last executing test programs:

3.228399149s ago: executing program 1 (id=2839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x18}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000d00)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x8, 0x7, 0x1, 0x80}, @ldst={0x0, 0x2, 0x4, 0x3, 0x8, 0xffffffffffffffe0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @func, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @alu={0x7, 0x0, 0x6, 0xa, 0xb, 0x1, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000800)=""/204, 0x40f00, 0x2d, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000000900)={0x3, 0x6}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xd, 0x9f, 0xfffffff8}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000a00)=[r0, r0, r0, r6, r7, r0], &(0x7f0000000c00)=[{0x5, 0x5, 0x9, 0x2}, {0x1, 0x3, 0x0, 0xa}, {0x3, 0x4, 0x7}, {0x0, 0x2, 0x4, 0x4}], 0x10, 0x3}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101002, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000740)=r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)

2.734041975s ago: executing program 1 (id=2845):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41)

2.509183262s ago: executing program 3 (id=2846):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001fc3fb7080000000000007b8af8"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

2.275416579s ago: executing program 3 (id=2847):
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) (fail_nth: 3)

2.208566541s ago: executing program 0 (id=2848):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
close(0xffffffffffffffff)
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x72, &(0x7f0000000000)=r5, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48)

2.016515848s ago: executing program 3 (id=2849):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.009496578s ago: executing program 0 (id=2850):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x189603e4342c0e17, @perf_bp={&(0x7f0000000080)}, 0x104001, 0x0, 0x3, 0xa2ed0d70c7c787cf, 0xfffffffffffffffe, 0x0, 0xfffd}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) (async)
r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x189603e4342c0e17, @perf_bp={&(0x7f0000000080)}, 0x104001, 0x0, 0x3, 0xa2ed0d70c7c787cf, 0xfffffffffffffffe, 0x0, 0xfffd}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x7, 0xf3, 0x7, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x10001}, 0xd22, 0xcb, 0x7, 0x7, 0x0, 0x4, 0x0, 0x0, 0x805}, 0x0, 0x0, r4, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r5}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8) (async)
close(r8)
recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x9a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000a04000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r11 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r1}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r1})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xa0, 0xa, 0x0, 0x0, 0x0, 0x4a0e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0xff}, 0x4104, 0xc00000080000001, 0x2, 0x1, 0x3, 0xffbf0000, 0x80, 0x0, 0x5ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xa0, 0xa, 0x0, 0x0, 0x0, 0x4a0e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0xff}, 0x4104, 0xc00000080000001, 0x2, 0x1, 0x3, 0xffbf0000, 0x80, 0x0, 0x5ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x89f1, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0x8000000000000000, 0x88a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff, 0x80000000}, 0x102c10, 0x7b, 0x8, 0x8, 0x1, 0x3, 0x82, 0x0, 0x7, 0x0, 0xa})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xc7, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x36, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xc7, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x36, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000400000008ca3c36740cfe00c873c5b2", @ANYRES32=0x1, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r15], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000005000000852000000400000018120000", @ANYRES32=r9, @ANYBLOB="00000000000000b703000000000000850000000c000000b700000000000000852000000100000095000000000000000098498690e5707f4ed472889c518967be65140188e395773e430471a25d15d5c96a58"], &(0x7f0000000580)='syzkaller\x00', 0x1000, 0xe7, &(0x7f00000005c0)=""/231, 0x41100, 0x4, '\x00', r14, 0x1a, r5, 0x8, &(0x7f0000000b40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xd, 0x0, 0x4}, 0x10, 0x59dd, r1, 0x5, &(0x7f0000000bc0)=[r9, r5, r6, r8, r6, r15, r9, r9, r9, r12], &(0x7f0000000c00)=[{0x4, 0x5, 0x8, 0x3}, {0x0, 0x4, 0x5, 0x2}, {0x3, 0x3, 0x10, 0x2}, {0x5, 0x4, 0x8, 0x1}, {0x3, 0x5, 0xc, 0x5}], 0x10, 0xffffff48}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10)

1.903674571s ago: executing program 0 (id=2851):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

1.844605673s ago: executing program 2 (id=2852):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)}, 0x10)

1.806620074s ago: executing program 3 (id=2853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x18}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000d00)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x8, 0x7, 0x1, 0x80}, @ldst={0x0, 0x2, 0x4, 0x3, 0x8, 0xffffffffffffffe0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @func, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @alu={0x7, 0x0, 0x6, 0xa, 0xb, 0x1, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000800)=""/204, 0x40f00, 0x2d, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000000900)={0x3, 0x6}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xd, 0x9f, 0xfffffff8}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000a00)=[r0, r0, r0, r6, r7, r0], &(0x7f0000000c00)=[{0x5, 0x5, 0x9, 0x2}, {0x1, 0x3, 0x0, 0xa}, {0x3, 0x4, 0x7}, {0x0, 0x2, 0x4, 0x4}], 0x10, 0x3}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101002, 0x0)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000740)=r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)

1.668333198s ago: executing program 0 (id=2854):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4)

1.668150348s ago: executing program 2 (id=2855):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001fc3fb7080000000000007b8af8"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

1.634177809s ago: executing program 1 (id=2856):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0a", 0x34}], 0x1}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41)

1.406907707s ago: executing program 0 (id=2857):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000030000000400000007"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000300), 0x0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000000000000000000070000004404dc634402440c96b0c6640f8feda5312e00440cf1130a01010100000004831b50e0000001ac1414bbac1e0101e0000001ac14140aac1414bb830fd9ac14141a0a0101020a010100000000000000001100000000000000290000000400000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000009f8d3ce54c4ed6811af930d3a584aeb9319f8a148d527e7cfbac9fe39fdb710055b3ae42a7ae1c0b18413906dd6aa6eb3d4de32c0e6047c9f73c6333d668b8ec164125caf8c15b73ad44995fee41929fce47344e7da7612e0515d66fb0cea54fb4ff5b29536e6ec333fe0fcbb2991532ca6f69c9ff4389127f704cce77ef5f9ae4dd6cb2696087ecb921e39c30f161d3c17540f2f9050266b4817baebc1558a5742532dd38b7c7f6451efa3e1812877d421caeb16314c91d17ec77ddf0514ce2848d97ac543d34f5a88fbb33a7610c0d11a280da5de572b5b67141eb6466fb538e1c04f36d"], 0x98}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback, r2, 0x30, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)

1.406648696s ago: executing program 2 (id=2858):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41)

1.264766761s ago: executing program 3 (id=2859):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20132, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x1, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f00000001c0))
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
close(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0x4}, 0x8428, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012000)
r5 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000011"], 0x0, 0x4d}, 0x28)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0x8080)

1.043037668s ago: executing program 2 (id=2860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x81, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0xfffffffffffffffd, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1100000000000000000000000100000003000000000000001400000000000000000000000100000009000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1e01017f0000010000000011000000000000000000000001000000c10000000000000058000000000000000000000007000000070f33ac141432000000000a01010201863511a7d3e006058e9c20020d5d7b079987a5d2b712c61500112e0b8f051503d3a93c350c328eba91000cd37392819d0bfee7babd0000004c000000e97b243b0000000007000000441cfc300000000300000400000006cb0000004000000000000000048903de891b1de0000002ac1e0101ac1e0001ac1414bb64010100ac1e01010000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00000000"], 0x130}, 0x4041800)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8912, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800110000000000fd0900000000000095200002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000003c0)=r6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x2d6, 0x0, 0x8, r7, 0x0, '\x00', r2, r5, 0x5, 0x1, 0x0, 0x9}, 0x50)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)

859.372224ms ago: executing program 0 (id=2861):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000030000000400000007"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000300), 0x0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000000000000000000070000004404dc634402440c96b0c6640f8feda5312e00440cf1130a01010100000004831b50e0000001ac1414bbac1e0101e0000001ac14140aac1414bb830fd9ac14141a0a0101020a010100000000000000001100000000000000290000000400000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000009f8d3ce54c4ed6811af930d3a584aeb9319f8a148d527e7cfbac9fe39fdb710055b3ae42a7ae1c0b18413906dd6aa6eb3d4de32c0e6047c9f73c6333d668b8ec164125caf8c15b73ad44995fee41929fce47344e7da7612e0515d66fb0cea54fb4ff5b29536e6ec333fe0fcbb2991532ca6f69c9ff4389127f704cce77ef5f9ae4dd6cb2696087ecb921e39c30f161d3c17540f2f9050266b4817baebc1558a5742532dd38b7c7f6451efa3e1812877d421caeb16314c91d17ec77ddf0514ce2848d97ac543d34f5a88fbb33a7610c0d11a280da5de572b5b67141eb6466fb538e1c04f36d"], 0x98}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback, r2, 0x30, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)

544.401034ms ago: executing program 2 (id=2862):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

535.384424ms ago: executing program 1 (id=2863):
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

385.271359ms ago: executing program 2 (id=2864):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe42bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000), 0x4)
r3 = openat$cgroup(r1, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x9, 0x6, 0x80, 0x8, 0x0, 0x6, 0x20, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8bc54afb307f40db, @perf_bp={&(0x7f0000000180)}, 0x10, 0x7ff, 0x80000001, 0x5, 0x7fff, 0x2, 0x33, 0x0, 0x4, 0x0, 0x7fff}, r3, 0x10, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x408, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/252, 0x1a, 0xfc, 0x0, 0x7}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0xb)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x61, 0x0, 0x61, 0x61, 0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x7}, 0x28)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

279.746921ms ago: executing program 1 (id=2865):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001fc3fb7080000000000007b8af8"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

138.004346ms ago: executing program 1 (id=2866):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4)

0s ago: executing program 3 (id=2867):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @remote, 0x17}, 0x80, 0x0}, 0x6000084)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b"], 0x0, 0x4a}, 0x28)
r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x81, 0x7, 0x6, 0x0, 0x8, 0x108, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbbd, 0x0, @perf_config_ext={0xab, 0xff0000}, 0x80, 0x4, 0xe9be, 0x1, 0x32, 0x39db, 0xa, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x9, 0x0, 0x20, 0x0, 0x2, 0x8000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x3542, 0x1ff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffefffffff, r5, 0xa)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd5}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80d7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffe}]}, &(0x7f0000000180)='GPL\x00', 0xd, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x8, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x6, 0xc66a, 0x25bc}, 0x10, 0x38df, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0x0, 0x4}, {0x4, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x1}, {0x1, 0x1, 0x7, 0x8}, {0x5, 0x1, 0xa, 0x2}], 0x10, 0x80000001}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r8 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4)

kernel console output (not intermixed with test programs):

