last executing test programs:

11.039362963s ago: executing program 1 (id=8735):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0xfffffff5, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

10.719594483s ago: executing program 1 (id=8739):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7ffe"})

10.518419719s ago: executing program 1 (id=8741):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000005c0)='r', 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000c00))
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)}], 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x858}, 0x8090) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x6, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x1, 0x5}, 0x50)
r5 = socket$kcm(0x2, 0x2, 0x0) (async)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r6, 0x6, 0x6, 0x0, 0x21) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x5, &(0x7f0000000180), 0x43) (async)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async)
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x80, 0x0}, 0x2000f761) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x100000, 0x1, 0x0, 0x6, 0x2, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000430000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r9, 0x0, 0xa0028000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

10.392598692s ago: executing program 1 (id=8742):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000010000006d050000020000000000000079f2309d861e748ca535894a80e0d10d364eb4e4ade3040864b661d1e0a654e925668f886c07aa4e5afb98e6b65a3bac6a910de3b0e21cb9d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

9.80305949s ago: executing program 1 (id=8747):
bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0xa, 0x2, 0x3a)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x24, 0x0, 0x3, 0x9, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(r3)
ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000400)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000138, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x25, &(0x7f00000009c0)=[{}, {}, {}, {}], 0xffffffffffffffed, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
socket$kcm(0xa, 0x6, 0x0)

8.399887842s ago: executing program 1 (id=8759):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0xe}, {0x9, 0x2}]}, @struct={0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000002200)=""/4109, 0x44, 0x100d, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0xff00}, 0x48)

3.461733788s ago: executing program 4 (id=8806):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x5, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000071102d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

3.420226399s ago: executing program 3 (id=8807):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xe}]}, @struct={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x3c, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff5, 0xff00}, 0x48)

3.314007532s ago: executing program 0 (id=8808):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60404)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xd)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x43, &(0x7f0000000100), 0x120)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
recvmsg$unix(r0, &(0x7f00000023c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/201, 0xc9}], 0x4}, 0x160)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000b040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="07637075737401536463707508"], 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20)
r6 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

3.083285349s ago: executing program 2 (id=8811):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea608641600020208000c000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953a9ac8e8e0603da27", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20044088)

2.68012326s ago: executing program 4 (id=8812):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1046c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
close(r0)

2.330912201s ago: executing program 4 (id=8813):
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x68b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xec8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000508000000000000820000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.289532092s ago: executing program 3 (id=8814):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480c000000006104000000000095000000dbf8edd81f24925a5c446731fc135a61b1eb347a80ba73fd0341fd2777328dc0e8665b1d38b2fbe6ca7e2d4e6ceafc736b7f9a929facf3879bf14061a12e0a27817a66b55b3950b69f26950f19e35a699c8e0e2a00"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES8, @ANYBLOB="0bd6098d715fc9f9012b00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='memory.swap.current\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x6, &(0x7f0000000240), 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000b00200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0xbf28fa041556e426)

2.263595153s ago: executing program 0 (id=8815):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x8, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0)

2.146786596s ago: executing program 2 (id=8816):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x4000, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.002677081s ago: executing program 2 (id=8817):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpid()
getpid()
sendmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0xc000}, 0x40000c1)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a10000009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef79f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e064f442e8cbeab77cdf1ebd8465593c0000000000000000000000000000006f429b14459ffd88bee4b9d894ddad0980af53a1feb155f1010400bfb5b81b73035fd5a76985d4710fb6fbfb2a933a09dd6317e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa4615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d77a65fe74f8aa67391e8cb3c000020000000000083b92cdfc143ceba1c18cab05100ecc4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x8, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)="a7994d33f6b4ef0a105b904efdd7f8dfedacf3791cd08699a2a5762204a1bf0d3f2d62ba0ae4e7b7efad324e26f64538f512a7cacad9b397c5e46cdf584e700b24d197366f52b06c9e3d140d2c1693c9dd75c9619dea5130e94fdcf09f0e9c827bb6bafb4c86902f0e606b93488230ea12692793a77338", 0x77}], 0x1}, 0x0)

2.002217501s ago: executing program 4 (id=8818):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000040), 0x6e, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10001)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ff"], 0x0, 0x4}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
unlink(&(0x7f00000001c0)='./file0\x00')
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x800, 0xc8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f0000000b80), 0x4)

2.002021611s ago: executing program 0 (id=8819):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x2, 0xc, 0x200e}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f00000010c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

2.001369251s ago: executing program 3 (id=8820):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x8000000, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

1.737259089s ago: executing program 3 (id=8821):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x5, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000071102d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

1.719107909s ago: executing program 2 (id=8822):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1b, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0x5b, &(0x7f0000000140)=""/91, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x4, 0x1, 0x7, 0x6}, {0x4, 0x2, 0xb, 0x2}, {0x0, 0x5, 0x1, 0xa}, {0x2, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x2}, {0x4, 0x2, 0x6, 0xa}, {0x4, 0x3, 0xa, 0xc}], 0x10, 0xbb39}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x10, 0x1, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xffffffffffffff42}, 0x94)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x100004}, 0x6001, 0xc8, 0x0, 0x3, 0x0, 0x800000, 0xbfff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xffc0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x6, &(0x7f00000005c0)=@raw=[@ldst={0x0, 0x3, 0x0, 0x8, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @exit, @call={0x85, 0x0, 0x0, 0x59}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}], &(0x7f0000000600)='GPL\x00', 0x7, 0x11, &(0x7f0000000640)=""/17, 0x41100, 0x40, '\x00', r8, 0x0, r4, 0x8, &(0x7f0000000980)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xe, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@cgroup=r3, r0, 0xd, 0x2014, r1, @value=r9, @void, @void, @void, r2}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.683436961s ago: executing program 0 (id=8823):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1046c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
close(r0)

1.399025398s ago: executing program 4 (id=8824):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xe}]}, @struct={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x3c, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff5, 0xff00}, 0x48)

1.396245659s ago: executing program 3 (id=8833):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x5, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000071102d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

1.320050471s ago: executing program 0 (id=8825):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea608641600020208000c000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953a9ac8e8e0603da27", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20044088)

1.136884316s ago: executing program 2 (id=8826):
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext, 0x406, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='%#\x00')
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000041000000400c1a3fdffffff00000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008000"/28], 0x50)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0x110c230000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x1ff)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'bridge_slave_1\x00', @broadcast})

146.880386ms ago: executing program 0 (id=8827):
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x68b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xec8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000508000000000000820000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

130.913947ms ago: executing program 3 (id=8828):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1, 0x0, 0x0, 0x4100}, 0x8054)

108.775637ms ago: executing program 4 (id=8829):
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r3], 0xfe33)

0s ago: executing program 2 (id=8830):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32496c5e78dd54a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x800, 0x0, 0x20, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffcc, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

