last executing test programs:

9.376182011s ago: executing program 4 (id=1257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

9.129541695s ago: executing program 4 (id=1260):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x12041)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x800000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000)
r3 = socket$kcm(0xa, 0x1, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x102)
getpid()
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)}, 0x102)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000580)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000aa00000013000000a617000000000000", @ANYRES32=r4, @ANYBLOB="ffffff7f0000000000000000002ef4fb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000d00"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='.', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

8.582195496s ago: executing program 4 (id=1264):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.333391518s ago: executing program 3 (id=1269):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)

5.25666809s ago: executing program 4 (id=1271):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x6800}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x2a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="0100000000000000000000000400000000000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x200, 0x0, r3, 0x7ff, '\x00', r10, r11, 0x4, 0x5, 0x2}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x1000000000000009, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1001, 0x6ba3b737}, 0x110708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff)

5.113255112s ago: executing program 0 (id=1273):
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB="0300000003"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001", @ANYRES64], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
close(0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, 0x0, 0xffdd)

4.943299145s ago: executing program 3 (id=1275):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x20044084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_clone(0x8800000, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}], 0x30, 0x4044015}, 0x20008851)

4.826467607s ago: executing program 4 (id=1276):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x6)

4.569270563s ago: executing program 3 (id=1278):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

4.393103656s ago: executing program 0 (id=1280):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bb}, 0x0, 0xbdffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0))
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42a}, {&(0x7f0000000740)="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", 0x16b}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020784400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000280)=@raw=[@ldst={0x3, 0x0, 0x0, 0xa, 0x1, 0xffffffffffffffc0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd46}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00', 0xfffffff3, 0xcd, &(0x7f0000000640)=""/205, 0x41000, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6810, r5, 0x4, &(0x7f00000008c0)=[r2, 0x1, r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r6, 0x1, 0x1, 0x1], &(0x7f0000000900)=[{0x5, 0x4, 0xa, 0xa}, {0x0, 0x3, 0xf}, {0x3, 0x1, 0xa, 0x9}, {0x3, 0x1, 0xf, 0x5}], 0x10, 0x3}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000a00)={r3, r7})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 6)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01000300000000000000000000000000000003000000003000"], &(0x7f0000000100)=""/224, 0x1b, 0xe0, 0x1, 0xc7, 0x10000, @value=r8}, 0x28)

4.234055389s ago: executing program 2 (id=1281):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000000)="eed8eb3f5db1e8146bc5cd9e2c623b8c475d84503f3aee2cb4f00c61826b6ae237d7d94d225bd997ab27e58b3a5431b5e42bca6851908a", &(0x7f00000001c0)=""/216}, 0x20)
r3 = socket$kcm(0x2, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740), 0x2}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

3.765528198s ago: executing program 3 (id=1283):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a000200110ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0xcb}, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x40)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x4}, 0x8841)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10110, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x4080, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))

3.443883784s ago: executing program 0 (id=1284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000f0000000000", @ANYBLOB="de44d80000049c6ec5955efa848b997cdf8df21de4f76cacf09b0102a3199d07d32ef8c50927f0135eea7e7f9fe64d1b893e7abe1eec48ccac1c2e4010c48f5d941df004b6097153554aa4d15cb50285760b60549194c160efe0a8e01e907b89edf3c41967d18627d37a14ccd3f974ae46b889f61f6525", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f0000000780)=""/262, 0x106}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/251, 0xfb}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0xd}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000c40)={r3, r2}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x6, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x1, 0x106)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x10001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xfffff840, 0x73, &(0x7f0000000480)=""/115, 0x41100, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x10, 0x2, 0x5e5}, 0x10, 0x27b3c, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[r0, r0], &(0x7f00000005c0)=[{0x1, 0x1, 0x3, 0xa}], 0x10, 0x3}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c6d5ff3a1000000018110000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7080000000000007b8af8ff0739009b933990b7052841197e00bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad7fdf6be59b15dc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc)

3.285676917s ago: executing program 2 (id=1286):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.793314506s ago: executing program 1 (id=1287):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)

1.661368088s ago: executing program 1 (id=1288):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x8, "fb95785b587f2fba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)
syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x7fffffff, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x9, 0x5, 0x2, 0x2, 0x0, 0xb, 0x103aa, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4001, 0xff, 0x47b, 0x5, 0x1, 0x5, 0xb117, 0x0, 0x4, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1)
r3 = socket$kcm(0x15, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x0, 0x2}, {0x0, 0x6, 0xfffffffb}], "6418"}, @datasec={0xb, 0x0, 0x0, 0xf, 0x2, [], "5803"}]}, {0x0, [0x61]}}, &(0x7f0000000d80)=""/129, 0x4f, 0x81, 0x5}, 0x28)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100)
gettid()

1.519599541s ago: executing program 2 (id=1289):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x20044084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_clone(0x8800000, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}], 0x30, 0x4044015}, 0x20008851)

1.354848524s ago: executing program 0 (id=1290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)

1.098337089s ago: executing program 2 (id=1291):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_clone(0x6021800, &(0x7f0000000780)="8aea65971f0abc33c7aedda682b184198b2ff9fa4f0cdef122344a74275fe40d57126a3ba0b9289ec3e87c5ad912882245c31c72b7c1452f6a045ef2d9cc05ac1f7403cdb353bc8fb34b694635a472ae98a305ccfbd440141db27d2ac668a89aee711bf98754e0a3e71a09d2d1ca0460", 0x70, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="365ab26a582f774d6d7768f164969640d3788c29d8d68355e77c73649ccd5cea235fc870d72857f559260288c0f179a623f743f03c48f3a23d8fd78ccac4f97fab")
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xd, 0x4, 0x5, 0x2, 0x0, 0x7, 0xc, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_bp={&(0x7f0000000500), 0x8}, 0x9200, 0xc5, 0x4ef8, 0x6, 0x9, 0x3, 0x1ff, 0x0, 0x96, 0x0, 0x1}, r3, 0x8, 0xffffffffffffffff, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="183f00000e000001000000000400000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c3932755946ba8848b0d93caec1f4d89f99dcd2e9cb4d3646bc48d7ece5cbb87cdd67955cf5c813c05411a276d6afe065ac5849c64aebf30294fc59168bcb9a25164a1826a81cf45e576ef4dd94e292cbbf69d0787fa4b596ce132d7e976b136871cebb77ad2e34ffcf52557e6a0403769815ed13ca7b6c9f2fd7d11461997a57b35715cee9809008af9df0690f5d42d2e0f2d967aa4bc96a7d4b343411ef4d962699ffc5c434cf53339430fe9d668405875e14bea5c4aea70b9de7b9fb36561bdc896a0cc666f0d9b49832984ed9effda637edfb97defbd3219055f5a7ee877c79ec93133f0109e9746acd0cba749390a9b575a129f1838688c21ea8db8"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6)

1.06029089s ago: executing program 1 (id=1292):
r0 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000004001800"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x385c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230016)
ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0xf0ff1f00000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r4})
close(r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x100, 0x74)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x10080)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYBLOB="02000a"], 0x9a)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280))
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x14)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20040000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0xef)
r7 = socket$kcm(0x29, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000fc0)="140000001c000b63d25a80648c2594e90124fc60", 0x14}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000080)={r8})

995.118431ms ago: executing program 0 (id=1293):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x12041)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x800000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000)
r3 = socket$kcm(0xa, 0x1, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x102)
getpid()
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)}, 0x102)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000580)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000aa00000013000000a617000000000000", @ANYRES32=r5, @ANYBLOB="ffffff7f0000000000000000002ef4fb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000d00"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xa}]})
sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='.', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

779.482975ms ago: executing program 4 (id=1294):
socket$kcm(0x11, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000080)="f8b4a55faced9a17dc0b3d14abaacc0055a3f85ca89cb8cc541d6c276a1ce3d01b87375ef4ae5a7f86d2c5777797dbbb81b23f277fc1744362019ad28297c2c291f5c2a1769fe3f22bf897b2f7a07fe665985314c04d7b1cb49da2d2705e99199c067f213562a2372da518cdc0c63a2aaa4b6dcfbfe002a09022d2cbaa2347614532744d3379b098e9748cf82280901fd094a81326876795d9cd68856d8d32f5bf9c6ca80d", 0xa5}, {&(0x7f0000000a40)="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", 0xfd8}], 0x2, &(0x7f0000001a80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9eaa}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xd8}, 0x1000c0c4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x102}, 0x104046, 0xfffffffffffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

778.340055ms ago: executing program 3 (id=1295):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1000ecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20)
socket$kcm(0x11, 0x20000000000000a, 0x300)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60)

670.723917ms ago: executing program 2 (id=1296):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

525.56038ms ago: executing program 2 (id=1297):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="450a0000000000006111b000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x336)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})

473.020711ms ago: executing program 1 (id=1298):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)

353.019043ms ago: executing program 0 (id=1299):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

244.786895ms ago: executing program 3 (id=1300):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="450a0000000000006111b000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})

204.986756ms ago: executing program 1 (id=1301):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x20044084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_clone(0x8800000, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}], 0x30, 0x4044015}, 0x20008851)

0s ago: executing program 1 (id=1302):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x12041)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x800000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000)
r3 = socket$kcm(0xa, 0x1, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x102)
getpid()
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)}, 0x102)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000580)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000aa00000013000000a617000000000000", @ANYRES32=r5, @ANYBLOB="ffffff7f0000000000000000002ef4fb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000d00"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xa}]})
sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='.', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

kernel console output (not intermixed with test programs):

