last executing test programs:

14.587459885s ago: executing program 1 (id=2936):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x51004400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004258fd5be8b8d8ad3368a60ce2b1ea27730d6953dd9e63a5e8b5f705887b195417523ebdb274afa1a6b341b50f34f6c103565523515e14aefd7cbe354a315d4884d8c6889a2fec6ad6ffee74113c8f3601d0de90e9307d2843e4db6215bad2fef9d5ea925ad992373a33589a040c038bbb0189259d26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x28, 0x3c, 0x0, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @struct={0x8, 0x0, 0x0, 0x4, 0x1, 0x101}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000004c0)=""/164, 0x42, 0xa4, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xff6}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)}, 0xb00)
socket$kcm(0x2, 0xa, 0x2)

13.809182092s ago: executing program 1 (id=2943):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x391, 0x9, 0x1, 0x1008}, 0x50)
socket$kcm(0x2, 0x5, 0x84)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1d", 0x2d}], 0x1}, 0x20000884)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x8, 0xb1, 0x9c, 0x0, 0xccc, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100, 0x7, 0x4, 0x4, 0x96dd, 0x8, 0xc00, 0x0, 0x8, 0x0, 0x1}, r2, 0x7, 0xffffffffffffffff, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x94, &(0x7f0000000580)=""/148}, 0x90)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)

10.954249908s ago: executing program 1 (id=2947):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, 0x0, 0x400c0c4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
r2 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

10.411992734s ago: executing program 1 (id=2953):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x51004400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004258fd5be8b8d8ad3368a60ce2b1ea27730d6953dd9e63a5e8b5f705887b195417523ebdb274afa1a6b341b50f34f6c103565523515e14aefd7cbe354a315d4884d8c6889a2fec6ad6ffee74113c8f3601d0de90e9307d2843e4db6215bad2fef9d5ea925ad992373a33589a040c038bbb0189259d26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x28, 0x3c, 0x0, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @struct={0x8, 0x0, 0x0, 0x4, 0x1, 0x101}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000004c0)=""/164, 0x42, 0xa4, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xff6}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)}, 0xb00)
socket$kcm(0x2, 0xa, 0x2)

9.698195738s ago: executing program 1 (id=2957):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x391, 0x9, 0x1, 0x1008}, 0x50)
socket$kcm(0x2, 0x5, 0x84)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1d", 0x2d}], 0x1}, 0x20000884)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x8, 0xb1, 0x9c, 0x0, 0xccc, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100, 0x7, 0x4, 0x4, 0x96dd, 0x8, 0xc00, 0x0, 0x8, 0x0, 0x1}, r2, 0x7, 0xffffffffffffffff, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x94, &(0x7f0000000580)=""/148}, 0x90)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)

9.045733949s ago: executing program 1 (id=2962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x20, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

8.156031452s ago: executing program 0 (id=2965):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6c6d63746d4718199e27e846890350a4dd2e99a28a4c4a4229d4aa68f1e2cb03aa1a6c16ec5869d8c1f721d6269c9bbba01cf9c7a2bdb8539344783e4327d13f6a8608c78125858a66b2c1566a601a87acd39420000bf85f0ce795aa0e1bfc07979b4a27b8422b00c8527d2cbc65414e9ff9278", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="4f5f7f544c7d484e940b2b2a48360ed1b20bb568104f131e5415a3f8ce99dda08c2dc6adc70e5cbd1526091342de5eedd266782f93d456f960ff7745b496eaf026a497342266fbc904be2c0bcbecddffa429a4a6e708b617293f26b6e5a72daea26f7523a1914420c8e13b7b347a2aa306080d35130a47c10d807aef810f984284af68cdf7a6d1d173308c0f3c067db24ddb64e87cde69405efdd5f126977697209caff5089a360197817726859c622bb933aac7fdf6303625f6b44e54ae0d87a1fc24770407d6380f6203e1320afe74b6f4aa213fbc0ab697fc97f1e7cf5d8bb737"])
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003150248035c3b61c1d67f6f94207134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f900000000e32cfa8af26c8b7b55f4d2a6823a45f2", 0xd8}], 0x1}, 0x0)
write$cgroup_subtree(r3, 0x0, 0x6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a00", 0x1c}], 0x1}, 0x0)

5.127811876s ago: executing program 0 (id=2970):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x3, 0x0, 0x43, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48)
socket$kcm(0x22, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r3], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x160)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x200})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2})

5.005044822s ago: executing program 4 (id=2971):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x20, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.657675208s ago: executing program 0 (id=2973):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040)=r4, 0x44)
setsockopt$sock_attach_bpf(r0, 0x0, 0x26, 0x0, 0xe)
getpid()
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)

4.399347851s ago: executing program 2 (id=2974):
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x8, @empty, 0x8}, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)="393fa34c4d7c4225b3ba1240a01f8f2bd65d13510c0cd76539169b1b652ad7f8d6281f3d0c6b61b28ca04786b864a4d22d1226", 0x33}, {0x0}, {0x0}, {&(0x7f0000000600)}, {0x0}, {0x0}], 0x6, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xd3da}}], 0x60}, 0x4008000)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r3, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f01006900810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4e}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e419157", 0x8a}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="275adc5e0e2e643871b1efe33c97d7a9e43cca8e82dec9509fa4bcd90243", 0x1e}, {&(0x7f0000000140)="521a2127f70a3f68cd67f1ef031779a6e80436e1d9c20d2cecec8d7dbe18fd58601cfee95c11157d3b23170445fef7e82e65d3900690767e5c21ed0f457a2a69b7c46f9db37affd837f94e1c0fafae38e85cb5f8ae9b5c1b3531", 0x5a}, {&(0x7f00000000c0)="2743b7441ae8e3d669bbc0dff55ccfe8e96979f4d3174f4a", 0x18}, {&(0x7f0000000300)="2ce5561027f0db36742daee4c730bd13ccd75820da63b784d98c3067369ed03500f34cff0bdd0962e24916a3e515251669c53df648bf2328a894563c0d4950112064927d51bb9d661e3919357b0c0115eb4a73fd3d62a75066370f1021580d8a3a21d673a46e301df29acaacae528c42a575efa1fe785e605301f5496252b6eb7c165e589462ed9e288610a4c5b465a342228cc3", 0x94}, {&(0x7f00000003c0)="8449182b79954db65ef1625d5e5c4389b2b30d614505b68eba9333606fcdb6185ad2cdd58f7a57867cc7353d3828470e7cd072024cd3062cf324b35c2af326591475f53a7a48cb968c07a19e951cc6ab4576825ca12f40f9d1e3a2c6601ff3fbf4f44fcf07a4aa4105220528cffe0d5e9f51b6409281d77e7b84acb7cc56ba0447c63d0ef6ffaca436d81ee1497dde", 0x8f}, {&(0x7f00000005c0)="30539b075ea7be5c526337dc3e77ffdb34f62a0c9edb020f0b8f1459d682c40f5acab4d25ca611d69878724c6315480d6e163ca69091e01d34b1cc565c45c911acf566043973d6f6586d2f5f92fbc2a864e55f0e4b841af432fd62501ecef24e32a0f1f12695e0b521605039473efdbb0392a979c00056fc9ab4db2bb01b41c9f747f89bad55e954419b0a16e6777fa66827a6e3bfb48c40522acb2fecde733730dc04f3b2c9386caa71d40fd22b4b475ff4e11623a6d0affeb59fb4db80ab2f961d3285883363f4f890a1ad956d944aad6336643c6ce6bd712084791d4b5b11f3", 0xe1}, {&(0x7f00000001c0)="b9277c283a0a6dcdf6f58d0425474622f855da9d72bcfd46", 0x18}], 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="30000000000000000000000007000000890fd0ac14141aac1414bbe0000002440cb630000000ff00000040940400000014000000000000000000000002000000070000000000000014000000000000000000000001000000080000000000000011000000000000000000000001000000f90000000000000000000000000000000001000000ff00000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000003c0000000000000014000000000000000000000002002000db7e000000000000000000"], 0xd8}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

4.228500889s ago: executing program 3 (id=2975):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x4}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @private2, 0x1}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042)
perf_event_open(&(0x7f0000000380)={0x1, 0xfffffffffffffe96, 0x0, 0x11, 0x2, 0x0, 0x0, 0x20004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106a5, 0x8, 0x200, 0xf, 0xfffffffffffffffe, 0x80002, 0x0, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x79, &(0x7f0000000000)=r8, 0x8)
socket$kcm(0x21, 0x2, 0x2)
r9 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r9, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000073edc36716b891362e0d3cbc9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

4.227867029s ago: executing program 4 (id=2976):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f00000000c0)="ba68455741189142c31d22b8dbbf5c1228469cd710fc54e1c8e7fecb27713279c17762b3daa4deccc1919cf16342779dfcf11b99eb1a4e714ca427e313d6401bd8", &(0x7f0000000700)=""/218, &(0x7f0000000a00)="5f4b820f47121d510bd13573ea235bff230e3787d08fff757ddfb6865eacdadec8550efa567543ec13dc2224fa42f9b2b224673e06a847fc59d2dbfec8f868755bd23bd001dda38c380fab5047d6d43f73835bcd1de22a23efe1e0f192b2bac5148fe20012b343dedd99b3ea22b203cdeb87aba7d8c3a8297310e7a380964b0e7e9d3fa69e3bdf7f94e7434f680fdebe98d18abea185e8c67a82b594bd786653fb380750356b86f1c5c20d9c4d211815f3f8749090132162c2d9be58b129452d04c5b80f17eea4b8ea72519adf024a07778bff0d580188fdcf22f250de2e8d7c4c5e5ddb1d5c79c51e6e15175a45d3f4f8f9f6", &(0x7f0000000800)="c9b4f9e1c0e73170666930e2b4a5b2faab193538e45bc3976dcf257edef5d21441894f684061a68e3fc26b65dff702f168d21c71f0138e6867898add9677815676fa207ef5d24b4815fc9a9ef5094641dc8ee8f0fd0c1795b1fb336901cfd6693212e378f514d2662b7094523df29f50cd96f0059cec96ae4479a612b7a7b64f087e56388899b330ef302e56e609486d33e1ef620b86fe48edb05aebbddd627c5426bc99e804be8036aace67304b93bb6d1a02a4e80acf8a7f7598c5106481d7", 0x7fff, r1, 0x4}, 0x38)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000140), &(0x7f0000000400)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)

3.195561668s ago: executing program 2 (id=2977):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4)
r4 = socket$kcm(0x11, 0xa, 0x300)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r6, 0xc, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0xc, 0xfffffffffffffcb3, 0x0, 0x0, 0x0, 0xffffdfff, 0x8, 0x0, 0x0}}, 0x10)
recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x10446, 0xc8}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='io.weight\x00', 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xe)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

3.107029522s ago: executing program 3 (id=2978):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0xff7, 0x0, &(0x7f0000001700)=""/4087, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="6115b400000000006113610000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRESHEX=0x0], 0x50)

3.100425692s ago: executing program 4 (id=2979):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000000)=r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x19, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xfe1d, 0x0, 0x0, 0x0, 0x10000}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x40}, @call={0x85, 0x0, 0x0, 0x9a}, @call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000880)='syzkaller\x00', 0x800, 0x4a, &(0x7f00000008c0)=""/74, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x9, 0x80000000, 0xc51e}, 0x10, 0x47cb, r3, 0x6, 0x0, &(0x7f0000000a00)=[{0x2, 0x4, 0x6, 0x8}, {0x2, 0x2, 0x6, 0x4}, {0x3, 0x4, 0xb, 0x7}, {0x2, 0x4, 0xc, 0xa}, {0x5, 0x3, 0x9, 0xa}, {0x5, 0x2, 0x5, 0x7}], 0x10, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x16, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000180), 0x1f00, 0x8, '\x00', r4, @fallback=0x11, r3, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0xfffffff0, 0x80000000}, 0x10, 0xffffffffffffffff, r5, 0x1, 0x0, &(0x7f0000000b40)=[{0x1, 0x2, 0xe, 0xb}], 0x10, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3.053969985s ago: executing program 0 (id=2980):
r0 = socket$kcm(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080))
sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="81eb9af6027e188beb8030000000207b8af8ff00000000bfa200000000000006e10000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r4, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x17140, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x0, 0xa, 0x1, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0xf6, 0x9, 0x8, 0x89e6, 0x3}, @jmp={0x5, 0x0, 0x5, 0x0, 0x5, 0x0, 0x1}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdc9)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000060000000000000002000000000000002b39e50a26f0b1a45183bfa374cb6f9c0e9f2b3bb82eff8f634c6d65b0b2cd01097f4269d0d5e770a252cc200440627def9e9e0bd5b571c24689a1278c37aeda30cd023d1126f3cdc52076b153783f0f1bf5a13f17a3dfeb106d4db6bff18a86e417711d07a3cccb1f349fe3e3a0aa899f9a937b427e5bc317c261941c5e80804c9713ea2536aee64f9d751f7f105b70269855f55eaebc6f49c24f56f870c85ed3979bb872ced54f96f6f6465431fe4943b6416f6e00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0)

2.486560212s ago: executing program 4 (id=2981):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000, 0x803e0000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
recvmsg(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)}, 0x10100)
socket$kcm(0x10, 0x2, 0x0)

2.003594464s ago: executing program 2 (id=2982):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000300)="fa", 0x1}], 0x2}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
socket$kcm(0x29, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))

2.002436505s ago: executing program 3 (id=2983):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})

1.69664781s ago: executing program 3 (id=2984):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000085ffffff4000000002000000000000000100000d000000000000000000000000000000000000000300000000020000000300000000080000000000000100000d0000000000000000000200000000"], &(0x7f0000000e40)=""/245, 0x5a, 0xed, 0x1}, 0x28)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1}, 0x0, 0x0, r4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1e0000000109010000000000e3000000000002003a37300ff55f3488169c58563dd1279577785a94031f5dcbf185652412468c4ff4d459f2abf149002054ee24aff4", @ANYRES32, @ANYBLOB="0500"/20, @ANYRESHEX=r0, @ANYRES32, @ANYRESOCT=r3], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8=r0, @ANYBLOB="00000000000000e3b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb706000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8000000"], 0x0, 0x26}, 0x28)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000800000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x6a, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x400}, 0x10}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)

1.69583296s ago: executing program 0 (id=2993):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1e}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x5, 0x0, 0x0)
r2 = syz_clone(0x80801000, &(0x7f0000000440)="b7f329d8167ef7b287eb512fea07919ac46fbe6af2f2085e6370286136e6f247eac86e8c3482c0e1a9f8e12088b3aa139df1fce1f51bf6bbf17e473c5147c8b8e090f80b7f68184b6428475a6eea6118aed1bb001f5c77c3d18c7c6df9829b65c6bdf257107e84f143a62b4847d0b8dd1f002eb6c2e9edf647e326d0cdc44a455464041f23aadad8ada0f1210502366696675fcaa0c15aef547d8721f89788c1d530eaef7459b473806bfafed8d9123c0aeec1a554006686f7353a75e87048985944a3310fc1b8b93da1fd061b1104b6a399f8341bb6762aba0a79c7b99ff933195f5748ee407dbc980eb8d075402fa12f131654fa9a3b7dbfddec440f77bd2717fef24f6b1660d7a80c99b962935513562e5a9aae6ad51ab14bf092db64458f86e723db876ca540dca8d43ef9322a9c63a690470c9f03807dd0308f9aaedefd0bd8ff890fd896ec24361f763c1ead4aa2c4644f5ae4655ad845a6f9a4f2d66ee6fb8280927852e7c7607065a2a3b0dbe3745f857d7bec4432a2b10c555ac399d05a60f95e0cdf85e8b26b374ade8b4c37fec50c10d10296ab8b5c6e85a8972c6003d16ee5c67c99cb78e07e1d29398c43187c7714bd8fec4af2a1969404843809a1e66721cb9f802bf54ec1b87073e3412b6f60f664b5a2ee9850fc5aa356c4f875a8622961a4b5aa15fc0e", 0x1ec, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000180)="e272a3fc4d2a62b18b7d8544f258faec6c916fb2b9211782f84f0b7b643d66750cf51afb15f1c7ff38952ecfafa6ae8786308d000002fc47afa7442fd435ea")
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r2, 0x12)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000340)={[{0x2b, 'io'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'rdma'}, {0x2d, 'cpuset'}]}, 0x28)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})

1.653620221s ago: executing program 2 (id=2985):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x20, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.230483811s ago: executing program 4 (id=2986):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x51004400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004258fd5be8b8d8ad3368a60ce2b1ea27730d6953dd9e63a5e8b5f705887b195417523ebdb274afa1a6b341b50f34f6c103565523515e14aefd7cbe354a315d4884d8c6889a2fec6ad6ffee74113c8f3601d0de90e9307d2843e4db6215bad2fef9d5ea925ad992373a33589a040c038bbb0189259d26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x28, 0x3c, 0x0, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @struct={0x8, 0x0, 0x0, 0x4, 0x1, 0x101}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000004c0)=""/164, 0x42, 0xa4, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d57425", 0xff6}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)}, 0xb00)
socket$kcm(0x2, 0xa, 0x2)

468.670878ms ago: executing program 3 (id=2987):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x51004400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004258fd5be8b8d8ad3368a60ce2b1ea27730d6953dd9e63a5e8b5f705887b195417523ebdb274afa1a6b341b50f34f6c103565523515e14aefd7cbe354a315d4884d8c6889a2fec6ad6ffee74113c8f3601d0de90e9307d2843e4db6215bad2fef9d5ea925ad992373a33589a040c038bbb0189259d26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x28, 0x3c, 0x0, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @struct={0x8, 0x0, 0x0, 0x4, 0x1, 0x101}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000004c0)=""/164, 0x42, 0xa4, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xff6}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)}, 0xb00)
socket$kcm(0x2, 0xa, 0x2)

421.25816ms ago: executing program 2 (id=2988):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f00000000c0)="ba68455741189142c31d22b8dbbf5c1228469cd710fc54e1c8e7fecb27713279c17762b3daa4deccc1919cf16342779dfcf11b99eb1a4e714ca427e313d6401bd8", &(0x7f0000000700)=""/218, &(0x7f0000000a00)="5f4b820f47121d510bd13573ea235bff230e3787d08fff757ddfb6865eacdadec8550efa567543ec13dc2224fa42f9b2b224673e06a847fc59d2dbfec8f868755bd23bd001dda38c380fab5047d6d43f73835bcd1de22a23efe1e0f192b2bac5148fe20012b343dedd99b3ea22b203cdeb87aba7d8c3a8297310e7a380964b0e7e9d3fa69e3bdf7f94e7434f680fdebe98d18abea185e8c67a82b594bd786653fb380750356b86f1c5c20d9c4d211815f3f8749090132162c2d9be58b129452d04c5b80f17eea4b8ea72519adf024a07778bff0d580188fdcf22f250de2e8d7c4c5e5ddb1d5c79c51e6e15175a45d3f4f8f9f6", &(0x7f0000000800)="c9b4f9e1c0e73170666930e2b4a5b2faab193538e45bc3976dcf257edef5d21441894f684061a68e3fc26b65dff702f168d21c71f0138e6867898add9677815676fa207ef5d24b4815fc9a9ef5094641dc8ee8f0fd0c1795b1fb336901cfd6693212e378f514d2662b7094523df29f50cd96f0059cec96ae4479a612b7a7b64f087e56388899b330ef302e56e609486d33e1ef620b86fe48edb05aebbddd627c5426bc99e804be8036aace67304b93bb6d1a02a4e80acf8a7f7598c5106481d7", 0x7fff, r1, 0x4}, 0x38)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000140), &(0x7f0000000400)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)

338.140184ms ago: executing program 0 (id=2989):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040)=r4, 0x44)
setsockopt$sock_attach_bpf(r0, 0x0, 0x26, 0x0, 0xe)
getpid()
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)

