last executing test programs:

3.20862804s ago: executing program 3 (id=5095):
socket$kcm(0x2, 0x922000000001, 0x106)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x50}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @rand_addr=0x60000000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

3.052461284s ago: executing program 3 (id=5098):
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0)
sendmsg$kcm(r0, 0x0, 0x40000)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080)
setsockopt$sock_attach_bpf(r3, 0x6, 0x19, &(0x7f0000000200)=r3, 0x78)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001850)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r7, r6, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0xff, 0x40, 0x28, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x3000, 0x1, 0x661e80, 0x4, 0x5, 0x8, 0x101, 0x0, 0x3, 0x0, 0xffffffffffff7493}, r7, 0xfffffffffffff7ff, 0xffffffffffffffff, 0xa)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x8f, 0x0, &(0x7f0000000300)="178d048604bf0bfb1945d74300080b35372a09ca98a3294a77824403954bc541031962c7ec4ca15ece5ae3f625cf171b909f5701d5006cbb5cedf8654491b307810697f1a65d0073c8500e99cfb6ea8da517eaac8d1be0f58ab2400f9bd4dccb2c7fe6136c5584c886dbae622c3c02ce4e67b5e8e1b01f33fa135a8e73ad8d7281f600f161debffe3466dfd1640889", 0x0, 0x81, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x2}, 0x101a0)
recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/158, 0x9e}], 0x1}, 0x20)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7}, 0x10122)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb70300"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.309161502s ago: executing program 2 (id=5106):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0xeb3}, 0xc081, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, 0x50)

2.189552465s ago: executing program 2 (id=5107):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x300, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c11, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (fail_nth: 1)

2.113704857s ago: executing program 1 (id=5108):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x40, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) (async)
r5 = getpid()
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x40, 0x1, 0x81, 0x2, 0x0, 0x401, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x3021, 0x7dd7, 0x7, 0x7, 0x8, 0x1, 0x10, 0x0, 0x5, 0x0, 0x397d}, r5, 0xf, r3, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000008500000005"], 0x0, 0x4}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)

2.112957757s ago: executing program 3 (id=5109):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000400000006000000ff00000042", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x61d, r0}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)}, 0x10001)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r4 = socket$kcm(0x2, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xa, 0x84b4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000)

1.874777043s ago: executing program 2 (id=5110):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x300, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c11, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.797487735s ago: executing program 1 (id=5111):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x300, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c11, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.694006408s ago: executing program 2 (id=5112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x36)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x34}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

1.496446343s ago: executing program 1 (id=5114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x186, 0xfffffffffffffffb, 0x0, 0x2, 0x80000, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x8000})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socket$kcm(0x2, 0x200000000000001, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa)

1.484265043s ago: executing program 3 (id=5116):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000001}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r7, 0x8)
socketpair(0x6, 0x80000, 0xd, &(0x7f0000000080))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

1.347475096s ago: executing program 0 (id=5117):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000000}, 0x0)

1.268672188s ago: executing program 1 (id=5118):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x20000, 0x3fff8000}, 0x8e220, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0xc, 0x20404, 0x7fffffffefff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x105, 0x10, 0x8, 0x3, 0x9, 0x793, 0x48, 0x0, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0x1, r0, 0x1)

1.21938548s ago: executing program 2 (id=5119):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1.18437611s ago: executing program 0 (id=5120):
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x5000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

1.062026474s ago: executing program 1 (id=5121):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)}, 0x20000081)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, 0x0, 0x0)
sendmsg$sock(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20000810)
socketpair(0x6, 0x2, 0x7, &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)

1.022930225s ago: executing program 0 (id=5122):
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000371003900000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

884.034368ms ago: executing program 0 (id=5123):
socket$kcm(0x2c, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1) (async)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{}], "99"}, @func, @func, @datasec={0x0, 0x1, 0x0, 0xf, 0x3, [{}], "a58e93"}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000019c0)=""/173, 0x82, 0xad, 0x1}, 0x20) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8940, &(0x7f0000000080)) (rerun: 64)
close(r3)

472.387448ms ago: executing program 3 (id=5124):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000400000006000000ff00000042", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x61d, r0}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)}, 0x10001)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r4 = socket$kcm(0x2, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xa, 0x84b4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000)

306.592052ms ago: executing program 2 (id=5125):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0xeb3}, 0xc081, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, 0x50)

203.674625ms ago: executing program 0 (id=5126):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x2, 0xf00}]}, {0x0, [0x61, 0x5f, 0x5f, 0x3e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3ff}, 0x28)

189.614405ms ago: executing program 1 (id=5127):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x34}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

108.656567ms ago: executing program 3 (id=5128):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000000)="b9ff0300600d698dff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080403000000f700ffa1180002000607002603600e12080b0f0000810401a800160520000140020000082f3d4e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9851627504575107ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100001340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff00e0b42a9ecbee5de6ccd40dd6e4edef5d2defd5cc9b8d3fb7c27a1059ae31c60e", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async)
r9 = socket$kcm(0xa, 0x3, 0x73) (async)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x6, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x20000000}, [@jmp={0x5, 0x0, 0xa, 0x4, 0x2, 0x0, 0x1}, @generic={0x6, 0xf, 0x0, 0x8, 0xfff}, @exit]}, &(0x7f0000001200)='GPL\x00', 0x8, 0xca, &(0x7f0000001240)=""/202, 0x40f00, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x4, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000013c0)=[{0x5, 0x1, 0xa, 0x9}, {0x1, 0x5, 0xb, 0x9}, {0x5, 0x4, 0xf, 0x2}, {0x1, 0x1, 0xe, 0x4}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001580)={r10, 0x0, 0x29, 0x0, &(0x7f00000014c0)="f5829702f0d77ec2ecdf7c3aff2f86ff433d60532c94170019873e6f38f4fb2d931f0288d08d4598eb", 0x0, 0xf, 0x0, 0x49, 0x0, &(0x7f0000001500)="c82b19e76ef6bc43f9bb0d4d42cd3c16f9a618d51c646f3858ac200241dae3e55263ba8f9bc201930497f89e94bdb517b1b93ac6dfbb98fe61572c39f01ca4e223ea90afe9fe52487b", 0x0, 0x2, 0x0, 0xd29}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r5, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f00000018c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0x11, 0x8, 0x8, &(0x7f0000001980)}}, 0x10)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000001b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcb, 0xcb, 0x6, [@fwd={0x9}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @var={0x3, 0x0, 0x0, 0xe, 0x3, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x4}, @int={0x4, 0x0, 0x0, 0x1, 0x14, 0x5c, 0x0, 0x6, 0xf}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x10}}, @datasec={0x10, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x8, 0x7}, {0x4, 0x1, 0xf4c9}, {0x3, 0x4, 0x2}, {0x5, 0x9}, {0x4, 0x0, 0x4}, {0x2, 0xf, 0x80000000}, {0x5, 0x2, 0x6}], "c75d52"}]}, {0x0, [0x0, 0x61, 0xe, 0x5f]}}, &(0x7f0000001c00)=""/78, 0xea, 0x4e, 0x0, 0x6f, 0x10000}, 0x28) (async)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x15, &(0x7f0000001600)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit], &(0x7f00000016c0)='GPL\x00', 0x40, 0xcf, &(0x7f0000001700)=""/207, 0x41000, 0x2, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000001cc0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001d80)=[r13, r2, r8, r8, r2, r8], &(0x7f0000001dc0)=[{0x2, 0x1, 0xd, 0x1}, {0x5, 0x2, 0x5, 0x3}, {0x2, 0x3, 0x9, 0x9}, {0x2, 0x4, 0xb, 0x8}, {0x0, 0x5, 0xc, 0xb}, {0x0, 0x1, 0xc, 0x6}, {0x3, 0x1, 0xb, 0x5}, {0x0, 0x4, 0x3}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x7}, 0x94) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) (async)
socket$kcm(0x29, 0xb, 0x0) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) (async)
r15 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r15, 0x29, 0x15, &(0x7f0000000200)=r14, 0xff38)
sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0)

0s ago: executing program 0 (id=5129):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})

kernel console output (not intermixed with test programs):