 leftover after parsing attributes in process `syz.3.35'.
[   98.450504][ T4492] netlink: 10 bytes leftover after parsing attributes in process `syz.0.34'.
[   98.797533][ T4504] device syzkaller0 entered promiscuous mode
[  100.080087][ T4521] syzkaller0: tun_chr_ioctl cmd 1074025677
[  100.095210][ T4521] syzkaller0: linktype set to 6
[  100.442578][ T4526] validate_nla: 7 callbacks suppressed
[  100.442715][ T4526] netlink: 'syz.0.44': attribute type 29 has an invalid length.
[  100.678203][ T4534] netlink: 'syz.2.45': attribute type 29 has an invalid length.
[  100.941565][ T4526] netlink: 'syz.0.44': attribute type 29 has an invalid length.
[  101.150424][ T4534] netlink: 'syz.2.45': attribute type 29 has an invalid length.
[  101.222400][ T4531] netlink: 'syz.0.44': attribute type 29 has an invalid length.
[  101.322613][ T4536] netlink: 'syz.2.45': attribute type 29 has an invalid length.
[  101.977072][ T4548] netlink: 10 bytes leftover after parsing attributes in process `syz.1.51'.
[  102.683597][ T4569] netlink: 'syz.4.58': attribute type 10 has an invalid length.
[  102.842148][ T4575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.60'.
[  103.610345][ T4569] device veth0_vlan left promiscuous mode
[  103.635665][ T4569] device veth0_vlan entered promiscuous mode
[  103.675232][ T4569] team0: Device veth0_vlan failed to register rx_handler
[  103.754728][ T4575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.60'.
[  103.842236][ T4583] syzkaller1: tun_chr_ioctl cmd 35108
[  103.849725][ T4569] syz.4.58 (4569) used greatest stack depth: 19792 bytes left
[  103.915563][ T4589] syzkaller0: tun_chr_ioctl cmd 1074025677
[  103.945871][ T4589] syzkaller0: linktype set to 6
[  103.965931][ T4586] netlink: 60 bytes leftover after parsing attributes in process `syz.2.60'.
[  104.136212][ T4596] netlink: 'syz.3.64': attribute type 29 has an invalid length.
[  104.166018][ T4594] netlink: 'syz.4.62': attribute type 29 has an invalid length.
[  104.189365][ T4596] netlink: 'syz.3.64': attribute type 29 has an invalid length.
[  104.738058][ T4603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.66'.
[  106.675959][ T4640] validate_nla: 3 callbacks suppressed
[  106.676222][ T4640] netlink: 'syz.1.79': attribute type 10 has an invalid length.
[  106.713092][ T4644] netlink: 'syz.0.81': attribute type 29 has an invalid length.
[  107.196186][ T4640] device veth0_vlan left promiscuous mode
[  107.446624][ T4640] device veth0_vlan entered promiscuous mode
[  107.542631][ T4640] team0: Device veth0_vlan failed to register rx_handler
[  107.765233][ T4644] netlink: 'syz.0.81': attribute type 29 has an invalid length.
[  107.836365][ T4652] device veth0_vlan left promiscuous mode
[  107.848133][ T4640] syz.1.79 (4640) used greatest stack depth: 18704 bytes left
[  107.868778][ T4652] device veth0_vlan entered promiscuous mode
[  107.921771][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  107.963880][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.014484][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.065478][ T4670] netlink: 188 bytes leftover after parsing attributes in process `syz.1.88'.
[  108.105618][ T4668] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[  108.132070][ T4670] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  108.750550][ T4687] netlink: 'syz.1.92': attribute type 3 has an invalid length.
[  108.815632][ T4687] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.92'.
[  110.939058][ T4686] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'.
[  111.480818][ T4699] netlink: 56 bytes leftover after parsing attributes in process `syz.3.99'.
[  111.929694][ T4707] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[  112.073840][ T4707] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[  112.155118][ T4715] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[  113.269373][ T4739] netlink: 'syz.0.112': attribute type 16 has an invalid length.
[  113.304662][ T4739] netlink: 'syz.0.112': attribute type 3 has an invalid length.
[  113.334521][ T4739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.112'.
[  113.454245][ T4736] device veth0_vlan left promiscuous mode
[  113.495222][ T4736] device veth0_vlan entered promiscuous mode
[  113.565181][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.587372][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.683010][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.126654][ T4752] netlink: 128 bytes leftover after parsing attributes in process `syz.2.116'.
[  114.183113][ T4752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.528386][ T4758] netlink: 'syz.1.118': attribute type 29 has an invalid length.
[  114.549308][ T4758] netlink: 'syz.1.118': attribute type 29 has an invalid length.
[  114.584273][ T4765] netlink: 'syz.1.118': attribute type 29 has an invalid length.
[  114.828865][ T4774] FAULT_INJECTION: forcing a failure.
[  114.828865][ T4774] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  114.874559][ T4771] netlink: 'syz.3.121': attribute type 29 has an invalid length.
[  114.899497][ T4774] CPU: 1 PID: 4774 Comm: syz.0.124 Not tainted syzkaller #0
[  114.907063][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  114.917802][ T4774] Call Trace:
[  114.921241][ T4774]  <TASK>
[  114.924478][ T4774]  dump_stack_lvl+0x188/0x24e
[  114.929317][ T4774]  ? show_regs_print_info+0x12/0x12
[  114.934591][ T4774]  ? load_image+0x410/0x410
[  114.939255][ T4774]  ? __lock_acquire+0x7c40/0x7c40
[  114.944561][ T4774]  should_fail_ex+0x390/0x4c0
[  114.949314][ T4774]  _copy_to_user+0x2c/0x130
[  114.953977][ T4774]  bpf_test_finish+0x4a2/0x600
[  114.958891][ T4774]  ? convert_skb_to___skb+0x420/0x420
[  114.964310][ T4774]  ? bpf_test_init+0x119/0x140
[  114.969220][ T4774]  bpf_prog_test_run_xdp+0x827/0xf80
[  114.974601][ T4774]  ? __lock_acquire+0x7c40/0x7c40
[  114.979680][ T4774]  ? dev_put+0x80/0x80
[  114.983807][ T4774]  ? dev_put+0x80/0x80
[  114.988054][ T4774]  bpf_prog_test_run+0x31c/0x390
[  114.993095][ T4774]  __sys_bpf+0x62b/0x780
[  114.997681][ T4774]  ? bpf_link_show_fdinfo+0x380/0x380
[  115.003258][ T4774]  ? lock_chain_count+0x20/0x20
[  115.008352][ T4774]  __x64_sys_bpf+0x78/0x90
[  115.012823][ T4774]  do_syscall_64+0x4c/0xa0
[  115.017298][ T4774]  ? clear_bhb_loop+0x60/0xb0
[  115.022016][ T4774]  ? clear_bhb_loop+0x60/0xb0
[  115.026747][ T4774]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.032792][ T4774] RIP: 0033:0x7fa01679de99
[  115.037349][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.057361][ T4774] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  115.065984][ T4774] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  115.073989][ T4774] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  115.081989][ T4774] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  115.090095][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.098110][ T4774] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  115.106320][ T4774]  </TASK>
[  115.160058][ T4771] netlink: 'syz.3.121': attribute type 29 has an invalid length.
[  117.530659][ T4796] validate_nla: 2 callbacks suppressed
[  117.530680][ T4796] netlink: 'syz.1.140': attribute type 29 has an invalid length.
[  117.580515][ T4806] device veth0_vlan left promiscuous mode
[  117.592396][ T4806] device veth0_vlan entered promiscuous mode
[  117.663519][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.689645][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.723899][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.757439][ T4799] netlink: 'syz.1.140': attribute type 29 has an invalid length.
[  121.017594][ T4846] netlink: 830 bytes leftover after parsing attributes in process `syz.1.142'.
[  121.441263][ T4855] netlink: 'syz.3.146': attribute type 10 has an invalid length.
[  121.458384][ T4855] netlink: 55 bytes leftover after parsing attributes in process `syz.3.146'.
[  122.199825][ T4866] netlink: 'syz.4.149': attribute type 29 has an invalid length.
[  123.231765][ T4866] netlink: 'syz.4.149': attribute type 29 has an invalid length.
[  126.108861][ T4901] netlink: 'syz.3.157': attribute type 21 has an invalid length.
[  126.131555][ T4901] netlink: 'syz.3.157': attribute type 6 has an invalid length.
[  126.163571][ T4901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.157'.
[  127.758889][ T4926] FAULT_INJECTION: forcing a failure.
[  127.758889][ T4926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.831694][ T4926] CPU: 1 PID: 4926 Comm: syz.3.166 Not tainted syzkaller #0
[  127.839279][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  127.850392][ T4926] Call Trace:
[  127.853993][ T4926]  <TASK>
[  127.856992][ T4926]  dump_stack_lvl+0x188/0x24e
[  127.861868][ T4926]  ? show_regs_print_info+0x12/0x12
[  127.867325][ T4926]  ? load_image+0x410/0x410
[  127.872129][ T4926]  ? __lock_acquire+0x7c40/0x7c40
[  127.877219][ T4926]  ? snprintf+0xe5/0x140
[  127.881591][ T4926]  should_fail_ex+0x390/0x4c0
[  127.886343][ T4926]  _copy_to_user+0x2c/0x130
[  127.890887][ T4926]  simple_read_from_buffer+0xe3/0x150
[  127.896425][ T4926]  proc_fail_nth_read+0x1a6/0x220
[  127.901672][ T4926]  ? proc_fault_inject_write+0x310/0x310
[  127.907367][ T4926]  ? fsnotify_perm+0x248/0x550
[  127.912170][ T4926]  ? proc_fault_inject_write+0x310/0x310
[  127.917961][ T4926]  vfs_read+0x2db/0x960
[  127.922164][ T4926]  ? kernel_read+0x1e0/0x1e0
[  127.926797][ T4926]  ? __fget_files+0x28/0x460
[  127.931945][ T4926]  ? __fget_files+0x3fc/0x460
[  127.936676][ T4926]  ? __fdget_pos+0x2ae/0x360
[  127.941814][ T4926]  ? ksys_read+0x70/0x260
[  127.946219][ T4926]  ksys_read+0x14d/0x260
[  127.950570][ T4926]  ? vfs_write+0x9a0/0x9a0
[  127.955140][ T4926]  ? lockdep_hardirqs_on+0x94/0x140
[  127.960385][ T4926]  do_syscall_64+0x4c/0xa0
[  127.964877][ T4926]  ? clear_bhb_loop+0x60/0xb0
[  127.969599][ T4926]  ? clear_bhb_loop+0x60/0xb0
[  127.974494][ T4926]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  127.980521][ T4926] RIP: 0033:0x7f88b975e6ce
[  127.985072][ T4926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  128.005159][ T4926] RSP: 002b:00007f88ba724fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  128.013700][ T4926] RAX: ffffffffffffffda RBX: 00007f88ba7256c0 RCX: 00007f88b975e6ce
[  128.021850][ T4926] RDX: 000000000000000f RSI: 00007f88ba7250a0 RDI: 0000000000000005
[  128.029878][ T4926] RBP: 00007f88ba725090 R08: 0000000000000000 R09: 0000000000000000
[  128.037980][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.046074][ T4926] R13: 00007f88b9a26038 R14: 00007f88b9a25fa0 R15: 00007ffed05aafe8
[  128.054095][ T4926]  </TASK>
[  128.716759][ T4948] netlink: 'syz.3.175': attribute type 19 has an invalid length.
[  128.743806][ T4948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.175'.
[  130.902981][ T4988] netlink: 830 bytes leftover after parsing attributes in process `syz.3.188'.
[  131.297943][ T4998] FAULT_INJECTION: forcing a failure.
[  131.297943][ T4998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.341692][ T4998] CPU: 0 PID: 4998 Comm: syz.1.192 Not tainted syzkaller #0
[  131.349507][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  131.360095][ T4998] Call Trace:
[  131.363634][ T4998]  <TASK>
[  131.366628][ T4998]  dump_stack_lvl+0x188/0x24e
[  131.371666][ T4998]  ? show_regs_print_info+0x12/0x12
[  131.376997][ T4998]  ? load_image+0x410/0x410
[  131.381686][ T4998]  ? __might_fault+0xa6/0x120
[  131.386651][ T4998]  should_fail_ex+0x390/0x4c0
[  131.391442][ T4998]  copyin+0x1b/0x120
[  131.395608][ T4998]  _copy_from_iter+0x447/0x1130
[  131.400609][ T4998]  ? copyout_mc+0x110/0x110
[  131.405255][ T4998]  ? __virt_addr_valid+0x188/0x540
[  131.410619][ T4998]  ? __virt_addr_valid+0x188/0x540
[  131.416039][ T4998]  ? __virt_addr_valid+0x467/0x540
[  131.421358][ T4998]  ? __phys_addr_symbol+0x2b/0x70
[  131.426571][ T4998]  ? __check_object_size+0x4f6/0xa70
[  131.432139][ T4998]  netlink_sendmsg+0x755/0xbd0
[  131.437197][ T4998]  ? netlink_getsockopt+0x550/0x550
[  131.442520][ T4998]  ? apparmor_socket_sendmsg+0x8a/0x330
[  131.448149][ T4998]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  131.453676][ T4998]  ? security_socket_sendmsg+0x7c/0xa0
[  131.459289][ T4998]  ? netlink_getsockopt+0x550/0x550
[  131.464863][ T4998]  ____sys_sendmsg+0x5ed/0x9a0
[  131.469927][ T4998]  ? __sys_sendmsg_sock+0x30/0x30
[  131.475263][ T4998]  ? __import_iovec+0x306/0x510
[  131.480314][ T4998]  ? import_iovec+0x6f/0xa0
[  131.484917][ T4998]  ___sys_sendmsg+0x2a2/0x360
[  131.489697][ T4998]  ? __sys_sendmsg+0x2a0/0x2a0
[  131.494946][ T4998]  ? __lock_acquire+0x7c40/0x7c40
[  131.500141][ T4998]  __se_sys_sendmsg+0x1c3/0x2b0
[  131.505083][ T4998]  ? perf_trace_preemptirq_template+0x268/0x320
[  131.511410][ T4998]  ? __x64_sys_sendmsg+0x80/0x80
[  131.516598][ T4998]  ? lockdep_hardirqs_on+0x94/0x140
[  131.521891][ T4998]  do_syscall_64+0x4c/0xa0
[  131.526673][ T4998]  ? clear_bhb_loop+0x60/0xb0
[  131.531426][ T4998]  ? clear_bhb_loop+0x60/0xb0
[  131.536239][ T4998]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.542286][ T4998] RIP: 0033:0x7fa8c039de99
[  131.546852][ T4998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.567988][ T4998] RSP: 002b:00007fa8c12ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.576557][ T4998] RAX: ffffffffffffffda RBX: 00007fa8c0625fa0 RCX: 00007fa8c039de99
[  131.584675][ T4998] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  131.592887][ T4998] RBP: 00007fa8c12ed090 R08: 0000000000000000 R09: 0000000000000000
[  131.600920][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.609067][ T4998] R13: 00007fa8c0626038 R14: 00007fa8c0625fa0 R15: 00007ffd8f3a1298
[  131.617302][ T4998]  </TASK>
[  132.232204][ T5012] netlink: 'syz.1.196': attribute type 10 has an invalid length.
[  132.479953][ T5012] team0: Port device geneve1 added
[  132.530192][ T5018] netlink: 'syz.0.198': attribute type 10 has an invalid length.
[  132.740004][ T5018] team0: Port device geneve1 added
[  132.862191][ T5023] netlink: 'syz.3.209': attribute type 29 has an invalid length.
[  132.889968][ T5023] netlink: 'syz.3.209': attribute type 29 has an invalid length.
[  133.001653][ T5026] netlink: 'syz.3.209': attribute type 29 has an invalid length.
[  136.697352][ T5056] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.208'.
[  136.827629][ T5056] device bridge_slave_1 left promiscuous mode
[  136.860550][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.968809][ T5056] device bridge_slave_0 left promiscuous mode
[  136.996594][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.681773][ T5075] netlink: 'syz.4.216': attribute type 29 has an invalid length.
[  137.700973][ T5075] netlink: 'syz.4.216': attribute type 29 has an invalid length.
[  137.723901][ T5082] netlink: 'syz.4.216': attribute type 29 has an invalid length.
[  138.155299][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  138.162184][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  138.352166][ T5089] FAULT_INJECTION: forcing a failure.
[  138.352166][ T5089] name failslab, interval 1, probability 0, space 0, times 0
[  138.493767][ T5089] CPU: 1 PID: 5089 Comm: syz.0.219 Not tainted syzkaller #0
[  138.501767][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  138.513570][ T5089] Call Trace:
[  138.517116][ T5089]  <TASK>
[  138.520661][ T5089]  dump_stack_lvl+0x188/0x24e
[  138.525862][ T5089]  ? show_regs_print_info+0x12/0x12
[  138.531184][ T5089]  ? load_image+0x410/0x410
[  138.536193][ T5089]  should_fail_ex+0x390/0x4c0
[  138.540997][ T5089]  should_failslab+0x5/0x20
[  138.546139][ T5089]  slab_pre_alloc_hook+0x59/0x300
[  138.551480][ T5089]  kmem_cache_alloc+0x56/0x2f0
[  138.556531][ T5089]  ? dst_alloc+0x101/0x160
[  138.561182][ T5089]  ? ipv6_sysctl_rtcache_flush+0xf0/0xf0
[  138.567269][ T5089]  dst_alloc+0x101/0x160
[  138.571630][ T5089]  ip6_rt_cache_alloc+0x3a0/0xa30
[  138.577327][ T5089]  ? rt6_find_cached_rt+0x270/0x270
[  138.583034][ T5089]  ip6_pol_route+0x105f/0x12a0
[  138.588369][ T5089]  ? ip6_pol_route+0x16d/0x12a0
[  138.594247][ T5089]  ? trace_fib6_table_lookup+0x250/0x250
[  138.600428][ T5089]  ? lockdep_hardirqs_on+0x94/0x140
[  138.605733][ T5089]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  138.612021][ T5089]  fib6_rule_lookup+0x35c/0x5e0
[  138.617365][ T5089]  ? ip6_route_output_flags_noref+0x390/0x390
[  138.623721][ T5089]  ? fib6_lookup+0x2d0/0x2d0
[  138.628456][ T5089]  ? __ipv6_addr_type+0xff/0x2e0
[  138.633503][ T5089]  ? ip6_route_output_flags_noref+0x230/0x390
[  138.639772][ T5089]  ip6_route_output_flags+0xe3/0x330
[  138.645816][ T5089]  ? ip6_route_output_flags+0x27/0x330
[  138.651398][ T5089]  ip6_dst_lookup_tail+0x1a7/0x1600
[  138.656912][ T5089]  ? __lock_acquire+0x7c40/0x7c40
[  138.662162][ T5089]  ? ip6_dst_lookup+0x60/0x60
[  138.666989][ T5089]  ? txopt_get+0x76/0x3f0
[  138.671465][ T5089]  ? txopt_get+0x76/0x3f0
[  138.676460][ T5089]  ? txopt_get+0x340/0x3f0
[  138.680974][ T5089]  ? tomoyo_check_acl+0x378/0x3f0
[  138.686304][ T5089]  ? fl6_sock_lookup+0xc0/0xc0
[  138.691719][ T5089]  ip6_dst_lookup_flow+0x44/0xd0
[  138.696789][ T5089]  rawv6_sendmsg+0xcb2/0x1710
[  138.701679][ T5089]  ? irqentry_enter+0x33/0x50
[  138.707045][ T5089]  ? lock_chain_count+0x20/0x20
[  138.712130][ T5089]  ? compat_rawv6_ioctl+0x60/0x60
[  138.717460][ T5089]  ? aa_sock_msg_perm+0x94/0x150
[  138.722574][ T5089]  ? inet_sendmsg+0x7a/0x2a0
[  138.727426][ T5089]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  138.732968][ T5089]  ? inet_send_prepare+0x250/0x250
[  138.738351][ T5089]  ____sys_sendmsg+0x5ed/0x9a0
[  138.743710][ T5089]  ? __sys_sendmsg_sock+0x30/0x30
[  138.748836][ T5089]  ? __import_iovec+0x306/0x510
[  138.753861][ T5089]  ? import_iovec+0x6f/0xa0
[  138.758654][ T5089]  ___sys_sendmsg+0x2a2/0x360
[  138.763558][ T5089]  ? __sys_sendmsg+0x2a0/0x2a0
[  138.768705][ T5089]  __se_sys_sendmsg+0x1c3/0x2b0
[  138.773816][ T5089]  ? perf_trace_preemptirq_template+0x268/0x320