306.537486ms ago: executing program 4 (id=2990):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74029, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000001e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0xa}]}}, &(0x7f0000000240)=""/225, 0x42, 0xe1, 0x1}, 0x28)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x3a)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)
recvmsg(r5, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=""/184, 0xb8}, 0x83)
r6 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0xd, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94)
mkdir(&(0x7f00000015c0)='./file0\x00', 0xf1)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810)
sendmsg$kcm(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001600)="d963d99e637a6a1da4c26598e559c2208e73f2f58389d6f188b22c2f755a9a723f91fd592253ae673ec47b756b16588f4bbe09c0449258b83c96a5d2b1ba795bf4f504cbaf95868caffe1a75a8e802fcf695d6912c6c7a096bbfeaab07947f933732bc22e2d084bff0c40c7883043e1260190b786c7eb0315d5dbbdab23c6867dc1712e16d6e3a9633631b0f3918b3b5b0fb3461b085d59df1b629916223f1aad36a8acb73f445b51aac1dbb495a72a2d0", 0xb1}, {&(0x7f00000016c0)="fa7d414dc4f610ae802c0552b125b1b9713f6bc0d7e6f153b0ddf8f63e5d87cde197246e0661c7d19da8abe75f091d4caa5995c66ad7d322725c9e7fb4e08f70139a297f51a9a6c54c5b46b729f20e092f28", 0x52}, {&(0x7f0000001740)="a8c3864a400002f25d9ede8f7e170474c2c46ccea6a8f3e34de7a398dadf0610a0e81ca44d2d5671dcb38077692981ace7cb23797b68d7bf6c778278b618f8dd2cb21df49ab720d9e9034559a7c5161d3164b6a919b91b61c9dacf4c84fee584adcdeabc07c3cf19deed4d5daba87a93cf6437be82f9bc443af6fdcd3d012ccf9965896aecd0e453fe15b89719f5a8139f02f527adb73b811e57775bc01ca53bd2fd0379fa926bf4236afec6bfb0f5bdf380389d637cb0f5ddda25490bd4597e6ee5ebcf75e221b912ec0e750c4af5920fe44addda12508a6a5ea31ea894f1f583d8fae66968385f4d5223", 0xeb}, {&(0x7f0000001840)="3afb76a6c103e876b516f6a6ef6d751298fcf6e2bbf4810c0e162598bf8df6740d2a1a931da72ebd20f311538563fc38790bb6849e817491e813af566007879504408f0cad38db8c48c4a51b257554977ef15805883486406caf10cf345bdb8fb65c5797cfc1b7ff4f0533ab23d3cd99bb9aa607563e5c45e990bb634c0edd825707d85c35298183393b30377d981bb468be26281c735528cb6efeb351f2c342cddc6520f138680645", 0xa9}, {&(0x7f0000001900)}], 0x5, &(0x7f00000019c0)=[{0xb0, 0x10c, 0x293, "eaae8d7c3e880c56bcf33e070aeff8617d5ee0cb28623ca3b195fa1f566332464101601eb5c6eca97b1f3290f25bd1c6a1be7140aca517e5813b9304a4b3ad5b087689335f65e9c88e1592872382bac0f5f385cb5d1f40ba2450648d5baf6e49a16cafc2d68e0ca463e8fad4be34c8de09fef9b64bf31c6d44faa025fb7e7bde341c886a3edad38821462c5bf1f130fb00b99d4dffdc14b27f0ad65a4029"}, {0x50, 0x84, 0x1615, "6a5ebd1afe5c20de7b5f20dee110c2b9f2ada3113aa2ebd10e7d5e12d6fde74f2936785efc27ede493f8f0f4008356d7f515eeb1aee6c29c60508a4aa198"}, {0xc8, 0x10b, 0x2, "1ff98e82158cf088e02f90815ab974430db83936c3241902f92c1ce4eb6fac7300eb56f612c3b70d21e9dc46be28075a5ef7c67362348fb763905930137f038dee4e2b761367ef17e4f070895ebbb419534ba70c0c2ff3ce85c20a25b7c8932f6e3262ec4289a7fd7b46edb886b5a47a8950a0795788cc1583388a9392ac4108414573f873d8cb1c8dd020d6541549ee495bd7664a1f0df0b065dc1efdddb07960c2b3cd6e8bae64bb3f4454746162d8497582d5b567"}, {0x10, 0x108, 0x9}, {0xe0, 0x0, 0x6, "2d0996f33d8510cde3ad0300287537da64ddc501fc944b8fcf63d98dd86683bcf22423059d2cdb0f9f9b9a311326037e408eb855137e28d949dbf8071adc0798c11877905e44cc8b408d13dab45527532fddb3c090741f6a0293b58f69f2c9f2047bd8488c209347f049512059dedadc6f198420e3e7b75c5a256244ab22d7c1d069536f1dae7b6e35a420f182388caa3beed365b36df3c756109a61f4d44545d1b87b881fe08090b2ec74a86a176780ccdcc5f4520e52a72279b57ecc95f3cbf6cf2deeef17a668bd785f97c295c556"}, {0x98, 0x114, 0x5e, "1010df498a41e20113d2e776ff3a48f92dc0f88930a7251af5dc3be08070b03367a8c5dd836d3b0ea7aebd1c6d007ca1ab1c21250338382636c86128e23544fda1193eb04d2342c0a680c194d58d9204d1bcce38d584a803364fc9f0af61d3c5d7676826d7a7f6f86643a899120577fde613203855726e07867eed3125155640f961ac3cc6978d"}, {0xe0, 0x18, 0x3, "40a0773cc0a3cec17bc4e444920be370b32c93e0c9f8d684a99f034f6435a24b3badd0b7f4280929d887f6c0832d7f4d6480b845bd0f729be3978eb19bc9ba66931fc1dec4a33857869e090ab3d3e5924b9880ba45faa3015706be4caee9e9f57d49dfaa413c6d4d8895ada873ad8278ad27b67f424136cccb8afe8e19d42f86efec74b6109803872ff12f7814c573131df13ba8ed38d6f746062a357eddf3c116c58ff477f88b4e574516e62d3e47e012f57702dbf27ebcaef12562bf05e849eef4dc1a32510e8beb288fa8869833"}], 0x430}, 0x90)

