189][T12674] netlink: zone id is out of range
[  477.130463][T12674] netlink: zone id is out of range
[  477.138306][T12674] netlink: zone id is out of range
[  477.160422][T12674] netlink: zone id is out of range
[  477.167049][T12674] netlink: zone id is out of range
[  477.252458][T12676] netlink: 'syz.0.2285': attribute type 10 has an invalid length.
[  479.342933][T12500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.522249][T12500] veth0_vlan: entered promiscuous mode
[  479.560107][T12500] veth1_vlan: entered promiscuous mode
[  479.601274][T12500] veth0_macvtap: entered promiscuous mode
[  479.678616][T12500] veth1_macvtap: entered promiscuous mode
[  479.979713][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.031677][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.110523][T12500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.169746][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.241074][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.298777][T12500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.396077][T12500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.419212][T12500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.447350][T12500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.471558][T12500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.693567][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.732985][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.809150][T12701] netlink: 'syz.0.2294': attribute type 13 has an invalid length.
[  480.850611][ T7769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.866673][ T7769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.902875][T12703] netlink: 'syz.1.2295': attribute type 10 has an invalid length.
[  481.325248][T12713] netlink: 'syz.2.2297': attribute type 10 has an invalid length.
[  481.337146][T12713] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  481.883321][T12722] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2299'.
[  485.136660][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  485.146522][T12750] netlink: 'syz.2.2311': attribute type 10 has an invalid length.
[  485.156899][T12750] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  485.171537][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  485.183560][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  485.195243][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  485.218052][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  485.237812][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  485.309215][ T2955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.529955][ T2955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.590855][T12758] netlink: 'syz.3.2312': attribute type 10 has an invalid length.
[  485.666344][T12758] hsr0: entered promiscuous mode
[  485.674437][T12758] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  485.987997][ T2955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.747427][T12775] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2315'.
[  487.299359][ T5785] Bluetooth: hci2: command tx timeout
[  488.246136][ T2955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.598783][T12753] chnl_net:caif_netlink_parms(): no params data found
[  488.743756][ T7769] tipc: Subscription rejected, illegal request
[  489.193203][T12797] netlink: 'syz.0.2320': attribute type 10 has an invalid length.
[  489.376501][ T5785] Bluetooth: hci2: command tx timeout
[  489.706652][T12753] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.730078][T12753] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.751086][T12753] bridge_slave_0: entered allmulticast mode
[  489.763678][T12753] bridge_slave_0: entered promiscuous mode
[  489.896788][T12753] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.923828][T12753] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.953968][T12753] bridge_slave_1: entered allmulticast mode
[  489.969484][T12753] bridge_slave_1: entered promiscuous mode
[  490.415952][T12753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.619285][T12753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.748898][T12837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.749796][T12753] team0: Port device team_slave_0 added
[  490.770535][T12835] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2326'.
[  490.918205][T12753] team0: Port device team_slave_1 added
[  491.065884][T12845] veth1_to_bond: entered allmulticast mode
[  491.170563][T12753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.186137][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.214391][T12753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.291709][T12753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.312677][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.369671][T12753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.456877][ T5785] Bluetooth: hci2: command tx timeout
[  491.567203][T12753] hsr_slave_0: entered promiscuous mode
[  491.579911][T12753] hsr_slave_1: entered promiscuous mode
[  491.592447][T12753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  491.607188][T12753] Cannot create hsr debugfs directory
[  491.766791][T12862] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2338'.
[  491.781173][ T2955] hsr_slave_0: left promiscuous mode
[  491.796133][ T2955] hsr_slave_1: left promiscuous mode
[  491.847365][ T2955] veth1_macvtap: left promiscuous mode
[  491.853506][ T2955] veth0_macvtap: left promiscuous mode
[  491.896316][ T2955] veth1_vlan: left promiscuous mode
[  491.918793][ T2955] veth0_vlan: left promiscuous mode
[  492.731991][ T2955] team0 (unregistering): Port device team_slave_1 removed
[  492.778419][ T2955] team0 (unregistering): Port device team_slave_0 removed
[  493.535017][ T5785] Bluetooth: hci2: command tx timeout
[  494.379248][T12910] netlink: 'syz.2.2349': attribute type 1 has an invalid length.