 `syz.3.4180'.
[ 1198.956398][T19424] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1199.013550][T19424] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1199.038160][T19424] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1199.060867][T19424] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1199.177709][T19756] netlink: 'syz.1.4184': attribute type 27 has an invalid length.
[ 1199.207354][T19756] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4184'.
[ 1199.441183][T19424] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1199.528085][T19424] 8021q: adding VLAN 0 to HW filter on device team0
[ 1199.591830][T17616] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1199.600235][T17616] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1199.675929][T17604] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.683746][T17604] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1200.422026][T19776] netlink: 'syz.1.4188': attribute type 2 has an invalid length.
[ 1200.549344][T19776] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4188'.
[ 1200.592982][T19776] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1201.247997][T19424] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1201.402405][T19807] netlink: 'syz.3.4193': attribute type 27 has an invalid length.
[ 1201.429221][T19807] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4193'.
[ 1202.450658][T19424] veth0_vlan: entered promiscuous mode
[ 1202.586029][T19424] veth1_vlan: entered promiscuous mode
[ 1202.724078][T19424] veth0_macvtap: entered promiscuous mode
[ 1202.756480][T19424] veth1_macvtap: entered promiscuous mode
[ 1202.823964][T19424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.846983][T19424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.872071][T19424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.890385][T19424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.914643][T19424] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1202.932981][T19424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1202.955465][T19424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.979372][T19424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.009276][T19424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.028935][T19424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.051809][T19424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.102090][T19424] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1203.157631][T19424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.216503][T19424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.284266][T19424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.309402][T19424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.541999][T19841] C: renamed from team_slave_0 (while UP)
[ 1203.592361][T19841] netlink: 'syz.2.4201': attribute type 2 has an invalid length.
[ 1203.659043][T19841] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4201'.
[ 1203.669804][T19841] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1203.787996][T17616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.846776][T17616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.901887][T17597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.918032][T17597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.567363][T19875] netlink: 'syz.3.4205': attribute type 27 has an invalid length.
[ 1204.669324][T19875] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4205'.
[ 1208.360104][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1208.448016][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1208.458329][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1208.603406][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1208.651699][T19909] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[ 1208.651752][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1208.701005][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1208.727239][T19911] netlink: 'syz.2.4218': attribute type 27 has an invalid length.
[ 1208.783744][T19911] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4218'.
[ 1209.044012][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1209.068552][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1209.110465][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1209.189848][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1209.219025][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1209.264601][T19900] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[ 1209.903122][T19931] team0: Device bridge0 is up. Set it down before adding it as a team port
[ 1210.957513][T19940] syzkaller0: entered promiscuous mode
[ 1211.009058][T19940] syzkaller0: entered allmulticast mode
[ 1211.166583][T19949] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4229'.
[ 1211.461289][T19956] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4231'.
[ 1214.415090][T19985] netlink: 'syz.0.4240': attribute type 11 has an invalid length.
[ 1214.427735][T19985] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.4240'.
[ 1215.907984][T19985] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1216.104612][T19990] validate_nla: 25 callbacks suppressed
[ 1216.104650][T19990] netlink: 'syz.1.4242': attribute type 25 has an invalid length.
[ 1216.168639][T19990] netlink: 'syz.1.4242': attribute type 10 has an invalid length.
[ 1216.179556][T19994] netlink: 'syz.0.4243': attribute type 11 has an invalid length.
[ 1216.187848][T19994] netlink: 204620 bytes leftover after parsing attributes in process `syz.0.4243'.
[ 1216.273782][T19998] netlink: 'syz.2.4241': attribute type 27 has an invalid length.
[ 1216.328998][T19998] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4241'.
[ 1216.443538][T20006] FAULT_INJECTION: forcing a failure.
[ 1216.443538][T20006] name failslab, interval 1, probability 0, space 0, times 0
[ 1216.484895][T20006] CPU: 1 PID: 20006 Comm: syz.3.4246 Not tainted syzkaller #0
[ 1216.493625][T20006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1216.504276][T20006] Call Trace:
[ 1216.508490][T20006]  <TASK>
[ 1216.512498][T20006]  dump_stack_lvl+0x18c/0x250
[ 1216.517799][T20006]  ? __sctp_connect+0x5b7/0xd80
[ 1216.522822][T20006]  ? sctp_setsockopt+0x6d8/0x11e0
[ 1216.528073][T20006]  ? show_regs_print_info+0x20/0x20
[ 1216.533357][T20006]  ? load_image+0x420/0x420
[ 1216.537958][T20006]  should_fail_ex+0x394/0x4c0
[ 1216.542811][T20006]  should_failslab+0x9/0x20
[ 1216.547371][T20006]  slab_pre_alloc_hook+0x59/0x300
[ 1216.552899][T20006]  ? sctp_add_bind_addr+0x8c/0x360
[ 1216.558789][T20006]  __kmem_cache_alloc_node+0x53/0x250
[ 1216.564968][T20006]  ? sctp_add_bind_addr+0x8c/0x360
[ 1216.571208][T20006]  kmalloc_trace+0x2a/0xe0
[ 1216.576008][T20006]  sctp_add_bind_addr+0x8c/0x360
[ 1216.581834][T20006]  sctp_copy_local_addr_list+0x31b/0x4e0
[ 1216.588239][T20006]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[ 1216.594692][T20006]  ? sctp_do_8_2_transport_strike+0x910/0x910
[ 1216.602031][T20006]  ? sctp_v6_is_any+0x64/0x70
[ 1216.606900][T20006]  ? sctp_copy_one_addr+0x8c/0x350
[ 1216.612090][T20006]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1216.617534][T20006]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1216.623970][T20006]  sctp_connect_new_asoc+0x2f9/0x6a0
[ 1216.629482][T20006]  ? __sctp_connect+0xd80/0xd80
[ 1216.634499][T20006]  ? sctp_inet6_send_verify+0x23a/0x300
[ 1216.641191][T20006]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[ 1216.647876][T20006]  __sctp_connect+0x5b7/0xd80
[ 1216.653570][T20006]  ? sctp_send_asconf+0x170/0x170
[ 1216.658674][T20006]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1216.664215][T20006]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 1216.670755][T20006]  ? security_sctp_bind_connect+0x89/0xb0
[ 1216.677818][T20006]  sctp_setsockopt_connectx+0x104/0x1a0
[ 1216.683809][T20006]  sctp_setsockopt+0x6d8/0x11e0
[ 1216.688720][T20006]  ? sock_common_recvmsg+0x190/0x190
[ 1216.694161][T20006]  do_sock_setsockopt+0x175/0x1a0
[ 1216.699314][T20006]  ? __fdget+0x180/0x210
[ 1216.703862][T20006]  __x64_sys_setsockopt+0x182/0x200
[ 1216.709350][T20006]  do_syscall_64+0x55/0xb0
[ 1216.713925][T20006]  ? clear_bhb_loop+0x40/0x90
[ 1216.719074][T20006]  ? clear_bhb_loop+0x40/0x90
[ 1216.724649][T20006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1216.730894][T20006] RIP: 0033:0x7f208859e1d9
[ 1216.736251][T20006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1216.758314][T20006] RSP: 002b:00007f2089432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1216.767710][T20006] RAX: ffffffffffffffda RBX: 00007f2088826090 RCX: 00007f208859e1d9
[ 1216.776580][T20006] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[ 1216.786019][T20006] RBP: 00007f2089432090 R08: 000000000000001c R09: 0000000000000000
[ 1216.795265][T20006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1216.805621][T20006] R13: 00007f2088826128 R14: 00007f2088826090 R15: 00007fff0a348de8
[ 1216.815784][T20006]  </TASK>
[ 1217.687741][T20021] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4252'.
[ 1220.802603][T20029] syzkaller0: entered promiscuous mode
[ 1220.816931][T20029] syzkaller0: entered allmulticast mode
[ 1221.071785][T20043] netlink: 'syz.2.4256': attribute type 27 has an invalid length.
[ 1221.097121][T20043] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4256'.
[ 1221.443531][T20050] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4261'.
[ 1222.869955][T20077] netlink: 'syz.1.4269': attribute type 27 has an invalid length.
[ 1222.925660][T20077] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4269'.
[ 1223.739446][T20092] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4274'.
[ 1223.830474][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4274'.
[ 1224.042898][T20094] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4273'.
[ 1225.790052][T20120] netlink: 'syz.2.4281': attribute type 27 has an invalid length.
[ 1225.798568][T20120] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4281'.
[ 1226.281873][T20129] netlink: 'syz.0.4292': attribute type 27 has an invalid length.
[ 1226.303684][T20129] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4292'.
[ 1227.103975][T20140] syz.0.4287[20140] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1228.727171][T20168] netlink: 'syz.2.4296': attribute type 27 has an invalid length.
[ 1228.764410][T20168] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4296'.
[ 1229.332352][T20182] FAULT_INJECTION: forcing a failure.
[ 1229.332352][T20182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1229.411488][T20182] CPU: 1 PID: 20182 Comm: syz.2.4302 Not tainted syzkaller #0
[ 1229.420188][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1229.430519][T20182] Call Trace:
[ 1229.433855][T20182]  <TASK>
[ 1229.436958][T20182]  dump_stack_lvl+0x18c/0x250
[ 1229.441907][T20182]  ? show_regs_print_info+0x20/0x20
[ 1229.447173][T20182]  ? load_image+0x420/0x420
[ 1229.451846][T20182]  ? __might_fault+0xaa/0x120