00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.124203][T11873] RSP: 002b:00007f59a2cfbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  531.132654][T11873] RAX: ffffffffffffffda RBX: 00007f59a2015fa0 RCX: 00007f59a1d9ce59
[  531.140669][T11873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  531.148679][T11873] RBP: 00007f59a2cfc090 R08: 0000000000000000 R09: 0000000000000000
[  531.156685][T11873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  531.164686][T11873] R13: 00007f59a2016038 R14: 00007f59a2015fa0 R15: 00007ffd59b284b8
[  531.172701][T11873]  </TASK>
[  531.182253][T11873] syz.3.2134: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  531.230837][T11873] CPU: 1 PID: 11873 Comm: syz.3.2134 Not tainted syzkaller #0
[  531.238370][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.248467][T11873] Call Trace:
[  531.251791][T11873]  <TASK>
[  531.254773][T11873]  dump_stack_lvl+0x18c/0x250
[  531.259596][T11873]  ? show_regs_print_info+0x20/0x20
[  531.264843][T11873]  ? load_image+0x420/0x420
[  531.269386][T11873]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  531.275842][T11873]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  531.282394][T11873]  warn_alloc+0x246/0x340
[  531.286783][T11873]  ? __get_vm_area_node+0x125/0x370
[  531.292053][T11873]  ? zone_watermark_ok_safe+0x230/0x230
[  531.297668][T11873]  ? rcu_is_watching+0x15/0xb0
[  531.302507][T11873]  ? __get_vm_area_node+0x356/0x370
[  531.307773][T11873]  __vmalloc_node_range+0x393/0x1330
[  531.313141][T11873]  ? free_vm_area+0x50/0x50
[  531.317754][T11873]  ? arch_dup_task_struct+0x57/0xd0
[  531.323007][T11873]  ? __asan_memcpy+0x40/0x70
[  531.327674][T11873]  dup_task_struct+0x3d0/0x7c0
[  531.332507][T11873]  ? copy_process+0x586/0x3dc0
[  531.337324][T11873]  ? lockdep_hardirqs_on+0x98/0x150
[  531.342583][T11873]  copy_process+0x586/0x3dc0
[  531.347205][T11873]  ? __might_fault+0xaa/0x120
[  531.351919][T11873]  ? get_pid_task+0x20/0x1e0
[  531.356535][T11873]  ? __pidfd_prepare+0x140/0x140
[  531.361499][T11873]  kernel_clone+0x24b/0x8a0
[  531.366139][T11873]  ? create_io_thread+0x190/0x190
[  531.371283][T11873]  __x64_sys_clone+0x1b7/0x230
[  531.376061][T11873]  ? __fget_files+0x43d/0x4b0
[  531.380822][T11873]  ? __ia32_sys_vfork+0x140/0x140
[  531.385924][T11873]  ? lock_chain_count+0x20/0x20
[  531.390805][T11873]  ? lockdep_hardirqs_on+0x98/0x150
[  531.396042][T11873]  do_syscall_64+0x55/0xb0
[  531.400481][T11873]  ? clear_bhb_loop+0x40/0x90
[  531.405185][T11873]  ? clear_bhb_loop+0x40/0x90
[  531.409895][T11873]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  531.415825][T11873] RIP: 0033:0x7f59a1d9ce59
[  531.420278][T11873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.439981][T11873] RSP: 002b:00007f59a2cfbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  531.448430][T11873] RAX: ffffffffffffffda RBX: 00007f59a2015fa0 RCX: 00007f59a1d9ce59
[  531.456436][T11873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  531.464429][T11873] RBP: 00007f59a2cfc090 R08: 0000000000000000 R09: 0000000000000000
[  531.472478][T11873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  531.480467][T11873] R13: 00007f59a2016038 R14: 00007f59a2015fa0 R15: 00007ffd59b284b8
[  531.488473][T11873]  </TASK>
[  531.561067][T11873] Mem-Info:
[  531.564738][T11873] active_anon:5695 inactive_anon:0 isolated_anon:0
[  531.564738][T11873]  active_file:20745 inactive_file:40120 isolated_file:0
[  531.564738][T11873]  unevictable:768 dirty:508 writeback:0
[  531.564738][T11873]  slab_reclaimable:10354 slab_unreclaimable:94365
[  531.564738][T11873]  mapped:25039 shmem:1361 pagetables:538
[  531.564738][T11873]  sec_pagetables:0 bounce:0
[  531.564738][T11873]  kernel_misc_reclaimable:0
[  531.564738][T11873]  free:1342154 free_pcp:12075 free_cma:0
[  531.615826][T11873] Node 0 active_anon:22780kB inactive_anon:0kB active_file:82980kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100156kB dirty:2032kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10248kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no
[  531.670393][T11873] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  531.761906][T11873] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  531.811700][T11873] lowmem_reserve[]: 0 2521 2522 2522 2522
[  531.827507][T11873] Node 0 DMA32 free:1460260kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22444kB inactive_anon:0kB active_file:82980kB inactive_file:159448kB unevictable:1536kB writepending:2032kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:33196kB local_pcp:16188kB free_cma:0kB
[  531.890752][T11873] lowmem_reserve[]: 0 0 0 0 0
[  531.904205][T11873] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  531.945307][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2137'.
[  531.959280][T11873] lowmem_reserve[]: 0 0 0 0 0
[  531.985243][T11873] Node 1 Normal free:3892996kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:11168kB free_cma:0kB
[  532.031260][T11873] lowmem_reserve[]: 0 0 0 0 0
[  532.036267][T11873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  532.051098][T11873] Node 0 DMA32: 653*4kB (M) 1036*8kB (UME) 1041*16kB (UME) 692*32kB (UME) 978*64kB (UME) 225*128kB (UME) 83*256kB (UM) 25*512kB (UME) 11*1024kB (UME) 6*2048kB (UM) 308*4096kB (UM) = 1460260kB
[  532.091120][T11873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  532.121038][T11873] Node 1 Normal: 237*4kB (UM) 58*8kB (UME) 48*16kB (UME) 132*32kB (UME) 36*64kB (UE) 10*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3893252kB
[  532.154693][T11873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  532.181181][T11873] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  532.204056][T11873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  532.217351][T11887] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2140'.
[  532.221009][T11873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  532.246643][T11873] 62226 total pagecache pages
[  532.256840][T11873] 0 pages in swap cache
[  532.261491][T11873] Free swap  = 124996kB
[  532.265705][T11873] Total swap = 124996kB
[  532.280373][T11873] 2097051 pages RAM
[  532.284503][T11873] 0 pages HighMem/MovableOnly
[  532.289223][T11873] 416932 pages reserved
[  532.304255][T11873] 0 pages cma reserved
[  532.703205][T11902] netlink: 'syz.1.2143': attribute type 10 has an invalid length.
[  532.724808][T11902] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2143'.
[  532.849283][T11897] can: request_module (can-proto-0) failed.
[  533.769008][T11914] netlink: 'syz.3.2147': attribute type 10 has an invalid length.
[  533.821908][T11914] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2147'.
[  533.923587][T11918] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2149'.
[  533.999156][T11920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2150'.
[  534.737410][T11929] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2153'.
[  534.750385][T11929] tc_dump_action: action bad kind
[  535.174141][T11938] delete_channel: no stack
[  535.476607][T11944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2160'.
[  535.714979][T11949] netlink: 'syz.2.2159': attribute type 10 has an invalid length.
[  535.723212][T11949] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2159'.
[  536.476330][T11961] netlink: 'syz.1.2163': attribute type 10 has an invalid length.
[  536.542837][T11961] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2163'.
[  537.039617][T11969] Ù: renamed from bond_slave_1
[  537.223003][T11972] FAULT_INJECTION: forcing a failure.
[  537.223003][T11972] name failslab, interval 1, probability 0, space 0, times 0
[  537.250231][T11972] CPU: 0 PID: 11972 Comm: syz.0.2169 Not tainted syzkaller #0
[  537.257850][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  537.268044][T11972] Call Trace:
[  537.271369][T11972]  <TASK>
[  537.274341][T11972]  dump_stack_lvl+0x18c/0x250
[  537.279071][T11972]  ? show_regs_print_info+0x20/0x20
[  537.284312][T11972]  ? load_image+0x420/0x420
[  537.288864][T11972]  ? __lock_acquire+0x7d40/0x7d40
[  537.293948][T11972]  should_fail_ex+0x39d/0x4d0
[  537.298689][T11972]  should_failslab+0x9/0x20
[  537.303250][T11972]  slab_pre_alloc_hook+0x59/0x310
[  537.308337][T11972]  ? bpf_prog_alloc+0x3d/0x1a0
[  537.313157][T11972]  ? bpf_prog_load+0x6eb/0x1670
[  537.318064][T11972]  ? __sys_bpf+0x5ba/0x890
[  537.322529][T11972]  kmem_cache_alloc_node+0x60/0x320
[  537.327805][T11972]  ? alloc_vmap_area+0x1b4/0x1e30
[  537.332967][T11972]  alloc_vmap_area+0x1b4/0x1e30
[  537.337901][T11972]  ? vm_map_ram+0xcb0/0xcb0
[  537.342463][T11972]  ? rcu_is_watching+0x15/0xb0
[  537.347298][T11972]  __get_vm_area_node+0x162/0x370
[  537.352385][T11972]  __vmalloc_node_range+0x36e/0x1330
[  537.357731][T11972]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  537.363339][T11972]  ? mark_lock+0x94/0x320
[  537.367743][T11972]  ? __lock_acquire+0x1347/0x7d40
[  537.372830][T11972]  ? verify_lock_unused+0x140/0x140
[  537.378091][T11972]  ? free_vm_area+0x50/0x50
[  537.382641][T11972]  ? end_current_label_crit_section+0x170/0x170
[  537.388957][T11972]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  537.394551][T11972]  __vmalloc+0x7a/0x90
[  537.398676][T11972]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  537.404277][T11972]  bpf_prog_alloc_no_stats+0x47/0x440
[  537.409700][T11972]  ? bpf_prog_alloc+0x2b/0x1a0
[  537.414516][T11972]  bpf_prog_alloc+0x3d/0x1a0
[  537.419154][T11972]  bpf_prog_load+0x6eb/0x1670
[  537.423878][T11972]  ? map_freeze+0x420/0x420
[  537.428447][T11972]  ? __might_fault+0xaa/0x120
[  537.433189][T11972]  ? __lock_acquire+0x7d40/0x7d40
[  537.438265][T11972]  ? file_end_write+0x159/0x250
[  537.443181][T11972]  ? __might_fault+0xaa/0x120
[  537.447908][T11972]  ? __might_fault+0xc6/0x120
[  537.452783][T11972]  ? __might_fault+0xaa/0x120
[  537.457519][T11972]  ? bpf_lsm_bpf+0x9/0x10
[  537.461898][T11972]  ? security_bpf+0x7e/0xa0
[  537.466453][T11972]  __sys_bpf+0x5ba/0x890
[  537.470739][T11972]  ? bpf_link_show_fdinfo+0x390/0x390
[  537.476195][T11972]  ? lock_chain_count+0x20/0x20
[  537.481087][T11972]  __x64_sys_bpf+0x7c/0x90
[  537.485526][T11972]  do_syscall_64+0x55/0xb0
[  537.489977][T11972]  ? clear_bhb_loop+0x40/0x90
[  537.494726][T11972]  ? clear_bhb_loop+0x40/0x90
[  537.499448][T11972]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  537.505388][T11972] RIP: 0033:0x7f9f9439ce59
[  537.509834][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.529474][T11972] RSP: 002b:00007f9f952e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  537.537931][T11972] RAX: ffffffffffffffda RBX: 00007f9f94615fa0 RCX: 00007f9f9439ce59
[  537.545953][T11972] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  537.553970][T11972] RBP: 00007f9f952e6090 R08: 0000000000000000 R09: 0000000000000000
[  537.561989][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.570061][T11972] R13: 00007f9f94616038 R14: 00007f9f94615fa0 R15: 00007fff74e64498
[  537.578115][T11972]  </TASK>
[  537.633299][T11976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2171'.
[  537.663658][T11977] netlink: 'syz.3.2170': attribute type 10 has an invalid length.
[  537.713167][T11977] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2170'.
[  537.828443][T11980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2172'.
[  538.739308][T12008] netlink: 'syz.3.2177': attribute type 10 has an invalid length.
[  539.547142][T12022] __nla_validate_parse: 3 callbacks suppressed
[  539.547180][T12022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2184'.
[  539.649070][T12024] can: request_module (can-proto-0) failed.
[  539.748969][T12030] netlink: 'syz.1.2187': attribute type 10 has an invalid length.
[  539.791072][T12030] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2187'.
[  540.519865][T12046] can: request_module (can-proto-0) failed.
[  540.852497][T12058] FAULT_INJECTION: forcing a failure.
[  540.852497][T12058] name failslab, interval 1, probability 0, space 0, times 0
[  540.865529][T12058] CPU: 1 PID: 12058 Comm: syz.0.2196 Not tainted syzkaller #0
[  540.873047][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  540.883125][T12058] Call Trace:
[  540.886422][T12058]  <TASK>
[  540.889379][T12058]  dump_stack_lvl+0x18c/0x250
[  540.894085][T12058]  ? show_regs_print_info+0x20/0x20
[  540.899310][T12058]  ? load_image+0x420/0x420
[  540.903835][T12058]  ? __lock_acquire+0x7d40/0x7d40
[  540.908911][T12058]  should_fail_ex+0x39d/0x4d0
[  540.913632][T12058]  should_failslab+0x9/0x20
[  540.918188][T12058]  slab_pre_alloc_hook+0x59/0x310
[  540.923242][T12058]  ? bpf_prog_alloc+0x3d/0x1a0
[  540.928043][T12058]  ? bpf_prog_load+0x6eb/0x1670
[  540.932932][T12058]  ? __sys_bpf+0x5ba/0x890
[  540.937374][T12058]  kmem_cache_alloc_node+0x60/0x320
[  540.942600][T12058]  ? alloc_vmap_area+0x1b4/0x1e30
[  540.947656][T12058]  alloc_vmap_area+0x1b4/0x1e30
[  540.952555][T12058]  ? vm_map_ram+0xcb0/0xcb0
[  540.957089][T12058]  ? rcu_is_watching+0x15/0xb0
[  540.961886][T12058]  __get_vm_area_node+0x162/0x370
[  540.966942][T12058]  __vmalloc_node_range+0x36e/0x1330
[  540.972263][T12058]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  540.977848][T12058]  ? mark_lock+0x94/0x320
[  540.982207][T12058]  ? __lock_acquire+0x1347/0x7d40
[  540.987258][T12058]  ? verify_lock_unused+0x140/0x140
[  540.992549][T12058]  ? free_vm_area+0x50/0x50
[  540.997083][T12058]  ? end_current_label_crit_section+0x170/0x170
[  541.003369][T12058]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  541.008944][T12058]  __vmalloc+0x7a/0x90
[  541.013039][T12058]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  541.018612][T12058]  bpf_prog_alloc_no_stats+0x47/0x440
[  541.024009][T12058]  ? bpf_prog_alloc+0x2b/0x1a0
[  541.028808][T12058]  bpf_prog_alloc+0x3d/0x1a0
[  541.033428][T12058]  bpf_prog_load+0x6eb/0x1670
[  541.038159][T12058]  ? map_freeze+0x420/0x420
[  541.042688][T12058]  ? __might_fault+0xaa/0x120
[  541.047390][T12058]  ? __lock_acquire+0x7d40/0x7d40
[  541.052445][T12058]  ? file_end_write+0x159/0x250
[  541.057340][T12058]  ? __might_fault+0xaa/0x120
[  541.062039][T12058]  ? __might_fault+0xc6/0x120
[  541.066735][T12058]  ? __might_fault+0xaa/0x120
[  541.071432][T12058]  ? bpf_lsm_bpf+0x9/0x10
[  541.075788][T12058]  ? security_bpf+0x7e/0xa0
[  541.080316][T12058]  __sys_bpf+0x5ba/0x890
[  541.084576][T12058]  ? bpf_link_show_fdinfo+0x390/0x390
[  541.089988][T12058]  ? lock_chain_count+0x20/0x20
[  541.094869][T12058]  __x64_sys_bpf+0x7c/0x90
[  541.099305][T12058]  do_syscall_64+0x55/0xb0
[  541.103751][T12058]  ? clear_bhb_loop+0x40/0x90
[  541.108495][T12058]  ? clear_bhb_loop+0x40/0x90
[  541.113208][T12058]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.119134][T12058] RIP: 0033:0x7f9f9439ce59
[  541.123580][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.143201][T12058] RSP: 002b:00007f9f952e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  541.151628][T12058] RAX: ffffffffffffffda RBX: 00007f9f94615fa0 RCX: 00007f9f9439ce59
[  541.159627][T12058] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  541.167610][T12058] RBP: 00007f9f952e6090 R08: 0000000000000000 R09: 0000000000000000
[  541.175599][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.183584][T12058] R13: 00007f9f94616038 R14: 00007f9f94615fa0 R15: 00007fff74e64498
[  541.191601][T12058]  </TASK>
[  541.206707][T12058] warn_alloc: 1 callbacks suppressed
[  541.206721][T12058] syz.0.2196: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  541.243062][T12058] CPU: 1 PID: 12058 Comm: syz.0.2196 Not tainted syzkaller #0
[  541.250662][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  541.260755][T12058] Call Trace:
[  541.264064][T12058]  <TASK>
[  541.267031][T12058]  dump_stack_lvl+0x18c/0x250
[  541.271768][T12058]  ? show_regs_print_info+0x20/0x20
[  541.277006][T12058]  ? load_image+0x420/0x420
[  541.281544][T12058]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  541.288010][T12058]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  541.294570][T12058]  warn_alloc+0x246/0x340
[  541.298973][T12058]  ? slab_free_freelist_hook+0x130/0x1a0
[  541.304637][T12058]  ? zone_watermark_ok_safe+0x230/0x230
[  541.310220][T12058]  ? __get_vm_area_node+0x17b/0x370
[  541.315448][T12058]  ? __get_vm_area_node+0x17b/0x370
[  541.320696][T12058]  __vmalloc_node_range+0x393/0x1330
[  541.326052][T12058]  ? mark_lock+0x94/0x320
[  541.330435][T12058]  ? __lock_acquire+0x1347/0x7d40
[  541.335476][T12058]  ? verify_lock_unused+0x140/0x140
[  541.340709][T12058]  ? free_vm_area+0x50/0x50
[  541.345239][T12058]  ? end_current_label_crit_section+0x170/0x170
[  541.351502][T12058]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  541.357068][T12058]  __vmalloc+0x7a/0x90
[  541.361216][T12058]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  541.366800][T12058]  bpf_prog_alloc_no_stats+0x47/0x440
[  541.372205][T12058]  ? bpf_prog_alloc+0x2b/0x1a0
[  541.376993][T12058]  bpf_prog_alloc+0x3d/0x1a0
[  541.381602][T12058]  bpf_prog_load+0x6eb/0x1670
[  541.386323][T12058]  ? map_freeze+0x420/0x420
[  541.390861][T12058]  ? __might_fault+0xaa/0x120