[  138.780249][ T5089]  ? __x64_sys_sendmsg+0x80/0x80
[  138.785459][ T5089]  ? lockdep_hardirqs_on+0x94/0x140
[  138.790871][ T5089]  do_syscall_64+0x4c/0xa0
[  138.795563][ T5089]  ? clear_bhb_loop+0x60/0xb0
[  138.800452][ T5089]  ? clear_bhb_loop+0x60/0xb0
[  138.805424][ T5089]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.811533][ T5089] RIP: 0033:0x7fa01679de99
[  138.816316][ T5089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.836371][ T5089] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.845183][ T5089] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  138.853455][ T5089] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  138.861691][ T5089] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  138.869935][ T5089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.878727][ T5089] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  138.889365][ T5089]  </TASK>
[  140.176894][ T5112] netlink: 830 bytes leftover after parsing attributes in process `syz.3.226'.
[  140.452402][ T5119] netlink: 'syz.4.231': attribute type 29 has an invalid length.
[  140.520679][ T5119] netlink: 'syz.4.231': attribute type 29 has an invalid length.
[  140.558940][ T5121] netlink: 'syz.4.231': attribute type 29 has an invalid length.
[  140.954422][ T5130] netlink: 'syz.0.233': attribute type 11 has an invalid length.
[  141.075992][ T5124] netlink: 'syz.1.234': attribute type 29 has an invalid length.
[  141.095388][ T5131] netlink: 'syz.2.235': attribute type 2 has an invalid length.
[  141.153972][ T5124] netlink: 'syz.1.234': attribute type 29 has an invalid length.
[  141.192456][ T5130] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.233'.
[  141.261581][ T5125] netlink: 'syz.1.234': attribute type 29 has an invalid length.
[  141.735574][ T5129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.981128][ T5143] FAULT_INJECTION: forcing a failure.
[  141.981128][ T5143] name failslab, interval 1, probability 0, space 0, times 0
[  142.092052][ T5143] CPU: 0 PID: 5143 Comm: syz.2.236 Not tainted syzkaller #0
[  142.099727][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  142.110560][ T5143] Call Trace:
[  142.113947][ T5143]  <TASK>
[  142.116932][ T5143]  dump_stack_lvl+0x188/0x24e
[  142.122194][ T5143]  ? show_regs_print_info+0x12/0x12
[  142.128065][ T5143]  ? load_image+0x410/0x410
[  142.132936][ T5143]  ? __might_sleep+0xd0/0xd0
[  142.137710][ T5143]  ? __lock_acquire+0x7c40/0x7c40
[  142.143120][ T5143]  should_fail_ex+0x390/0x4c0
[  142.148056][ T5143]  should_failslab+0x5/0x20
[  142.153179][ T5143]  slab_pre_alloc_hook+0x59/0x300
[  142.158815][ T5143]  ? sk_prot_alloc+0xe7/0x210
[  142.163742][ T5143]  __kmem_cache_alloc_node+0x4f/0x270
[  142.169534][ T5143]  ? sk_prot_alloc+0xe7/0x210
[  142.174434][ T5143]  __kmalloc+0xa3/0x240
[  142.178685][ T5143]  sk_prot_alloc+0xe7/0x210
[  142.183257][ T5143]  ? sk_alloc+0x20/0x330
[  142.187957][ T5143]  sk_alloc+0x36/0x330
[  142.192267][ T5143]  ? bpf_ctx_init+0x154/0x190
[  142.197013][ T5143]  bpf_prog_test_run_skb+0x36d/0x18e0
[  142.202637][ T5143]  ? __fget_files+0x28/0x460
[  142.207482][ T5143]  ? __fget_files+0x3fc/0x460
[  142.212325][ T5143]  ? cpu_online+0xa0/0xa0
[  142.216740][ T5143]  bpf_prog_test_run+0x31c/0x390
[  142.222102][ T5143]  __sys_bpf+0x62b/0x780
[  142.226506][ T5143]  ? bpf_link_show_fdinfo+0x380/0x380
[  142.231961][ T5143]  ? lock_chain_count+0x20/0x20
[  142.237409][ T5143]  __x64_sys_bpf+0x78/0x90
[  142.242256][ T5143]  do_syscall_64+0x4c/0xa0
[  142.246751][ T5143]  ? clear_bhb_loop+0x60/0xb0
[  142.251494][ T5143]  ? clear_bhb_loop+0x60/0xb0
[  142.256426][ T5143]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.262406][ T5143] RIP: 0033:0x7f0d59f9de99
[  142.266875][ T5143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.287766][ T5143] RSP: 002b:00007f0d5adf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.296429][ T5143] RAX: ffffffffffffffda RBX: 00007f0d5a225fa0 RCX: 00007f0d59f9de99
[  142.304554][ T5143] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  142.312666][ T5143] RBP: 00007f0d5adf3090 R08: 0000000000000000 R09: 0000000000000000
[  142.320682][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.328709][ T5143] R13: 00007f0d5a226038 R14: 00007f0d5a225fa0 R15: 00007ffdbeb7dae8
[  142.337161][ T5143]  </TASK>
[  142.372867][ T5147] netlink: 126644 bytes leftover after parsing attributes in process `syz.0.240'.
[  143.299213][ T5157] netlink: 830 bytes leftover after parsing attributes in process `syz.0.242'.
[  143.684843][ T5170] FAULT_INJECTION: forcing a failure.
[  143.684843][ T5170] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  143.773243][ T5170] CPU: 0 PID: 5170 Comm: syz.0.247 Not tainted syzkaller #0
[  143.780901][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  143.791450][ T5170] Call Trace:
[  143.794880][ T5170]  <TASK>
[  143.797973][ T5170]  dump_stack_lvl+0x188/0x24e
[  143.802716][ T5170]  ? show_regs_print_info+0x12/0x12
[  143.807979][ T5170]  ? load_image+0x410/0x410
[  143.812715][ T5170]  ? __lock_acquire+0x7c40/0x7c40
[  143.817896][ T5170]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  143.824214][ T5170]  should_fail_ex+0x390/0x4c0
[  143.829270][ T5170]  prepare_alloc_pages+0x1e1/0x5b0
[  143.834462][ T5170]  __alloc_pages+0x130/0x4f0
[  143.839221][ T5170]  ? zone_statistics+0x170/0x170
[  143.844264][ T5170]  __pmd_alloc+0xa6/0x760
[  143.848672][ T5170]  ? __pud_alloc+0x150/0x150
[  143.854278][ T5170]  ? count_memcg_event_mm+0x36b/0x3c0
[  143.860011][ T5170]  ? count_memcg_event_mm+0x8a/0x3c0
[  143.865966][ T5170]  ? put_page+0x270/0x270
[  143.870947][ T5170]  ? hugepage_vma_check+0x461/0x540
[  143.876253][ T5170]  handle_mm_fault+0xa06/0x3d40
[  143.881303][ T5170]  ? numa_migrate_prep+0x250/0x250
[  143.886522][ T5170]  ? lock_mm_and_find_vma+0xae/0x2f0
[  143.891929][ T5170]  do_user_addr_fault+0x58e/0xb20
[  143.897072][ T5170]  exc_page_fault+0x60/0x100
[  143.901819][ T5170]  ? __might_fault+0xa6/0x120
[  143.906655][ T5170]  asm_exc_page_fault+0x22/0x30
[  143.911751][ T5170] RIP: 0010:__get_user_4+0x1c/0x30
[  143.916935][ T5170] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba
[  143.936601][ T5170] RSP: 0018:ffffc90003b8fd98 EFLAGS: 00050206
[  143.943447][ T5170] RAX: 000000110c23003f RBX: ffff888059d30000 RCX: d7cf4ab2f29aa500
[  143.951750][ T5170] RDX: ffffffffffffffff RSI: ffffffff8a8c2920 RDI: ffffffff8adf42e0
[  143.960144][ T5170] RBP: ffffc90003b8fed8 R08: ffffffff8e2121af R09: 1ffffffff1c42435
[  143.968236][ T5170] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: 0000000040047438
[  143.976358][ T5170] R13: ffff888059d300d8 R14: 000000110c23003f R15: 1ffff1100ef90f05
[  143.984516][ T5170]  ppp_ioctl+0x4ec/0x1a40
[  143.989014][ T5170]  ? ppp_poll+0x250/0x250
[  143.993418][ T5170]  ? __fget_files+0x28/0x460
[  143.998207][ T5170]  ? bpf_lsm_file_ioctl+0x5/0x10
[  144.003347][ T5170]  ? security_file_ioctl+0x7c/0xa0
[  144.008737][ T5170]  ? ppp_poll+0x250/0x250
[  144.013415][ T5170]  __se_sys_ioctl+0xfa/0x170
[  144.018176][ T5170]  do_syscall_64+0x4c/0xa0
[  144.022949][ T5170]  ? clear_bhb_loop+0x60/0xb0
[  144.027745][ T5170]  ? clear_bhb_loop+0x60/0xb0
[  144.032512][ T5170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.038500][ T5170] RIP: 0033:0x7fa01679de99
[  144.042978][ T5170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.063097][ T5170] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.071589][ T5170] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  144.080148][ T5170] RDX: 000000110c23003f RSI: 0000000040047438 RDI: 0000000000000004
[  144.088291][ T5170] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  144.096423][ T5170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.104814][ T5170] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  144.113101][ T5170]  </TASK>
[  145.772192][ T5202] FAULT_INJECTION: forcing a failure.
[  145.772192][ T5202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.811426][ T5202] CPU: 0 PID: 5202 Comm: syz.0.257 Not tainted syzkaller #0
[  145.819443][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  145.829816][ T5202] Call Trace:
[  145.833325][ T5202]  <TASK>
[  145.836491][ T5202]  dump_stack_lvl+0x188/0x24e
[  145.841420][ T5202]  ? show_regs_print_info+0x12/0x12
[  145.846696][ T5202]  ? load_image+0x410/0x410
[  145.851374][ T5202]  ? __lock_acquire+0x7c40/0x7c40
[  145.856652][ T5202]  should_fail_ex+0x390/0x4c0
[  145.861764][ T5202]  _copy_from_user+0x2c/0x170
[  145.866784][ T5202]  ____sys_sendmsg+0x31a/0x9a0
[  145.871658][ T5202]  ? __sys_sendmsg_sock+0x30/0x30
[  145.876923][ T5202]  ? __import_iovec+0x306/0x510
[  145.881944][ T5202]  ? import_iovec+0x6f/0xa0
[  145.886952][ T5202]  ___sys_sendmsg+0x2a2/0x360
[  145.891888][ T5202]  ? __sys_sendmsg+0x2a0/0x2a0
[  145.897054][ T5202]  ? __lock_acquire+0x7c40/0x7c40
[  145.902606][ T5202]  __se_sys_sendmsg+0x1c3/0x2b0
[  145.907641][ T5202]  ? __x64_sys_sendmsg+0x80/0x80
[  145.913143][ T5202]  ? lockdep_hardirqs_on+0x94/0x140
[  145.918836][ T5202]  do_syscall_64+0x4c/0xa0
[  145.923329][ T5202]  ? clear_bhb_loop+0x60/0xb0
[  145.928484][ T5202]  ? clear_bhb_loop+0x60/0xb0
[  145.933586][ T5202]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.939738][ T5202] RIP: 0033:0x7fa01679de99
[  145.944687][ T5202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.965407][ T5202] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.974153][ T5202] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  145.982285][ T5202] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[  145.992857][ T5202] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  146.002311][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.012095][ T5202] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  146.020228][ T5202]  </TASK>
[  146.171723][ T5205] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.258'.
[  146.850902][ T5225] netlink: 152 bytes leftover after parsing attributes in process `syz.0.264'.
[  147.014186][ T5234] netlink: 830 bytes leftover after parsing attributes in process `syz.1.267'.
[  150.881930][ T5280] netlink: 830 bytes leftover after parsing attributes in process `syz.2.282'.
[  151.794924][ T5286] validate_nla: 2 callbacks suppressed
[  151.794946][ T5286] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[  151.892572][ T5286] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[  151.935680][ T5285] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[  155.154698][ T5316] netlink: 830 bytes leftover after parsing attributes in process `syz.0.290'.
[  156.243894][ T5321] netlink: 830 bytes leftover after parsing attributes in process `syz.1.296'.
[  156.474391][ T5328] netlink: 830 bytes leftover after parsing attributes in process `syz.4.294'.
[  157.364964][ T5332] device bond_slave_1 entered promiscuous mode
[  157.865858][ T5338] netlink: 'syz.0.300': attribute type 29 has an invalid length.
[  158.110597][ T5338] netlink: 'syz.0.300': attribute type 29 has an invalid length.
[  158.366945][ T5340] netlink: 'syz.0.300': attribute type 29 has an invalid length.
[  161.118521][ T5371] netlink: 830 bytes leftover after parsing attributes in process `syz.1.308'.
[  161.361185][ T5372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.307'.
[  162.444364][ T5379] netlink: 830 bytes leftover after parsing attributes in process `syz.4.313'.
[  162.917184][ T5383] netlink: 'syz.1.312': attribute type 29 has an invalid length.
[  163.929738][ T5383] netlink: 'syz.1.312': attribute type 29 has an invalid length.
[  164.451744][ T5384] netlink: 'syz.1.312': attribute type 29 has an invalid length.
[  164.912792][ T5395] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.316'.
[  166.691199][ T5408] netlink: 'syz.0.329': attribute type 29 has an invalid length.
[  166.906548][ T5408] netlink: 'syz.0.329': attribute type 29 has an invalid length.
[  167.037695][ T5410] netlink: 'syz.0.329': attribute type 29 has an invalid length.
[  168.076067][ T5425] netlink: 830 bytes leftover after parsing attributes in process `syz.4.325'.
[  168.954432][ T5435] netlink: 'syz.4.327': attribute type 29 has an invalid length.
[  169.092710][ T5435] netlink: 'syz.4.327': attribute type 29 has an invalid length.
[  169.141745][ T5436] netlink: 'syz.4.327': attribute type 29 has an invalid length.
[  170.603188][ T5450] netlink: 830 bytes leftover after parsing attributes in process `syz.0.332'.
[  172.013251][ T5466] FAULT_INJECTION: forcing a failure.
[  172.013251][ T5466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.107360][ T5466] CPU: 1 PID: 5466 Comm: syz.1.337 Not tainted syzkaller #0
[  172.116078][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  172.127178][ T5466] Call Trace:
[  172.130727][ T5466]  <TASK>
[  172.133911][ T5466]  dump_stack_lvl+0x188/0x24e
[  172.138886][ T5466]  ? show_regs_print_info+0x12/0x12
[  172.144547][ T5466]  ? load_image+0x410/0x410
[  172.149273][ T5466]  ? __lock_acquire+0x7c40/0x7c40
[  172.154675][ T5466]  should_fail_ex+0x390/0x4c0
[  172.159664][ T5466]  _copy_from_user+0x2c/0x170
[  172.164517][ T5466]  __sys_bpf+0x2ea/0x780
[  172.169171][ T5466]  ? bpf_link_show_fdinfo+0x380/0x380
[  172.174832][ T5466]  ? lock_chain_count+0x20/0x20
[  172.180180][ T5466]  __x64_sys_bpf+0x78/0x90
[  172.184770][ T5466]  do_syscall_64+0x4c/0xa0
[  172.189464][ T5466]  ? clear_bhb_loop+0x60/0xb0
[  172.194622][ T5466]  ? clear_bhb_loop+0x60/0xb0
[  172.199389][ T5466]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.205866][ T5466] RIP: 0033:0x7fa8c039de99
[  172.210548][ T5466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.230861][ T5466] RSP: 002b:00007fa8c12ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  172.239357][ T5466] RAX: ffffffffffffffda RBX: 00007fa8c0625fa0 RCX: 00007fa8c039de99
[  172.247432][ T5466] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 000000000000000f
[  172.255463][ T5466] RBP: 00007fa8c12ed090 R08: 0000000000000000 R09: 0000000000000000
[  172.263674][ T5466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.271706][ T5466] R13: 00007fa8c0626038 R14: 00007fa8c0625fa0 R15: 00007ffd8f3a1298
[  172.280031][ T5466]  </TASK>
[  173.193517][ T5469] netlink: 830 bytes leftover after parsing attributes in process `syz.4.338'.
[  176.467450][ T5492] FAULT_INJECTION: forcing a failure.
[  176.467450][ T5492] name failslab, interval 1, probability 0, space 0, times 0
[  176.474043][ T5490] FAULT_INJECTION: forcing a failure.
[  176.474043][ T5490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.541446][ T5492] CPU: 0 PID: 5492 Comm: syz.2.347 Not tainted syzkaller #0
[  176.548984][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  176.559307][ T5492] Call Trace:
[  176.562863][ T5492]  <TASK>
[  176.565891][ T5492]  dump_stack_lvl+0x188/0x24e
[  176.570660][ T5492]  ? show_regs_print_info+0x12/0x12
[  176.576011][ T5492]  ? load_image+0x410/0x410
[  176.581135][ T5492]  should_fail_ex+0x390/0x4c0
[  176.586036][ T5492]  should_failslab+0x5/0x20
[  176.590589][ T5492]  slab_pre_alloc_hook+0x59/0x300
[  176.595849][ T5492]  ? lockdep_init_map_type+0x98/0x8d0
[  176.601362][ T5492]  ? nf_ct_ext_add+0x1a7/0x3e0
[  176.606185][ T5492]  __kmem_cache_alloc_node+0x4f/0x270
[  176.611616][ T5492]  ? nf_ct_ext_add+0x1a7/0x3e0
[  176.616424][ T5492]  __kmalloc_node_track_caller+0xa0/0x240
[  176.622205][ T5492]  krealloc+0x6a/0x100
[  176.626441][ T5492]  nf_ct_ext_add+0x1a7/0x3e0
[  176.631712][ T5492]  init_conntrack+0x808/0x1190
[  176.637364][ T5492]  ? early_drop+0x870/0x870
[  176.642115][ T5492]  ? nf_conntrack_find_get+0x640/0x640
[  176.647782][ T5492]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  176.654032][ T5492]  ? __siphash_unaligned+0x289/0x3d0
[  176.659452][ T5492]  nf_conntrack_in+0xd76/0x1830
[  176.664719][ T5492]  ? lockdep_hardirqs_on+0x94/0x140
[  176.670011][ T5492]  ? nf_ct_pernet+0x270/0x270
[  176.674766][ T5492]  ? ipt_do_table+0x2c1/0x1580
[  176.680027][ T5492]  ? read_lock_is_recursive+0x10/0x10
[  176.685454][ T5492]  ? ipv4_conntrack_defrag+0x284/0x5b0
[  176.690956][ T5492]  ? ipv4_conntrack_local+0x11f/0x200
[  176.696460][ T5492]  ? ipv4_conntrack_in+0x20/0x20
[  176.701459][ T5492]  nf_hook_slow+0xb9/0x200
[  176.705924][ T5492]  ? nf_hook+0x390/0x390
[  176.710475][ T5492]  nf_hook+0x224/0x390
[  176.714708][ T5492]  ? nf_hook+0x9e/0x390
[  176.718926][ T5492]  ? __ip_local_out+0x5d0/0x5d0
[  176.723859][ T5492]  ? nf_hook+0x390/0x390
[  176.728294][ T5492]  ? ip_fast_csum+0x1ea/0x2b0
[  176.733225][ T5492]  __ip_local_out+0x49c/0x5d0
[  176.738022][ T5492]  ? nf_hook+0x390/0x390
[  176.742516][ T5492]  ip_send_skb+0x48/0x1c0
[  176.747054][ T5492]  udp_send_skb+0xa4f/0x13f0
[  176.751765][ T5492]  udp_sendmsg+0x1b46/0x23d0
[  176.756478][ T5492]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  176.761778][ T5492]  ? udp_cmsg_send+0x350/0x350
[  176.766877][ T5492]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  176.772925][ T5492]  ? lock_chain_count+0x20/0x20
[  176.777934][ T5492]  ? __local_bh_enable_ip+0x136/0x1c0
[  176.783467][ T5492]  ? _local_bh_enable+0xa0/0xa0
[  176.788413][ T5492]  ? inet_sendmsg+0x109/0x2a0
[  176.793432][ T5492]  ? inet_sendmsg+0x109/0x2a0
[  176.798466][ T5492]  ? inet_send_prepare+0x250/0x250
[  176.804091][ T5492]  ____sys_sendmsg+0x5ed/0x9a0
[  176.809227][ T5492]  ? __lock_acquire+0x7c40/0x7c40
[  176.814953][ T5492]  ? __sys_sendmsg_sock+0x30/0x30
[  176.820371][ T5492]  ? __import_iovec+0x306/0x510
[  176.825404][ T5492]  ? import_iovec+0x6f/0xa0
[  176.830150][ T5492]  ___sys_sendmsg+0x2a2/0x360
[  176.835001][ T5492]  ? __sys_sendmsg+0x2a0/0x2a0
[  176.839880][ T5492]  ? __lock_acquire+0x7c40/0x7c40
[  176.845286][ T5492]  __se_sys_sendmsg+0x1c3/0x2b0
[  176.850290][ T5492]  ? __x64_sys_sendmsg+0x80/0x80
[  176.855303][ T5492]  ? lockdep_hardirqs_on+0x94/0x140
[  176.860542][ T5492]  do_syscall_64+0x4c/0xa0
[  176.865089][ T5492]  ? clear_bhb_loop+0x60/0xb0
[  176.870361][ T5492]  ? clear_bhb_loop+0x60/0xb0