[ 1229.458215][T20182]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1229.464836][T20182]  should_fail_ex+0x394/0x4c0
[ 1229.470308][T20182]  _copy_from_iter+0x1cd/0x1290
[ 1229.476093][T20182]  ? pipe_write+0x607/0x1b20
[ 1229.481503][T20182]  ? copyout_mc+0x70/0x70
[ 1229.485945][T20182]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1229.492696][T20182]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1229.497851][T20182]  ? lock_chain_count+0x20/0x20
[ 1229.502795][T20182]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1229.508424][T20182]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1229.514061][T20182]  ? page_copy_sane+0x4e/0x270
[ 1229.519090][T20182]  copy_page_from_iter+0x7b/0x100
[ 1229.524572][T20182]  pipe_write+0x758/0x1b20
[ 1229.529710][T20182]  ? pipe_write+0xcb1/0x1b20
[ 1229.534716][T20182]  ? pipe_read+0x1330/0x1330
[ 1229.539503][T20182]  ? end_current_label_crit_section+0x149/0x170
[ 1229.547095][T20182]  ? common_file_perm+0x198/0x1f0
[ 1229.553257][T20182]  vfs_write+0x474/0x9a0
[ 1229.557612][T20182]  ? file_end_write+0x250/0x250
[ 1229.562999][T20182]  ? __fget_files+0x3fc/0x460
[ 1229.569344][T20182]  ? __fdget_pos+0x1d8/0x330
[ 1229.574390][T20182]  ? ksys_write+0x74/0x260
[ 1229.579967][T20182]  ksys_write+0x151/0x260
[ 1229.585089][T20182]  ? __ia32_sys_read+0x90/0x90
[ 1229.590676][T20182]  ? lockdep_hardirqs_on+0x98/0x150
[ 1229.596095][T20182]  do_syscall_64+0x55/0xb0
[ 1229.600980][T20182]  ? clear_bhb_loop+0x40/0x90
[ 1229.607463][T20182]  ? clear_bhb_loop+0x40/0x90
[ 1229.613894][T20182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1229.620920][T20182] RIP: 0033:0x7f7e3d39e1d9
[ 1229.628660][T20182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1229.654322][T20182] RSP: 002b:00007f7e3e2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1229.669801][T20182] RAX: ffffffffffffffda RBX: 00007f7e3d625fa0 RCX: 00007f7e3d39e1d9
[ 1229.678671][T20182] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000
[ 1229.687781][T20182] RBP: 00007f7e3e2bb090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.698356][T20182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1229.707260][T20182] R13: 00007f7e3d626038 R14: 00007f7e3d625fa0 R15: 00007ffdcba041b8
[ 1229.715600][T20182]  </TASK>
[ 1230.034620][T20192] FAULT_INJECTION: forcing a failure.
[ 1230.034620][T20192] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1230.065229][T20192] CPU: 0 PID: 20192 Comm: syz.2.4305 Not tainted syzkaller #0
[ 1230.075365][T20192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1230.086459][T20192] Call Trace:
[ 1230.089809][T20192]  <TASK>
[ 1230.092822][T20192]  dump_stack_lvl+0x18c/0x250
[ 1230.097553][T20192]  ? show_regs_print_info+0x20/0x20
[ 1230.103210][T20192]  ? load_image+0x420/0x420
[ 1230.108602][T20192]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1230.114992][T20192]  should_fail_ex+0x394/0x4c0
[ 1230.121214][T20192]  prepare_alloc_pages+0x1e1/0x5b0
[ 1230.129922][T20192]  __alloc_pages+0x134/0x460
[ 1230.138209][T20192]  ? zone_statistics+0x170/0x170
[ 1230.144219][T20192]  ? alloc_pages+0x4e1/0x740
[ 1230.149352][T20192]  ? do_raw_spin_unlock+0x121/0x230
[ 1230.155071][T20192]  __get_free_pages+0xc/0x30
[ 1230.160555][T20192]  kasan_populate_vmalloc_pte+0x35/0x100
[ 1230.166485][T20192]  __apply_to_page_range+0x860/0xdd0
[ 1230.173781][T20192]  ? kasan_populate_vmalloc+0x70/0x70
[ 1230.180220][T20192]  ? apply_to_page_range+0x50/0x50
[ 1230.185453][T20192]  ? do_raw_spin_unlock+0x121/0x230
[ 1230.191096][T20192]  alloc_vmap_area+0x1d26/0x1e50
[ 1230.197146][T20192]  ? vm_map_ram+0xcf0/0xcf0
[ 1230.202220][T20192]  ? rcu_is_watching+0x15/0xb0
[ 1230.209545][T20192]  __get_vm_area_node+0x162/0x370
[ 1230.215597][T20192]  __vmalloc_node_range+0x36f/0x1320
[ 1230.221673][T20192]  ? sock_hash_alloc+0x25e/0x4e0
[ 1230.227180][T20192]  ? free_vm_area+0x50/0x50
[ 1230.232038][T20192]  ? bpf_map_area_alloc+0x5e/0x110
[ 1230.238203][T20192]  ? rcu_is_watching+0x15/0xb0
[ 1230.243586][T20192]  ? bpf_map_area_alloc+0x5e/0x110
[ 1230.248769][T20192]  bpf_map_area_alloc+0xf1/0x110
[ 1230.254426][T20192]  ? sock_hash_alloc+0x25e/0x4e0
[ 1230.260877][T20192]  sock_hash_alloc+0x25e/0x4e0
[ 1230.267032][T20192]  map_create+0x877/0x12f0
[ 1230.272153][T20192]  __sys_bpf+0x651/0x890
[ 1230.276560][T20192]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1230.282371][T20192]  ? lock_chain_count+0x20/0x20
[ 1230.287636][T20192]  __x64_sys_bpf+0x7c/0x90
[ 1230.292096][T20192]  do_syscall_64+0x55/0xb0
[ 1230.297049][T20192]  ? clear_bhb_loop+0x40/0x90
[ 1230.302545][T20192]  ? clear_bhb_loop+0x40/0x90
[ 1230.307458][T20192]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1230.313751][T20192] RIP: 0033:0x7f7e3d39e1d9
[ 1230.318627][T20192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1230.340282][T20192] RSP: 002b:00007f7e3e2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1230.348860][T20192] RAX: ffffffffffffffda RBX: 00007f7e3d625fa0 RCX: 00007f7e3d39e1d9
[ 1230.357078][T20192] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 0000000000000000
[ 1230.365359][T20192] RBP: 00007f7e3e2bb090 R08: 0000000000000000 R09: 0000000000000000
[ 1230.373733][T20192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1230.381835][T20192] R13: 00007f7e3d626038 R14: 00007f7e3d625fa0 R15: 00007ffdcba041b8
[ 1230.390773][T20192]  </TASK>
[ 1231.043683][T20204] netlink: 'syz.1.4309': attribute type 10 has an invalid length.
[ 1231.086625][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.119054][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.137802][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.147236][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.171267][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.244381][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.293840][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.346963][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.399129][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.437308][T20204] netlink: 'syz.1.4309': attribute type 11 has an invalid length.
[ 1231.484391][T20204] netlink: 'syz.1.4309': attribute type 4 has an invalid length.
[ 1231.514105][T20204] netlink: 'syz.1.4309': attribute type 5 has an invalid length.
[ 1231.543114][T20204] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.4309'.
[ 1231.589299][T20214] netlink: 'syz.3.4310': attribute type 27 has an invalid length.
[ 1231.614732][T20219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4312'.
[ 1231.648296][T20214] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4310'.
[ 1231.773107][T20202] delete_channel: no stack
[ 1233.282266][T20242] FAULT_INJECTION: forcing a failure.
[ 1233.282266][T20242] name failslab, interval 1, probability 0, space 0, times 0
[ 1233.420389][T20242] CPU: 0 PID: 20242 Comm: syz.3.4318 Not tainted syzkaller #0
[ 1233.430663][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1233.443934][T20242] Call Trace:
[ 1233.450523][T20242]  <TASK>
[ 1233.454105][T20242]  dump_stack_lvl+0x18c/0x250
[ 1233.461365][T20242]  ? show_regs_print_info+0x20/0x20
[ 1233.468213][T20242]  ? load_image+0x420/0x420
[ 1233.473858][T20242]  ? __might_sleep+0xe0/0xe0
[ 1233.480643][T20242]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1233.488222][T20242]  should_fail_ex+0x394/0x4c0
[ 1233.493288][T20242]  should_failslab+0x9/0x20
[ 1233.503729][T20242]  slab_pre_alloc_hook+0x59/0x300
[ 1233.510684][T20242]  kmem_cache_alloc_node+0x5e/0x310
[ 1233.517567][T20242]  ? __alloc_skb+0x103/0x2c0
[ 1233.524198][T20242]  __alloc_skb+0x103/0x2c0
[ 1233.530459][T20242]  alloc_skb_with_frags+0xcd/0x7a0
[ 1233.538365][T20242]  ? is_bpf_text_address+0x28f/0x2a0
[ 1233.544284][T20242]  ? is_bpf_text_address+0x26/0x2a0
[ 1233.550892][T20242]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1233.557929][T20242]  sock_alloc_send_pskb+0x883/0x9a0
[ 1233.564165][T20242]  ? stack_trace_save+0x100/0x100
[ 1233.571592][T20242]  ? sock_kzfree_s+0x50/0x50
[ 1233.577094][T20242]  ? __stack_depot_save+0x1f/0x660
[ 1233.583332][T20242]  ? trace_event_raw_event_lock+0x240/0x240
[ 1233.589871][T20242]  ? perf_trace_lock+0xfc/0x3b0
[ 1233.595400][T20242]  ? kasan_set_track+0x5f/0x70
[ 1233.601463][T20242]  ? kasan_set_track+0x4e/0x70
[ 1233.608298][T20242]  __ip_append_data+0x2a08/0x3bf0
[ 1233.614017][T20242]  ? do_syscall_64+0x55/0xb0
[ 1233.619560][T20242]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1233.627262][T20242]  ? ip_skb_dst_mtu+0x870/0x870
[ 1233.632664][T20242]  ? ip_setup_cork+0x840/0x840
[ 1233.637855][T20242]  ? ip_setup_cork+0x527/0x840
[ 1233.643017][T20242]  ip_make_skb+0x22b/0x440
[ 1233.647880][T20242]  ? ip_skb_dst_mtu+0x870/0x870
[ 1233.656026][T20242]  ? ip_flush_pending_frames+0x250/0x250
[ 1233.662120][T20242]  udp_sendmsg+0x1ae1/0x23d0
[ 1233.668219][T20242]  ? release_sock+0x2f/0x1c0
[ 1233.673688][T20242]  ? ip_skb_dst_mtu+0x870/0x870
[ 1233.682922][T20242]  ? udp_cmsg_send+0x350/0x350
[ 1233.689232][T20242]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1233.697672][T20242]  ? lock_chain_count+0x20/0x20
[ 1233.703896][T20242]  ? inet_sendmsg+0x10d/0x2a0
[ 1233.709018][T20242]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1233.716020][T20242]  ? _local_bh_enable+0xa0/0xa0
[ 1233.722899][T20242]  ? inet_sendmsg+0x10d/0x2a0
[ 1233.728291][T20242]  ? inet_sendmsg+0x10d/0x2a0
[ 1233.735400][T20242]  ? inet_send_prepare+0x250/0x250
[ 1233.741913][T20242]  ____sys_sendmsg+0x61b/0x980
[ 1233.747130][T20242]  ? __sys_sendmsg_sock+0x30/0x30
[ 1233.754607][T20242]  ? __import_iovec+0x5f2/0x850
[ 1233.760227][T20242]  ? import_iovec+0x73/0xa0
[ 1233.766054][T20242]  ___sys_sendmsg+0x2a6/0x360
[ 1233.771717][T20242]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1233.778359][T20242]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1233.783711][T20242]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1233.790128][T20242]  ? __x64_sys_sendmsg+0x80/0x80
[ 1233.797575][T20242]  ? lockdep_hardirqs_on+0x98/0x150
[ 1233.803418][T20242]  do_syscall_64+0x55/0xb0
[ 1233.809587][T20242]  ? clear_bhb_loop+0x40/0x90
[ 1233.815874][T20242]  ? clear_bhb_loop+0x40/0x90
[ 1233.821548][T20242]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1233.829730][T20242] RIP: 0033:0x7f208859e1d9
[ 1233.834949][T20242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1233.867365][T20242] RSP: 002b:00007f2089432028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1233.880657][T20242] RAX: ffffffffffffffda RBX: 00007f2088826090 RCX: 00007f208859e1d9
[ 1233.892277][T20242] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005
[ 1233.901087][T20242] RBP: 00007f2089432090 R08: 0000000000000000 R09: 0000000000000000
[ 1233.913389][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1233.923624][T20242] R13: 00007f2088826128 R14: 00007f2088826090 R15: 00007fff0a348de8
[ 1233.936849][T20242]  </TASK>
[ 1235.027457][T20247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4320'.
[ 1235.587649][T20259] netlink: 'syz.1.4324': attribute type 27 has an invalid length.
[ 1235.611890][T20259] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4324'.