[  541.395582][T12058]  ? __lock_acquire+0x7d40/0x7d40
[  541.400636][T12058]  ? file_end_write+0x159/0x250
[  541.405520][T12058]  ? __might_fault+0xaa/0x120
[  541.410234][T12058]  ? __might_fault+0xc6/0x120
[  541.414929][T12058]  ? __might_fault+0xaa/0x120
[  541.419638][T12058]  ? bpf_lsm_bpf+0x9/0x10
[  541.423988][T12058]  ? security_bpf+0x7e/0xa0
[  541.428517][T12058]  __sys_bpf+0x5ba/0x890
[  541.432789][T12058]  ? bpf_link_show_fdinfo+0x390/0x390
[  541.438194][T12058]  ? lock_chain_count+0x20/0x20
[  541.443076][T12058]  __x64_sys_bpf+0x7c/0x90
[  541.447536][T12058]  do_syscall_64+0x55/0xb0
[  541.451988][T12058]  ? clear_bhb_loop+0x40/0x90
[  541.456714][T12058]  ? clear_bhb_loop+0x40/0x90
[  541.461425][T12058]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.467355][T12058] RIP: 0033:0x7f9f9439ce59
[  541.471803][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.491448][T12058] RSP: 002b:00007f9f952e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  541.499882][T12058] RAX: ffffffffffffffda RBX: 00007f9f94615fa0 RCX: 00007f9f9439ce59
[  541.507876][T12058] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  541.515906][T12058] RBP: 00007f9f952e6090 R08: 0000000000000000 R09: 0000000000000000
[  541.523905][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.531902][T12058] R13: 00007f9f94616038 R14: 00007f9f94615fa0 R15: 00007fff74e64498
[  541.539923][T12058]  </TASK>
[  541.572161][T12058] Mem-Info:
[  541.576381][T12058] active_anon:5683 inactive_anon:0 isolated_anon:0
[  541.576381][T12058]  active_file:20745 inactive_file:40124 isolated_file:0
[  541.576381][T12058]  unevictable:768 dirty:495 writeback:0
[  541.576381][T12058]  slab_reclaimable:10304 slab_unreclaimable:92811
[  541.576381][T12058]  mapped:25042 shmem:1361 pagetables:513
[  541.576381][T12058]  sec_pagetables:0 bounce:0
[  541.576381][T12058]  kernel_misc_reclaimable:0
[  541.576381][T12058]  free:1345507 free_pcp:11775 free_cma:0
[  541.636484][T12058] Node 0 active_anon:22832kB inactive_anon:0kB active_file:82980kB inactive_file:160292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100168kB dirty:1980kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10300kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no
[  541.670506][T12058] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  541.717164][T12061] netlink: 'syz.3.2197': attribute type 9 has an invalid length.
[  541.724538][T12058] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  541.779702][T12058] lowmem_reserve[]: 0 2521 2522 2522 2522
[  541.800048][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2198'.
[  541.834383][T12058] Node 0 DMA32 free:1473416kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22596kB inactive_anon:0kB active_file:82980kB inactive_file:159464kB unevictable:1536kB writepending:1980kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:28812kB local_pcp:10168kB free_cma:0kB
[  541.953973][T12058] lowmem_reserve[]: 0 0 0 0 0
[  541.958868][T12058] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  541.986533][T12058] lowmem_reserve[]: 0 0 0 0 0
[  541.998876][T12058] Node 1 Normal free:3893252kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17408kB local_pcp:11168kB free_cma:0kB
[  542.049094][T12058] lowmem_reserve[]: 0 0 0 0 0
[  542.118082][T12058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  542.172839][T12058] Node 0 DMA32: 480*4kB (UME) 1023*8kB (ME) 901*16kB (UME) 1164*32kB (UME) 987*64kB (UME) 225*128kB (UME) 81*256kB (UM) 27*512kB (UME) 11*1024kB (UME) 6*2048kB (UM) 308*4096kB (UM) = 1473416kB
[  542.253659][T12058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  542.284403][T12058] Node 1 Normal: 237*4kB (UM) 58*8kB (UME) 48*16kB (UME) 132*32kB (UME) 36*64kB (UE) 10*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3893252kB
[  542.322325][T12058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  542.344061][T12072] netlink: 'syz.1.2201': attribute type 16 has an invalid length.
[  542.353037][T12058] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  542.355747][T12072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2201'.
[  542.362556][T12058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  542.362588][T12058] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  542.362614][T12058] 62230 total pagecache pages
[  542.362632][T12058] 0 pages in swap cache
[  542.362648][T12058] Free swap  = 124996kB
[  542.362665][T12058] Total swap = 124996kB
[  542.362684][T12058] 2097051 pages RAM
[  542.362701][T12058] 0 pages HighMem/MovableOnly
[  542.362717][T12058] 416932 pages reserved
[  542.362734][T12058] 0 pages cma reserved
[  542.440894][T12072] veth1_macvtap: entered allmulticast mode
[  542.988811][T12077] netlink: 'syz.0.2202': attribute type 10 has an invalid length.
[  543.015433][T12077] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2202'.
[  543.379248][T12083] can: request_module (can-proto-0) failed.
[  544.192319][T12110] FAULT_INJECTION: forcing a failure.
[  544.192319][T12110] name failslab, interval 1, probability 0, space 0, times 0
[  544.228974][T12110] CPU: 0 PID: 12110 Comm: syz.2.2212 Not tainted syzkaller #0
[  544.236513][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.246609][T12110] Call Trace:
[  544.249924][T12110]  <TASK>
[  544.252915][T12110]  dump_stack_lvl+0x18c/0x250
[  544.257652][T12110]  ? show_regs_print_info+0x20/0x20
[  544.262904][T12110]  ? load_image+0x420/0x420
[  544.267476][T12110]  ? __might_sleep+0xe0/0xe0
[  544.272114][T12110]  ? __lock_acquire+0x7d40/0x7d40
[  544.277198][T12110]  should_fail_ex+0x39d/0x4d0
[  544.281932][T12110]  should_failslab+0x9/0x20
[  544.286504][T12110]  slab_pre_alloc_hook+0x59/0x310
[  544.291593][T12110]  ? sock_kmalloc+0x96/0xf0
[  544.296157][T12110]  ? sock_kmalloc+0x96/0xf0
[  544.300740][T12110]  __kmem_cache_alloc_node+0x53/0x250
[  544.306165][T12110]  ? sock_kmalloc+0x96/0xf0
[  544.310752][T12110]  __kmalloc+0xa4/0x230
[  544.314967][T12110]  sock_kmalloc+0x96/0xf0
[  544.319353][T12110]  ____sys_sendmsg+0x1be/0x960
[  544.324199][T12110]  ? __lock_acquire+0x7d40/0x7d40
[  544.329273][T12110]  ? __asan_memset+0x22/0x40
[  544.333919][T12110]  ? __sys_sendmsg_sock+0x30/0x30
[  544.339010][T12110]  ? __import_iovec+0x3fa/0x850
[  544.343916][T12110]  ? import_iovec+0x73/0xa0
[  544.348484][T12110]  ___sys_sendmsg+0x2a6/0x360
[  544.353215][T12110]  ? get_pid_task+0x20/0x1e0
[  544.357858][T12110]  ? __sys_sendmsg+0x2a0/0x2a0
[  544.362697][T12110]  ? __lock_acquire+0x7d40/0x7d40
[  544.367802][T12110]  __se_sys_sendmsg+0x1c2/0x2b0
[  544.372711][T12110]  ? __x64_sys_sendmsg+0x80/0x80
[  544.377718][T12110]  ? lockdep_hardirqs_on+0x98/0x150
[  544.382985][T12110]  do_syscall_64+0x55/0xb0
[  544.387444][T12110]  ? clear_bhb_loop+0x40/0x90
[  544.392169][T12110]  ? clear_bhb_loop+0x40/0x90
[  544.396897][T12110]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.402837][T12110] RIP: 0033:0x7f8e22b9ce59
[  544.407294][T12110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.427025][T12110] RSP: 002b:00007f8e23a28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  544.435480][T12110] RAX: ffffffffffffffda RBX: 00007f8e22e15fa0 RCX: 00007f8e22b9ce59
[  544.443481][T12110] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  544.451493][T12110] RBP: 00007f8e23a28090 R08: 0000000000000000 R09: 0000000000000000
[  544.459499][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.467502][T12110] R13: 00007f8e22e16038 R14: 00007f8e22e15fa0 R15: 00007ffde34d99c8
[  544.475522][T12110]  </TASK>
[  545.163346][T12119] can: request_module (can-proto-0) failed.
[  545.205045][T12127] netlink: 'syz.0.2217': attribute type 10 has an invalid length.
[  545.358246][T12127] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2217'.
[  545.425277][T12133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2220'.
[  546.108073][T12137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2221'.
[  546.503595][T12153] netlink: 'syz.2.2229': attribute type 29 has an invalid length.
[  546.514544][T12153] netlink: 'syz.2.2229': attribute type 29 has an invalid length.
[  546.547894][T12153] netlink: 'syz.2.2229': attribute type 29 has an invalid length.
[  546.591006][T12151] can: request_module (can-proto-0) failed.
[  546.608893][T12153] netlink: 'syz.2.2229': attribute type 29 has an invalid length.
[  546.626785][T12153] netlink: 'syz.2.2229': attribute type 29 has an invalid length.
[  547.221381][T12168] netlink: 'syz.1.2232': attribute type 10 has an invalid length.
[  547.290773][T12168] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2232'.
[  547.364467][T12173] FAULT_INJECTION: forcing a failure.
[  547.364467][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  547.386383][T12173] CPU: 0 PID: 12173 Comm: syz.3.2234 Not tainted syzkaller #0
[  547.393902][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  547.404009][T12173] Call Trace:
[  547.407318][T12173]  <TASK>
[  547.410312][T12173]  dump_stack_lvl+0x18c/0x250
[  547.415036][T12173]  ? show_regs_print_info+0x20/0x20
[  547.420290][T12173]  ? load_image+0x420/0x420
[  547.424829][T12173]  ? __might_fault+0xaa/0x120
[  547.429554][T12173]  ? __lock_acquire+0x7d40/0x7d40
[  547.434627][T12173]  ? __virt_addr_valid+0x18c/0x540
[  547.439788][T12173]  should_fail_ex+0x39d/0x4d0
[  547.444513][T12173]  _copy_from_user+0x2f/0xe0
[  547.449141][T12173]  ___bpf_copy_key+0xb0/0x100
[  547.453929][T12173]  map_update_elem+0x260/0x700
[  547.458750][T12173]  __sys_bpf+0x6b5/0x890
[  547.463043][T12173]  ? bpf_link_show_fdinfo+0x390/0x390
[  547.468560][T12173]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  547.474780][T12173]  __x64_sys_bpf+0x7c/0x90
[  547.479253][T12173]  do_syscall_64+0x55/0xb0
[  547.483714][T12173]  ? clear_bhb_loop+0x40/0x90
[  547.488439][T12173]  ? clear_bhb_loop+0x40/0x90
[  547.493178][T12173]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  547.499123][T12173] RIP: 0033:0x7f59a1d9ce59
[  547.503579][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.523257][T12173] RSP: 002b:00007f59a2cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  547.531710][T12173] RAX: ffffffffffffffda RBX: 00007f59a2015fa0 RCX: 00007f59a1d9ce59
[  547.540068][T12173] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002
[  547.548079][T12173] RBP: 00007f59a2cfc090 R08: 0000000000000000 R09: 0000000000000000
[  547.556175][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.564190][T12173] R13: 00007f59a2016038 R14: 00007f59a2015fa0 R15: 00007ffd59b284b8
[  547.572210][T12173]  </TASK>
[  547.639578][T12176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2235'.
[  548.120190][T12191] netlink: 'syz.1.2240': attribute type 9 has an invalid length.
[  548.645973][T12196] can: request_module (can-proto-0) failed.
[  549.274706][T12214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2247'.
[  549.717609][T12223] netlink: 'syz.2.2248': attribute type 10 has an invalid length.
[  549.728643][T12223] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2248'.
[  550.882275][T12239] netlink: 'syz.2.2255': attribute type 10 has an invalid length.
[  550.915561][T12239] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2255'.
[  551.250268][T12243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2257'.
[  551.674266][T12252] netlink: 'syz.3.2260': attribute type 10 has an invalid length.
[  551.772409][T12252] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2260'.
[  552.241047][T12259] can: request_module (can-proto-0) failed.
[  552.578147][T12265] FAULT_INJECTION: forcing a failure.
[  552.578147][T12265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.593845][T12265] CPU: 0 PID: 12265 Comm: syz.2.2264 Not tainted syzkaller #0
[  552.601363][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  552.611471][T12265] Call Trace:
[  552.614787][T12265]  <TASK>
[  552.617755][T12265]  dump_stack_lvl+0x18c/0x250
[  552.622503][T12265]  ? show_regs_print_info+0x20/0x20
[  552.627731][T12265]  ? load_image+0x420/0x420
[  552.632281][T12265]  ? __might_fault+0xaa/0x120
[  552.636976][T12265]  ? __lock_acquire+0x7d40/0x7d40
[  552.642051][T12265]  should_fail_ex+0x39d/0x4d0
[  552.646760][T12265]  _copy_from_user+0x2f/0xe0
[  552.651372][T12265]  ___sys_recvmsg+0x176/0x590
[  552.656089][T12265]  ? __sys_recvmsg+0x2a0/0x2a0
[  552.660879][T12265]  ? __fget_files+0x28/0x4b0
[  552.665504][T12265]  ? __fget_files+0x43d/0x4b0
[  552.670237][T12265]  __x64_sys_recvmsg+0x20c/0x2e0
[  552.675201][T12265]  ? ___sys_recvmsg+0x590/0x590
[  552.680080][T12265]  ? syscall_enter_from_user_mode+0x2e/0x80
[  552.686012][T12265]  do_syscall_64+0x55/0xb0
[  552.690490][T12265]  ? clear_bhb_loop+0x40/0x90
[  552.695241][T12265]  ? clear_bhb_loop+0x40/0x90
[  552.699962][T12265]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  552.705878][T12265] RIP: 0033:0x7f8e22b9ce59
[  552.710302][T12265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.729928][T12265] RSP: 002b:00007f8e23a28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  552.738376][T12265] RAX: ffffffffffffffda RBX: 00007f8e22e15fa0 RCX: 00007f8e22b9ce59
[  552.746373][T12265] RDX: 0000000040000140 RSI: 00002000000004c0 RDI: 0000000000000004
[  552.754369][T12265] RBP: 00007f8e23a28090 R08: 0000000000000000 R09: 0000000000000000
[  552.762378][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.770382][T12265] R13: 00007f8e22e16038 R14: 00007f8e22e15fa0 R15: 00007ffde34d99c8
[  552.778437][T12265]  </TASK>
[  552.999177][T12269] syzkaller0: entered promiscuous mode
[  553.020369][T12271] netlink: 'syz.1.2266': attribute type 29 has an invalid length.
[  553.030790][T12269] syzkaller0: entered allmulticast mode
[  553.050612][T12271] netlink: 'syz.1.2266': attribute type 29 has an invalid length.
[  553.068568][T12271] netlink: 'syz.1.2266': attribute type 29 has an invalid length.
[  553.162020][T12271] netlink: 'syz.1.2266': attribute type 29 has an invalid length.
[  553.185059][T12275] netlink: 'syz.1.2266': attribute type 29 has an invalid length.
[  553.194666][T12274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2268'.
[  554.811172][T12281] netlink: 'syz.3.2270': attribute type 10 has an invalid length.
[  554.819050][T12281] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2270'.
[  555.013667][T12284] can: request_module (can-proto-0) failed.
[  555.035787][T12291] netlink: 'syz.2.2273': attribute type 10 has an invalid length.
[  555.071802][T12291] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2273'.
[  555.239478][T12299] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2275'.
[  555.886058][T12305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2280'.
[  556.098811][T12311] syzkaller0: entered promiscuous mode
[  556.146042][T12311] syzkaller0: entered allmulticast mode
[  556.161135][T12312] netlink: 'syz.2.2281': attribute type 10 has an invalid length.
[  556.215411][T12312] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2281'.
[  556.392991][T12318] can: request_module (can-proto-0) failed.
[  557.116897][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  557.134173][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  557.147498][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  557.157545][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  557.165502][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  557.177286][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  558.893023][T12334] netlink: 'syz.2.2289': attribute type 10 has an invalid length.
[  558.902308][T12334] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2289'.
[  559.059967][ T1313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.128625][T12341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2292'.
[  559.240951][ T5784] Bluetooth: hci3: command tx timeout
[  559.248542][ T1313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.613079][ T1313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.785513][ T1313] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  559.795339][ T1313] bridge0: port 3(netdevsim0) entered disabled state
[  559.807153][ T1313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.840435][T12361] netlink: 'syz.2.2297': attribute type 10 has an invalid length.
[  559.881572][T12361] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2297'.
[  559.933367][T12358] syzkaller0: entered promiscuous mode
[  559.939137][T12358] syzkaller0: entered allmulticast mode
[  559.988477][T12325] chnl_net:caif_netlink_parms(): no params data found
[  561.310814][ T5779] Bluetooth: hci3: command tx timeout
[  561.688789][T12372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2303'.
[  561.879404][T12383] FAULT_INJECTION: forcing a failure.
[  561.879404][T12383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.960948][T12383] CPU: 1 PID: 12383 Comm: syz.2.2304 Not tainted syzkaller #0
[  561.968592][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  561.978708][T12383] Call Trace:
[  561.982042][T12383]  <TASK>
[  561.985015][T12383]  dump_stack_lvl+0x18c/0x250
[  561.989791][T12383]  ? show_regs_print_info+0x20/0x20
[  561.995050][T12383]  ? load_image+0x420/0x420