12.04911ms ago: executing program 3 (id=2991):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}]}, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x80000000, 0x0, 0x300, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=2992):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4)
r3 = socket$kcm(0x11, 0xa, 0x300)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r4, 0xc, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0xc, 0xfffffffffffffcb3, 0x0, 0x0, 0x0, 0xffffdfff, 0x8, 0x0, 0x0}}, 0x10)
recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 T9235] netlink: 'syz.3.1663': attribute type 10 has an invalid length.
[  322.068788][ T9235] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  322.778882][ T9248] __nla_validate_parse: 8 callbacks suppressed
[  322.778926][ T9248] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1669'.
[  322.928165][ T9253] FAULT_INJECTION: forcing a failure.
[  322.928165][ T9253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.942820][ T9253] CPU: 0 PID: 9253 Comm: syz.1.1671 Not tainted syzkaller #0
[  322.950274][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  322.960373][ T9253] Call Trace:
[  322.963697][ T9253]  <TASK>
[  322.966673][ T9253]  dump_stack_lvl+0x188/0x24e
[  322.971420][ T9253]  ? show_regs_print_info+0x12/0x12
[  322.976780][ T9253]  ? load_image+0x400/0x400
[  322.981341][ T9253]  ? __lock_acquire+0x7d10/0x7d10
[  322.986514][ T9253]  should_fail_ex+0x399/0x4d0
[  322.991243][ T9253]  _copy_from_user+0x2c/0x170
[  322.995973][ T9253]  iovec_from_user+0x143/0x360
[  323.000797][ T9253]  __import_iovec+0x6d/0x500
[  323.005558][ T9253]  import_iovec+0x6f/0xa0
[  323.009952][ T9253]  ___sys_sendmsg+0x252/0x360
[  323.014702][ T9253]  ? __sys_sendmsg+0x290/0x290
[  323.019638][ T9253]  ? trace_call_bpf+0xbf/0x6b0
[  323.024491][ T9253]  __se_sys_sendmsg+0x1bb/0x2a0
[  323.029493][ T9253]  ? __x64_sys_sendmsg+0x80/0x80
[  323.034519][ T9253]  ? lockdep_hardirqs_on+0x94/0x140
[  323.039768][ T9253]  do_syscall_64+0x4c/0xa0
[  323.044252][ T9253]  ? clear_bhb_loop+0x60/0xb0
[  323.048987][ T9253]  ? clear_bhb_loop+0x60/0xb0
[  323.053717][ T9253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  323.059655][ T9253] RIP: 0033:0x7ff78ed9c799
[  323.064108][ T9253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.083745][ T9253] RSP: 002b:00007ff78fcb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.092185][ T9253] RAX: ffffffffffffffda RBX: 00007ff78f015fa0 RCX: 00007ff78ed9c799
[  323.100183][ T9253] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000003
[  323.108265][ T9253] RBP: 00007ff78fcb2090 R08: 0000000000000000 R09: 0000000000000000
[  323.116269][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.124263][ T9253] R13: 00007ff78f016038 R14: 00007ff78f015fa0 R15: 00007ffd10e6ae98
[  323.132277][ T9253]  </TASK>
[  323.218941][ T9250] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1670'.
[  323.487631][ T9257] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1674'.
[  323.500678][ T9259] validate_nla: 1 callbacks suppressed
[  323.500699][ T9259] netlink: 'syz.1.1672': attribute type 16 has an invalid length.
[  323.519646][ T9259] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1672'.
[  323.535642][ T9261] netlink: 'syz.0.1673': attribute type 25 has an invalid length.
[  323.699357][ T9264] netlink: 'syz.3.1675': attribute type 10 has an invalid length.
[  323.732846][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1675'.
[  323.750523][ T9264] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  323.768044][ T9266] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1687'.
[  324.506893][ T9290] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1684'.
[  324.959071][ T9294] netlink: 'syz.2.1686': attribute type 10 has an invalid length.
[  325.246153][ T9302] netlink: 'syz.0.1689': attribute type 25 has an invalid length.
[  325.402192][ T9307] netlink: 'syz.3.1691': attribute type 10 has an invalid length.
[  325.428663][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1691'.
[  325.465821][ T9307] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  325.670456][ T9311] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.1693'.
[  328.659378][ T9419] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1707'.
[  328.982457][ T9427] netlink: 'syz.4.1710': attribute type 10 has an invalid length.
[  328.995570][ T9427] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1710'.
[  329.944253][ T9436] device syzkaller0 entered promiscuous mode
[  332.085666][ T9460] netlink: 'syz.0.1718': attribute type 25 has an invalid length.
[  332.829371][ T9474] netlink: 'syz.4.1723': attribute type 10 has an invalid length.
[  332.913350][ T9469] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1721'.
[  333.291921][ T9480] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1724'.
[  333.335638][ T9479] netlink: 'syz.1.1724': attribute type 10 has an invalid length.
[  333.357474][ T9479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1724'.
[  333.374929][ T9479] device ipvlan1 entered promiscuous mode
[  333.381318][ T9479] bridge0: port 3(ipvlan1) entered blocking state
[  333.388097][ T9479] bridge0: port 3(ipvlan1) entered disabled state
[  333.412828][ T9479] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  333.997453][ T9493] netlink: 'syz.0.1741': attribute type 10 has an invalid length.
[  335.087717][ T9516] tun0: tun_chr_ioctl cmd 1074025675
[  335.094082][ T9516] tun0: persist enabled
[  335.100191][ T9516] tun0: tun_chr_ioctl cmd 1074025675
[  335.106575][ T9516] tun0: persist enabled
[  335.489478][ T9528] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.1739'.
[  337.284925][ T9589] FAULT_INJECTION: forcing a failure.
[  337.284925][ T9589] name failslab, interval 1, probability 0, space 0, times 0
[  337.343321][ T9589] CPU: 0 PID: 9589 Comm: syz.1.1751 Not tainted syzkaller #0
[  337.350782][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  337.360888][ T9589] Call Trace:
[  337.364220][ T9589]  <TASK>
[  337.367198][ T9589]  dump_stack_lvl+0x188/0x24e
[  337.371989][ T9589]  ? show_regs_print_info+0x12/0x12
[  337.377256][ T9589]  ? load_image+0x400/0x400
[  337.381917][ T9589]  ? __might_sleep+0xd0/0xd0
[  337.386551][ T9589]  ? __lock_acquire+0x7d10/0x7d10
[  337.391675][ T9589]  should_fail_ex+0x399/0x4d0
[  337.396406][ T9589]  should_failslab+0x5/0x20
[  337.400983][ T9589]  slab_pre_alloc_hook+0x59/0x310
[  337.406154][ T9589]  kmem_cache_alloc+0x56/0x2f0
[  337.410979][ T9589]  ? _sctp_make_chunk+0x14e/0x420
[  337.416061][ T9589]  _sctp_make_chunk+0x14e/0x420
[  337.420990][ T9589]  sctp_make_datafrag_empty+0xa8/0x530
[  337.426522][ T9589]  ? sctp_user_addto_chunk+0xac/0x220
[  337.431963][ T9589]  sctp_datamsg_from_user+0x71e/0xee0
[  337.437425][ T9589]  sctp_sendmsg_to_asoc+0x107b/0x1830
[  337.442868][ T9589]  ? sctp_assoc_add_peer+0xeb7/0x1640
[  337.448326][ T9589]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  337.454204][ T9589]  ? __sctp_connect+0xd80/0xd80
[  337.459121][ T9589]  ? __local_bh_enable_ip+0x136/0x1c0
[  337.464643][ T9589]  ? _local_bh_enable+0xa0/0xa0
[  337.469550][ T9589]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  337.475427][ T9589]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  337.481301][ T9589]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  337.486904][ T9589]  ? security_sctp_bind_connect+0x85/0xb0
[  337.489981][ T9585] netlink: 'syz.4.1749': attribute type 10 has an invalid length.
[  337.492658][ T9589]  sctp_sendmsg+0x1984/0x2940
[  337.492765][ T9589]  ? aa_sk_perm+0x781/0x950
[  337.492796][ T9589]  ? sctp_getsockopt+0x8a0/0x8a0
[  337.492830][ T9589]  ? __might_fault+0xa6/0x120
[  337.492855][ T9589]  ? aa_af_perm+0x340/0x340
[  337.492881][ T9589]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  337.492925][ T9589]  ? inet_sendmsg+0x78/0x2f0
[  337.492957][ T9589]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  337.492981][ T9589]  ? security_socket_sendmsg+0x7c/0xa0
[  337.493025][ T9589]  ? inet_send_prepare+0x260/0x260
[  337.493059][ T9589]  ____sys_sendmsg+0x5be/0x970
[  337.493102][ T9589]  ? __sys_sendmsg_sock+0x30/0x30
[  337.493135][ T9589]  ? __import_iovec+0x315/0x500
[  337.493168][ T9589]  ? import_iovec+0x6f/0xa0
[  337.493195][ T9589]  ___sys_sendmsg+0x2a2/0x360
[  337.493236][ T9589]  ? __sys_sendmsg+0x290/0x290
[  337.493290][ T9589]  ? __lock_acquire+0x7d10/0x7d10
[  337.493349][ T9589]  __se_sys_sendmsg+0x1bb/0x2a0
[  337.590876][ T9589]  ? __x64_sys_sendmsg+0x80/0x80
[  337.595895][ T9589]  ? lockdep_hardirqs_on+0x94/0x140
[  337.601161][ T9589]  do_syscall_64+0x4c/0xa0
[  337.605738][ T9589]  ? clear_bhb_loop+0x60/0xb0
[  337.610479][ T9589]  ? clear_bhb_loop+0x60/0xb0
[  337.615225][ T9589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.621181][ T9589] RIP: 0033:0x7ff78ed9c799
[  337.625645][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  337.645310][ T9589] RSP: 002b:00007ff78fcb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.653791][ T9589] RAX: ffffffffffffffda RBX: 00007ff78f015fa0 RCX: 00007ff78ed9c799
[  337.660523][ T9596] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1752'.
[  337.661797][ T9589] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  337.661819][ T9589] RBP: 00007ff78fcb2090 R08: 0000000000000000 R09: 0000000000000000
[  337.661834][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  337.661848][ T9589] R13: 00007ff78f016038 R14: 00007ff78f015fa0 R15: 00007ffd10e6ae98
[  337.661892][ T9589]  </TASK>
[  337.717340][ T9587] netlink: 'syz.0.1750': attribute type 10 has an invalid length.
[  337.755716][ T9587] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1750'.
[  338.430492][ T9607] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1756'.
[  338.453196][ T9614] tun0: tun_chr_ioctl cmd 1074025675
[  338.473549][ T9614] tun0: persist enabled
[  338.500941][ T9617] tun0: tun_chr_ioctl cmd 1074025675
[  338.513722][ T9617] tun0: persist enabled
[  338.677231][ T9621] netlink: 'syz.4.1759': attribute type 10 has an invalid length.
[  339.141629][ T9631] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1759'.
[  342.232077][ T9642] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1766'.
[  342.292550][ T9645] netlink: 'syz.2.1768': attribute type 10 has an invalid length.
[  342.358036][ T9648] netlink: 'syz.1.1767': attribute type 25 has an invalid length.
[  342.595048][ T9656] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.1771'.
[  342.849239][ T9661] netlink: 'syz.1.1772': attribute type 10 has an invalid length.
[  342.860350][ T9661] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1772'.
[  344.104323][ T9675] tun1: tun_chr_ioctl cmd 1074025675
[  344.111115][ T9675] tun1: persist enabled
[  344.115880][ T9676] tun1: tun_chr_ioctl cmd 1074025675
[  344.142761][ T9676] tun1: persist enabled
[  344.151442][ T9680] netlink: 'syz.2.1787': attribute type 10 has an invalid length.
[  346.319010][ T9698] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1781'.
[  347.764850][ T9700] netlink: 'syz.4.1782': attribute type 25 has an invalid length.
[  348.115399][ T9705] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1784'.
[  348.146253][ T9706] netlink: 'syz.1.1785': attribute type 10 has an invalid length.
[  348.178875][ T9706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1785'.
[  348.267058][ T9702] netlink: 'syz.3.1783': attribute type 10 has an invalid length.
[  348.292527][ T9708] tipc: Started in network mode
[  348.299635][ T9708] tipc: Node identity 9215a268, cluster identity 4711
[  348.329733][ T9708] tipc: Node number set to 2450891368
[  348.430276][ T9708] netlink: 'syz.0.1786': attribute type 27 has an invalid length.
[  348.459907][ T9708] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1786'.
[  348.495304][ T9702] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1783'.
[  348.708386][ T9725] netlink: 'syz.0.1792': attribute type 10 has an invalid length.
[  349.757348][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1798'.
[  349.984626][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1798'.
[  349.995565][ T9747] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.1799'.
[  350.028337][ T9746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1798'.
[  350.039380][ T9748] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1798'.
[  350.257322][ T9753] netlink: 'syz.3.1800': attribute type 10 has an invalid length.
[  350.273182][ T9753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1800'.
[  350.315033][ T9753] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  350.564508][ T9757] tipc: Started in network mode
[  350.569839][ T9757] tipc: Node identity 9215a268, cluster identity 4711
[  350.593316][ T9757] tipc: Node number set to 2450891368
[  350.647605][ T9763] netlink: 'syz.4.1802': attribute type 10 has an invalid length.
[  350.698878][ T9762] netlink: 'syz.2.1804': attribute type 10 has an invalid length.
[  351.295677][ T9780] netlink: 'syz.1.1809': attribute type 10 has an invalid length.
[  353.102873][ T9800] netlink: 'syz.2.1816': attribute type 10 has an invalid length.
[  353.504304][ T9808] netlink: 'syz.0.1818': attribute type 29 has an invalid length.
[  356.021351][ T9816] netlink: 'syz.4.1819': attribute type 27 has an invalid length.
[  356.044325][ T9816] __nla_validate_parse: 4 callbacks suppressed
[  356.044345][ T9816] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1819'.
[  356.356299][ T9808] netlink: 'syz.0.1818': attribute type 29 has an invalid length.
[  356.367542][ T9814] tipc: Started in network mode
[  356.380225][ T9814] tipc: Node identity 9215a268, cluster identity 4711
[  356.421009][ T9814] tipc: Node number set to 2450891368
[  358.101897][ T9840] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1827'.
[  358.253129][ T9852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1831'.
[  358.298347][ T9854] netlink: 'syz.1.1832': attribute type 10 has an invalid length.
[  358.309863][ T9854] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1832'.
[  358.580630][ T9860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1833'.
[  358.614638][ T9857] tipc: Started in network mode
[  358.619886][ T9857] tipc: Node identity 9215a268, cluster identity 4711
[  358.666407][ T9857] tipc: Node number set to 2450891368
[  358.882180][ T9857] netlink: 'syz.2.1834': attribute type 27 has an invalid length.
[  358.962737][ T9857] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1834'.
[  361.021148][ T9880] device syzkaller0 entered promiscuous mode
[  361.039392][ T9884] netlink: 'syz.0.1842': attribute type 25 has an invalid length.
[  362.102522][ T9896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1846'.
[  364.056836][ T9889] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1844'.
[  364.066325][ T9891] netlink: 'syz.2.1845': attribute type 10 has an invalid length.
[  364.074645][ T9891] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1845'.
[  364.092801][ T9896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1846'.
[  364.121337][ T9904] netlink: 'syz.0.1847': attribute type 4 has an invalid length.
[  365.605581][ T9938] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.1860'.
[  365.648071][ T9941] netlink: 'syz.1.1859': attribute type 10 has an invalid length.
[  365.656791][ T9941] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1859'.
[  365.837578][ T9946] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1862'.
[  365.854462][ T9948] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1863'.
[  365.870380][ T9948] bridge_slave_1: default FDB implementation only supports local addresses
[  366.938339][ T9974] netlink: 'syz.1.1872': attribute type 25 has an invalid length.
[  367.240690][ T9978] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.1873'.
[  367.397026][ T9981] netlink: 'syz.3.1874': attribute type 10 has an invalid length.
[  367.413675][ T9985] FAULT_INJECTION: forcing a failure.
[  367.413675][ T9985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.419203][ T9981] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1874'.
[  367.522895][ T9985] CPU: 1 PID: 9985 Comm: syz.1.1875 Not tainted syzkaller #0
[  367.530361][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  367.540559][ T9985] Call Trace:
[  367.543888][ T9985]  <TASK>
[  367.546961][ T9985]  dump_stack_lvl+0x188/0x24e
[  367.551701][ T9985]  ? show_regs_print_info+0x12/0x12
[  367.556969][ T9985]  ? load_image+0x400/0x400
[  367.561532][ T9985]  ? __lock_acquire+0x7d10/0x7d10
[  367.566705][ T9985]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  367.572595][ T9985]  should_fail_ex+0x399/0x4d0
[  367.577341][ T9985]  _copy_from_user+0x2c/0x170
[  367.582082][ T9985]  ___sys_sendmsg+0x1c3/0x360
[  367.586831][ T9985]  ? __sys_sendmsg+0x290/0x290
[  367.591688][ T9985]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  367.597509][ T9985]  __se_sys_sendmsg+0x1bb/0x2a0
[  367.602439][ T9985]  ? __x64_sys_sendmsg+0x80/0x80
[  367.607460][ T9985]  ? syscall_enter_from_user_mode+0x2a/0x80
[  367.613423][ T9985]  do_syscall_64+0x4c/0xa0
[  367.617903][ T9985]  ? clear_bhb_loop+0x60/0xb0
[  367.622681][ T9985]  ? clear_bhb_loop+0x60/0xb0
[  367.627447][ T9985]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  367.633397][ T9985] RIP: 0033:0x7ff78ed9c799
[  367.637861][ T9985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.657521][ T9985] RSP: 002b:00007ff78fc91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.665992][ T9985] RAX: ffffffffffffffda RBX: 00007ff78f016090 RCX: 00007ff78ed9c799
[  367.674108][ T9985] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000a
[  367.682220][ T9985] RBP: 00007ff78fc91090 R08: 0000000000000000 R09: 0000000000000000
[  367.690250][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.698274][ T9985] R13: 00007ff78f016128 R14: 00007ff78f016090 R15: 00007ffd10e6ae98
[  367.706313][ T9985]  </TASK>
[  370.054036][T10028] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.1887'.
[  370.469270][T10032] delete_channel: no stack
[  370.840267][T10039] FAULT_INJECTION: forcing a failure.
[  370.840267][T10039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.972809][T10039] CPU: 1 PID: 10039 Comm: syz.0.1890 Not tainted syzkaller #0
[  370.980345][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  370.990447][T10039] Call Trace:
[  370.993766][T10039]  <TASK>
[  370.996741][T10039]  dump_stack_lvl+0x188/0x24e
[  371.001479][T10039]  ? show_regs_print_info+0x12/0x12
[  371.006753][T10039]  ? load_image+0x400/0x400
[  371.011353][T10039]  ? __lock_acquire+0x7d10/0x7d10
[  371.016526][T10039]  ? snprintf+0xe5/0x140
[  371.020837][T10039]  should_fail_ex+0x399/0x4d0
[  371.025578][T10039]  _copy_to_user+0x2c/0x130
[  371.030138][T10039]  simple_read_from_buffer+0xe3/0x150
[  371.035665][T10039]  proc_fail_nth_read+0x1a6/0x220
[  371.040728][T10039]  ? proc_fault_inject_write+0x310/0x310
[  371.046396][T10039]  ? fsnotify_perm+0x248/0x550
[  371.051198][T10039]  ? proc_fault_inject_write+0x310/0x310
[  371.056861][T10039]  vfs_read+0x2de/0xa00
[  371.061057][T10039]  ? kernel_read+0x1e0/0x1e0
[  371.065684][T10039]  ? __fget_files+0x28/0x4b0
[  371.070305][T10039]  ? __fget_files+0x28/0x4b0
[  371.074934][T10039]  ? __fget_files+0x43d/0x4b0
[  371.079675][T10039]  ? __fdget_pos+0x2ae/0x360
[  371.084302][T10039]  ? ksys_read+0x71/0x250
[  371.088686][T10039]  ksys_read+0x14c/0x250
[  371.092971][T10039]  ? vfs_write+0xa30/0xa30
[  371.097423][T10039]  ? lockdep_hardirqs_on+0x94/0x140
[  371.102734][T10039]  do_syscall_64+0x4c/0xa0
[  371.107180][T10039]  ? clear_bhb_loop+0x60/0xb0
[  371.111884][T10039]  ? clear_bhb_loop+0x60/0xb0
[  371.116591][T10039]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  371.122510][T10039] RIP: 0033:0x7f8094d5cfce
[  371.126955][T10039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  371.146706][T10039] RSP: 002b:00007f8095c46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  371.155148][T10039] RAX: ffffffffffffffda RBX: 00007f8095c476c0 RCX: 00007f8094d5cfce
[  371.163159][T10039] RDX: 000000000000000f RSI: 00007f8095c470a0 RDI: 0000000000000004
[  371.171166][T10039] RBP: 00007f8095c47090 R08: 0000000000000000 R09: 0000000000000000
[  371.179167][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.187167][T10039] R13: 00007f8095016038 R14: 00007f8095015fa0 R15: 00007ffe80ad9e38
[  371.195184][T10039]  </TASK>
[  371.737353][T10052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1893'.
[  371.781099][T10056] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1894'.
[  372.215492][T10068] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.1898'.
[  374.314432][T10101] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1910'.
[  374.942561][T10107] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1911'.
[  375.462363][T10126] FAULT_INJECTION: forcing a failure.
[  375.462363][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.493235][T10126] CPU: 0 PID: 10126 Comm: syz.0.1918 Not tainted syzkaller #0
[  375.500790][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  375.510987][T10126] Call Trace:
[  375.514319][T10126]  <TASK>
[  375.517292][T10126]  dump_stack_lvl+0x188/0x24e
[  375.522029][T10126]  ? show_regs_print_info+0x12/0x12
[  375.527303][T10126]  ? load_image+0x400/0x400
[  375.531881][T10126]  ? __lock_acquire+0x7d10/0x7d10
[  375.536969][T10126]  should_fail_ex+0x399/0x4d0
[  375.541696][T10126]  _copy_from_user+0x2c/0x170
[  375.546425][T10126]  bpf_prog_test_run_xdp+0xbf3/0xf10
[  375.551803][T10126]  ? dev_put+0x80/0x80
[  375.555950][T10126]  ? dev_put+0x80/0x80
[  375.560072][T10126]  bpf_prog_test_run+0x31e/0x390
[  375.565070][T10126]  __sys_bpf+0x62b/0x780
[  375.569372][T10126]  ? bpf_link_show_fdinfo+0x380/0x380
[  375.574818][T10126]  ? lock_chain_count+0x20/0x20
[  375.579744][T10126]  __x64_sys_bpf+0x78/0x90
[  375.584352][T10126]  do_syscall_64+0x4c/0xa0
[  375.588825][T10126]  ? clear_bhb_loop+0x60/0xb0
[  375.593643][T10126]  ? clear_bhb_loop+0x60/0xb0
[  375.598371][T10126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  375.604320][T10126] RIP: 0033:0x7f8094d9c799
[  375.609040][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.628788][T10126] RSP: 002b:00007f8095c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  375.637260][T10126] RAX: ffffffffffffffda RBX: 00007f8095015fa0 RCX: 00007f8094d9c799
[  375.645290][T10126] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 000000000000000a
[  375.653402][T10126] RBP: 00007f8095c47090 R08: 0000000000000000 R09: 0000000000000000
[  375.661425][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.669530][T10126] R13: 00007f8095016038 R14: 00007f8095015fa0 R15: 00007ffe80ad9e38
[  375.677563][T10126]  </TASK>
[  375.870622][T10134] netlink: 'syz.0.1922': attribute type 10 has an invalid length.
[  376.160533][T10137] netlink: 'syz.3.1923': attribute type 10 has an invalid length.
[  378.509085][T10149] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.1927'.
[  378.555145][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  378.561609][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  378.828616][T10167] sock: sock_set_timeout: `syz.4.1933' (pid 10167) tries to set negative timeout
[  378.839032][T10163] netlink: 'syz.2.1932': attribute type 10 has an invalid length.
[  378.848291][T10163] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1932'.
[  379.316544][T10181] netlink: 'syz.2.1938': attribute type 10 has an invalid length.
[  379.987126][T10189] netlink: 'syz.1.1941': attribute type 10 has an invalid length.
[  380.197567][T10192] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.1942'.
[  380.921789][T10205] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1945'.
[  380.951105][T10210] FAULT_INJECTION: forcing a failure.
[  380.951105][T10210] name failslab, interval 1, probability 0, space 0, times 0
[  380.969986][T10210] CPU: 0 PID: 10210 Comm: syz.1.1948 Not tainted syzkaller #0
[  380.977520][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  380.978331][T10206] netlink: 'syz.3.1946': attribute type 10 has an invalid length.
[  380.987602][T10210] Call Trace:
[  380.987616][T10210]  <TASK>
[  380.987626][T10210]  dump_stack_lvl+0x188/0x24e
[  380.987664][T10210]  ? show_regs_print_info+0x12/0x12
[  380.987694][T10210]  ? lockdep_hardirqs_on+0x94/0x140
[  380.987718][T10210]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  381.023405][T10210]  should_fail_ex+0x399/0x4d0
[  381.028141][T10210]  should_failslab+0x5/0x20