[  494.390619][T12910] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2349'.
[  494.659027][T12923] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.2351'.
[  494.979795][T12931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.000536][T12753] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  495.044454][T12753] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  495.080984][T12753] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  495.114066][T12753] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  495.302964][T12935] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2354'.
[  495.325208][T12939] netlink: 'syz.3.2354': attribute type 3 has an invalid length.
[  495.333319][T12939] netlink: 'syz.3.2354': attribute type 1 has an invalid length.
[  495.371238][T12935] net_ratelimit: 238 callbacks suppressed
[  495.371369][T12935] netlink: zone id is out of range
[  495.399855][T12939] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2354'.
[  495.472578][T12753] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.480270][T12935] netlink: zone id is out of range
[  495.492056][T12939] netlink: 'syz.3.2354': attribute type 3 has an invalid length.
[  495.515755][T12935] netlink: zone id is out of range
[  495.524684][T12939] netlink: 'syz.3.2354': attribute type 1 has an invalid length.
[  495.530236][T12753] 8021q: adding VLAN 0 to HW filter on device team0
[  495.543819][T12939] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2354'.
[  495.564777][T12935] netlink: zone id is out of range
[  495.570765][T12935] netlink: zone id is out of range
[  495.583082][T12935] netlink: zone id is out of range
[  495.592798][T12944] netlink: 'syz.0.2357': attribute type 29 has an invalid length.
[  495.603607][T12944] netlink: 'syz.0.2357': attribute type 29 has an invalid length.
[  495.613749][T12935] netlink: zone id is out of range
[  495.630792][T12935] netlink: zone id is out of range
[  495.637067][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.645053][ T7772] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.657850][T12935] netlink: zone id is out of range
[  495.663562][T12935] netlink: zone id is out of range
[  495.708646][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.716686][ T7772] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.853281][T12950] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2359'.
[  495.907562][T12753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  496.246755][T12966] bridge0: port 3(batadv0) entered blocking state
[  496.273425][T12966] bridge0: port 3(batadv0) entered disabled state
[  496.328976][T12966] batadv0: entered allmulticast mode
[  496.357994][T12966] batadv0: entered promiscuous mode
[  496.364303][T12966] bridge0: port 3(batadv0) entered blocking state
[  496.371601][T12966] bridge0: port 3(batadv0) entered forwarding state
[  496.490916][T12971] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2363'.
[  496.584818][T12753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.736676][ T7769] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  496.746997][ T7769] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  496.772294][T12753] veth0_vlan: entered promiscuous mode
[  496.798192][T12753] veth1_vlan: entered promiscuous mode
[  496.890218][T12980] netlink: 'syz.2.2365': attribute type 21 has an invalid length.
[  496.915287][T12980] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2365'.
[  496.986965][T12753] veth0_macvtap: entered promiscuous mode
[  497.030587][T12753] veth1_macvtap: entered promiscuous mode
[  497.148379][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.183374][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.210372][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.259439][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.274329][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.352836][T12993] sock: sock_timestamping_bind_phc: sock not bind to device
[  497.537414][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.603741][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.645095][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.705162][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.749751][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.835359][T12753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.894007][T12753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.958064][T12753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.002813][T12753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.328473][ T7769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.397812][ T7769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.530139][T13017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.563386][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.596280][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.183325][T13081] macsec0: entered promiscuous mode
[  500.207075][T13081] macsec0: entered allmulticast mode
[  500.212766][T13081] veth1_macvtap: entered allmulticast mode
[  501.961881][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.969321][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.521144][T13112] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2397'.