[ 1236.761611][T20264] netlink: 'syz.1.4334': attribute type 27 has an invalid length.
[ 1236.799650][T20264] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4334'.
[ 1237.321059][T20280] netlink: 'syz.0.4329': attribute type 2 has an invalid length.
[ 1237.353619][T20280] netlink: 'syz.0.4329': attribute type 1 has an invalid length.
[ 1239.082743][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.089625][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.586765][T20298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4335'.
[ 1240.677571][T20295] netlink: 'syz.2.4335': attribute type 12 has an invalid length.
[ 1240.726081][T20295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4335'.
[ 1240.821719][T20298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4335'.
[ 1241.223287][T20306] netlink: 'syz.3.4337': attribute type 27 has an invalid length.
[ 1241.235188][T20306] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4337'.
[ 1242.147185][T20326] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4343'.
[ 1242.787304][T20338] netlink: 'syz.3.4348': attribute type 25 has an invalid length.
[ 1242.819673][T20338] netlink: 'syz.3.4348': attribute type 10 has an invalid length.
[ 1243.063416][T20344] netlink: 'syz.1.4349': attribute type 27 has an invalid length.
[ 1243.103675][T20344] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4349'.
[ 1244.621874][T20353] FAULT_INJECTION: forcing a failure.
[ 1244.621874][T20353] name failslab, interval 1, probability 0, space 0, times 0
[ 1244.662623][T20353] CPU: 0 PID: 20353 Comm: syz.0.4351 Not tainted syzkaller #0
[ 1244.671250][T20353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1244.681721][T20353] Call Trace:
[ 1244.685865][T20353]  <TASK>
[ 1244.688943][T20353]  dump_stack_lvl+0x18c/0x250
[ 1244.694603][T20353]  ? sctp_sendmsg+0x1519/0x27b0
[ 1244.699794][T20353]  ? ___sys_sendmsg+0x2a6/0x360
[ 1244.705100][T20353]  ? show_regs_print_info+0x20/0x20
[ 1244.710422][T20353]  ? load_image+0x420/0x420
[ 1244.715743][T20353]  should_fail_ex+0x394/0x4c0
[ 1244.721379][T20353]  should_failslab+0x9/0x20
[ 1244.726855][T20353]  slab_pre_alloc_hook+0x59/0x300
[ 1244.734998][T20353]  ? sctp_add_bind_addr+0x8c/0x360
[ 1244.740826][T20353]  __kmem_cache_alloc_node+0x53/0x250
[ 1244.748048][T20353]  ? sctp_add_bind_addr+0x8c/0x360
[ 1244.755042][T20353]  kmalloc_trace+0x2a/0xe0
[ 1244.760052][T20353]  sctp_add_bind_addr+0x8c/0x360
[ 1244.765643][T20353]  sctp_copy_local_addr_list+0x31b/0x4e0
[ 1244.772220][T20353]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[ 1244.781597][T20353]  ? sctp_do_8_2_transport_strike+0x910/0x910
[ 1244.787760][T20353]  ? sctp_v4_is_any+0x35/0x60
[ 1244.794167][T20353]  ? sctp_copy_one_addr+0x8c/0x350
[ 1244.800675][T20353]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1244.809089][T20353]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1244.815555][T20353]  sctp_connect_new_asoc+0x2f9/0x6a0
[ 1244.821188][T20353]  ? __sctp_connect+0xd80/0xd80
[ 1244.826222][T20353]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1244.832667][T20353]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 1244.839489][T20353]  ? security_sctp_bind_connect+0x89/0xb0
[ 1244.845955][T20353]  sctp_sendmsg+0x1519/0x27b0
[ 1244.851520][T20353]  ? sctp_getsockopt+0xb60/0xb60
[ 1244.857548][T20353]  ? aa_af_perm+0x330/0x330
[ 1244.863627][T20353]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 1244.874223][T20353]  ? sock_rps_record_flow+0x19/0x3f0
[ 1244.881558][T20353]  ? inet_sendmsg+0xce/0x2a0
[ 1244.886323][T20353]  ? inet_send_prepare+0x250/0x250
[ 1244.892397][T20353]  ____sys_sendmsg+0x61b/0x980
[ 1244.898846][T20353]  ? __asan_memset+0x22/0x40
[ 1244.904341][T20353]  ? __sys_sendmsg_sock+0x30/0x30
[ 1244.910244][T20353]  ? __import_iovec+0x5f2/0x850
[ 1244.915533][T20353]  ? import_iovec+0x73/0xa0
[ 1244.920676][T20353]  ___sys_sendmsg+0x2a6/0x360
[ 1244.926584][T20353]  ? get_pid_task+0x20/0x1e0
[ 1244.931647][T20353]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1244.937669][T20353]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1244.944880][T20353]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1244.950782][T20353]  ? __x64_sys_sendmsg+0x80/0x80
[ 1244.958463][T20353]  ? lockdep_hardirqs_on+0x98/0x150
[ 1244.964117][T20353]  do_syscall_64+0x55/0xb0
[ 1244.970285][T20353]  ? clear_bhb_loop+0x40/0x90
[ 1244.975754][T20353]  ? clear_bhb_loop+0x40/0x90
[ 1244.980783][T20353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1244.987471][T20353] RIP: 0033:0x7f467259e1d9
[ 1244.992376][T20353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1245.014517][T20353] RSP: 002b:00007f4673552028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1245.024498][T20353] RAX: ffffffffffffffda RBX: 00007f4672825fa0 RCX: 00007f467259e1d9
[ 1245.034015][T20353] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003
[ 1245.044503][T20353] RBP: 00007f4673552090 R08: 0000000000000000 R09: 0000000000000000
[ 1245.053684][T20353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1245.062688][T20353] R13: 00007f4672826038 R14: 00007f4672825fa0 R15: 00007fff8ab81348
[ 1245.072460][T20353]  </TASK>
[ 1245.410390][T20363] IPv6: Can't replace route, no match found
[ 1245.812189][T20377] netlink: 'syz.2.4360': attribute type 27 has an invalid length.
[ 1245.842626][T20377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4360'.
[ 1247.367226][T20404] netlink: 105940 bytes leftover after parsing attributes in process `syz.2.4367'.
[ 1248.043950][T20405] netlink: 'syz.2.4367': attribute type 28 has an invalid length.
[ 1248.059240][T20405] netlink: 'syz.2.4367': attribute type 29 has an invalid length.
[ 1248.109331][T20405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4367'.
[ 1248.597711][T20418] FAULT_INJECTION: forcing a failure.
[ 1248.597711][T20418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1248.618210][T20418] CPU: 0 PID: 20418 Comm: syz.2.4374 Not tainted syzkaller #0
[ 1248.626226][T20418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1248.636599][T20418] Call Trace:
[ 1248.640671][T20418]  <TASK>
[ 1248.643939][T20418]  dump_stack_lvl+0x18c/0x250
[ 1248.648806][T20418]  ? show_regs_print_info+0x20/0x20
[ 1248.654157][T20418]  ? load_image+0x420/0x420
[ 1248.659002][T20418]  ? __might_fault+0xaa/0x120
[ 1248.664075][T20418]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1248.669413][T20418]  should_fail_ex+0x394/0x4c0
[ 1248.675341][T20418]  _copy_from_user+0x2f/0xe0
[ 1248.680295][T20418]  kstrtouint_from_user+0xde/0x170
[ 1248.685554][T20418]  ? kstrtol_from_user+0x190/0x190
[ 1248.694259][T20418]  proc_fail_nth_write+0x8f/0x250
[ 1248.699541][T20418]  ? proc_fail_nth_read+0x260/0x260
[ 1248.704918][T20418]  ? proc_fail_nth_read+0x260/0x260
[ 1248.710375][T20418]  vfs_write+0x299/0x9a0
[ 1248.714785][T20418]  ? file_end_write+0x250/0x250
[ 1248.720569][T20418]  ? __fget_files+0x28/0x460
[ 1248.725251][T20418]  ? __fget_files+0x3fc/0x460
[ 1248.730961][T20418]  ? __fdget_pos+0x2a3/0x330
[ 1248.736355][T20418]  ? ksys_write+0x74/0x260
[ 1248.741819][T20418]  ksys_write+0x151/0x260
[ 1248.746783][T20418]  ? __ia32_sys_read+0x90/0x90
[ 1248.752415][T20418]  ? lockdep_hardirqs_on+0x98/0x150
[ 1248.760221][T20418]  do_syscall_64+0x55/0xb0
[ 1248.765335][T20418]  ? clear_bhb_loop+0x40/0x90
[ 1248.772050][T20418]  ? clear_bhb_loop+0x40/0x90
[ 1248.777158][T20418]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1248.783748][T20418] RIP: 0033:0x7f7e3d35ea0e
[ 1248.790809][T20418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1248.812435][T20418] RSP: 002b:00007f7e3e2bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1248.821440][T20418] RAX: ffffffffffffffda RBX: 00007f7e3e2bb6c0 RCX: 00007f7e3d35ea0e
[ 1248.830865][T20418] RDX: 0000000000000001 RSI: 00007f7e3e2bb0a0 RDI: 0000000000000004
[ 1248.841527][T20418] RBP: 00007f7e3e2bb090 R08: 0000000000000000 R09: 0000000000000000
[ 1248.850700][T20418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1248.861076][T20418] R13: 00007f7e3d626038 R14: 00007f7e3d625fa0 R15: 00007ffdcba041b8
[ 1248.871008][T20418]  </TASK>
[ 1249.262492][ T5087] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[ 1249.286942][T20426] netlink: 'syz.3.4377': attribute type 10 has an invalid length.
[ 1254.531947][T20503] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4405'.
[ 1256.699727][T20542] FAULT_INJECTION: forcing a failure.
[ 1256.699727][T20542] name failslab, interval 1, probability 0, space 0, times 0
[ 1256.737959][T20542] CPU: 0 PID: 20542 Comm: syz.2.4419 Not tainted syzkaller #0
[ 1256.745525][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1256.755643][T20542] Call Trace:
[ 1256.758978][T20542]  <TASK>
[ 1256.761969][T20542]  dump_stack_lvl+0x18c/0x250
[ 1256.766714][T20542]  ? show_regs_print_info+0x20/0x20
[ 1256.771972][T20542]  ? load_image+0x420/0x420
[ 1256.776549][T20542]  ? __might_sleep+0xe0/0xe0
[ 1256.781217][T20542]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1256.786312][T20542]  should_fail_ex+0x394/0x4c0
[ 1256.791058][T20542]  should_failslab+0x9/0x20
[ 1256.795894][T20542]  slab_pre_alloc_hook+0x59/0x300
[ 1256.801149][T20542]  ? tomoyo_encode+0x2ad/0x570
[ 1256.806057][T20542]  ? tomoyo_encode+0x2ad/0x570
[ 1256.810876][T20542]  __kmem_cache_alloc_node+0x53/0x250
[ 1256.816300][T20542]  ? tomoyo_encode+0x2ad/0x570
[ 1256.821099][T20542]  __kmalloc+0xa7/0x240
[ 1256.825325][T20542]  tomoyo_encode+0x2ad/0x570
[ 1256.830075][T20542]  tomoyo_realpath_from_path+0x57c/0x5c0
[ 1256.836118][T20542]  ? tomoyo_domain+0xd6/0x120
[ 1256.841302][T20542]  tomoyo_path_number_perm+0x248/0x5e0
[ 1256.847127][T20542]  ? tomoyo_path_number_perm+0x217/0x5e0
[ 1256.852838][T20542]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1256.858363][T20542]  ? ksys_write+0x1d2/0x260
[ 1256.863297][T20542]  ? __fget_files+0x28/0x460
[ 1256.868075][T20542]  security_file_ioctl+0x70/0xa0
[ 1256.874080][T20542]  __se_sys_ioctl+0x48/0x170
[ 1256.878822][T20542]  do_syscall_64+0x55/0xb0
[ 1256.883375][T20542]  ? clear_bhb_loop+0x40/0x90
[ 1256.888129][T20542]  ? clear_bhb_loop+0x40/0x90
[ 1256.892865][T20542]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1256.898883][T20542] RIP: 0033:0x7f7e3d39e1d9
[ 1256.904584][T20542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1256.926342][T20542] RSP: 002b:00007f7e3e2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1256.935879][T20542] RAX: ffffffffffffffda RBX: 00007f7e3d625fa0 RCX: 00007f7e3d39e1d9
[ 1256.945709][T20542] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[ 1256.954974][T20542] RBP: 00007f7e3e2bb090 R08: 0000000000000000 R09: 0000000000000000
[ 1256.965108][T20542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1256.975005][T20542] R13: 00007f7e3d626038 R14: 00007f7e3d625fa0 R15: 00007ffdcba041b8
[ 1256.985261][T20542]  </TASK>
[ 1256.999998][T20542] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1257.066227][T20546] cgroup: fork rejected by pids controller in /syz3