[ 1056.480470][T25772] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1056.488461][T25772] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005
[ 1056.496560][T25772] RBP: 00007f56a18b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1056.504630][T25772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1056.512615][T25772] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1056.520672][T25772]  </TASK>
[ 1056.994423][T25783] netlink: 'syz.2.7323': attribute type 29 has an invalid length.
[ 1057.058889][T25783] netlink: 'syz.2.7323': attribute type 29 has an invalid length.
[ 1057.078092][T25786] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7324'.
[ 1057.100597][T25787] FAULT_INJECTION: forcing a failure.
[ 1057.100597][T25787] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1057.128857][T25787] CPU: 1 PID: 25787 Comm: syz.2.7323 Not tainted syzkaller #0
[ 1057.136380][T25787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1057.146455][T25787] Call Trace:
[ 1057.149754][T25787]  <TASK>
[ 1057.152695][T25787]  dump_stack_lvl+0x188/0x24e
[ 1057.157389][T25787]  ? show_regs_print_info+0x12/0x12
[ 1057.162603][T25787]  ? load_image+0x400/0x400
[ 1057.167126][T25787]  ? __lock_acquire+0x7d10/0x7d10
[ 1057.172171][T25787]  should_fail_ex+0x399/0x4d0
[ 1057.176872][T25787]  _copy_from_user+0x2c/0x170
[ 1057.181569][T25787]  iovec_from_user+0x143/0x360
[ 1057.186355][T25787]  __import_iovec+0x6d/0x500
[ 1057.191048][T25787]  ? __might_fault+0xa6/0x120
[ 1057.195738][T25787]  import_iovec+0x6f/0xa0
[ 1057.200077][T25787]  ___sys_recvmsg+0x4b6/0x590
[ 1057.204765][T25787]  ? __sys_recvmsg+0x290/0x290
[ 1057.209536][T25787]  ? common_file_perm+0x171/0x1c0
[ 1057.214581][T25787]  ? __fget_files+0x43d/0x4b0
[ 1057.219274][T25787]  __x64_sys_recvmsg+0x205/0x2e0
[ 1057.224214][T25787]  ? ct_nmi_exit+0x145/0x1c0
[ 1057.228825][T25787]  ? ___sys_recvmsg+0x590/0x590
[ 1057.233696][T25787]  ? lockdep_hardirqs_on+0x94/0x140
[ 1057.238914][T25787]  do_syscall_64+0x4c/0xa0
[ 1057.243338][T25787]  ? clear_bhb_loop+0x60/0xb0
[ 1057.248023][T25787]  ? clear_bhb_loop+0x60/0xb0
[ 1057.252707][T25787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1057.258607][T25787] RIP: 0033:0x7f8158d9ce59
[ 1057.263029][T25787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1057.282643][T25787] RSP: 002b:00007f8159c05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1057.291066][T25787] RAX: ffffffffffffffda RBX: 00007f8159016180 RCX: 00007f8158d9ce59
[ 1057.299047][T25787] RDX: 0000000000002000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1057.307023][T25787] RBP: 00007f8159c05090 R08: 0000000000000000 R09: 0000000000000000
[ 1057.314994][T25787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1057.322971][T25787] R13: 00007f8159016218 R14: 00007f8159016180 R15: 00007ffd6ecab908
[ 1057.330959][T25787]  </TASK>
[ 1057.347362][T25785] netlink: 'syz.2.7323': attribute type 29 has an invalid length.
[ 1057.669199][T25800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7327'.
[ 1058.098110][T25813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7331'.
[ 1058.115863][T25813] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7331'.
[ 1058.127969][T25813] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1058.557140][T25834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7338'.
[ 1058.727129][T25839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7341'.
[ 1058.899849][T25843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1058.907511][T25843] IPv6: NLM_F_CREATE should be set when creating new route
[ 1058.915145][T25843] IPv6: NLM_F_CREATE should be set when creating new route
[ 1058.922629][T25843] IPv6: NLM_F_CREATE should be set when creating new route
[ 1059.323573][T25860] FAULT_INJECTION: forcing a failure.
[ 1059.323573][T25860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1059.370818][T25860] CPU: 1 PID: 25860 Comm: syz.1.7347 Not tainted syzkaller #0
[ 1059.378344][T25860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1059.388423][T25860] Call Trace:
[ 1059.391732][T25860]  <TASK>
[ 1059.394681][T25860]  dump_stack_lvl+0x188/0x24e
[ 1059.399388][T25860]  ? show_regs_print_info+0x12/0x12
[ 1059.404626][T25860]  ? load_image+0x400/0x400
[ 1059.409160][T25860]  ? __lock_acquire+0x7d10/0x7d10
[ 1059.414309][T25860]  should_fail_ex+0x399/0x4d0
[ 1059.419013][T25860]  _copy_from_user+0x2c/0x170
[ 1059.423711][T25860]  generic_map_update_batch+0x4f3/0x810
[ 1059.429270][T25860]  ? rcu_read_unlock+0xa0/0xa0
[ 1059.434046][T25860]  ? __fdget+0x17c/0x200
[ 1059.438298][T25860]  ? rcu_read_unlock+0xa0/0xa0
[ 1059.443065][T25860]  bpf_map_do_batch+0x466/0x600
[ 1059.447934][T25860]  __sys_bpf+0x6f7/0x780
[ 1059.452185][T25860]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1059.457572][T25860]  ? lock_chain_count+0x20/0x20
[ 1059.462426][T25860]  __x64_sys_bpf+0x78/0x90
[ 1059.466847][T25860]  do_syscall_64+0x4c/0xa0
[ 1059.471257][T25860]  ? clear_bhb_loop+0x60/0xb0
[ 1059.475945][T25860]  ? clear_bhb_loop+0x60/0xb0
[ 1059.480621][T25860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1059.486515][T25860] RIP: 0033:0x7f692ab9ce59
[ 1059.490921][T25860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1059.510522][T25860] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1059.518937][T25860] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1059.526918][T25860] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1059.534903][T25860] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1059.543133][T25860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1059.551101][T25860] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1059.559090][T25860]  </TASK>
[ 1060.014582][T25871] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7351'.
[ 1060.236446][T25880] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7353'.
[ 1060.419129][T25877] netlink: 'syz.2.7354': attribute type 3 has an invalid length.
[ 1060.428287][T25877] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7354'.
[ 1061.671411][T25921] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7367'.
[ 1061.788884][T25927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7368'.
[ 1063.583057][T25970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7382'.
[ 1064.358876][T25994] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7392'.
[ 1064.837167][T26006] syzkaller0: create flow: hash 2107513488 index 2
[ 1064.868733][T13728] syzkaller0: tun_net_xmit 76
[ 1064.924436][ T3655] syzkaller0: tun_net_xmit 76
[ 1065.003065][T26005] syzkaller0: delete flow: hash 2107513488 index 2
[ 1065.014555][ T3655] syzkaller0: tun_net_xmit 76
[ 1065.455819][T26033] netlink: 'syz.0.7404': attribute type 3 has an invalid length.
[ 1065.466726][T26033] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7404'.
[ 1065.629406][T26047] FAULT_INJECTION: forcing a failure.
[ 1065.629406][T26047] name failslab, interval 1, probability 0, space 0, times 0
[ 1065.661892][T26047] CPU: 0 PID: 26047 Comm: syz.2.7408 Not tainted syzkaller #0
[ 1065.669417][T26047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1065.679491][T26047] Call Trace:
[ 1065.682786][T26047]  <TASK>
[ 1065.685739][T26047]  dump_stack_lvl+0x188/0x24e
[ 1065.690453][T26047]  ? show_regs_print_info+0x12/0x12
[ 1065.695685][T26047]  ? load_image+0x400/0x400
[ 1065.700225][T26047]  ? __might_sleep+0xd0/0xd0
[ 1065.704842][T26047]  ? __lock_acquire+0x7d10/0x7d10
[ 1065.709905][T26047]  should_fail_ex+0x399/0x4d0
[ 1065.714617][T26047]  should_failslab+0x5/0x20
[ 1065.719150][T26047]  slab_pre_alloc_hook+0x59/0x310
[ 1065.724219][T26047]  kmem_cache_alloc_node+0x5a/0x320
[ 1065.729461][T26047]  ? perf_tp_event+0xaac/0xc30
[ 1065.734259][T26047]  ? __alloc_skb+0xfc/0x7e0
[ 1065.738786][T26047]  __alloc_skb+0xfc/0x7e0
[ 1065.743123][T26047]  alloc_skb_with_frags+0xa7/0x710
[ 1065.748254][T26047]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1065.753479][T26047]  ? sock_kzfree_s+0x50/0x50
[ 1065.758092][T26047]  tun_get_user+0x915/0x3c70
[ 1065.762792][T26047]  ? rcu_read_unlock+0xa0/0xa0
[ 1065.767567][T26047]  ? tun_get+0x1c/0x2e0
[ 1065.771723][T26047]  ? __lock_acquire+0x7d10/0x7d10
[ 1065.776758][T26047]  ? tun_get+0x1c/0x2e0
[ 1065.780921][T26047]  tun_chr_write_iter+0x112/0x1f0
[ 1065.786027][T26047]  vfs_write+0x4b1/0xa30
[ 1065.790282][T26047]  ? file_end_write+0x250/0x250
[ 1065.795141][T26047]  ? __fget_files+0x43d/0x4b0
[ 1065.799835][T26047]  ? __fdget_pos+0x1d4/0x360
[ 1065.804426][T26047]  ? ksys_write+0x71/0x250
[ 1065.808851][T26047]  ksys_write+0x14c/0x250
[ 1065.813191][T26047]  ? __ia32_sys_read+0x80/0x80
[ 1065.817964][T26047]  ? lockdep_hardirqs_on+0x94/0x140
[ 1065.823166][T26047]  do_syscall_64+0x4c/0xa0
[ 1065.827579][T26047]  ? clear_bhb_loop+0x60/0xb0
[ 1065.832257][T26047]  ? clear_bhb_loop+0x60/0xb0
[ 1065.836937][T26047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1065.842830][T26047] RIP: 0033:0x7f8158d9ce59
[ 1065.847249][T26047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1065.866874][T26047] RSP: 002b:00007f8159c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1065.875299][T26047] RAX: ffffffffffffffda RBX: 00007f8159015fa0 RCX: 00007f8158d9ce59
[ 1065.883278][T26047] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[ 1065.891257][T26047] RBP: 00007f8159c47090 R08: 0000000000000000 R09: 0000000000000000
[ 1065.899239][T26047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1065.907234][T26047] R13: 00007f8159016038 R14: 00007f8159015fa0 R15: 00007ffd6ecab908
[ 1065.915234][T26047]  </TASK>
[ 1067.568118][T26039] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7405'.
[ 1067.767693][T26058] netlink: 'syz.1.7412': attribute type 1 has an invalid length.
[ 1067.796008][T26058] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7412'.
[ 1068.024156][T26066] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1068.182070][T26073] device syzkaller0 entered promiscuous mode
[ 1070.854392][T26102] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7425'.
[ 1070.863554][T26108] netlink: 'syz.0.7428': attribute type 6 has an invalid length.
[ 1070.872220][T26108] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7428'.
[ 1071.588418][T26140] FAULT_INJECTION: forcing a failure.
[ 1071.588418][T26140] name failslab, interval 1, probability 0, space 0, times 0
[ 1071.617021][T26140] CPU: 0 PID: 26140 Comm: syz.1.7438 Not tainted syzkaller #0
[ 1071.624548][T26140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1071.634627][T26140] Call Trace:
[ 1071.637923][T26140]  <TASK>
[ 1071.640867][T26140]  dump_stack_lvl+0x188/0x24e
[ 1071.645633][T26140]  ? show_regs_print_info+0x12/0x12
[ 1071.650852][T26140]  ? load_image+0x400/0x400
[ 1071.655386][T26140]  ? __might_sleep+0xd0/0xd0
[ 1071.659995][T26140]  ? __lock_acquire+0x7d10/0x7d10
[ 1071.665047][T26140]  should_fail_ex+0x399/0x4d0
[ 1071.669751][T26140]  should_failslab+0x5/0x20
[ 1071.674271][T26140]  slab_pre_alloc_hook+0x59/0x310
[ 1071.679314][T26140]  ? page_pool_create+0x6d/0x5c0
[ 1071.684272][T26140]  __kmem_cache_alloc_node+0x4f/0x260
[ 1071.689663][T26140]  ? page_pool_create+0x6d/0x5c0
[ 1071.694624][T26140]  kmalloc_node_trace+0x22/0xe0
[ 1071.699498][T26140]  page_pool_create+0x6d/0x5c0
[ 1071.704300][T26140]  bpf_test_run_xdp_live+0x223/0x1a90
[ 1071.709695][T26140]  ? 0xffffffffa0004440
[ 1071.713874][T26140]  ? text_poke_copy+0x79/0x90
[ 1071.718582][T26140]  ? 0xffffffffa0004440
[ 1071.722755][T26140]  ? bpf_dispatcher_change_prog+0xcbb/0xf10
[ 1071.728675][T26140]  ? 0xffffffffa0004440
[ 1071.732850][T26140]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1071.738446][T26140]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1071.744717][T26140]  ? bpf_test_init+0x119/0x140
[ 1071.749498][T26140]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1071.754988][T26140]  bpf_prog_test_run_xdp+0x736/0xf10
[ 1071.760310][T26140]  ? dev_put+0x80/0x80
[ 1071.764412][T26140]  ? dev_put+0x80/0x80
[ 1071.768503][T26140]  bpf_prog_test_run+0x31e/0x390
[ 1071.773472][T26140]  __sys_bpf+0x62b/0x780
[ 1071.777747][T26140]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1071.783147][T26140]  ? lock_chain_count+0x20/0x20
[ 1071.788011][T26140]  __x64_sys_bpf+0x78/0x90
[ 1071.792433][T26140]  do_syscall_64+0x4c/0xa0
[ 1071.796852][T26140]  ? clear_bhb_loop+0x60/0xb0
[ 1071.801535][T26140]  ? clear_bhb_loop+0x60/0xb0
[ 1071.806221][T26140]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1071.812121][T26140] RIP: 0033:0x7f692ab9ce59
[ 1071.816532][T26140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1071.836137][T26140] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1071.844549][T26140] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1071.852516][T26140] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a
[ 1071.860494][T26140] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1071.868465][T26140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1071.876446][T26140] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1071.884433][T26140]  </TASK>
[ 1071.964594][T26144] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7441'.
[ 1072.010809][T26150] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7443'.
[ 1072.595598][T26169] FAULT_INJECTION: forcing a failure.
[ 1072.595598][T26169] name failslab, interval 1, probability 0, space 0, times 0
[ 1072.690121][T26169] CPU: 0 PID: 26169 Comm: syz.0.7449 Not tainted syzkaller #0
[ 1072.697827][T26169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1072.707906][T26169] Call Trace:
[ 1072.711264][T26169]  <TASK>
[ 1072.714211][T26169]  dump_stack_lvl+0x188/0x24e
[ 1072.718911][T26169]  ? show_regs_print_info+0x12/0x12
[ 1072.724127][T26169]  ? load_image+0x400/0x400
[ 1072.728655][T26169]  ? __might_sleep+0xd0/0xd0
[ 1072.733262][T26169]  ? __lock_acquire+0x7d10/0x7d10
[ 1072.738317][T26169]  should_fail_ex+0x399/0x4d0
[ 1072.743021][T26169]  should_failslab+0x5/0x20
[ 1072.747541][T26169]  slab_pre_alloc_hook+0x59/0x310
[ 1072.752590][T26169]  ? __inet_diag_dump_start+0x8b/0x970
[ 1072.758251][T26169]  __kmem_cache_alloc_node+0x4f/0x260
[ 1072.763645][T26169]  ? __netlink_dump_start+0x11f/0x6f0
[ 1072.769037][T26169]  ? __inet_diag_dump_start+0x8b/0x970
[ 1072.774525][T26169]  kmalloc_trace+0x26/0xe0
[ 1072.778971][T26169]  __inet_diag_dump_start+0x8b/0x970
[ 1072.784276][T26169]  ? netlink_lookup+0x30/0x200
[ 1072.789064][T26169]  __netlink_dump_start+0x3f9/0x6f0
[ 1072.794292][T26169]  inet_diag_rcv_msg_compat+0x207/0x420
[ 1072.799867][T26169]  ? __inet_diag_dump+0x380/0x380
[ 1072.804915][T26169]  ? sock_diag_rcv_msg+0x142/0x5f0
[ 1072.810045][T26169]  ? inet_diag_rcv_msg_compat+0x420/0x420
[ 1072.815784][T26169]  ? inet_diag_dump_start_compat+0x20/0x20
[ 1072.821607][T26169]  ? inet_diag_dump+0x50/0x50
[ 1072.826313][T26169]  ? __inet_diag_dump+0x380/0x380
[ 1072.831359][T26169]  sock_diag_rcv_msg+0x3cc/0x5f0
[ 1072.836319][T26169]  netlink_rcv_skb+0x1fb/0x450
[ 1072.841110][T26169]  ? sock_diag_bind+0xa0/0xa0
[ 1072.845807][T26169]  ? netlink_ack+0x1170/0x1170
[ 1072.850605][T26169]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1072.855824][T26169]  sock_diag_rcv+0x26/0x40
[ 1072.860354][T26169]  netlink_unicast+0x74d/0x8d0
[ 1072.865149][T26169]  netlink_sendmsg+0x8ad/0xbd0
[ 1072.869945][T26169]  ? netlink_getsockopt+0x550/0x550
[ 1072.875167][T26169]  ? aa_sock_msg_perm+0x94/0x150
[ 1072.880132][T26169]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1072.885439][T26169]  ? security_socket_sendmsg+0x7c/0xa0
[ 1072.890924][T26169]  ? netlink_getsockopt+0x550/0x550
[ 1072.896143][T26169]  ____sys_sendmsg+0x5be/0x970
[ 1072.900934][T26169]  ? __sys_sendmsg_sock+0x30/0x30
[ 1072.905983][T26169]  ? __import_iovec+0x315/0x500
[ 1072.910862][T26169]  ? import_iovec+0x6f/0xa0
[ 1072.915385][T26169]  ___sys_sendmsg+0x2a2/0x360
[ 1072.920085][T26169]  ? __sys_sendmsg+0x290/0x290
[ 1072.924894][T26169]  ? trace_call_bpf+0xbf/0x6b0
[ 1072.929703][T26169]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1072.934576][T26169]  ? __x64_sys_sendmsg+0x80/0x80
[ 1072.939546][T26169]  ? lockdep_hardirqs_on+0x94/0x140
[ 1072.944770][T26169]  do_syscall_64+0x4c/0xa0
[ 1072.949229][T26169]  ? clear_bhb_loop+0x60/0xb0
[ 1072.953991][T26169]  ? clear_bhb_loop+0x60/0xb0
[ 1072.958692][T26169]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1072.964604][T26169] RIP: 0033:0x7ffa4259ce59
[ 1072.969029][T26169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1072.988651][T26169] RSP: 002b:00007ffa4343b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1072.997089][T26169] RAX: ffffffffffffffda RBX: 00007ffa42815fa0 RCX: 00007ffa4259ce59
[ 1073.005082][T26169] RDX: 0000000020040842 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1073.013073][T26169] RBP: 00007ffa4343b090 R08: 0000000000000000 R09: 0000000000000000
[ 1073.021062][T26169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1073.029049][T26169] R13: 00007ffa42816038 R14: 00007ffa42815fa0 R15: 00007fffaa820cd8
[ 1073.037059][T26169]  </TASK>
[ 1073.544415][T26186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7456'.
[ 1073.565168][T26188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7457'.
[ 1073.607837][T26190] FAULT_INJECTION: forcing a failure.
[ 1073.607837][T26190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1073.643219][T26190] CPU: 1 PID: 26190 Comm: syz.1.7458 Not tainted syzkaller #0
[ 1073.650754][T26190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1073.660839][T26190] Call Trace:
[ 1073.664170][T26190]  <TASK>
[ 1073.667133][T26190]  dump_stack_lvl+0x188/0x24e
[ 1073.671830][T26190]  ? show_regs_print_info+0x12/0x12
[ 1073.677027][T26190]  ? load_image+0x400/0x400
[ 1073.681534][T26190]  ? __might_fault+0xa6/0x120
[ 1073.686212][T26190]  should_fail_ex+0x399/0x4d0