[  561.999635][T12383]  ? __lock_acquire+0x7d40/0x7d40
[  562.004729][T12383]  ? snprintf+0xe9/0x140
[  562.009054][T12383]  should_fail_ex+0x39d/0x4d0
[  562.013816][T12383]  _copy_to_user+0x2f/0xa0
[  562.018354][T12383]  simple_read_from_buffer+0xe7/0x150
[  562.023825][T12383]  proc_fail_nth_read+0x1e8/0x260
[  562.028962][T12383]  ? proc_fault_inject_write+0x360/0x360
[  562.034682][T12383]  ? fsnotify_perm+0x271/0x5e0
[  562.039505][T12383]  ? proc_fault_inject_write+0x360/0x360
[  562.045201][T12383]  vfs_read+0x28b/0x970
[  562.049450][T12383]  ? kernel_read+0x1e0/0x1e0
[  562.054193][T12383]  ? __fget_files+0x28/0x4b0
[  562.058857][T12383]  ? __fget_files+0x28/0x4b0
[  562.063522][T12383]  ? __fget_files+0x43d/0x4b0
[  562.068288][T12383]  ? __fdget_pos+0x2a3/0x330
[  562.072937][T12383]  ? ksys_read+0x75/0x260
[  562.077326][T12383]  ksys_read+0x150/0x260
[  562.081641][T12383]  ? vfs_write+0x990/0x990
[  562.086126][T12383]  ? lockdep_hardirqs_on+0x98/0x150
[  562.091394][T12383]  do_syscall_64+0x55/0xb0
[  562.095863][T12383]  ? clear_bhb_loop+0x40/0x90
[  562.100594][T12383]  ? clear_bhb_loop+0x40/0x90
[  562.105336][T12383]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  562.111287][T12383] RIP: 0033:0x7f8e22b5d68e
[  562.115755][T12383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  562.135416][T12383] RSP: 002b:00007f8e23a27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  562.143838][T12325] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.144542][T12325] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.150893][T12383] RAX: ffffffffffffffda RBX: 00007f8e23a286c0 RCX: 00007f8e22b5d68e
[  562.150935][T12383] RDX: 000000000000000f RSI: 00007f8e23a280a0 RDI: 0000000000000006
[  562.150950][T12383] RBP: 00007f8e23a28090 R08: 0000000000000000 R09: 0000000000000000
[  562.150964][T12383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.173946][T12325] bridge_slave_0: entered allmulticast mode
[  562.188450][T12325] bridge_slave_0: entered promiscuous mode
[  562.189967][T12383] R13: 00007f8e22e16038 R14: 00007f8e22e15fa0 R15: 00007ffde34d99c8
[  562.190022][T12383]  </TASK>
[  562.223829][T12325] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.234892][T12325] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.242394][T12325] bridge_slave_1: entered allmulticast mode
[  562.250074][T12325] bridge_slave_1: entered promiscuous mode
[  562.353770][T12325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.375459][T12325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.464130][T12325] team0: Port device team_slave_0 added
[  562.486167][T12325] team0: Port device team_slave_1 added
[  562.555424][T12325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.574722][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.624907][T12325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.644021][T12325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.665831][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.705311][T12325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.852062][T12325] hsr_slave_0: entered promiscuous mode
[  562.881958][T12325] hsr_slave_1: entered promiscuous mode
[  562.913783][T12325] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  562.932482][T12325] Cannot create hsr debugfs directory
[  563.109731][T12405] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.2308'.
[  563.180067][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  563.190816][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  563.240886][T12400] netlink: 'syz.2.2307': attribute type 10 has an invalid length.
[  563.259374][T12400] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2307'.
[  563.391465][ T5779] Bluetooth: hci3: command tx timeout
[  563.476851][T12411] netlink: 'syz.3.2310': attribute type 10 has an invalid length.
[  563.533871][T12411] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2310'.
[  563.691671][T12414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2311'.
[  564.249619][T12421] syzkaller0: entered promiscuous mode
[  564.270559][T12421] syzkaller0: entered allmulticast mode
[  565.187451][T12450] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.2319'.
[  565.472213][ T5779] Bluetooth: hci3: command tx timeout
[  566.604146][T12453] netlink: 'syz.3.2320': attribute type 10 has an invalid length.
[  566.612359][T12453] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2320'.
[  566.905703][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'.
[  566.997266][T12465] netlink: 'syz.2.2322': attribute type 10 has an invalid length.
[  567.005845][T12465] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2322'.
[  567.788915][T12325] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  567.823742][T12325] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  567.915592][T12325] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  567.998067][T12325] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  568.143360][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2328'.
[  568.251726][ T1313] hsr_slave_0: left promiscuous mode
[  568.269877][ T1313] hsr0: left allmulticast mode
[  568.280235][ T1313] bridge0: port 4(hsr0) entered disabled state
[  568.294434][ T1313] bridge_slave_1: left allmulticast mode
[  568.300333][ T1313] bridge_slave_1: left promiscuous mode
[  568.306370][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.323055][ T1313] bridge_slave_0: left allmulticast mode
[  568.328977][ T1313] bridge_slave_0: left promiscuous mode
[  568.336777][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.389286][ T1313] veth1_macvtap: left promiscuous mode
[  568.409325][ T1313] veth0_macvtap: left promiscuous mode
[  568.417122][ T1313] veth1_vlan: left promiscuous mode
[  568.434266][ T1313] veth0_vlan: left promiscuous mode
[  569.593506][T12496] netlink: 'syz.3.2329': attribute type 10 has an invalid length.
[  569.602486][T12496] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2329'.
[  569.660232][T12494] syzkaller0: entered promiscuous mode
[  569.665860][T12494] syzkaller0: entered allmulticast mode
[  571.561481][T12325] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.626680][T12325] 8021q: adding VLAN 0 to HW filter on device team0
[  571.673076][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.681244][ T8449] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.693446][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.700745][ T8449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.719343][T12545] netlink: 'syz.3.2334': attribute type 29 has an invalid length.
[  571.754022][T12545] netlink: 'syz.3.2334': attribute type 29 has an invalid length.
[  571.769233][T12549] netlink: 'syz.3.2334': attribute type 29 has an invalid length.
[  571.804870][T12545] netlink: 'syz.3.2334': attribute type 29 has an invalid length.
[  571.861917][T12551] netlink: 'syz.1.2335': attribute type 10 has an invalid length.
[  571.940883][T12551] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2335'.
[  571.976139][T12549] netlink: 'syz.3.2334': attribute type 29 has an invalid length.
[  572.816618][T12325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.925901][T12325] veth0_vlan: entered promiscuous mode
[  572.958467][T12325] veth1_vlan: entered promiscuous mode
[  572.983576][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2339'.
[  573.073611][T12325] veth0_macvtap: entered promiscuous mode
[  573.084373][T12325] veth1_macvtap: entered promiscuous mode
[  573.109280][T12325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.142104][T12325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.165099][T12325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.190915][T12325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.199700][T12325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.210347][T12325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.317688][T12575] netlink: 'syz.1.2344': attribute type 29 has an invalid length.
[  573.330509][T12571] syzkaller0: entered promiscuous mode
[  573.336564][T12571] syzkaller0: entered allmulticast mode
[  573.356707][T12575] netlink: 'syz.1.2344': attribute type 29 has an invalid length.
[  573.399151][T12579] netlink: 'syz.1.2344': attribute type 29 has an invalid length.
[  574.998232][T12579] validate_nla: 1 callbacks suppressed
[  574.998255][T12579] netlink: 'syz.1.2344': attribute type 29 has an invalid length.
[  575.044898][T12588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2349'.
[  575.170785][ T8449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.178682][ T8449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.271320][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.301293][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.666476][T12608] syzkaller0: entered promiscuous mode
[  575.672526][T12608] syzkaller0: entered allmulticast mode
[  575.754540][T12615] netlink: 'syz.2.2360': attribute type 29 has an invalid length.
[  575.797446][T12615] netlink: 'syz.2.2360': attribute type 29 has an invalid length.
[  576.926002][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  576.957321][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  576.970892][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  576.979173][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  576.987902][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  576.998524][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  577.732908][T12616] netlink: 'syz.2.2360': attribute type 29 has an invalid length.
[  578.229532][T12635] chnl_net:caif_netlink_parms(): no params data found
[  578.386609][T12661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2378'.
[  578.431878][T12635] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.439231][T12635] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.446607][T12635] bridge_slave_0: entered allmulticast mode
[  578.454737][T12635] bridge_slave_0: entered promiscuous mode
[  578.543618][T12659] syzkaller0: entered promiscuous mode
[  578.551270][T12659] syzkaller0: entered allmulticast mode
[  578.561642][T12635] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.575665][T12635] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.586887][T12635] bridge_slave_1: entered allmulticast mode
[  578.596614][T12635] bridge_slave_1: entered promiscuous mode
[  578.886514][T12676] netlink: 'syz.3.2383': attribute type 29 has an invalid length.
[  579.074067][ T5779] Bluetooth: hci0: command tx timeout
[  580.335202][T12635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.347102][T12676] netlink: 'syz.3.2383': attribute type 29 has an invalid length.
[  580.364029][T12635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.435989][T12635] team0: Port device team_slave_0 added
[  580.465599][T12635] team0: Port device team_slave_1 added
[  580.503482][T12635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.510485][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.561115][T12635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.575811][T12635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.594459][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.643599][T12635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.656960][T12686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.667908][T12686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.690471][T12686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.699192][T12686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.928353][T12696] FAULT_INJECTION: forcing a failure.
[  580.928353][T12696] name failslab, interval 1, probability 0, space 0, times 0
[  580.944916][T12696] CPU: 1 PID: 12696 Comm: syz.2.2390 Not tainted syzkaller #0
[  580.952516][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  580.962688][T12696] Call Trace:
[  580.966085][T12696]  <TASK>
[  580.969055][T12696]  dump_stack_lvl+0x18c/0x250
[  580.973786][T12696]  ? show_regs_print_info+0x20/0x20
[  580.979030][T12696]  ? load_image+0x420/0x420
[  580.983603][T12696]  ? __lock_acquire+0x7d40/0x7d40
[  580.988683][T12696]  should_fail_ex+0x39d/0x4d0
[  580.993424][T12696]  should_failslab+0x9/0x20
[  580.997980][T12696]  slab_pre_alloc_hook+0x59/0x310
[  581.003074][T12696]  ? bpf_prog_alloc+0x3d/0x1a0
[  581.007890][T12696]  ? bpf_prog_load+0x6eb/0x1670
[  581.012791][T12696]  ? __sys_bpf+0x5ba/0x890
[  581.017262][T12696]  kmem_cache_alloc_node+0x60/0x320
[  581.022504][T12696]  ? alloc_vmap_area+0x1b4/0x1e30
[  581.027576][T12696]  alloc_vmap_area+0x1b4/0x1e30
[  581.032498][T12696]  ? vm_map_ram+0xcb0/0xcb0
[  581.037068][T12696]  ? rcu_is_watching+0x15/0xb0
[  581.041894][T12696]  __get_vm_area_node+0x162/0x370
[  581.046976][T12696]  __vmalloc_node_range+0x36e/0x1330
[  581.052316][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.057933][T12696]  ? perf_trace_preemptirq_template+0xac/0x330
[  581.064145][T12696]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  581.070172][T12696]  ? lock_chain_count+0x20/0x20
[  581.075075][T12696]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.081278][T12696]  ? free_vm_area+0x50/0x50
[  581.085828][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.091426][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.097016][T12696]  __vmalloc+0x7a/0x90
[  581.101141][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.106746][T12696]  bpf_prog_alloc_no_stats+0x47/0x440
[  581.112160][T12696]  ? bpf_prog_alloc+0x2b/0x1a0
[  581.116978][T12696]  bpf_prog_alloc+0x3d/0x1a0
[  581.121622][T12696]  bpf_prog_load+0x6eb/0x1670
[  581.126370][T12696]  ? map_freeze+0x420/0x420
[  581.130928][T12696]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.137145][T12696]  ? lockdep_hardirqs_on+0x98/0x150
[  581.142401][T12696]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.148624][T12696]  ? rcuref_put_slowpath+0x111/0x150
[  581.151725][ T5779] Bluetooth: hci0: command tx timeout
[  581.153945][T12696]  ? rep_movs_alternative+0x4a/0x90
[  581.153974][T12696]  ? bpf_lsm_bpf+0x9/0x10
[  581.168957][T12696]  ? security_bpf+0x7e/0xa0
[  581.173517][T12696]  __sys_bpf+0x5ba/0x890
[  581.177850][T12696]  ? bpf_link_show_fdinfo+0x390/0x390
[  581.183369][T12696]  ? lock_chain_count+0x20/0x20
[  581.188265][T12696]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  581.194300][T12696]  __x64_sys_bpf+0x7c/0x90
[  581.198774][T12696]  do_syscall_64+0x55/0xb0
[  581.203241][T12696]  ? clear_bhb_loop+0x40/0x90
[  581.207968][T12696]  ? clear_bhb_loop+0x40/0x90
[  581.212707][T12696]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  581.218648][T12696] RIP: 0033:0x7f8e22b9ce59
[  581.223134][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.242782][T12696] RSP: 002b:00007f8e23a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  581.251236][T12696] RAX: ffffffffffffffda RBX: 00007f8e22e15fa0 RCX: 00007f8e22b9ce59
[  581.259292][T12696] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005
[  581.267313][T12696] RBP: 00007f8e23a28090 R08: 0000000000000000 R09: 0000000000000000
[  581.275335][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.283361][T12696] R13: 00007f8e22e16038 R14: 00007f8e22e15fa0 R15: 00007ffde34d99c8
[  581.291424][T12696]  </TASK>
[  581.314270][T12696] syz.2.2390: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  581.350883][T12696] CPU: 1 PID: 12696 Comm: syz.2.2390 Not tainted syzkaller #0
[  581.358420][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  581.368518][T12696] Call Trace:
[  581.371910][T12696]  <TASK>
[  581.374919][T12696]  dump_stack_lvl+0x18c/0x250
[  581.379650][T12696]  ? show_regs_print_info+0x20/0x20
[  581.385008][T12696]  ? load_image+0x420/0x420
[  581.389657][T12696]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  581.396122][T12696]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  581.402697][T12696]  warn_alloc+0x246/0x340
[  581.407084][T12696]  ? slab_free_freelist_hook+0x130/0x1a0
[  581.412761][T12696]  ? zone_watermark_ok_safe+0x230/0x230
[  581.418366][T12696]  ? __get_vm_area_node+0x17b/0x370
[  581.423620][T12696]  ? __get_vm_area_node+0x17b/0x370
[  581.428898][T12696]  __vmalloc_node_range+0x393/0x1330
[  581.434223][T12696]  ? perf_trace_preemptirq_template+0xac/0x330
[  581.440410][T12696]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  581.446414][T12696]  ? lock_chain_count+0x20/0x20
[  581.451285][T12696]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.457465][T12696]  ? free_vm_area+0x50/0x50
[  581.461996][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.467583][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.473164][T12696]  __vmalloc+0x7a/0x90
[  581.477278][T12696]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  581.482848][T12696]  bpf_prog_alloc_no_stats+0x47/0x440
[  581.488254][T12696]  ? bpf_prog_alloc+0x2b/0x1a0
[  581.493049][T12696]  bpf_prog_alloc+0x3d/0x1a0
[  581.497669][T12696]  bpf_prog_load+0x6eb/0x1670
[  581.502378][T12696]  ? map_freeze+0x420/0x420
[  581.506918][T12696]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.513099][T12696]  ? lockdep_hardirqs_on+0x98/0x150
[  581.518331][T12696]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.524518][T12696]  ? rcuref_put_slowpath+0x111/0x150