[  176.875221][ T5492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.881188][ T5492] RIP: 0033:0x7f0d59f9de99
[  176.885687][ T5492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.905970][ T5492] RSP: 002b:00007f0d5adf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.914433][ T5492] RAX: ffffffffffffffda RBX: 00007f0d5a225fa0 RCX: 00007f0d59f9de99
[  176.922905][ T5492] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 0000000000000007
[  176.930945][ T5492] RBP: 00007f0d5adf3090 R08: 0000000000000000 R09: 0000000000000000
[  176.939164][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.947366][ T5492] R13: 00007f0d5a226038 R14: 00007f0d5a225fa0 R15: 00007ffdbeb7dae8
[  176.955591][ T5492]  </TASK>
[  176.973586][ T5490] CPU: 1 PID: 5490 Comm: syz.0.346 Not tainted syzkaller #0
[  176.980978][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  176.991114][ T5490] Call Trace:
[  176.994458][ T5490]  <TASK>
[  176.997451][ T5490]  dump_stack_lvl+0x188/0x24e
[  177.002265][ T5490]  ? show_regs_print_info+0x12/0x12
[  177.007566][ T5490]  ? load_image+0x410/0x410
[  177.012230][ T5490]  ? __lock_acquire+0x7c40/0x7c40
[  177.017441][ T5490]  ? snprintf+0xe5/0x140
[  177.021862][ T5490]  should_fail_ex+0x390/0x4c0
[  177.026628][ T5490]  _copy_to_user+0x2c/0x130
[  177.031238][ T5490]  simple_read_from_buffer+0xe3/0x150
[  177.036695][ T5490]  proc_fail_nth_read+0x1a6/0x220
[  177.041820][ T5490]  ? proc_fault_inject_write+0x310/0x310
[  177.047537][ T5490]  ? fsnotify_perm+0x248/0x550
[  177.052456][ T5490]  ? proc_fault_inject_write+0x310/0x310
[  177.058427][ T5490]  vfs_read+0x2db/0x960
[  177.062758][ T5490]  ? kernel_read+0x1e0/0x1e0
[  177.067427][ T5490]  ? __fget_files+0x28/0x460
[  177.072109][ T5490]  ? __fget_files+0x3fc/0x460
[  177.076876][ T5490]  ? __fdget_pos+0x2ae/0x360
[  177.081540][ T5490]  ? ksys_read+0x70/0x260
[  177.086046][ T5490]  ksys_read+0x14d/0x260
[  177.090467][ T5490]  ? vfs_write+0x9a0/0x9a0
[  177.095200][ T5490]  ? lockdep_hardirqs_on+0x94/0x140
[  177.100490][ T5490]  do_syscall_64+0x4c/0xa0
[  177.104983][ T5490]  ? clear_bhb_loop+0x60/0xb0
[  177.110019][ T5490]  ? clear_bhb_loop+0x60/0xb0
[  177.114963][ T5490]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.121256][ T5490] RIP: 0033:0x7fa01675e6ce
[  177.126093][ T5490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  177.146763][ T5490] RSP: 002b:00007fa0176e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.155496][ T5490] RAX: ffffffffffffffda RBX: 00007fa0176e36c0 RCX: 00007fa01675e6ce
[  177.163705][ T5490] RDX: 000000000000000f RSI: 00007fa0176e30a0 RDI: 0000000000000006
[  177.172193][ T5490] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  177.180295][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.188752][ T5490] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  177.197049][ T5490]  </TASK>
[  178.459142][ T5507] netlink: 830 bytes leftover after parsing attributes in process `syz.4.351'.
[  179.340130][ T5525] netlink: 'syz.3.358': attribute type 29 has an invalid length.
[  179.441110][ T5525] netlink: 'syz.3.358': attribute type 29 has an invalid length.
[  179.484070][ T5526] netlink: 'syz.3.358': attribute type 29 has an invalid length.
[  179.858247][ T5536] netlink: 105 bytes leftover after parsing attributes in process `syz.3.363'.
[  179.891587][ T5536] netlink: 105 bytes leftover after parsing attributes in process `syz.3.363'.
[  181.370005][ T5559] device syzkaller0 entered promiscuous mode
[  182.205419][ T5579] netlink: 'syz.4.374': attribute type 29 has an invalid length.
[  182.241247][ T5583] netlink: 830 bytes leftover after parsing attributes in process `syz.3.377'.
[  182.841446][ T5579] netlink: 'syz.4.374': attribute type 29 has an invalid length.
[  183.062080][ T5585] netlink: 'syz.4.374': attribute type 29 has an invalid length.
[  185.029785][ T5619] netlink: 184 bytes leftover after parsing attributes in process `syz.4.385'.
[  185.151004][ T5618] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.385'.
[  187.026247][ T5646] netlink: 'syz.2.395': attribute type 29 has an invalid length.
[  187.059257][ T5646] netlink: 'syz.2.395': attribute type 29 has an invalid length.
[  187.079836][ T5647] netlink: 'syz.2.395': attribute type 29 has an invalid length.
[  187.772861][ T5660] netlink: 830 bytes leftover after parsing attributes in process `syz.2.402'.
[  187.823965][ T5662] netlink: 830 bytes leftover after parsing attributes in process `syz.3.403'.
[  188.515062][ T5671] device syzkaller0 entered promiscuous mode
[  190.000451][ T5671] syz.4.404 (5671) used greatest stack depth: 14864 bytes left
[  191.521468][ T5694] netlink: 'syz.0.413': attribute type 29 has an invalid length.
[  192.080508][ T5694] netlink: 'syz.0.413': attribute type 29 has an invalid length.
[  192.413445][ T5697] netlink: 'syz.0.413': attribute type 29 has an invalid length.
[  192.580032][ T5705] netlink: 830 bytes leftover after parsing attributes in process `syz.1.414'.
[  195.011099][ T5725] device syzkaller0 entered promiscuous mode
[  195.030699][ T5723] netlink: 'syz.1.417': attribute type 17 has an invalid length.
[  195.072879][ T5723] netlink: 'syz.1.417': attribute type 16 has an invalid length.
[  195.195390][ T5723] netlink: 152 bytes leftover after parsing attributes in process `syz.1.417'.
[  196.267624][ T5748] netlink: 'syz.3.426': attribute type 29 has an invalid length.
[  196.318147][ T5748] netlink: 'syz.3.426': attribute type 29 has an invalid length.
[  196.344097][ T5750] netlink: 'syz.3.426': attribute type 29 has an invalid length.
[  196.448881][ T5751] FAULT_INJECTION: forcing a failure.
[  196.448881][ T5751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.605079][ T5751] CPU: 1 PID: 5751 Comm: syz.0.425 Not tainted syzkaller #0
[  196.612481][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  196.622853][ T5751] Call Trace:
[  196.626194][ T5751]  <TASK>
[  196.629285][ T5751]  dump_stack_lvl+0x188/0x24e
[  196.634422][ T5751]  ? show_regs_print_info+0x12/0x12
[  196.640054][ T5751]  ? load_image+0x410/0x410
[  196.644624][ T5751]  ? __lock_acquire+0x7c40/0x7c40
[  196.649834][ T5751]  should_fail_ex+0x390/0x4c0
[  196.654610][ T5751]  _copy_from_user+0x2c/0x170
[  196.659340][ T5751]  __sys_bpf+0x2ea/0x780
[  196.663645][ T5751]  ? bpf_link_show_fdinfo+0x380/0x380
[  196.669090][ T5751]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  196.676360][ T5751]  __x64_sys_bpf+0x78/0x90
[  196.681094][ T5751]  do_syscall_64+0x4c/0xa0
[  196.685565][ T5751]  ? clear_bhb_loop+0x60/0xb0
[  196.690299][ T5751]  ? clear_bhb_loop+0x60/0xb0
[  196.695130][ T5751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.701252][ T5751] RIP: 0033:0x7fa01679de99
[  196.705720][ T5751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.726096][ T5751] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  196.734651][ T5751] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  196.742686][ T5751] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  196.750905][ T5751] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  196.759069][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.767085][ T5751] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  196.775162][ T5751]  </TASK>
[  197.277224][ T5756] netlink: 830 bytes leftover after parsing attributes in process `syz.1.427'.
[  197.402698][ T5757] netlink: 830 bytes leftover after parsing attributes in process `syz.0.428'.
[  197.435777][ T5761] FAULT_INJECTION: forcing a failure.
[  197.435777][ T5761] name failslab, interval 1, probability 0, space 0, times 0
[  197.468392][ T5761] CPU: 0 PID: 5761 Comm: syz.4.429 Not tainted syzkaller #0
[  197.475867][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  197.486069][ T5761] Call Trace:
[  197.489395][ T5761]  <TASK>
[  197.492367][ T5761]  dump_stack_lvl+0x188/0x24e
[  197.497119][ T5761]  ? show_regs_print_info+0x12/0x12
[  197.502400][ T5761]  ? load_image+0x410/0x410
[  197.507516][ T5761]  ? perf_trace_lock+0xf8/0x390
[  197.512465][ T5761]  ? trace_event_raw_event_lock+0x230/0x230
[  197.518643][ T5761]  should_fail_ex+0x390/0x4c0
[  197.523837][ T5761]  should_failslab+0x5/0x20
[  197.528422][ T5761]  slab_pre_alloc_hook+0x59/0x300
[  197.533531][ T5761]  ? ref_tracker_alloc+0x14f/0x490
[  197.538717][ T5761]  __kmem_cache_alloc_node+0x4f/0x270
[  197.544587][ T5761]  ? ref_tracker_alloc+0x14f/0x490
[  197.550027][ T5761]  kmalloc_trace+0x26/0xe0
[  197.554603][ T5761]  ref_tracker_alloc+0x14f/0x490
[  197.559891][ T5761]  ? lockdep_init_map_type+0x98/0x8d0
[  197.566294][ T5761]  ? ref_tracker_dir_print+0x150/0x150
[  197.571831][ T5761]  ? lockdep_softirqs_off+0x430/0x430
[  197.577377][ T5761]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  197.583354][ T5761]  ? _raw_spin_unlock+0x40/0x40
[  197.588361][ T5761]  ? neigh_release+0x80/0x80
[  197.593014][ T5761]  ? init_timer_key+0x178/0x320
[  197.598005][ T5761]  ? ___neigh_create+0xc1d/0x2450
[  197.603181][ T5761]  ___neigh_create+0xcbe/0x2450
[  197.608111][ T5761]  ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0
[  197.614109][ T5761]  ? ip6_finish_output2+0x58f/0x15c0
[  197.619652][ T5761]  ip6_finish_output2+0x150e/0x15c0
[  197.624937][ T5761]  ? ip6_finish_output2+0x58f/0x15c0
[  197.630913][ T5761]  ? nf_hook+0x390/0x390
[  197.635341][ T5761]  ? ip6_mtu+0x31a/0x3f0
[  197.640120][ T5761]  ? ip6_finish_output+0x563/0x7f0
[  197.645322][ T5761]  rawv6_send_hdrinc+0xd9f/0x16a0
[  197.650516][ T5761]  ? rawv6_send_hdrinc+0xb17/0x16a0
[  197.655979][ T5761]  ? rawv6_probe_proto_opt+0x300/0x300
[  197.661513][ T5761]  ? rawv6_push_pending_frames+0x920/0x920
[  197.667469][ T5761]  ? ip6_dst_hoplimit+0x92/0x340
[  197.672572][ T5761]  ? ip6_dst_hoplimit+0x92/0x340
[  197.677752][ T5761]  rawv6_sendmsg+0x11a7/0x1710
[  197.682599][ T5761]  ? compat_rawv6_ioctl+0x60/0x60
[  197.687916][ T5761]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  197.694401][ T5761]  ? aa_sock_msg_perm+0x94/0x150
[  197.699495][ T5761]  ? inet_sendmsg+0x7a/0x2a0
[  197.704152][ T5761]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  197.709502][ T5761]  ? inet_send_prepare+0x250/0x250
[  197.714767][ T5761]  ____sys_sendmsg+0x5ed/0x9a0
[  197.719642][ T5761]  ? __sys_sendmsg_sock+0x30/0x30
[  197.724911][ T5761]  ? __import_iovec+0x306/0x510
[  197.729947][ T5761]  ? import_iovec+0x6f/0xa0
[  197.734540][ T5761]  ___sys_sendmsg+0x2a2/0x360
[  197.739742][ T5761]  ? __sys_sendmsg+0x2a0/0x2a0
[  197.744606][ T5761]  ? __lock_acquire+0x7c40/0x7c40
[  197.749912][ T5761]  __se_sys_sendmsg+0x1c3/0x2b0
[  197.754846][ T5761]  ? __x64_sys_sendmsg+0x80/0x80
[  197.759871][ T5761]  ? lockdep_hardirqs_on+0x94/0x140
[  197.765331][ T5761]  do_syscall_64+0x4c/0xa0
[  197.769816][ T5761]  ? clear_bhb_loop+0x60/0xb0
[  197.774561][ T5761]  ? clear_bhb_loop+0x60/0xb0
[  197.779401][ T5761]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.785726][ T5761] RIP: 0033:0x7fa29379de99
[  197.790282][ T5761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.812095][ T5761] RSP: 002b:00007fa2919f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.820765][ T5761] RAX: ffffffffffffffda RBX: 00007fa293a25fa0 RCX: 00007fa29379de99
[  197.829223][ T5761] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  197.837479][ T5761] RBP: 00007fa2919f6090 R08: 0000000000000000 R09: 0000000000000000
[  197.845690][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.854084][ T5761] R13: 00007fa293a26038 R14: 00007fa293a25fa0 R15: 00007fffd050c568
[  197.863564][ T5761]  </TASK>
[  197.882641][ T5761] memory allocation failure, unreliable refcount tracker.
[  198.124652][ T5764] netlink: 'syz.3.440': attribute type 29 has an invalid length.
[  198.157113][ T5764] netlink: 'syz.3.440': attribute type 29 has an invalid length.
[  198.174130][ T5767] netlink: 'syz.3.440': attribute type 29 has an invalid length.
[  198.238460][ T5766] netlink: 830 bytes leftover after parsing attributes in process `syz.4.430'.
[  199.598144][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  199.605050][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  200.733785][ T5784] netlink: 830 bytes leftover after parsing attributes in process `syz.2.431'.
[  201.615266][ T5792] FAULT_INJECTION: forcing a failure.
[  201.615266][ T5792] name failslab, interval 1, probability 0, space 0, times 0
[  201.744334][ T5792] CPU: 0 PID: 5792 Comm: syz.4.436 Not tainted syzkaller #0
[  201.751917][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  201.762379][ T5792] Call Trace:
[  201.765716][ T5792]  <TASK>
[  201.768723][ T5792]  dump_stack_lvl+0x188/0x24e
[  201.773474][ T5792]  ? show_regs_print_info+0x12/0x12
[  201.778830][ T5792]  ? load_image+0x410/0x410
[  201.783429][ T5792]  ? __might_sleep+0xd0/0xd0
[  201.788171][ T5792]  ? __lock_acquire+0x7c40/0x7c40
[  201.793724][ T5792]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  201.799878][ T5792]  should_fail_ex+0x390/0x4c0
[  201.805019][ T5792]  should_failslab+0x5/0x20
[  201.809885][ T5792]  slab_pre_alloc_hook+0x59/0x300
[  201.815244][ T5792]  ? lockdep_hardirqs_on+0x94/0x140
[  201.820582][ T5792]  ? process_preds+0x41c/0x3680
[  201.825485][ T5792]  __kmem_cache_alloc_node+0x4f/0x270
[  201.831006][ T5792]  ? process_preds+0x41c/0x3680
[  201.836082][ T5792]  __kmalloc+0xa3/0x240
[  201.840378][ T5792]  process_preds+0x41c/0x3680
[  201.845275][ T5792]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  201.852198][ T5792]  ? lockdep_hardirqs_on+0x94/0x140
[  201.857445][ T5792]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  201.863662][ T5792]  ? create_filter_start+0x2c0/0x2c0
[  201.869216][ T5792]  ? create_filter_start+0x2a6/0x2c0
[  201.874642][ T5792]  ? create_filter_start+0x176/0x2c0
[  201.880077][ T5792]  ftrace_profile_set_filter+0xff/0x280
[  201.886026][ T5792]  perf_ioctl+0xea6/0x23e0
[  201.890673][ T5792]  ? perf_poll+0x1b0/0x1b0
[  201.895256][ T5792]  ? __fget_files+0x28/0x460
[  201.900112][ T5792]  ? bpf_lsm_file_ioctl+0x5/0x10
[  201.905454][ T5792]  ? security_file_ioctl+0x7c/0xa0
[  201.910610][ T5792]  ? perf_poll+0x1b0/0x1b0
[  201.915063][ T5792]  __se_sys_ioctl+0xfa/0x170
[  201.919821][ T5792]  do_syscall_64+0x4c/0xa0
[  201.924456][ T5792]  ? clear_bhb_loop+0x60/0xb0
[  201.929726][ T5792]  ? clear_bhb_loop+0x60/0xb0
[  201.934457][ T5792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.940601][ T5792] RIP: 0033:0x7fa29379de99
[  201.945072][ T5792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.965171][ T5792] RSP: 002b:00007fa2919f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.973645][ T5792] RAX: ffffffffffffffda RBX: 00007fa293a25fa0 RCX: 00007fa29379de99
[  201.981922][ T5792] RDX: 0000200000000000 RSI: 0000000040082406 RDI: 0000000000000003
[  201.990048][ T5792] RBP: 00007fa2919f6090 R08: 0000000000000000 R09: 0000000000000000
[  201.998321][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.006419][ T5792] R13: 00007fa293a26038 R14: 00007fa293a25fa0 R15: 00007fffd050c568
[  202.014548][ T5792]  </TASK>
[  202.338096][ T5797] device syzkaller0 entered promiscuous mode
[  203.183765][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'.
[  203.243979][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[  203.354143][ T5803] netlink: 33 bytes leftover after parsing attributes in process `syz.3.438'.
[  203.454853][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[  203.497928][ T5803] netlink: 33 bytes leftover after parsing attributes in process `syz.3.438'.
[  203.606259][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[  203.701534][ T5803] netlink: 33 bytes leftover after parsing attributes in process `syz.3.438'.
[  206.794600][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[  206.805397][ T4276] Bluetooth: hci1: command 0x0406 tx timeout
[  206.812994][ T4288] Bluetooth: hci3: command 0x0406 tx timeout
[  206.951577][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  206.951587][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  207.383576][ T5839] netlink: 'syz.0.447': attribute type 17 has an invalid length.
[  207.425551][ T5839] netlink: 'syz.0.447': attribute type 16 has an invalid length.
[  207.491512][ T5839] netlink: 152 bytes leftover after parsing attributes in process `syz.0.447'.
[  208.309818][ T5856] netlink: 830 bytes leftover after parsing attributes in process `syz.3.453'.
[  209.820114][ T5867] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.456'.
[  210.761821][   T48] Bluetooth: hci3: ISO packet for unknown connection handle 2096
[  214.944371][ T5907] netlink: 830 bytes leftover after parsing attributes in process `syz.4.471'.
[  215.309977][ T5916] netlink: 830 bytes leftover after parsing attributes in process `syz.0.473'.
[  219.938660][ T5966] FAULT_INJECTION: forcing a failure.
[  219.938660][ T5966] name failslab, interval 1, probability 0, space 0, times 0
[  219.992396][ T5966] CPU: 0 PID: 5966 Comm: syz.2.488 Not tainted syzkaller #0
[  219.999983][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  220.011438][ T5966] Call Trace:
[  220.014853][ T5966]  <TASK>
[  220.018437][ T5966]  dump_stack_lvl+0x188/0x24e
[  220.023358][ T5966]  ? show_regs_print_info+0x12/0x12
[  220.028712][ T5966]  ? load_image+0x410/0x410
[  220.033337][ T5966]  ? __lock_acquire+0x7c40/0x7c40
[  220.038420][ T5966]  ? trace_event_raw_event_lock+0x230/0x230
[  220.044428][ T5966]  should_fail_ex+0x390/0x4c0
[  220.049398][ T5966]  should_failslab+0x5/0x20
[  220.053970][ T5966]  slab_pre_alloc_hook+0x59/0x300
[  220.059151][ T5966]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  220.064770][ T5966]  __kmem_cache_alloc_node+0x4f/0x270
[  220.070219][ T5966]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  220.075839][ T5966]  __kmalloc+0xa3/0x240
[  220.080071][ T5966]  bpf_prog_test_run_skb+0x23e/0x18e0
[  220.085493][ T5966]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  220.091864][ T5966]  ? lockdep_hardirqs_on+0x94/0x140