[ 1073.690885][T26190]  copyin+0x1b/0x120
[ 1073.694791][T26190]  _copy_from_iter+0x447/0x1130
[ 1073.699681][T26190]  ? copyout_mc+0x110/0x110
[ 1073.704226][T26190]  ? __virt_addr_valid+0x188/0x540
[ 1073.709372][T26190]  ? __virt_addr_valid+0x188/0x540
[ 1073.714520][T26190]  ? __virt_addr_valid+0x465/0x540
[ 1073.719668][T26190]  ? __check_object_size+0x500/0xa40
[ 1073.724989][T26190]  netlink_sendmsg+0x755/0xbd0
[ 1073.729780][T26190]  ? netlink_getsockopt+0x550/0x550
[ 1073.734982][T26190]  ? aa_sock_msg_perm+0x94/0x150
[ 1073.739912][T26190]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1073.745194][T26190]  ? security_socket_sendmsg+0x7c/0xa0
[ 1073.750744][T26190]  ? netlink_getsockopt+0x550/0x550
[ 1073.755970][T26190]  ____sys_sendmsg+0x5be/0x970
[ 1073.760748][T26190]  ? __sys_sendmsg_sock+0x30/0x30
[ 1073.765771][T26190]  ? __import_iovec+0x315/0x500
[ 1073.770630][T26190]  ? import_iovec+0x6f/0xa0
[ 1073.775141][T26190]  ___sys_sendmsg+0x2a2/0x360
[ 1073.779827][T26190]  ? __sys_sendmsg+0x290/0x290
[ 1073.784616][T26190]  ? __lock_acquire+0x7d10/0x7d10
[ 1073.789677][T26190]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1073.794528][T26190]  ? ct_nmi_exit+0x145/0x1c0
[ 1073.799129][T26190]  ? __x64_sys_sendmsg+0x80/0x80
[ 1073.804091][T26190]  ? lockdep_hardirqs_on+0x94/0x140
[ 1073.809298][T26190]  do_syscall_64+0x4c/0xa0
[ 1073.813711][T26190]  ? clear_bhb_loop+0x60/0xb0
[ 1073.818399][T26190]  ? clear_bhb_loop+0x60/0xb0
[ 1073.823082][T26190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1073.828989][T26190] RIP: 0033:0x7f692ab9ce59
[ 1073.833405][T26190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1073.853188][T26190] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1073.861605][T26190] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1073.869576][T26190] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1073.877547][T26190] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1073.885518][T26190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1073.893660][T26190] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1073.901656][T26190]  </TASK>
[ 1073.927602][T26196] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7460'.
[ 1073.965724][T26196] netlink: 'syz.3.7460': attribute type 13 has an invalid length.
[ 1073.980460][T26196] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7460'.
[ 1074.038412][T26196] syz_tun: refused to change device tx_queue_len
[ 1074.069570][T26196] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1074.233105][T26209] netlink: 'syz.1.7464': attribute type 21 has an invalid length.
[ 1074.242936][T26209] netlink: 'syz.1.7464': attribute type 6 has an invalid length.
[ 1074.261277][T26209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7464'.
[ 1074.829232][T26231] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7472'.
[ 1076.392708][T26270] netlink: 'syz.2.7485': attribute type 4 has an invalid length.
[ 1076.440861][T26270] __nla_validate_parse: 1 callbacks suppressed
[ 1076.440898][T26270] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7485'.
[ 1076.607954][T26285] netlink: 'syz.4.7489': attribute type 21 has an invalid length.
[ 1076.626228][T26281] netlink: 'syz.0.7488': attribute type 4 has an invalid length.
[ 1076.628997][T26285] netlink: 'syz.4.7489': attribute type 6 has an invalid length.
[ 1076.645512][T26281] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7488'.
[ 1076.651473][T26285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7489'.
[ 1076.871313][T26291] netlink: 'syz.2.7491': attribute type 21 has an invalid length.
[ 1076.883563][T26291] netlink: 'syz.2.7491': attribute type 6 has an invalid length.
[ 1076.898746][T26291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7491'.
[ 1077.131216][T26299] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7495'.
[ 1078.348667][T26323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7501'.
[ 1078.761204][T26332] netlink: 'syz.1.7504': attribute type 29 has an invalid length.
[ 1078.848143][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7504'.
[ 1078.861683][T26332] netlink: 'syz.1.7504': attribute type 29 has an invalid length.
[ 1078.885719][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7504'.
[ 1078.956244][T26337] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7507'.
[ 1080.192764][T26364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7516'.
[ 1081.327503][T26388] netlink: 'syz.4.7525': attribute type 13 has an invalid length.
[ 1081.370844][T26388] syz_tun: refused to change device tx_queue_len
[ 1081.393753][T26388] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1081.446658][T26390] __nla_validate_parse: 2 callbacks suppressed
[ 1081.446696][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7526'.
[ 1081.479005][T26391] netlink: 'syz.4.7525': attribute type 10 has an invalid length.
[ 1084.671740][T26482] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7559'.
[ 1084.825504][T26481] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7560'.
[ 1087.873527][T26568] IPv6: Can't replace route, no match found
[ 1088.015055][T26572] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.7587'.
[ 1088.636613][T26593] netlink: 'syz.2.7594': attribute type 21 has an invalid length.
[ 1088.683140][T26595] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1089.278830][T26615] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7603'.
[ 1089.333496][T26616] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7602'.
[ 1090.104739][T26641] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[ 1090.110346][T26648] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7616'.
[ 1090.188004][T26652] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7615'.
[ 1090.487207][T26662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7620'.
[ 1091.429695][T26682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7627'.
[ 1091.484611][T26686] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7629'.
[ 1091.521075][T26689] netlink: 'syz.4.7630': attribute type 10 has an invalid length.
[ 1091.548680][T26689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7630'.
[ 1091.743483][T26694] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7632'.
[ 1092.366948][T26717] netlink: 'syz.2.7642': attribute type 10 has an invalid length.
[ 1092.517422][T26725] netlink: 'syz.2.7644': attribute type 10 has an invalid length.
[ 1092.777748][T26740] netlink: 'syz.0.7650': attribute type 10 has an invalid length.
[ 1092.808546][T26740] netlink: 'syz.0.7650': attribute type 2 has an invalid length.
[ 1093.340353][T26760] __nla_validate_parse: 4 callbacks suppressed
[ 1093.340388][T26760] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7655'.
[ 1093.369444][T26760] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.7655'.
[ 1093.718948][T26762] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7656'.
[ 1093.921913][T26774] netlink: 'syz.2.7661': attribute type 2 has an invalid length.
[ 1093.930327][T26774] netlink: 'syz.2.7661': attribute type 1 has an invalid length.
[ 1093.938762][T26774] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7661'.
[ 1093.984192][T26772] netlink: 'syz.1.7660': attribute type 10 has an invalid length.
[ 1094.058425][T26772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7660'.
[ 1094.138205][T26772] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1094.226282][T26772] netlink: 'syz.1.7660': attribute type 10 has an invalid length.
[ 1094.866300][T26804] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7670'.
[ 1095.414833][T26802] netlink: 'syz.0.7671': attribute type 29 has an invalid length.
[ 1095.473595][T26802] netlink: 'syz.0.7671': attribute type 29 has an invalid length.
[ 1095.543413][T26809] netlink: 'syz.0.7671': attribute type 29 has an invalid length.
[ 1096.600145][T26844] FAULT_INJECTION: forcing a failure.
[ 1096.600145][T26844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1096.629373][T26844] CPU: 1 PID: 26844 Comm: syz.1.7683 Not tainted syzkaller #0
[ 1096.636889][T26844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1096.646961][T26844] Call Trace:
[ 1096.650245][T26844]  <TASK>
[ 1096.653180][T26844]  dump_stack_lvl+0x188/0x24e
[ 1096.657865][T26844]  ? show_regs_print_info+0x12/0x12
[ 1096.663058][T26844]  ? load_image+0x400/0x400
[ 1096.667567][T26844]  ? __lock_acquire+0x7d10/0x7d10
[ 1096.672599][T26844]  should_fail_ex+0x399/0x4d0
[ 1096.677277][T26844]  _copy_from_iter+0x1c0/0x1130
[ 1096.682125][T26844]  ? __lock_acquire+0x7d10/0x7d10
[ 1096.687147][T26844]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1096.692777][T26844]  ? copyout_mc+0x110/0x110
[ 1096.697280][T26844]  ? __virt_addr_valid+0x188/0x540
[ 1096.702393][T26844]  ? __virt_addr_valid+0x188/0x540
[ 1096.707506][T26844]  ? __virt_addr_valid+0x465/0x540
[ 1096.712615][T26844]  ? __phys_addr_symbol+0x2b/0x70
[ 1096.717634][T26844]  ? __check_object_size+0x500/0xa40
[ 1096.722921][T26844]  tipc_msg_build+0x7f1/0xde0
[ 1096.727618][T26844]  tipc_send_group_bcast+0x7d4/0xad0
[ 1096.732915][T26844]  ? tipc_wait_for_connect+0x640/0x640
[ 1096.738384][T26844]  ? verify_lock_unused+0x140/0x140
[ 1096.743586][T26844]  ? tomoyo_check_open_permission+0x1bf/0x440
[ 1096.749651][T26844]  ? wait_woken+0x1c0/0x1c0
[ 1096.754157][T26844]  ? mark_lock+0x94/0x320
[ 1096.758490][T26844]  __tipc_sendmsg+0x332/0x2c90
[ 1096.763271][T26844]  ? rht_lock+0x150/0x150
[ 1096.767606][T26844]  ? verify_lock_unused+0x140/0x140
[ 1096.772812][T26844]  ? verify_lock_unused+0x140/0x140
[ 1096.778022][T26844]  ? mark_lock+0x94/0x320
[ 1096.782377][T26844]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1096.788366][T26844]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1096.793732][T26844]  ? lockdep_hardirqs_on+0x94/0x140
[ 1096.798932][T26844]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1096.804294][T26844]  ? _local_bh_enable+0xa0/0xa0
[ 1096.809143][T26844]  tipc_sendmsg+0x51/0x70
[ 1096.813471][T26844]  sock_write_iter+0x2d9/0x3e0
[ 1096.818234][T26844]  ? sock_read_iter+0x3a0/0x3a0
[ 1096.823095][T26844]  ? common_file_perm+0x171/0x1c0
[ 1096.828120][T26844]  vfs_write+0x4b1/0xa30
[ 1096.832366][T26844]  ? file_end_write+0x250/0x250
[ 1096.837214][T26844]  ? __fget_files+0x43d/0x4b0
[ 1096.841902][T26844]  ? __fdget_pos+0x1d4/0x360
[ 1096.846485][T26844]  ? ksys_write+0x71/0x250
[ 1096.850899][T26844]  ksys_write+0x14c/0x250
[ 1096.855237][T26844]  ? __ia32_sys_read+0x80/0x80
[ 1096.860091][T26844]  ? lockdep_hardirqs_on+0x94/0x140
[ 1096.865286][T26844]  do_syscall_64+0x4c/0xa0
[ 1096.869697][T26844]  ? clear_bhb_loop+0x60/0xb0
[ 1096.874370][T26844]  ? clear_bhb_loop+0x60/0xb0
[ 1096.879055][T26844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1096.884945][T26844] RIP: 0033:0x7f692ab9ce59
[ 1096.889389][T26844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1096.909005][T26844] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1096.917422][T26844] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1096.925391][T26844] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000006
[ 1096.933362][T26844] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1096.941327][T26844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1096.949318][T26844] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1096.957316][T26844]  </TASK>
[ 1097.089189][T26849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7684'.
[ 1098.286356][T26884] FAULT_INJECTION: forcing a failure.
[ 1098.286356][T26884] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1098.349455][T26884] CPU: 1 PID: 26884 Comm: syz.4.7697 Not tainted syzkaller #0
[ 1098.356988][T26884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1098.367062][T26884] Call Trace:
[ 1098.370353][T26884]  <TASK>
[ 1098.373281][T26884]  dump_stack_lvl+0x188/0x24e
[ 1098.377966][T26884]  ? show_regs_print_info+0x12/0x12
[ 1098.383169][T26884]  ? load_image+0x400/0x400
[ 1098.387683][T26884]  ? __lock_acquire+0x7d10/0x7d10
[ 1098.392895][T26884]  should_fail_ex+0x399/0x4d0
[ 1098.397581][T26884]  _copy_from_user+0x2c/0x170
[ 1098.402267][T26884]  iovec_from_user+0x143/0x360
[ 1098.407039][T26884]  __import_iovec+0x6d/0x500
[ 1098.411627][T26884]  ? __might_fault+0xc2/0x120
[ 1098.416314][T26884]  import_iovec+0x6f/0xa0
[ 1098.420651][T26884]  ___sys_sendmsg+0x252/0x360
[ 1098.425338][T26884]  ? __sys_sendmsg+0x290/0x290
[ 1098.430127][T26884]  ? trace_call_bpf+0xbf/0x6b0
[ 1098.434929][T26884]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1098.439775][T26884]  ? ct_nmi_exit+0x145/0x1c0
[ 1098.444373][T26884]  ? __x64_sys_sendmsg+0x80/0x80
[ 1098.449336][T26884]  ? lockdep_hardirqs_on+0x94/0x140
[ 1098.454540][T26884]  do_syscall_64+0x4c/0xa0
[ 1098.458954][T26884]  ? clear_bhb_loop+0x60/0xb0
[ 1098.463638][T26884]  ? clear_bhb_loop+0x60/0xb0
[ 1098.468321][T26884]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1098.474215][T26884] RIP: 0033:0x7f56a099ce59
[ 1098.478635][T26884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.498241][T26884] RSP: 002b:00007f56a18b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1098.506657][T26884] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1098.514628][T26884] RDX: 0000000000000890 RSI: 00002000000016c0 RDI: 0000000000000004
[ 1098.522619][T26884] RBP: 00007f56a18b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1098.530586][T26884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1098.538553][T26884] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1098.546546][T26884]  </TASK>
[ 1098.586373][T26889] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7698'.
[ 1099.908208][T26904] netlink: 'syz.3.7703': attribute type 29 has an invalid length.
[ 1099.955142][T26904] netlink: 'syz.3.7703': attribute type 29 has an invalid length.
[ 1100.038265][T26916] netlink: 'syz.3.7703': attribute type 29 has an invalid length.
[ 1100.109428][T26924] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7710'.
[ 1100.480947][T26939] netlink: 'syz.2.7716': attribute type 21 has an invalid length.
[ 1100.510517][T26939] netlink: 'syz.2.7716': attribute type 1 has an invalid length.
[ 1100.526232][T26940] netlink: 'syz.2.7716': attribute type 21 has an invalid length.
[ 1100.557599][T26940] netlink: 'syz.2.7716': attribute type 1 has an invalid length.
[ 1101.246524][T26965] netlink: 'syz.0.7725': attribute type 29 has an invalid length.
[ 1101.264740][T26967] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7724'.
[ 1101.304725][T26965] netlink: 'syz.0.7725': attribute type 29 has an invalid length.
[ 1101.312915][T26968] netlink: 'syz.0.7725': attribute type 29 has an invalid length.
[ 1101.321610][T26970] FAULT_INJECTION: forcing a failure.
[ 1101.321610][T26970] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1101.340386][T26970] CPU: 1 PID: 26970 Comm: syz.0.7725 Not tainted syzkaller #0
[ 1101.348048][T26970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1101.358117][T26970] Call Trace:
[ 1101.361403][T26970]  <TASK>
[ 1101.364328][T26970]  dump_stack_lvl+0x188/0x24e
[ 1101.369004][T26970]  ? show_regs_print_info+0x12/0x12
[ 1101.374192][T26970]  ? load_image+0x400/0x400
[ 1101.378693][T26970]  ? __might_fault+0xa6/0x120
[ 1101.383367][T26970]  should_fail_ex+0x399/0x4d0
[ 1101.388038][T26970]  copyout+0x1b/0x120
[ 1101.392019][T26970]  _copy_to_iter+0x48b/0x1040
[ 1101.396701][T26970]  ? iov_iter_init+0x1f0/0x1f0
[ 1101.401459][T26970]  ? __virt_addr_valid+0x188/0x540
[ 1101.406571][T26970]  ? __virt_addr_valid+0x465/0x540
[ 1101.411675][T26970]  ? __phys_addr_symbol+0x2b/0x70
[ 1101.416693][T26970]  ? __check_object_size+0x500/0xa40
[ 1101.421973][T26970]  __skb_datagram_iter+0xde/0x740
[ 1101.426995][T26970]  ? skb_copy_datagram_iter+0x290/0x290
[ 1101.432539][T26970]  skb_copy_datagram_iter+0xd7/0x290
[ 1101.437828][T26970]  netlink_recvmsg+0x2d0/0xe00
[ 1101.442587][T26970]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1101.447529][T26970]  ? aa_af_perm+0x340/0x340
[ 1101.452032][T26970]  ? __might_fault+0xa6/0x120
[ 1101.456703][T26970]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[ 1101.461978][T26970]  ? security_socket_recvmsg+0x85/0xb0
[ 1101.467437][T26970]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1101.472367][T26970]  ____sys_recvmsg+0x2cb/0x5e0
[ 1101.477130][T26970]  ? __sys_recvmsg_sock+0x40/0x40
[ 1101.482154][T26970]  ? import_iovec+0x6f/0xa0
[ 1101.486653][T26970]  ___sys_recvmsg+0x212/0x590
[ 1101.491336][T26970]  ? __sys_recvmsg+0x290/0x290
[ 1101.496096][T26970]  ? common_file_perm+0x171/0x1c0
[ 1101.501228][T26970]  ? __fget_files+0x43d/0x4b0
[ 1101.505935][T26970]  __x64_sys_recvmsg+0x205/0x2e0
[ 1101.510876][T26970]  ? ct_nmi_exit+0x145/0x1c0
[ 1101.515463][T26970]  ? ___sys_recvmsg+0x590/0x590
[ 1101.520323][T26970]  ? lockdep_hardirqs_on+0x94/0x140
[ 1101.525518][T26970]  do_syscall_64+0x4c/0xa0
[ 1101.529926][T26970]  ? clear_bhb_loop+0x60/0xb0
[ 1101.534598][T26970]  ? clear_bhb_loop+0x60/0xb0
[ 1101.539276][T26970]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1101.545174][T26970] RIP: 0033:0x7ffa4259ce59
[ 1101.549581][T26970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1101.569183][T26970] RSP: 002b:00007ffa433f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1101.577685][T26970] RAX: ffffffffffffffda RBX: 00007ffa42816180 RCX: 00007ffa4259ce59
[ 1101.585651][T26970] RDX: 0000000000002000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1101.593618][T26970] RBP: 00007ffa433f9090 R08: 0000000000000000 R09: 0000000000000000
[ 1101.601578][T26970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1101.609541][T26970] R13: 00007ffa42816218 R14: 00007ffa42816180 R15: 00007fffaa820cd8
[ 1101.617513][T26970]  </TASK>
[ 1102.103275][T26986] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7734'.