[  581.529845][T12696]  ? rep_movs_alternative+0x4a/0x90
[  581.535072][T12696]  ? bpf_lsm_bpf+0x9/0x10
[  581.539425][T12696]  ? security_bpf+0x7e/0xa0
[  581.543998][T12696]  __sys_bpf+0x5ba/0x890
[  581.548270][T12696]  ? bpf_link_show_fdinfo+0x390/0x390
[  581.553692][T12696]  ? lock_chain_count+0x20/0x20
[  581.558574][T12696]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  581.564586][T12696]  __x64_sys_bpf+0x7c/0x90
[  581.569039][T12696]  do_syscall_64+0x55/0xb0
[  581.573480][T12696]  ? clear_bhb_loop+0x40/0x90
[  581.578186][T12696]  ? clear_bhb_loop+0x40/0x90
[  581.582896][T12696]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  581.588829][T12696] RIP: 0033:0x7f8e22b9ce59
[  581.593277][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.612908][T12696] RSP: 002b:00007f8e23a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  581.621348][T12696] RAX: ffffffffffffffda RBX: 00007f8e22e15fa0 RCX: 00007f8e22b9ce59
[  581.629384][T12696] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005
[  581.637418][T12696] RBP: 00007f8e23a28090 R08: 0000000000000000 R09: 0000000000000000
[  581.645416][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.653424][T12696] R13: 00007f8e22e16038 R14: 00007f8e22e15fa0 R15: 00007ffde34d99c8
[  581.661439][T12696]  </TASK>
[  581.689080][T12696] Mem-Info:
[  581.699736][T12635] hsr_slave_0: entered promiscuous mode
[  581.710097][T12635] hsr_slave_1: entered promiscuous mode
[  581.730378][T12635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  581.738368][T12635] Cannot create hsr debugfs directory
[  581.756308][T12696] active_anon:5820 inactive_anon:0 isolated_anon:0
[  581.756308][T12696]  active_file:20745 inactive_file:40143 isolated_file:0
[  581.756308][T12696]  unevictable:768 dirty:72 writeback:0
[  581.756308][T12696]  slab_reclaimable:10408 slab_unreclaimable:93823
[  581.756308][T12696]  mapped:25069 shmem:1361 pagetables:523
[  581.756308][T12696]  sec_pagetables:0 bounce:0
[  581.756308][T12696]  kernel_misc_reclaimable:0
[  581.756308][T12696]  free:1344508 free_pcp:11271 free_cma:0
[  581.821269][T12696] Node 0 active_anon:23280kB inactive_anon:0kB active_file:82980kB inactive_file:160368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100276kB dirty:284kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10568kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no
[  581.859044][T12696] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  581.921367][T12696] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  581.967045][T12696] lowmem_reserve[]: 0 2521 2522 2522 2522
[  581.979559][T12696] Node 0 DMA32 free:1468428kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23244kB inactive_anon:0kB active_file:82980kB inactive_file:159540kB unevictable:1536kB writepending:280kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:26948kB local_pcp:11844kB free_cma:0kB
[  582.011952][T12696] lowmem_reserve[]: 0 0 0 0 0
[  582.016743][T12696] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  582.045255][T12696] lowmem_reserve[]: 0 0 0 0 0
[  582.074387][T12696] Node 1 Normal free:3894020kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16640kB local_pcp:5728kB free_cma:0kB
[  582.145063][T12703] syzkaller0: entered promiscuous mode
[  582.150613][T12703] syzkaller0: entered allmulticast mode
[  582.153813][T12696] lowmem_reserve[]: 0 0 0 0 0
[  582.167902][T12696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  582.208570][T12706] netlink: 'syz.3.2394': attribute type 29 has an invalid length.
[  582.219686][T12696] Node 0 DMA32: 1*4kB (M) 951*8kB (UME) 893*16kB (M) 679*32kB (ME) 799*64kB (UME) 332*128kB (UME) 93*256kB (UM) 33*512kB (UME) 11*1024kB (UME) 6*2048kB (UM) 308*4096kB (UM) = 1463084kB
[  582.247518][T12696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  582.260205][T12696] Node 1 Normal: 237*4kB (UM) 58*8kB (UME) 48*16kB (UME) 148*32kB (UME) 40*64kB (UE) 10*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3894020kB
[  582.262468][T12635] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.278274][T12696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  582.298635][T12696] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  582.308038][T12696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  582.319241][T12696] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  582.328748][T12696] 62249 total pagecache pages
[  582.335479][T12696] 0 pages in swap cache
[  582.335755][T12706] netlink: 'syz.3.2394': attribute type 29 has an invalid length.
[  582.339661][T12696] Free swap  = 124996kB
[  582.339672][T12696] Total swap = 124996kB
[  582.339683][T12696] 2097051 pages RAM
[  582.339691][T12696] 0 pages HighMem/MovableOnly
[  582.339698][T12696] 416932 pages reserved
[  582.339706][T12696] 0 pages cma reserved
[  582.439851][T12707] netlink: 'syz.3.2394': attribute type 29 has an invalid length.
[  582.448853][T12708] netlink: 'syz.3.2394': attribute type 29 has an invalid length.
[  582.509922][T12635] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.233760][ T5779] Bluetooth: hci0: command tx timeout
[  584.181123][T12709] netlink: 'syz.3.2394': attribute type 29 has an invalid length.
[  584.230203][T12635] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.246737][T12722] netlink: 'syz.2.2400': attribute type 10 has an invalid length.
[  584.255237][T12722] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2400'.
[  584.402049][T12635] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.480360][T12730] netlink: 'syz.2.2402': attribute type 10 has an invalid length.
[  584.501152][T12730] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2402'.
[  584.690281][T12635] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  584.728699][T12635] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  584.742891][T12635] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  584.755846][T12635] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  584.979574][T12635] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.020055][T12635] 8021q: adding VLAN 0 to HW filter on device team0
[  585.053663][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.060954][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.116641][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.123939][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.311055][ T5779] Bluetooth: hci0: command tx timeout
[  585.436965][T12743] syzkaller0: entered promiscuous mode
[  585.443496][T12743] syzkaller0: entered allmulticast mode
[  585.539199][T12748] netlink: 'syz.2.2410': attribute type 29 has an invalid length.
[  585.586784][T12748] netlink: 'syz.2.2410': attribute type 29 has an invalid length.
[  585.677144][T12752] can: request_module (can-proto-0) failed.
[  587.008597][T12750] netlink: 'syz.2.2410': attribute type 29 has an invalid length.
[  587.116613][T12635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.244914][T12635] veth0_vlan: entered promiscuous mode
[  587.263501][T12635] veth1_vlan: entered promiscuous mode
[  587.314231][T12635] veth0_macvtap: entered promiscuous mode
[  587.361554][T12635] veth1_macvtap: entered promiscuous mode
[  587.386901][T12635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.406165][T12635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.419990][T12635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.429529][T12635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.442619][T12635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.454659][T12635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.588777][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.622686][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.672045][ T8451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.679990][ T8451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.860521][T12777] syzkaller0: entered promiscuous mode
[  587.866144][T12777] syzkaller0: entered allmulticast mode
[  588.681356][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  588.690560][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  588.699154][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  588.715373][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  588.735135][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  588.742723][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  589.897579][T12791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  589.911821][T12791] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.920597][T12791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  589.929657][T12791] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.044313][T12794] netlink: 'syz.0.2428': attribute type 29 has an invalid length.
[  590.075065][T12794] netlink: 'syz.0.2428': attribute type 29 has an invalid length.
[  590.087649][T12797] netlink: 'syz.0.2428': attribute type 29 has an invalid length.
[  590.110252][T12794] netlink: 'syz.0.2428': attribute type 29 has an invalid length.
[  590.161127][T12794] netlink: 'syz.0.2428': attribute type 29 has an invalid length.
[  590.625722][T12788] chnl_net:caif_netlink_parms(): no params data found
[  590.705094][ T1313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.733995][T12817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2436'.
[  590.803871][T12818] syzkaller0: entered promiscuous mode
[  590.809440][T12818] syzkaller0: entered allmulticast mode
[  590.832505][ T5779] Bluetooth: hci1: command tx timeout
[  590.843245][ T1313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.960342][ T1313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.992236][T12788] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.999419][T12788] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.028198][T12788] bridge_slave_0: entered allmulticast mode
[  591.035666][T12788] bridge_slave_0: entered promiscuous mode
[  591.143514][ T1313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.181400][T12788] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.188734][T12788] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.205602][T12788] bridge_slave_1: entered allmulticast mode
[  591.227101][T12788] bridge_slave_1: entered promiscuous mode
[  591.279923][T12829] netlink: 'syz.1.2439': attribute type 29 has an invalid length.
[  592.917817][T12829] netlink: 'syz.1.2439': attribute type 29 has an invalid length.
[  592.921339][ T5779] Bluetooth: hci1: command tx timeout
[  592.927104][T12836] netlink: 'syz.3.2441': attribute type 10 has an invalid length.
[  592.940051][T12836] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2441'.
[  593.015116][T12788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.060848][T12788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.235512][T12788] team0: Port device team_slave_0 added
[  593.262055][T12788] team0: Port device team_slave_1 added
[  593.376280][T12849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2445'.
[  593.427288][T12851] 
: port 1(bond0) entered blocking state
[  593.437466][T12851] 
: port 1(bond0) entered disabled state
[  593.451069][T12851] bond0: entered allmulticast mode
[  593.473600][T12851] bond_slave_0: entered allmulticast mode
[  593.486131][T12851] bond_slave_1: entered allmulticast mode
[  593.507503][T12851] bond0: entered promiscuous mode
[  593.526318][T12851] bond_slave_0: entered promiscuous mode
[  593.544447][T12851] bond_slave_1: entered promiscuous mode
[  593.569639][T12788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.593506][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.626343][T12788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.639725][T12788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.677816][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.740832][T12788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.778240][T12859] netlink: 'syz.1.2446': attribute type 10 has an invalid length.
[  593.831996][T12859] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2446'.
[  594.183714][ T1313] ip6gretap0 (unregistering): left allmulticast mode
[  594.200290][ T1313] ip6gretap0 (unregistering): left promiscuous mode
[  594.215777][ T1313] Ÿë
: port 1(ip6gretap0) entered disabled state
[  594.545502][T12883] netlink: 'syz.0.2451': attribute type 29 has an invalid length.
[  594.560546][T12879] syzkaller0: entered promiscuous mode
[  594.567446][T12879] syzkaller0: entered allmulticast mode
[  594.585945][T12788] hsr_slave_0: entered promiscuous mode
[  594.605076][T12788] hsr_slave_1: entered promiscuous mode
[  594.613588][T12788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  594.621557][T12788] Cannot create hsr debugfs directory
[  594.684751][T12883] netlink: 'syz.0.2451': attribute type 29 has an invalid length.
[  594.765015][T12885] netlink: 'syz.0.2451': attribute type 29 has an invalid length.
[  594.872658][T12887] netlink: 'syz.0.2451': attribute type 29 has an invalid length.
[  594.881896][T12888] netlink: 'syz.0.2451': attribute type 29 has an invalid length.
[  594.990805][ T5779] Bluetooth: hci1: command tx timeout
[  596.458398][T12896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2454'.
[  596.972897][T12911] 
: port 1(bond0) entered blocking state
[  596.978801][T12911] 
: port 1(bond0) entered disabled state
[  596.985840][T12911] bond0: entered allmulticast mode
[  596.993356][T12911] bond_slave_0: entered allmulticast mode
[  596.999136][T12911] bond_slave_1: entered allmulticast mode
[  597.010512][T12911] bond0: entered promiscuous mode
[  597.016055][T12911] bond_slave_0: entered promiscuous mode
[  597.022292][T12911] bond_slave_1: entered promiscuous mode
[  597.072087][ T5779] Bluetooth: hci1: command tx timeout
[  597.106607][T12914] syzkaller0: entered promiscuous mode
[  597.132184][T12914] syzkaller0: entered allmulticast mode
[  597.344735][T12931] netlink: 'syz.3.2461': attribute type 29 has an invalid length.
[  598.067829][T12946] netlink: 'syz.1.2463': attribute type 29 has an invalid length.
[  599.293461][T12931] netlink: 'syz.3.2461': attribute type 29 has an invalid length.
[  599.317066][T12946] netlink: 'syz.1.2463': attribute type 29 has an invalid length.
[  599.485301][T12953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2467'.
[  599.849722][T12963] netlink: 'syz.3.2469': attribute type 10 has an invalid length.
[  599.880627][T12963] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2469'.
[  599.906848][T12788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  599.940351][ T1313] hsr_slave_0: left promiscuous mode
[  599.959960][ T1313] hsr_slave_1: left promiscuous mode
[  599.986611][ T1313] hsr0: left allmulticast mode
[  600.001873][ T1313] bridge0: port 2(hsr0) entered disabled state
[  600.023070][ T1313] bridge_slave_0: left promiscuous mode
[  600.037080][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.126643][ T1313] veth1_macvtap: left promiscuous mode
[  600.146897][ T1313] veth0_macvtap: left promiscuous mode
[  600.166657][ T1313] veth1_vlan: left promiscuous mode
[  600.190194][ T1313] veth0_vlan: left promiscuous mode
[  601.178511][T12996] netlink: 'syz.3.2475': attribute type 29 has an invalid length.
[  601.965400][T12788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  602.017786][T12996] netlink: 'syz.3.2475': attribute type 29 has an invalid length.
[  602.031724][T12999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2476'.
[  602.070899][T12788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  602.093522][T12788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  602.290392][T12788] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.377083][T12788] 8021q: adding VLAN 0 to HW filter on device team0
[  602.412576][T13029] netlink: 'syz.0.2478': attribute type 10 has an invalid length.
[  602.420452][T13029] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2478'.
[  602.661647][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.668863][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.712601][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.719828][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.127894][T13048] netlink: 'syz.1.2481': attribute type 10 has an invalid length.
[  603.192187][T13048] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2481'.
[  603.261963][T13056] netlink: 'syz.3.2482': attribute type 10 has an invalid length.
[  603.280698][T13056] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2482'.
[  603.385177][T12788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.561083][T12788] veth0_vlan: entered promiscuous mode
[  603.577375][T12788] veth1_vlan: entered promiscuous mode
[  603.652605][T12788] veth0_macvtap: entered promiscuous mode
[  603.685495][T12788] veth1_macvtap: entered promiscuous mode
[  603.753751][T12788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.872166][T13067] syzkaller0: entered promiscuous mode
[  603.891808][T13067] syzkaller0: entered allmulticast mode
[  603.920174][T12788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.948936][T12788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.970601][T12788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.010737][T12788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.039938][T12788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.060495][T13072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2486'.