[  220.097184][ T5966]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  220.103428][ T5966]  ? cpu_online+0xa0/0xa0
[  220.107796][ T5966]  bpf_prog_test_run+0x31c/0x390
[  220.112780][ T5966]  __sys_bpf+0x62b/0x780
[  220.117071][ T5966]  ? bpf_link_show_fdinfo+0x380/0x380
[  220.122587][ T5966]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  220.128816][ T5966]  __x64_sys_bpf+0x78/0x90
[  220.133390][ T5966]  do_syscall_64+0x4c/0xa0
[  220.138136][ T5966]  ? clear_bhb_loop+0x60/0xb0
[  220.143734][ T5966]  ? clear_bhb_loop+0x60/0xb0
[  220.148490][ T5966]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  220.154534][ T5966] RIP: 0033:0x7f0d59f9de99
[  220.158995][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.179884][ T5966] RSP: 002b:00007f0d5adf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  220.188552][ T5966] RAX: ffffffffffffffda RBX: 00007f0d5a225fa0 RCX: 00007f0d59f9de99
[  220.197000][ T5966] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  220.205790][ T5966] RBP: 00007f0d5adf3090 R08: 0000000000000000 R09: 0000000000000000
[  220.213905][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.222022][ T5966] R13: 00007f0d5a226038 R14: 00007f0d5a225fa0 R15: 00007ffdbeb7dae8
[  220.230316][ T5966]  </TASK>
[  222.427248][ T6004] netlink: 'syz.2.502': attribute type 33 has an invalid length.
[  222.458350][ T6004] netlink: 152 bytes leftover after parsing attributes in process `syz.2.502'.
[  222.521753][ T6008] netlink: 830 bytes leftover after parsing attributes in process `syz.1.501'.
[  222.599206][ T6012] netlink: 'syz.3.503': attribute type 29 has an invalid length.
[  222.727769][ T6012] netlink: 'syz.3.503': attribute type 29 has an invalid length.
[  222.925368][ T6010] netlink: 'syz.3.503': attribute type 29 has an invalid length.
[  223.926589][ T6020] netlink: 830 bytes leftover after parsing attributes in process `syz.0.505'.
[  224.970932][ T6033] netlink: 830 bytes leftover after parsing attributes in process `syz.2.509'.
[  225.402692][ T6038] netlink: 'syz.4.510': attribute type 29 has an invalid length.
[  225.804574][ T6038] netlink: 'syz.4.510': attribute type 29 has an invalid length.
[  226.490545][ T6039] netlink: 'syz.4.510': attribute type 29 has an invalid length.
[  227.298705][ T6046] netlink: 'syz.4.513': attribute type 10 has an invalid length.
[  227.426873][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.435632][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.488695][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.496674][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.505765][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.514160][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.601491][ T6046] team0: Port device bridge0 added
[  227.688461][ T6049] netlink: 'syz.3.514': attribute type 33 has an invalid length.
[  227.713776][ T6049] netlink: 152 bytes leftover after parsing attributes in process `syz.3.514'.
[  230.597144][ T6067] device lo entered promiscuous mode
[  230.698934][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  231.019420][ T6073] netlink: 'syz.3.520': attribute type 29 has an invalid length.
[  231.151699][ T6073] netlink: 'syz.3.520': attribute type 29 has an invalid length.
[  231.229406][ T6077] netlink: 'syz.3.520': attribute type 29 has an invalid length.
[  232.549853][ T6096] netlink: 830 bytes leftover after parsing attributes in process `syz.3.527'.
[  232.652177][ T6099] netlink: 'syz.1.526': attribute type 21 has an invalid length.
[  233.909877][ T6114] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.532'.
[  234.478004][ T6117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.533'.
[  234.537692][ T6119] netlink: 830 bytes leftover after parsing attributes in process `syz.0.531'.
[  235.579534][ T6140] netlink: 'syz.4.538': attribute type 29 has an invalid length.
[  235.911704][ T6140] netlink: 'syz.4.538': attribute type 29 has an invalid length.
[  235.983073][ T6139] netlink: 'syz.4.538': attribute type 29 has an invalid length.
[  237.933491][ T6164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'.
[  238.230739][ T6166] netlink: 830 bytes leftover after parsing attributes in process `syz.4.546'.
[  238.873020][ T6171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.548'.
[  240.249478][ T6191] netlink: 'syz.0.554': attribute type 29 has an invalid length.
[  240.380504][ T6191] netlink: 'syz.0.554': attribute type 29 has an invalid length.
[  241.268567][ T6195] netlink: 'syz.0.554': attribute type 29 has an invalid length.
[  243.023496][ T6228] netlink: 'syz.1.564': attribute type 3 has an invalid length.
[  243.167529][ T6228] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.564'.
[  244.613922][ T6245] FAULT_INJECTION: forcing a failure.
[  244.613922][ T6245] name failslab, interval 1, probability 0, space 0, times 0
[  244.686697][ T6245] CPU: 0 PID: 6245 Comm: syz.2.570 Not tainted syzkaller #0
[  244.694081][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  244.704277][ T6245] Call Trace:
[  244.707635][ T6245]  <TASK>
[  244.710625][ T6245]  dump_stack_lvl+0x188/0x24e
[  244.715563][ T6245]  ? rcu_is_watching+0x11/0xa0
[  244.720395][ T6245]  ? show_regs_print_info+0x12/0x12
[  244.725839][ T6245]  ? load_image+0x410/0x410
[  244.730618][ T6245]  ? lockdep_hardirqs_on+0x94/0x140
[  244.736064][ T6245]  should_fail_ex+0x390/0x4c0
[  244.741049][ T6245]  should_failslab+0x5/0x20
[  244.745868][ T6245]  slab_pre_alloc_hook+0x59/0x300
[  244.750985][ T6245]  ? ref_tracker_alloc+0x14f/0x490
[  244.756159][ T6245]  __kmem_cache_alloc_node+0x4f/0x270
[  244.761647][ T6245]  ? ref_tracker_alloc+0x14f/0x490
[  244.766902][ T6245]  kmalloc_trace+0x26/0xe0
[  244.771416][ T6245]  ref_tracker_alloc+0x14f/0x490
[  244.776449][ T6245]  ? ref_tracker_dir_print+0x150/0x150
[  244.782226][ T6245]  ? asm_sysvec_irq_work+0x16/0x20
[  244.787489][ T6245]  ? __kasan_slab_alloc+0x6b/0x80
[  244.792595][ T6245]  ? slab_post_alloc_hook+0x67/0x490
[  244.798379][ T6245]  ? rcu_is_watching+0x11/0xa0
[  244.803223][ T6245]  dst_init+0xb1/0x400
[  244.807494][ T6245]  dst_alloc+0x12a/0x160
[  244.811929][ T6245]  ip_route_output_key_hash_rcu+0x14e4/0x23f0
[  244.818285][ T6245]  ? ip_route_output_key_hash+0x139/0x330
[  244.824447][ T6245]  ip_route_output_key_hash+0x1ef/0x330
[  244.830100][ T6245]  ? ip_route_input_rcu+0x30a0/0x30a0
[  244.835936][ T6245]  ? __lock_acquire+0x7c40/0x7c40
[  244.841046][ T6245]  ? __lock_acquire+0x7c40/0x7c40
[  244.846153][ T6245]  ip_route_output_flow+0x26/0x150
[  244.851336][ T6245]  ? security_sk_classify_flow+0x77/0x90
[  244.857224][ T6245]  udp_sendmsg+0x1637/0x23d0
[  244.861888][ T6245]  ? release_sock+0x2b/0x1b0
[  244.866571][ T6245]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  244.871488][ T6245]  ? udp_cmsg_send+0x350/0x350
[  244.876417][ T6245]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  244.882666][ T6245]  ? lock_chain_count+0x20/0x20
[  244.887593][ T6245]  ? __local_bh_enable_ip+0x136/0x1c0
[  244.893029][ T6245]  ? _local_bh_enable+0xa0/0xa0
[  244.897962][ T6245]  ? do_raw_spin_unlock+0x11d/0x230
[  244.903334][ T6245]  ? inet_sendmsg+0x109/0x2a0
[  244.908069][ T6245]  ? inet_sendmsg+0x109/0x2a0
[  244.912811][ T6245]  ? inet_send_prepare+0x250/0x250
[  244.918049][ T6245]  ____sys_sendmsg+0x5ed/0x9a0
[  244.922853][ T6245]  ? __lock_acquire+0x7c40/0x7c40
[  244.928015][ T6245]  ? __sys_sendmsg_sock+0x30/0x30
[  244.933071][ T6245]  ? __import_iovec+0x306/0x510
[  244.937983][ T6245]  ? import_iovec+0x6f/0xa0
[  244.942639][ T6245]  ___sys_sendmsg+0x2a2/0x360
[  244.947426][ T6245]  ? __sys_sendmsg+0x2a0/0x2a0
[  244.952275][ T6245]  __se_sys_sendmsg+0x1c3/0x2b0
[  244.957259][ T6245]  ? __x64_sys_sendmsg+0x80/0x80
[  244.962247][ T6245]  ? lockdep_hardirqs_on+0x94/0x140
[  244.967516][ T6245]  do_syscall_64+0x4c/0xa0
[  244.972060][ T6245]  ? clear_bhb_loop+0x60/0xb0
[  244.976785][ T6245]  ? clear_bhb_loop+0x60/0xb0
[  244.981617][ T6245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.987726][ T6245] RIP: 0033:0x7f0d59f9de99
[  244.992275][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.012349][ T6245] RSP: 002b:00007f0d5adf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.020791][ T6245] RAX: ffffffffffffffda RBX: 00007f0d5a225fa0 RCX: 00007f0d59f9de99
[  245.028987][ T6245] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000010
[  245.037008][ T6245] RBP: 00007f0d5adf3090 R08: 0000000000000000 R09: 0000000000000000
[  245.045008][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.053013][ T6245] R13: 00007f0d5a226038 R14: 00007f0d5a225fa0 R15: 00007ffdbeb7dae8
[  245.061054][ T6245]  </TASK>
[  245.248076][ T6259] netlink: 'syz.1.572': attribute type 29 has an invalid length.
[  245.596038][ T6259] netlink: 'syz.1.572': attribute type 29 has an invalid length.
[  245.706806][ T6260] netlink: 'syz.1.572': attribute type 29 has an invalid length.
[  247.780251][ T6274] netlink: 'syz.2.576': attribute type 10 has an invalid length.
[  248.307930][ T6283] TCP: TCP_TX_DELAY enabled
[  249.946146][ T6301] netlink: 'syz.2.585': attribute type 29 has an invalid length.
[  249.965460][ T6301] netlink: 'syz.2.585': attribute type 29 has an invalid length.
[  249.975670][ T6301] netlink: 'syz.2.585': attribute type 29 has an invalid length.
[  252.018988][ T6314] netlink: 822 bytes leftover after parsing attributes in process `syz.0.588'.
[  252.258916][ T6321] netlink: 'syz.0.592': attribute type 29 has an invalid length.
[  252.287800][ T6321] netlink: 'syz.0.592': attribute type 29 has an invalid length.
[  252.306699][ T6321] netlink: 'syz.0.592': attribute type 29 has an invalid length.
[  253.929618][ T6342] netlink: 830 bytes leftover after parsing attributes in process `syz.2.598'.
[  256.810772][ T6358] netlink: 'syz.3.612': attribute type 29 has an invalid length.
[  256.845624][ T6358] netlink: 'syz.3.612': attribute type 29 has an invalid length.
[  256.883841][ T6357] netlink: 'syz.3.612': attribute type 29 has an invalid length.
[  256.956849][ T6358] netlink: 'syz.3.612': attribute type 29 has an invalid length.
[  256.994179][ T6357] netlink: 'syz.3.612': attribute type 29 has an invalid length.
[  257.307339][ T6368] netlink: 'syz.1.604': attribute type 29 has an invalid length.
[  258.610566][ T6368] netlink: 'syz.1.604': attribute type 29 has an invalid length.
[  260.467064][ T6412] netlink: 'syz.0.618': attribute type 21 has an invalid length.
[  260.517317][ T6412] netlink: 156 bytes leftover after parsing attributes in process `syz.0.618'.
[  261.053934][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  261.060670][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  263.064519][ T6431] netlink: 'syz.2.624': attribute type 29 has an invalid length.
[  263.117899][ T6431] netlink: 'syz.2.624': attribute type 29 has an invalid length.
[  263.351122][ T6434] netlink: 'syz.2.624': attribute type 29 has an invalid length.
[  263.800197][ T6446] netlink: 'syz.0.630': attribute type 3 has an invalid length.
[  263.963628][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.001164][ T6452] FAULT_INJECTION: forcing a failure.
[  264.001164][ T6452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.035604][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.037191][ T6452] CPU: 1 PID: 6452 Comm: syz.4.626 Not tainted syzkaller #0
[  264.051124][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  264.061339][ T6452] Call Trace:
[  264.064651][ T6452]  <TASK>
[  264.067793][ T6452]  dump_stack_lvl+0x188/0x24e
[  264.072640][ T6452]  ? show_regs_print_info+0x12/0x12
[  264.077978][ T6452]  ? load_image+0x410/0x410
[  264.082536][ T6452]  ? __lock_acquire+0x7c40/0x7c40
[  264.088063][ T6452]  should_fail_ex+0x390/0x4c0
[  264.092986][ T6452]  _copy_from_user+0x2c/0x170
[  264.098547][ T6452]  bpf_prog_test_run_skb+0x263/0x18e0
[  264.105594][ T6452]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  264.112521][ T6452]  ? lockdep_hardirqs_on+0x94/0x140
[  264.118301][ T6452]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  264.125398][ T6452]  ? cpu_online+0xa0/0xa0
[  264.129968][ T6452]  bpf_prog_test_run+0x31c/0x390
[  264.136141][ T6452]  __sys_bpf+0x62b/0x780
[  264.141370][ T6452]  ? bpf_link_show_fdinfo+0x380/0x380
[  264.147440][ T6452]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  264.153929][ T6452]  __x64_sys_bpf+0x78/0x90
[  264.158426][ T6452]  do_syscall_64+0x4c/0xa0
[  264.163067][ T6452]  ? clear_bhb_loop+0x60/0xb0
[  264.168076][ T6452]  ? clear_bhb_loop+0x60/0xb0
[  264.173092][ T6452]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  264.179302][ T6452] RIP: 0033:0x7fa29379de99
[  264.184126][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.204525][ T6452] RSP: 002b:00007fa2919f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  264.213267][ T6452] RAX: ffffffffffffffda RBX: 00007fa293a25fa0 RCX: 00007fa29379de99
[  264.221974][ T6452] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  264.230366][ T6452] RBP: 00007fa2919f6090 R08: 0000000000000000 R09: 0000000000000000
[  264.238397][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.246426][ T6452] R13: 00007fa293a26038 R14: 00007fa293a25fa0 R15: 00007fffd050c568
[  264.255433][ T6452]  </TASK>
[  264.333163][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.385672][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.659240][ T6455] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.633'.
[  264.693858][ T6455] netlink: zone id is out of range
[  264.699384][ T6455] netlink: zone id is out of range
[  264.721462][ T6455] netlink: zone id is out of range
[  264.727081][ T6455] netlink: zone id is out of range
[  264.751626][ T6455] netlink: zone id is out of range
[  264.765629][ T6455] netlink: zone id is out of range
[  264.781589][ T6455] netlink: get zone limit has 8 unknown bytes
[  265.662303][ T6471] netlink: 'syz.4.638': attribute type 7 has an invalid length.
[  266.381102][ T6485] netlink: 830 bytes leftover after parsing attributes in process `syz.0.642'.
[  267.090503][ T6495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.646'.
[  267.828661][ T6507] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.649'.
[  267.869656][ T6507] netlink: zone id is out of range
[  267.910267][ T6507] netlink: zone id is out of range
[  267.929091][ T6507] netlink: zone id is out of range
[  269.566039][ T6519] netlink: 'syz.2.652': attribute type 10 has an invalid length.
[  271.018144][ T6533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.656'.
[  272.488692][ T6546] netlink: 830 bytes leftover after parsing attributes in process `syz.1.659'.
[  274.979639][ T6565] netlink: 'syz.2.667': attribute type 29 has an invalid length.
[  275.084704][ T6565] netlink: 'syz.2.667': attribute type 29 has an invalid length.
[  275.214507][ T6570] netlink: 'syz.0.668': attribute type 29 has an invalid length.
[  275.945264][ T6564] netlink: 'syz.2.667': attribute type 29 has an invalid length.
[  275.977823][ T6570] netlink: 'syz.0.668': attribute type 29 has an invalid length.
[  276.232343][ T6573] netlink: 'syz.0.668': attribute type 29 has an invalid length.
[  278.401759][ T6628] netlink: 'syz.4.685': attribute type 29 has an invalid length.
[  278.522192][ T6628] netlink: 'syz.4.685': attribute type 29 has an invalid length.
[  278.679511][ T6629] netlink: 'syz.4.685': attribute type 29 has an invalid length.
[  278.690231][ T6635] netlink: 'syz.2.686': attribute type 29 has an invalid length.
[  280.156154][ T6660] netlink: 130181 bytes leftover after parsing attributes in process `syz.2.694'.
[  280.848735][ T6668] FAULT_INJECTION: forcing a failure.
[  280.848735][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  280.937315][ T6668] CPU: 0 PID: 6668 Comm: syz.0.698 Not tainted syzkaller #0
[  280.944875][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  280.954985][ T6668] Call Trace:
[  280.958297][ T6668]  <TASK>
[  280.961372][ T6668]  dump_stack_lvl+0x188/0x24e
[  280.966116][ T6668]  ? show_regs_print_info+0x12/0x12
[  280.971370][ T6668]  ? load_image+0x410/0x410
[  280.975938][ T6668]  ? __lock_acquire+0x7c40/0x7c40
[  280.981038][ T6668]  should_fail_ex+0x390/0x4c0
[  280.985931][ T6668]  _copy_to_user+0x2c/0x130
[  280.990645][ T6668]  bpf_verifier_vlog+0x172/0x3a0
[  280.996247][ T6668]  __btf_verifier_log+0xdf/0x130
[  281.001773][ T6668]  ? btf_check_sec_info+0x350/0x350
[  281.007495][ T6668]  ? btf_parse_hdr+0x1dd/0x7d0
[  281.012330][ T6668]  btf_parse_hdr+0x456/0x7d0
[  281.017429][ T6668]  btf_new_fd+0x367/0x760
[  281.022133][ T6668]  __sys_bpf+0x612/0x780
[  281.026537][ T6668]  ? bpf_link_show_fdinfo+0x380/0x380
[  281.032158][ T6668]  ? lock_chain_count+0x20/0x20
[  281.037279][ T6668]  __x64_sys_bpf+0x78/0x90
[  281.042374][ T6668]  do_syscall_64+0x4c/0xa0
[  281.046971][ T6668]  ? clear_bhb_loop+0x60/0xb0
[  281.051797][ T6668]  ? clear_bhb_loop+0x60/0xb0
[  281.056534][ T6668]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  281.062646][ T6668] RIP: 0033:0x7fa01679de99
[  281.067277][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.087362][ T6668] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  281.096081][ T6668] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  281.104439][ T6668] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[  281.112870][ T6668] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  281.121069][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  281.129633][ T6668] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  281.138414][ T6668]  </TASK>
[  281.908620][ T6689] netlink: 830 bytes leftover after parsing attributes in process `syz.4.704'.
[  281.924497][ T6688] validate_nla: 2 callbacks suppressed
[  281.924537][ T6688] netlink: 'syz.2.703': attribute type 29 has an invalid length.
[  282.021837][ T6688] netlink: 'syz.2.703': attribute type 29 has an invalid length.
[  282.052375][ T6691] netlink: 'syz.2.703': attribute type 29 has an invalid length.
[  283.737420][ T6722] netlink: 'syz.4.714': attribute type 2 has an invalid length.