[ 1102.625015][T27006] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7739'.
[ 1104.644305][T27045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7753'.
[ 1104.745441][T27044] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[ 1104.753958][T27044] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[ 1104.781204][T27044] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[ 1105.076383][T27051] FAULT_INJECTION: forcing a failure.
[ 1105.076383][T27051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1105.130314][T27051] CPU: 0 PID: 27051 Comm: syz.1.7755 Not tainted syzkaller #0
[ 1105.137827][T27051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1105.147900][T27051] Call Trace:
[ 1105.151199][T27051]  <TASK>
[ 1105.154145][T27051]  dump_stack_lvl+0x188/0x24e
[ 1105.158842][T27051]  ? show_regs_print_info+0x12/0x12
[ 1105.164050][T27051]  ? load_image+0x400/0x400
[ 1105.168574][T27051]  ? __lock_acquire+0x7d10/0x7d10
[ 1105.173617][T27051]  ? __fget_files+0x28/0x4b0
[ 1105.178235][T27051]  should_fail_ex+0x399/0x4d0
[ 1105.182931][T27051]  _copy_from_user+0x2c/0x170
[ 1105.187622][T27051]  generic_map_update_batch+0x4a1/0x810
[ 1105.193204][T27051]  ? rcu_read_unlock+0xa0/0xa0
[ 1105.197992][T27051]  ? __fdget+0x17c/0x200
[ 1105.202256][T27051]  ? rcu_read_unlock+0xa0/0xa0
[ 1105.207033][T27051]  bpf_map_do_batch+0x466/0x600
[ 1105.211905][T27051]  __sys_bpf+0x6f7/0x780
[ 1105.216165][T27051]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1105.221565][T27051]  ? lock_chain_count+0x20/0x20
[ 1105.226441][T27051]  __x64_sys_bpf+0x78/0x90
[ 1105.230871][T27051]  do_syscall_64+0x4c/0xa0
[ 1105.235300][T27051]  ? clear_bhb_loop+0x60/0xb0
[ 1105.239995][T27051]  ? clear_bhb_loop+0x60/0xb0
[ 1105.244692][T27051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1105.250604][T27051] RIP: 0033:0x7f692ab9ce59
[ 1105.255030][T27051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1105.274659][T27051] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1105.283092][T27051] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1105.291083][T27051] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1105.299069][T27051] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1105.307058][T27051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1105.315045][T27051] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1105.323046][T27051]  </TASK>
[ 1105.516704][T27055] validate_nla: 5 callbacks suppressed
[ 1105.516757][T27055] netlink: 'syz.2.7757': attribute type 10 has an invalid length.
[ 1105.549844][T27055] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7757'.
[ 1105.762051][T27041] delete_channel: no stack
[ 1105.986724][T27064] netlink: 'syz.0.7760': attribute type 10 has an invalid length.
[ 1106.150124][T27064] bond0: (slave geneve0): Enslaving as an active interface with an up link
[ 1106.882678][T27077] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7765'.
[ 1107.507490][T27085] netlink: 'syz.4.7768': attribute type 2 has an invalid length.
[ 1107.567273][T27085] netlink: 'syz.4.7768': attribute type 1 has an invalid length.
[ 1107.654474][T27085] netlink: 185292 bytes leftover after parsing attributes in process `syz.4.7768'.
[ 1109.034934][T27116] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7778'.
[ 1109.211771][T27121] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7780'.
[ 1109.328552][T27126] __sock_release: fasync list not empty!
[ 1109.471155][T27132] syz.1.7784[27132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1109.471846][T27132] syz.1.7784[27132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1109.769599][T27138] netlink: 'syz.2.7786': attribute type 21 has an invalid length.
[ 1109.830163][T27138] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7786'.
[ 1109.935933][T27142] netlink: 'syz.0.7788': attribute type 10 has an invalid length.
[ 1109.954449][T27142] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7788'.
[ 1110.230021][T27153] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7792'.
[ 1111.099243][T27185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7803'.
[ 1111.190182][T27188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7804'.
[ 1111.340041][T27192] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7805'.
[ 1111.509155][T27195] netlink: 'syz.4.7806': attribute type 17 has an invalid length.
[ 1111.555511][T27195] netlink: 'syz.4.7806': attribute type 16 has an invalid length.
[ 1111.592149][T27195] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7806'.
[ 1111.987515][T27204] netlink: 'syz.0.7809': attribute type 3 has an invalid length.
[ 1112.025235][T27204] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7809'.
[ 1112.047818][ T4289] Bluetooth: hci0: ISO packet for unknown connection handle 2
[ 1112.317778][   T32] syzkaller0: tun_net_xmit 76
[ 1112.323018][   T32] syzkaller0: tun_net_xmit 48
[ 1112.348535][ T3655] syzkaller0: tun_net_xmit 76
[ 1113.376649][   T32] syzkaller0: tun_net_xmit 76
[ 1113.381533][   T32] syzkaller0: tun_net_xmit 76
[ 1115.470572][T27231] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7816'.
[ 1115.776875][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.783251][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.988328][T27237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1117.995958][T27237] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1118.003633][T27237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1118.011167][T27237] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1118.471647][T27278] delete_channel: no stack
[ 1118.512247][T27277] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.7830'.
[ 1119.099110][T27306] FAULT_INJECTION: forcing a failure.
[ 1119.099110][T27306] name failslab, interval 1, probability 0, space 0, times 0
[ 1119.113095][T27306] CPU: 0 PID: 27306 Comm: syz.2.7841 Not tainted syzkaller #0
[ 1119.120594][T27306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1119.130669][T27306] Call Trace:
[ 1119.133957][T27306]  <TASK>
[ 1119.136894][T27306]  dump_stack_lvl+0x188/0x24e
[ 1119.141584][T27306]  ? show_regs_print_info+0x12/0x12
[ 1119.146786][T27306]  ? load_image+0x400/0x400
[ 1119.151390][T27306]  ? __might_sleep+0xd0/0xd0
[ 1119.155982][T27306]  ? __lock_acquire+0x7d10/0x7d10
[ 1119.161015][T27306]  should_fail_ex+0x399/0x4d0
[ 1119.165691][T27306]  should_failslab+0x5/0x20
[ 1119.170231][T27306]  slab_pre_alloc_hook+0x59/0x310
[ 1119.175255][T27306]  ? __inet_diag_dump_start+0x8b/0x970
[ 1119.180719][T27306]  __kmem_cache_alloc_node+0x4f/0x260
[ 1119.186092][T27306]  ? __netlink_dump_start+0x11f/0x6f0
[ 1119.191460][T27306]  ? __inet_diag_dump_start+0x8b/0x970
[ 1119.196918][T27306]  kmalloc_trace+0x26/0xe0
[ 1119.201337][T27306]  __inet_diag_dump_start+0x8b/0x970
[ 1119.206622][T27306]  ? netlink_lookup+0x30/0x200
[ 1119.211385][T27306]  __netlink_dump_start+0x3f9/0x6f0
[ 1119.216584][T27306]  inet_diag_rcv_msg_compat+0x207/0x420
[ 1119.222144][T27306]  ? __inet_diag_dump+0x380/0x380
[ 1119.227172][T27306]  ? sock_diag_rcv_msg+0x142/0x5f0
[ 1119.232282][T27306]  ? inet_diag_rcv_msg_compat+0x420/0x420
[ 1119.238000][T27306]  ? inet_diag_dump_start_compat+0x20/0x20
[ 1119.243804][T27306]  ? inet_diag_dump+0x50/0x50
[ 1119.248482][T27306]  ? __inet_diag_dump+0x380/0x380
[ 1119.253506][T27306]  sock_diag_rcv_msg+0x3cc/0x5f0
[ 1119.258445][T27306]  netlink_rcv_skb+0x1fb/0x450
[ 1119.263205][T27306]  ? sock_diag_bind+0xa0/0xa0
[ 1119.267878][T27306]  ? netlink_ack+0x1170/0x1170
[ 1119.272643][T27306]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1119.277847][T27306]  sock_diag_rcv+0x26/0x40
[ 1119.282285][T27306]  netlink_unicast+0x74d/0x8d0
[ 1119.287070][T27306]  netlink_sendmsg+0x8ad/0xbd0
[ 1119.291848][T27306]  ? netlink_getsockopt+0x550/0x550
[ 1119.297056][T27306]  ? aa_sock_msg_perm+0x94/0x150
[ 1119.302012][T27306]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1119.307304][T27306]  ? security_socket_sendmsg+0x7c/0xa0
[ 1119.312948][T27306]  ? netlink_getsockopt+0x550/0x550
[ 1119.318235][T27306]  ____sys_sendmsg+0x5be/0x970
[ 1119.323008][T27306]  ? __sys_sendmsg_sock+0x30/0x30
[ 1119.328025][T27306]  ? __import_iovec+0x315/0x500
[ 1119.332882][T27306]  ? import_iovec+0x6f/0xa0
[ 1119.337381][T27306]  ___sys_sendmsg+0x2a2/0x360
[ 1119.342061][T27306]  ? __sys_sendmsg+0x290/0x290
[ 1119.346836][T27306]  ? __lock_acquire+0x7d10/0x7d10
[ 1119.351877][T27306]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1119.356742][T27306]  ? ct_nmi_exit+0x145/0x1c0
[ 1119.361354][T27306]  ? __x64_sys_sendmsg+0x80/0x80
[ 1119.366314][T27306]  ? lockdep_hardirqs_on+0x94/0x140
[ 1119.371522][T27306]  do_syscall_64+0x4c/0xa0
[ 1119.375938][T27306]  ? clear_bhb_loop+0x60/0xb0
[ 1119.380620][T27306]  ? clear_bhb_loop+0x60/0xb0
[ 1119.385305][T27306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1119.391198][T27306] RIP: 0033:0x7f8158d9ce59
[ 1119.395611][T27306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1119.415229][T27306] RSP: 002b:00007f8159c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1119.423646][T27306] RAX: ffffffffffffffda RBX: 00007f8159015fa0 RCX: 00007f8158d9ce59
[ 1119.431616][T27306] RDX: 0000000020040842 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1119.439583][T27306] RBP: 00007f8159c47090 R08: 0000000000000000 R09: 0000000000000000
[ 1119.447559][T27306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1119.455521][T27306] R13: 00007f8159016038 R14: 00007f8159015fa0 R15: 00007ffd6ecab908
[ 1119.463504][T27306]  </TASK>
[ 1119.903091][T27315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1119.930403][T27315] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1120.561635][T27314] device syzkaller0 entered promiscuous mode
[ 1120.746615][T27331] netlink: 'syz.3.7847': attribute type 3 has an invalid length.
[ 1120.786169][T27331] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7847'.
[ 1124.671870][T27343] netlink: 'syz.1.7852': attribute type 21 has an invalid length.
[ 1124.680363][T27343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7852'.
[ 1124.689475][T27343] netlink: 'syz.1.7852': attribute type 1 has an invalid length.
[ 1124.709401][T27358] device wlan1 left promiscuous mode
[ 1124.728727][T27361] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1124.750090][T27361] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1124.788988][T27361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1124.807975][T27361] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1126.114844][T27411] netlink: 'syz.4.7875': attribute type 7 has an invalid length.
[ 1126.921337][T27422] netlink: 'syz.0.7878': attribute type 4 has an invalid length.
[ 1126.943150][T27445] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7884'.
[ 1126.964601][T27422] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7878'.
[ 1127.560441][T27446] netlink: 'syz.4.7884': attribute type 46 has an invalid length.
[ 1127.574950][T27446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7884'.
[ 1127.613543][T27455] netlink: 'syz.1.7887': attribute type 11 has an invalid length.
[ 1127.669771][T27461] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7887'.
[ 1127.856930][T27464] netlink: 'syz.0.7890': attribute type 3 has an invalid length.
[ 1127.884501][T27464] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7890'.
[ 1129.046557][T27507] netlink: 'syz.1.7902': attribute type 10 has an invalid length.
[ 1129.067484][T27507] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7902'.
[ 1129.300533][T27516] FAULT_INJECTION: forcing a failure.
[ 1129.300533][T27516] name failslab, interval 1, probability 0, space 0, times 0
[ 1129.359892][T27516] CPU: 1 PID: 27516 Comm: syz.4.7904 Not tainted syzkaller #0
[ 1129.367430][T27516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1129.377527][T27516] Call Trace:
[ 1129.380863][T27516]  <TASK>
[ 1129.383824][T27516]  dump_stack_lvl+0x188/0x24e
[ 1129.388553][T27516]  ? show_regs_print_info+0x12/0x12
[ 1129.393806][T27516]  ? load_image+0x400/0x400
[ 1129.398357][T27516]  ? verify_lock_unused+0x140/0x140
[ 1129.403572][T27516]  ? perf_trace_lock+0x301/0x390
[ 1129.408533][T27516]  should_fail_ex+0x399/0x4d0
[ 1129.413226][T27516]  should_failslab+0x5/0x20
[ 1129.417732][T27516]  slab_pre_alloc_hook+0x59/0x310
[ 1129.422777][T27516]  kmem_cache_alloc+0x56/0x2f0
[ 1129.427545][T27516]  ? skb_clone+0x1e7/0x370
[ 1129.431980][T27516]  skb_clone+0x1e7/0x370
[ 1129.436238][T27516]  __netlink_deliver_tap+0x3ed/0x800
[ 1129.441557][T27516]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1129.446768][T27516]  netlink_deliver_tap+0x19c/0x1b0
[ 1129.451889][T27516]  netlink_unicast+0x728/0x8d0
[ 1129.456680][T27516]  netlink_sendmsg+0x8ad/0xbd0
[ 1129.461470][T27516]  ? netlink_getsockopt+0x550/0x550
[ 1129.466729][T27516]  ? aa_sock_msg_perm+0x94/0x150
[ 1129.471697][T27516]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1129.477004][T27516]  ? security_socket_sendmsg+0x7c/0xa0
[ 1129.482497][T27516]  ? netlink_getsockopt+0x550/0x550
[ 1129.487733][T27516]  ____sys_sendmsg+0x5be/0x970
[ 1129.492545][T27516]  ? __sys_sendmsg_sock+0x30/0x30
[ 1129.497584][T27516]  ? __import_iovec+0x315/0x500
[ 1129.502470][T27516]  ? import_iovec+0x6f/0xa0
[ 1129.506997][T27516]  ___sys_sendmsg+0x2a2/0x360
[ 1129.511726][T27516]  ? __sys_sendmsg+0x290/0x290
[ 1129.516549][T27516]  ? __lock_acquire+0x7d10/0x7d10
[ 1129.521647][T27516]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1129.526517][T27516]  ? __x64_sys_sendmsg+0x80/0x80
[ 1129.531521][T27516]  ? lockdep_hardirqs_on+0x94/0x140
[ 1129.536751][T27516]  do_syscall_64+0x4c/0xa0
[ 1129.541189][T27516]  ? clear_bhb_loop+0x60/0xb0
[ 1129.545889][T27516]  ? clear_bhb_loop+0x60/0xb0
[ 1129.550597][T27516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1129.556510][T27516] RIP: 0033:0x7f56a099ce59
[ 1129.560942][T27516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1129.580667][T27516] RSP: 002b:00007f56a18b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1129.589101][T27516] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1129.597089][T27516] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[ 1129.605067][T27516] RBP: 00007f56a18b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1129.613044][T27516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1129.621111][T27516] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1129.629138][T27516]  </TASK>
[ 1130.848034][T27508] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.7902'.
[ 1130.895197][T27516] netlink: 'syz.4.7904': attribute type 21 has an invalid length.
[ 1130.934687][T27516] netlink: 'syz.4.7904': attribute type 6 has an invalid length.
[ 1130.980150][T27516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7904'.
[ 1131.730476][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7920'.
[ 1131.940610][T27561] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7922'.
[ 1134.408902][T27631] netlink: 'syz.1.7946': attribute type 46 has an invalid length.
[ 1134.428413][T27631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7946'.
[ 1140.985132][T27724] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1141.889796][T27755] : port 1(ip6gretap0) entered blocking state
[ 1141.896700][T27755] : port 1(ip6gretap0) entered disabled state
[ 1141.904666][T27755] device ip6gretap0 entered promiscuous mode
[ 1141.940768][T27755] device ip6gretap0 left promiscuous mode
[ 1141.967007][T27755] : port 1(ip6gretap0) entered disabled state
[ 1142.448377][T27765] netlink: 'syz.2.7989': attribute type 8 has an invalid length.
[ 1142.510010][T27765] netlink: 'syz.2.7989': attribute type 1 has an invalid length.
[ 1142.557945][T27765] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7989'.
[ 1143.221913][T27783] netlink: 'syz.3.7998': attribute type 10 has an invalid length.
[ 1143.236038][T27783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7998'.
[ 1143.285276][T27786] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7997'.
[ 1143.738956][T27804] netlink: 'syz.2.8003': attribute type 10 has an invalid length.
[ 1144.692009][T27826] netlink: 'syz.4.8012': attribute type 10 has an invalid length.
[ 1144.708116][T27826] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8012'.
[ 1144.725268][T27822] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8011'.
[ 1145.066489][T27834] netlink: 'syz.2.8015': attribute type 2 has an invalid length.
[ 1145.078177][T27834] netlink: 'syz.2.8015': attribute type 10 has an invalid length.
[ 1145.108116][T27834] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.118815][T27834] device bridge_slave_1 left promiscuous mode
[ 1145.125623][T27834] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.142418][T27834] team0: Port device bridge_slave_1 added
[ 1145.416330][T27854] netlink: 'syz.2.8020': attribute type 10 has an invalid length.
[ 1145.440509][T27854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8020'.
[ 1145.458104][T27854] device ipvlan1 entered promiscuous mode
[ 1145.467759][T27854] bridge0: port 2(ipvlan1) entered blocking state
[ 1145.475067][T27854] bridge0: port 2(ipvlan1) entered disabled state
[ 1145.482621][T27854] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1145.549940][T27854] netlink: 'syz.2.8020': attribute type 10 has an invalid length.
[ 1145.883488][T27865] netlink: 'syz.1.8025': attribute type 29 has an invalid length.
[ 1147.222843][T27899] FAULT_INJECTION: forcing a failure.
[ 1147.222843][T27899] name failslab, interval 1, probability 0, space 0, times 0
[ 1147.292506][T27899] CPU: 0 PID: 27899 Comm: syz.4.8039 Not tainted syzkaller #0
[ 1147.300034][T27899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1147.310121][T27899] Call Trace:
[ 1147.313420][T27899]  <TASK>
[ 1147.316371][T27899]  dump_stack_lvl+0x188/0x24e
[ 1147.321086][T27899]  ? show_regs_print_info+0x12/0x12