[  502.541600][ T3518] tipc: Subscription rejected, illegal request
[  504.547267][T13119] netlink: 'syz.3.2400': attribute type 10 has an invalid length.
[  504.580756][T13119] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  505.643431][T13153] netlink: 'syz.1.2409': attribute type 10 has an invalid length.
[  505.696100][T13153] hsr0: entered promiscuous mode
[  505.703884][T13153] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  509.779417][T13218] netlink: 'syz.0.2425': attribute type 10 has an invalid length.
[  509.961167][T13223] netlink: 'syz.1.2427': attribute type 21 has an invalid length.
[  510.323294][T13241] netlink: 'syz.3.2435': attribute type 29 has an invalid length.
[  510.374521][T13241] netlink: 'syz.3.2435': attribute type 29 has an invalid length.
[  510.629204][T13246] netlink: 'syz.2.2436': attribute type 10 has an invalid length.
[  510.652155][T13246] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  513.729270][T13274] mac80211_hwsim hwsim18 ..�c��: renamed from wlan1 (while UP)
[  513.747191][T13280] veth1_to_bond: entered allmulticast mode
[  514.005086][T13293] netlink: 'syz.2.2453': attribute type 21 has an invalid length.
[  514.247819][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  514.972992][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2469'.
[  515.040071][T13326] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.194161][T13326] bridge_slave_0 (unregistering): left allmulticast mode
[  515.204237][T13326] bridge_slave_0 (unregistering): left promiscuous mode
[  515.224186][T13326] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.009214][T13360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  516.741204][T13373] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2488'.
[  516.760237][T13371] netlink: 'syz.2.2487': attribute type 15 has an invalid length.
[  517.309819][T13376] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2488'.
[  518.238344][T13415] netlink: 'syz.0.2503': attribute type 153 has an invalid length.
[  518.285311][T13415] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2503'.
[  518.354002][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  518.629992][T13430] netlink: 'syz.1.2509': attribute type 17 has an invalid length.
[  518.671270][T13430] netlink: 'syz.1.2509': attribute type 16 has an invalid length.
[  518.690976][T13430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2509'.
[  518.889371][T13435] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2511'.
[  518.930889][T13435] netlink: 'syz.2.2511': attribute type 4 has an invalid length.
[  518.945108][T13435] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2511'.
[  520.553359][T13470] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2526'.
[  520.999211][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  521.203099][T13482] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2529'.
[  521.788766][T13489] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2532'.
[  521.848455][T13489] net_ratelimit: 25 callbacks suppressed
[  521.848473][T13489] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  522.660286][T13515] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2538'.
[  522.705373][T13515] netlink: 'syz.1.2538': attribute type 4 has an invalid length.
[  522.735131][T13515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2538'.
[  522.738273][T13521] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2543'.
[  522.785171][T13521] netlink: del zone limit has 4 unknown bytes
[  523.332810][T13545] netlink: 'syz.1.2553': attribute type 5 has an invalid length.
[  523.387434][T13543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  523.490129][T13538] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2550'.
[  523.516197][T13538] hsr_slave_0: left promiscuous mode
[  523.535483][T13538] hsr_slave_1: left promiscuous mode
[  523.990794][T13556] delete_channel: no stack
[  524.473426][T13563] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2559'.
[  524.549639][T13563] netlink: 'syz.3.2559': attribute type 4 has an invalid length.
[  524.580870][T13563] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2559'.
[  524.761103][T13576] netlink: 'syz.2.2563': attribute type 3 has an invalid length.
[  524.775030][T13576] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2563'.
[  525.047823][T13579] netlink: 'syz.2.2565': attribute type 33 has an invalid length.
[  525.108878][T13579] netlink: 'syz.2.2565': attribute type 1 has an invalid length.
[  525.532988][T13602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.583425][T13604] __nla_validate_parse: 3 callbacks suppressed
[  525.583496][T13604] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2575'.