[  283.788235][ T6722] netlink: 'syz.4.714': attribute type 2 has an invalid length.
[  284.986623][ T6742] netlink: 'syz.4.722': attribute type 29 has an invalid length.
[  284.993524][ T6743] netlink: 'syz.2.721': attribute type 29 has an invalid length.
[  285.015711][ T6748] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.723'.
[  285.072788][ T6743] netlink: 'syz.2.721': attribute type 29 has an invalid length.
[  285.102504][ T6742] netlink: 'syz.4.722': attribute type 29 has an invalid length.
[  285.222542][ T6744] netlink: 'syz.2.721': attribute type 29 has an invalid length.
[  285.627823][ T6751] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.724'.
[  287.513022][ T6790] FAULT_INJECTION: forcing a failure.
[  287.513022][ T6790] name failslab, interval 1, probability 0, space 0, times 0
[  287.587408][ T6790] CPU: 0 PID: 6790 Comm: syz.0.734 Not tainted syzkaller #0
[  287.595055][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  287.605527][ T6790] Call Trace:
[  287.608945][ T6790]  <TASK>
[  287.611983][ T6790]  dump_stack_lvl+0x188/0x24e
[  287.616827][ T6790]  ? show_regs_print_info+0x12/0x12
[  287.622204][ T6790]  ? load_image+0x410/0x410
[  287.626986][ T6790]  ? verify_lock_unused+0x140/0x140
[  287.632476][ T6790]  should_fail_ex+0x390/0x4c0
[  287.637506][ T6790]  should_failslab+0x5/0x20
[  287.642173][ T6790]  slab_pre_alloc_hook+0x59/0x300
[  287.647296][ T6790]  kmem_cache_alloc+0x56/0x2f0
[  287.652209][ T6790]  ? skb_clone+0x1e7/0x370
[  287.656970][ T6790]  skb_clone+0x1e7/0x370
[  287.661266][ T6790]  __netlink_deliver_tap+0x3e4/0x7e0
[  287.666724][ T6790]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.672014][ T6790]  netlink_deliver_tap+0x19c/0x1b0
[  287.677226][ T6790]  netlink_unicast+0x777/0x920
[  287.682131][ T6790]  netlink_sendmsg+0x8ad/0xbd0
[  287.687037][ T6790]  ? netlink_getsockopt+0x550/0x550
[  287.692382][ T6790]  ? apparmor_socket_sendmsg+0x8a/0x330
[  287.697969][ T6790]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  287.703419][ T6790]  ? security_socket_sendmsg+0x7c/0xa0
[  287.709090][ T6790]  ? netlink_getsockopt+0x550/0x550
[  287.714509][ T6790]  ____sys_sendmsg+0x5ed/0x9a0
[  287.719439][ T6790]  ? __sys_sendmsg_sock+0x30/0x30
[  287.724551][ T6790]  ? __import_iovec+0x306/0x510
[  287.729857][ T6790]  ? import_iovec+0x6f/0xa0
[  287.734514][ T6790]  ___sys_sendmsg+0x2a2/0x360
[  287.739519][ T6790]  ? __sys_sendmsg+0x2a0/0x2a0
[  287.744461][ T6790]  ? __lock_acquire+0x7c40/0x7c40
[  287.749673][ T6790]  __se_sys_sendmsg+0x1c3/0x2b0
[  287.754676][ T6790]  ? __x64_sys_sendmsg+0x80/0x80
[  287.759769][ T6790]  ? lockdep_hardirqs_on+0x94/0x140
[  287.765104][ T6790]  do_syscall_64+0x4c/0xa0
[  287.769681][ T6790]  ? clear_bhb_loop+0x60/0xb0
[  287.774402][ T6790]  ? clear_bhb_loop+0x60/0xb0
[  287.779216][ T6790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  287.785170][ T6790] RIP: 0033:0x7fa01679de99
[  287.789626][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.809910][ T6790] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.818844][ T6790] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  287.826860][ T6790] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[  287.834875][ T6790] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  287.842990][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.851151][ T6790] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  287.859547][ T6790]  </TASK>
[  288.504265][ T6790] validate_nla: 2 callbacks suppressed
[  288.504280][ T6790] netlink: 'syz.0.734': attribute type 21 has an invalid length.
[  288.604231][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'.
[  288.648498][ T6794] netlink: 152 bytes leftover after parsing attributes in process `syz.1.736'.
[  288.959019][ T6808] netlink: 'syz.3.740': attribute type 29 has an invalid length.
[  289.007019][ T6808] netlink: 'syz.3.740': attribute type 29 has an invalid length.
[  289.046216][ T6811] netlink: 130181 bytes leftover after parsing attributes in process `syz.4.742'.
[  289.161633][ T6809] netlink: 'syz.3.740': attribute type 29 has an invalid length.
[  290.678381][ T6837] IPv6: Can't replace route, no match found
[  291.687161][ T6849] netlink: 'syz.1.751': attribute type 29 has an invalid length.
[  291.824423][ T6849] netlink: 'syz.1.751': attribute type 29 has an invalid length.
[  291.943988][ T6850] netlink: 'syz.1.751': attribute type 29 has an invalid length.
[  293.604085][ T6870] netlink: 130181 bytes leftover after parsing attributes in process `syz.3.757'.
[  293.740508][ T6883] IPv6: Can't replace route, no match found
[  294.740391][ T6900] netlink: 830 bytes leftover after parsing attributes in process `syz.1.770'.
[  296.866501][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'.
[  296.905323][ T6928] netlink: 152 bytes leftover after parsing attributes in process `syz.1.775'.
[  297.257422][ T6938] netlink: 'syz.1.779': attribute type 29 has an invalid length.
[  297.325288][ T6938] netlink: 'syz.1.779': attribute type 29 has an invalid length.
[  297.388968][ T6941] netlink: 'syz.1.779': attribute type 29 has an invalid length.
[  298.507760][ T6963] netlink: 830 bytes leftover after parsing attributes in process `syz.2.785'.
[  299.515943][ T6975] device hsr0 entered promiscuous mode
[  299.812599][ T6977] netlink: 'syz.3.789': attribute type 10 has an invalid length.
[  299.878072][ T6977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.789'.
[  299.983127][ T6977] device hsr0 entered promiscuous mode
[  300.117250][ T6977] bridge0: port 4(hsr0) entered blocking state
[  300.161657][ T6977] bridge0: port 4(hsr0) entered disabled state
[  300.205125][ T6977] bridge0: port 4(hsr0) entered blocking state
[  300.212418][ T6977] bridge0: port 4(hsr0) entered forwarding state
[  300.256610][ T6980] netlink: 'syz.0.802': attribute type 10 has an invalid length.
[  300.291661][ T6980] netlink: 2 bytes leftover after parsing attributes in process `syz.0.802'.
[  300.326558][ T6985] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.793'.
[  300.357027][ T6980] bridge0: port 3(hsr0) entered blocking state
[  300.380352][ T6980] bridge0: port 3(hsr0) entered disabled state
[  300.398958][ T6985] net_ratelimit: 4 callbacks suppressed
[  300.398999][ T6985] netlink: zone id is out of range
[  300.466115][ T6980] bridge0: port 3(hsr0) entered blocking state
[  300.474143][ T6980] bridge0: port 3(hsr0) entered forwarding state
[  300.501648][ T6983] IPv6: Can't replace route, no match found
[  303.185618][ T7017] netlink: 'syz.1.806': attribute type 10 has an invalid length.
[  303.214600][ T7017] netlink: 2 bytes leftover after parsing attributes in process `syz.1.806'.
[  303.251686][ T7017] device hsr0 entered promiscuous mode
[  303.298940][ T7017] bridge0: port 3(hsr0) entered blocking state
[  303.324677][ T7017] bridge0: port 3(hsr0) entered disabled state
[  303.425106][ T7017] bridge0: port 3(hsr0) entered blocking state
[  303.432391][ T7017] bridge0: port 3(hsr0) entered forwarding state
[  303.541599][ T7021] netlink: 'syz.4.807': attribute type 33 has an invalid length.
[  303.581450][ T7021] netlink: 152 bytes leftover after parsing attributes in process `syz.4.807'.
[  303.883594][ T7024] netlink: 'syz.1.808': attribute type 29 has an invalid length.
[  304.096057][ T7024] netlink: 'syz.1.808': attribute type 29 has an invalid length.
[  304.196104][ T7023] netlink: 'syz.1.808': attribute type 29 has an invalid length.
[  306.101396][ T7053] netlink: 188 bytes leftover after parsing attributes in process `syz.3.818'.
[  306.254161][ T7053] netlink: 'syz.3.818': attribute type 33 has an invalid length.
[  306.281751][ T7053] netlink: 152 bytes leftover after parsing attributes in process `syz.3.818'.
[  306.408310][ T7055] FAULT_INJECTION: forcing a failure.
[  306.408310][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.461639][ T7055] CPU: 1 PID: 7055 Comm: syz.1.819 Not tainted syzkaller #0
[  306.469055][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  306.479422][ T7055] Call Trace:
[  306.482785][ T7055]  <TASK>
[  306.485764][ T7055]  dump_stack_lvl+0x188/0x24e
[  306.491172][ T7055]  ? show_regs_print_info+0x12/0x12
[  306.496561][ T7055]  ? load_image+0x410/0x410
[  306.501411][ T7055]  ? __might_fault+0xa6/0x120
[  306.506774][ T7055]  should_fail_ex+0x390/0x4c0
[  306.511896][ T7055]  copyin+0x1b/0x120
[  306.516396][ T7055]  _copy_from_iter+0x447/0x1130
[  306.521888][ T7055]  ? copyout_mc+0x110/0x110
[  306.527204][ T7055]  ? __virt_addr_valid+0x188/0x540
[  306.532532][ T7055]  ? __virt_addr_valid+0x188/0x540
[  306.537814][ T7055]  ? __virt_addr_valid+0x467/0x540
[  306.543265][ T7055]  ? __phys_addr_symbol+0x2b/0x70
[  306.548709][ T7055]  ? __check_object_size+0x4f6/0xa70
[  306.554405][ T7055]  netlink_sendmsg+0x755/0xbd0
[  306.559435][ T7055]  ? netlink_getsockopt+0x550/0x550
[  306.565310][ T7055]  ? apparmor_socket_sendmsg+0x8a/0x330
[  306.570963][ T7055]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  306.576697][ T7055]  ? security_socket_sendmsg+0x7c/0xa0
[  306.582656][ T7055]  ? netlink_getsockopt+0x550/0x550
[  306.588046][ T7055]  ____sys_sendmsg+0x5ed/0x9a0
[  306.592975][ T7055]  ? __sys_sendmsg_sock+0x30/0x30
[  306.598123][ T7055]  ? __import_iovec+0x306/0x510
[  306.603278][ T7055]  ? import_iovec+0x6f/0xa0
[  306.607999][ T7055]  ___sys_sendmsg+0x2a2/0x360
[  306.612746][ T7055]  ? __sys_sendmsg+0x2a0/0x2a0
[  306.617840][ T7055]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  306.624436][ T7055]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  306.630879][ T7055]  ? lockdep_hardirqs_on+0x94/0x140
[  306.636933][ T7055]  ? __sanitizer_cov_trace_pc+0x4/0x60
[  306.643724][ T7055]  __se_sys_sendmsg+0x1c3/0x2b0
[  306.649496][ T7055]  ? __x64_sys_sendmsg+0x80/0x80
[  306.655126][ T7055]  ? syscall_enter_from_user_mode+0x2a/0x80
[  306.661635][ T7055]  do_syscall_64+0x4c/0xa0
[  306.666217][ T7055]  ? clear_bhb_loop+0x60/0xb0
[  306.670981][ T7055]  ? clear_bhb_loop+0x60/0xb0
[  306.675809][ T7055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  306.681823][ T7055] RIP: 0033:0x7fa8c039de99
[  306.686266][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.706564][ T7055] RSP: 002b:00007fa8c12ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.715279][ T7055] RAX: ffffffffffffffda RBX: 00007fa8c0625fa0 RCX: 00007fa8c039de99
[  306.723378][ T7055] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  306.731773][ T7055] RBP: 00007fa8c12ed090 R08: 0000000000000000 R09: 0000000000000000
[  306.740055][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.748720][ T7055] R13: 00007fa8c0626038 R14: 00007fa8c0625fa0 R15: 00007ffd8f3a1298
[  306.757197][ T7055]  </TASK>
[  306.889466][ T7062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.821'.
[  306.900677][ T7061] netlink: 'syz.2.822': attribute type 29 has an invalid length.
[  306.932782][ T7061] netlink: 'syz.2.822': attribute type 29 has an invalid length.
[  306.953177][ T7065] netlink: 'syz.2.822': attribute type 29 has an invalid length.
[  306.975649][ T7064] netlink: 830 bytes leftover after parsing attributes in process `syz.4.820'.
[  308.490861][ T7095] FAULT_INJECTION: forcing a failure.
[  308.490861][ T7095] name failslab, interval 1, probability 0, space 0, times 0
[  308.547277][ T7095] CPU: 1 PID: 7095 Comm: syz.3.831 Not tainted syzkaller #0
[  308.554843][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  308.564953][ T7095] Call Trace:
[  308.568281][ T7095]  <TASK>
[  308.571265][ T7095]  dump_stack_lvl+0x188/0x24e
[  308.576101][ T7095]  ? show_regs_print_info+0x12/0x12
[  308.581820][ T7095]  ? load_image+0x410/0x410
[  308.587370][ T7095]  ? __local_bh_enable_ip+0x136/0x1c0
[  308.592811][ T7095]  ? lockdep_hardirqs_on+0x94/0x140
[  308.598244][ T7095]  ? __local_bh_enable_ip+0x136/0x1c0
[  308.603768][ T7095]  should_fail_ex+0x390/0x4c0
[  308.608894][ T7095]  should_failslab+0x5/0x20
[  308.613571][ T7095]  slab_pre_alloc_hook+0x59/0x300
[  308.618760][ T7095]  ? sctp_get_port_local+0xd22/0x1500
[  308.624336][ T7095]  ? sctp_add_bind_addr+0x89/0x350
[  308.629529][ T7095]  __kmem_cache_alloc_node+0x4f/0x270
[  308.635231][ T7095]  ? sctp_add_bind_addr+0x89/0x350
[  308.640633][ T7095]  kmalloc_trace+0x26/0xe0
[  308.645227][ T7095]  sctp_add_bind_addr+0x89/0x350
[  308.650429][ T7095]  ? sctp_auto_asconf_init+0x14d/0x1d0
[  308.656061][ T7095]  sctp_do_bind+0x57e/0x8f0
[  308.660663][ T7095]  sctp_connect_new_asoc+0x266/0x6a0
[  308.666290][ T7095]  ? __sctp_connect+0xd80/0xd80
[  308.671393][ T7095]  ? __local_bh_enable_ip+0x136/0x1c0
[  308.676932][ T7095]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  308.682667][ T7095]  ? security_sctp_bind_connect+0x85/0xb0
[  308.688749][ T7095]  sctp_sendmsg+0x1686/0x2940
[  308.693530][ T7095]  ? sctp_getsockopt+0x8a0/0x8a0
[  308.698728][ T7095]  ? __might_fault+0xa6/0x120
[  308.703481][ T7095]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  308.709965][ T7095]  ? aa_sock_msg_perm+0x94/0x150
[  308.714978][ T7095]  ? inet_sendmsg+0xca/0x2a0
[  308.719663][ T7095]  ? inet_send_prepare+0x250/0x250
[  308.724855][ T7095]  ____sys_sendmsg+0x5ed/0x9a0
[  308.729698][ T7095]  ? __sys_sendmsg_sock+0x30/0x30
[  308.734765][ T7095]  ? __import_iovec+0x306/0x510
[  308.740008][ T7095]  ? import_iovec+0x6f/0xa0
[  308.744580][ T7095]  ___sys_sendmsg+0x2a2/0x360
[  308.749363][ T7095]  ? __sys_sendmsg+0x2a0/0x2a0
[  308.754209][ T7095]  ? __lock_acquire+0x7c40/0x7c40
[  308.759355][ T7095]  __se_sys_sendmsg+0x1c3/0x2b0
[  308.764271][ T7095]  ? __x64_sys_sendmsg+0x80/0x80
[  308.769284][ T7095]  ? lockdep_hardirqs_on+0x94/0x140
[  308.774528][ T7095]  do_syscall_64+0x4c/0xa0
[  308.779257][ T7095]  ? clear_bhb_loop+0x60/0xb0
[  308.784070][ T7095]  ? clear_bhb_loop+0x60/0xb0
[  308.788909][ T7095]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  308.794964][ T7095] RIP: 0033:0x7f88b979de99
[  308.799510][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.820332][ T7095] RSP: 002b:00007f88ba725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.828911][ T7095] RAX: ffffffffffffffda RBX: 00007f88b9a25fa0 RCX: 00007f88b979de99
[  308.837350][ T7095] RDX: 0000000022044880 RSI: 00002000000004c0 RDI: 0000000000000003
[  308.845454][ T7095] RBP: 00007f88ba725090 R08: 0000000000000000 R09: 0000000000000000
[  308.853649][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.862367][ T7095] R13: 00007f88b9a26038 R14: 00007f88b9a25fa0 R15: 00007ffed05aafe8
[  308.870595][ T7095]  </TASK>
[  310.917942][ T7145] netlink: 830 bytes leftover after parsing attributes in process `syz.4.845'.
[  310.956441][ T7146] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  311.749642][ T7146] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  311.918327][ T7154] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  312.338590][ T7172] netlink: 830 bytes leftover after parsing attributes in process `syz.3.850'.
[  313.365525][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.858'.
[  314.009128][ T7213] netlink: 'syz.3.863': attribute type 29 has an invalid length.
[  314.609035][ T7213] netlink: 'syz.3.863': attribute type 29 has an invalid length.
[  314.797631][ T7214] netlink: 'syz.3.863': attribute type 29 has an invalid length.
[  314.867488][ T7227] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.866'.
[  314.906377][ T7227] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.866'.
[  314.962042][ T7227] netlink: 'syz.1.866': attribute type 21 has an invalid length.
[  315.027365][ T7227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.866'.
[  316.192230][ T7249] netlink: 188 bytes leftover after parsing attributes in process `syz.0.883'.
[  316.291743][ T7249] netlink: 'syz.0.883': attribute type 33 has an invalid length.
[  316.299795][ T7249] netlink: 152 bytes leftover after parsing attributes in process `syz.0.883'.
[  316.513011][ T7255] netlink: 830 bytes leftover after parsing attributes in process `syz.4.874'.
[  317.918775][ T7277] netlink: 'syz.0.878': attribute type 29 has an invalid length.
[  317.976563][ T7277] netlink: 'syz.0.878': attribute type 29 has an invalid length.
[  318.086899][ T7278] netlink: 'syz.0.878': attribute type 29 has an invalid length.
[  318.510335][ T7285] FAULT_INJECTION: forcing a failure.
[  318.510335][ T7285] name failslab, interval 1, probability 0, space 0, times 0
[  318.543658][ T7285] CPU: 0 PID: 7285 Comm: syz.1.882 Not tainted syzkaller #0
[  318.551743][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  318.563220][ T7285] Call Trace:
[  318.566575][ T7285]  <TASK>
[  318.569743][ T7285]  dump_stack_lvl+0x188/0x24e
[  318.574859][ T7285]  ? show_regs_print_info+0x12/0x12
[  318.580766][ T7285]  ? load_image+0x410/0x410
[  318.585852][ T7285]  ? __might_sleep+0xd0/0xd0
[  318.590858][ T7285]  ? __lock_acquire+0x7c40/0x7c40
[  318.596696][ T7285]  ? ct_irq_exit_irqson+0x113/0x170
[  318.602302][ T7285]  should_fail_ex+0x390/0x4c0
[  318.607316][ T7285]  should_failslab+0x5/0x20
[  318.611967][ T7285]  slab_pre_alloc_hook+0x59/0x300
[  318.617076][ T7285]  ? exc_page_fault+0x88/0x100
[  318.621920][ T7285]  ? sk_prot_alloc+0xe7/0x210
[  318.626716][ T7285]  __kmem_cache_alloc_node+0x4f/0x270
[  318.632511][ T7285]  ? exc_page_fault+0x88/0x100
[  318.637879][ T7285]  ? sk_prot_alloc+0xe7/0x210
[  318.642897][ T7285]  __kmalloc+0xa3/0x240
[  318.647332][ T7285]  sk_prot_alloc+0xe7/0x210
[  318.652317][ T7285]  ? sk_alloc+0x20/0x330
[  318.656631][ T7285]  sk_alloc+0x36/0x330
[  318.661026][ T7285]  ? bpf_ctx_init+0x154/0x190
[  318.665784][ T7285]  bpf_prog_test_run_skb+0x36d/0x18e0
[  318.671315][ T7285]  ? __fget_files+0x28/0x460
[  318.675965][ T7285]  ? __fget_files+0x3fc/0x460
[  318.680880][ T7285]  ? cpu_online+0xa0/0xa0
[  318.685335][ T7285]  bpf_prog_test_run+0x31c/0x390
[  318.690700][ T7285]  __sys_bpf+0x62b/0x780
[  318.695241][ T7285]  ? bpf_link_show_fdinfo+0x380/0x380
[  318.700965][ T7285]  ? lock_chain_count+0x20/0x20