[  604.149784][T13076] netlink: 'syz.3.2488': attribute type 29 has an invalid length.
[  604.204540][T13076] netlink: 'syz.3.2488': attribute type 29 has an invalid length.
[  605.736318][T13079] netlink: 'syz.3.2488': attribute type 29 has an invalid length.
[  605.839077][ T8451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.874869][ T8451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.932359][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.940252][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.115525][T13099] netlink: 'syz.1.2499': attribute type 10 has an invalid length.
[  606.135506][T13095] netlink: 'syz.0.2498': attribute type 29 has an invalid length.
[  606.148514][T13099] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2499'.
[  606.162464][T13093] can: request_module (can-proto-0) failed.
[  606.168444][T13095] netlink: 'syz.0.2498': attribute type 29 has an invalid length.
[  606.184663][T13100] netlink: 'syz.0.2498': attribute type 29 has an invalid length.
[  606.726259][T13109] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2502'.
[  606.858108][T13113] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2494'.
[  607.213428][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  607.240930][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  607.249573][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  607.262054][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  607.279554][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  607.287101][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  607.376736][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.425133][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2496'.
[  607.559837][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.672578][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.799674][T13127] can: request_module (can-proto-0) failed.
[  607.817807][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.852296][T13132] validate_nla: 4 callbacks suppressed
[  607.852352][T13132] netlink: 'syz.1.2504': attribute type 29 has an invalid length.
[  607.893973][T13132] netlink: 'syz.1.2504': attribute type 29 has an invalid length.
[  607.917300][T13132] netlink: 'syz.1.2504': attribute type 29 has an invalid length.
[  607.934218][T13132] netlink: 'syz.1.2504': attribute type 29 has an invalid length.
[  607.950120][T13132] netlink: 'syz.1.2504': attribute type 29 has an invalid length.
[  608.039774][T13140] netlink: 'syz.2.2506': attribute type 10 has an invalid length.
[  608.049826][T13140] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2506'.
[  608.470159][T13118] chnl_net:caif_netlink_parms(): no params data found
[  608.868577][T13159] netlink: 'syz.2.2510': attribute type 10 has an invalid length.
[  608.879441][T13159] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2510'.
[  608.971180][T13167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2511'.
[  609.104217][T13118] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.138086][T13118] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.155637][T13118] bridge_slave_0: entered allmulticast mode
[  609.185849][T13118] bridge_slave_0: entered promiscuous mode
[  609.310945][ T5784] Bluetooth: hci2: command tx timeout
[  609.324801][T13118] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.365971][T13118] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.411297][T13118] bridge_slave_1: entered allmulticast mode
[  609.452372][T13118] bridge_slave_1: entered promiscuous mode
[  609.627680][T13177] can: request_module (can-proto-0) failed.
[  609.723580][T13183] netlink: 'syz.2.2515': attribute type 10 has an invalid length.
[  609.734135][T13184] netlink: 'syz.1.2514': attribute type 29 has an invalid length.
[  609.745945][T13183] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2515'.
[  609.774934][T13118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.796435][T13184] netlink: 'syz.1.2514': attribute type 29 has an invalid length.
[  609.852608][T13118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.940294][T13118] team0: Port device team_slave_0 added
[  609.948490][T13118] team0: Port device team_slave_1 added
[  610.017784][T13118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.026125][T13118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.054136][T13118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.069517][T13118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.077252][T13118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.103764][T13118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.215788][T13118] hsr_slave_0: entered promiscuous mode
[  610.225177][T13118] hsr_slave_1: entered promiscuous mode
[  610.565480][ T1322] hsr_slave_0: left promiscuous mode
[  610.572284][ T1322] bridge_slave_1: left allmulticast mode
[  610.578429][ T1322] bridge_slave_1: left promiscuous mode
[  610.585866][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.596094][ T1322] bridge_slave_0: left allmulticast mode
[  610.601964][ T1322] bridge_slave_0: left promiscuous mode
[  610.607747][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.633828][ T1322] veth0_macvtap: left promiscuous mode
[  610.639538][ T1322] veth1_vlan: left promiscuous mode
[  610.649349][ T1322] veth0_vlan: left promiscuous mode
[  611.391469][ T5784] Bluetooth: hci2: command tx timeout
[  611.872339][T13118] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  611.892548][T13118] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  611.913978][T13118] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  611.931063][T13118] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  612.039923][T13118] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.069747][T13118] 8021q: adding VLAN 0 to HW filter on device team0
[  612.086759][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.093966][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.131948][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.139158][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.404043][T13118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.475264][T13118] veth0_vlan: entered promiscuous mode
[  612.493912][T13118] veth1_vlan: entered promiscuous mode
[  612.544510][T13118] veth0_macvtap: entered promiscuous mode
[  612.556919][T13118] veth1_macvtap: entered promiscuous mode
[  612.586333][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.598355][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.613622][T13118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.637151][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.648979][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.664259][T13118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.678638][T13118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.688978][T13118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.699762][T13118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.712247][T13118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.810547][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.828838][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.882265][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.893774][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.096042][T13246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2525'.
[  613.125460][T13245] validate_nla: 3 callbacks suppressed
[  613.125506][T13245] netlink: 'syz.2.2524': attribute type 29 has an invalid length.
[  613.151986][T13245] netlink: 'syz.2.2524': attribute type 29 has an invalid length.
[  613.171742][T13245] netlink: 'syz.2.2524': attribute type 29 has an invalid length.
[  613.209368][T13245] netlink: 'syz.2.2524': attribute type 29 has an invalid length.
[  613.229718][T13245] netlink: 'syz.2.2524': attribute type 29 has an invalid length.
[  613.470839][ T5784] Bluetooth: hci2: command tx timeout
[  614.195726][T13278] netlink: 'syz.1.2518': attribute type 29 has an invalid length.
[  614.212021][T13278] netlink: 'syz.1.2518': attribute type 29 has an invalid length.
[  614.233389][T13285] netlink: 'syz.0.2520': attribute type 21 has an invalid length.
[  614.241433][T13285] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2520'.
[  614.258069][T13278] netlink: 'syz.1.2518': attribute type 29 has an invalid length.
[  614.316156][T13282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2521'.
[  614.352536][T13284] netlink: 'syz.1.2518': attribute type 29 has an invalid length.
[  614.487432][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.517924][T13282] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.564121][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.610109][T13282] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.291562][T13316] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2529'.
[  615.550939][ T5784] Bluetooth: hci2: command tx timeout
[  615.839496][T13320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2531'.
[  615.888671][T13320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.896967][T13322] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2532'.
[  615.905591][T13320] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.926380][T13320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.950913][T13320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.073214][T13327] FAULT_INJECTION: forcing a failure.
[  616.073214][T13327] name failslab, interval 1, probability 0, space 0, times 0
[  616.086605][T13327] CPU: 0 PID: 13327 Comm: syz.2.2533 Not tainted syzkaller #0
[  616.094156][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  616.104252][T13327] Call Trace:
[  616.107572][T13327]  <TASK>
[  616.110556][T13327]  dump_stack_lvl+0x18c/0x250
[  616.115293][T13327]  ? lockdep_hardirqs_on+0x98/0x150
[  616.120554][T13327]  ? show_regs_print_info+0x20/0x20
[  616.125811][T13327]  ? dump_stack+0x9/0x20
[  616.130088][T13327]  ? dump_stack_lvl+0x5/0x250
[  616.134793][T13327]  should_fail_ex+0x39d/0x4d0
[  616.139505][T13327]  should_failslab+0x9/0x20
[  616.144033][T13327]  slab_pre_alloc_hook+0x59/0x310
[  616.149095][T13327]  kmem_cache_alloc+0x5a/0x2d0
[  616.153896][T13327]  ? alloc_empty_file+0x9e/0x1d0
[  616.158881][T13327]  alloc_empty_file+0x9e/0x1d0
[  616.163689][T13327]  path_openat+0x113/0x3230
[  616.168237][T13327]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  616.173990][T13327]  ? verify_lock_unused+0x140/0x140
[  616.179214][T13327]  ? do_filp_open+0x430/0x430
[  616.183928][T13327]  ? perf_trace_lock+0xfc/0x3b0
[  616.188850][T13327]  ? trace_event_raw_event_lock+0x250/0x250
[  616.194798][T13327]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  616.200818][T13327]  do_filp_open+0x1f5/0x430
[  616.205350][T13327]  ? alloc_fd+0x58f/0x630
[  616.209710][T13327]  ? vfs_tmpfile+0x490/0x490
[  616.214458][T13327]  ? _raw_spin_unlock+0x28/0x40
[  616.219346][T13327]  ? alloc_fd+0x58f/0x630
[  616.223709][T13327]  do_sys_openat2+0x134/0x1d0
[  616.228415][T13327]  ? do_sys_open+0xe0/0xe0
[  616.232867][T13327]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  616.239067][T13327]  __x64_sys_openat+0x139/0x160
[  616.243974][T13327]  do_syscall_64+0x55/0xb0
[  616.248419][T13327]  ? clear_bhb_loop+0x40/0x90
[  616.253131][T13327]  ? clear_bhb_loop+0x40/0x90
[  616.257843][T13327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.263764][T13327] RIP: 0033:0x7f67bbd9ce59
[  616.268197][T13327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.287891][T13327] RSP: 002b:00007f67bcbeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  616.296331][T13327] RAX: ffffffffffffffda RBX: 00007f67bc015fa0 RCX: 00007f67bbd9ce59
[  616.304336][T13327] RDX: 00000000000026e1 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  616.312336][T13327] RBP: 00007f67bcbeb090 R08: 0000000000000000 R09: 0000000000000000
[  616.320336][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.328336][T13327] R13: 00007f67bc016038 R14: 00007f67bc015fa0 R15: 00007ffc3d8b92a8
[  616.336349][T13327]  </TASK>
[  616.544912][T13330] FAULT_INJECTION: forcing a failure.
[  616.544912][T13330] name failslab, interval 1, probability 0, space 0, times 0
[  616.563125][T13330] CPU: 0 PID: 13330 Comm: syz.1.2534 Not tainted syzkaller #0
[  616.570636][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  616.580719][T13330] Call Trace:
[  616.584019][T13330]  <TASK>
[  616.586976][T13330]  dump_stack_lvl+0x18c/0x250
[  616.591693][T13330]  ? show_regs_print_info+0x20/0x20
[  616.596929][T13330]  ? load_image+0x420/0x420
[  616.601452][T13330]  ? __might_sleep+0xe0/0xe0
[  616.606062][T13330]  ? __lock_acquire+0x7d40/0x7d40
[  616.611106][T13330]  should_fail_ex+0x39d/0x4d0
[  616.615834][T13330]  should_failslab+0x9/0x20
[  616.620375][T13330]  slab_pre_alloc_hook+0x59/0x310
[  616.625440][T13330]  ? lockdep_hardirqs_on+0x98/0x150
[  616.630691][T13330]  kmem_cache_alloc_node+0x60/0x320
[  616.635927][T13330]  ? __alloc_skb+0x103/0x2c0
[  616.640546][T13330]  __alloc_skb+0x103/0x2c0
[  616.644991][T13330]  alloc_skb_with_frags+0xca/0x7b0
[  616.650142][T13330]  ? aa_label_sk_perm+0xcd/0x5c0
[  616.655096][T13330]  ? aa_label_sk_perm+0x463/0x5c0
[  616.660136][T13330]  sock_alloc_send_pskb+0x883/0x9a0
[  616.665365][T13330]  ? sock_kzfree_s+0x50/0x50
[  616.669977][T13330]  ? import_iovec+0x73/0xa0
[  616.674506][T13330]  ? do_syscall_64+0x55/0xb0
[  616.679119][T13330]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.685214][T13330]  ? __might_sleep+0xe0/0xe0
[  616.689917][T13330]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10
[  616.696002][T13330]  ? security_socket_getpeersec_dgram+0x83/0xa0
[  616.702271][T13330]  unix_stream_sendmsg+0x48b/0xbf0
[  616.707414][T13330]  ? unix_show_fdinfo+0x270/0x270
[  616.712455][T13330]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  616.718907][T13330]  ? aa_sock_msg_perm+0x94/0x150
[  616.723878][T13330]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  616.729197][T13330]  ? security_socket_sendmsg+0x80/0xa0
[  616.734675][T13330]  ? unix_show_fdinfo+0x270/0x270
[  616.739721][T13330]  ____sys_sendmsg+0x5ba/0x960
[  616.744509][T13330]  ? __asan_memset+0x22/0x40
[  616.749126][T13330]  ? __sys_sendmsg_sock+0x30/0x30
[  616.754166][T13330]  ? __import_iovec+0x3fa/0x850
[  616.759039][T13330]  ? import_iovec+0x73/0xa0
[  616.763558][T13330]  ___sys_sendmsg+0x2a6/0x360
[  616.768264][T13330]  ? __sys_sendmsg+0x2a0/0x2a0
[  616.773094][T13330]  __se_sys_sendmsg+0x1c2/0x2b0
[  616.777969][T13330]  ? __x64_sys_sendmsg+0x80/0x80
[  616.782945][T13330]  ? syscall_enter_from_user_mode+0x2e/0x80
[  616.788868][T13330]  do_syscall_64+0x55/0xb0
[  616.793321][T13330]  ? clear_bhb_loop+0x40/0x90
[  616.798020][T13330]  ? clear_bhb_loop+0x40/0x90
[  616.802730][T13330]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.808656][T13330] RIP: 0033:0x7fb383d9ce59
[  616.813098][T13330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.832723][T13330] RSP: 002b:00007fb384d41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  616.841162][T13330] RAX: ffffffffffffffda RBX: 00007fb384015fa0 RCX: 00007fb383d9ce59
[  616.849154][T13330] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000008
[  616.857136][T13330] RBP: 00007fb384d41090 R08: 0000000000000000 R09: 0000000000000000
[  616.865122][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.873107][T13330] R13: 00007fb384016038 R14: 00007fb384015fa0 R15: 00007ffe96700858
[  616.881110][T13330]  </TASK>
[  617.101100][T13336] can: request_module (can-proto-0) failed.
[  617.158185][T13340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2537'.
[  617.315323][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2548'.
[  618.702082][T13351] validate_nla: 18 callbacks suppressed
[  618.702122][T13351] netlink: 'syz.0.2550': attribute type 29 has an invalid length.
[  618.718678][T13351] netlink: 'syz.0.2550': attribute type 29 has an invalid length.
[  618.732895][T13351] netlink: 'syz.0.2550': attribute type 29 has an invalid length.
[  618.746894][T13351] netlink: 'syz.0.2550': attribute type 29 has an invalid length.
[  618.760571][T13351] netlink: 'syz.0.2550': attribute type 29 has an invalid length.
[  618.792333][T13353] netlink: 'syz.1.2541': attribute type 29 has an invalid length.
[  618.813263][T13353] netlink: 'syz.1.2541': attribute type 29 has an invalid length.
[  618.821034][T13352] netlink: 'syz.3.2540': attribute type 29 has an invalid length.
[  618.843214][T13352] netlink: 'syz.3.2540': attribute type 29 has an invalid length.
[  618.860306][T13355] netlink: 'syz.3.2540': attribute type 29 has an invalid length.
[  619.050721][T13360] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2543'.
[  619.349359][T13366] can: request_module (can-proto-0) failed.
[  619.545077][T13373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2551'.
[  620.009555][T13383] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2554'.