[  525.622619][T13604] netlink: 'syz.0.2575': attribute type 4 has an invalid length.
[  525.645100][T13604] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2575'.
[  526.227694][T13625] netlink: 'syz.3.2583': attribute type 1 has an invalid length.
[  526.253183][T13625] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2583'.
[  527.119399][T13642] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2590'.
[  527.169584][T13642] netlink: 'syz.0.2590': attribute type 10 has an invalid length.
[  527.191937][T13642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2590'.
[  527.230063][T13642] dummy0: entered promiscuous mode
[  527.250376][T13642] dummy0: entered allmulticast mode
[  527.274579][T13642] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  527.661642][T13660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.233353][T13677] netlink: 'syz.3.2600': attribute type 3 has an invalid length.
[  528.249754][T13677] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2600'.
[  528.395535][T13680] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2602'.
[  529.330260][T13708] netlink: 'syz.0.2614': attribute type 10 has an invalid length.
[  529.863625][T13708] team0: Device wg1 is of different type
[  529.932707][T13712] netlink: 'syz.1.2612': attribute type 3 has an invalid length.
[  529.942267][T13712] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2612'.
[  530.303721][T13735] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2623'.
[  531.559739][T13761] netlink: 'syz.3.2634': attribute type 2 has an invalid length.
[  531.585391][T13761] netlink: 'syz.3.2634': attribute type 8 has an invalid length.
[  531.615490][T13761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2634'.
[  531.943553][T13769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  532.043075][T13771] batadv0: left allmulticast mode
[  532.048997][T13771] batadv0: left promiscuous mode
[  532.057085][T13771] bridge0: port 3(batadv0) entered disabled state
[  532.146705][T13771] bridge_slave_1: left allmulticast mode
[  532.170442][T13771] bridge_slave_1: left promiscuous mode
[  532.179664][T13771] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.249247][T13771] bridge_slave_0: left allmulticast mode
[  532.272855][T13771] bridge_slave_0: left promiscuous mode
[  532.293876][T13771] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.666507][T13778] netlink: 'syz.0.2641': attribute type 4 has an invalid length.
[  533.112574][    C0] 
[  533.112584][    C0] ================================
[  533.112588][    C0] WARNING: inconsistent lock state
[  533.112610][    C0] syzkaller #0 Not tainted
[  533.112620][    C0] --------------------------------
[  533.112624][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  533.112641][    C0] syz.2.2653/13805 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  533.112659][    C0] ffff88807721ca18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  533.112712][    C0] {INITIAL USE} state was registered at:
[  533.112719][    C0]   lock_acquire+0x19e/0x420
[  533.112740][    C0]   _raw_spin_lock+0x2e/0x40
[  533.112852][    C0]   htab_lock_bucket+0x17d/0x300
[  533.112868][    C0]   htab_map_update_elem+0x237/0x1270
[  533.112884][    C0]   bpf_map_update_value+0x64b/0x710
[  533.112897][    C0]   map_update_elem+0x586/0x710
[  533.112912][    C0]   __sys_bpf+0x6b5/0x890
[  533.112926][    C0]   __x64_sys_bpf+0x7c/0x90
[  533.112939][    C0]   do_syscall_64+0x55/0xb0
[  533.112958][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  533.112980][    C0] irq event stamp: 1234
[  533.112986][    C0] hardirqs last  enabled at (1233): [<ffffffff8a8cb435>] exc_debug+0xf5/0x140
[  533.113008][    C0] hardirqs last disabled at (1234): [<ffffffff8a8cb3b3>] exc_debug+0x73/0x140
[  533.113029][    C0] softirqs last  enabled at (1222): [<ffffffff88bb43b4>] netlink_insert+0x1094/0x1390
[  533.113095][    C0] softirqs last disabled at (1220): [<ffffffff8878c94f>] release_sock+0x2f/0x1c0
[  533.113123][    C0] 
[  533.113123][    C0] other info that might help us debug this:
[  533.113127][    C0]  Possible unsafe locking scenario:
[  533.113127][    C0] 
[  533.113130][    C0]        CPU0
[  533.113133][    C0]        ----
[  533.113136][    C0]   lock(&htab->lockdep_key);
[  533.113147][    C0]   <Interrupt>
[  533.113150][    C0]     lock(&htab->lockdep_key);
[  533.113160][    C0] 
[  533.113160][    C0]  *** DEADLOCK ***
[  533.113160][    C0] 
[  533.113163][    C0] no locks held by syz.2.2653/13805.