[  318.706185][ T7285]  __x64_sys_bpf+0x78/0x90
[  318.710714][ T7285]  do_syscall_64+0x4c/0xa0
[  318.715196][ T7285]  ? clear_bhb_loop+0x60/0xb0
[  318.720118][ T7285]  ? clear_bhb_loop+0x60/0xb0
[  318.724849][ T7285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.731217][ T7285] RIP: 0033:0x7fa8c039de99
[  318.735702][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.756015][ T7285] RSP: 002b:00007fa8c12ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  318.764476][ T7285] RAX: ffffffffffffffda RBX: 00007fa8c0625fa0 RCX: 00007fa8c039de99
[  318.772494][ T7285] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  318.781610][ T7285] RBP: 00007fa8c12ed090 R08: 0000000000000000 R09: 0000000000000000
[  318.789828][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.798166][ T7285] R13: 00007fa8c0626038 R14: 00007fa8c0625fa0 R15: 00007ffd8f3a1298
[  318.806474][ T7285]  </TASK>
[  319.193424][ T7293] netlink: 188 bytes leftover after parsing attributes in process `syz.0.887'.
[  319.290627][ T7293] netlink: 'syz.0.887': attribute type 33 has an invalid length.
[  319.321966][ T7293] netlink: 152 bytes leftover after parsing attributes in process `syz.0.887'.
[  321.142498][ T7325] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  321.167231][ T7326] netlink: 'syz.1.897': attribute type 29 has an invalid length.
[  321.183867][ T7325] netlink: 62739 bytes leftover after parsing attributes in process `syz.2.899'.
[  321.239518][ T7326] netlink: 'syz.1.897': attribute type 29 has an invalid length.
[  321.307929][ T7321] netlink: 'syz.1.897': attribute type 29 has an invalid length.
[  321.473049][ T7332] netlink: 188 bytes leftover after parsing attributes in process `syz.3.902'.
[  321.545944][ T7332] netlink: 'syz.3.902': attribute type 33 has an invalid length.
[  321.603297][ T7332] netlink: 152 bytes leftover after parsing attributes in process `syz.3.902'.
[  322.478997][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  322.485560][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  323.078233][ T7365] netlink: 'syz.0.914': attribute type 3 has an invalid length.
[  323.103621][ T7363] netlink: 830 bytes leftover after parsing attributes in process `syz.1.913'.
[  323.124329][ T7365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.914'.
[  323.327912][ T7371] netlink: 'syz.2.916': attribute type 29 has an invalid length.
[  323.443802][ T7371] netlink: 'syz.2.916': attribute type 29 has an invalid length.
[  323.608029][ T7373] netlink: 'syz.2.916': attribute type 29 has an invalid length.
[  323.864663][ T7382] FAULT_INJECTION: forcing a failure.
[  323.864663][ T7382] name failslab, interval 1, probability 0, space 0, times 0
[  323.973017][ T7382] CPU: 1 PID: 7382 Comm: syz.3.919 Not tainted syzkaller #0
[  323.980497][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  323.991102][ T7382] Call Trace:
[  323.994441][ T7382]  <TASK>
[  323.997605][ T7382]  dump_stack_lvl+0x188/0x24e
[  324.003236][ T7382]  ? show_regs_print_info+0x12/0x12
[  324.008602][ T7382]  ? load_image+0x410/0x410
[  324.013250][ T7382]  ? perf_trace_lock_acquire+0x101/0x3f0
[  324.019141][ T7382]  ? verify_lock_unused+0x140/0x140
[  324.024785][ T7382]  ? perf_trace_lock_acquire+0x101/0x3f0
[  324.030762][ T7382]  should_fail_ex+0x390/0x4c0
[  324.035706][ T7382]  should_failslab+0x5/0x20
[  324.040288][ T7382]  slab_pre_alloc_hook+0x59/0x300
[  324.045403][ T7382]  kmem_cache_alloc+0x56/0x2f0
[  324.050241][ T7382]  ? skb_clone+0x1e7/0x370
[  324.055104][ T7382]  skb_clone+0x1e7/0x370
[  324.059869][ T7382]  __netlink_deliver_tap+0x3e4/0x7e0
[  324.065283][ T7382]  ? netlink_deliver_tap+0x2e/0x1b0
[  324.070608][ T7382]  netlink_deliver_tap+0x19c/0x1b0
[  324.076093][ T7382]  netlink_unicast+0x777/0x920
[  324.080989][ T7382]  netlink_sendmsg+0x8ad/0xbd0
[  324.085868][ T7382]  ? netlink_getsockopt+0x550/0x550
[  324.091397][ T7382]  ? apparmor_socket_sendmsg+0x8a/0x330
[  324.097133][ T7382]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  324.102649][ T7382]  ? security_socket_sendmsg+0x7c/0xa0
[  324.110362][ T7382]  ? netlink_getsockopt+0x550/0x550
[  324.116158][ T7382]  ____sys_sendmsg+0x5ed/0x9a0
[  324.121159][ T7382]  ? __sys_sendmsg_sock+0x30/0x30
[  324.126453][ T7382]  ? __import_iovec+0x306/0x510
[  324.131813][ T7382]  ? import_iovec+0x6f/0xa0
[  324.136736][ T7382]  ___sys_sendmsg+0x2a2/0x360
[  324.141980][ T7382]  ? __sys_sendmsg+0x2a0/0x2a0
[  324.146983][ T7382]  ? __lock_acquire+0x7c40/0x7c40
[  324.152521][ T7382]  __se_sys_sendmsg+0x1c3/0x2b0
[  324.157510][ T7382]  ? __x64_sys_sendmsg+0x80/0x80
[  324.162947][ T7382]  ? lockdep_hardirqs_on+0x94/0x140
[  324.168194][ T7382]  do_syscall_64+0x4c/0xa0
[  324.172657][ T7382]  ? clear_bhb_loop+0x60/0xb0
[  324.177716][ T7382]  ? clear_bhb_loop+0x60/0xb0
[  324.182457][ T7382]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.188396][ T7382] RIP: 0033:0x7f88b979de99
[  324.193021][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.213723][ T7382] RSP: 002b:00007f88ba725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.224124][ T7382] RAX: ffffffffffffffda RBX: 00007f88b9a25fa0 RCX: 00007f88b979de99
[  324.232510][ T7382] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  324.240560][ T7382] RBP: 00007f88ba725090 R08: 0000000000000000 R09: 0000000000000000
[  324.248950][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.257323][ T7382] R13: 00007f88b9a26038 R14: 00007f88b9a25fa0 R15: 00007ffed05aafe8
[  324.265444][ T7382]  </TASK>
[  326.554738][ T7427] netlink: 'syz.3.932': attribute type 29 has an invalid length.
[  326.586441][ T7424] raw_sendmsg: syz.4.931 forgot to set AF_INET. Fix it!
[  326.600308][ T7427] netlink: 'syz.3.932': attribute type 29 has an invalid length.
[  326.617005][ T7426] netlink: 'syz.3.932': attribute type 29 has an invalid length.
[  328.453710][ T7442] netlink: 188 bytes leftover after parsing attributes in process `syz.4.936'.
[  328.625319][ T7442] netlink: 'syz.4.936': attribute type 33 has an invalid length.
[  328.708919][ T7442] netlink: 152 bytes leftover after parsing attributes in process `syz.4.936'.
[  329.417568][ T7463] netlink: 188 bytes leftover after parsing attributes in process `syz.4.944'.
[  329.443207][ T7456] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  329.649376][ T7463] netlink: 'syz.4.944': attribute type 33 has an invalid length.
[  329.666051][ T7463] netlink: 152 bytes leftover after parsing attributes in process `syz.4.944'.
[  329.954060][ T7469] netlink: 188 bytes leftover after parsing attributes in process `syz.2.946'.
[  330.063850][ T7469] netlink: 'syz.2.946': attribute type 33 has an invalid length.
[  330.114580][ T7469] netlink: 152 bytes leftover after parsing attributes in process `syz.2.946'.
[  330.409621][ T7474] netlink: 'syz.0.949': attribute type 29 has an invalid length.
[  330.441546][ T7474] netlink: 'syz.0.949': attribute type 29 has an invalid length.
[  330.474341][ T7479] netlink: 'syz.0.949': attribute type 29 has an invalid length.
[  331.675709][ T7501] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  331.839130][ T7510] netlink: 830 bytes leftover after parsing attributes in process `syz.0.960'.
[  331.925993][ T7513] netlink: 188 bytes leftover after parsing attributes in process `syz.3.961'.
[  331.970412][ T7513] netlink: 'syz.3.961': attribute type 33 has an invalid length.
[  331.993351][ T7513] netlink: 152 bytes leftover after parsing attributes in process `syz.3.961'.
[  332.075006][   T11] wlan1: Trigger new scan to find an IBSS to join
[  332.319408][ T7517] netlink: 188 bytes leftover after parsing attributes in process `syz.4.962'.
[  332.353337][ T7519] FAULT_INJECTION: forcing a failure.
[  332.353337][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.417120][ T7519] CPU: 0 PID: 7519 Comm: syz.3.964 Not tainted syzkaller #0
[  332.424581][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  332.435458][ T7519] Call Trace:
[  332.438922][ T7519]  <TASK>
[  332.441937][ T7519]  dump_stack_lvl+0x188/0x24e
[  332.446739][ T7519]  ? show_regs_print_info+0x12/0x12
[  332.452241][ T7519]  ? load_image+0x410/0x410
[  332.456851][ T7519]  ? __might_fault+0xa6/0x120
[  332.461900][ T7519]  should_fail_ex+0x390/0x4c0
[  332.466722][ T7519]  copyin+0x1b/0x120
[  332.470753][ T7519]  _copy_from_iter+0x447/0x1130
[  332.475711][ T7519]  ? copyout_mc+0x110/0x110
[  332.480289][ T7519]  ? __virt_addr_valid+0x188/0x540
[  332.485591][ T7519]  ? __virt_addr_valid+0x188/0x540
[  332.490795][ T7519]  ? __virt_addr_valid+0x467/0x540
[  332.496273][ T7519]  ? __phys_addr_symbol+0x2b/0x70
[  332.501490][ T7519]  ? __check_object_size+0x4f6/0xa70
[  332.507077][ T7519]  netlink_sendmsg+0x755/0xbd0
[  332.511985][ T7519]  ? netlink_getsockopt+0x550/0x550
[  332.517551][ T7519]  ? apparmor_socket_sendmsg+0x8a/0x330
[  332.523810][ T7519]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  332.529359][ T7519]  ? security_socket_sendmsg+0x7c/0xa0
[  332.534917][ T7519]  ? netlink_getsockopt+0x550/0x550
[  332.540249][ T7519]  ____sys_sendmsg+0x5ed/0x9a0
[  332.545121][ T7519]  ? __sys_sendmsg_sock+0x30/0x30
[  332.550673][ T7519]  ? __import_iovec+0x306/0x510
[  332.555638][ T7519]  ? import_iovec+0x6f/0xa0
[  332.560286][ T7519]  ___sys_sendmsg+0x2a2/0x360
[  332.566510][ T7519]  ? __sys_sendmsg+0x2a0/0x2a0
[  332.571549][ T7519]  ? __lock_acquire+0x7c40/0x7c40
[  332.576987][ T7519]  __se_sys_sendmsg+0x1c3/0x2b0
[  332.582442][ T7519]  ? __x64_sys_sendmsg+0x80/0x80
[  332.587515][ T7519]  ? lockdep_hardirqs_on+0x94/0x140
[  332.593444][ T7519]  do_syscall_64+0x4c/0xa0
[  332.597987][ T7519]  ? clear_bhb_loop+0x60/0xb0
[  332.602745][ T7519]  ? clear_bhb_loop+0x60/0xb0
[  332.607621][ T7519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  332.613769][ T7519] RIP: 0033:0x7f88b979de99
[  332.618808][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.639592][ T7519] RSP: 002b:00007f88ba725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.648286][ T7519] RAX: ffffffffffffffda RBX: 00007f88b9a25fa0 RCX: 00007f88b979de99
[  332.656451][ T7519] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  332.666585][ T7519] RBP: 00007f88ba725090 R08: 0000000000000000 R09: 0000000000000000
[  332.674896][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.683036][ T7519] R13: 00007f88b9a26038 R14: 00007f88b9a25fa0 R15: 00007ffed05aafe8
[  332.691202][ T7519]  </TASK>
[  332.771734][ T7517] netlink: 'syz.4.962': attribute type 33 has an invalid length.
[  333.338228][ T7535] netlink: 'syz.2.968': attribute type 29 has an invalid length.
[  333.933638][ T7535] netlink: 'syz.2.968': attribute type 29 has an invalid length.
[  334.071523][ T4661] wlan1: Trigger new scan to find an IBSS to join
[  334.221905][ T7532] netlink: 'syz.2.968': attribute type 29 has an invalid length.
[  334.708040][ T7559] FAULT_INJECTION: forcing a failure.
[  334.708040][ T7559] name failslab, interval 1, probability 0, space 0, times 0
[  334.830376][ T7559] CPU: 1 PID: 7559 Comm: syz.4.972 Not tainted syzkaller #0
[  334.838042][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  334.848770][ T7559] Call Trace:
[  334.852275][ T7559]  <TASK>
[  334.855431][ T7559]  dump_stack_lvl+0x188/0x24e
[  334.860255][ T7559]  ? sctp_sendmsg+0x1686/0x2940
[  334.865447][ T7559]  ? ___sys_sendmsg+0x2a2/0x360
[  334.870561][ T7559]  ? show_regs_print_info+0x12/0x12
[  334.875882][ T7559]  ? load_image+0x410/0x410
[  334.880487][ T7559]  should_fail_ex+0x390/0x4c0
[  334.885600][ T7559]  should_failslab+0x5/0x20
[  334.890258][ T7559]  slab_pre_alloc_hook+0x59/0x300
[  334.895480][ T7559]  ? sctp_add_bind_addr+0x89/0x350
[  334.900673][ T7559]  __kmem_cache_alloc_node+0x4f/0x270
[  334.906191][ T7559]  ? sctp_add_bind_addr+0x89/0x350
[  334.911402][ T7559]  kmalloc_trace+0x26/0xe0
[  334.915901][ T7559]  sctp_add_bind_addr+0x89/0x350
[  334.921454][ T7559]  sctp_copy_local_addr_list+0x317/0x4d0
[  334.927509][ T7559]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[  334.933305][ T7559]  ? sctp_do_8_2_transport_strike+0x900/0x900
[  334.939415][ T7559]  ? sctp_v6_is_any+0x60/0x70
[  334.944286][ T7559]  ? sctp_copy_one_addr+0x93/0x660
[  334.949842][ T7559]  sctp_bind_addr_copy+0xaf/0x3c0
[  334.954946][ T7559]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  334.961426][ T7559]  sctp_connect_new_asoc+0x2f5/0x6a0
[  334.966984][ T7559]  ? __sctp_connect+0xd80/0xd80
[  334.972428][ T7559]  ? __local_bh_enable_ip+0x136/0x1c0
[  334.978308][ T7559]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  334.984171][ T7559]  ? security_sctp_bind_connect+0x85/0xb0
[  334.990216][ T7559]  sctp_sendmsg+0x1686/0x2940
[  334.995085][ T7559]  ? sctp_getsockopt+0x8a0/0x8a0
[  335.000354][ T7559]  ? __might_fault+0xa6/0x120
[  335.005431][ T7559]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  335.011900][ T7559]  ? aa_sock_msg_perm+0x94/0x150
[  335.017058][ T7559]  ? inet_sendmsg+0xca/0x2a0
[  335.021774][ T7559]  ? inet_send_prepare+0x250/0x250
[  335.026928][ T7559]  ____sys_sendmsg+0x5ed/0x9a0
[  335.031745][ T7559]  ? __sys_sendmsg_sock+0x30/0x30
[  335.036909][ T7559]  ? __import_iovec+0x306/0x510
[  335.042071][ T7559]  ? import_iovec+0x6f/0xa0
[  335.046617][ T7559]  ___sys_sendmsg+0x2a2/0x360
[  335.051342][ T7559]  ? __sys_sendmsg+0x2a0/0x2a0
[  335.056257][ T7559]  ? __lock_acquire+0x7c40/0x7c40
[  335.061359][ T7559]  __se_sys_sendmsg+0x1c3/0x2b0
[  335.066259][ T7559]  ? __x64_sys_sendmsg+0x80/0x80
[  335.071439][ T7559]  ? lockdep_hardirqs_on+0x94/0x140
[  335.077036][ T7559]  do_syscall_64+0x4c/0xa0
[  335.081517][ T7559]  ? clear_bhb_loop+0x60/0xb0
[  335.086585][ T7559]  ? clear_bhb_loop+0x60/0xb0
[  335.091394][ T7559]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  335.097343][ T7559] RIP: 0033:0x7fa29379de99
[  335.101898][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.121661][ T7559] RSP: 002b:00007fa2919f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.130851][ T7559] RAX: ffffffffffffffda RBX: 00007fa293a25fa0 RCX: 00007fa29379de99
[  335.139688][ T7559] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  335.148220][ T7559] RBP: 00007fa2919f6090 R08: 0000000000000000 R09: 0000000000000000
[  335.156459][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  335.165463][ T7559] R13: 00007fa293a26038 R14: 00007fa293a25fa0 R15: 00007fffd050c568
[  335.173956][ T7559]  </TASK>
[  336.079634][   T46] wlan1: Trigger new scan to find an IBSS to join
[  337.087862][ T4903] wlan1: Creating new IBSS network, BSSID c2:d9:64:62:45:90
[  337.104792][ T7595] netlink: 'syz.4.982': attribute type 10 has an invalid length.
[  337.121806][ T7595] __nla_validate_parse: 1 callbacks suppressed
[  337.121925][ T7595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.982'.
[  337.156718][ T7595] batman_adv: batadv0: Adding interface: virt_wifi0
[  337.167600][ T7595] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.237374][ T7595] batman_adv: batadv0: Interface activated: virt_wifi0
[  337.456487][ T7602] netlink: 'syz.0.985': attribute type 10 has an invalid length.
[  337.476886][ T7599] netlink: 'syz.1.984': attribute type 29 has an invalid length.
[  337.486979][ T7602] netlink: 55 bytes leftover after parsing attributes in process `syz.0.985'.
[  337.608914][ T7606] netlink: 188 bytes leftover after parsing attributes in process `syz.4.986'.
[  338.020595][ T7599] netlink: 'syz.1.984': attribute type 29 has an invalid length.
[  338.059226][ T7606] netlink: 'syz.4.986': attribute type 33 has an invalid length.
[  338.078125][ T7606] netlink: 152 bytes leftover after parsing attributes in process `syz.4.986'.
[  338.088793][   T56] wlan1: Trigger new scan to find an IBSS to join
[  338.145080][ T7620] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  338.181377][ T7603] netlink: 'syz.1.984': attribute type 29 has an invalid length.
[  338.378514][ T7623] netlink: 830 bytes leftover after parsing attributes in process `syz.4.990'.
[  339.920269][ T7664] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1001'.
[  339.979290][ T7662] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1000'.
[  339.996402][ T7664] netlink: 'syz.0.1001': attribute type 33 has an invalid length.
[  340.026039][ T7664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1001'.
[  340.040538][ T7667] netlink: 'syz.2.1002': attribute type 10 has an invalid length.
[  340.051036][ T7667] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1002'.
[  340.086028][   T46] wlan1: Creating new IBSS network, BSSID da:c6:9f:c6:f2:2d
[  340.267988][ T7669] netlink: 'syz.1.1003': attribute type 29 has an invalid length.
[  340.491798][ T7669] netlink: 'syz.1.1003': attribute type 29 has an invalid length.
[  341.560779][ T7695] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1009'.
[  342.072308][   T56] wlan1: Trigger new scan to find an IBSS to join
[  343.530944][ T7728] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1020'.
[  343.657747][ T7728] validate_nla: 1 callbacks suppressed
[  343.657783][ T7728] netlink: 'syz.3.1020': attribute type 33 has an invalid length.
[  343.688985][ T7728] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1020'.
[  343.766437][ T7734] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1023'.
[  343.909382][ T7738] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1025'.
[  344.162695][ T7748] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  344.562860][ T7751] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  344.796678][ T7761] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1031'.
[  344.907402][ T7760] netlink: 'syz.3.1030': attribute type 29 has an invalid length.
[  344.944140][ T7760] netlink: 'syz.3.1030': attribute type 29 has an invalid length.
[  344.966863][ T7764] netlink: 'syz.3.1030': attribute type 29 has an invalid length.
[  345.896856][ T7786] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  346.012242][ T7789] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1042'.
[  346.033975][ T7793] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1044'.