[  381.032704][T10210]  slab_pre_alloc_hook+0x59/0x310
[  381.037762][T10210]  ? sk_prot_alloc+0xe7/0x210
[  381.042472][T10210]  __kmem_cache_alloc_node+0x4f/0x260
[  381.047877][T10210]  ? sk_prot_alloc+0xe7/0x210
[  381.052587][T10210]  __kmalloc+0xa0/0x240
[  381.056786][T10210]  sk_prot_alloc+0xe7/0x210
[  381.061415][T10210]  ? sk_alloc+0x20/0x340
[  381.065692][T10210]  sk_alloc+0x36/0x340
[  381.069788][T10210]  ? bpf_ctx_init+0x163/0x1a0
[  381.074544][T10210]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  381.080123][T10210]  bpf_prog_test_run_skb+0x35e/0x12a0
[  381.085545][T10210]  ? __fget_files+0x28/0x4b0
[  381.090168][T10210]  ? __fget_files+0x43d/0x4b0
[  381.094883][T10210]  ? cpu_online+0xa0/0xa0
[  381.099238][T10210]  bpf_prog_test_run+0x31e/0x390
[  381.104222][T10210]  __sys_bpf+0x62b/0x780
[  381.108537][T10210]  ? bpf_link_show_fdinfo+0x380/0x380
[  381.113962][T10210]  __x64_sys_bpf+0x78/0x90
[  381.118446][T10210]  do_syscall_64+0x4c/0xa0
[  381.122895][T10210]  ? clear_bhb_loop+0x60/0xb0
[  381.127616][T10210]  ? clear_bhb_loop+0x60/0xb0
[  381.132347][T10210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  381.138276][T10210] RIP: 0033:0x7ff78ed9c799
[  381.142718][T10210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.162612][T10210] RSP: 002b:00007ff78fcb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  381.171058][T10210] RAX: ffffffffffffffda RBX: 00007ff78f015fa0 RCX: 00007ff78ed9c799
[  381.179052][T10210] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  381.187135][T10210] RBP: 00007ff78fcb2090 R08: 0000000000000000 R09: 0000000000000000
[  381.195131][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.203130][T10210] R13: 00007ff78f016038 R14: 00007ff78f015fa0 R15: 00007ffd10e6ae98
[  381.211226][T10210]  </TASK>
[  381.219836][T10206] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1946'.
[  381.556377][T10221] netlink: 'syz.4.1949': attribute type 25 has an invalid length.
[  381.728635][T10227] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1954'.
[  381.814115][T10231] netlink: 'syz.4.1955': attribute type 11 has an invalid length.
[  381.825706][T10231] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1955'.
[  381.919940][T10237] netlink: 'syz.4.1957': attribute type 10 has an invalid length.
[  381.936514][T10238] sock: sock_set_timeout: `syz.3.1956' (pid 10238) tries to set negative timeout
[  382.984886][T10254] netlink: 'syz.1.1962': attribute type 10 has an invalid length.
[  383.006610][T10254] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1962'.
[  383.284965][T10261] device syzkaller0 entered promiscuous mode
[  383.310617][T10266] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.1966'.
[  385.281470][T10265] netlink: 'syz.1.1965': attribute type 25 has an invalid length.
[  385.801519][T10291] netlink: 'syz.2.1974': attribute type 10 has an invalid length.
[  385.914016][T10296] netlink: 'syz.4.1975': attribute type 10 has an invalid length.
[  385.943561][T10296] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1975'.
[  386.302515][T10303] netlink: 'syz.3.1977': attribute type 2 has an invalid length.
[  386.620859][T10310] sock: sock_set_timeout: `syz.1.1979' (pid 10310) tries to set negative timeout
[  387.598679][T10315] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.1981'.
[  388.806712][T10343] netlink: 'syz.3.1988': attribute type 10 has an invalid length.
[  388.833807][T10343] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1988'.
[  389.261335][T10353] netlink: 'syz.3.2002': attribute type 10 has an invalid length.
[  389.280535][T10353] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2002'.
[  389.346789][T10357] netlink: 'syz.4.1992': attribute type 2 has an invalid length.
[  390.468870][T10376] netlink: 'syz.2.1998': attribute type 10 has an invalid length.
[  392.494821][T10400] netlink: 'syz.2.2007': attribute type 10 has an invalid length.
[  392.521559][T10400] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2007'.
[  392.662896][T10407] netlink: 'syz.1.2008': attribute type 2 has an invalid length.
[  392.856253][T10410] netlink: 'syz.2.2011': attribute type 10 has an invalid length.
[  394.138392][T10430] netlink: 'syz.2.2017': attribute type 10 has an invalid length.
[  395.169187][T10452] netlink: 'syz.2.2023': attribute type 2 has an invalid length.
[  396.870407][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  397.163681][T10477] netlink: 'syz.2.2034': attribute type 10 has an invalid length.
[  397.199025][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  397.351112][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  397.425585][T10490] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  398.075168][T10503] netlink: 'syz.3.2038': attribute type 10 has an invalid length.
[  398.102939][T10503] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2038'.
[  399.575743][T10521] device syzkaller0 entered promiscuous mode
[  400.006134][T10532] netlink: 'syz.0.2046': attribute type 10 has an invalid length.
[  402.736311][ T4284] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  403.926446][T10560] netlink: 'syz.4.2053': attribute type 10 has an invalid length.
[  403.934597][T10560] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2053'.
[  403.970874][T10571] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2058'.
[  404.157407][T10580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2060'.
[  404.443630][T10587] netlink: 'syz.2.2061': attribute type 21 has an invalid length.
[  404.452318][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'.
[  405.320914][T10602] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2070'.
[  405.704029][T10607] netlink: 'syz.0.2072': attribute type 10 has an invalid length.
[  405.716762][T10607] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2072'.
[  406.063231][T10622] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2075'.
[  406.209837][ T4284] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6
[  406.256014][T10626] netlink: 'syz.0.2076': attribute type 21 has an invalid length.
[  406.265240][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'.
[  407.771825][T10664] netlink: 'syz.4.2089': attribute type 21 has an invalid length.
[  407.789335][T10664] netlink: 'syz.4.2089': attribute type 6 has an invalid length.
[  407.817758][T10664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2089'.
[  407.845716][T10664] FAULT_INJECTION: forcing a failure.
[  407.845716][T10664] name failslab, interval 1, probability 0, space 0, times 0
[  407.883475][T10664] CPU: 1 PID: 10664 Comm: syz.4.2089 Not tainted syzkaller #0
[  407.891025][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  407.901135][T10664] Call Trace:
[  407.904463][T10664]  <TASK>
[  407.907445][T10664]  dump_stack_lvl+0x188/0x24e
[  407.912192][T10664]  ? show_regs_print_info+0x12/0x12
[  407.917456][T10664]  ? load_image+0x400/0x400
[  407.922000][T10664]  ? kasan_set_track+0x60/0x70
[  407.926820][T10664]  ? __alloc_skb+0x22a/0x7e0
[  407.931541][T10664]  ? verify_lock_unused+0x140/0x140
[  407.936777][T10664]  should_fail_ex+0x399/0x4d0
[  407.941482][T10664]  should_failslab+0x5/0x20
[  407.946022][T10664]  slab_pre_alloc_hook+0x59/0x310
[  407.951085][T10664]  kmem_cache_alloc+0x56/0x2f0
[  407.955900][T10664]  ? skb_clone+0x1e7/0x370
[  407.960363][T10664]  skb_clone+0x1e7/0x370
[  407.964652][T10664]  __netlink_deliver_tap+0x3ed/0x800
[  407.969987][T10664]  ? netlink_deliver_tap+0x2e/0x1b0
[  407.975225][T10664]  netlink_deliver_tap+0x19c/0x1b0
[  407.980382][T10664]  netlink_sendskb+0x64/0x130
[  407.985099][T10664]  netlink_ack+0xcdd/0x1170
[  407.989665][T10664]  ? netlink_dump+0xd00/0xd00
[  407.994471][T10664]  ? __skb_clone+0x480/0x790
[  407.999101][T10664]  netlink_rcv_skb+0x280/0x450
[  408.004163][T10664]  ? rtnetlink_bind+0x80/0x80
[  408.008874][T10664]  ? netlink_ack+0x1170/0x1170
[  408.013684][T10664]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.018926][T10664]  netlink_unicast+0x74d/0x8d0
[  408.023737][T10664]  netlink_sendmsg+0x8ad/0xbd0
[  408.028547][T10664]  ? netlink_getsockopt+0x550/0x550
[  408.033879][T10664]  ? aa_sock_msg_perm+0x94/0x150
[  408.038853][T10664]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  408.044173][T10664]  ? security_socket_sendmsg+0x7c/0xa0
[  408.049807][T10664]  ? netlink_getsockopt+0x550/0x550
[  408.055038][T10664]  ____sys_sendmsg+0x5be/0x970
[  408.059848][T10664]  ? __sys_sendmsg_sock+0x30/0x30
[  408.064917][T10664]  ? __import_iovec+0x315/0x500
[  408.069797][T10664]  ? import_iovec+0x6f/0xa0
[  408.074337][T10664]  ___sys_sendmsg+0x2a2/0x360
[  408.079060][T10664]  ? __sys_sendmsg+0x290/0x290
[  408.083882][T10664]  ? __lock_acquire+0x7d10/0x7d10
[  408.088962][T10664]  __se_sys_sendmsg+0x1bb/0x2a0
[  408.093847][T10664]  ? __x64_sys_sendmsg+0x80/0x80
[  408.098837][T10664]  ? lockdep_hardirqs_on+0x94/0x140
[  408.104064][T10664]  do_syscall_64+0x4c/0xa0
[  408.108614][T10664]  ? clear_bhb_loop+0x60/0xb0
[  408.113525][T10664]  ? clear_bhb_loop+0x60/0xb0
[  408.118247][T10664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  408.124177][T10664] RIP: 0033:0x7f2282b9c799
[  408.128628][T10664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.148258][T10664] RSP: 002b:00007f2283aa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.156795][T10664] RAX: ffffffffffffffda RBX: 00007f2282e15fa0 RCX: 00007f2282b9c799
[  408.164798][T10664] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  408.172876][T10664] RBP: 00007f2283aa8090 R08: 0000000000000000 R09: 0000000000000000
[  408.180874][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  408.188886][T10664] R13: 00007f2282e16038 R14: 00007f2282e15fa0 R15: 00007ffed8231178
[  408.196930][T10664]  </TASK>
[  408.897809][T10677] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2093'.
[  408.987388][ T4284] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6
[  409.120245][T10684] netlink: 'syz.3.2095': attribute type 21 has an invalid length.
[  409.131618][T10684] netlink: 'syz.3.2095': attribute type 6 has an invalid length.
[  409.150705][T10684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2095'.
[  409.263502][T10689] FAULT_INJECTION: forcing a failure.
[  409.263502][T10689] name failslab, interval 1, probability 0, space 0, times 0
[  409.302787][T10689] CPU: 1 PID: 10689 Comm: syz.0.2096 Not tainted syzkaller #0
[  409.310351][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  409.320472][T10689] Call Trace:
[  409.323882][T10689]  <TASK>
[  409.326861][T10689]  dump_stack_lvl+0x188/0x24e
[  409.331609][T10689]  ? show_regs_print_info+0x12/0x12
[  409.337135][T10689]  ? load_image+0x400/0x400
[  409.341700][T10689]  ? __might_sleep+0xd0/0xd0
[  409.346357][T10689]  ? __lock_acquire+0x7d10/0x7d10
[  409.351448][T10689]  should_fail_ex+0x399/0x4d0
[  409.356240][T10689]  should_failslab+0x5/0x20
[  409.360811][T10689]  slab_pre_alloc_hook+0x59/0x310
[  409.365891][T10689]  ? perf_swevent_event+0xc8/0x530
[  409.371070][T10689]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  409.376869][T10689]  __kmem_cache_alloc_node+0x4f/0x260
[  409.382321][T10689]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  409.388113][T10689]  __kmalloc+0xa0/0x240
[  409.392347][T10689]  tomoyo_realpath_from_path+0xdf/0x5d0
[  409.397976][T10689]  ? tomoyo_path_number_perm+0x205/0x650
[  409.403769][T10689]  tomoyo_path_number_perm+0x22f/0x650
[  409.409304][T10689]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  409.414837][T10689]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  409.421278][T10689]  ? __fget_files+0x28/0x4b0
[  409.425928][T10689]  ? __fget_files+0x28/0x4b0
[  409.430584][T10689]  security_file_ioctl+0x6c/0xa0
[  409.435586][T10689]  __se_sys_ioctl+0x48/0x170
[  409.440247][T10689]  do_syscall_64+0x4c/0xa0
[  409.444728][T10689]  ? clear_bhb_loop+0x60/0xb0
[  409.449554][T10689]  ? clear_bhb_loop+0x60/0xb0
[  409.454286][T10689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.460238][T10689] RIP: 0033:0x7f8094d9c799
[  409.464798][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.484597][T10689] RSP: 002b:00007f8095c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.493071][T10689] RAX: ffffffffffffffda RBX: 00007f8095015fa0 RCX: 00007f8094d9c799
[  409.501101][T10689] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000008
[  409.509139][T10689] RBP: 00007f8095c47090 R08: 0000000000000000 R09: 0000000000000000
[  409.517181][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.525229][T10689] R13: 00007f8095016038 R14: 00007f8095015fa0 R15: 00007ffe80ad9e38
[  409.533452][T10689]  </TASK>
[  409.821844][ T4284] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6
[  410.593527][T10689] ERROR: Out of memory at tomoyo_realpath_from_path.
[  410.809323][T10706] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2102'.
[  411.210661][T10716] netlink: 'syz.4.2108': attribute type 10 has an invalid length.
[  411.496053][T10722] netlink: 'syz.0.2110': attribute type 10 has an invalid length.
[  413.470153][ T4284] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6
[  413.786250][T10757] netlink: 'syz.1.2120': attribute type 27 has an invalid length.
[  414.129031][T10757] bond0: (slave bond_slave_0): Releasing backup interface
[  414.660087][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'.
[  414.755452][T10775] netlink: 'syz.1.2126': attribute type 10 has an invalid length.
[  415.623367][T10783] netlink: 'syz.3.2128': attribute type 10 has an invalid length.
[  415.703828][T10783] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2128'.
[  416.357082][T10797] netlink: 'syz.2.2132': attribute type 10 has an invalid length.
[  418.061101][T10827] netlink: 'syz.3.2142': attribute type 10 has an invalid length.
[  418.474532][T10832] netlink: 'syz.1.2144': attribute type 10 has an invalid length.
[  418.520165][T10832] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2144'.
[  419.445528][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'.
[  419.876498][ T4284] Bluetooth: hci1: unexpected event 0x17 length: 15 > 6
[  420.799530][T10855] netlink: 'syz.0.2149': attribute type 10 has an invalid length.
[  420.973612][T10866] netlink: 'syz.4.2154': attribute type 29 has an invalid length.
[  421.299574][T10866] netlink: 'syz.4.2154': attribute type 29 has an invalid length.
[  421.327358][T10872] netlink: 'syz.4.2154': attribute type 29 has an invalid length.
[  421.896492][T10878] netlink: 'syz.4.2156': attribute type 10 has an invalid length.
[  421.933116][T10878] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2156'.
[  422.713183][T10907] netlink: 'syz.2.2169': attribute type 10 has an invalid length.
[  424.473492][T10944] netlink: 'syz.2.2178': attribute type 3 has an invalid length.
[  424.546827][T10944] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2178'.
[  424.576139][T10946] netlink: 'syz.1.2180': attribute type 2 has an invalid length.
[  424.609818][T10940] device syzkaller0 entered promiscuous mode
[  424.626268][T10946] netlink: 'syz.1.2180': attribute type 1 has an invalid length.
[  428.634586][T10959] netlink: 'syz.0.2182': attribute type 10 has an invalid length.
[  431.028625][T11029] device lo entered promiscuous mode
[  431.045780][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  431.075144][T11030] netlink: 'syz.0.2204': attribute type 10 has an invalid length.
[  431.306021][T11046] FAULT_INJECTION: forcing a failure.
[  431.306021][T11046] name failslab, interval 1, probability 0, space 0, times 0
[  431.342828][T11046] CPU: 1 PID: 11046 Comm: syz.4.2208 Not tainted syzkaller #0
[  431.350381][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  431.360497][T11046] Call Trace:
[  431.363850][T11046]  <TASK>
[  431.366836][T11046]  dump_stack_lvl+0x188/0x24e
[  431.371569][T11046]  ? sctp_sendmsg+0x15b0/0x2940
[  431.376485][T11046]  ? ___sys_sendmsg+0x2a2/0x360
[  431.381400][T11046]  ? show_regs_print_info+0x12/0x12
[  431.386643][T11046]  ? load_image+0x400/0x400
[  431.391194][T11046]  should_fail_ex+0x399/0x4d0
[  431.395995][T11046]  should_failslab+0x5/0x20
[  431.400534][T11046]  slab_pre_alloc_hook+0x59/0x310
[  431.405594][T11046]  ? sctp_add_bind_addr+0x89/0x350
[  431.410918][T11046]  __kmem_cache_alloc_node+0x4f/0x260
[  431.416331][T11046]  ? sctp_add_bind_addr+0x89/0x350
[  431.421482][T11046]  kmalloc_trace+0x26/0xe0
[  431.425937][T11046]  sctp_add_bind_addr+0x89/0x350
[  431.430910][T11046]  sctp_copy_local_addr_list+0x311/0x4e0
[  431.436579][T11046]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  431.442333][T11046]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  431.448528][T11046]  ? sctp_v4_is_any+0x31/0x50
[  431.453239][T11046]  ? sctp_copy_one_addr+0x93/0x660
[  431.458391][T11046]  sctp_bind_addr_copy+0xaf/0x3c0
[  431.463454][T11046]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  431.469809][T11046]  sctp_connect_new_asoc+0x2f5/0x6a0
[  431.475137][T11046]  ? __sctp_connect+0xd80/0xd80
[  431.480048][T11046]  ? __local_bh_enable_ip+0x136/0x1c0
[  431.485495][T11046]  ? _local_bh_enable+0xa0/0xa0
[  431.490383][T11046]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  431.496239][T11046]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  431.502173][T11046]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  431.507843][T11046]  ? security_sctp_bind_connect+0x85/0xb0
[  431.513602][T11046]  sctp_sendmsg+0x15b0/0x2940
[  431.518349][T11046]  ? aa_sk_perm+0x781/0x950
[  431.522891][T11046]  ? sctp_getsockopt+0x8a0/0x8a0
[  431.527956][T11046]  ? __might_fault+0xa6/0x120
[  431.532670][T11046]  ? aa_af_perm+0x340/0x340
[  431.537209][T11046]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  431.543699][T11046]  ? inet_sendmsg+0x78/0x2f0
[  431.548330][T11046]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  431.553659][T11046]  ? security_socket_sendmsg+0x7c/0xa0
[  431.559159][T11046]  ? inet_send_prepare+0x260/0x260
[  431.564398][T11046]  ____sys_sendmsg+0x5be/0x970
[  431.569217][T11046]  ? __sys_sendmsg_sock+0x30/0x30
[  431.574276][T11046]  ? __import_iovec+0x315/0x500
[  431.579192][T11046]  ? import_iovec+0x6f/0xa0
[  431.583834][T11046]  ___sys_sendmsg+0x2a2/0x360
[  431.588564][T11046]  ? __sys_sendmsg+0x290/0x290
[  431.593386][T11046]  ? trace_call_bpf+0xbf/0x6b0
[  431.598209][T11046]  __se_sys_sendmsg+0x1bb/0x2a0
[  431.603097][T11046]  ? __x64_sys_sendmsg+0x80/0x80
[  431.608100][T11046]  ? lockdep_hardirqs_on+0x94/0x140
[  431.613337][T11046]  do_syscall_64+0x4c/0xa0
[  431.618002][T11046]  ? clear_bhb_loop+0x60/0xb0
[  431.622719][T11046]  ? clear_bhb_loop+0x60/0xb0
[  431.627431][T11046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.633356][T11046] RIP: 0033:0x7f2282b9c799
[  431.637803][T11046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.657440][T11046] RSP: 002b:00007f2283aa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.665897][T11046] RAX: ffffffffffffffda RBX: 00007f2282e15fa0 RCX: 00007f2282b9c799
[  431.674016][T11046] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  431.682014][T11046] RBP: 00007f2283aa8090 R08: 0000000000000000 R09: 0000000000000000
[  431.690011][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  431.698018][T11046] R13: 00007f2282e16038 R14: 00007f2282e15fa0 R15: 00007ffed8231178
[  431.706035][T11046]  </TASK>
[  433.010937][T11075] netlink: 'syz.3.2214': attribute type 10 has an invalid length.
[  433.053135][T11075] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2214'.
[  433.241632][T11081] netlink: 'syz.0.2217': attribute type 10 has an invalid length.
[  433.847305][T11096] netlink: 'syz.1.2222': attribute type 12 has an invalid length.
[  434.007741][T11096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2222'.
[  434.999550][T11115] netlink: 'syz.3.2226': attribute type 2 has an invalid length.
[  435.100271][T11115] device 14 entered promiscuous mode
[  435.117104][T11116] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2226'.
[  435.426895][T11126] FAULT_INJECTION: forcing a failure.
[  435.426895][T11126] name failslab, interval 1, probability 0, space 0, times 0
[  435.462862][T11126] CPU: 1 PID: 11126 Comm: syz.2.2230 Not tainted syzkaller #0
[  435.470516][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  435.480728][T11126] Call Trace:
[  435.484062][T11126]  <TASK>
[  435.487046][T11126]  dump_stack_lvl+0x188/0x24e
[  435.491799][T11126]  ? show_regs_print_info+0x12/0x12
[  435.496478][T11123] netlink: 'syz.3.2229': attribute type 10 has an invalid length.
[  435.497129][T11126]  ? load_image+0x400/0x400
[  435.497163][T11126]  ? __might_sleep+0xd0/0xd0
[  435.497185][T11126]  ? __lock_acquire+0x7d10/0x7d10
[  435.497222][T11126]  should_fail_ex+0x399/0x4d0
[  435.497250][T11126]  should_failslab+0x5/0x20
[  435.497284][T11126]  slab_pre_alloc_hook+0x59/0x310
[  435.497311][T11126]  ? sk_prot_alloc+0xe7/0x210
[  435.497338][T11126]  __kmem_cache_alloc_node+0x4f/0x260
[  435.497367][T11126]  ? sk_prot_alloc+0xe7/0x210
[  435.497392][T11126]  __kmalloc+0xa0/0x240
[  435.497429][T11126]  sk_prot_alloc+0xe7/0x210
[  435.497453][T11126]  ? sk_alloc+0x20/0x340
[  435.497480][T11126]  sk_alloc+0x36/0x340
[  435.497504][T11126]  ? bpf_ctx_init+0x163/0x1a0
[  435.497528][T11126]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  435.497557][T11126]  bpf_prog_test_run_skb+0x35e/0x12a0
[  435.497583][T11126]  ? __fget_files+0x28/0x4b0
[  435.497615][T11126]  ? __fget_files+0x43d/0x4b0
[  435.497658][T11126]  ? cpu_online+0xa0/0xa0
[  435.497683][T11126]  bpf_prog_test_run+0x31e/0x390
[  435.497720][T11126]  __sys_bpf+0x62b/0x780
[  435.497754][T11126]  ? bpf_link_show_fdinfo+0x380/0x380
[  435.555263][T11123] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2229'.
[  435.557808][T11126]  ? lock_chain_count+0x20/0x20
[  435.557857][T11126]  __x64_sys_bpf+0x78/0x90
[  435.557893][T11126]  do_syscall_64+0x4c/0xa0
[  435.557924][T11126]  ? clear_bhb_loop+0x60/0xb0
[  435.557952][T11126]  ? clear_bhb_loop+0x60/0xb0
[  435.557982][T11126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.558009][T11126] RIP: 0033:0x7f968c39c799
[  435.558030][T11126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.558057][T11126] RSP: 002b:00007f968d2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  435.558083][T11126] RAX: ffffffffffffffda RBX: 00007f968c615fa0 RCX: 00007f968c39c799
[  435.688712][T11126] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a
[  435.696717][T11126] RBP: 00007f968d2ac090 R08: 0000000000000000 R09: 0000000000000000
[  435.704739][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.713165][T11126] R13: 00007f968c616038 R14: 00007f968c615fa0 R15: 00007ffc313fcfc8
[  435.721180][T11126]  </TASK>
[  436.082112][T11141] netlink: 'syz.0.2234': attribute type 25 has an invalid length.
[  436.416036][T11152] netlink: 'syz.0.2238': attribute type 10 has an invalid length.
[  437.296871][T11167] netlink: 'syz.4.2243': attribute type 10 has an invalid length.
[  437.340632][T11167] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2243'.
[  437.542388][T11175] netlink: 'syz.2.2245': attribute type 2 has an invalid length.
[  437.666173][T11175] device 9 entered promiscuous mode
[  437.677768][T11179] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.2245'.
[  437.787254][T11185] netlink: 'syz.0.2248': attribute type 25 has an invalid length.
[  437.812534][T11181] cgroup: fork rejected by pids controller in /syz4
[  438.366077][T11302] netlink: 'syz.2.2254': attribute type 10 has an invalid length.
[  438.987959][ T9358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.252086][ T9358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.445521][ T9358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.590547][ T9358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.635168][T11313] netlink: 'syz.0.2257': attribute type 10 has an invalid length.
[  439.661819][T11313] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2257'.
[  439.994980][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  440.001741][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  440.147407][T11323] netlink: 'syz.0.2261': attribute type 25 has an invalid length.
[  440.277268][ T9358] device 0 left promiscuous mode
[  440.414088][ T9358] device 1 left promiscuous mode
[  440.473388][ T9358] device 2 left promiscuous mode
[  440.544974][ T9358] device 3 left promiscuous mode
[  440.614690][T11334] netlink: 'syz.1.2262': attribute type 2 has an invalid length.