[ 1147.326309][T27899]  ? load_image+0x400/0x400
[ 1147.330835][T27899]  ? fib_rules_lookup+0x98/0xb40
[ 1147.335822][T27899]  should_fail_ex+0x399/0x4d0
[ 1147.340539][T27899]  should_failslab+0x5/0x20
[ 1147.345067][T27899]  slab_pre_alloc_hook+0x59/0x310
[ 1147.350203][T27899]  ? __lock_acquire+0x7d10/0x7d10
[ 1147.355255][T27899]  ? find_exception+0x171/0xa30
[ 1147.360140][T27899]  kmem_cache_alloc+0x56/0x2f0
[ 1147.364929][T27899]  ? dst_alloc+0x101/0x160
[ 1147.369384][T27899]  dst_alloc+0x101/0x160
[ 1147.373659][T27899]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[ 1147.379752][T27899]  ? ip_route_output_key_hash_rcu+0x12b1/0x23f0
[ 1147.386038][T27899]  ? ip_route_output_key_hash+0x139/0x330
[ 1147.391786][T27899]  ip_route_output_key_hash+0x1ef/0x330
[ 1147.397361][T27899]  ? ip_route_input_rcu+0x3160/0x3160
[ 1147.402775][T27899]  ? __lock_acquire+0x7d10/0x7d10
[ 1147.407846][T27899]  ip_route_output_flow+0x26/0x150
[ 1147.412977][T27899]  ? security_sk_classify_flow+0x77/0x90
[ 1147.418637][T27899]  raw_sendmsg+0x116d/0x1b20
[ 1147.423331][T27899]  ? raw_sendmsg+0x510/0x1b20
[ 1147.428059][T27899]  ? compat_raw_ioctl+0x60/0x60
[ 1147.432986][T27899]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1147.439439][T27899]  ? sock_rps_record_flow+0x19/0x3f0
[ 1147.444755][T27899]  ? inet_sendmsg+0x78/0x2f0
[ 1147.449383][T27899]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1147.454690][T27899]  ? security_socket_sendmsg+0x7c/0xa0
[ 1147.460178][T27899]  ? inet_send_prepare+0x260/0x260
[ 1147.465311][T27899]  ____sys_sendmsg+0x5be/0x970
[ 1147.470138][T27899]  ? __sys_sendmsg_sock+0x30/0x30
[ 1147.475180][T27899]  ? __import_iovec+0x315/0x500
[ 1147.480073][T27899]  ? import_iovec+0x6f/0xa0
[ 1147.484621][T27899]  ___sys_sendmsg+0x2a2/0x360
[ 1147.489332][T27899]  ? __sys_sendmsg+0x290/0x290
[ 1147.494171][T27899]  ? __lock_acquire+0x7d10/0x7d10
[ 1147.499276][T27899]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1147.504156][T27899]  ? __x64_sys_sendmsg+0x80/0x80
[ 1147.509151][T27899]  ? lockdep_hardirqs_on+0x94/0x140
[ 1147.514398][T27899]  do_syscall_64+0x4c/0xa0
[ 1147.518861][T27899]  ? clear_bhb_loop+0x60/0xb0
[ 1147.523577][T27899]  ? clear_bhb_loop+0x60/0xb0
[ 1147.528296][T27899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1147.534225][T27899] RIP: 0033:0x7f56a099ce59
[ 1147.538666][T27899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1147.558315][T27899] RSP: 002b:00007f56a18b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1147.566775][T27899] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1147.574777][T27899] RDX: 0000000000000890 RSI: 00002000000016c0 RDI: 0000000000000004
[ 1147.582781][T27899] RBP: 00007f56a18b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1147.590779][T27899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1147.598775][T27899] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1147.606805][T27899]  </TASK>
[ 1148.036031][T27916] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.8044'.
[ 1148.468081][T27927] netlink: 111160 bytes leftover after parsing attributes in process `syz.3.8046'.
[ 1148.547510][T27927] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.8046'.
[ 1149.140450][T27945] netlink: 'syz.2.8056': attribute type 29 has an invalid length.
[ 1149.159200][T27945] netlink: 'syz.2.8056': attribute type 29 has an invalid length.
[ 1149.174964][T27945] netlink: 'syz.2.8056': attribute type 29 has an invalid length.
[ 1149.201176][T27945] FAULT_INJECTION: forcing a failure.
[ 1149.201176][T27945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1149.232063][T27945] CPU: 1 PID: 27945 Comm: syz.2.8056 Not tainted syzkaller #0
[ 1149.239575][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1149.249672][T27945] Call Trace:
[ 1149.252971][T27945]  <TASK>
[ 1149.255916][T27945]  dump_stack_lvl+0x188/0x24e
[ 1149.260626][T27945]  ? show_regs_print_info+0x12/0x12
[ 1149.265845][T27945]  ? load_image+0x400/0x400
[ 1149.270375][T27945]  ? __might_fault+0xa6/0x120
[ 1149.275077][T27945]  should_fail_ex+0x399/0x4d0
[ 1149.279785][T27945]  copyout+0x1b/0x120
[ 1149.283799][T27945]  _copy_to_iter+0x48b/0x1040
[ 1149.288514][T27945]  ? iov_iter_init+0x1f0/0x1f0
[ 1149.293309][T27945]  ? __virt_addr_valid+0x188/0x540
[ 1149.298442][T27945]  ? __virt_addr_valid+0x465/0x540
[ 1149.303581][T27945]  ? __phys_addr_symbol+0x2b/0x70
[ 1149.308640][T27945]  ? __check_object_size+0x500/0xa40
[ 1149.314049][T27945]  __skb_datagram_iter+0xde/0x740
[ 1149.319102][T27945]  ? skb_copy_datagram_iter+0x290/0x290
[ 1149.324678][T27945]  skb_copy_datagram_iter+0xd7/0x290
[ 1149.329994][T27945]  netlink_recvmsg+0x2d0/0xe00
[ 1149.334789][T27945]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1149.339746][T27945]  ? aa_af_perm+0x340/0x340
[ 1149.344280][T27945]  ? __might_fault+0xa6/0x120
[ 1149.349066][T27945]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[ 1149.354381][T27945]  ? security_socket_recvmsg+0x85/0xb0
[ 1149.359874][T27945]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1149.364841][T27945]  ____sys_recvmsg+0x2cb/0x5e0
[ 1149.367827][T27952] netlink: 'syz.3.8059': attribute type 29 has an invalid length.
[ 1149.369621][T27945]  ? __sys_recvmsg_sock+0x40/0x40
[ 1149.382475][T27945]  ? import_iovec+0x6f/0xa0
[ 1149.387010][T27945]  ___sys_recvmsg+0x212/0x590
[ 1149.391716][T27945]  ? __sys_recvmsg+0x290/0x290
[ 1149.396505][T27945]  ? common_file_perm+0x171/0x1c0
[ 1149.401563][T27945]  ? __fget_files+0x43d/0x4b0
[ 1149.406284][T27945]  __x64_sys_recvmsg+0x205/0x2e0
[ 1149.411237][T27945]  ? ___sys_recvmsg+0x590/0x590
[ 1149.414477][T27952] netlink: 'syz.3.8059': attribute type 29 has an invalid length.
[ 1149.416104][T27945]  ? lockdep_hardirqs_on+0x94/0x140
[ 1149.429097][T27945]  do_syscall_64+0x4c/0xa0
[ 1149.433525][T27945]  ? clear_bhb_loop+0x60/0xb0
[ 1149.438223][T27945]  ? clear_bhb_loop+0x60/0xb0
[ 1149.442932][T27945]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1149.448856][T27945] RIP: 0033:0x7f8158d9ce59
[ 1149.453291][T27945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.472934][T27945] RSP: 002b:00007f8159c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1149.481449][T27945] RAX: ffffffffffffffda RBX: 00007f8159015fa0 RCX: 00007f8158d9ce59
[ 1149.489425][T27945] RDX: 0000000000002000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1149.497411][T27945] RBP: 00007f8159c47090 R08: 0000000000000000 R09: 0000000000000000
[ 1149.505491][T27945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1149.513468][T27945] R13: 00007f8159016038 R14: 00007f8159015fa0 R15: 00007ffd6ecab908
[ 1149.521468][T27945]  </TASK>
[ 1149.536725][T27945] netlink: 'syz.2.8056': attribute type 29 has an invalid length.
[ 1149.609673][T27959] netlink: 'syz.3.8059': attribute type 29 has an invalid length.
[ 1149.628567][T27959] netlink: 'syz.3.8059': attribute type 29 has an invalid length.
[ 1151.999872][T28010] FAULT_INJECTION: forcing a failure.
[ 1151.999872][T28010] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.038666][T28010] CPU: 0 PID: 28010 Comm: syz.2.8076 Not tainted syzkaller #0
[ 1152.046187][T28010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1152.056330][T28010] Call Trace:
[ 1152.059628][T28010]  <TASK>
[ 1152.062567][T28010]  dump_stack_lvl+0x188/0x24e
[ 1152.067268][T28010]  ? show_regs_print_info+0x12/0x12
[ 1152.072486][T28010]  ? load_image+0x400/0x400
[ 1152.077106][T28010]  ? __might_sleep+0xd0/0xd0
[ 1152.081711][T28010]  ? __lock_acquire+0x7d10/0x7d10
[ 1152.086771][T28010]  should_fail_ex+0x399/0x4d0
[ 1152.091579][T28010]  should_failslab+0x5/0x20
[ 1152.096093][T28010]  slab_pre_alloc_hook+0x59/0x310
[ 1152.101123][T28010]  kmem_cache_alloc_node+0x5a/0x320
[ 1152.106318][T28010]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1152.111430][T28010]  ? __alloc_skb+0xfc/0x7e0
[ 1152.115936][T28010]  __alloc_skb+0xfc/0x7e0
[ 1152.120267][T28010]  netlink_ack+0x372/0x1170
[ 1152.124786][T28010]  ? ref_tracker_free+0x68c/0x840
[ 1152.129813][T28010]  ? __copy_skb_header+0x3ba/0x4f0
[ 1152.134920][T28010]  ? refcount_inc+0x70/0x70
[ 1152.139419][T28010]  ? memcpy+0x3c/0x60
[ 1152.143399][T28010]  ? netlink_dump+0xd00/0xd00
[ 1152.148070][T28010]  ? __copy_skb_header+0x3ba/0x4f0
[ 1152.153178][T28010]  ? __skb_clone+0x480/0x790
[ 1152.157767][T28010]  netlink_rcv_skb+0x280/0x450
[ 1152.162528][T28010]  ? rtnetlink_bind+0x80/0x80
[ 1152.167200][T28010]  ? netlink_ack+0x1170/0x1170
[ 1152.171971][T28010]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1152.177168][T28010]  netlink_unicast+0x74d/0x8d0
[ 1152.181939][T28010]  netlink_sendmsg+0x8ad/0xbd0
[ 1152.186704][T28010]  ? netlink_getsockopt+0x550/0x550
[ 1152.191902][T28010]  ? aa_sock_msg_perm+0x94/0x150
[ 1152.196956][T28010]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1152.202248][T28010]  ? security_socket_sendmsg+0x7c/0xa0
[ 1152.207710][T28010]  ? netlink_getsockopt+0x550/0x550
[ 1152.212988][T28010]  ____sys_sendmsg+0x5be/0x970
[ 1152.217758][T28010]  ? __sys_sendmsg_sock+0x30/0x30
[ 1152.222772][T28010]  ? __import_iovec+0x315/0x500
[ 1152.227625][T28010]  ? import_iovec+0x6f/0xa0
[ 1152.232134][T28010]  ___sys_sendmsg+0x2a2/0x360
[ 1152.236815][T28010]  ? __sys_sendmsg+0x290/0x290
[ 1152.241591][T28010]  ? __lock_acquire+0x7d10/0x7d10
[ 1152.246630][T28010]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1152.251484][T28010]  ? __x64_sys_sendmsg+0x80/0x80
[ 1152.256428][T28010]  ? lockdep_hardirqs_on+0x94/0x140
[ 1152.261633][T28010]  do_syscall_64+0x4c/0xa0
[ 1152.266041][T28010]  ? clear_bhb_loop+0x60/0xb0
[ 1152.270716][T28010]  ? clear_bhb_loop+0x60/0xb0
[ 1152.275392][T28010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1152.281284][T28010] RIP: 0033:0x7f8158d9ce59
[ 1152.285694][T28010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.305301][T28010] RSP: 002b:00007f8159c05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1152.313713][T28010] RAX: ffffffffffffffda RBX: 00007f8159016180 RCX: 00007f8158d9ce59
[ 1152.321681][T28010] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005
[ 1152.329738][T28010] RBP: 00007f8159c05090 R08: 0000000000000000 R09: 0000000000000000
[ 1152.337796][T28010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1152.345757][T28010] R13: 00007f8159016218 R14: 00007f8159016180 R15: 00007ffd6ecab908
[ 1152.353735][T28010]  </TASK>
[ 1152.793570][T27967] delete_channel: no stack
[ 1152.928431][T28012] netlink: 'syz.0.8077': attribute type 29 has an invalid length.
[ 1152.961552][T28012] netlink: 'syz.0.8077': attribute type 29 has an invalid length.
[ 1153.491410][T28026] FAULT_INJECTION: forcing a failure.
[ 1153.491410][T28026] name failslab, interval 1, probability 0, space 0, times 0
[ 1153.571802][T28026] CPU: 1 PID: 28026 Comm: syz.4.8083 Not tainted syzkaller #0
[ 1153.579349][T28026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1153.589443][T28026] Call Trace:
[ 1153.592750][T28026]  <TASK>
[ 1153.595701][T28026]  dump_stack_lvl+0x188/0x24e
[ 1153.600422][T28026]  ? show_regs_print_info+0x12/0x12
[ 1153.605653][T28026]  ? load_image+0x400/0x400
[ 1153.610193][T28026]  ? __lock_acquire+0x7d10/0x7d10
[ 1153.615257][T28026]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1153.621100][T28026]  should_fail_ex+0x399/0x4d0
[ 1153.625816][T28026]  should_failslab+0x5/0x20
[ 1153.630347][T28026]  slab_pre_alloc_hook+0x59/0x310
[ 1153.635406][T28026]  ? fib_create_info+0xa53/0x2490
[ 1153.640464][T28026]  __kmem_cache_alloc_node+0x4f/0x260
[ 1153.645876][T28026]  ? fib_create_info+0xa53/0x2490
[ 1153.650931][T28026]  __kmalloc+0xa0/0x240
[ 1153.655129][T28026]  fib_create_info+0xa53/0x2490
[ 1153.660024][T28026]  ? __lock_acquire+0x7d10/0x7d10
[ 1153.665104][T28026]  fib_table_insert+0xc2/0x1b20
[ 1153.669989][T28026]  ? lwtunnel_valid_encap_type+0x27a/0x5e0
[ 1153.675915][T28026]  ? lwtunnel_valid_encap_type+0x8c/0x5e0
[ 1153.681676][T28026]  ? rtm_to_fib_config+0xff4/0x1380
[ 1153.686936][T28026]  ? fib_new_table+0x106/0x2d0
[ 1153.691739][T28026]  inet_rtm_newroute+0x147/0x230
[ 1153.696707][T28026]  ? __mutex_lock+0x3b2/0xaf0
[ 1153.701416][T28026]  ? rcu_read_unlock+0xa0/0xa0
[ 1153.706245][T28026]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1153.711395][T28026]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1153.716533][T28026]  ? rcu_read_unlock+0xa0/0xa0
[ 1153.721329][T28026]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1153.726318][T28026]  ? rtnetlink_bind+0x80/0x80
[ 1153.731065][T28026]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1153.736330][T28026]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1153.742106][T28026]  ? perf_trace_lock+0x301/0x390
[ 1153.747080][T28026]  ? __copy_skb_header+0x3ba/0x4f0
[ 1153.752224][T28026]  ? trace_event_raw_event_lock+0x250/0x250
[ 1153.758162][T28026]  ? __skb_clone+0x480/0x790
[ 1153.762793][T28026]  netlink_rcv_skb+0x1fb/0x450
[ 1153.767584][T28026]  ? rtnetlink_bind+0x80/0x80
[ 1153.772297][T28026]  ? netlink_ack+0x1170/0x1170
[ 1153.777109][T28026]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1153.782342][T28026]  netlink_unicast+0x74d/0x8d0
[ 1153.787164][T28026]  netlink_sendmsg+0x8ad/0xbd0
[ 1153.791971][T28026]  ? netlink_getsockopt+0x550/0x550
[ 1153.797203][T28026]  ? aa_sock_msg_perm+0x94/0x150
[ 1153.802178][T28026]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1153.807484][T28026]  ? security_socket_sendmsg+0x7c/0xa0
[ 1153.812986][T28026]  ? netlink_getsockopt+0x550/0x550
[ 1153.818213][T28026]  ____sys_sendmsg+0x5be/0x970
[ 1153.823027][T28026]  ? __sys_sendmsg_sock+0x30/0x30
[ 1153.828074][T28026]  ? __import_iovec+0x315/0x500
[ 1153.832970][T28026]  ? import_iovec+0x6f/0xa0
[ 1153.837509][T28026]  ___sys_sendmsg+0x2a2/0x360
[ 1153.842226][T28026]  ? __sys_sendmsg+0x290/0x290
[ 1153.847071][T28026]  ? __lock_acquire+0x7d10/0x7d10
[ 1153.852177][T28026]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1153.857060][T28026]  ? __x64_sys_sendmsg+0x80/0x80
[ 1153.862063][T28026]  ? lockdep_hardirqs_on+0x94/0x140
[ 1153.867307][T28026]  do_syscall_64+0x4c/0xa0
[ 1153.871746][T28026]  ? clear_bhb_loop+0x60/0xb0
[ 1153.876717][T28026]  ? clear_bhb_loop+0x60/0xb0
[ 1153.881433][T28026]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1153.887355][T28026] RIP: 0033:0x7f56a099ce59
[ 1153.891795][T28026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1153.911432][T28026] RSP: 002b:00007f56a18b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1153.919878][T28026] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1153.927881][T28026] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1153.935880][T28026] RBP: 00007f56a18b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1153.943872][T28026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1153.951867][T28026] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1153.959898][T28026]  </TASK>
[ 1154.511194][T28046] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.8087'.
[ 1155.407420][T28079] validate_nla: 3 callbacks suppressed
[ 1155.407441][T28079] netlink: 'syz.1.8099': attribute type 10 has an invalid length.
[ 1155.707252][T28079] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8099'.
[ 1156.378371][T28096] netlink: 'syz.0.8104': attribute type 3 has an invalid length.
[ 1156.389621][T28096] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8104'.
[ 1157.280213][T28115] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.8107'.
[ 1158.086671][T28137] netlink: 'syz.1.8114': attribute type 10 has an invalid length.
[ 1158.196836][T28137] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8114'.
[ 1158.684428][T28160] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1158.690301][T28160] pim6reg0: linktype set to 780
[ 1159.475130][T28165] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.8125'.
[ 1159.821077][T28186] netlink: 'syz.0.8131': attribute type 10 has an invalid length.
[ 1160.308340][T28201] 
€Â0: renamed from pim6reg1
[ 1160.651843][T28205] netlink: 'syz.4.8138': attribute type 10 has an invalid length.
[ 1160.694382][T28205] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8138'.
[ 1162.081822][T28219] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.8142'.
[ 1162.355621][T28246] netlink: 'syz.4.8150': attribute type 3 has an invalid length.
[ 1162.372256][T28246] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8150'.
[ 1162.466506][T28250] netlink: 'syz.0.8154': attribute type 27 has an invalid length.
[ 1162.521760][T28250] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8154'.
[ 1162.707900][T28250] netlink: 'syz.0.8154': attribute type 3 has an invalid length.
[ 1162.717619][T28250] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.8154'.
[ 1164.539202][T28308] netlink: 'syz.2.8171': attribute type 27 has an invalid length.
[ 1164.575088][T28308] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8171'.
[ 1164.767553][T28316] netlink: 'syz.0.8175': attribute type 10 has an invalid length.
[ 1164.802173][T28308] netlink: 'syz.2.8171': attribute type 3 has an invalid length.
[ 1164.815044][T28308] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.8171'.
[ 1164.884347][T28316] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8175'.
[ 1165.149074][T28325] netlink: 'syz.3.8178': attribute type 10 has an invalid length.
[ 1165.236674][T28325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.245358][T28325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.413861][T28325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1165.421683][T28325] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1165.431727][T28325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1165.439217][T28325] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1165.693436][T28325] team0: Port device bridge0 added