[  533.113170][    C0] 
[  533.113170][    C0] stack backtrace:
[  533.113176][    C0] CPU: 0 PID: 13805 Comm: syz.2.2653 Not tainted syzkaller #0
[  533.113192][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  533.113203][    C0] Call Trace:
[  533.113211][    C0]  <#DB>
[  533.113218][    C0]  dump_stack_lvl+0x18c/0x250
[  533.113238][    C0]  ? show_regs_print_info+0x20/0x20
[  533.113258][    C0]  ? print_usage_bug+0x43d/0x6a0
[  533.113277][    C0]  ? verify_lock_unused+0x15/0x140
[  533.113297][    C0]  lock_acquire+0x2c2/0x420
[  533.113317][    C0]  ? htab_lock_bucket+0x17d/0x300
[  533.113337][    C0]  ? read_lock_is_recursive+0x20/0x20
[  533.113356][    C0]  ? trace_event_raw_event_lock+0x240/0x240
[  533.113373][    C0]  ? look_up_lock_class+0x75/0x140
[  533.113397][    C0]  _raw_spin_lock+0x2e/0x40
[  533.113419][    C0]  ? htab_lock_bucket+0x17d/0x300
[  533.113436][    C0]  htab_lock_bucket+0x17d/0x300
[  533.113456][    C0]  ? htab_lru_map_delete_node+0x770/0x770
[  533.113481][    C0]  ? look_up_lock_class+0x75/0x140
[  533.113503][    C0]  ? verify_lock_unused+0x15/0x140
[  533.113521][    C0]  ? jhash+0x3c3/0x740
[  533.113540][    C0]  htab_map_delete_elem+0x19f/0x640
[  533.113559][    C0]  ? htab_map_update_elem+0x1270/0x1270
[  533.113576][    C0]  ? rcu_is_watching+0x15/0xb0
[  533.113598][    C0]  ? perf_callchain+0x220/0x220
[  533.113615][    C0]  ? lock_release+0xb5/0x8c0
[  533.113639][    C0]  ? perf_prepare_sample+0x3c7/0x1db0
[  533.113664][    C0]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  533.113682][    C0]  bpf_overflow_handler+0x1fc/0x510
[  533.113707][    C0]  ? perf_tp_event+0x1550/0x1550
[  533.113725][    C0]  ? perf_trace_buf_alloc+0x290/0x290
[  533.113752][    C0]  ? bpf_overflow_handler+0xde/0x510
[  533.113782][    C0]  ? tp_perf_event_destroy+0x20/0x20
[  533.113808][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  533.113828][    C0]  __perf_event_overflow+0x461/0x660
[  533.113851][    C0]  perf_swevent_overflow+0x274/0x340
[  533.113875][    C0]  ? perf_event_switch_output+0x790/0x790
[  533.113900][    C0]  perf_swevent_event+0x45c/0x570
[  533.113920][    C0]  ? perf_tp_event+0x1550/0x1550
[  533.113939][    C0]  ? perf_trace_buf_alloc+0x290/0x290
[  533.113963][    C0]  perf_bp_event+0x319/0x430
[  533.113984][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  533.114018][    C0]  ? lock_acquire+0x2c2/0x420
[  533.114040][    C0]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  533.114065][    C0]  notifier_call_chain+0x18f/0x380
[  533.114087][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  533.114109][    C0]  atomic_notifier_call_chain+0xda/0x180
[  533.114129][    C0]  notify_die+0x145/0x1a0
[  533.114150][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  533.114174][    C0]  ? rcu_is_watching+0x15/0xb0
[  533.114196][    C0]  notify_debug+0x2e/0x50
[  533.114231][    C0]  exc_debug+0xde/0x140