[  440.627730][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  440.649844][T11338] FAULT_INJECTION: forcing a failure.
[  440.649844][T11338] name failslab, interval 1, probability 0, space 0, times 0
[  440.664524][ T9358] device 4 left promiscuous mode
[  440.682788][T11338] CPU: 1 PID: 11338 Comm: syz.0.2266 Not tainted syzkaller #0
[  440.690411][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  440.700519][T11338] Call Trace:
[  440.703862][T11338]  <TASK>
[  440.706837][T11338]  dump_stack_lvl+0x188/0x24e
[  440.711599][T11338]  ? show_regs_print_info+0x12/0x12
[  440.716863][T11338]  ? load_image+0x400/0x400
[  440.721411][T11338]  ? __might_sleep+0xd0/0xd0
[  440.726058][T11338]  should_fail_ex+0x399/0x4d0
[  440.731057][T11338]  should_failslab+0x5/0x20
[  440.735602][T11338]  slab_pre_alloc_hook+0x59/0x310
[  440.740680][T11338]  ? __get_vm_area_node+0x122/0x330
[  440.745917][T11338]  __kmem_cache_alloc_node+0x4f/0x260
[  440.751343][T11338]  ? __get_vm_area_node+0x122/0x330
[  440.756586][T11338]  kmalloc_node_trace+0x22/0xe0
[  440.761487][T11338]  __get_vm_area_node+0x122/0x330
[  440.766547][T11338]  ? __local_bh_enable_ip+0x136/0x1c0
[  440.771953][T11338]  __vmalloc_node_range+0x357/0x13b0
[  440.777271][T11338]  ? netlink_sendmsg+0x5ec/0xbd0
[  440.782247][T11338]  ? netlink_insert+0x1034/0x13c0
[  440.787325][T11338]  ? free_vm_area+0x50/0x50
[  440.791864][T11338]  ? netlink_sendmsg+0x5ec/0xbd0
[  440.796840][T11338]  vmalloc+0x75/0x80
[  440.800768][T11338]  ? netlink_sendmsg+0x5ec/0xbd0
[  440.805745][T11338]  netlink_sendmsg+0x5ec/0xbd0
[  440.810553][T11338]  ? netlink_getsockopt+0x550/0x550
[  440.815827][T11338]  ? __sanitizer_cov_trace_pc+0x4/0x60
[  440.821338][T11338]  ? aa_sock_msg_perm+0x94/0x150
[  440.826309][T11338]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  440.831628][T11338]  ? security_socket_sendmsg+0x7c/0xa0
[  440.837124][T11338]  ? netlink_getsockopt+0x550/0x550
[  440.842362][T11338]  ____sys_sendmsg+0x5be/0x970
[  440.847166][T11338]  ? __sys_sendmsg_sock+0x30/0x30
[  440.852227][T11338]  ? __import_iovec+0x315/0x500
[  440.857115][T11338]  ? import_iovec+0x6f/0xa0
[  440.861660][T11338]  ___sys_sendmsg+0x2a2/0x360
[  440.866381][T11338]  ? __sys_sendmsg+0x290/0x290
[  440.871205][T11338]  ? ktime_get_real_ts64+0x440/0x440
[  440.876633][T11338]  __se_sys_sendmsg+0x1bb/0x2a0
[  440.881522][T11338]  ? __x64_sys_sendmsg+0x80/0x80
[  440.886511][T11338]  ? lockdep_hardirqs_on+0x94/0x140
[  440.891856][T11338]  do_syscall_64+0x4c/0xa0
[  440.896313][T11338]  ? clear_bhb_loop+0x60/0xb0
[  440.901016][T11338]  ? clear_bhb_loop+0x60/0xb0
[  440.905722][T11338]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  440.911648][T11338] RIP: 0033:0x7f8094d9c799
[  440.916085][T11338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.935812][T11338] RSP: 002b:00007f8095c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.944260][T11338] RAX: ffffffffffffffda RBX: 00007f8095015fa0 RCX: 00007f8094d9c799
[  440.952345][T11338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  440.960339][T11338] RBP: 00007f8095c47090 R08: 0000000000000000 R09: 0000000000000000
[  440.968331][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.976325][T11338] R13: 00007f8095016038 R14: 00007f8095015fa0 R15: 00007ffe80ad9e38
[  440.984334][T11338]  </TASK>
[  440.991251][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  440.999678][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  441.008723][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  441.015745][T11341] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.2262'.
[  441.027040][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  441.034489][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  441.034894][T11338] syz.0.2266: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  441.120559][T11338] CPU: 1 PID: 11338 Comm: syz.0.2266 Not tainted syzkaller #0
[  441.128106][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  441.138217][T11338] Call Trace:
[  441.141532][T11338]  <TASK>
[  441.144500][T11338]  dump_stack_lvl+0x188/0x24e
[  441.149241][T11338]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  441.155710][T11338]  ? show_regs_print_info+0x12/0x12
[  441.160966][T11338]  ? load_image+0x400/0x400
[  441.165551][T11338]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  441.172022][T11338]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  441.178577][T11338]  warn_alloc+0x242/0x330
[  441.182970][T11338]  ? rcu_is_watching+0x11/0xa0
[  441.187793][T11338]  ? zone_watermark_ok_safe+0x270/0x270
[  441.193430][T11338]  ? lockdep_hardirqs_on+0x94/0x140
[  441.198675][T11338]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  441.204901][T11338]  __vmalloc_node_range+0x37c/0x13b0
[  441.210277][T11338]  ? netlink_insert+0x1034/0x13c0
[  441.215384][T11338]  ? free_vm_area+0x50/0x50
[  441.219967][T11338]  ? netlink_sendmsg+0x5ec/0xbd0
[  441.224981][T11338]  vmalloc+0x75/0x80
[  441.228931][T11338]  ? netlink_sendmsg+0x5ec/0xbd0
[  441.233924][T11338]  netlink_sendmsg+0x5ec/0xbd0
[  441.238764][T11338]  ? netlink_getsockopt+0x550/0x550
[  441.244025][T11338]  ? __sanitizer_cov_trace_pc+0x4/0x60
[  441.249538][T11338]  ? aa_sock_msg_perm+0x94/0x150
[  441.254526][T11338]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  441.259855][T11338]  ? security_socket_sendmsg+0x7c/0xa0
[  441.265381][T11338]  ? netlink_getsockopt+0x550/0x550
[  441.270718][T11338]  ____sys_sendmsg+0x5be/0x970
[  441.275550][T11338]  ? __sys_sendmsg_sock+0x30/0x30
[  441.280636][T11338]  ? __import_iovec+0x315/0x500
[  441.285653][T11338]  ? import_iovec+0x6f/0xa0
[  441.290208][T11338]  ___sys_sendmsg+0x2a2/0x360
[  441.294950][T11338]  ? __sys_sendmsg+0x290/0x290
[  441.299877][T11338]  ? ktime_get_real_ts64+0x440/0x440
[  441.305245][T11338]  __se_sys_sendmsg+0x1bb/0x2a0
[  441.310168][T11338]  ? __x64_sys_sendmsg+0x80/0x80
[  441.315216][T11338]  ? lockdep_hardirqs_on+0x94/0x140
[  441.320465][T11338]  do_syscall_64+0x4c/0xa0
[  441.324937][T11338]  ? clear_bhb_loop+0x60/0xb0
[  441.329669][T11338]  ? clear_bhb_loop+0x60/0xb0
[  441.334406][T11338]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.340347][T11338] RIP: 0033:0x7f8094d9c799
[  441.344813][T11338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.364504][T11338] RSP: 002b:00007f8095c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.372969][T11338] RAX: ffffffffffffffda RBX: 00007f8095015fa0 RCX: 00007f8094d9c799
[  441.381083][T11338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  441.389101][T11338] RBP: 00007f8095c47090 R08: 0000000000000000 R09: 0000000000000000
[  441.397199][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.405228][T11338] R13: 00007f8095016038 R14: 00007f8095015fa0 R15: 00007ffe80ad9e38
[  441.413305][T11338]  </TASK>
[  441.438809][ T9358] device 5 left promiscuous mode
[  441.493132][ T9358] device 6 left promiscuous mode
[  441.563383][ T9358] device 7 left promiscuous mode
[  441.637880][ T9358] device 8 left promiscuous mode
[  441.685658][ T9358] device 9 left promiscuous mode
[  441.713478][T11338] Mem-Info:
[  441.716765][T11338] active_anon:21200 inactive_anon:0 isolated_anon:0
[  441.716765][T11338]  active_file:23184 inactive_file:40076 isolated_file:0
[  441.716765][T11338]  unevictable:768 dirty:51 writeback:1
[  441.716765][T11338]  slab_reclaimable:23083 slab_unreclaimable:98962
[  441.716765][T11338]  mapped:31028 shmem:16686 pagetables:630
[  441.716765][T11338]  sec_pagetables:0 bounce:0
[  441.716765][T11338]  kernel_misc_reclaimable:0
[  441.716765][T11338]  free:1297228 free_pcp:9128 free_cma:0
[  441.811432][T11334] device 10 entered promiscuous mode
[  441.843303][T11338] Node 0 active_anon:75928kB inactive_anon:0kB active_file:92736kB inactive_file:160096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124052kB dirty:236kB writeback:0kB shmem:56516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10960kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no
[  441.930045][T11338] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  441.938504][T11337] chnl_net:caif_netlink_parms(): no params data found
[  442.006516][ T9358] tipc: Left network mode
[  442.012503][T11338] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  442.080969][T11338] lowmem_reserve[]: 0 2527 2528 2528 2528
[  442.109610][T11338] Node 0 DMA32 free:1300336kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:67028kB inactive_anon:0kB active_file:92736kB inactive_file:160096kB unevictable:1536kB writepending:236kB present:3129332kB managed:2592976kB mlocked:0kB bounce:0kB free_pcp:9456kB local_pcp:4192kB free_cma:0kB
[  442.172749][T11338] lowmem_reserve[]: 0 0 1 1 1
[  442.183553][T11338] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  442.216287][T11338] lowmem_reserve[]: 0 0 0 0 0
[  442.221291][T11338] Node 1 Normal free:3894920kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22352kB local_pcp:10016kB free_cma:0kB
[  442.252735][T11338] lowmem_reserve[]: 0 0 0 0 0
[  442.257639][T11338] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  442.278114][T11338] Node 0 DMA32: 554*4kB (M) 165*8kB (UME) 88*16kB (UME) 362*32kB (UME) 1490*64kB (UME) 685*128kB (UM) 205*256kB (UM) 67*512kB (UME) 24*1024kB (UME) 15*2048kB (UM) 234*4096kB (UM) = 1300112kB
[  442.300192][T11338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  442.312728][T11338] Node 1 Normal: 258*4kB (UME) 26*8kB (UME) 29*16kB (UE) 39*32kB (UME) 22*64kB (UME) 13*128kB (UM) 3*256kB (UME) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894920kB
[  442.349613][T11338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  442.359717][T11338] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  442.375791][T11363] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2270'.
[  442.376875][T11338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  442.412120][T11363] bridge_slave_1: default FDB implementation only supports local addresses
[  442.492964][T11338] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  442.502510][T11338] 72148 total pagecache pages
[  442.517552][T11338] 0 pages in swap cache
[  442.521783][T11338] Free swap  = 124996kB
[  442.552407][T11338] Total swap = 124996kB
[  442.562530][T11338] 2097051 pages RAM
[  442.570725][T11338] 0 pages HighMem/MovableOnly
[  442.588531][T11337] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.595840][T11338] 415206 pages reserved
[  442.600041][T11338] 0 pages cma reserved
[  442.615906][T11337] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.645482][T11337] device bridge_slave_0 entered promiscuous mode
[  442.868406][T11337] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.893663][T11337] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.937542][T11337] device bridge_slave_1 entered promiscuous mode
[  442.964662][T11374] netlink: 'syz.2.2272': attribute type 10 has an invalid length.
[  442.980153][T11374] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2272'.
[  443.125448][ T4284] Bluetooth: hci1: command 0x0409 tx timeout
[  443.410987][T11381] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  443.463235][T11381] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2274'.
[  443.774188][T11337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.841362][T11337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.497094][T11337] team0: Port device team_slave_0 added
[  444.558193][T11337] team0: Port device team_slave_1 added
[  444.673305][T11337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.707848][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.882439][T11337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.968637][T11337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.029364][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.072873][T11337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.192740][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  445.275289][T11337] device hsr_slave_0 entered promiscuous mode
[  445.293449][T11337] device hsr_slave_1 entered promiscuous mode
[  445.319462][T11337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  445.333530][T11337] Cannot create hsr debugfs directory
[  445.582413][T11422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2284'.
[  445.610484][T11422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2284'.
[  445.742557][T11427] netlink: 'syz.2.2285': attribute type 10 has an invalid length.
[  445.767700][T11427] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2285'.
[  446.189039][T11438] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2288'.
[  446.254628][T11438] netlink: zone id is out of range
[  446.299489][T11438] netlink: zone id is out of range
[  446.335035][T11438] netlink: zone id is out of range
[  446.340358][T11438] netlink: zone id is out of range
[  446.403982][T11438] netlink: zone id is out of range
[  446.409364][T11438] netlink: zone id is out of range
[  446.458213][T11438] netlink: zone id is out of range
[  446.482916][T11438] netlink: zone id is out of range
[  446.488263][T11438] netlink: zone id is out of range
[  446.552847][T11438] netlink: zone id is out of range
[  447.043589][T11453] netlink: 'syz.1.2291': attribute type 10 has an invalid length.
[  447.201917][T11337] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  447.253230][T11337] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  447.272796][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  447.397540][T11337] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  447.591951][T11337] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  448.140377][T11337] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.225738][ T9358] device hsr_slave_0 left promiscuous mode
[  448.256194][ T9358] device hsr_slave_1 left promiscuous mode
[  448.335862][ T9358] device bridge_slave_1 left promiscuous mode
[  448.353853][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.468466][ T9358] device bridge_slave_0 left promiscuous mode
[  448.547475][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.722513][ T9358] device veth1_macvtap left promiscuous mode
[  448.745509][ T9358] device veth0_macvtap left promiscuous mode
[  449.019277][ T9358] team0 (unregistering): Port device geneve1 removed
[  449.352667][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  450.013444][ T9358] team0 (unregistering): Port device team_slave_1 removed
[  450.210208][ T9358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.268202][ T9358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.676805][ T9358] bond0 (unregistering): Released all slaves
[  450.809689][T11490] netlink: 'syz.3.2298': attribute type 10 has an invalid length.
[  450.821741][T11490] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2298'.
[  450.841862][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  450.854714][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  450.874461][T11337] 8021q: adding VLAN 0 to HW filter on device team0
[  450.906992][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  450.926723][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  450.959566][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.966817][ T9356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.056201][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  451.077669][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  451.104097][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  451.135689][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.143077][ T9348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.232996][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  451.263861][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  451.349136][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  451.372017][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  451.383084][T11512] netlink: 'syz.1.2305': attribute type 10 has an invalid length.
[  451.439993][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  451.463015][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  451.486127][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  451.508780][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  451.547949][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  451.585985][T11525] netlink: 'syz.2.2308': attribute type 21 has an invalid length.
[  451.610417][T11337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.657925][T11337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  451.698581][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  451.715498][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  452.736600][T11552] netlink: 'syz.3.2314': attribute type 2 has an invalid length.
[  452.840373][T11552] device 15 entered promiscuous mode
[  452.981368][T11556] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2314'.
[  453.086293][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  453.106546][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  453.145918][T11337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.994952][T11586] netlink: 'syz.1.2320': attribute type 10 has an invalid length.
[  454.306506][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  454.317511][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  454.350109][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  454.359969][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  454.373550][T11337] device veth0_vlan entered promiscuous mode
[  454.381957][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  454.392204][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  454.407173][T11337] device veth1_vlan entered promiscuous mode
[  454.441439][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  454.465014][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  454.475684][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  454.496379][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  454.508906][T11337] device veth0_macvtap entered promiscuous mode
[  454.525828][T11337] device veth1_macvtap entered promiscuous mode
[  454.551358][T11337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.561433][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  454.580821][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  454.596185][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  454.607146][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  454.624841][T11337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  454.634794][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  454.646585][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  454.659191][T11337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.670118][T11337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.681078][T11337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.724408][T11337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.954237][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.994193][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.040104][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  455.127118][ T9348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.135822][ T9348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.158599][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  455.539124][T11619] netlink: 'syz.3.2332': attribute type 10 has an invalid length.
[  455.594016][T11619] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2332'.
[  457.056679][T11658] netlink: 'syz.4.2346': attribute type 10 has an invalid length.
[  457.108496][T11658] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2346'.
[  457.173589][T11665] netlink: 'syz.3.2349': attribute type 2 has an invalid length.
[  457.595176][T11664] netlink: 'syz.1.2350': attribute type 21 has an invalid length.
[  457.607402][T11664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2350'.
[  457.629945][T11665] device 16 entered promiscuous mode
[  457.644029][T11668] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2349'.
[  458.326280][T11698] device syzkaller0 entered promiscuous mode
[  458.400689][T11706] netlink: 'syz.3.2360': attribute type 29 has an invalid length.
[  458.427716][T11706] netlink: 'syz.3.2360': attribute type 29 has an invalid length.
[  458.920341][T11719] netlink: 'syz.4.2365': attribute type 25 has an invalid length.
[  459.304338][T11724] netlink: 'syz.4.2367': attribute type 2 has an invalid length.
[  459.396364][T11724] device 0 entered promiscuous mode
[  459.413616][T11725] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2367'.
[  460.300824][T11738] netlink: 'syz.0.2369': attribute type 10 has an invalid length.
[  460.330873][T11738] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2369'.
[  460.847725][T11758] netlink: 'syz.0.2377': attribute type 25 has an invalid length.
[  461.300642][T11771] netlink: 'syz.1.2383': attribute type 2 has an invalid length.
[  461.369974][T11771] device 11 entered promiscuous mode
[  461.472366][T11771] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.2383'.
[  466.211078][T11804] netlink: 'syz.0.2393': attribute type 25 has an invalid length.
[  467.588865][T11816] netlink: 'syz.4.2397': attribute type 2 has an invalid length.
[  468.635105][T11816] device 1 entered promiscuous mode
[  468.653145][T11817] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2397'.
[  469.011872][T11826] netlink: 'syz.4.2400': attribute type 10 has an invalid length.
[  469.042961][T11826] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2400'.
[  470.844205][T11848] netlink: 'syz.2.2402': attribute type 10 has an invalid length.
[  470.964151][T11848] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2402'.
[  471.304197][T11853] netlink: 'syz.0.2410': attribute type 2 has an invalid length.
[  472.006305][T11853] device 17 entered promiscuous mode
[  472.114950][T11856] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2410'.
[  472.299216][T11865] netlink: 'syz.4.2412': attribute type 10 has an invalid length.
[  472.412450][T11865] team0: Port device geneve1 added
[  472.447408][T11872] netlink: 'syz.2.2414': attribute type 10 has an invalid length.
[  472.475762][T11872] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2414'.
[  472.708989][T11875] netlink: 'syz.0.2415': attribute type 10 has an invalid length.
[  474.006712][T11904] netlink: 'syz.3.2425': attribute type 2 has an invalid length.
[  474.222082][T11904] device 17 entered promiscuous mode
[  474.260911][T11913] FAULT_INJECTION: forcing a failure.
[  474.260911][T11913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.278328][T11908] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2425'.
[  474.301825][T11913] CPU: 0 PID: 11913 Comm: syz.0.2427 Not tainted syzkaller #0
[  474.309458][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  474.319584][T11913] Call Trace:
[  474.322911][T11913]  <TASK>
[  474.325902][T11913]  dump_stack_lvl+0x188/0x24e
[  474.330658][T11913]  ? show_regs_print_info+0x12/0x12
[  474.335925][T11913]  ? load_image+0x400/0x400
[  474.340516][T11913]  ? __lock_acquire+0x7d10/0x7d10
[  474.345635][T11913]  ? snprintf+0xe5/0x140
[  474.350015][T11913]  should_fail_ex+0x399/0x4d0
[  474.354750][T11913]  _copy_to_user+0x2c/0x130
[  474.359414][T11913]  simple_read_from_buffer+0xe3/0x150
[  474.364945][T11913]  proc_fail_nth_read+0x1a6/0x220
[  474.370035][T11913]  ? proc_fault_inject_write+0x310/0x310
[  474.375861][T11913]  ? fsnotify_perm+0x248/0x550
[  474.380725][T11913]  ? proc_fault_inject_write+0x310/0x310
[  474.386417][T11913]  vfs_read+0x2de/0xa00
[  474.390650][T11913]  ? kernel_read+0x1e0/0x1e0
[  474.395310][T11913]  ? __fget_files+0x28/0x4b0
[  474.399982][T11913]  ? __fget_files+0x28/0x4b0
[  474.404632][T11913]  ? __fget_files+0x43d/0x4b0
[  474.409398][T11913]  ? __fdget_pos+0x2ae/0x360
[  474.414149][T11913]  ? ksys_read+0x71/0x250
[  474.418569][T11913]  ksys_read+0x14c/0x250
[  474.422913][T11913]  ? vfs_write+0xa30/0xa30
[  474.427408][T11913]  ? lockdep_hardirqs_on+0x94/0x140
[  474.432674][T11913]  do_syscall_64+0x4c/0xa0
[  474.437153][T11913]  ? clear_bhb_loop+0x60/0xb0
[  474.441886][T11913]  ? clear_bhb_loop+0x60/0xb0
[  474.446715][T11913]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.452671][T11913] RIP: 0033:0x7f8094d5cfce
[  474.457132][T11913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  474.476910][T11913] RSP: 002b:00007f8095c46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  474.485421][T11913] RAX: ffffffffffffffda RBX: 00007f8095c476c0 RCX: 00007f8094d5cfce
[  474.493461][T11913] RDX: 000000000000000f RSI: 00007f8095c470a0 RDI: 0000000000000006