[ 1165.958455][T28352] netlink: 'syz.1.8187': attribute type 27 has an invalid length.
[ 1166.006534][T28352] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8187'.
[ 1166.070882][T28355] netlink: 'syz.4.8189': attribute type 10 has an invalid length.
[ 1166.090805][T28355] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8189'.
[ 1166.154476][T28352] netlink: 'syz.1.8187': attribute type 3 has an invalid length.
[ 1166.173216][T28352] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.8187'.
[ 1167.136779][T28386] device syzkaller0 entered promiscuous mode
[ 1167.350164][T28401] netlink: 'syz.3.8205': attribute type 10 has an invalid length.
[ 1167.387820][T28401] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8205'.
[ 1167.559697][T28407] sock: sock_set_timeout: `syz.4.8206' (pid 28407) tries to set negative timeout
[ 1169.586051][T28407] netlink: 'syz.4.8206': attribute type 13 has an invalid length.
[ 1169.593893][T28407] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8206'.
[ 1169.603312][T28411] netlink: 'syz.4.8206': attribute type 13 has an invalid length.
[ 1169.611383][T28411] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8206'.
[ 1169.633467][T28420] netlink: 'syz.4.8206': attribute type 10 has an invalid length.
[ 1169.868889][T28437] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8219'.
[ 1169.900190][T28436] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.8218'.
[ 1169.910379][T28441] netlink: 'syz.2.8220': attribute type 10 has an invalid length.
[ 1169.920737][T28441] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8220'.
[ 1169.941263][T28440] device sit0 entered promiscuous mode
[ 1170.660713][T28459] netlink: 'syz.3.8224': attribute type 2 has an invalid length.
[ 1171.352262][T28483] netlink: 'syz.4.8233': attribute type 10 has an invalid length.
[ 1171.377794][T28483] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8233'.
[ 1171.731494][T28501] netlink: 'syz.0.8239': attribute type 21 has an invalid length.
[ 1171.815147][T28501] netlink: 'syz.0.8239': attribute type 6 has an invalid length.
[ 1171.832038][T28501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8239'.
[ 1172.168029][T28509] netlink: 'syz.2.8242': attribute type 4 has an invalid length.
[ 1172.196372][T28509] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8242'.
[ 1172.490019][T28528] netlink: 'syz.2.8247': attribute type 10 has an invalid length.
[ 1172.512643][T28528] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8247'.
[ 1172.557108][T28530] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.8248'.
[ 1172.865322][T28543] netlink: 'syz.2.8253': attribute type 21 has an invalid length.
[ 1172.873340][T28543] netlink: 'syz.2.8253': attribute type 6 has an invalid length.
[ 1172.981417][T28543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8253'.
[ 1173.438490][T28551] netlink: 'syz.3.8254': attribute type 2 has an invalid length.
[ 1173.529088][T28551] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.8254'.
[ 1173.664960][T28532] delete_channel: no stack
[ 1173.908257][T28570] netlink: 'syz.3.8263': attribute type 10 has an invalid length.
[ 1173.925466][T28570] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8263'.
[ 1174.420288][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8270'.
[ 1174.969793][T28592] netlink: 'syz.2.8273': attribute type 21 has an invalid length.
[ 1175.023653][T28592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8273'.
[ 1175.514359][T28616] sock: sock_set_timeout: `syz.3.8281' (pid 28616) tries to set negative timeout
[ 1175.829323][T28616] team0: Port device netdevsim0 added
[ 1177.191497][T28659] validate_nla: 7 callbacks suppressed
[ 1177.191517][T28659] netlink: 'syz.1.8298': attribute type 21 has an invalid length.
[ 1177.218348][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.224775][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.384642][T28659] __nla_validate_parse: 3 callbacks suppressed
[ 1177.384661][T28659] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8298'.
[ 1177.437582][T28660] netlink: 'syz.1.8298': attribute type 21 has an invalid length.
[ 1177.459498][T28660] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8298'.
[ 1177.768009][T28678] netlink: 'syz.2.8305': attribute type 10 has an invalid length.
[ 1177.830256][T28678] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8305'.
[ 1178.650043][T28698] netlink: 'syz.3.8311': attribute type 4 has an invalid length.
[ 1178.691220][T28698] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8311'.
[ 1179.772431][T28736] netlink: 'syz.4.8327': attribute type 10 has an invalid length.
[ 1179.818601][T28736] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8327'.
[ 1179.987392][T28739] netlink: 'syz.2.8326': attribute type 21 has an invalid length.
[ 1180.041001][T28739] netlink: 'syz.2.8326': attribute type 11 has an invalid length.
[ 1180.343375][T28756] netlink: 'syz.2.8330': attribute type 3 has an invalid length.
[ 1180.392181][T28756] netlink: 'syz.2.8330': attribute type 16 has an invalid length.
[ 1180.410885][T28756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8330'.
[ 1180.820132][T28774] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8337'.
[ 1181.044480][T28777] FAULT_INJECTION: forcing a failure.
[ 1181.044480][T28777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1181.093172][T28777] CPU: 1 PID: 28777 Comm: syz.0.8338 Not tainted syzkaller #0
[ 1181.100691][T28777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1181.110753][T28777] Call Trace:
[ 1181.114036][T28777]  <TASK>
[ 1181.116975][T28777]  dump_stack_lvl+0x188/0x24e
[ 1181.121756][T28777]  ? show_regs_print_info+0x12/0x12
[ 1181.126963][T28777]  ? load_image+0x400/0x400
[ 1181.131476][T28777]  ? __lock_acquire+0x7d10/0x7d10
[ 1181.136502][T28777]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1181.142228][T28777]  should_fail_ex+0x399/0x4d0
[ 1181.146904][T28777]  _copy_from_user+0x2c/0x170
[ 1181.151581][T28777]  ___sys_sendmsg+0x1c3/0x360
[ 1181.156254][T28777]  ? irqentry_enter+0x33/0x50
[ 1181.160931][T28777]  ? __sys_sendmsg+0x290/0x290
[ 1181.165722][T28777]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1181.170570][T28777]  ? __x64_sys_sendmsg+0x80/0x80
[ 1181.175517][T28777]  ? lockdep_hardirqs_on+0x94/0x140
[ 1181.180725][T28777]  do_syscall_64+0x4c/0xa0
[ 1181.185224][T28777]  ? clear_bhb_loop+0x60/0xb0
[ 1181.189989][T28777]  ? clear_bhb_loop+0x60/0xb0
[ 1181.194673][T28777]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1181.200561][T28777] RIP: 0033:0x7ffa4259ce59
[ 1181.204973][T28777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1181.224588][T28777] RSP: 002b:00007ffa4343b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1181.233000][T28777] RAX: ffffffffffffffda RBX: 00007ffa42815fa0 RCX: 00007ffa4259ce59
[ 1181.240974][T28777] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[ 1181.248942][T28777] RBP: 00007ffa4343b090 R08: 0000000000000000 R09: 0000000000000000
[ 1181.256907][T28777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1181.264876][T28777] R13: 00007ffa42816038 R14: 00007ffa42815fa0 R15: 00007fffaa820cd8
[ 1181.272858][T28777]  </TASK>
[ 1181.567956][T28792] netlink: 'syz.1.8344': attribute type 10 has an invalid length.
[ 1182.420209][T28813] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8350'.
[ 1182.479005][T28813] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8350'.
[ 1182.679805][T28826] netlink: 'syz.0.8356': attribute type 10 has an invalid length.
[ 1182.728886][T28826] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8356'.
[ 1183.023078][T28833] netlink: 'syz.1.8358': attribute type 21 has an invalid length.
[ 1183.085330][T28833] netlink: 'syz.1.8358': attribute type 11 has an invalid length.
[ 1183.860615][T28853] netlink: 'syz.4.8364': attribute type 29 has an invalid length.
[ 1183.936738][T28853] netlink: 'syz.4.8364': attribute type 29 has an invalid length.
[ 1184.008238][T28851] netlink: 'syz.4.8364': attribute type 29 has an invalid length.
[ 1184.372866][T28874] netlink: 'syz.3.8371': attribute type 10 has an invalid length.
[ 1184.388147][T28874] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8371'.
[ 1184.412796][T28877] netlink: 'syz.2.8370': attribute type 10 has an invalid length.
[ 1184.434118][T28877] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8370'.
[ 1184.466192][T28873] netlink: 'syz.0.8372': attribute type 21 has an invalid length.
[ 1184.481158][T28873] netlink: 'syz.0.8372': attribute type 11 has an invalid length.
[ 1185.629391][T28908] netlink: 185292 bytes leftover after parsing attributes in process `syz.0.8383'.
[ 1185.683496][T28908] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.8383'.
[ 1186.138667][T28923] FAULT_INJECTION: forcing a failure.
[ 1186.138667][T28923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1186.174494][T28923] CPU: 0 PID: 28923 Comm: syz.4.8388 Not tainted syzkaller #0
[ 1186.182028][T28923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1186.192106][T28923] Call Trace:
[ 1186.195392][T28923]  <TASK>
[ 1186.198340][T28923]  dump_stack_lvl+0x188/0x24e
[ 1186.203044][T28923]  ? show_regs_print_info+0x12/0x12
[ 1186.208255][T28923]  ? load_image+0x400/0x400
[ 1186.212773][T28923]  ? __might_fault+0xa6/0x120
[ 1186.217465][T28923]  should_fail_ex+0x399/0x4d0
[ 1186.222162][T28923]  copyout+0x1b/0x120
[ 1186.226165][T28923]  _copy_to_iter+0x48b/0x1040
[ 1186.230857][T28923]  ? iov_iter_init+0x1f0/0x1f0
[ 1186.235624][T28923]  ? __virt_addr_valid+0x188/0x540
[ 1186.240759][T28923]  ? __virt_addr_valid+0x465/0x540
[ 1186.245871][T28923]  ? __phys_addr_symbol+0x2b/0x70
[ 1186.250901][T28923]  ? __check_object_size+0x500/0xa40
[ 1186.256193][T28923]  __skb_datagram_iter+0xde/0x740
[ 1186.261236][T28923]  ? skb_copy_datagram_iter+0x290/0x290
[ 1186.266795][T28923]  skb_copy_datagram_iter+0xd7/0x290
[ 1186.272088][T28923]  netlink_recvmsg+0x2d0/0xe00
[ 1186.276863][T28923]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1186.281805][T28923]  ? aa_af_perm+0x340/0x340
[ 1186.286311][T28923]  ? __might_fault+0xa6/0x120
[ 1186.290991][T28923]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[ 1186.296278][T28923]  ? security_socket_recvmsg+0x85/0xb0
[ 1186.301743][T28923]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1186.306676][T28923]  ____sys_recvmsg+0x2cb/0x5e0
[ 1186.311451][T28923]  ? __sys_recvmsg_sock+0x40/0x40
[ 1186.316482][T28923]  ? import_iovec+0x6f/0xa0
[ 1186.321164][T28923]  ___sys_recvmsg+0x212/0x590
[ 1186.325845][T28923]  ? __sys_recvmsg+0x290/0x290
[ 1186.330615][T28923]  ? common_file_perm+0x171/0x1c0
[ 1186.335650][T28923]  ? __fget_files+0x43d/0x4b0
[ 1186.340350][T28923]  __x64_sys_recvmsg+0x205/0x2e0
[ 1186.345287][T28923]  ? ___sys_recvmsg+0x590/0x590
[ 1186.350150][T28923]  ? lockdep_hardirqs_on+0x94/0x140
[ 1186.355442][T28923]  do_syscall_64+0x4c/0xa0
[ 1186.359946][T28923]  ? clear_bhb_loop+0x60/0xb0
[ 1186.364622][T28923]  ? clear_bhb_loop+0x60/0xb0
[ 1186.369302][T28923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1186.375199][T28923] RIP: 0033:0x7f56a099ce59
[ 1186.379611][T28923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1186.399223][T28923] RSP: 002b:00007f56a18b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1186.407633][T28923] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1186.415601][T28923] RDX: 0000000000002000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1186.423571][T28923] RBP: 00007f56a18b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1186.431538][T28923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1186.439508][T28923] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1186.447501][T28923]  </TASK>
[ 1186.512400][T28926] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8391'.
[ 1187.988870][T28952] validate_nla: 11 callbacks suppressed
[ 1187.988891][T28952] netlink: 'syz.1.8398': attribute type 10 has an invalid length.
[ 1188.161592][T28952] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8398'.
[ 1188.296985][T28957] netlink: 'syz.4.8402': attribute type 21 has an invalid length.
[ 1188.337924][T28957] netlink: 'syz.4.8402': attribute type 11 has an invalid length.
[ 1188.507879][T28965] netlink: 'syz.4.8405': attribute type 11 has an invalid length.
[ 1188.536190][T28965] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8405'.
[ 1188.657161][T28974] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8408'.
[ 1188.664277][T28964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1188.726361][T28974] netlink: 'syz.3.8408': attribute type 10 has an invalid length.
[ 1188.797450][T28974] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8408'.
[ 1189.215320][T28987] netlink: 'syz.0.8410': attribute type 19 has an invalid length.
[ 1189.223195][T28987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8410'.
[ 1189.842651][T29000] netlink: 'syz.3.8415': attribute type 21 has an invalid length.
[ 1189.883676][T29000] netlink: 'syz.3.8415': attribute type 11 has an invalid length.
[ 1190.120337][T29007] netlink: 'syz.4.8417': attribute type 10 has an invalid length.
[ 1190.148941][T29007] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8417'.
[ 1190.416811][T29017] netlink: 'syz.0.8431': attribute type 21 has an invalid length.
[ 1190.458511][T29017] netlink: 'syz.0.8431': attribute type 6 has an invalid length.
[ 1190.494379][T29017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8431'.
[ 1191.160558][T29032] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8425'.
[ 1191.419233][T29045] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8433'.
[ 1191.455057][T29048] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8434'.
[ 1193.080304][T29100] device bridge_slave_1 entered promiscuous mode
[ 1193.161209][T29095] device pim6reg1 entered promiscuous mode
[ 1193.193854][T29100] validate_nla: 5 callbacks suppressed
[ 1193.193923][T29100] netlink: 'syz.2.8448': attribute type 10 has an invalid length.
[ 1193.216609][T29094] delete_channel: no stack
[ 1193.266180][T29100] __nla_validate_parse: 2 callbacks suppressed
[ 1193.266245][T29100] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8448'.
[ 1194.577699][T29121] netlink: 'syz.0.8458': attribute type 3 has an invalid length.
[ 1194.618324][T29121] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8458'.
[ 1194.629467][T29123] netlink: 'syz.1.8459': attribute type 10 has an invalid length.
[ 1195.264590][T29136] FAULT_INJECTION: forcing a failure.
[ 1195.264590][T29136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1195.278663][T29136] CPU: 0 PID: 29136 Comm: syz.0.8465 Not tainted syzkaller #0
[ 1195.286151][T29136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1195.296249][T29136] Call Trace:
[ 1195.299544][T29136]  <TASK>
[ 1195.302473][T29136]  dump_stack_lvl+0x188/0x24e
[ 1195.307152][T29136]  ? show_regs_print_info+0x12/0x12
[ 1195.312521][T29136]  ? load_image+0x400/0x400
[ 1195.317040][T29136]  ? __lock_acquire+0x7d10/0x7d10
[ 1195.322070][T29136]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1195.328237][T29136]  should_fail_ex+0x399/0x4d0
[ 1195.332913][T29136]  _copy_from_user+0x2c/0x170
[ 1195.337592][T29136]  __sys_bpf+0x2ea/0x780
[ 1195.341842][T29136]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1195.347224][T29136]  ? lock_chain_count+0x20/0x20
[ 1195.352070][T29136]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1195.358057][T29136]  __x64_sys_bpf+0x78/0x90
[ 1195.362484][T29136]  do_syscall_64+0x4c/0xa0
[ 1195.366900][T29136]  ? clear_bhb_loop+0x60/0xb0
[ 1195.371575][T29136]  ? clear_bhb_loop+0x60/0xb0
[ 1195.376260][T29136]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1195.382148][T29136] RIP: 0033:0x7ffa4259ce59
[ 1195.386557][T29136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1195.406156][T29136] RSP: 002b:00007ffa4343b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1195.414566][T29136] RAX: ffffffffffffffda RBX: 00007ffa42815fa0 RCX: 00007ffa4259ce59
[ 1195.422534][T29136] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a
[ 1195.430496][T29136] RBP: 00007ffa4343b090 R08: 0000000000000000 R09: 0000000000000000
[ 1195.438459][T29136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1195.446425][T29136] R13: 00007ffa42816038 R14: 00007ffa42815fa0 R15: 00007fffaa820cd8
[ 1195.454404][T29136]  </TASK>
[ 1196.259359][T29169] netlink: 'syz.0.8475': attribute type 21 has an invalid length.
[ 1196.277112][T29169] netlink: 'syz.0.8475': attribute type 11 has an invalid length.
[ 1197.092092][T29190] tap0: tun_chr_ioctl cmd 1074812118
[ 1197.557448][T29210] netlink: 'syz.1.8490': attribute type 21 has an invalid length.
[ 1197.576520][T29210] netlink: 'syz.1.8490': attribute type 11 has an invalid length.
[ 1197.716212][T29219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8493'.
[ 1197.908456][T29230] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.8498'.
[ 1197.938530][T29230] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.8498'.
[ 1198.977992][T29254] netlink: 'syz.0.8507': attribute type 21 has an invalid length.
[ 1198.988600][T29254] netlink: 'syz.0.8507': attribute type 11 has an invalid length.
[ 1202.278779][T29298] netlink: 'syz.1.8523': attribute type 21 has an invalid length.
[ 1202.279387][T29291] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1202.288163][T29298] netlink: 'syz.1.8523': attribute type 6 has an invalid length.
[ 1202.300773][T29291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1202.306526][T29298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8523'.
[ 1202.314646][T29291] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1202.322884][T29298] FAULT_INJECTION: forcing a failure.
[ 1202.322884][T29298] name failslab, interval 1, probability 0, space 0, times 0
[ 1202.346086][T29298] CPU: 1 PID: 29298 Comm: syz.1.8523 Not tainted syzkaller #0