[  533.114250][    C0]  asm_exc_debug+0x1e/0x40
[  533.114268][    C0] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  533.114289][    C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  533.114304][    C0] RSP: 0018:ffffc9000beff7b8 EFLAGS: 00050202
[  533.114318][    C0] RAX: ffffffff842fd001 RBX: 0000000000000060 RCX: 000000000000005d
[  533.114330][    C0] RDX: 0000000000000001 RSI: 0000200000000303 RDI: ffff88805d82f743
[  533.114341][    C0] RBP: ffffc9000beff8f0 R08: ffff88805d82f79f R09: 1ffff1100bb05ef3
[  533.114353][    C0] R10: dffffc0000000000 R11: ffffed100bb05ef4 R12: ffff88805d82f740
[  533.114365][    C0] R13: 0000200000000300 R14: ffffc9000beffe38 R15: 1ffff920017dffc7
[  533.114381][    C0]  ? _copy_from_iter+0x211/0x1290
[  533.114408][    C0]  </#DB>
[  533.114413][    C0]  <TASK>
[  533.114417][    C0]  _copy_from_iter+0x242/0x1290
[  533.114439][    C0]  ? rcu_is_watching+0x15/0xb0
[  533.114462][    C0]  ? copyout_mc+0x70/0x70
[  533.114479][    C0]  ? __virt_addr_valid+0x10c/0x380
[  533.114499][    C0]  ? __virt_addr_valid+0x10c/0x380
[  533.114518][    C0]  ? __virt_addr_valid+0x10c/0x380
[  533.114539][    C0]  ? __check_object_size+0x4fc/0xa40
[  533.114558][    C0]  netlink_sendmsg+0x76b/0xbf0
[  533.114579][    C0]  ? netlink_getsockopt+0x590/0x590
[  533.114596][    C0]  ? apparmor_socket_sendmsg+0x8e/0x330
[  533.114616][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  533.114643][    C0]  ? security_socket_sendmsg+0x80/0xa0
[  533.114659][    C0]  ? netlink_getsockopt+0x590/0x590
[  533.114677][    C0]  ____sys_sendmsg+0x61b/0x980
[  533.114698][    C0]  ? __asan_memset+0x22/0x40
[  533.114720][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[  533.114736][    C0]  ? __import_iovec+0x5f2/0x850
[  533.114762][    C0]  ? import_iovec+0x73/0xa0
[  533.114785][    C0]  ___sys_sendmsg+0x2a6/0x360
[  533.114805][    C0]  ? __sys_sendmsg+0x2b0/0x2b0
[  533.114847][    C0]  __se_sys_sendmsg+0x1d0/0x2c0
[  533.114864][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[  533.114881][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  533.114901][    C0]  do_syscall_64+0x55/0xb0
[  533.114915][    C0]  ? clear_bhb_loop+0x40/0x90
[  533.114929][    C0]  ? clear_bhb_loop+0x40/0x90
[  533.114946][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  533.114963][    C0] RIP: 0033:0x7fe2b699e0d9
[  533.114976][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.114989][    C0] RSP: 002b:00007fe2b77c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.115005][    C0] RAX: ffffffffffffffda RBX: 00007fe2b6c25fa0 RCX: 00007fe2b699e0d9
[  533.115017][    C0] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  533.115028][    C0] RBP: 00007fe2b6a35024 R08: 0000000000000000 R09: 0000000000000000
[  533.115037][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.115047][    C0] R13: 00007fe2b6c26038 R14: 00007fe2b6c25fa0 R15: 00007ffce53b9778
[  533.115066][    C0]  </TASK>