[  474.501505][T11913] RBP: 00007f8095c47090 R08: 0000000000000000 R09: 0000000000000000
[  474.509597][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.511661][T11910] netlink: 'syz.4.2426': attribute type 10 has an invalid length.
[  474.517690][T11913] R13: 00007f8095016038 R14: 00007f8095015fa0 R15: 00007ffe80ad9e38
[  474.517764][T11913]  </TASK>
[  474.563978][T11910] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2426'.
[  475.625467][T11935] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2436'.
[  475.657606][T11935] net_ratelimit: 3660 callbacks suppressed
[  475.657741][T11935] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  475.835518][T11941] netlink: 'syz.0.2437': attribute type 10 has an invalid length.
[  476.104602][T11949] netlink: 'syz.3.2441': attribute type 2 has an invalid length.
[  476.277894][T11949] device 18 entered promiscuous mode
[  476.359210][T11951] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2441'.
[  476.549097][T11955] netlink: 'syz.2.2442': attribute type 1 has an invalid length.
[  477.396587][T11973] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2449'.
[  477.565284][T11980] netlink: 'syz.3.2451': attribute type 21 has an invalid length.
[  477.585191][T11982] netlink: 'syz.0.2452': attribute type 25 has an invalid length.
[  478.135228][T11990] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.2453'.
[  478.153706][T11990] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2453'.
[  478.276111][T11994] netlink: 'syz.4.2455': attribute type 2 has an invalid length.
[  478.426999][T11994] device 2 entered promiscuous mode
[  478.458634][T11997] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2455'.
[  478.756852][T12007] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2460'.
[  478.769906][T12007] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  479.892060][T12026] netlink: 'syz.3.2466': attribute type 2 has an invalid length.
[  479.935685][T12026] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2466'.
[  480.471877][T12042] netlink: 'syz.4.2472': attribute type 2 has an invalid length.
[  480.551766][T12042] device 3 entered promiscuous mode
[  480.574296][T12044] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2472'.
[  481.518633][T12062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  481.526335][T12062] IPv6: NLM_F_CREATE should be set when creating new route
[  481.534612][T12062] IPv6: NLM_F_CREATE should be set when creating new route
[  481.542342][T12062] IPv6: NLM_F_CREATE should be set when creating new route
[  481.799723][T12077] FAULT_INJECTION: forcing a failure.
[  481.799723][T12077] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  481.848736][T12077] CPU: 1 PID: 12077 Comm: syz.4.2484 Not tainted syzkaller #0
[  481.856291][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  481.866404][T12077] Call Trace:
[  481.869728][T12077]  <TASK>
[  481.872705][T12077]  dump_stack_lvl+0x188/0x24e
[  481.877453][T12077]  ? show_regs_print_info+0x12/0x12
[  481.882722][T12077]  ? load_image+0x400/0x400
[  481.887719][T12077]  ? __lock_acquire+0x7d10/0x7d10
[  481.892808][T12077]  ? slab_post_alloc_hook+0x4b/0x480
[  481.898152][T12077]  should_fail_ex+0x399/0x4d0
[  481.902887][T12077]  prepare_alloc_pages+0x1e2/0x5f0
[  481.908118][T12077]  __alloc_pages+0x130/0x4f0
[  481.912784][T12077]  ? zone_statistics+0x170/0x170
[  481.917802][T12077]  __get_free_pages+0x8/0x30
[  481.922453][T12077]  kasan_populate_vmalloc_pte+0x31/0xf0
[  481.928142][T12077]  ? __apply_to_page_range+0x977/0xd10
[  481.933678][T12077]  __apply_to_page_range+0x989/0xd10
[  481.939101][T12077]  ? kasan_populate_vmalloc+0x70/0x70
[  481.944523][T12077]  alloc_vmap_area+0x178f/0x18c0
[  481.949510][T12077]  ? vm_map_ram+0xab0/0xab0
[  481.954045][T12077]  ? rcu_is_watching+0x11/0xa0
[  481.958851][T12077]  __get_vm_area_node+0x158/0x330
[  481.963917][T12077]  __vmalloc_node_range+0x357/0x13b0
[  481.969676][T12077]  ? prealloc_init+0x136/0x860
[  481.974486][T12077]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  481.980511][T12077]  ? free_vm_area+0x50/0x50
[  481.985053][T12077]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  481.990976][T12077]  ? lockdep_hardirqs_on+0x94/0x140
[  481.996301][T12077]  bpf_map_area_alloc+0xd4/0xe0
[  482.001275][T12077]  ? prealloc_init+0x136/0x860
[  482.006107][T12077]  prealloc_init+0x136/0x860
[  482.010826][T12077]  ? __percpu_counter_init+0x21e/0x290
[  482.016336][T12077]  htab_map_alloc+0xc7c/0x1110
[  482.021144][T12077]  map_create+0x534/0x1000
[  482.025640][T12077]  ? bpf_lsm_bpf+0x5/0x10
[  482.030351][T12077]  __sys_bpf+0x38b/0x780
[  482.034641][T12077]  ? bpf_link_show_fdinfo+0x380/0x380
[  482.040056][T12077]  ? lock_chain_count+0x20/0x20
[  482.044949][T12077]  __x64_sys_bpf+0x78/0x90
[  482.049409][T12077]  do_syscall_64+0x4c/0xa0
[  482.053865][T12077]  ? clear_bhb_loop+0x60/0xb0
[  482.058582][T12077]  ? clear_bhb_loop+0x60/0xb0
[  482.063297][T12077]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  482.069219][T12077] RIP: 0033:0x7f6afb79c799
[  482.073725][T12077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.093540][T12077] RSP: 002b:00007f6afc5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  482.102084][T12077] RAX: ffffffffffffffda RBX: 00007f6afba15fa0 RCX: 00007f6afb79c799
[  482.110082][T12077] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[  482.118083][T12077] RBP: 00007f6afc5cc090 R08: 0000000000000000 R09: 0000000000000000
[  482.126113][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.134117][T12077] R13: 00007f6afba16038 R14: 00007f6afba15fa0 R15: 00007ffd275cb9a8
[  482.142135][T12077]  </TASK>
[  482.559582][T12086] netlink: 'syz.3.2486': attribute type 2 has an invalid length.
[  482.667328][T12078] device syzkaller0 entered promiscuous mode
[  482.759950][T12086] device 19 entered promiscuous mode
[  484.504106][T12115] FAULT_INJECTION: forcing a failure.
[  484.504106][T12115] name failslab, interval 1, probability 0, space 0, times 0
[  484.536295][T12115] CPU: 1 PID: 12115 Comm: syz.4.2495 Not tainted syzkaller #0
[  484.543876][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  484.554003][T12115] Call Trace:
[  484.557344][T12115]  <TASK>
[  484.560334][T12115]  dump_stack_lvl+0x188/0x24e
[  484.565112][T12115]  ? show_regs_print_info+0x12/0x12
[  484.570424][T12115]  ? load_image+0x400/0x400
[  484.575028][T12115]  ? __might_sleep+0xd0/0xd0
[  484.579708][T12115]  ? __lock_acquire+0x7d10/0x7d10
[  484.584828][T12115]  ? ___sys_sendmsg+0x2a2/0x360
[  484.589778][T12115]  should_fail_ex+0x399/0x4d0
[  484.594557][T12115]  should_failslab+0x5/0x20
[  484.599186][T12115]  slab_pre_alloc_hook+0x59/0x310
[  484.604313][T12115]  kmem_cache_alloc_node+0x5a/0x320
[  484.609593][T12115]  ? __alloc_skb+0xfc/0x7e0
[  484.614188][T12115]  __alloc_skb+0xfc/0x7e0
[  484.618624][T12115]  netlink_dump+0x1ee/0xd00
[  484.623220][T12115]  ? bpf_sk_storage_diag_alloc+0x222/0x690
[  484.629143][T12115]  ? rcu_is_watching+0x11/0xa0
[  484.634054][T12115]  ? bpf_sk_storage_diag_alloc+0x222/0x690
[  484.639951][T12115]  ? __kmalloc+0xe1/0x240
[  484.644413][T12115]  ? netlink_lookup+0x200/0x200
[  484.649388][T12115]  ? __inet_diag_dump_start+0x80c/0x970
[  484.655059][T12115]  __netlink_dump_start+0x537/0x6f0
[  484.660398][T12115]  inet_diag_rcv_msg_compat+0x207/0x420
[  484.666087][T12115]  ? __inet_diag_dump+0x380/0x380
[  484.671206][T12115]  ? sock_diag_rcv_msg+0x142/0x5f0
[  484.676411][T12115]  ? inet_diag_rcv_msg_compat+0x420/0x420
[  484.682214][T12115]  ? inet_diag_dump_start_compat+0x20/0x20
[  484.688097][T12115]  ? inet_diag_dump+0x50/0x50
[  484.692887][T12115]  ? __inet_diag_dump+0x380/0x380
[  484.698353][T12115]  sock_diag_rcv_msg+0x3cc/0x5f0
[  484.703394][T12115]  netlink_rcv_skb+0x1fb/0x450
[  484.708272][T12115]  ? sock_diag_bind+0xa0/0xa0
[  484.713039][T12115]  ? netlink_ack+0x1170/0x1170
[  484.717924][T12115]  ? netlink_deliver_tap+0x2e/0x1b0
[  484.723214][T12115]  sock_diag_rcv+0x26/0x40
[  484.727704][T12115]  netlink_unicast+0x74d/0x8d0
[  484.732604][T12115]  netlink_sendmsg+0x8ad/0xbd0
[  484.737500][T12115]  ? netlink_getsockopt+0x550/0x550
[  484.742799][T12115]  ? aa_sock_msg_perm+0x94/0x150
[  484.747822][T12115]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  484.753185][T12115]  ? security_socket_sendmsg+0x7c/0xa0
[  484.758747][T12115]  ? netlink_getsockopt+0x550/0x550
[  484.764030][T12115]  ____sys_sendmsg+0x5be/0x970
[  484.769063][T12115]  ? __sys_sendmsg_sock+0x30/0x30
[  484.774178][T12115]  ? __import_iovec+0x315/0x500
[  484.779146][T12115]  ? import_iovec+0x6f/0xa0
[  484.783746][T12115]  ___sys_sendmsg+0x2a2/0x360
[  484.788534][T12115]  ? __sys_sendmsg+0x290/0x290
[  484.793472][T12115]  ? trace_call_bpf+0xbf/0x6b0
[  484.798451][T12115]  __se_sys_sendmsg+0x1bb/0x2a0
[  484.803414][T12115]  ? __x64_sys_sendmsg+0x80/0x80
[  484.808502][T12115]  ? lockdep_hardirqs_on+0x94/0x140
[  484.813881][T12115]  do_syscall_64+0x4c/0xa0
[  484.818417][T12115]  ? clear_bhb_loop+0x60/0xb0
[  484.823166][T12115]  ? clear_bhb_loop+0x60/0xb0
[  484.827937][T12115]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  484.833908][T12115] RIP: 0033:0x7f6afb79c799
[  484.838403][T12115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.858092][T12115] RSP: 002b:00007f6afc5cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.866607][T12115] RAX: ffffffffffffffda RBX: 00007f6afba15fa0 RCX: 00007f6afb79c799
[  484.874662][T12115] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000005
[  484.882804][T12115] RBP: 00007f6afc5cc090 R08: 0000000000000000 R09: 0000000000000000
[  484.890890][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  484.898948][T12115] R13: 00007f6afba16038 R14: 00007f6afba15fa0 R15: 00007ffd275cb9a8
[  484.907058][T12115]  </TASK>
[  487.632372][T12090] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2486'.
[  487.652813][T12102] netlink: 'syz.1.2491': attribute type 25 has an invalid length.
[  488.720701][T12146] netlink: 'syz.0.2508': attribute type 2 has an invalid length.
[  488.794319][T12146] device 18 entered promiscuous mode
[  488.814550][T12149] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2508'.
[  489.026450][T12151] netlink: 'syz.4.2511': attribute type 25 has an invalid length.
[  489.499201][T12161] netlink: 'syz.2.2512': attribute type 10 has an invalid length.
[  489.518136][T12161] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2512'.
[  489.908306][T12182] netlink: 'syz.3.2520': attribute type 2 has an invalid length.
[  490.171829][T12182] device 20 entered promiscuous mode
[  490.185956][T12185] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2520'.
[  492.720141][T12230] netlink: 'syz.2.2534': attribute type 2 has an invalid length.
[  492.817405][T12230] device 10 entered promiscuous mode
[  492.870404][T12233] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.2534'.
[  493.799106][T12254] netlink: 'syz.1.2541': attribute type 2 has an invalid length.
[  493.892830][T12254] netlink: 'syz.1.2541': attribute type 1 has an invalid length.
[  493.966267][T12254] netlink: 185292 bytes leftover after parsing attributes in process `syz.1.2541'.
[  494.856439][T12273] netlink: 'syz.2.2547': attribute type 10 has an invalid length.
[  494.903204][T12273] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2547'.
[  495.005324][T12277] netlink: 'syz.0.2549': attribute type 2 has an invalid length.
[  495.176013][T12277] device 19 entered promiscuous mode
[  495.278893][T12277] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2549'.
[  496.004431][T12303] netlink: 'syz.0.2567': attribute type 2 has an invalid length.
[  496.216208][T12303] device 20 entered promiscuous mode
[  496.243373][T12306] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2567'.
[  496.654703][T12318] netlink: 'syz.4.2561': attribute type 21 has an invalid length.
[  496.712823][T12318] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2561'.
[  496.766790][T12318] netlink: 'syz.4.2561': attribute type 5 has an invalid length.
[  496.798944][T12318] netlink: 'syz.4.2561': attribute type 6 has an invalid length.
[  496.837129][T12318] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2561'.
[  496.990266][T12314] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2561'.
[  497.297687][T12332] FAULT_INJECTION: forcing a failure.
[  497.297687][T12332] name failslab, interval 1, probability 0, space 0, times 0
[  497.376100][T12332] CPU: 0 PID: 12332 Comm: syz.2.2565 Not tainted syzkaller #0
[  497.383648][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  497.393761][T12332] Call Trace:
[  497.397088][T12332]  <TASK>
[  497.400056][T12332]  dump_stack_lvl+0x188/0x24e
[  497.404789][T12332]  ? show_regs_print_info+0x12/0x12
[  497.410058][T12332]  ? load_image+0x400/0x400
[  497.414661][T12332]  ? __might_sleep+0xd0/0xd0
[  497.419297][T12332]  ? __lock_acquire+0x7d10/0x7d10
[  497.424392][T12332]  should_fail_ex+0x399/0x4d0
[  497.429294][T12332]  should_failslab+0x5/0x20
[  497.433858][T12332]  slab_pre_alloc_hook+0x59/0x310
[  497.438992][T12332]  kmem_cache_alloc_node+0x5a/0x320
[  497.444541][T12332]  ? __alloc_skb+0xfc/0x7e0
[  497.449133][T12332]  __alloc_skb+0xfc/0x7e0
[  497.453530][T12332]  ? netlink_autobind+0xda/0x300
[  497.458533][T12332]  netlink_sendmsg+0x654/0xbd0
[  497.463364][T12332]  ? netlink_getsockopt+0x550/0x550
[  497.468635][T12332]  ? aa_sock_msg_perm+0x94/0x150
[  497.473656][T12332]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  497.478989][T12332]  ? security_socket_sendmsg+0x7c/0xa0
[  497.484528][T12332]  ? netlink_getsockopt+0x550/0x550
[  497.489783][T12332]  ____sys_sendmsg+0x5be/0x970
[  497.494626][T12332]  ? __sys_sendmsg_sock+0x30/0x30
[  497.499726][T12332]  ? __import_iovec+0x315/0x500
[  497.504634][T12332]  ? import_iovec+0x6f/0xa0
[  497.509187][T12332]  ___sys_sendmsg+0x2a2/0x360
[  497.513937][T12332]  ? __sys_sendmsg+0x290/0x290
[  497.518802][T12332]  __se_sys_sendmsg+0x1bb/0x2a0
[  497.523715][T12332]  ? __x64_sys_sendmsg+0x80/0x80
[  497.528747][T12332]  ? syscall_enter_from_user_mode+0x2a/0x80
[  497.534704][T12332]  do_syscall_64+0x4c/0xa0
[  497.539188][T12332]  ? clear_bhb_loop+0x60/0xb0
[  497.543908][T12332]  ? clear_bhb_loop+0x60/0xb0
[  497.548617][T12332]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.554538][T12332] RIP: 0033:0x7f968c39c799
[  497.559029][T12332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.578670][T12332] RSP: 002b:00007f968d2ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.587145][T12332] RAX: ffffffffffffffda RBX: 00007f968c615fa0 RCX: 00007f968c39c799
[  497.595155][T12332] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007
[  497.603159][T12332] RBP: 00007f968d2ac090 R08: 0000000000000000 R09: 0000000000000000
[  497.611160][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.619158][T12332] R13: 00007f968c616038 R14: 00007f968c615fa0 R15: 00007ffc313fcfc8
[  497.627173][T12332]  </TASK>
[  497.922313][T12341] netlink: 'syz.1.2570': attribute type 29 has an invalid length.
[  498.071852][T12341] netlink: 'syz.1.2570': attribute type 29 has an invalid length.
[  498.529051][T12357] netlink: 'syz.3.2573': attribute type 2 has an invalid length.
[  498.675011][T12357] device 21 entered promiscuous mode
[  498.724307][T12359] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2573'.
[  499.028894][T12369] netlink: 'syz.1.2577': attribute type 25 has an invalid length.
[  499.074309][T12372] FAULT_INJECTION: forcing a failure.
[  499.074309][T12372] name failslab, interval 1, probability 0, space 0, times 0
[  499.107540][T12372] CPU: 0 PID: 12372 Comm: syz.3.2578 Not tainted syzkaller #0
[  499.115090][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  499.125637][T12372] Call Trace:
[  499.128973][T12372]  <TASK>
[  499.131952][T12372]  dump_stack_lvl+0x188/0x24e
[  499.136696][T12372]  ? show_regs_print_info+0x12/0x12
[  499.141960][T12372]  ? load_image+0x400/0x400
[  499.146525][T12372]  ? __might_sleep+0xd0/0xd0
[  499.151172][T12372]  ? __lock_acquire+0x7d10/0x7d10
[  499.156259][T12372]  should_fail_ex+0x399/0x4d0
[  499.160989][T12372]  should_failslab+0x5/0x20
[  499.165551][T12372]  slab_pre_alloc_hook+0x59/0x310
[  499.170638][T12372]  ? apparmor_sk_alloc_security+0x74/0x100
[  499.176559][T12372]  __kmem_cache_alloc_node+0x4f/0x260
[  499.182005][T12372]  ? apparmor_sk_alloc_security+0x74/0x100
[  499.187877][T12372]  kmalloc_trace+0x26/0xe0
[  499.192361][T12372]  apparmor_sk_alloc_security+0x74/0x100
[  499.198061][T12372]  security_sk_alloc+0x6a/0xa0
[  499.202894][T12372]  sk_prot_alloc+0x101/0x210
[  499.207528][T12372]  ? sk_alloc+0x20/0x340
[  499.211836][T12372]  sk_alloc+0x36/0x340
[  499.215952][T12372]  ? bpf_ctx_init+0x163/0x1a0
[  499.220675][T12372]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  499.226281][T12372]  bpf_prog_test_run_skb+0x35e/0x12a0
[  499.231712][T12372]  ? __fget_files+0x28/0x4b0
[  499.236383][T12372]  ? __fget_files+0x43d/0x4b0
[  499.241140][T12372]  ? cpu_online+0xa0/0xa0
[  499.245533][T12372]  bpf_prog_test_run+0x31e/0x390
[  499.250711][T12372]  __sys_bpf+0x62b/0x780
[  499.255031][T12372]  ? bpf_link_show_fdinfo+0x380/0x380
[  499.260548][T12372]  ? lock_chain_count+0x20/0x20
[  499.265445][T12372]  __x64_sys_bpf+0x78/0x90
[  499.269903][T12372]  do_syscall_64+0x4c/0xa0
[  499.274402][T12372]  ? clear_bhb_loop+0x60/0xb0
[  499.279107][T12372]  ? clear_bhb_loop+0x60/0xb0
[  499.283824][T12372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  499.289832][T12372] RIP: 0033:0x7faeb379c799
[  499.294372][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.314037][T12372] RSP: 002b:00007faeb19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  499.322503][T12372] RAX: ffffffffffffffda RBX: 00007faeb3a16090 RCX: 00007faeb379c799
[  499.330606][T12372] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  499.338780][T12372] RBP: 00007faeb19f6090 R08: 0000000000000000 R09: 0000000000000000
[  499.346790][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.355040][T12372] R13: 00007faeb3a16128 R14: 00007faeb3a16090 R15: 00007ffd1229cf08
[  499.363081][T12372]  </TASK>
[  499.850935][T12383] netlink: 'syz.1.2582': attribute type 21 has an invalid length.
[  499.874990][T12383] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2582'.
[  499.893372][T12383] netlink: 'syz.1.2582': attribute type 5 has an invalid length.
[  499.914367][T12383] netlink: 'syz.1.2582': attribute type 6 has an invalid length.
[  499.954993][T12386] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2582'.
[  500.014541][T12383] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2582'.
[  500.077696][T12393] netlink: 'syz.3.2585': attribute type 2 has an invalid length.
[  500.152402][T12393] device 22 entered promiscuous mode
[  500.209237][T12394] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2585'.
[  501.111821][T12408] netlink: 'syz.0.2588': attribute type 2 has an invalid length.
[  501.278388][T12408] device 21 entered promiscuous mode
[  501.413361][T12407] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2588'.
[  501.436057][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  501.442537][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  503.334674][T12448] netlink: 'syz.3.2604': attribute type 2 has an invalid length.
[  503.451124][T12448] device 23 entered promiscuous mode
[  503.474173][T12451] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2604'.
[  503.895341][T12455] netlink: 'syz.2.2601': attribute type 3 has an invalid length.
[  503.962983][T12455] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2601'.
[  504.025841][T12457] netlink: 'syz.0.2606': attribute type 25 has an invalid length.
[  504.660176][T12472] netlink: 'syz.4.2612': attribute type 10 has an invalid length.
[  504.773066][T12472] device geneve0 entered promiscuous mode
[  504.956649][T12472] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  505.355079][T12491] netlink: 'syz.4.2618': attribute type 2 has an invalid length.
[  505.418830][T12493] netlink: 'syz.3.2619': attribute type 2 has an invalid length.
[  505.461923][T12491] device 4 entered promiscuous mode
[  505.501801][T12494] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2618'.
[  505.653539][T12493] device 24 entered promiscuous mode
[  506.104664][T12502] netlink: 'syz.4.2621': attribute type 25 has an invalid length.
[  506.551786][T12504] netlink: 'syz.1.2623': attribute type 2 has an invalid length.
[  506.581083][T12504] netlink: 'syz.1.2623': attribute type 8 has an invalid length.
[  506.618062][T12504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2623'.
[  506.869909][T12515] netlink: 'syz.3.2626': attribute type 10 has an invalid length.
[  506.891017][T12515] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2626'.
[  506.944400][T12518] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2627'.
[  506.962811][T12518] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2627'.
[  507.059908][T12518] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2627'.
[  507.484167][T12527] device 12 entered promiscuous mode
[  507.507071][T12529] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.2631'.
[  507.895669][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2637'.
[  508.382313][T12555] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2640'.
[  508.796404][T12560] validate_nla: 5 callbacks suppressed
[  508.796426][T12560] netlink: 'syz.3.2641': attribute type 10 has an invalid length.
[  509.071738][T12568] netlink: 'syz.0.2645': attribute type 2 has an invalid length.
[  509.085752][T12569] __nla_validate_parse: 1 callbacks suppressed
[  509.085770][T12569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'.
[  509.203981][T12568] device 22 entered promiscuous mode
[  509.220882][T12569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'.
[  509.240742][T12570] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2645'.
[  509.301036][T12571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'.
[  509.320871][T12574] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'.
[  510.153399][T12597] netlink: 'syz.0.2653': attribute type 10 has an invalid length.
[  510.184533][T12597] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2653'.
[  510.919979][T12607] netlink: 'syz.0.2655': attribute type 25 has an invalid length.
[  510.990864][T12611] netlink: 'syz.2.2657': attribute type 10 has an invalid length.
[  511.105140][T12611] device hsr0 entered promiscuous mode
[  511.339306][T12611] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  511.360179][T12611] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  511.382022][T12611] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  511.398453][T12611] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  511.419060][T12618] netlink: 'syz.3.2659': attribute type 10 has an invalid length.
[  511.434455][T12618] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  511.466109][T12618] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  511.494884][T12618] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  511.524032][T12618] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  511.694957][T12628] netlink: 'syz.2.2663': attribute type 2 has an invalid length.
[  511.762511][T12628] device 11 entered promiscuous mode
[  511.798181][T12629] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.2663'.
[  511.946538][T12634] netlink: 'syz.4.2665': attribute type 10 has an invalid length.
[  511.992719][T12634] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2665'.
[  513.173343][T12661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2674'.
[  514.054304][T12681] netlink: 'syz.4.2678': attribute type 2 has an invalid length.
[  514.147876][T12681] device 5 entered promiscuous mode
[  514.184463][T12686] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2678'.
[  514.220238][T12687] netlink: 'syz.0.2679': attribute type 10 has an invalid length.
[  514.248131][T12687] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2679'.
[  514.977576][T12704] netlink: 'syz.1.2686': attribute type 25 has an invalid length.
[  515.310797][T12715] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2691'.
[  515.572432][T12724] netlink: 'syz.4.2693': attribute type 2 has an invalid length.
[  515.943223][T12726] netlink: 'syz.2.2694': attribute type 10 has an invalid length.
[  515.969915][T12726] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2694'.
[  516.109212][T12724] device 6 entered promiscuous mode