[  346.716396][ T7801] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  346.845408][ T7810] netlink: 'syz.3.1050': attribute type 29 has an invalid length.
[  346.879337][ T7810] netlink: 'syz.3.1050': attribute type 29 has an invalid length.
[  346.931998][ T7806] netlink: 'syz.3.1050': attribute type 29 has an invalid length.
[  346.998830][ T7811] netlink: 'syz.1.1049': attribute type 10 has an invalid length.
[  347.007561][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1049'.
[  347.025181][ T7811] device veth0_vlan left promiscuous mode
[  347.041183][ T4326] wlan1: Trigger new scan to find an IBSS to join
[  347.069358][ T7811] device veth0_vlan entered promiscuous mode
[  347.111543][   T46] wlan1: Trigger new scan to find an IBSS to join
[  347.360719][ T7811] batman_adv: batadv0: Adding interface: veth0_vlan
[  347.372218][ T7811] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.490072][ T7811] batman_adv: batadv0: Interface activated: veth0_vlan
[  347.595893][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  347.606176][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  347.615270][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  348.093793][    T9] wlan1: Trigger new scan to find an IBSS to join
[  348.222610][   T46] wlan1: Creating new IBSS network, BSSID 2a:de:e2:39:24:e2
[  348.733241][ T7834] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1058'.
[  349.035033][ T4661] wlan1: Trigger new scan to find an IBSS to join
[  350.071678][   T46] wlan1: Trigger new scan to find an IBSS to join
[  350.467366][ T7859] netlink: 'syz.2.1066': attribute type 29 has an invalid length.
[  350.564139][ T7859] netlink: 'syz.2.1066': attribute type 29 has an invalid length.
[  350.585967][ T7858] netlink: 'syz.2.1066': attribute type 29 has an invalid length.
[  351.824950][ T7882] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1072'.
[  352.076158][   T56] wlan1: Creating new IBSS network, BSSID e6:d9:9a:9c:f2:7e
[  352.084330][ T4661] wlan1: Trigger new scan to find an IBSS to join
[  352.430720][ T7893] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1077'.
[  353.039002][ T4661] wlan1: Trigger new scan to find an IBSS to join
[  353.522779][ T7909] netlink: 'syz.4.1082': attribute type 29 has an invalid length.
[  353.563195][ T7909] netlink: 'syz.4.1082': attribute type 29 has an invalid length.
[  353.603319][ T7910] netlink: 'syz.4.1082': attribute type 29 has an invalid length.
[  353.708386][ T7917] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1086'.
[  353.808320][ T7917] netlink: 'syz.0.1086': attribute type 33 has an invalid length.
[  353.844767][ T7917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1086'.
[  354.072393][ T4326] wlan1: Creating new IBSS network, BSSID 56:ab:44:70:24:e7
[  354.178124][ T7931] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1091'.
[  354.726730][ T7947] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1096'.
[  355.049448][ T7962] netlink: 'syz.3.1099': attribute type 29 has an invalid length.
[  355.121945][ T7962] netlink: 'syz.3.1099': attribute type 29 has an invalid length.
[  355.199991][ T7956] netlink: 'syz.3.1099': attribute type 29 has an invalid length.
[  356.073106][    T9] wlan1: Trigger new scan to find an IBSS to join
[  356.162170][ T7979] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1104'.
[  356.176330][ T7977] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1105'.
[  356.206173][   T56] wlan1: Creating new IBSS network, BSSID 8e:19:8d:7f:e3:e2
[  356.283722][ T7979] netlink: 'syz.3.1104': attribute type 33 has an invalid length.
[  356.322023][ T7979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1104'.
[  356.677845][ T7989] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1108'.
[  359.758893][ T8009] netlink: 'syz.2.1115': attribute type 29 has an invalid length.
[  359.794555][ T8009] netlink: 'syz.2.1115': attribute type 29 has an invalid length.
[  359.840347][ T8011] netlink: 'syz.2.1115': attribute type 29 has an invalid length.
[  360.227432][ T8019] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1120'.
[  362.564458][ T8057] netlink: 'syz.3.1132': attribute type 29 has an invalid length.
[  362.645191][ T8057] netlink: 'syz.3.1132': attribute type 29 has an invalid length.
[  362.661988][ T8060] netlink: 'syz.3.1132': attribute type 29 has an invalid length.
[  363.467757][ T8073] netlink: 'syz.3.1140': attribute type 33 has an invalid length.
[  363.492658][ T8073] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1140'.
[  364.335385][ T8099] netlink: 'syz.2.1150': attribute type 29 has an invalid length.
[  364.398873][ T8099] netlink: 'syz.2.1150': attribute type 29 has an invalid length.
[  364.416028][ T8103] netlink: 'syz.2.1150': attribute type 29 has an invalid length.
[  364.640342][ T8109] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1152'.
[  367.190158][ T8168] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1174'.
[  369.995674][ T8212] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1187'.
[  370.040979][ T8217] netlink: 'syz.2.1189': attribute type 33 has an invalid length.
[  370.062984][ T8217] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1189'.
[  371.716586][ T8238] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1195'.
[  373.584051][ T8261] netlink: 'syz.2.1201': attribute type 33 has an invalid length.
[  373.603793][ T8261] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1201'.
[  374.130017][ T8272] netlink: 'syz.2.1206': attribute type 29 has an invalid length.
[  374.153373][ T8272] netlink: 'syz.2.1206': attribute type 29 has an invalid length.
[  374.329187][ T8274] netlink: 'syz.2.1206': attribute type 29 has an invalid length.
[  376.281157][ T8303] netlink: 'syz.0.1214': attribute type 29 has an invalid length.
[  376.296432][ T8303] netlink: 'syz.0.1214': attribute type 29 has an invalid length.
[  376.582053][ T8305] netlink: 'syz.0.1214': attribute type 29 has an invalid length.
[  376.751607][ T8311] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1216'.
[  377.136607][ T8316] netlink: 'syz.1.1217': attribute type 33 has an invalid length.
[  377.158549][ T8316] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1217'.
[  377.490085][ T8327] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1221'.
[  378.277727][ T8341] netlink: 'syz.1.1225': attribute type 29 has an invalid length.
[  378.431037][ T8341] netlink: 'syz.1.1225': attribute type 29 has an invalid length.
[  378.468067][ T8340] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1224'.
[  378.549137][ T8338] netlink: 'syz.1.1225': attribute type 29 has an invalid length.
[  379.889406][ T8363] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  379.959978][ T8363] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  380.015587][ T8362] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  381.676784][ T8391] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1240'.
[  382.300857][ T8388] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  382.648200][ T8401] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1243'.
[  383.179056][ T8410] netlink: 'syz.4.1245': attribute type 29 has an invalid length.
[  383.591630][ T8410] netlink: 'syz.4.1245': attribute type 29 has an invalid length.
[  383.921799][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  383.928436][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  384.953424][ T8414] netlink: 'syz.4.1245': attribute type 29 has an invalid length.
[  385.111648][    T9] wlan1: Trigger new scan to find an IBSS to join
[  386.168470][ T8448] netlink: 'syz.3.1259': attribute type 33 has an invalid length.
[  386.188644][ T8448] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1259'.
[  386.521768][ T8455] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  386.829901][ T8466] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1264'.
[  386.905190][ T8467] netlink: 'syz.0.1265': attribute type 29 has an invalid length.
[  386.952254][ T8467] netlink: 'syz.0.1265': attribute type 29 has an invalid length.
[  387.023304][ T8465] netlink: 'syz.0.1265': attribute type 29 has an invalid length.
[  387.296985][ T8471] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1267'.
[  389.111452][ T4903] wlan1: Trigger new scan to find an IBSS to join
[  389.118236][ T4337] wlan1: Trigger new scan to find an IBSS to join
[  389.704317][    T9] wlan1: Creating new IBSS network, BSSID 1e:10:c0:0a:91:a1
[  390.296510][ T8493] netlink: 'syz.2.1272': attribute type 33 has an invalid length.
[  390.461917][ T8493] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1272'.
[  390.988589][ T8513] FAULT_INJECTION: forcing a failure.
[  390.988589][ T8513] name failslab, interval 1, probability 0, space 0, times 0
[  391.031881][ T8513] CPU: 0 PID: 8513 Comm: syz.0.1280 Not tainted syzkaller #0
[  391.039728][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  391.050206][ T8513] Call Trace:
[  391.053724][ T8513]  <TASK>
[  391.056705][ T8513]  dump_stack_lvl+0x188/0x24e
[  391.061522][ T8513]  ? show_regs_print_info+0x12/0x12
[  391.066978][ T8513]  ? load_image+0x410/0x410
[  391.071846][ T8513]  ? verify_lock_unused+0x140/0x140
[  391.077277][ T8513]  ? perf_trace_lock+0x301/0x390
[  391.082342][ T8513]  should_fail_ex+0x390/0x4c0
[  391.087190][ T8513]  should_failslab+0x5/0x20
[  391.091823][ T8513]  slab_pre_alloc_hook+0x59/0x300
[  391.096987][ T8513]  kmem_cache_alloc+0x56/0x2f0
[  391.101990][ T8513]  ? skb_clone+0x1e7/0x370
[  391.106561][ T8513]  skb_clone+0x1e7/0x370
[  391.110912][ T8513]  __netlink_deliver_tap+0x3e4/0x7e0
[  391.116403][ T8513]  ? netlink_deliver_tap+0x2e/0x1b0
[  391.121790][ T8513]  netlink_deliver_tap+0x19c/0x1b0
[  391.127102][ T8513]  netlink_unicast+0x777/0x920
[  391.131980][ T8513]  netlink_sendmsg+0x8ad/0xbd0
[  391.137108][ T8513]  ? netlink_getsockopt+0x550/0x550
[  391.142499][ T8513]  ? apparmor_socket_sendmsg+0x8a/0x330
[  391.148315][ T8513]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  391.153757][ T8513]  ? security_socket_sendmsg+0x7c/0xa0
[  391.159480][ T8513]  ? netlink_getsockopt+0x550/0x550
[  391.164766][ T8513]  ____sys_sendmsg+0x5ed/0x9a0
[  391.169805][ T8513]  ? __sys_sendmsg_sock+0x30/0x30
[  391.175206][ T8513]  ? __import_iovec+0x306/0x510
[  391.180203][ T8513]  ? import_iovec+0x6f/0xa0
[  391.184978][ T8513]  ___sys_sendmsg+0x2a2/0x360
[  391.189754][ T8513]  ? __sys_sendmsg+0x2a0/0x2a0
[  391.194842][ T8513]  ? __lock_acquire+0x7c40/0x7c40
[  391.200016][ T8513]  __se_sys_sendmsg+0x1c3/0x2b0
[  391.205568][ T8513]  ? perf_trace_preemptirq_template+0x268/0x320
[  391.212084][ T8513]  ? __x64_sys_sendmsg+0x80/0x80
[  391.217236][ T8513]  ? lockdep_hardirqs_on+0x94/0x140
[  391.222682][ T8513]  do_syscall_64+0x4c/0xa0
[  391.227177][ T8513]  ? clear_bhb_loop+0x60/0xb0
[  391.232104][ T8513]  ? clear_bhb_loop+0x60/0xb0
[  391.237120][ T8513]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  391.243833][ T8513] RIP: 0033:0x7fa01679de99
[  391.248434][ T8513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.269253][ T8513] RSP: 002b:00007fa0176e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.278183][ T8513] RAX: ffffffffffffffda RBX: 00007fa016a25fa0 RCX: 00007fa01679de99
[  391.286233][ T8513] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  391.294336][ T8513] RBP: 00007fa0176e3090 R08: 0000000000000000 R09: 0000000000000000
[  391.302423][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.310559][ T8513] R13: 00007fa016a26038 R14: 00007fa016a25fa0 R15: 00007ffff011cae8
[  391.319270][ T8513]  </TASK>
[  391.449067][ T8513] netlink: 'syz.0.1280': attribute type 10 has an invalid length.
[  391.627174][ T8520] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1283'.
[  392.140910][ T8532] netlink: 'syz.0.1284': attribute type 29 has an invalid length.
[  393.390463][ T8529] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1286'.
[  393.441545][ T8532] netlink: 'syz.0.1284': attribute type 29 has an invalid length.
[  393.964457][ T8552] netlink: 'syz.0.1290': attribute type 33 has an invalid length.
[  393.980828][ T8552] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1290'.
[  394.086360][ T4337] wlan1: Trigger new scan to find an IBSS to join
[  394.745966][ T8569] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  395.016091][ T8575] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1299'.
[  396.023398][ T4337] wlan1: Creating new IBSS network, BSSID 9e:35:55:1a:23:28
[  396.039906][ T8578] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  396.044574][ T4337] ------------[ cut here ]------------
[  396.057078][ T4337] WARNING: CPU: 1 PID: 4337 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0
[  396.068329][ T4337] Modules linked in:
[  396.072812][ T4337] CPU: 1 PID: 4337 Comm: kworker/u4:7 Not tainted syzkaller #0
[  396.081343][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  396.092534][ T4337] Workqueue: cfg80211 cfg80211_event_work
[  396.098446][ T4337] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  396.105030][ T4337] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f
[  396.130349][ T4337] RSP: 0018:ffffc90004177ac0 EFLAGS: 00010293
[  396.138584][ T4337] RAX: ffffffff89979bd9 RBX: 1ffff9200082ef5c RCX: ffff8880244d1e00
[  396.150550][ T4337] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[  396.160097][ T4337] RBP: ffffc90004177b70 R08: ffffffff90b102a7 R09: 1ffffffff2162054
[  396.170794][ T4337] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff8880798d35b8
[  396.182753][ T4337] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807bdfcc90
[  396.192725][ T4337] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  396.202065][ T4337] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.209332][ T4337] CR2: 00007fa8c12cbff8 CR3: 000000000c88e000 CR4: 00000000003506e0
[  396.218345][ T4337] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  396.229774][ T4337] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  396.238036][ T4337] Call Trace:
[  396.241527][ T4337]  <TASK>
[  396.244534][ T4337]  ? trace_rdev_return_void+0x240/0x240
[  396.250190][ T4337]  cfg80211_process_wdev_events+0x359/0x4d0
[  396.256300][ T4337]  ? process_one_work+0x7b4/0x1160
[  396.262064][ T4337]  cfg80211_process_rdev_events+0x9d/0x110
[  396.268532][ T4337]  cfg80211_event_work+0x2b/0x40
[  396.274342][ T4337]  process_one_work+0x8ab/0x1160
[  396.279480][ T4337]  ? worker_detach_from_pool+0x240/0x240
[  396.285362][ T4337]  ? _raw_spin_lock_irq+0x86/0xf0
[  396.290479][ T4337]  ? _raw_spin_lock_irq+0xb7/0xf0
[  396.295634][ T4337]  ? _raw_spin_lock_irqsave+0x100/0x100
[  396.301749][ T4337]  ? wq_worker_running+0x97/0x190
[  396.307161][ T4337]  worker_thread+0xaf5/0x12a0
[  396.312831][ T4337]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  396.318911][ T4337]  kthread+0x29d/0x330
[  396.323368][ T4337]  ? worker_clr_flags+0x1a0/0x1a0
[  396.328688][ T4337]  ? kthread_blkcg+0xd0/0xd0
[  396.333716][ T4337]  ret_from_fork+0x1f/0x30
[  396.339459][ T4337]  </TASK>
[  396.343015][ T4337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  396.350432][ T4337] CPU: 1 PID: 4337 Comm: kworker/u4:7 Not tainted syzkaller #0
[  396.358025][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  396.368320][ T4337] Workqueue: cfg80211 cfg80211_event_work
[  396.374229][ T4337] Call Trace:
[  396.377934][ T4337]  <TASK>
[  396.381270][ T4337]  dump_stack_lvl+0x188/0x24e
[  396.386371][ T4337]  ? memcpy+0x3c/0x60
[  396.390494][ T4337]  ? show_regs_print_info+0x12/0x12
[  396.395948][ T4337]  ? load_image+0x410/0x410
[  396.400527][ T4337]  panic+0x2d3/0x710
[  396.404764][ T4337]  ? bpf_jit_dump+0xd0/0xd0
[  396.409380][ T4337]  ? ret_from_fork+0x1f/0x30
[  396.414237][ T4337]  __warn+0x2f8/0x4f0
[  396.418356][ T4337]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  396.424129][ T4337]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  396.429719][ T4337]  report_bug+0x2ba/0x4f0
[  396.434478][ T4337]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  396.440077][ T4337]  handle_bug+0x3a/0x70
[  396.444335][ T4337]  exc_invalid_op+0x16/0x40
[  396.449068][ T4337]  asm_exc_invalid_op+0x16/0x20
[  396.453963][ T4337] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  396.460392][ T4337] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f
[  396.480141][ T4337] RSP: 0018:ffffc90004177ac0 EFLAGS: 00010293
[  396.487071][ T4337] RAX: ffffffff89979bd9 RBX: 1ffff9200082ef5c RCX: ffff8880244d1e00
[  396.495815][ T4337] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[  396.504210][ T4337] RBP: ffffc90004177b70 R08: ffffffff90b102a7 R09: 1ffffffff2162054
[  396.512807][ T4337] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff8880798d35b8
[  396.521294][ T4337] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807bdfcc90
[  396.529445][ T4337]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  396.535152][ T4337]  ? trace_rdev_return_void+0x240/0x240
[  396.541061][ T4337]  cfg80211_process_wdev_events+0x359/0x4d0
[  396.547108][ T4337]  ? process_one_work+0x7b4/0x1160
[  396.552353][ T4337]  cfg80211_process_rdev_events+0x9d/0x110
[  396.558570][ T4337]  cfg80211_event_work+0x2b/0x40
[  396.563575][ T4337]  process_one_work+0x8ab/0x1160
[  396.568885][ T4337]  ? worker_detach_from_pool+0x240/0x240
[  396.574891][ T4337]  ? _raw_spin_lock_irq+0x86/0xf0
[  396.580781][ T4337]  ? _raw_spin_lock_irq+0xb7/0xf0
[  396.585870][ T4337]  ? _raw_spin_lock_irqsave+0x100/0x100
[  396.591855][ T4337]  ? wq_worker_running+0x97/0x190
[  396.597122][ T4337]  worker_thread+0xaf5/0x12a0
[  396.601932][ T4337]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  396.607877][ T4337]  kthread+0x29d/0x330
[  396.611971][ T4337]  ? worker_clr_flags+0x1a0/0x1a0
[  396.617343][ T4337]  ? kthread_blkcg+0xd0/0xd0
[  396.622068][ T4337]  ret_from_fork+0x1f/0x30
[  396.626903][ T4337]  </TASK>
[  396.630793][ T4337] Kernel Offset: disabled
[  396.635493][ T4337] Rebooting in 86400 seconds..