[ 1202.353587][T29298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1202.363659][T29298] Call Trace:
[ 1202.366937][T29298]  <TASK>
[ 1202.369861][T29298]  dump_stack_lvl+0x188/0x24e
[ 1202.374542][T29298]  ? show_regs_print_info+0x12/0x12
[ 1202.379748][T29298]  ? load_image+0x400/0x400
[ 1202.384247][T29298]  ? ip_tun_parse_opts+0x113/0x1050
[ 1202.389522][T29298]  should_fail_ex+0x399/0x4d0
[ 1202.394196][T29298]  should_failslab+0x5/0x20
[ 1202.398687][T29298]  slab_pre_alloc_hook+0x59/0x310
[ 1202.403707][T29298]  ? ip_tun_build_state+0x138/0x660
[ 1202.408903][T29298]  __kmem_cache_alloc_node+0x4f/0x260
[ 1202.414284][T29298]  ? ip_tun_build_state+0x138/0x660
[ 1202.419476][T29298]  __kmalloc+0xa0/0x240
[ 1202.423630][T29298]  ip_tun_build_state+0x138/0x660
[ 1202.428646][T29298]  ? iptunnel_pmtud_build_icmpv6+0x1130/0x1130
[ 1202.434810][T29298]  ? lwtunnel_build_state+0xde/0x4b0
[ 1202.440137][T29298]  lwtunnel_build_state+0x37a/0x4b0
[ 1202.445866][T29298]  ? lwtunnel_build_state+0xde/0x4b0
[ 1202.451159][T29298]  fib_nh_common_init+0x145/0x2d0
[ 1202.456191][T29298]  ? fib_dump_info+0x1070/0x1070
[ 1202.461129][T29298]  ? skb_gro_incr_csum_unnecessary+0x300/0x300
[ 1202.467281][T29298]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1202.472917][T29298]  fib_nh_init+0x9a/0x400
[ 1202.477252][T29298]  fib_create_info+0xf31/0x2490
[ 1202.482114][T29298]  ? __lock_acquire+0x7d10/0x7d10
[ 1202.487251][T29298]  fib_table_insert+0xc2/0x1b20
[ 1202.492100][T29298]  ? lwtunnel_valid_encap_type+0x27a/0x5e0
[ 1202.497904][T29298]  ? lwtunnel_valid_encap_type+0x8c/0x5e0
[ 1202.503630][T29298]  ? rtm_to_fib_config+0xff4/0x1380
[ 1202.508834][T29298]  ? fib_new_table+0x106/0x2d0
[ 1202.513595][T29298]  inet_rtm_newroute+0x147/0x230
[ 1202.518533][T29298]  ? __mutex_lock+0x3b2/0xaf0
[ 1202.523208][T29298]  ? rcu_read_unlock+0xa0/0xa0
[ 1202.527983][T29298]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1202.533094][T29298]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1202.538201][T29298]  ? rcu_read_unlock+0xa0/0xa0
[ 1202.542962][T29298]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1202.547904][T29298]  ? rtnetlink_bind+0x80/0x80
[ 1202.552585][T29298]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1202.557790][T29298]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1202.563516][T29298]  ? perf_trace_lock+0x301/0x390
[ 1202.568452][T29298]  ? __copy_skb_header+0x3ba/0x4f0
[ 1202.573559][T29298]  ? trace_event_raw_event_lock+0x250/0x250
[ 1202.579451][T29298]  ? __skb_clone+0x480/0x790
[ 1202.584042][T29298]  netlink_rcv_skb+0x1fb/0x450
[ 1202.588799][T29298]  ? rtnetlink_bind+0x80/0x80
[ 1202.593469][T29298]  ? netlink_ack+0x1170/0x1170
[ 1202.598233][T29298]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1202.603434][T29298]  netlink_unicast+0x74d/0x8d0
[ 1202.608205][T29298]  netlink_sendmsg+0x8ad/0xbd0
[ 1202.612984][T29298]  ? netlink_getsockopt+0x550/0x550
[ 1202.618191][T29298]  ? aa_sock_msg_perm+0x94/0x150
[ 1202.623134][T29298]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1202.628424][T29298]  ? security_socket_sendmsg+0x7c/0xa0
[ 1202.633904][T29298]  ? netlink_getsockopt+0x550/0x550
[ 1202.639187][T29298]  ____sys_sendmsg+0x5be/0x970
[ 1202.643963][T29298]  ? __sys_sendmsg_sock+0x30/0x30
[ 1202.648986][T29298]  ? __import_iovec+0x315/0x500
[ 1202.653835][T29298]  ? import_iovec+0x6f/0xa0
[ 1202.658338][T29298]  ___sys_sendmsg+0x2a2/0x360
[ 1202.663022][T29298]  ? __sys_sendmsg+0x290/0x290
[ 1202.667797][T29298]  ? trace_call_bpf+0xbf/0x6b0
[ 1202.672580][T29298]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1202.677516][T29298]  ? __x64_sys_sendmsg+0x80/0x80
[ 1202.682462][T29298]  ? lockdep_hardirqs_on+0x94/0x140
[ 1202.688089][T29298]  do_syscall_64+0x4c/0xa0
[ 1202.692495][T29298]  ? clear_bhb_loop+0x60/0xb0
[ 1202.697167][T29298]  ? clear_bhb_loop+0x60/0xb0
[ 1202.701843][T29298]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1202.707736][T29298] RIP: 0033:0x7f692ab9ce59
[ 1202.712147][T29298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.731747][T29298] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1202.740157][T29298] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1202.748122][T29298] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1202.756085][T29298] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1202.764048][T29298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1202.772017][T29298] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1202.779997][T29298]  </TASK>
[ 1202.840478][T29297] netlink: 'syz.3.8522': attribute type 21 has an invalid length.
[ 1202.860653][T29297] netlink: 'syz.3.8522': attribute type 11 has an invalid length.
[ 1202.898062][T29315] netlink: 'syz.0.8528': attribute type 21 has an invalid length.
[ 1202.919907][T29315] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1202.956284][T29315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1202.963798][T29315] IPv6: NLM_F_CREATE should be set when creating new route
[ 1202.971476][T29315] IPv6: NLM_F_CREATE should be set when creating new route
[ 1202.978950][T29315] IPv6: NLM_F_CREATE should be set when creating new route
[ 1203.186764][T29315] netlink: 'syz.0.8528': attribute type 16 has an invalid length.
[ 1203.221678][T29315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8528'.
[ 1203.255106][T29323] netlink: 'syz.0.8528': attribute type 10 has an invalid length.
[ 1204.576588][T29352] netlink: 'syz.1.8542': attribute type 10 has an invalid length.
[ 1204.599953][T29352] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8542'.
[ 1207.462704][T29380] netlink: 'syz.0.8547': attribute type 13 has an invalid length.
[ 1207.652068][T29398] netlink: 'syz.3.8552': attribute type 21 has an invalid length.
[ 1207.675405][T29398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8552'.
[ 1207.704183][T29398] netlink: 'syz.3.8552': attribute type 1 has an invalid length.
[ 1207.952461][T29415] netlink: 'syz.3.8557': attribute type 10 has an invalid length.
[ 1207.990595][T29415] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8557'.
[ 1208.504996][T29429] netlink: 'syz.4.8563': attribute type 21 has an invalid length.
[ 1208.513598][T29429] netlink: 'syz.4.8563': attribute type 11 has an invalid length.
[ 1209.150096][T29439] netlink: 'syz.0.8568': attribute type 10 has an invalid length.
[ 1209.185341][T29439] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8568'.
[ 1211.287073][T29513] netlink: 'syz.3.8596': attribute type 10 has an invalid length.
[ 1211.378446][T29513] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8596'.
[ 1211.406408][T29525] netlink: 'syz.2.8598': attribute type 10 has an invalid length.
[ 1211.415029][T29525] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8598'.
[ 1211.934055][T29543] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8605'.
[ 1212.341253][T29549] netlink: 'syz.4.8607': attribute type 29 has an invalid length.
[ 1212.379086][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8607'.
[ 1212.390294][T29549] netlink: 'syz.4.8607': attribute type 29 has an invalid length.
[ 1212.404290][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8607'.
[ 1212.559127][T29557] netlink: 'syz.3.8611': attribute type 10 has an invalid length.
[ 1212.587216][T29557] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8611'.
[ 1212.860884][T29570] netlink: 'syz.4.8615': attribute type 10 has an invalid length.
[ 1212.885206][T29570] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8615'.
[ 1214.093330][T29616] netlink: 'syz.3.8633': attribute type 28 has an invalid length.
[ 1214.133918][T29618] netlink: 'syz.0.8632': attribute type 10 has an invalid length.
[ 1214.141836][T29618] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8632'.
[ 1218.337759][T29658] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1218.657283][T29669] IPv6: Can't replace route, no match found
[ 1218.937801][T29677] netlink: 'syz.2.8651': attribute type 10 has an invalid length.
[ 1218.994425][T29677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8651'.
[ 1219.343992][T29683] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1219.476313][T29690] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8657'.
[ 1219.632176][T29701] netlink: 'syz.4.8661': attribute type 10 has an invalid length.
[ 1219.659697][T29701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8661'.
[ 1219.679207][T29701] device ipvlan1 entered promiscuous mode
[ 1219.700529][T29701] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1219.788440][T29702] netlink: 'syz.1.8662': attribute type 21 has an invalid length.
[ 1219.798444][T29702] netlink: 'syz.1.8662': attribute type 11 has an invalid length.
[ 1219.862744][T29701] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8661'.
[ 1220.073338][T29717] netlink: 'syz.1.8666': attribute type 10 has an invalid length.
[ 1220.137115][T29717] device wlan1 left promiscuous mode
[ 1220.247829][T29717] team0: Port device wlan1 added
[ 1220.260563][T29727] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.8669'.
[ 1220.273407][T29727] netlink: 31 bytes leftover after parsing attributes in process `syz.4.8669'.
[ 1220.382890][T29730] netlink: 3850 bytes leftover after parsing attributes in process `syz.0.8670'.
[ 1220.415223][T29732] netlink: 'syz.2.8671': attribute type 29 has an invalid length.
[ 1220.576936][T29736] FAULT_INJECTION: forcing a failure.
[ 1220.576936][T29736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1220.610938][T29736] CPU: 0 PID: 29736 Comm: syz.1.8672 Not tainted syzkaller #0
[ 1220.618467][T29736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1220.628560][T29736] Call Trace:
[ 1220.631861][T29736]  <TASK>
[ 1220.634810][T29736]  dump_stack_lvl+0x188/0x24e
[ 1220.639521][T29736]  ? show_regs_print_info+0x12/0x12
[ 1220.644719][T29736]  ? load_image+0x400/0x400
[ 1220.649230][T29736]  ? __lock_acquire+0x7d10/0x7d10
[ 1220.654260][T29736]  should_fail_ex+0x399/0x4d0
[ 1220.659023][T29736]  _copy_from_iter+0x1c0/0x1130
[ 1220.663866][T29736]  ? __lock_acquire+0x7d10/0x7d10
[ 1220.668890][T29736]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1220.674525][T29736]  ? copyout_mc+0x110/0x110
[ 1220.679029][T29736]  ? __virt_addr_valid+0x188/0x540
[ 1220.684164][T29736]  ? __virt_addr_valid+0x188/0x540
[ 1220.689278][T29736]  ? __virt_addr_valid+0x465/0x540
[ 1220.694394][T29736]  ? __phys_addr_symbol+0x2b/0x70
[ 1220.699433][T29736]  ? __check_object_size+0x500/0xa40
[ 1220.704721][T29736]  tipc_msg_build+0x7f1/0xde0
[ 1220.709415][T29736]  tipc_send_group_bcast+0x7d4/0xad0
[ 1220.714719][T29736]  ? tipc_wait_for_connect+0x640/0x640
[ 1220.720176][T29736]  ? perf_trace_lock+0xf8/0x390
[ 1220.725034][T29736]  ? perf_trace_lock+0xf8/0x390
[ 1220.729892][T29736]  ? wait_woken+0x1c0/0x1c0
[ 1220.734413][T29736]  ? mark_lock+0x94/0x320
[ 1220.738763][T29736]  __tipc_sendmsg+0x332/0x2c90
[ 1220.743547][T29736]  ? rht_lock+0x150/0x150
[ 1220.747889][T29736]  ? verify_lock_unused+0x140/0x140
[ 1220.753272][T29736]  ? verify_lock_unused+0x140/0x140
[ 1220.758565][T29736]  ? perf_trace_lock+0xf8/0x390
[ 1220.763421][T29736]  ? mark_lock+0x94/0x320
[ 1220.767752][T29736]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1220.773735][T29736]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1220.779103][T29736]  ? lockdep_hardirqs_on+0x94/0x140
[ 1220.784299][T29736]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1220.789665][T29736]  ? _local_bh_enable+0xa0/0xa0
[ 1220.794514][T29736]  tipc_sendmsg+0x51/0x70
[ 1220.798856][T29736]  sock_write_iter+0x2d9/0x3e0
[ 1220.803619][T29736]  ? sock_read_iter+0x3a0/0x3a0
[ 1220.808478][T29736]  ? common_file_perm+0x171/0x1c0
[ 1220.813500][T29736]  vfs_write+0x4b1/0xa30
[ 1220.817746][T29736]  ? file_end_write+0x250/0x250
[ 1220.822608][T29736]  ? __fget_files+0x43d/0x4b0
[ 1220.827299][T29736]  ? __fdget_pos+0x1d4/0x360
[ 1220.831887][T29736]  ? ksys_write+0x71/0x250
[ 1220.836301][T29736]  ksys_write+0x14c/0x250
[ 1220.840640][T29736]  ? __ia32_sys_read+0x80/0x80
[ 1220.845431][T29736]  ? trace_sys_enter+0x22/0x80
[ 1220.850270][T29736]  do_syscall_64+0x4c/0xa0
[ 1220.854680][T29736]  ? clear_bhb_loop+0x60/0xb0
[ 1220.859354][T29736]  ? clear_bhb_loop+0x60/0xb0
[ 1220.864033][T29736]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1220.869924][T29736] RIP: 0033:0x7f692ab9ce59
[ 1220.874335][T29736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1220.893942][T29736] RSP: 002b:00007f692bada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1220.902356][T29736] RAX: ffffffffffffffda RBX: 00007f692ae15fa0 RCX: 00007f692ab9ce59
[ 1220.910323][T29736] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000006
[ 1220.918290][T29736] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1220.926253][T29736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1220.934215][T29736] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1220.942198][T29736]  </TASK>
[ 1221.345492][T29751] netlink: 'syz.2.8677': attribute type 21 has an invalid length.
[ 1221.353380][T29751] netlink: 'syz.2.8677': attribute type 11 has an invalid length.
[ 1221.447636][T29761] netlink: 92148 bytes leftover after parsing attributes in process `syz.1.8683'.
[ 1221.472376][T29762] netlink: 'syz.0.8680': attribute type 10 has an invalid length.
[ 1221.491354][T29761] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.8683'.
[ 1221.648151][T29762] device syzkaller0 entered promiscuous mode
[ 1224.508217][T29781] FAULT_INJECTION: forcing a failure.
[ 1224.508217][T29781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1224.522955][T29781] CPU: 0 PID: 29781 Comm: syz.1.8687 Not tainted syzkaller #0
[ 1224.530469][T29781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1224.540550][T29781] Call Trace:
[ 1224.543845][T29781]  <TASK>
[ 1224.546794][T29781]  dump_stack_lvl+0x188/0x24e
[ 1224.551520][T29781]  ? show_regs_print_info+0x12/0x12
[ 1224.556749][T29781]  ? load_image+0x400/0x400
[ 1224.561290][T29781]  ? __lock_acquire+0x7d10/0x7d10
[ 1224.566344][T29781]  ? snprintf+0xe5/0x140
[ 1224.570623][T29781]  should_fail_ex+0x399/0x4d0
[ 1224.575339][T29781]  _copy_to_user+0x2c/0x130
[ 1224.579874][T29781]  simple_read_from_buffer+0xe3/0x150
[ 1224.585281][T29781]  proc_fail_nth_read+0x1a6/0x220
[ 1224.590350][T29781]  ? proc_fault_inject_write+0x310/0x310
[ 1224.596026][T29781]  ? fsnotify_perm+0x248/0x550
[ 1224.600821][T29781]  ? proc_fault_inject_write+0x310/0x310
[ 1224.606485][T29781]  vfs_read+0x2de/0xa00
[ 1224.610681][T29781]  ? kernel_read+0x1e0/0x1e0
[ 1224.615297][T29781]  ? __fget_files+0x28/0x4b0
[ 1224.619915][T29781]  ? __fget_files+0x28/0x4b0
[ 1224.624537][T29781]  ? __fget_files+0x43d/0x4b0
[ 1224.629267][T29781]  ? __fdget_pos+0x2ae/0x360
[ 1224.633877][T29781]  ? ksys_read+0x71/0x250
[ 1224.638247][T29781]  ksys_read+0x14c/0x250
[ 1224.642526][T29781]  ? vfs_write+0xa30/0xa30
[ 1224.646974][T29781]  ? lockdep_hardirqs_on+0x94/0x140
[ 1224.652208][T29781]  do_syscall_64+0x4c/0xa0
[ 1224.656652][T29781]  ? clear_bhb_loop+0x60/0xb0
[ 1224.661356][T29781]  ? clear_bhb_loop+0x60/0xb0
[ 1224.666067][T29781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1224.671990][T29781] RIP: 0033:0x7f692ab5d68e
[ 1224.676427][T29781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1224.696061][T29781] RSP: 002b:00007f692bad9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1224.705028][T29781] RAX: ffffffffffffffda RBX: 00007f692bada6c0 RCX: 00007f692ab5d68e
[ 1224.713045][T29781] RDX: 000000000000000f RSI: 00007f692bada0a0 RDI: 0000000000000007
[ 1224.721049][T29781] RBP: 00007f692bada090 R08: 0000000000000000 R09: 0000000000000000
[ 1224.729059][T29781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1224.737047][T29781] R13: 00007f692ae16038 R14: 00007f692ae15fa0 R15: 00007ffe49c285b8
[ 1224.745050][T29781]  </TASK>
[ 1226.789919][T29783] netlink: 'syz.4.8688': attribute type 39 has an invalid length.
[ 1226.845592][T29783] device hsr_slave_1 left promiscuous mode
[ 1226.904171][T29803] netlink: 'syz.1.8694': attribute type 21 has an invalid length.
[ 1226.922420][T29803] netlink: 'syz.1.8694': attribute type 11 has an invalid length.
[ 1227.139693][T29813] netlink: 'syz.4.8698': attribute type 4 has an invalid length.
[ 1227.156637][T29816] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8698'.
[ 1227.162691][T29809] netlink: 'syz.3.8697': attribute type 2 has an invalid length.
[ 1227.174192][T29813] netlink: 'syz.4.8698': attribute type 8 has an invalid length.
[ 1227.174309][T29813] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.8698'.
[ 1227.197269][T29809] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.8697'.
[ 1227.491915][T29829] netlink: 'syz.3.8704': attribute type 7 has an invalid length.
[ 1227.515931][T29829] netlink: 'syz.3.8704': attribute type 6 has an invalid length.
[ 1227.533769][T29835] netlink: 'syz.0.8707': attribute type 29 has an invalid length.
[ 1227.553978][T29832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8706'.
[ 1227.591275][T29835] netlink: 'syz.0.8707': attribute type 29 has an invalid length.
[ 1227.630176][T29841] FAULT_INJECTION: forcing a failure.
[ 1227.630176][T29841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1227.656428][T29841] CPU: 1 PID: 29841 Comm: syz.2.8708 Not tainted syzkaller #0
[ 1227.663935][T29841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1227.674009][T29841] Call Trace:
[ 1227.677305][T29841]  <TASK>
[ 1227.680245][T29841]  dump_stack_lvl+0x188/0x24e
[ 1227.684916][T29841]  ? show_regs_print_info+0x12/0x12
[ 1227.690239][T29841]  ? load_image+0x400/0x400
[ 1227.694737][T29841]  ? __lock_acquire+0x7d10/0x7d10
[ 1227.699759][T29841]  should_fail_ex+0x399/0x4d0
[ 1227.704436][T29841]  _copy_from_user+0x2c/0x170