[  516.136169][T12727] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.2693'.
[  516.462016][T12745] netlink: 'syz.1.2701': attribute type 25 has an invalid length.
[  517.002227][T12758] netlink: 'syz.2.2706': attribute type 10 has an invalid length.
[  517.078094][T12758] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2706'.
[  517.361218][T12762] netlink: 'syz.1.2707': attribute type 10 has an invalid length.
[  517.371187][T12762] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2707'.
[  517.686813][T12772] netlink: 'syz.3.2710': attribute type 2 has an invalid length.
[  517.738628][T12773] netlink: 'syz.2.2711': attribute type 2 has an invalid length.
[  517.810772][T12772] device 25 entered promiscuous mode
[  518.025079][T12773] device 12 entered promiscuous mode
[  518.035005][T12778] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.2711'.
[  518.206877][T12784] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2713'.
[  518.295381][T12790] FAULT_INJECTION: forcing a failure.
[  518.295381][T12790] name failslab, interval 1, probability 0, space 0, times 0
[  518.315323][T12790] CPU: 1 PID: 12790 Comm: syz.0.2715 Not tainted syzkaller #0
[  518.322872][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  518.332977][T12790] Call Trace:
[  518.336297][T12790]  <TASK>
[  518.339274][T12790]  dump_stack_lvl+0x188/0x24e
[  518.344039][T12790]  ? show_regs_print_info+0x12/0x12
[  518.349306][T12790]  ? load_image+0x400/0x400
[  518.353906][T12790]  ? __might_sleep+0xd0/0xd0
[  518.358543][T12790]  ? __lock_acquire+0x7d10/0x7d10
[  518.363635][T12790]  should_fail_ex+0x399/0x4d0
[  518.368363][T12790]  should_failslab+0x5/0x20
[  518.372919][T12790]  slab_pre_alloc_hook+0x59/0x310
[  518.378003][T12790]  ? apparmor_sk_alloc_security+0x74/0x100
[  518.383875][T12790]  __kmem_cache_alloc_node+0x4f/0x260
[  518.389320][T12790]  ? apparmor_sk_alloc_security+0x74/0x100
[  518.395289][T12790]  kmalloc_trace+0x26/0xe0
[  518.399788][T12790]  apparmor_sk_alloc_security+0x74/0x100
[  518.405488][T12790]  security_sk_alloc+0x6a/0xa0
[  518.410336][T12790]  sk_prot_alloc+0x101/0x210
[  518.414995][T12790]  ? sk_alloc+0x20/0x340
[  518.419304][T12790]  sk_alloc+0x36/0x340
[  518.423427][T12790]  ? bpf_ctx_init+0x163/0x1a0
[  518.428160][T12790]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  518.433761][T12790]  bpf_prog_test_run_skb+0x35e/0x12a0
[  518.439201][T12790]  ? __fget_files+0x28/0x4b0
[  518.443853][T12790]  ? __fget_files+0x43d/0x4b0
[  518.448600][T12790]  ? cpu_online+0xa0/0xa0
[  518.453061][T12790]  bpf_prog_test_run+0x31e/0x390
[  518.458056][T12790]  __sys_bpf+0x62b/0x780
[  518.462347][T12790]  ? bpf_link_show_fdinfo+0x380/0x380
[  518.467793][T12790]  ? lock_chain_count+0x20/0x20
[  518.472714][T12790]  __x64_sys_bpf+0x78/0x90
[  518.477191][T12790]  do_syscall_64+0x4c/0xa0
[  518.481659][T12790]  ? clear_bhb_loop+0x60/0xb0
[  518.486406][T12790]  ? clear_bhb_loop+0x60/0xb0
[  518.491144][T12790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  518.497122][T12790] RIP: 0033:0x7f8094d9c799
[  518.501581][T12790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.521247][T12790] RSP: 002b:00007f8095c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  518.529721][T12790] RAX: ffffffffffffffda RBX: 00007f8095016090 RCX: 00007f8094d9c799
[  518.537921][T12790] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  518.545946][T12790] RBP: 00007f8095c26090 R08: 0000000000000000 R09: 0000000000000000
[  518.553966][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.561986][T12790] R13: 00007f8095016128 R14: 00007f8095016090 R15: 00007ffe80ad9e38
[  518.570037][T12790]  </TASK>
[  518.665065][T12789] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.687173][T12789] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.097911][T12803] validate_nla: 1 callbacks suppressed
[  519.097965][T12803] netlink: 'syz.3.2719': attribute type 10 has an invalid length.
[  519.127232][T12803] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2719'.
[  519.387082][T12817] netlink: 'syz.3.2723': attribute type 10 has an invalid length.
[  519.425174][T12817] __nla_validate_parse: 1 callbacks suppressed
[  519.425192][T12817] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2723'.
[  519.516970][T12820] netlink: 'syz.2.2726': attribute type 2 has an invalid length.
[  519.626875][T12820] device 13 entered promiscuous mode
[  519.645111][T12821] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.2726'.
[  519.881657][T12830] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2728'.
[  520.746901][T12842] netlink: 'syz.0.2732': attribute type 25 has an invalid length.
[  520.819514][T12844] netlink: 'syz.1.2733': attribute type 10 has an invalid length.
[  520.846677][T12844] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2733'.
[  521.099367][T12854] netlink: 'syz.3.2737': attribute type 2 has an invalid length.
[  521.118341][T12857] netlink: 'syz.0.2738': attribute type 10 has an invalid length.
[  521.240230][T12854] device 0 entered promiscuous mode
[  521.522963][T12860] netlink: 'syz.1.2739': attribute type 2 has an invalid length.
[  521.626624][T12860] device 13 entered promiscuous mode
[  521.674392][T12862] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.2739'.
[  522.069638][T12881] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2744'.
[  522.165586][T12884] netlink: 'syz.0.2746': attribute type 25 has an invalid length.
[  522.461834][T12892] netlink: 'syz.0.2748': attribute type 25 has an invalid length.
[  522.515445][T12890] IPv6: Can't replace route, no match found
[  522.700446][T12896] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2749'.
[  523.245862][T12911] device 26 entered promiscuous mode
[  523.406163][T12898] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2750'.
[  523.953358][T12933] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2761'.
[  524.638156][T12949] validate_nla: 4 callbacks suppressed
[  524.638197][T12949] netlink: 'syz.2.2767': attribute type 2 has an invalid length.
[  524.821844][T12949] device 14 entered promiscuous mode
[  524.957198][T12957] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2769'.
[  525.091576][T12964] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2772'.
[  525.222460][T12966] netlink: 'syz.0.2773': attribute type 10 has an invalid length.
[  525.271223][T12968] netlink: 'syz.3.2774': attribute type 10 has an invalid length.
[  525.306163][T12968] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2774'.
[  525.417374][T12972] netlink: 'syz.1.2776': attribute type 25 has an invalid length.
[  526.127162][T12987] netlink: 'syz.3.2780': attribute type 2 has an invalid length.
[  526.629295][T12987] device 27 entered promiscuous mode
[  527.112434][T13008] netlink: 'syz.3.2788': attribute type 10 has an invalid length.
[  527.126795][T13008] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2788'.
[  527.801409][T13030] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2795'.
[  528.052764][T13033] FAULT_INJECTION: forcing a failure.
[  528.052764][T13033] name failslab, interval 1, probability 0, space 0, times 0
[  528.066539][T13033] CPU: 1 PID: 13033 Comm: syz.2.2797 Not tainted syzkaller #0
[  528.074072][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  528.084177][T13033] Call Trace:
[  528.087581][T13033]  <TASK>
[  528.090566][T13033]  dump_stack_lvl+0x188/0x24e
[  528.095312][T13033]  ? show_regs_print_info+0x12/0x12
[  528.100589][T13033]  ? load_image+0x400/0x400
[  528.105163][T13033]  ? __might_sleep+0xd0/0xd0
[  528.109807][T13033]  ? __lock_acquire+0x7d10/0x7d10
[  528.114899][T13033]  should_fail_ex+0x399/0x4d0
[  528.119639][T13033]  should_failslab+0x5/0x20
[  528.124202][T13033]  slab_pre_alloc_hook+0x59/0x310
[  528.129278][T13033]  ? __get_vm_area_node+0x122/0x330
[  528.134792][T13033]  __kmem_cache_alloc_node+0x4f/0x260
[  528.140222][T13033]  ? __get_vm_area_node+0x122/0x330
[  528.145507][T13033]  kmalloc_node_trace+0x22/0xe0
[  528.150441][T13033]  __get_vm_area_node+0x122/0x330
[  528.155514][T13033]  ? __local_bh_enable_ip+0x136/0x1c0
[  528.160937][T13033]  __vmalloc_node_range+0x357/0x13b0
[  528.166263][T13033]  ? netlink_sendmsg+0x5ec/0xbd0
[  528.171240][T13033]  ? netlink_insert+0x1034/0x13c0
[  528.176328][T13033]  ? free_vm_area+0x50/0x50
[  528.180874][T13033]  ? netlink_sendmsg+0x5ec/0xbd0
[  528.185945][T13033]  vmalloc+0x75/0x80
[  528.189875][T13033]  ? netlink_sendmsg+0x5ec/0xbd0
[  528.194856][T13033]  netlink_sendmsg+0x5ec/0xbd0
[  528.199666][T13033]  ? lockdep_hardirqs_on+0x94/0x140
[  528.204899][T13033]  ? netlink_getsockopt+0x550/0x550
[  528.210136][T13033]  ? netlink_getsockopt+0x550/0x550
[  528.215466][T13033]  ? netlink_getsockopt+0x550/0x550
[  528.220711][T13033]  ____sys_sendmsg+0x5be/0x970
[  528.225565][T13033]  ? __sys_sendmsg_sock+0x30/0x30
[  528.230834][T13033]  ? __import_iovec+0x315/0x500
[  528.235733][T13033]  ? import_iovec+0x6f/0xa0
[  528.240625][T13033]  ___sys_sendmsg+0x2a2/0x360
[  528.245353][T13033]  ? __sys_sendmsg+0x290/0x290
[  528.250222][T13033]  ? ktime_get_real_ts64+0x440/0x440
[  528.255564][T13033]  __se_sys_sendmsg+0x1bb/0x2a0
[  528.260544][T13033]  ? __x64_sys_sendmsg+0x80/0x80
[  528.265615][T13033]  ? lockdep_hardirqs_on+0x94/0x140
[  528.270844][T13033]  do_syscall_64+0x4c/0xa0
[  528.275294][T13033]  ? clear_bhb_loop+0x60/0xb0
[  528.280004][T13033]  ? clear_bhb_loop+0x60/0xb0
[  528.284714][T13033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.290646][T13033] RIP: 0033:0x7f968c39c799
[  528.295085][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.314718][T13033] RSP: 002b:00007f968d28b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.323180][T13033] RAX: ffffffffffffffda RBX: 00007f968c616090 RCX: 00007f968c39c799
[  528.331199][T13033] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  528.339214][T13033] RBP: 00007f968d28b090 R08: 0000000000000000 R09: 0000000000000000
[  528.347219][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.355223][T13033] R13: 00007f968c616128 R14: 00007f968c616090 R15: 00007ffc313fcfc8
[  528.363241][T13033]  </TASK>
[  528.384543][T13033] syz.2.2797: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  528.405191][T13033] CPU: 0 PID: 13033 Comm: syz.2.2797 Not tainted syzkaller #0
[  528.412820][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  528.422930][T13033] Call Trace:
[  528.426253][T13033]  <TASK>
[  528.429225][T13033]  dump_stack_lvl+0x188/0x24e
[  528.433970][T13033]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  528.440276][T13033]  ? show_regs_print_info+0x12/0x12
[  528.445539][T13033]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  528.451797][T13033]  ? dump_stack+0x5/0x12
[  528.456106][T13033]  warn_alloc+0x242/0x330
[  528.460524][T13033]  ? __get_vm_area_node+0x122/0x330
[  528.465809][T13033]  ? zone_watermark_ok_safe+0x270/0x270
[  528.471411][T13033]  ? rcu_is_watching+0x11/0xa0
[  528.476678][T13033]  ? __get_vm_area_node+0x318/0x330
[  528.481952][T13033]  ? __local_bh_enable_ip+0x136/0x1c0
[  528.487393][T13033]  __vmalloc_node_range+0x37c/0x13b0
[  528.492903][T13033]  ? netlink_insert+0x1034/0x13c0
[  528.498031][T13033]  ? free_vm_area+0x50/0x50
[  528.502692][T13033]  ? netlink_sendmsg+0x5ec/0xbd0
[  528.507694][T13033]  vmalloc+0x75/0x80
[  528.511654][T13033]  ? netlink_sendmsg+0x5ec/0xbd0
[  528.516651][T13033]  netlink_sendmsg+0x5ec/0xbd0
[  528.521576][T13033]  ? lockdep_hardirqs_on+0x94/0x140
[  528.526836][T13033]  ? netlink_getsockopt+0x550/0x550
[  528.532099][T13033]  ? netlink_getsockopt+0x550/0x550
[  528.537517][T13033]  ? netlink_getsockopt+0x550/0x550
[  528.542788][T13033]  ____sys_sendmsg+0x5be/0x970
[  528.547638][T13033]  ? __sys_sendmsg_sock+0x30/0x30
[  528.552718][T13033]  ? __import_iovec+0x315/0x500
[  528.557629][T13033]  ? import_iovec+0x6f/0xa0
[  528.562256][T13033]  ___sys_sendmsg+0x2a2/0x360
[  528.566991][T13033]  ? __sys_sendmsg+0x290/0x290
[  528.571914][T13033]  ? ktime_get_real_ts64+0x440/0x440
[  528.577364][T13033]  __se_sys_sendmsg+0x1bb/0x2a0
[  528.582276][T13033]  ? __x64_sys_sendmsg+0x80/0x80
[  528.587283][T13033]  ? lockdep_hardirqs_on+0x94/0x140
[  528.592562][T13033]  do_syscall_64+0x4c/0xa0
[  528.597204][T13033]  ? clear_bhb_loop+0x60/0xb0
[  528.601932][T13033]  ? clear_bhb_loop+0x60/0xb0
[  528.606666][T13033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.612627][T13033] RIP: 0033:0x7f968c39c799
[  528.617091][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.636943][T13033] RSP: 002b:00007f968d28b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.645426][T13033] RAX: ffffffffffffffda RBX: 00007f968c616090 RCX: 00007f968c39c799
[  528.653509][T13033] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  528.661564][T13033] RBP: 00007f968d28b090 R08: 0000000000000000 R09: 0000000000000000
[  528.669587][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.677611][T13033] R13: 00007f968c616128 R14: 00007f968c616090 R15: 00007ffc313fcfc8
[  528.685656][T13033]  </TASK>
[  528.713541][T13033] Mem-Info:
[  528.729632][T13033] active_anon:6886 inactive_anon:0 isolated_anon:0
[  528.729632][T13033]  active_file:23184 inactive_file:40111 isolated_file:0
[  528.729632][T13033]  unevictable:768 dirty:434 writeback:0
[  528.729632][T13033]  slab_reclaimable:23175 slab_unreclaimable:100644
[  528.729632][T13033]  mapped:30633 shmem:2386 pagetables:670
[  528.729632][T13033]  sec_pagetables:0 bounce:0
[  528.729632][T13033]  kernel_misc_reclaimable:0
[  528.729632][T13033]  free:1309193 free_pcp:8217 free_cma:0
[  528.842055][T13033] Node 0 active_anon:28764kB inactive_anon:0kB active_file:92736kB inactive_file:160236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123472kB dirty:1748kB writeback:0kB shmem:8988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no
[  528.888383][T13033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  528.926088][T13033] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  528.957751][T13036] netlink: 'syz.1.2798': attribute type 10 has an invalid length.
[  529.357443][T13052] netlink: 'syz.1.2804': attribute type 25 has an invalid length.
[  529.706838][T13033] lowmem_reserve[]: 0 2527 2528 2528 2528
[  529.718792][T13033] Node 0 DMA32 free:1312896kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:41268kB inactive_anon:0kB active_file:92736kB inactive_file:160236kB unevictable:1536kB writepending:1760kB present:3129332kB managed:2592976kB mlocked:0kB bounce:0kB free_pcp:9552kB local_pcp:5664kB free_cma:0kB
[  529.781330][T13033] lowmem_reserve[]: 0 0 1 1 1
[  529.801178][T13033] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  529.920135][T13033] lowmem_reserve[]: 0 0 0 0 0
[  529.930276][T13033] Node 1 Normal free:3894920kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22352kB local_pcp:12336kB free_cma:0kB
[  529.995060][T13033] lowmem_reserve[]: 0 0 0 0 0
[  530.007501][T13033] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  530.093757][T13033] Node 0 DMA32: 4*4kB (UME) 1*8kB (E) 803*16kB (M) 812*32kB (UM) 1336*64kB (UM) 684*128kB (UM) 205*256kB (UME) 73*512kB (UM) 25*1024kB (UME) 19*2048kB (UM) 230*4096kB (UM) = 1308360kB
[  530.134049][T13033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  530.154398][T13033] Node 1 Normal: 258*4kB (UME) 26*8kB (UME) 29*16kB (UE) 39*32kB (UME) 22*64kB (UME) 13*128kB (UM) 3*256kB (UME) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894920kB
[  530.283249][T13033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  530.303237][T13033] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  530.337043][T13033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  530.380134][T13033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  530.415023][T13033] 71070 total pagecache pages
[  530.419786][T13033] 0 pages in swap cache
[  530.458654][T13033] Free swap  = 124996kB
[  530.463186][T13033] Total swap = 124996kB
[  530.467384][T13033] 2097051 pages RAM
[  530.471228][T13033] 0 pages HighMem/MovableOnly
[  530.522800][T13033] 415206 pages reserved
[  530.527050][T13033] 0 pages cma reserved
[  531.420322][T13074] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2810'.
[  531.452722][T13074] bridge_slave_1: default FDB implementation only supports local addresses
[  531.785837][T13086] netlink: 'syz.0.2814': attribute type 10 has an invalid length.
[  532.015613][T13094] FAULT_INJECTION: forcing a failure.
[  532.015613][T13094] name failslab, interval 1, probability 0, space 0, times 0
[  532.068905][T13094] CPU: 1 PID: 13094 Comm: syz.3.2816 Not tainted syzkaller #0
[  532.076497][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  532.086604][T13094] Call Trace:
[  532.089930][T13094]  <TASK>
[  532.092916][T13094]  dump_stack_lvl+0x188/0x24e
[  532.097667][T13094]  ? sctp_sendmsg+0x15b0/0x2940
[  532.102584][T13094]  ? ___sys_sendmsg+0x2a2/0x360
[  532.107507][T13094]  ? show_regs_print_info+0x12/0x12
[  532.112775][T13094]  ? load_image+0x400/0x400
[  532.117363][T13094]  should_fail_ex+0x399/0x4d0
[  532.122112][T13094]  should_failslab+0x5/0x20
[  532.126681][T13094]  slab_pre_alloc_hook+0x59/0x310
[  532.131794][T13094]  ? sctp_add_bind_addr+0x89/0x350
[  532.137046][T13094]  __kmem_cache_alloc_node+0x4f/0x260
[  532.142504][T13094]  ? sctp_add_bind_addr+0x89/0x350
[  532.147694][T13094]  kmalloc_trace+0x26/0xe0
[  532.152190][T13094]  sctp_add_bind_addr+0x89/0x350
[  532.157206][T13094]  sctp_copy_local_addr_list+0x311/0x4e0
[  532.162910][T13094]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  532.168705][T13094]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  532.174850][T13094]  ? sctp_v4_is_any+0x31/0x50
[  532.179590][T13094]  ? sctp_copy_one_addr+0x93/0x660
[  532.184776][T13094]  sctp_bind_addr_copy+0xaf/0x3c0
[  532.189873][T13094]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  532.196266][T13094]  sctp_connect_new_asoc+0x2f5/0x6a0
[  532.201633][T13094]  ? __sctp_connect+0xd80/0xd80
[  532.206554][T13094]  ? __local_bh_enable_ip+0x136/0x1c0
[  532.211981][T13094]  ? _local_bh_enable+0xa0/0xa0
[  532.216893][T13094]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  532.222773][T13094]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  532.228676][T13094]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  532.234310][T13094]  ? security_sctp_bind_connect+0x85/0xb0
[  532.240125][T13094]  sctp_sendmsg+0x15b0/0x2940
[  532.244895][T13094]  ? trace_event_raw_event_lock+0x250/0x250
[  532.250873][T13094]  ? aa_sk_perm+0x781/0x950
[  532.255453][T13094]  ? sctp_getsockopt+0x8a0/0x8a0
[  532.260546][T13094]  ? __might_fault+0xa6/0x120
[  532.265302][T13094]  ? aa_af_perm+0x340/0x340
[  532.269869][T13094]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  532.276390][T13094]  ? inet_sendmsg+0x78/0x2f0
[  532.281055][T13094]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  532.286744][T13094]  ? security_socket_sendmsg+0x7c/0xa0
[  532.292345][T13094]  ? inet_send_prepare+0x260/0x260
[  532.297541][T13094]  ____sys_sendmsg+0x5be/0x970
[  532.302397][T13094]  ? __sys_sendmsg_sock+0x30/0x30
[  532.307578][T13094]  ? __import_iovec+0x315/0x500
[  532.312507][T13094]  ? import_iovec+0x6f/0xa0
[  532.317077][T13094]  ___sys_sendmsg+0x2a2/0x360
[  532.321837][T13094]  ? __sys_sendmsg+0x290/0x290
[  532.326712][T13094]  ? __lock_acquire+0x7d10/0x7d10
[  532.331855][T13094]  __se_sys_sendmsg+0x1bb/0x2a0
[  532.336866][T13094]  ? ct_nmi_exit+0x145/0x1c0
[  532.341513][T13094]  ? __x64_sys_sendmsg+0x80/0x80
[  532.346556][T13094]  ? lockdep_hardirqs_on+0x94/0x140
[  532.351825][T13094]  do_syscall_64+0x4c/0xa0
[  532.356315][T13094]  ? clear_bhb_loop+0x60/0xb0
[  532.361052][T13094]  ? clear_bhb_loop+0x60/0xb0
[  532.365795][T13094]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  532.371740][T13094] RIP: 0033:0x7faeb379c799
[  532.376212][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  532.395884][T13094] RSP: 002b:00007faeb19f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  532.404547][T13094] RAX: ffffffffffffffda RBX: 00007faeb3a16090 RCX: 00007faeb379c799
[  532.412581][T13094] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003
[  532.420609][T13094] RBP: 00007faeb19f6090 R08: 0000000000000000 R09: 0000000000000000
[  532.428639][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.436665][T13094] R13: 00007faeb3a16128 R14: 00007faeb3a16090 R15: 00007ffd1229cf08
[  532.444815][T13094]  </TASK>
[  532.876017][T13100] netlink: 'syz.1.2817': attribute type 25 has an invalid length.
[  533.760057][T13114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2823'.
[  534.061392][T13124] netlink: 'syz.2.2825': attribute type 2 has an invalid length.
[  534.230476][T13124] device 15 entered promiscuous mode
[  534.688530][T13129] netlink: 'syz.4.2827': attribute type 21 has an invalid length.
[  534.745246][T13129] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2827'.
[  534.757970][T13131] netlink: 'syz.4.2827': attribute type 3 has an invalid length.
[  534.813682][T13131] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2827'.
[  534.856755][T13129] netlink: 'syz.4.2827': attribute type 4 has an invalid length.
[  534.908959][T13129] netlink: 'syz.4.2827': attribute type 5 has an invalid length.
[  534.951926][T13129] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2827'.
[  535.002881][T13146] netlink: 'syz.2.2831': attribute type 10 has an invalid length.
[  537.579062][T13163] netlink: 'syz.1.2837': attribute type 10 has an invalid length.
[  537.707824][T13163] team0: Device wlan1 is of different type
[  538.070305][T13167] netlink: 'syz.4.2838': attribute type 17 has an invalid length.
[  538.091940][T13167] netlink: 'syz.4.2838': attribute type 16 has an invalid length.
[  538.233255][T13167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2838'.
[  538.506926][T13176] netlink: 'syz.1.2841': attribute type 2 has an invalid length.
[  538.659588][T13176] device 14 entered promiscuous mode
[  539.187546][T13150] delete_channel: no stack
[  539.945622][T13185] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2845'.
[  539.983672][T13185] netlink: 'syz.2.2845': attribute type 1 has an invalid length.
[  539.985763][T13191] netlink: 'syz.2.2845': attribute type 1 has an invalid length.
[  540.020767][T13188] device aaaaaaaaaaaaaaa entered promiscuous mode
[  540.058293][T13185] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2845'.
[  540.123083][T13191] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2845'.
[  540.553662][T13200] netlink: 'syz.2.2849': attribute type 10 has an invalid length.
[  540.635107][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  540.659023][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  540.668284][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  540.679091][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  540.692929][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  540.700488][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  540.831102][ T9356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.934759][ T9356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.947507][T13210] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  541.036814][ T9356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.085686][T13206] chnl_net:caif_netlink_parms(): no params data found
[  541.124710][T13215] netlink: 'syz.1.2853': attribute type 2 has an invalid length.
[  541.160861][ T9356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.186586][T13217] netlink: 'syz.0.2852': attribute type 10 has an invalid length.
[  541.281034][T13215] device 15 entered promiscuous mode
[  541.526827][T13206] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.541162][T13206] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.563703][T13206] device bridge_slave_0 entered promiscuous mode
[  541.614960][T13230] netlink: 'syz.2.2855': attribute type 10 has an invalid length.
[  541.889866][T13234] FAULT_INJECTION: forcing a failure.
[  541.889866][T13234] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  541.908823][T13234] CPU: 1 PID: 13234 Comm: syz.1.2857 Not tainted syzkaller #0
[  541.916379][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  541.926583][T13234] Call Trace:
[  541.929908][T13234]  <TASK>
[  541.932898][T13234]  dump_stack_lvl+0x188/0x24e
[  541.937648][T13234]  ? show_regs_print_info+0x12/0x12
[  541.942924][T13234]  ? load_image+0x400/0x400
[  541.947504][T13234]  should_fail_ex+0x399/0x4d0
[  541.952332][T13234]  _copy_from_user+0x2c/0x170
[  541.957161][T13234]  iovec_from_user+0x143/0x360