[  620.757554][ T5784] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  621.021312][T13400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2563'.
[  621.500347][T13419] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2568'.
[  621.516001][T13420] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2566'.
[  621.765725][T13422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2569'.
[  621.906739][T13426] syzkaller0: entered promiscuous mode
[  621.912460][T13426] syzkaller0: entered allmulticast mode
[  623.784411][T13439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2575'.
[  623.871991][T13443] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2577'.
[  623.972156][T13445] validate_nla: 24 callbacks suppressed
[  623.972211][T13445] netlink: 'syz.3.2579': attribute type 29 has an invalid length.
[  623.988701][T13445] netlink: 'syz.3.2579': attribute type 29 has an invalid length.
[  624.008763][T13445] netlink: 'syz.3.2579': attribute type 29 has an invalid length.
[  624.024348][T13445] netlink: 'syz.3.2579': attribute type 29 has an invalid length.
[  624.042186][T13445] netlink: 'syz.3.2579': attribute type 29 has an invalid length.
[  624.147781][T13449] netlink: 'syz.1.2581': attribute type 10 has an invalid length.
[  624.174123][T13449] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2581'.
[  624.351282][ T5784] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  624.586989][T13464] netlink: 'syz.0.2588': attribute type 29 has an invalid length.
[  624.644539][T13464] netlink: 'syz.0.2588': attribute type 29 has an invalid length.
[  624.691831][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  624.698185][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  624.735955][T13460] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2586'.
[  624.771791][T13464] netlink: 'syz.0.2588': attribute type 29 has an invalid length.
[  624.801478][T13464] netlink: 'syz.0.2588': attribute type 29 has an invalid length.
[  624.844889][T13470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2590'.
[  625.091406][T13476] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2593'.
[  625.464390][ T5784] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  625.670289][T13495] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2603'.
[  625.932213][T13499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2604'.
[  626.481828][T13520] tun0: tun_chr_ioctl cmd 1074025678
[  626.507045][T13520] tun0: group set to 0
[  626.600765][T13522] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2613'.
[  626.666807][T13526] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2615'.
[  627.098019][T13535] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2618'.
[  627.191506][T13537] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2619'.
[  627.839119][T13556] FAULT_INJECTION: forcing a failure.
[  627.839119][T13556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.856772][T13556] CPU: 1 PID: 13556 Comm: syz.3.2628 Not tainted syzkaller #0
[  627.864286][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  627.874371][T13556] Call Trace:
[  627.877678][T13556]  <TASK>
[  627.880655][T13556]  dump_stack_lvl+0x18c/0x250
[  627.885411][T13556]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  627.891607][T13556]  ? show_regs_print_info+0x20/0x20
[  627.896842][T13556]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  627.903055][T13556]  ? dump_stack+0x9/0x20
[  627.907339][T13556]  should_fail_ex+0x39d/0x4d0
[  627.912075][T13556]  _copy_to_user+0x2f/0xa0
[  627.916546][T13556]  simple_read_from_buffer+0xe7/0x150
[  627.921969][T13556]  proc_fail_nth_read+0x1e8/0x260
[  627.927041][T13556]  ? proc_fault_inject_write+0x360/0x360
[  627.932727][T13556]  ? fsnotify_perm+0x271/0x5e0
[  627.937534][T13556]  ? proc_fault_inject_write+0x360/0x360
[  627.943238][T13556]  vfs_read+0x28b/0x970
[  627.947447][T13556]  ? kernel_read+0x1e0/0x1e0
[  627.952090][T13556]  ? __fget_files+0x28/0x4b0
[  627.956738][T13556]  ? __fget_files+0x28/0x4b0
[  627.961373][T13556]  ? __fget_files+0x43d/0x4b0
[  627.966106][T13556]  ? __fdget_pos+0x2a3/0x330
[  627.970749][T13556]  ? ksys_read+0x75/0x260
[  627.975132][T13556]  ksys_read+0x150/0x260
[  627.979423][T13556]  ? vfs_write+0x990/0x990
[  627.983886][T13556]  ? lockdep_hardirqs_on+0x98/0x150
[  627.989147][T13556]  do_syscall_64+0x55/0xb0
[  627.993608][T13556]  ? clear_bhb_loop+0x40/0x90
[  627.998349][T13556]  ? clear_bhb_loop+0x40/0x90
[  628.003088][T13556]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.009032][T13556] RIP: 0033:0x7f6281b5d68e
[  628.013525][T13556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  628.033266][T13556] RSP: 002b:00007f6282abcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  628.041734][T13556] RAX: ffffffffffffffda RBX: 00007f6282abd6c0 RCX: 00007f6281b5d68e
[  628.049746][T13556] RDX: 000000000000000f RSI: 00007f6282abd0a0 RDI: 000000000000000c
[  628.057751][T13556] RBP: 00007f6282abd090 R08: 0000000000000000 R09: 0000000000000000
[  628.065782][T13556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.073795][T13556] R13: 00007f6281e16038 R14: 00007f6281e15fa0 R15: 00007fff27f84408
[  628.081816][T13556]  </TASK>
[  628.201358][T13562] FAULT_INJECTION: forcing a failure.
[  628.201358][T13562] name failslab, interval 1, probability 0, space 0, times 0
[  628.227025][T13562] CPU: 0 PID: 13562 Comm: syz.0.2629 Not tainted syzkaller #0
[  628.234534][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  628.244608][T13562] Call Trace:
[  628.247904][T13562]  <TASK>
[  628.250870][T13562]  dump_stack_lvl+0x18c/0x250
[  628.255576][T13562]  ? show_regs_print_info+0x20/0x20
[  628.260805][T13562]  ? load_image+0x420/0x420
[  628.265338][T13562]  ? __lock_acquire+0x7d40/0x7d40
[  628.270413][T13562]  should_fail_ex+0x39d/0x4d0
[  628.275124][T13562]  should_failslab+0x9/0x20
[  628.279657][T13562]  slab_pre_alloc_hook+0x59/0x310
[  628.284896][T13562]  ? ____sys_sendmsg+0x5ba/0x960
[  628.289877][T13562]  ? ___sys_sendmsg+0x2a6/0x360
[  628.294746][T13562]  ? __se_sys_sendmsg+0x1c2/0x2b0
[  628.299801][T13562]  kmem_cache_alloc_node+0x60/0x320
[  628.305045][T13562]  ? alloc_vmap_area+0x1b4/0x1e30
[  628.310109][T13562]  alloc_vmap_area+0x1b4/0x1e30
[  628.315004][T13562]  ? vm_map_ram+0xcb0/0xcb0
[  628.319531][T13562]  ? rcu_is_watching+0x15/0xb0
[  628.324315][T13562]  __get_vm_area_node+0x162/0x370
[  628.329363][T13562]  __vmalloc_node_range+0x36e/0x1330
[  628.334677][T13562]  ? netlink_sendmsg+0x602/0xbf0
[  628.339668][T13562]  ? netlink_insert+0x109f/0x13a0
[  628.344717][T13562]  ? netlink_data_ready+0x10/0x10
[  628.349761][T13562]  ? free_vm_area+0x50/0x50
[  628.354320][T13562]  ? netlink_sendmsg+0x602/0xbf0
[  628.359271][T13562]  vmalloc+0x79/0x90
[  628.363189][T13562]  ? netlink_sendmsg+0x602/0xbf0
[  628.368153][T13562]  netlink_sendmsg+0x602/0xbf0
[  628.372952][T13562]  ? netlink_getsockopt+0x590/0x590
[  628.378178][T13562]  ? aa_sock_msg_perm+0x94/0x150
[  628.383150][T13562]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  628.388465][T13562]  ? security_socket_sendmsg+0x80/0xa0
[  628.393972][T13562]  ? netlink_getsockopt+0x590/0x590
[  628.399206][T13562]  ____sys_sendmsg+0x5ba/0x960
[  628.403997][T13562]  ? __asan_memset+0x22/0x40
[  628.408616][T13562]  ? __sys_sendmsg_sock+0x30/0x30
[  628.413665][T13562]  ? __import_iovec+0x5f2/0x850
[  628.418543][T13562]  ? import_iovec+0x73/0xa0
[  628.423068][T13562]  ___sys_sendmsg+0x2a6/0x360
[  628.427759][T13562]  ? get_pid_task+0x20/0x1e0
[  628.432411][T13562]  ? __sys_sendmsg+0x2a0/0x2a0
[  628.437209][T13562]  ? __lock_acquire+0x7d40/0x7d40
[  628.442269][T13562]  __se_sys_sendmsg+0x1c2/0x2b0
[  628.447165][T13562]  ? __x64_sys_sendmsg+0x80/0x80
[  628.452174][T13562]  ? lockdep_hardirqs_on+0x98/0x150
[  628.457412][T13562]  do_syscall_64+0x55/0xb0
[  628.461875][T13562]  ? clear_bhb_loop+0x40/0x90
[  628.466590][T13562]  ? clear_bhb_loop+0x40/0x90
[  628.471326][T13562]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.477260][T13562] RIP: 0033:0x7fa93ab9ce59
[  628.481707][T13562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.501334][T13562] RSP: 002b:00007fa93ba52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.509773][T13562] RAX: ffffffffffffffda RBX: 00007fa93ae16090 RCX: 00007fa93ab9ce59
[  628.517789][T13562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  628.525900][T13562] RBP: 00007fa93ba52090 R08: 0000000000000000 R09: 0000000000000000
[  628.533891][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.541882][T13562] R13: 00007fa93ae16128 R14: 00007fa93ae16090 R15: 00007ffcba4b0ba8
[  628.549880][T13562]  </TASK>
[  628.569636][T13562] syz.0.2629: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  628.587923][T13562] CPU: 1 PID: 13562 Comm: syz.0.2629 Not tainted syzkaller #0
[  628.595443][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  628.605557][T13562] Call Trace:
[  628.608867][T13562]  <TASK>
[  628.611821][T13562]  dump_stack_lvl+0x18c/0x250
[  628.616525][T13562]  ? show_regs_print_info+0x20/0x20
[  628.621756][T13562]  ? load_image+0x420/0x420
[  628.626298][T13562]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  628.632733][T13562]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  628.639259][T13562]  warn_alloc+0x246/0x340
[  628.643615][T13562]  ? slab_free_freelist_hook+0x130/0x1a0
[  628.649268][T13562]  ? zone_watermark_ok_safe+0x230/0x230
[  628.654837][T13562]  ? __get_vm_area_node+0x17b/0x370
[  628.660064][T13562]  ? __get_vm_area_node+0x17b/0x370
[  628.665286][T13562]  __vmalloc_node_range+0x393/0x1330
[  628.670594][T13562]  ? netlink_insert+0x109f/0x13a0
[  628.675648][T13562]  ? netlink_data_ready+0x10/0x10
[  628.680692][T13562]  ? free_vm_area+0x50/0x50
[  628.685229][T13562]  ? netlink_sendmsg+0x602/0xbf0
[  628.690195][T13562]  vmalloc+0x79/0x90
[  628.694107][T13562]  ? netlink_sendmsg+0x602/0xbf0
[  628.699082][T13562]  netlink_sendmsg+0x602/0xbf0
[  628.703878][T13562]  ? netlink_getsockopt+0x590/0x590
[  628.709096][T13562]  ? aa_sock_msg_perm+0x94/0x150
[  628.714071][T13562]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  628.719398][T13562]  ? security_socket_sendmsg+0x80/0xa0
[  628.724877][T13562]  ? netlink_getsockopt+0x590/0x590
[  628.730094][T13562]  ____sys_sendmsg+0x5ba/0x960
[  628.734897][T13562]  ? __asan_memset+0x22/0x40
[  628.739505][T13562]  ? __sys_sendmsg_sock+0x30/0x30
[  628.744556][T13562]  ? __import_iovec+0x5f2/0x850
[  628.749433][T13562]  ? import_iovec+0x73/0xa0
[  628.753952][T13562]  ___sys_sendmsg+0x2a6/0x360
[  628.758655][T13562]  ? get_pid_task+0x20/0x1e0
[  628.763273][T13562]  ? __sys_sendmsg+0x2a0/0x2a0
[  628.768074][T13562]  ? __lock_acquire+0x7d40/0x7d40
[  628.773139][T13562]  __se_sys_sendmsg+0x1c2/0x2b0
[  628.778014][T13562]  ? __x64_sys_sendmsg+0x80/0x80
[  628.782998][T13562]  ? lockdep_hardirqs_on+0x98/0x150
[  628.788225][T13562]  do_syscall_64+0x55/0xb0
[  628.792663][T13562]  ? clear_bhb_loop+0x40/0x90
[  628.797360][T13562]  ? clear_bhb_loop+0x40/0x90
[  628.802070][T13562]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.808029][T13562] RIP: 0033:0x7fa93ab9ce59
[  628.812472][T13562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.832103][T13562] RSP: 002b:00007fa93ba52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.840536][T13562] RAX: ffffffffffffffda RBX: 00007fa93ae16090 RCX: 00007fa93ab9ce59
[  628.848534][T13562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  628.856543][T13562] RBP: 00007fa93ba52090 R08: 0000000000000000 R09: 0000000000000000
[  628.864539][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.872531][T13562] R13: 00007fa93ae16128 R14: 00007fa93ae16090 R15: 00007ffcba4b0ba8
[  628.880563][T13562]  </TASK>
[  628.980787][T13562] Mem-Info:
[  628.984186][T13562] active_anon:5930 inactive_anon:0 isolated_anon:0
[  628.984186][T13562]  active_file:20745 inactive_file:40165 isolated_file:0
[  628.984186][T13562]  unevictable:768 dirty:643 writeback:0
[  628.984186][T13562]  slab_reclaimable:10443 slab_unreclaimable:96211
[  628.984186][T13562]  mapped:25000 shmem:1361 pagetables:562
[  628.984186][T13562]  sec_pagetables:0 bounce:0
[  628.984186][T13562]  kernel_misc_reclaimable:0
[  628.984186][T13562]  free:1342159 free_pcp:9998 free_cma:0
[  629.041272][T13562] Node 0 active_anon:23820kB inactive_anon:0kB active_file:82980kB inactive_file:160456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100000kB dirty:2568kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10404kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no
[  629.074970][T13562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  629.108830][T13568] validate_nla: 28 callbacks suppressed
[  629.108848][T13568] netlink: 'syz.3.2632': attribute type 10 has an invalid length.
[  629.125058][T13562] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  629.169916][T13562] lowmem_reserve[]: 0 2521 2522 2522 2522
[  629.182303][T13562] Node 0 DMA32 free:1458492kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23796kB inactive_anon:0kB active_file:82980kB inactive_file:159636kB unevictable:1536kB writepending:2568kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:24252kB local_pcp:10612kB free_cma:0kB
[  629.230846][T13562] lowmem_reserve[]: 0 0 0 0 0
[  629.235648][T13562] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  629.307664][T13562] lowmem_reserve[]: 0 0 0 0 0
[  629.316810][T13562] Node 1 Normal free:3894532kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:10656kB free_cma:0kB
[  629.353820][T13562] lowmem_reserve[]: 0 0 0 0 0
[  629.358685][T13562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  629.371990][T13562] Node 0 DMA32: 1*4kB (M) 733*8kB (UME) 967*16kB (UME) 695*32kB (UM) 450*64kB (ME) 439*128kB (UME) 123*256kB (UM) 40*512kB (UME) 12*1024kB (UME) 6*2048kB (UM) 306*4096kB (M) = 1458492kB
[  629.392271][T13562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  629.404349][T13562] Node 1 Normal: 237*4kB (UM) 58*8kB (UME) 48*16kB (UME) 158*32kB (UME) 43*64kB (UE) 10*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3894532kB
[  629.450604][T13562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  629.482746][T13562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  629.503245][T13562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  629.524351][T13562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  629.544119][T13562] 62273 total pagecache pages
[  629.554538][T13562] 0 pages in swap cache
[  629.566250][T13562] Free swap  = 124996kB
[  629.576109][T13562] Total swap = 124996kB
[  629.592883][T13562] 2097051 pages RAM
[  629.607503][T13562] 0 pages HighMem/MovableOnly
[  629.624876][T13562] 416932 pages reserved
[  629.644083][T13562] 0 pages cma reserved
[  629.841607][T13580] netlink: 'syz.2.2637': attribute type 10 has an invalid length.
[  629.855475][T13580] __nla_validate_parse: 3 callbacks suppressed
[  629.855506][T13580] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2637'.
[  630.114334][T13589] netlink: 'syz.1.2640': attribute type 29 has an invalid length.
[  630.124588][T13589] netlink: 'syz.1.2640': attribute type 29 has an invalid length.
[  630.144717][T13589] netlink: 'syz.1.2640': attribute type 29 has an invalid length.
[  630.170877][T13589] netlink: 'syz.1.2640': attribute type 29 has an invalid length.
[  630.189775][T13589] netlink: 'syz.1.2640': attribute type 29 has an invalid length.
[  630.457478][T13601] netlink: 'syz.2.2646': attribute type 10 has an invalid length.
[  630.466195][T13601] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2646'.
[  630.649223][T13602] syzkaller0: entered promiscuous mode
[  630.660607][T13602] syzkaller0: entered allmulticast mode
[  630.762144][T13613] netlink: 'syz.1.2651': attribute type 10 has an invalid length.
[  630.782979][T13613] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2651'.
[  631.776767][T13630] netlink: 'syz.2.2657': attribute type 29 has an invalid length.
[  633.179517][T13648] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2661'.
[  633.539188][T13659] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2667'.
[  634.172715][T13669] syzkaller0: entered promiscuous mode
[  634.202126][T13669] syzkaller0: entered allmulticast mode
[  634.239407][T13673] validate_nla: 3 callbacks suppressed
[  634.239460][T13673] netlink: 'syz.2.2672': attribute type 29 has an invalid length.
[  634.269404][T13673] netlink: 'syz.2.2672': attribute type 29 has an invalid length.
[  634.359202][T13673] netlink: 'syz.2.2672': attribute type 29 has an invalid length.
[  635.851088][T13676] netlink: 'syz.2.2672': attribute type 29 has an invalid length.
[  636.144464][T13690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2679'.
[  636.159681][T13687] netlink: 'syz.1.2676': attribute type 29 has an invalid length.
[  636.238728][T13687] netlink: 'syz.1.2676': attribute type 29 has an invalid length.
[  636.252788][T13693] netlink: 'syz.1.2676': attribute type 29 has an invalid length.
[  636.266164][T13693] netlink: 'syz.1.2676': attribute type 29 has an invalid length.
[  636.287491][T13687] netlink: 'syz.1.2676': attribute type 29 has an invalid length.
[  636.589580][T13703] syzkaller0: entered promiscuous mode