[ 1227.709123][T29841]  generic_map_update_batch+0x4f3/0x810
[ 1227.714671][T29841]  ? rcu_read_unlock+0xa0/0xa0
[ 1227.719440][T29841]  ? __fdget+0x17c/0x200
[ 1227.723793][T29841]  ? rcu_read_unlock+0xa0/0xa0
[ 1227.728575][T29841]  bpf_map_do_batch+0x466/0x600
[ 1227.733451][T29841]  __sys_bpf+0x6f7/0x780
[ 1227.737715][T29841]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1227.743107][T29841]  ? lock_chain_count+0x20/0x20
[ 1227.747950][T29841]  __x64_sys_bpf+0x78/0x90
[ 1227.752442][T29841]  do_syscall_64+0x4c/0xa0
[ 1227.756847][T29841]  ? clear_bhb_loop+0x60/0xb0
[ 1227.761512][T29841]  ? clear_bhb_loop+0x60/0xb0
[ 1227.766183][T29841]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1227.772068][T29841] RIP: 0033:0x7f8158d9ce59
[ 1227.776471][T29841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1227.796062][T29841] RSP: 002b:00007f8159c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1227.804475][T29841] RAX: ffffffffffffffda RBX: 00007f8159015fa0 RCX: 00007f8158d9ce59
[ 1227.812450][T29841] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1227.820411][T29841] RBP: 00007f8159c47090 R08: 0000000000000000 R09: 0000000000000000
[ 1227.828367][T29841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1227.836329][T29841] R13: 00007f8159016038 R14: 00007f8159015fa0 R15: 00007ffd6ecab908
[ 1227.844294][T29841]  </TASK>
[ 1227.882448][T29835] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8707'.
[ 1228.007450][T29846] netlink: 3850 bytes leftover after parsing attributes in process `syz.4.8710'.
[ 1228.149725][T29854] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8714'.
[ 1228.191386][T29856] FAULT_INJECTION: forcing a failure.
[ 1228.191386][T29856] name failslab, interval 1, probability 0, space 0, times 0
[ 1228.211553][T29856] CPU: 1 PID: 29856 Comm: syz.3.8713 Not tainted syzkaller #0
[ 1228.219050][T29856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1228.229111][T29856] Call Trace:
[ 1228.232386][T29856]  <TASK>
[ 1228.235313][T29856]  dump_stack_lvl+0x188/0x24e
[ 1228.239999][T29856]  ? show_regs_print_info+0x12/0x12
[ 1228.245189][T29856]  ? load_image+0x400/0x400
[ 1228.249695][T29856]  ? __might_sleep+0xd0/0xd0
[ 1228.254282][T29856]  ? __lock_acquire+0x7d10/0x7d10
[ 1228.259308][T29856]  should_fail_ex+0x399/0x4d0
[ 1228.263994][T29856]  should_failslab+0x5/0x20
[ 1228.268500][T29856]  slab_pre_alloc_hook+0x59/0x310
[ 1228.273524][T29856]  kmem_cache_alloc+0x56/0x2f0
[ 1228.278278][T29856]  ? getname_flags+0xb7/0x500
[ 1228.282951][T29856]  getname_flags+0xb7/0x500
[ 1228.287448][T29856]  __x64_sys_mkdirat+0x78/0x90
[ 1228.292208][T29856]  do_syscall_64+0x4c/0xa0
[ 1228.296629][T29856]  ? clear_bhb_loop+0x60/0xb0
[ 1228.301303][T29856]  ? clear_bhb_loop+0x60/0xb0
[ 1228.305985][T29856]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1228.311879][T29856] RIP: 0033:0x7f0b3ef9ce59
[ 1228.316290][T29856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1228.335894][T29856] RSP: 002b:00007f0b3d1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1228.344316][T29856] RAX: ffffffffffffffda RBX: 00007f0b3f216090 RCX: 00007f0b3ef9ce59
[ 1228.352285][T29856] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 000000000000000c
[ 1228.360253][T29856] RBP: 00007f0b3d1d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1228.368224][T29856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1228.376191][T29856] R13: 00007f0b3f216128 R14: 00007f0b3f216090 R15: 00007ffcf5b0d538
[ 1228.384175][T29856]  </TASK>
[ 1228.969911][T29885] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8721'.
[ 1229.176057][T29893] delete_channel: no stack
[ 1229.446860][T29900] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.8728'.
[ 1229.651555][T29915] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.8733'.
[ 1232.439899][T29984] delete_channel: no stack
[ 1232.661826][T29990] __nla_validate_parse: 4 callbacks suppressed
[ 1232.661914][T29990] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8761'.
[ 1234.682498][T20940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1234.691460][T30043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1234.699690][T30043] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1234.707773][T30043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1234.717057][T30043] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1234.724757][T30043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1234.890172][T30041] chnl_net:caif_netlink_parms(): no params data found
[ 1234.945702][T30053] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8779'.
[ 1235.016260][T30056] delete_channel: no stack
[ 1235.156832][T30041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1235.193088][T30041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1235.246548][T30041] device bridge_slave_0 entered promiscuous mode
[ 1235.275138][T30041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1235.282345][T30041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1235.356493][T30041] device bridge_slave_1 entered promiscuous mode
[ 1235.448882][T30041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1235.519575][T30041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1235.561590][T30041] team0: Port device team_slave_0 added
[ 1235.603393][T30072] validate_nla: 9 callbacks suppressed
[ 1235.603434][T30072] netlink: 'syz.4.8786': attribute type 12 has an invalid length.
[ 1235.631107][T30072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8786'.
[ 1235.658227][T30041] team0: Port device team_slave_1 added
[ 1235.723401][T30041] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1235.744016][T30041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1235.838781][T30041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1235.860434][T30081] netlink: 3850 bytes leftover after parsing attributes in process `syz.3.8788'.
[ 1235.906045][T30041] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1235.913229][T30041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1235.939804][T30041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1236.067598][T30041] device hsr_slave_0 entered promiscuous mode
[ 1236.089995][T30041] device hsr_slave_1 entered promiscuous mode
[ 1236.244996][T30094] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8792'.
[ 1236.337190][T30099] netlink: 'syz.2.8793': attribute type 10 has an invalid length.
[ 1236.555479][T30109] delete_channel: no stack
[ 1236.576985][T30099] team0 (unregistering): Port device team_slave_1 removed
[ 1236.659170][T30099] team0 (unregistering): Port device bridge_slave_1 removed
[ 1236.814930][T30043] Bluetooth: hci4: command 0x0409 tx timeout
[ 1236.828567][T30041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1236.970258][T30041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.189666][T30041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.306854][T30041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.342327][T30132] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8806'.
[ 1237.581447][T30142] netlink: 'syz.0.8808': attribute type 3 has an invalid length.
[ 1237.600475][T30142] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8808'.
[ 1238.468278][T30041] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1238.513655][T30041] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1238.560147][T30041] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1238.571845][T30041] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1238.614378][T30151] netlink: 'syz.3.8814': attribute type 21 has an invalid length.
[ 1238.622247][T30151] netlink: 'syz.3.8814': attribute type 11 has an invalid length.
[ 1238.656463][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.662874][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.780105][T30041] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1238.797912][T30162] netlink: 'syz.0.8819': attribute type 10 has an invalid length.
[ 1238.855280][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1238.867993][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1238.895292][T30043] Bluetooth: hci4: command 0x041b tx timeout
[ 1238.897616][T30041] 8021q: adding VLAN 0 to HW filter on device team0
[ 1238.999427][T30169] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8821'.
[ 1239.034324][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1239.052979][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1239.078807][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1239.086030][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1239.107363][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1239.142081][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1239.166901][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1239.183645][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1239.190921][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1239.200979][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1239.251706][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1239.283900][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1239.308188][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1239.326519][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1239.336047][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1239.345425][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1239.364568][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1239.397003][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1239.426145][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1239.475681][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1239.486901][T30041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1239.496115][T30180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8833'.
[ 1239.905363][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1239.913536][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1239.929475][T30041] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1240.010172][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1240.021124][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1240.052694][T30041] device veth0_vlan entered promiscuous mode
[ 1240.071396][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1240.080410][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1240.100539][T30041] device veth1_vlan entered promiscuous mode
[ 1240.127141][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1240.136488][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1240.145713][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1240.156940][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1240.192974][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1240.208306][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1240.221884][T30041] device veth0_macvtap entered promiscuous mode
[ 1240.239188][T30041] device veth1_macvtap entered promiscuous mode
[ 1240.273798][T30041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1240.293125][T30041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.314959][T30041] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1240.339770][T30041] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1240.366291][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1240.377461][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1240.386201][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1240.399210][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1240.409088][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1240.422052][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1240.435178][T30041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.450012][T30041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.459906][T30041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.470091][T30041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.678864][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.688736][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.710614][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1240.765420][T30200] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 1240.773356][T30200] #PF: supervisor instruction fetch in kernel mode
[ 1240.779936][T30200] #PF: error_code(0x0010) - not-present page
[ 1240.785915][T30200] PGD 5c585067 P4D 5c585067 PUD 0 
[ 1240.791050][T30200] Oops: 0010 [#1] PREEMPT SMP KASAN
[ 1240.796259][T30200] CPU: 0 PID: 30200 Comm: syz.4.8829 Not tainted syzkaller #0
[ 1240.803725][T30200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1240.813803][T30200] RIP: 0010:0x0
[ 1240.817270][T30200] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 1240.824629][T30200] RSP: 0018:ffffc90003aa7458 EFLAGS: 00010246
[ 1240.830691][T30200] RAX: 1ffffffff162d897 RBX: 1ffff92000754e9c RCX: 0000000000000001
[ 1240.838658][T30200] RDX: ffffc90003aa7500 RSI: 0000000000000001 RDI: ffff888077658000
[ 1240.846622][T30200] RBP: ffffc90003aa7570 R08: ffff88807765803f R09: 1ffff1100eecb007
[ 1240.854593][T30200] R10: dffffc0000000000 R11: ffffed100eecb008 R12: ffffe8ffffc607f8
[ 1240.862560][T30200] R13: ffffffff8b16c4b8 R14: 0000000000000000 R15: ffff888077658000
[ 1240.870566][T30200] FS:  00007f56a18b86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1240.879490][T30200] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1240.886065][T30200] CR2: ffffffffffffffd6 CR3: 0000000075e89000 CR4: 00000000003506f0
[ 1240.894036][T30200] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[ 1240.902013][T30200] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1240.909988][T30200] Call Trace:
[ 1240.913256][T30200]  <TASK>
[ 1240.916177][T30200]  bond_xdp_xmit+0x31e/0x550
[ 1240.920854][T30200]  ? bond_xdp_xmit+0x94/0x550
[ 1240.925534][T30200]  ? bond_xdp+0x850/0x850
[ 1240.929860][T30200]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1240.935581][T30200]  bq_xmit_all+0xd3f/0x11b0
[ 1240.940097][T30200]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1240.946406][T30200]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1240.952388][T30200]  ? rcu_is_watching+0x11/0xa0
[ 1240.957150][T30200]  ? __dev_flush+0x1b0/0x1b0
[ 1240.961741][T30200]  ? lockdep_hardirqs_on+0x94/0x140
[ 1240.966934][T30200]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1240.973089][T30200]  ? bq_enqueue+0x24/0x3d0
[ 1240.977507][T30200]  ? __ct_user_exit+0xd0/0xd0
[ 1240.982185][T30200]  ? bq_enqueue+0x2ee/0x3d0
[ 1240.986685][T30200]  ? rcu_is_watching+0x11/0xa0
[ 1240.991444][T30200]  ? trace_xdp_redirect+0xb3/0x2b0
[ 1240.996560][T30200]  __dev_flush+0xbf/0x1b0
[ 1241.000895][T30200]  xdp_do_flush+0xa/0x20
[ 1241.005133][T30200]  bpf_test_run_xdp_live+0x1545/0x1a90
[ 1241.010601][T30200]  ? bpf_test_run_xdp_live+0x518/0x1a90
[ 1241.016235][T30200]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1241.021793][T30200]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1241.028091][T30200]  ? bpf_test_init+0xeb/0x140
[ 1241.032814][T30200]  ? __sanitizer_cov_trace_const_cmp8+0x7a/0x80
[ 1241.039070][T30200]  ? bpf_test_init+0x119/0x140
[ 1241.043844][T30200]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1241.049308][T30200]  bpf_prog_test_run_xdp+0x736/0xf10
[ 1241.054601][T30200]  ? dev_put+0x80/0x80
[ 1241.058676][T30200]  ? dev_put+0x80/0x80
[ 1241.062743][T30200]  bpf_prog_test_run+0x31e/0x390
[ 1241.067684][T30200]  __sys_bpf+0x62b/0x780
[ 1241.072033][T30200]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1241.077417][T30200]  ? lock_chain_count+0x20/0x20
[ 1241.082265][T30200]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1241.088246][T30200]  __x64_sys_bpf+0x78/0x90
[ 1241.092658][T30200]  do_syscall_64+0x4c/0xa0
[ 1241.097066][T30200]  ? clear_bhb_loop+0x60/0xb0
[ 1241.101744][T30200]  ? clear_bhb_loop+0x60/0xb0
[ 1241.106417][T30200]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1241.112308][T30200] RIP: 0033:0x7f56a099ce59
[ 1241.116809][T30200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1241.136415][T30200] RSP: 002b:00007f56a18b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1241.144826][T30200] RAX: ffffffffffffffda RBX: 00007f56a0c15fa0 RCX: 00007f56a099ce59
[ 1241.152791][T30200] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[ 1241.160756][T30200] RBP: 00007f56a0a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1241.168806][T30200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1241.176857][T30200] R13: 00007f56a0c16038 R14: 00007f56a0c15fa0 R15: 00007ffda6997798
[ 1241.184834][T30200]  </TASK>
[ 1241.187853][T30200] Modules linked in:
[ 1241.191747][T30200] CR2: 0000000000000000
[ 1241.195895][T30200] ---[ end trace 0000000000000000 ]---
[ 1241.201338][T30200] RIP: 0010:0x0
[ 1241.204793][T30200] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 1241.212144][T30200] RSP: 0018:ffffc90003aa7458 EFLAGS: 00010246
[ 1241.218204][T30200] RAX: 1ffffffff162d897 RBX: 1ffff92000754e9c RCX: 0000000000000001
[ 1241.226181][T30200] RDX: ffffc90003aa7500 RSI: 0000000000000001 RDI: ffff888077658000
[ 1241.234146][T30200] RBP: ffffc90003aa7570 R08: ffff88807765803f R09: 1ffff1100eecb007
[ 1241.242121][T30200] R10: dffffc0000000000 R11: ffffed100eecb008 R12: ffffe8ffffc607f8
[ 1241.250086][T30200] R13: ffffffff8b16c4b8 R14: 0000000000000000 R15: ffff888077658000
[ 1241.258056][T30200] FS:  00007f56a18b86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1241.266978][T30200] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1241.273551][T30200] CR2: ffffffffffffffd6 CR3: 0000000075e89000 CR4: 00000000003506f0
[ 1241.281605][T30200] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[ 1241.289568][T30200] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1241.297538][T30200] Kernel panic - not syncing: Fatal exception in interrupt
[ 1241.304966][T30200] Kernel Offset: disabled
[ 1241.309279][T30200] Rebooting in 86400 seconds..