[ 1258.250026][T17597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.426897][T17597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.573197][T17597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.746743][T17597] team0: Port device netdevsim0 removed
[ 1258.782579][T17597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1259.026064][T20684] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4435'.
[ 1259.436917][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1259.448016][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1259.457267][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1259.466804][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1259.489330][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1259.501791][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1259.628954][T20700] caif0: entered promiscuous mode
[ 1259.650664][T20700] caif0: entered allmulticast mode
[ 1261.275356][T20740] netlink: 'syz.1.4448': attribute type 9 has an invalid length.
[ 1261.293949][T20740] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4448'.
[ 1261.357204][T20732] syzkaller0: entered promiscuous mode
[ 1261.385298][T20732] syzkaller0: entered allmulticast mode
[ 1261.549301][ T5087] Bluetooth: hci0: command tx timeout
[ 1261.638381][T20694] chnl_net:caif_netlink_parms(): no params data found
[ 1261.793350][T20752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1263.633725][ T5087] Bluetooth: hci0: command tx timeout
[ 1264.348986][T20743] netlink: 'syz.1.4448': attribute type 9 has an invalid length.
[ 1264.369370][T20743] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4448'.
[ 1264.409480][T20766] netlink: 'syz.0.4452': attribute type 10 has an invalid length.
[ 1264.434657][T20766] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1264.462681][T20766] bridge_slave_1: left allmulticast mode
[ 1264.468445][T20766] bridge_slave_1: left promiscuous mode
[ 1264.477423][T20766] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1265.099808][T20694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1265.107259][T20694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1265.135626][T20694] bridge_slave_0: entered allmulticast mode
[ 1265.144626][T20694] bridge_slave_0: entered promiscuous mode
[ 1265.168567][T20694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1265.178572][T20694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1265.226432][T20694] bridge_slave_1: entered allmulticast mode
[ 1265.245445][T20694] bridge_slave_1: entered promiscuous mode
[ 1265.417769][T20694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1265.503249][T20694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1265.717399][ T5087] Bluetooth: hci0: command tx timeout
[ 1265.786500][T20694] team0: Port device team_slave_0 added
[ 1265.837555][T20694] team0: Port device team_slave_1 added
[ 1265.865949][T20793] netlink: 'syz.1.4460': attribute type 10 has an invalid length.
[ 1265.898685][T20793] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1265.906302][T20793] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1265.959526][T20793] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1265.966910][T20793] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1265.974664][T20793] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1265.981997][T20793] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1266.012808][T20793] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1266.289543][T17597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1266.306783][T17597] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1266.328733][T17597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1266.336877][T17597] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1266.399809][T17597] bridge_slave_1: left allmulticast mode
[ 1266.406380][T17597] bridge_slave_1: left promiscuous mode
[ 1266.445329][T17597] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1266.464475][T17597] bridge_slave_0: left allmulticast mode
[ 1266.488976][T17597] bridge_slave_0: left promiscuous mode
[ 1266.495962][T17597] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1266.572440][T17597] veth1_macvtap: left promiscuous mode
[ 1266.598601][T17597] veth0_macvtap: left promiscuous mode
[ 1266.619126][T17597] veth1_vlan: left promiscuous mode
[ 1266.624665][T17597] veth0_vlan: left promiscuous mode
[ 1267.634322][T17597] team0 (unregistering): Port device macvlan0 removed
[ 1267.789036][ T5087] Bluetooth: hci0: command tx timeout
[ 1268.017814][T17597] team0 (unregistering): Port device team_slave_1 removed
[ 1268.076228][T17597] team0 (unregistering): Port device C removed
[ 1268.132415][T17597] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[ 1268.595632][T17597] bond0 (unregistering): Released all slaves
[ 1268.660449][T20694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1268.667837][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1268.698378][T20694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1268.715325][T20694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1268.732558][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1268.764549][T20694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1268.789515][T20820] netlink: 'syz.2.4464': attribute type 10 has an invalid length.
[ 1268.801403][T20820] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1268.827679][T20820] bridge_slave_1: left allmulticast mode
[ 1268.842316][T20820] bridge_slave_1: left promiscuous mode
[ 1268.848295][T20820] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1268.860847][T20820] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1268.992613][T20694] hsr_slave_0: entered promiscuous mode
[ 1269.043402][T20694] hsr_slave_1: entered promiscuous mode
[ 1269.232002][T20831] netlink: 'syz.1.4468': attribute type 10 has an invalid length.
[ 1269.259267][T20831] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[ 1270.248074][T20858] netlink: 'syz.1.4477': attribute type 10 has an invalid length.
[ 1270.361735][T20858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.373876][T20858] bridge_slave_1: left allmulticast mode
[ 1270.381422][T20858] bridge_slave_1: left promiscuous mode
[ 1270.387992][T20858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.427371][T20858] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1270.688925][T20694] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1270.733017][T20694] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1270.784170][T20694] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1270.829159][T20694] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1270.871636][T20878] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4483'.
[ 1270.907071][T20878] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[ 1271.094738][T20694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1271.166881][T20694] 8021q: adding VLAN 0 to HW filter on device team0
[ 1271.199743][T17592] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1271.206974][T17592] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1271.255855][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1271.263109][ T9844] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1271.532598][T20895] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.4486'.
[ 1272.554143][T20914] netlink: 'syz.2.4488': attribute type 3 has an invalid length.
[ 1272.588924][T20914] netlink: 'syz.2.4488': attribute type 1 has an invalid length.
[ 1272.596899][T20914] netlink: 'syz.2.4488': attribute type 6 has an invalid length.
[ 1272.722819][T20914] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.4488'.
[ 1273.011286][T20694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1273.229273][T20694] veth0_vlan: entered promiscuous mode
[ 1273.274614][T20925] netlink: 'syz.1.4492': attribute type 9 has an invalid length.
[ 1273.289468][T20925] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4492'.
[ 1273.305539][T20694] veth1_vlan: entered promiscuous mode
[ 1273.499046][T20694] veth0_macvtap: entered promiscuous mode
[ 1273.521106][T20694] veth1_macvtap: entered promiscuous mode
[ 1273.591784][T20694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1273.651147][T20694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1273.694643][T20694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1273.739508][T20694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1273.772103][T20694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1273.817683][T20694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1273.898146][T20694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1273.941657][T20694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1273.989313][T20694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1274.026425][T20694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1274.055180][T20694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1274.097122][T20694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1274.140463][T20694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1274.172384][T20694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1274.191371][T20694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1274.216384][T20694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1274.621473][T20947] sit0: entered allmulticast mode
[ 1274.695371][T20948] sit0: entered promiscuous mode
[ 1274.892816][T20960] syzkaller0: entered promiscuous mode
[ 1274.898488][T20960] syzkaller0: entered allmulticast mode
[ 1281.753718][T17597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1281.792271][T17597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1281.875045][T17577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1281.883774][T17577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1281.999980][T21040] netlink: 'syz.3.4431': attribute type 4 has an invalid length.
[ 1282.008664][T21040] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4431'.
[ 1282.162240][T21040] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4431'.
[ 1282.376425][T21051] FAULT_INJECTION: forcing a failure.
[ 1282.376425][T21051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1282.399020][T21051] CPU: 0 PID: 21051 Comm: syz.0.4524 Not tainted syzkaller #0
[ 1282.406774][T21051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1282.416876][T21051] Call Trace:
[ 1282.420198][T21051]  <TASK>
[ 1282.423161][T21051]  dump_stack_lvl+0x18c/0x250
[ 1282.427906][T21051]  ? show_regs_print_info+0x20/0x20
[ 1282.433144][T21051]  ? load_image+0x420/0x420
[ 1282.437701][T21051]  ? __might_fault+0xaa/0x120
[ 1282.442417][T21051]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1282.447503][T21051]  ? bpf_percpu_hash_update+0x2b/0x200
[ 1282.453606][T21051]  ? __virt_addr_valid+0x10c/0x380
[ 1282.458885][T21051]  should_fail_ex+0x394/0x4c0
[ 1282.463738][T21051]  _copy_from_user+0x2f/0xe0
[ 1282.468387][T21051]  generic_map_update_batch+0x53e/0x800
[ 1282.473995][T21051]  ? rcu_read_unlock+0xa0/0xa0
[ 1282.478819][T21051]  ? __fdget+0x180/0x210
[ 1282.483135][T21051]  ? rcu_read_unlock+0xa0/0xa0