[  541.962019][T13234]  __import_iovec+0x6d/0x500
[  541.966678][T13234]  import_iovec+0x6f/0xa0
[  541.971070][T13234]  ___sys_recvmsg+0x4b6/0x590
[  541.975817][T13234]  ? __sys_recvmsg+0x290/0x290
[  541.980660][T13234]  ? __fget_files+0x28/0x4b0
[  541.985317][T13234]  ? __fget_files+0x28/0x4b0
[  541.989976][T13234]  ? __fget_files+0x43d/0x4b0
[  541.994731][T13234]  __x64_sys_recvmsg+0x205/0x2e0
[  541.999739][T13234]  ? ___sys_recvmsg+0x590/0x590
[  542.004681][T13234]  do_syscall_64+0x4c/0xa0
[  542.009156][T13234]  ? clear_bhb_loop+0x60/0xb0
[  542.013887][T13234]  ? clear_bhb_loop+0x60/0xb0
[  542.018620][T13234]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.024563][T13234] RIP: 0033:0x7ff78ed9c799
[  542.029031][T13234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.048693][T13234] RSP: 002b:00007ff78fc91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  542.057177][T13234] RAX: ffffffffffffffda RBX: 00007ff78f016090 RCX: 00007ff78ed9c799
[  542.065202][T13234] RDX: 0000000000010000 RSI: 0000200000000200 RDI: 0000000000000005
[  542.073227][T13234] RBP: 00007ff78fc91090 R08: 0000000000000000 R09: 0000000000000000
[  542.081249][T13234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.089281][T13234] R13: 00007ff78f016128 R14: 00007ff78f016090 R15: 00007ffd10e6ae98
[  542.097319][T13234]  </TASK>
[  542.792836][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  544.477853][T13230] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  544.494407][T13237] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2858'.
[  544.547355][T13206] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.555659][T13206] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.576463][T13206] device bridge_slave_1 entered promiscuous mode
[  544.645148][ T9356] device 0 left promiscuous mode
[  544.668093][T13241] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2860'.
[  544.701837][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.717772][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.727608][ T9356] device 1 left promiscuous mode
[  544.872803][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[  544.884597][T13206] team0: Port device team_slave_0 added
[  544.895569][ T9356] device 2 left promiscuous mode
[  544.930377][T13206] team0: Port device team_slave_1 added
[  545.208093][T13261] netlink: 'syz.2.2865': attribute type 2 has an invalid length.
[  545.259247][ T9356] device 3 left promiscuous mode
[  545.313774][T13255] IPv6: Can't replace route, no match found
[  545.356763][T13257] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  545.377569][T13258] netlink: 'syz.1.2864': attribute type 10 has an invalid length.
[  545.418898][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.433938][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.575487][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.637533][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.678520][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.808111][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.061418][ T9356] device 4 left promiscuous mode
[  546.159562][ T9356] device 5 left promiscuous mode
[  546.210933][T13206] device hsr_slave_0 entered promiscuous mode
[  546.241068][T13206] device hsr_slave_1 entered promiscuous mode
[  546.260329][T13206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  546.286223][T13206] Cannot create hsr debugfs directory
[  546.292416][ T9356] device 6 left promiscuous mode
[  546.348111][T13283] netlink: 'syz.4.2869': attribute type 10 has an invalid length.
[  546.593004][T13283] team0: Port device wlan1 added
[  546.608806][ T9356] device 7 left promiscuous mode
[  546.628367][T13291] netlink: 'syz.0.2870': attribute type 10 has an invalid length.
[  546.650843][T13291] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.675791][T13291] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.694086][T13291] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.718550][T13291] device geneve0 entered promiscuous mode
[  546.808707][T13291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.827451][T13291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.837151][T13291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.868598][T13291] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  546.952669][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[  546.958880][ T9356] device 8 left promiscuous mode
[  547.038108][ T9356] device 9 left promiscuous mode
[  547.077918][T13304] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.2874'.
[  547.110677][ T9356] device 10 left promiscuous mode
[  547.167175][ T9356] device 11 left promiscuous mode
[  547.287062][ T9356] device 12 left promiscuous mode
[  547.342095][T13306] netlink: 'syz.1.2875': attribute type 10 has an invalid length.
[  547.375891][T13306] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2875'.
[  547.436938][ T9356] device 13 left promiscuous mode
[  547.523214][ T9356] device 14 left promiscuous mode
[  547.678105][ T9356] device 15 left promiscuous mode
[  547.743098][ T9356] device 16 left promiscuous mode
[  547.829425][ T9356] device 17 left promiscuous mode
[  547.897613][ T9356] device 18 left promiscuous mode
[  547.928116][T13206] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  547.939170][T13206] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  547.951132][T13206] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  547.962664][ T9356] device 19 left promiscuous mode
[  547.978254][T13206] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  548.040274][ T9356] device 20 left promiscuous mode
[  548.104105][ T9356] device 21 left promiscuous mode
[  548.146277][ T9356] device 22 left promiscuous mode
[  548.160013][T13206] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.185616][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  548.195085][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  548.204712][ T9356] device 23 left promiscuous mode
[  548.225819][T13206] 8021q: adding VLAN 0 to HW filter on device team0
[  548.241875][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  548.259773][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  548.270493][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.277781][ T9376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.292912][ T9356] device 24 left promiscuous mode
[  548.353127][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  548.374286][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  548.398612][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  548.435718][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.442977][ T9376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.483481][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  548.501285][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  548.522141][ T9356] device 25 left promiscuous mode
[  548.560065][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  548.585089][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  548.603868][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  548.627802][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  548.654725][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  548.685134][ T9356] device 0 left promiscuous mode
[  548.970134][T13206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  548.990541][T13206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  549.029890][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  549.038143][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[  549.111578][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  549.153969][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  549.194023][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  549.221317][ T9356] device 26 left promiscuous mode
[  549.252078][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  549.297791][ T9356] device 27 left promiscuous mode
[  549.418731][T13358] netlink: 'syz.4.2888': attribute type 10 has an invalid length.
[  549.471498][T13358] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2888'.
[  549.501772][T13261] device 16 entered promiscuous mode
[  549.578219][T13360] -1: renamed from syzkaller0
[  549.728922][T13364] FAULT_INJECTION: forcing a failure.
[  549.728922][T13364] name failslab, interval 1, probability 0, space 0, times 0
[  549.789744][T13364] CPU: 1 PID: 13364 Comm: syz.1.2890 Not tainted syzkaller #0
[  549.797293][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  549.807406][T13364] Call Trace:
[  549.810725][T13364]  <TASK>
[  549.813685][T13364]  dump_stack_lvl+0x188/0x24e
[  549.818426][T13364]  ? show_regs_print_info+0x12/0x12
[  549.823683][T13364]  ? load_image+0x400/0x400
[  549.828238][T13364]  ? __might_sleep+0xd0/0xd0
[  549.832864][T13364]  ? __lock_acquire+0x7d10/0x7d10
[  549.837946][T13364]  should_fail_ex+0x399/0x4d0
[  549.842682][T13364]  should_failslab+0x5/0x20
[  549.847236][T13364]  slab_pre_alloc_hook+0x59/0x310
[  549.852308][T13364]  ? bpf_prog_test_run_skb+0x234/0x12a0
[  549.857973][T13364]  __kmem_cache_alloc_node+0x4f/0x260
[  549.863382][T13364]  ? bpf_prog_test_run_skb+0x234/0x12a0
[  549.868962][T13364]  __kmalloc+0xa0/0x240
[  549.873158][T13364]  bpf_prog_test_run_skb+0x234/0x12a0
[  549.878560][T13364]  ? __fget_files+0x28/0x4b0
[  549.883195][T13364]  ? __fget_files+0x28/0x4b0
[  549.887917][T13364]  ? __fget_files+0x43d/0x4b0
[  549.892814][T13364]  ? cpu_online+0xa0/0xa0
[  549.897271][T13364]  bpf_prog_test_run+0x31e/0x390
[  549.902252][T13364]  __sys_bpf+0x62b/0x780
[  549.906534][T13364]  ? bpf_link_show_fdinfo+0x380/0x380
[  549.912049][T13364]  ? lock_chain_count+0x20/0x20
[  549.916942][T13364]  __x64_sys_bpf+0x78/0x90
[  549.921488][T13364]  do_syscall_64+0x4c/0xa0
[  549.925944][T13364]  ? clear_bhb_loop+0x60/0xb0
[  549.930650][T13364]  ? clear_bhb_loop+0x60/0xb0
[  549.935363][T13364]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.941292][T13364] RIP: 0033:0x7ff78ed9c799
[  549.945852][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.965492][T13364] RSP: 002b:00007ff78fcb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  549.973948][T13364] RAX: ffffffffffffffda RBX: 00007ff78f015fa0 RCX: 00007ff78ed9c799
[  549.981984][T13364] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  549.990026][T13364] RBP: 00007ff78fcb2090 R08: 0000000000000000 R09: 0000000000000000
[  549.998039][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.006083][T13364] R13: 00007ff78f016038 R14: 00007ff78f015fa0 R15: 00007ffd10e6ae98
[  550.014141][T13364]  </TASK>
[  550.153104][T13373] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2892'.
[  550.206284][T13374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2892'.
[  550.631070][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  550.652436][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.689289][T13206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.748649][T13385] -1: renamed from syzkaller0
[  550.799099][T13394] netlink: 'syz.1.2895': attribute type 25 has an invalid length.
[  550.910293][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  550.935140][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  551.051431][T13206] device veth0_vlan entered promiscuous mode
[  551.097628][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  551.155635][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  551.227577][T13206] device veth1_vlan entered promiscuous mode
[  551.257397][T13410] FAULT_INJECTION: forcing a failure.
[  551.257397][T13410] name failslab, interval 1, probability 0, space 0, times 0
[  551.285222][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  551.316710][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  551.332998][T13410] CPU: 1 PID: 13410 Comm: syz.0.2897 Not tainted syzkaller #0
[  551.340542][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  551.350739][T13410] Call Trace:
[  551.354067][T13410]  <TASK>
[  551.357054][T13410]  dump_stack_lvl+0x188/0x24e
[  551.361793][T13410]  ? show_regs_print_info+0x12/0x12
[  551.367049][T13410]  ? load_image+0x400/0x400
[  551.371588][T13410]  ? __might_sleep+0xd0/0xd0
[  551.376206][T13410]  ? __lock_acquire+0x7d10/0x7d10
[  551.381269][T13410]  should_fail_ex+0x399/0x4d0
[  551.385995][T13410]  should_failslab+0x5/0x20
[  551.390630][T13410]  slab_pre_alloc_hook+0x59/0x310
[  551.395741][T13410]  ? __request_module+0x338/0xa00
[  551.401277][T13410]  __kmem_cache_alloc_node+0x4f/0x260
[  551.406704][T13410]  ? __request_module+0x338/0xa00
[  551.411777][T13410]  __kmalloc_node_track_caller+0x9e/0x230
[  551.417575][T13410]  kstrdup+0x37/0x70
[  551.421703][T13410]  __request_module+0x338/0xa00
[  551.426614][T13410]  ? do_vfs_ioctl+0x1be7/0x1d40
[  551.431531][T13410]  ? copy_regset_to_user+0x1e0/0x1e0
[  551.436873][T13410]  ? aa_get_newest_label+0xf9/0x5b0
[  551.442473][T13410]  ? end_current_label_crit_section+0x170/0x170
[  551.448760][T13410]  ? apparmor_capable+0x12c/0x190
[  551.453823][T13410]  ? bpf_lsm_capable+0x5/0x10
[  551.458537][T13410]  ? security_capable+0x85/0xb0
[  551.463422][T13410]  ? dev_load+0x1d/0x1e0
[  551.467720][T13410]  dev_load+0x187/0x1e0
[  551.471923][T13410]  dev_ioctl+0x28b/0xe80
[  551.476225][T13410]  sock_do_ioctl+0x245/0x320
[  551.480865][T13410]  ? sock_show_fdinfo+0xb0/0xb0
[  551.485858][T13410]  sock_ioctl+0x4d2/0x710
[  551.490223][T13410]  ? sock_poll+0x410/0x410
[  551.494682][T13410]  ? bpf_lsm_file_ioctl+0x5/0x10
[  551.499686][T13410]  ? security_file_ioctl+0x7c/0xa0
[  551.504842][T13410]  ? sock_poll+0x410/0x410
[  551.509374][T13410]  __se_sys_ioctl+0xfa/0x170
[  551.514090][T13410]  do_syscall_64+0x4c/0xa0
[  551.518629][T13410]  ? clear_bhb_loop+0x60/0xb0
[  551.523331][T13410]  ? clear_bhb_loop+0x60/0xb0
[  551.528039][T13410]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  551.533966][T13410] RIP: 0033:0x7f8094d9c799
[  551.538412][T13410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.558046][T13410] RSP: 002b:00007f8095c05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  551.566486][T13410] RAX: ffffffffffffffda RBX: 00007f8095016180 RCX: 00007f8094d9c799
[  551.574570][T13410] RDX: 0000200000002280 RSI: 0000000000008923 RDI: 0000000000000005
[  551.582574][T13410] RBP: 00007f8095c05090 R08: 0000000000000000 R09: 0000000000000000
[  551.590589][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.598596][T13410] R13: 00007f8095016218 R14: 00007f8095016180 R15: 00007ffe80ad9e38
[  551.606628][T13410]  </TASK>
[  551.666017][T13409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2899'.
[  551.688602][T13413] netlink: 'syz.4.2900': attribute type 2 has an invalid length.
[  551.964418][T13413] device 7 entered promiscuous mode
[  552.089314][T13418] netlink: 'syz.1.2901': attribute type 10 has an invalid length.
[  552.142378][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  552.186730][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  552.255705][T13206] device veth0_macvtap entered promiscuous mode
[  552.315342][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  552.340851][T13206] device veth1_macvtap entered promiscuous mode
[  552.490688][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  552.521842][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.539906][T13206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.625384][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  552.650475][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  552.693157][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.729090][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.803029][T13206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.826274][T13436] netlink: 'syz.1.2906': attribute type 10 has an invalid length.
[  552.860985][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  552.903675][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  552.972382][T13206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.008777][T13206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.063400][T13206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.080099][T13206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.574509][ T9360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.605544][ T9360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.725620][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  553.827227][T13466] netlink: 'syz.0.2913': attribute type 2 has an invalid length.
[  553.854538][ T9360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.874432][ T9360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.150762][T13466] device 23 entered promiscuous mode
[  555.550028][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  555.575408][T13475] netlink: 'syz.2.2915': attribute type 10 has an invalid length.
[  556.370101][T13508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2842'.
[  556.676916][T13524] netlink: 'syz.2.2922': attribute type 10 has an invalid length.
[  556.882366][T13519] -1: renamed from syzkaller0
Stopping sshd: [  557.359780][T13545] netlink: 'syz.4.2929': attribute type 2 has an invalid length.
[  557.383856][T13544] netlink: 'syz.0.2927': attribute type 16 has an invalid length.
[  557.466204][T13544] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2927'.
[  557.641834][T13545] device 8 entered promiscuous mode
stopped /usr/sbin/sshd (pid 4030)
[  557.663968][T13552] netlink: 14566 bytes leftover after parsing attributes in process `syz.4.2929'.
OK
[  557.742934][T13550] netlink: 'syz.1.2931': attribute type 10 has an invalid length.
Stopping crond: stopped /usr/sbin/crond (pid 4013)
OK
[  559.065877][T13574] netlink: 'syz.1.2936': attribute type 25 has an invalid length.
[  559.187482][ T9356] device hsr_slave_0 left promiscuous mode
[  559.213452][ T9356] device hsr_slave_1 left promiscuous mode
[  559.354150][ T9356] device veth1_macvtap left promiscuous mode
[  559.360308][ T9356] device veth0_macvtap left promiscuous mode
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 3933)
[  560.100864][ T9356] bond0 (unregistering): (slave geneve0): Releasing backup interface
Stopping network: [  561.763662][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.810672][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.078320][ T9356] bond0 (unregistering): Released all slaves
[  562.114575][T13593] netlink: 'syz.1.2943': attribute type 10 has an invalid length.
[  562.123048][T13593] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2943'.
[  562.153572][T13610] -1: renamed from syzkaller0
[  562.876851][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  562.884518][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  562.913380][T13642] netlink: 'syz.1.2953': attribute type 25 has an invalid length.
[  563.651735][T13649] netlink: 'syz.3.2955': attribute type 21 has an invalid length.
OK
[  563.733143][T13649] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2955'.
[  563.783396][T13649] netlink: 'syz.3.2955': attribute type 4 has an invalid length.
[  563.816461][T13649] netlink: 'syz.3.2955': attribute type 5 has an invalid length.
[  563.842903][T13649] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2955'.
[  563.900428][T13657] netlink: 'syz.1.2957': attribute type 10 has an invalid length.
[  563.929537][T13657] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2957'.
Stopping iptables: OK
[  564.249890][T13665] device syzkaller0 entered promiscuous mode
Stopping system message bus: [  564.952640][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  565.628014][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  565.649328][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  565.682313][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  565.707136][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  565.714934][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  565.722276][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
done
Stopping klogd: OK
Stopping acpid: [  567.755282][ T4286] Bluetooth: hci5: command 0x0409 tx timeout
[  567.912317][T13686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2965'.
[  567.922090][T13687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2965'.
[  567.932870][T13688] netlink: 'syz.0.2965': attribute type 4 has an invalid length.
[  567.948477][T13696] netlink: 'syz.3.2967': attribute type 25 has an invalid length.
[  567.964900][T13697] netlink: 'syz.4.2968': attribute type 21 has an invalid length.
[  567.973729][T13697] IPv6: NLM_F_CREATE should be specified when creating new route
[  567.981554][T13697] IPv6: Can't replace route, no match found
[  568.002687][T13699] netlink: 'syz.4.2968': attribute type 21 has an invalid length.
[  568.010684][T13699] IPv6: Can't replace route, no match found
OK
Stopping syslogd: [  568.905502][T13740] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2974'.
[  569.060678][T13698] chnl_net:caif_netlink_parms(): no params data found
stopped /sbin/syslogd (pid 3621)
OK
[  569.390447][T13698] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.420506][T13698] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.450863][T13698] device bridge_slave_0 entered promiscuous mode
[  569.498374][T13698] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.535838][T13698] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.558285][T13698] device bridge_slave_1 entered promiscuous mode
[  569.657726][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.703589][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.818333][T13698] team0: Port device team_slave_0 added
[  569.832668][ T4286] Bluetooth: hci5: command 0x041b tx timeout
[  569.846953][T13698] team0: Port device team_slave_1 added
[  569.894023][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.921394][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.066886][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.120007][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.151589][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.201476][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
umount: can't remount debugfs read-only
umount: can't remount tmpfs read-only
[  570.470817][T13770] device syzkaller0 entered promiscuous mode
[  570.570384][T13698] device hsr_slave_0 entered promiscuous mode
[  570.612965][T13698] device hsr_slave_1 entered promiscuous mode
[  570.762740][T13757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2977'.
[  571.406684][ T9346] device 0 left promiscuous mode
[  571.480529][ T9346] device 1 left promiscuous mode
[  571.585068][ T9346] device 2 left promiscuous mode
[  571.664186][ T9346] device 3 left promiscuous mode
[  571.752608][ T9346] device 4 left promiscuous mode
[  571.926700][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  572.536399][ T9346] device 5 left promiscuous mode
[  572.581112][T13797] netlink: 'syz.4.2986': attribute type 25 has an invalid length.
[  572.623089][ T9346] device 6 left promiscuous mode
[  572.697440][ T9346] device 7 left promiscuous mode
[  572.764920][ T9346] device 8 left promiscuous mode
[  572.811335][T13698] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  572.866289][ T9346] device 9 left promiscuous mode
[  572.910246][T13698] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  572.933535][T13698] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  572.961541][T13803] netlink: 'syz.3.2987': attribute type 25 has an invalid length.
[  572.991722][ T9346] device 10 left promiscuous mode
[  573.021215][T13698] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  573.064908][ T9346] device 11 left promiscuous mode
[  573.106099][T13813] netlink: 'syz.4.2990': attribute type 10 has an invalid length.
[  573.424860][ T9346] device 12 left promiscuous mode
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
[  573.498741][ T9346] device 13 left promiscuous mode
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  573.613545][ T9346] device 14 left promiscuous mode
Connection to 10.128.1.70 closed by remote host.
[  573.763254][ T9346] device 15 left promiscuous mode
[  573.972790][ T9346] tipc: Left network mode
[  573.994193][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
Sent SIGKILL to all processes
Requesting system poweroff
[  575.710870][T13822] kvm: exiting hardware virtualization
[  575.729907][T13822] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  575.740784][T13822] ACPI: PM: Preparing to enter system sleep state S5
[  575.750717][T13822] reboot: Power down
serialport: VM disconnected.