[  636.596485][T13703] syzkaller0: entered allmulticast mode
[  637.555109][T13713] netlink: 'syz.1.2687': attribute type 29 has an invalid length.
[  638.602765][T13720] FAULT_INJECTION: forcing a failure.
[  638.602765][T13720] name failslab, interval 1, probability 0, space 0, times 0
[  638.615904][T13720] CPU: 1 PID: 13720 Comm: syz.3.2688 Not tainted syzkaller #0
[  638.623422][T13720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  638.633529][T13720] Call Trace:
[  638.636862][T13720]  <TASK>
[  638.639840][T13720]  dump_stack_lvl+0x18c/0x250
[  638.644590][T13720]  ? show_regs_print_info+0x20/0x20
[  638.649871][T13720]  ? load_image+0x420/0x420
[  638.654469][T13720]  should_fail_ex+0x39d/0x4d0
[  638.659226][T13720]  should_failslab+0x9/0x20
[  638.663802][T13720]  slab_pre_alloc_hook+0x59/0x310
[  638.668912][T13720]  kmem_cache_alloc+0x5a/0x2d0
[  638.673772][T13720]  ? sctp_get_port_local+0x6d4/0x1620
[  638.679213][T13720]  sctp_get_port_local+0x6d4/0x1620
[  638.684474][T13720]  ? sctp_bind_addr_match+0x30/0x2a0
[  638.689842][T13720]  ? apparmor_capable+0x137/0x1a0
[  638.694928][T13720]  ? sctp_do_bind+0x990/0x990
[  638.699692][T13720]  ? sctp_bind_addr_match+0x30/0x2a0
[  638.705057][T13720]  ? sctp_bind_addr_match+0x30/0x2a0
[  638.710407][T13720]  ? sctp_bind_addr_match+0x284/0x2a0
[  638.715859][T13720]  sctp_do_bind+0x555/0x990
[  638.720455][T13720]  sctp_setsockopt_bindx+0x25b/0x420
[  638.725819][T13720]  sctp_setsockopt+0x7ea/0x11e0
[  638.730749][T13720]  ? sock_common_recvmsg+0x190/0x190
[  638.736097][T13720]  do_sock_setsockopt+0x175/0x1a0
[  638.741186][T13720]  ? __fdget+0x180/0x210
[  638.745498][T13720]  __x64_sys_setsockopt+0x182/0x200
[  638.750769][T13720]  do_syscall_64+0x55/0xb0
[  638.755239][T13720]  ? clear_bhb_loop+0x40/0x90
[  638.759981][T13720]  ? clear_bhb_loop+0x40/0x90
[  638.764736][T13720]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  638.770691][T13720] RIP: 0033:0x7f6281b9ce59
[  638.775184][T13720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.794852][T13720] RSP: 002b:00007f6282abd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  638.803343][T13720] RAX: ffffffffffffffda RBX: 00007f6281e15fa0 RCX: 00007f6281b9ce59
[  638.811381][T13720] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000004
[  638.819423][T13720] RBP: 00007f6282abd090 R08: 0000000000000010 R09: 0000000000000000
[  638.827459][T13720] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.835527][T13720] R13: 00007f6281e16038 R14: 00007f6281e15fa0 R15: 00007fff27f84408
[  638.843599][T13720]  </TASK>
[  638.879720][T13725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2690'.
[  638.919238][T13723] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2689'.
[  639.104567][T13731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2692'.
[  639.267463][T13737] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2695'.
[  639.485987][T13739] syzkaller0: entered promiscuous mode
[  639.500853][T13739] syzkaller0: entered allmulticast mode
[  639.608148][T13746] validate_nla: 2 callbacks suppressed
[  639.608176][T13746] netlink: 'syz.0.2699': attribute type 29 has an invalid length.
[  639.642523][T13748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2700'.
[  639.652244][T13746] netlink: 'syz.0.2699': attribute type 29 has an invalid length.
[  639.665893][T13749] netlink: 'syz.0.2699': attribute type 29 has an invalid length.
[  641.177407][T13746] netlink: 'syz.0.2699': attribute type 29 has an invalid length.
[  641.470127][T13760] netlink: 'syz.0.2704': attribute type 29 has an invalid length.
[  641.525977][T13760] netlink: 'syz.0.2704': attribute type 29 has an invalid length.
[  641.549531][T13761] netlink: 'syz.0.2704': attribute type 29 has an invalid length.
[  641.624190][T13760] netlink: 'syz.0.2704': attribute type 29 has an invalid length.
[  642.231096][T13772] netlink: 'syz.1.2706': attribute type 10 has an invalid length.
[  642.238993][T13772] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2706'.
[  642.624825][T13781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2710'.
[  642.748246][T13784] syzkaller0: entered promiscuous mode
[  642.753863][T13784] syzkaller0: entered allmulticast mode
[  644.319395][T13791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2714'.
[  644.693690][T13807] netlink: 'syz.3.2720': attribute type 10 has an invalid length.
[  644.713504][T13807] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2720'.
[  645.348231][T13820] netlink: 'syz.2.2724': attribute type 46 has an invalid length.
[  645.427174][T13820] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2724'.
[  645.553141][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2725'.
[  646.097546][T13837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2731'.
[  646.915840][T13853] netlink: 'syz.0.2738': attribute type 29 has an invalid length.
[  646.925848][T13853] netlink: 'syz.0.2738': attribute type 29 has an invalid length.
[  646.952920][T13850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2736'.
[  646.996337][T13853] netlink: 'syz.0.2738': attribute type 29 has an invalid length.
[  647.015100][T13853] netlink: 'syz.0.2738': attribute type 29 has an invalid length.
[  647.076122][T13858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2740'.
[  647.127997][T13859] netlink: 'syz.1.2741': attribute type 46 has an invalid length.
[  647.174171][T13859] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2741'.
[  648.082001][T13883] netlink: 'syz.0.2751': attribute type 29 has an invalid length.
[  648.110592][T13881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2750'.
[  648.132032][T13883] netlink: 'syz.0.2751': attribute type 29 has an invalid length.
[  648.184759][T13884] netlink: 'syz.0.2751': attribute type 29 has an invalid length.
[  648.283218][T13886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2752'.
[  648.720995][T13898] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2756'.
[  649.197499][T13909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2761'.
[  649.297601][T13913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2762'.
[  650.385129][T13935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2773'.
[  650.873455][T13942] validate_nla: 7 callbacks suppressed
[  650.873493][T13942] netlink: 'syz.2.2776': attribute type 29 has an invalid length.
[  650.897070][T13942] netlink: 'syz.2.2776': attribute type 29 has an invalid length.
[  650.927575][T13942] netlink: 'syz.2.2776': attribute type 29 has an invalid length.
[  650.970534][T13942] netlink: 'syz.2.2776': attribute type 29 has an invalid length.
[  650.988490][T13942] netlink: 'syz.2.2776': attribute type 29 has an invalid length.
[  651.096231][T13949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2779'.
[  651.348421][T13961] netlink: 'syz.2.2784': attribute type 10 has an invalid length.
[  651.373325][T13961] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2784'.
[  652.236044][T13975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2787'.
[  652.420470][T13980] netlink: 'syz.0.2792': attribute type 29 has an invalid length.
[  652.440625][T13980] netlink: 'syz.0.2792': attribute type 29 has an invalid length.
[  652.470464][T13982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2791'.
[  652.487676][T13985] netlink: 'syz.0.2792': attribute type 29 has an invalid length.
[  652.509499][T13980] netlink: 'syz.0.2792': attribute type 29 has an invalid length.
[  653.412158][T14010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2804'.
[  653.749356][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2814'.
[  653.862592][T14015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2806'.
[  654.132981][T14028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2811'.
[  654.556014][T14043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2818'.
[  654.844817][T14049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2820'.
[  655.434712][T14062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2826'.
[  655.890183][T14073] validate_nla: 11 callbacks suppressed
[  655.890217][T14073] netlink: 'syz.2.2828': attribute type 29 has an invalid length.
[  655.941341][T14073] netlink: 'syz.2.2828': attribute type 29 has an invalid length.
[  655.984541][T14075] netlink: 'syz.2.2828': attribute type 29 has an invalid length.
[  656.048958][T14073] netlink: 'syz.2.2828': attribute type 29 has an invalid length.
[  656.090436][T14075] netlink: 'syz.2.2828': attribute type 29 has an invalid length.
[  656.629762][T14083] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2832'.
[  656.848595][T14101] netlink: 'syz.3.2840': attribute type 10 has an invalid length.
[  656.871449][T14101] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2840'.
[  657.207600][T14109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2844'.
[  658.630226][T14145] netlink: 'syz.2.2858': attribute type 10 has an invalid length.
[  658.653273][T14144] netlink: 'syz.0.2857': attribute type 29 has an invalid length.
[  658.662104][T14145] __nla_validate_parse: 1 callbacks suppressed
[  658.662140][T14145] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2858'.
[  658.686383][T14144] netlink: 'syz.0.2857': attribute type 29 has an invalid length.
[  658.720236][T14146] netlink: 'syz.0.2857': attribute type 29 has an invalid length.
[  659.233238][T14152] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2860'.
[  659.660561][T14165] sctp: [Deprecated]: syz.2.2864 (pid 14165) Use of int in max_burst socket option deprecated.
[  659.660561][T14165] Use struct sctp_assoc_value instead
[  659.946865][T14171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2866'.
[  659.961705][T14165] ------------[ cut here ]------------
[  659.967228][T14165] WARNING: CPU: 0 PID: 14165 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470
[  659.977078][T14165] Modules linked in:
[  659.981083][T14165] CPU: 0 PID: 14165 Comm: syz.2.2864 Not tainted syzkaller #0
[  659.988584][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  659.998747][T14165] RIP: 0010:perf_pending_task+0x35c/0x470
[  660.004562][T14165] Code: ff 84 db 75 14 e8 44 cc d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 cc d5 ff e8 bb 3d 4f ff eb e5 e8 24 cc d5 ff <0f> 0b e9 f3 fe ff ff e8 18 cc d5 ff 48 c7 c7 10 f8 1c 8d 4c 89 f6
[  660.024406][T14165] RSP: 0018:ffffc9000bddf9c0 EFLAGS: 00010293
[  660.030519][T14165] RAX: ffffffff81b15fcc RBX: ffff8880251bfe48 RCX: ffff888027ce8000
[  660.039211][T14165] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  660.047393][T14165] RBP: 0000000000000001 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05
[  660.055527][T14165] R10: dffffc0000000000 R11: fffffbfff1d16a06 R12: ffff888027ce8000
[  660.063676][T14165] R13: ffff88807c470530 R14: ffff8880251bfc08 R15: 1ffff11004a37f81
[  660.071847][T14165] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  660.080872][T14165] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  660.087548][T14165] CR2: 000000110c3a3706 CR3: 0000000062c8c000 CR4: 00000000003506f0
[  660.095603][T14165] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  660.103677][T14165] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  660.111950][T14165] Call Trace:
[  660.115279][T14165]  <TASK>
[  660.118262][T14165]  task_work_run+0x1d4/0x260
[  660.122970][T14165]  ? task_work_cancel+0x220/0x220
[  660.128066][T14165]  do_exit+0x95a/0x2460
[  660.132321][T14165]  ? put_task_struct+0xc0/0xc0
[  660.137677][T14165]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  660.143821][T14165]  ? get_signal+0x1068/0x13f0
[  660.148561][T14165]  ? lock_chain_count+0x20/0x20
[  660.153488][T14165]  ? _raw_spin_lock_irq+0xbb/0xf0
[  660.158566][T14165]  do_group_exit+0x21b/0x2d0
[  660.163636][T14165]  ? lockdep_hardirqs_on+0x98/0x150
[  660.168912][T14165]  get_signal+0x12fc/0x13f0
[  660.173601][T14165]  arch_do_signal_or_restart+0xc2/0x800
[  660.179209][T14165]  ? __ia32_sys_get_robust_list+0x110/0x110
[  660.185224][T14165]  ? get_sigframe_size+0x20/0x20
[  660.190236][T14165]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  660.196502][T14165]  ? exit_to_user_mode_loop+0x3b/0x110
[  660.202058][T14165]  exit_to_user_mode_loop+0x70/0x110
[  660.207424][T14165]  exit_to_user_mode_prepare+0xee/0x180
[  660.213069][T14165]  syscall_exit_to_user_mode+0x1a/0x50
[  660.218593][T14165]  do_syscall_64+0x61/0xb0
[  660.223111][T14165]  ? clear_bhb_loop+0x40/0x90
[  660.227850][T14165]  ? clear_bhb_loop+0x40/0x90
[  660.232621][T14165]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.238568][T14165] RIP: 0033:0x7f67bbd9ce59
[  660.243695][T14165] Code: Unable to access opcode bytes at 0x7f67bbd9ce2f.
[  660.250887][T14165] RSP: 002b:00007f67bcbeb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  660.259343][T14165] RAX: fffffffffffffe00 RBX: 00007f67bc015fa8 RCX: 00007f67bbd9ce59
[  660.267478][T14165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67bc015fa8
[  660.275531][T14165] RBP: 00007f67bc015fa0 R08: 0000000000000000 R09: 0000000000000000
[  660.283581][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.291642][T14165] R13: 00007f67bc016038 R14: 00007ffc3d8b91c0 R15: 00007ffc3d8b92a8
[  660.299671][T14165]  </TASK>
[  660.302808][T14165] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  660.310123][T14165] CPU: 0 PID: 14165 Comm: syz.2.2864 Not tainted syzkaller #0
[  660.317605][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  660.327686][T14165] Call Trace:
[  660.331023][T14165]  <TASK>
[  660.333991][T14165]  dump_stack_lvl+0x18c/0x250
[  660.338696][T14165]  ? show_regs_print_info+0x20/0x20
[  660.343936][T14165]  ? load_image+0x420/0x420
[  660.348472][T14165]  panic+0x2dc/0x730
[  660.352407][T14165]  ? bpf_jit_dump+0xd0/0xd0
[  660.356945][T14165]  __warn+0x2e0/0x470
[  660.360956][T14165]  ? perf_pending_task+0x35c/0x470
[  660.366115][T14165]  ? perf_pending_task+0x35c/0x470
[  660.371254][T14165]  report_bug+0x2be/0x4f0
[  660.375643][T14165]  ? perf_pending_task+0x35c/0x470
[  660.380790][T14165]  ? perf_pending_task+0x35c/0x470
[  660.385936][T14165]  ? perf_pending_task+0x35e/0x470
[  660.391078][T14165]  handle_bug+0xcf/0x120
[  660.395352][T14165]  exc_invalid_op+0x1a/0x50
[  660.399893][T14165]  asm_exc_invalid_op+0x1a/0x20
[  660.404781][T14165] RIP: 0010:perf_pending_task+0x35c/0x470
[  660.410527][T14165] Code: ff 84 db 75 14 e8 44 cc d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 cc d5 ff e8 bb 3d 4f ff eb e5 e8 24 cc d5 ff <0f> 0b e9 f3 fe ff ff e8 18 cc d5 ff 48 c7 c7 10 f8 1c 8d 4c 89 f6
[  660.430174][T14165] RSP: 0018:ffffc9000bddf9c0 EFLAGS: 00010293
[  660.436257][T14165] RAX: ffffffff81b15fcc RBX: ffff8880251bfe48 RCX: ffff888027ce8000
[  660.444249][T14165] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  660.452248][T14165] RBP: 0000000000000001 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05
[  660.460251][T14165] R10: dffffc0000000000 R11: fffffbfff1d16a06 R12: ffff888027ce8000
[  660.468250][T14165] R13: ffff88807c470530 R14: ffff8880251bfc08 R15: 1ffff11004a37f81
[  660.476292][T14165]  ? perf_pending_task+0x35c/0x470
[  660.481439][T14165]  task_work_run+0x1d4/0x260
[  660.486055][T14165]  ? task_work_cancel+0x220/0x220
[  660.491110][T14165]  do_exit+0x95a/0x2460
[  660.495300][T14165]  ? put_task_struct+0xc0/0xc0
[  660.500084][T14165]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  660.506104][T14165]  ? get_signal+0x1068/0x13f0
[  660.510800][T14165]  ? lock_chain_count+0x20/0x20
[  660.515679][T14165]  ? _raw_spin_lock_irq+0xbb/0xf0
[  660.520749][T14165]  do_group_exit+0x21b/0x2d0
[  660.525388][T14165]  ? lockdep_hardirqs_on+0x98/0x150
[  660.530612][T14165]  get_signal+0x12fc/0x13f0
[  660.535193][T14165]  arch_do_signal_or_restart+0xc2/0x800
[  660.540766][T14165]  ? __ia32_sys_get_robust_list+0x110/0x110
[  660.546697][T14165]  ? get_sigframe_size+0x20/0x20
[  660.551692][T14165]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  660.557912][T14165]  ? exit_to_user_mode_loop+0x3b/0x110
[  660.563402][T14165]  exit_to_user_mode_loop+0x70/0x110
[  660.568714][T14165]  exit_to_user_mode_prepare+0xee/0x180
[  660.574294][T14165]  syscall_exit_to_user_mode+0x1a/0x50
[  660.579779][T14165]  do_syscall_64+0x61/0xb0
[  660.584220][T14165]  ? clear_bhb_loop+0x40/0x90
[  660.588923][T14165]  ? clear_bhb_loop+0x40/0x90
[  660.593637][T14165]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.599561][T14165] RIP: 0033:0x7f67bbd9ce59
[  660.604009][T14165] Code: Unable to access opcode bytes at 0x7f67bbd9ce2f.
[  660.611055][T14165] RSP: 002b:00007f67bcbeb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  660.619488][T14165] RAX: fffffffffffffe00 RBX: 00007f67bc015fa8 RCX: 00007f67bbd9ce59
[  660.627475][T14165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67bc015fa8
[  660.635463][T14165] RBP: 00007f67bc015fa0 R08: 0000000000000000 R09: 0000000000000000
[  660.643449][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.651439][T14165] R13: 00007f67bc016038 R14: 00007ffc3d8b91c0 R15: 00007ffc3d8b92a8
[  660.659450][T14165]  </TASK>
[  660.663060][T14165] Kernel Offset: disabled
[  660.667393][T14165] Rebooting in 86400 seconds..