[ 1282.487952][T21051]  bpf_map_do_batch+0x3f2/0x600
[ 1282.492852][T21051]  ? bpf_lsm_xfrm_policy_lookup+0x10/0x10
[ 1282.498647][T21051]  __sys_bpf+0x381/0x890
[ 1282.503053][T21051]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1282.508544][T21051]  ? lock_chain_count+0x20/0x20
[ 1282.513544][T21051]  __x64_sys_bpf+0x7c/0x90
[ 1282.518185][T21051]  do_syscall_64+0x55/0xb0
[ 1282.522652][T21051]  ? clear_bhb_loop+0x40/0x90
[ 1282.527380][T21051]  ? clear_bhb_loop+0x40/0x90
[ 1282.532127][T21051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1282.538449][T21051] RIP: 0033:0x7f467259e1d9
[ 1282.542908][T21051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1282.563261][T21051] RSP: 002b:00007f4673552028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1282.571715][T21051] RAX: ffffffffffffffda RBX: 00007f4672825fa0 RCX: 00007f467259e1d9
[ 1282.579717][T21051] RDX: 0000000000000038 RSI: 00002000000019c0 RDI: 000000000000001a
[ 1282.587713][T21051] RBP: 00007f4673552090 R08: 0000000000000000 R09: 0000000000000000
[ 1282.595711][T21051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1282.603716][T21051] R13: 00007f4672826038 R14: 00007f4672825fa0 R15: 00007fff8ab81348
[ 1282.611739][T21051]  </TASK>
[ 1282.887521][T21066] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.4519'.
[ 1282.959433][T21065] netlink: 'syz.1.4519': attribute type 6 has an invalid length.
[ 1282.988734][T21065] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4519'.
[ 1283.434318][T21083] netlink: 'syz.3.4525': attribute type 1 has an invalid length.
[ 1283.487421][T21083] netlink: 'syz.3.4525': attribute type 3 has an invalid length.
[ 1283.517546][T21083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4525'.
[ 1283.610763][T21087] netlink: 'syz.3.4525': attribute type 10 has an invalid length.
[ 1283.639689][T21087] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4525'.
[ 1283.960413][T21086] delete_channel: no stack
[ 1284.219448][T21103] netlink: 'syz.0.4531': attribute type 21 has an invalid length.
[ 1284.240369][T21103] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1284.262973][T21103] IPv6: Can't replace route, no match found
[ 1284.307719][T21103] netlink: 'syz.0.4531': attribute type 10 has an invalid length.
[ 1284.640950][T21103] team0: Device wg1 is of different type
[ 1285.007462][T21120] netlink: 'syz.2.4536': attribute type 39 has an invalid length.
[ 1286.672314][T21164] netlink: 'syz.0.4556': attribute type 29 has an invalid length.
[ 1286.686009][T21164] netlink: 'syz.0.4556': attribute type 29 has an invalid length.
[ 1289.288915][T21201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4568'.
[ 1289.352590][T21203] nla_validate_range_unsigned: 25 callbacks suppressed
[ 1289.352616][T21203] netlink: 'syz.2.4568': attribute type 11 has an invalid length.
[ 1289.388961][T21203] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4568'.
[ 1289.406634][T21203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1289.939565][T21211] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4572'.
[ 1290.355036][T21211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1290.418341][T21211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1290.470158][T21211] bond0 (unregistering): Released all slaves
[ 1290.536694][T21216] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4572'.
[ 1290.649494][T21231] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1290.735868][T21235] validate_nla: 1 callbacks suppressed
[ 1290.735907][T21235] netlink: 'syz.1.4578': attribute type 27 has an invalid length.
[ 1290.784868][T21235] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4578'.
[ 1290.866740][T21239] netlink: 'syz.2.4581': attribute type 29 has an invalid length.
[ 1290.889529][T21239] netlink: 'syz.2.4581': attribute type 29 has an invalid length.
[ 1294.627232][T21268] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4590'.
[ 1294.650091][T21270] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4591'.
[ 1294.667120][T21268] pim6reg1: entered promiscuous mode
[ 1294.683197][T21268] pim6reg1: entered allmulticast mode
[ 1295.382416][T21289] netlink: 'syz.0.4598': attribute type 27 has an invalid length.
[ 1295.409120][T21289] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4598'.
[ 1297.468978][T19425] Bluetooth: hci2: command 0x0406 tx timeout
[ 1298.259701][T21305] netlink: 'syz.2.4606': attribute type 3 has an invalid length.
[ 1298.267730][T21305] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4606'.
[ 1298.278390][T21305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1298.295268][T21309] netlink: 'syz.0.4607': attribute type 10 has an invalid length.
[ 1298.521355][T21315] netlink: 'syz.0.4611': attribute type 25 has an invalid length.
[ 1298.534065][T21315] netlink: 'syz.0.4611': attribute type 10 has an invalid length.
[ 1299.537454][T21332] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4617'.
[ 1299.730509][T21332] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4617'.
[ 1299.812709][T21341] netlink: 'syz.3.4618': attribute type 27 has an invalid length.
[ 1299.844135][T21341] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 1299.882093][T21332] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 1299.984046][T21346] netlink: 'syz.1.4621': attribute type 16 has an invalid length.
[ 1300.011499][T21346] netlink: 'syz.1.4621': attribute type 3 has an invalid length.
[ 1300.024533][T21347] syz.0.4619 (21347) used obsolete PPPIOCDETACH ioctl
[ 1300.052533][T21346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4621'.
[ 1300.539498][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.552397][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.103002][T21357] netlink: 'syz.3.4625': attribute type 10 has an invalid length.
[ 1301.227863][T21357] team0: Device nlmon0 is of different type
[ 1301.625376][T21379] netlink: 'syz.3.4630': attribute type 27 has an invalid length.
[ 1301.640813][T21379] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4630'.
[ 1301.729449][T21359] tap0: tun_chr_ioctl cmd 1074025677
[ 1301.735030][T21359] tap0: linktype set to 773
[ 1302.438589][T21386] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4632'.
[ 1302.679911][T21384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4632'.
[ 1302.749985][T21384] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 1303.167615][T21402] À: port 1(vlan0) entered blocking state
[ 1303.182488][T21402] À: port 1(vlan0) entered disabled state
[ 1303.201878][T21402] vlan0: entered allmulticast mode
[ 1303.207458][T21402] veth0_vlan: entered allmulticast mode
[ 1303.242265][T21402] vlan0: entered promiscuous mode
[ 1303.304826][T21406] netlink: 'syz.2.4639': attribute type 10 has an invalid length.
[ 1303.461208][T21406] bond0: (slave bridge0): Releasing backup interface
[ 1303.582521][T21406] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1303.650324][T21412] netlink: 'syz.1.4640': attribute type 27 has an invalid length.
[ 1303.658661][T21412] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4640'.
[ 1303.699466][T21406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.708004][T21406] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1303.855737][T21406] team0: Port device bridge0 added
[ 1304.047473][T21421] FAULT_INJECTION: forcing a failure.
[ 1304.047473][T21421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1304.089085][T21421] CPU: 1 PID: 21421 Comm: syz.0.4642 Not tainted syzkaller #0
[ 1304.096651][T21421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1304.106977][T21421] Call Trace:
[ 1304.110347][T21421]  <TASK>
[ 1304.113372][T21421]  dump_stack_lvl+0x18c/0x250
[ 1304.118130][T21421]  ? show_regs_print_info+0x20/0x20
[ 1304.123434][T21421]  ? load_image+0x420/0x420
[ 1304.128022][T21421]  ? __might_fault+0xaa/0x120
[ 1304.132855][T21421]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1304.138042][T21421]  should_fail_ex+0x394/0x4c0
[ 1304.142800][T21421]  _copy_to_user+0x2f/0xa0
[ 1304.147295][T21421]  bpf_verifier_vlog+0x2f1/0x840
[ 1304.152322][T21421]  __btf_verifier_log+0xe3/0x140
[ 1304.157521][T21421]  ? btf_check_sec_info+0x350/0x350
[ 1304.162796][T21421]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1304.169163][T21421]  __btf_verifier_log_type+0x3c9/0x690
[ 1304.174722][T21421]  ? btf_int_show+0x2810/0x2810
[ 1304.179677][T21421]  btf_float_check_meta+0x113/0x170
[ 1304.184954][T21421]  btf_check_all_metas+0x371/0xaf0
[ 1304.190162][T21421]  btf_parse_type_sec+0xfc/0x1960
[ 1304.195288][T21421]  ? btf_check_sec_info+0x350/0x350
[ 1304.200626][T21421]  ? btf_verifier_log+0x1a0/0x1a0
[ 1304.205919][T21421]  ? btf_parse_hdr+0x545/0x700
[ 1304.210753][T21421]  ? btf_parse_str_sec+0x20d/0x2a0
[ 1304.216208][T21421]  btf_new_fd+0x440/0x9e0
[ 1304.220904][T21421]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1304.227155][T21421]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1304.232360][T21421]  ? bpf_btf_load+0x4e/0x90
[ 1304.237029][T21421]  __sys_bpf+0x670/0x890
[ 1304.242886][T21421]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1304.251305][T21421]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1304.257894][T21421]  __x64_sys_bpf+0x7c/0x90
[ 1304.262391][T21421]  do_syscall_64+0x55/0xb0
[ 1304.266874][T21421]  ? clear_bhb_loop+0x40/0x90
[ 1304.271785][T21421]  ? clear_bhb_loop+0x40/0x90
[ 1304.276535][T21421]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1304.282863][T21421] RIP: 0033:0x7f467259e1d9
[ 1304.287437][T21421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1304.307205][T21421] RSP: 002b:00007f4673531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1304.315875][T21421] RAX: ffffffffffffffda RBX: 00007f4672826090 RCX: 00007f467259e1d9
[ 1304.324172][T21421] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[ 1304.332304][T21421] RBP: 00007f4673531090 R08: 0000000000000000 R09: 0000000000000000
[ 1304.340772][T21421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1304.348817][T21421] R13: 00007f4672826128 R14: 00007f4672826090 R15: 00007fff8ab81348
[ 1304.356901][T21421]  </TASK>
[ 1304.489606][T21427] tap0: tun_chr_ioctl cmd 1074025677
[ 1304.496144][T21427] tap0: linktype set to 773
[ 1305.174751][T21443] FAULT_INJECTION: forcing a failure.
[ 1305.174751][T21443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1305.260414][T21444] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4646'.
[ 1305.271056][T21443] CPU: 1 PID: 21443 Comm: syz.3.4648 Not tainted syzkaller #0
[ 1305.278693][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1305.288823][T21443] Call Trace:
[ 1305.292157][T21443]  <TASK>
[ 1305.295132][T21443]  dump_stack_lvl+0x18c/0x250
[ 1305.299862][T21443]  ? show_regs_print_info+0x20/0x20
[ 1305.305105][T21443]  ? load_image+0x420/0x420
[ 1305.309682][T21443]  ? __might_fault+0xaa/0x120
[ 1305.314451][T21443]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1305.319711][T21443]  should_fail_ex+0x394/0x4c0
[ 1305.324456][T21443]  _copy_from_user+0x2f/0xe0
[ 1305.329099][T21443]  arp_ioctl+0x159/0x540
[ 1305.333412][T21443]  ? neigh_release+0x80/0x80
[ 1305.338071][T21443]  ? do_vfs_ioctl+0x156c/0x1cc0
[ 1305.343025][T21443]  inet_ioctl+0x3c5/0x560
[ 1305.347413][T21443]  ? tomoyo_path_number_perm+0x217/0x5e0
[ 1305.353106][T21443]  ? inet_shutdown+0x370/0x370
[ 1305.357937][T21443]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1305.363647][T21443]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[ 1305.369339][T21443]  ? __kmem_cache_free+0xba/0x1f0
[ 1305.374448][T21443]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1305.380002][T21443]  ? packet_ioctl+0x180/0x350
[ 1305.384755][T21443]  sock_do_ioctl+0xfc/0x310
[ 1305.389341][T21443]  ? sock_show_fdinfo+0xb0/0xb0
[ 1305.394286][T21443]  sock_ioctl+0x5be/0x7e0
[ 1305.398711][T21443]  ? sock_poll+0x3e0/0x3e0
[ 1305.403209][T21443]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1305.408190][T21443]  ? security_file_ioctl+0x80/0xa0
[ 1305.413357][T21443]  ? sock_poll+0x3e0/0x3e0
[ 1305.417831][T21443]  __se_sys_ioctl+0xfd/0x170
[ 1305.422479][T21443]  do_syscall_64+0x55/0xb0
[ 1305.426940][T21443]  ? clear_bhb_loop+0x40/0x90
[ 1305.431674][T21443]  ? clear_bhb_loop+0x40/0x90
[ 1305.436398][T21443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1305.442342][T21443] RIP: 0033:0x7fbd7459e1d9
[ 1305.446834][T21443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1305.466486][T21443] RSP: 002b:00007fbd75423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1305.474959][T21443] RAX: ffffffffffffffda RBX: 00007fbd74825fa0 RCX: 00007fbd7459e1d9
[ 1305.483070][T21443] RDX: 0000200000000040 RSI: 0000000000008953 RDI: 0000000000000003
[ 1305.491083][T21443] RBP: 00007fbd75423090 R08: 0000000000000000 R09: 0000000000000000
[ 1305.499094][T21443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1305.507108][T21443] R13: 00007fbd74826038 R14: 00007fbd74825fa0 R15: 00007ffce30e9fd8
[ 1305.515264][T21443]  </TASK>
[ 1305.652857][T21444] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4646'.
[ 1305.698953][T21444] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 1306.296953][T21460] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.4652'.
[ 1306.364086][T21461] netlink: 'syz.3.4651': attribute type 27 has an invalid length.
[ 1306.378891][T21461] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4651'.
[ 1309.552596][T21475] syzkaller0: entered promiscuous mode
[ 1309.573063][T21475] syzkaller0: entered allmulticast mode
[ 1310.144228][T21481] syzkaller0: entered promiscuous mode
[ 1310.159397][T21481] syzkaller0: entered allmulticast mode
[ 1310.198615][T21493] netlink: 'syz.1.4662': attribute type 10 has an invalid length.
[ 1310.269765][T21493] team0: Device nlmon0 is of different type
[ 1311.018315][T19425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1311.044767][T19425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1311.053290][T19425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1311.079691][T19425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1311.109128][T19425] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1311.122959][T19425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1313.078520][T21496] netlink: 'syz.3.4663': attribute type 20 has an invalid length.
[ 1313.239004][ T5087] Bluetooth: hci3: command tx timeout
[ 1313.496230][T21510] netlink: 'syz.0.4666': attribute type 27 has an invalid length.
[ 1313.508932][T21510] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4666'.
[ 1315.319040][ T5087] Bluetooth: hci3: command tx timeout
[ 1316.662938][T21517] netlink: 'syz.3.4668': attribute type 9 has an invalid length.
[ 1316.679283][T21517] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4668'.
[ 1317.391080][ T5087] Bluetooth: hci3: command tx timeout
[ 1318.655550][T21513] netlink: 'syz.0.4667': attribute type 10 has an invalid length.
[ 1318.668927][T21513] team0: Device bridge0 is up. Set it down before adding it as a team port
[ 1318.718450][T17616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1318.757099][T21516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1318.764524][T21516] IPv6: NLM_F_CREATE should be set when creating new route
[ 1318.772173][T21516] IPv6: NLM_F_CREATE should be set when creating new route
[ 1318.780000][T21516] IPv6: NLM_F_CREATE should be set when creating new route
[ 1319.018433][T17616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1319.223390][T17616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1319.283919][T21529] netlink: 'syz.0.4673': attribute type 20 has an invalid length.
[ 1319.488143][ T5087] Bluetooth: hci3: command tx timeout
[ 1320.067387][T17616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1322.746938][T21547] syzkaller0: entered promiscuous mode
[ 1322.752891][T21547] syzkaller0: entered allmulticast mode
[ 1322.820302][T21556] syzkaller0: entered promiscuous mode
[ 1322.825953][T21556] syzkaller0: entered allmulticast mode
[ 1325.921885][T21499] chnl_net:caif_netlink_parms(): no params data found
[ 1326.503650][T21602] netlink: 'syz.3.4689': attribute type 4 has an invalid length.
[ 1326.546915][T21602] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4689'.
[ 1328.844875][T21618] netlink: 'syz.3.4691': attribute type 2 has an invalid length.
[ 1328.853355][T21618] netlink: 'syz.3.4691': attribute type 1 has an invalid length.
[ 1328.861986][T21618] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.4691'.
[ 1328.992908][T21499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1329.025880][T21499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1329.060388][T21499] bridge_slave_0: entered allmulticast mode
[ 1329.105132][T21499] bridge_slave_0: entered promiscuous mode
[ 1329.161327][T21499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1329.169015][T21499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1329.182841][T21499] bridge_slave_1: entered allmulticast mode
[ 1329.205851][T21499] bridge_slave_1: entered promiscuous mode
[ 1329.663788][T21499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1329.865043][T21499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1330.237827][T21499] team0: Port device team_slave_0 added
[ 1330.299802][T21499] team0: Port device team_slave_1 added
[ 1330.745640][T21499] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1330.753062][T21499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1330.782754][T21499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1330.844518][T21499] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1330.852526][T21499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1330.889233][T21499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1331.126735][T21666] netlink: 'syz.0.4703': attribute type 10 has an invalid length.
[ 1331.179248][T21666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4703'.
[ 1331.459949][T21499] hsr_slave_0: entered promiscuous mode
[ 1331.495069][T21499] hsr_slave_1: entered promiscuous mode
[ 1331.540120][T21499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1331.549868][T21499] Cannot create hsr debugfs directory
[ 1332.683981][T21710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4713'.
[ 1334.172156][T21746] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4724'.
[ 1334.362080][T21499] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1334.401405][T21499] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1334.434713][T21499] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1334.475989][T17616] hsr_slave_0: left promiscuous mode
[ 1334.489996][T17616] hsr_slave_1: left promiscuous mode
[ 1334.513359][T17616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1334.531144][T17616] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1334.551646][T17616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1334.568436][T17616] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1334.598391][T17616] bridge_slave_0: left allmulticast mode
[ 1334.605840][T17616] bridge_slave_0: left promiscuous mode
[ 1334.637898][T17616] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1334.761550][T17616] veth1_macvtap: left promiscuous mode
[ 1334.779624][T17616] veth0_macvtap: left promiscuous mode
[ 1334.786218][T17616] veth1_vlan: left promiscuous mode
[ 1334.814473][T17616] veth0_vlan: left promiscuous mode
[ 1335.673367][T21775] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4735'.
[ 1336.907259][T17616] team0 (unregistering): Port device team_slave_1 removed
[ 1336.967276][T17616] team0 (unregistering): Port device C removed
[ 1337.024853][T17616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1337.087439][T17616] bond0 (unregistering): (slave 
1
7ÿ): Releasing backup interface
[ 1337.162558][T17616] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1337.658294][T17616] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1337.667717][T17616] bond0 (unregistering): Released all slaves
[ 1337.764171][T21499] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1338.172551][T21499] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1338.280943][T21499] 8021q: adding VLAN 0 to HW filter on device team0
[ 1338.341043][T17597] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.348309][T17597] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1338.411422][T17597] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.418712][T17597] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1339.079537][T21821] netlink: 'syz.0.4747': attribute type 10 has an invalid length.
[ 1339.109905][T21821] team0: Device bridge0 is up. Set it down before adding it as a team port
[ 1339.406153][T21499] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1339.546924][T21499] veth0_vlan: entered promiscuous mode
[ 1339.586984][T21499] veth1_vlan: entered promiscuous mode
[ 1339.676740][T21499] veth0_macvtap: entered promiscuous mode
[ 1339.701832][T21499] veth1_macvtap: entered promiscuous mode
[ 1339.754208][T21499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1339.773804][T21499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1339.787110][T21499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1339.811918][T21499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1339.846805][T21499] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1339.896120][T21499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1339.928110][T21499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1339.959807][T21499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1339.992995][T21499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1340.025027][T21499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1340.065386][T21499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1340.090361][T21499] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1340.136432][T21499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.163960][T21499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.204046][T21499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.234021][T21499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1341.600890][T17571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1341.618955][T17571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1341.638091][T21857] netlink: 'syz.0.4751': attribute type 29 has an invalid length.
[ 1341.665413][T21857] netlink: 'syz.0.4751': attribute type 29 has an invalid length.
[ 1341.807325][T17571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1341.867213][T17571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1342.305432][T21876] netlink: 'syz.1.4664': attribute type 27 has an invalid length.
[ 1342.329194][T21876] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4664'.
[ 1343.819838][T19425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1343.830065][T19425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1343.838452][T19425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1343.862360][T19425] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1343.910949][T19425] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1343.930657][T19425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1344.396825][T21902] chnl_net:caif_netlink_parms(): no params data found
[ 1344.884808][T17604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.136725][T17604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.174471][T21940] netlink: 'syz.3.4765': attribute type 10 has an invalid length.
[ 1345.189619][T21940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4765'.
[ 1345.228416][T21940] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1345.267043][T21940] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1345.385962][T21940] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1345.415336][T21946] netlink: 'syz.0.4766': attribute type 27 has an invalid length.
[ 1345.440028][T21946] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4766'.
[ 1345.518628][T21902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1345.588968][T21902] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.607156][T21902] bridge_slave_0: entered allmulticast mode
[ 1345.627810][T21902] bridge_slave_0: entered promiscuous mode
[ 1345.778651][T17604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.851319][T21954] netlink: 'syz.0.4767': attribute type 29 has an invalid length.
[ 1345.873778][T21902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1345.889040][T21902] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.908041][T21902] bridge_slave_1: entered allmulticast mode
[ 1345.928969][T21902] bridge_slave_1: entered promiscuous mode
[ 1345.953969][T21954] netlink: 'syz.0.4767': attribute type 29 has an invalid length.
[ 1346.153072][T17604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.366198][T21902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1346.384690][T21902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1346.470135][T21902] team0: Port device team_slave_0 added
[ 1346.510268][T21902] team0: Port device team_slave_1 added
[ 1346.524555][ T5087] Bluetooth: hci4: command tx timeout
[ 1346.603380][T21902] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1346.626496][T21902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1346.715824][T21902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1346.737460][T21902] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1346.746821][T21902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1346.786753][T21902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1347.026213][T21902] hsr_slave_0: entered promiscuous mode
[ 1347.048050][T21902] hsr_slave_1: entered promiscuous mode
[ 1347.084223][T21902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1347.092091][T21902] Cannot create hsr debugfs directory
[ 1347.206867][T21975] FAULT_INJECTION: forcing a failure.
[ 1347.206867][T21975] name failslab, interval 1, probability 0, space 0, times 0
[ 1347.230271][T21975] CPU: 0 PID: 21975 Comm: syz.0.4772 Not tainted syzkaller #0
[ 1347.238013][T21975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1347.248156][T21975] Call Trace:
[ 1347.251504][T21975]  <TASK>
[ 1347.255459][T21975]  dump_stack_lvl+0x18c/0x250
[ 1347.260197][T21975]  ? __sctp_connect+0x5b7/0xd80
[ 1347.266629][T21975]  ? sctp_setsockopt+0x6d8/0x11e0
[ 1347.272085][T21975]  ? show_regs_print_info+0x20/0x20
[ 1347.278238][T21975]  ? load_image+0x420/0x420
[ 1347.283981][T21975]  should_fail_ex+0x394/0x4c0
[ 1347.288953][T21975]  should_failslab+0x9/0x20
[ 1347.293707][T21975]  slab_pre_alloc_hook+0x59/0x300
[ 1347.298919][T21975]  ? sctp_add_bind_addr+0x8c/0x360
[ 1347.304693][T21975]  __kmem_cache_alloc_node+0x53/0x250
[ 1347.310874][T21975]  ? sctp_add_bind_addr+0x8c/0x360
[ 1347.316164][T21975]  kmalloc_trace+0x2a/0xe0
[ 1347.320784][T21975]  sctp_add_bind_addr+0x8c/0x360
[ 1347.325882][T21975]  sctp_copy_local_addr_list+0x31b/0x4e0
[ 1347.331678][T21975]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[ 1347.337474][T21975]  ? sctp_do_8_2_transport_strike+0x910/0x910
[ 1347.343616][T21975]  ? sctp_v6_is_any+0x64/0x70
[ 1347.348375][T21975]  ? sctp_copy_one_addr+0x8c/0x350
[ 1347.353555][T21975]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1347.359167][T21975]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1347.365721][T21975]  sctp_connect_new_asoc+0x2f9/0x6a0
[ 1347.371105][T21975]  ? __sctp_connect+0xd80/0xd80
[ 1347.376060][T21975]  ? sctp_inet6_send_verify+0x23a/0x300
[ 1347.382117][T21975]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[ 1347.388358][T21975]  __sctp_connect+0x5b7/0xd80
[ 1347.393292][T21975]  ? sctp_send_asconf+0x170/0x170
[ 1347.398857][T21975]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1347.404523][T21975]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 1347.410189][T21975]  ? security_sctp_bind_connect+0x89/0xb0
[ 1347.416264][T21975]  sctp_setsockopt_connectx+0x104/0x1a0
[ 1347.421984][T21975]  sctp_setsockopt+0x6d8/0x11e0
[ 1347.426999][T21975]  ? sock_common_recvmsg+0x190/0x190
[ 1347.432366][T21975]  do_sock_setsockopt+0x175/0x1a0
[ 1347.437472][T21975]  ? __fdget+0x180/0x210
[ 1347.441783][T21975]  __x64_sys_setsockopt+0x182/0x200
[ 1347.447114][T21975]  do_syscall_64+0x55/0xb0
[ 1347.451595][T21975]  ? clear_bhb_loop+0x40/0x90
[ 1347.456706][T21975]  ? clear_bhb_loop+0x40/0x90
[ 1347.461996][T21975]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1347.468002][T21975] RIP: 0033:0x7f467259e1d9
[ 1347.472482][T21975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1347.492249][T21975] RSP: 002b:00007f4673531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1347.501347][T21975] RAX: ffffffffffffffda RBX: 00007f4672826090 RCX: 00007f467259e1d9
[ 1347.509742][T21975] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[ 1347.518309][T21975] RBP: 00007f4673531090 R08: 000000000000001c R09: 0000000000000000
[ 1347.526358][T21975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1347.535091][T21975] R13: 00007f4672826128 R14: 00007f4672826090 R15: 00007fff8ab81348
[ 1347.543238][T21975]  </TASK>
[ 1347.918029][T21986] netlink: 'syz.1.4774': attribute type 27 has an invalid length.
[ 1347.949192][T21986] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4774'.
[ 1348.141105][T21988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1348.588880][ T5087] Bluetooth: hci4: command tx timeout
[ 1349.970094][T22039] netlink: 'syz.0.4785': attribute type 27 has an invalid length.
[ 1349.994226][T22039] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4785'.
[ 1350.071991][T21902] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1350.104860][T21902] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1350.235570][T21902] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1350.293931][T21902] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1350.669212][ T5087] Bluetooth: hci4: command tx timeout
[ 1350.689656][T22056] netlink: 'syz.0.4789': attribute type 27 has an invalid length.
[ 1350.689731][T22058] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4790'.
[ 1350.730048][T22056] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4789'.
[ 1350.975857][T17604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1350.995118][T17604] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1351.008072][T17604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1351.023994][T17604] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1351.049680][T17604] bridge_slave_0: left allmulticast mode
[ 1351.055629][T17604] bridge_slave_0: left promiscuous mode
[ 1351.077955][T17604] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1351.185382][T17604] veth1_macvtap: left promiscuous mode
[ 1351.199339][T17604] veth0_macvtap: left promiscuous mode
[ 1351.205400][T17604] veth1_vlan: left promiscuous mode
[ 1351.458834][T22082] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1352.247157][T17604] team0 (unregistering): Port device team_slave_1 removed
[ 1352.323041][T17604] team0 (unregistering): Port device C removed
[ 1352.393792][T17604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1352.527701][T22092] netlink: 'syz.0.4796': attribute type 27 has an invalid length.
[ 1352.551491][T22092] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4796'.
[ 1352.587150][T17604] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1352.749849][ T5087] Bluetooth: hci4: command tx timeout
[ 1353.227271][T17604] team0 (unregistering): Port device bridge0 removed
[ 1353.784836][T17604] bond0 (unregistering): Released all slaves
[ 1354.024281][T21902] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1354.092522][T21902] 8021q: adding VLAN 0 to HW filter on device team0
[ 1354.129904][T17571] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1354.137181][T17571] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1354.182851][T17571] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1354.190956][T17571] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1354.473378][T22111] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4808'.
[ 1354.524208][T22114] netlink: 'syz.3.4801': attribute type 27 has an invalid length.
[ 1354.589311][T22114] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4801'.
[ 1355.098136][T22125] netlink: 'syz.3.4804': attribute type 27 has an invalid length.
[ 1355.127637][T22125] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4804'.
[ 1355.191409][T21902] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1355.329443][T21902] veth0_vlan: entered promiscuous mode
[ 1355.378424][T21902] veth1_vlan: entered promiscuous mode
[ 1355.491879][T21902] veth0_macvtap: entered promiscuous mode
[ 1355.882408][T21902] veth1_macvtap: entered promiscuous mode
[ 1356.042177][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1356.088306][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.101174][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1356.114160][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.125659][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1356.137820][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.152841][T21902] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1356.164211][T22138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1356.171721][T22138] IPv6: NLM_F_CREATE should be set when creating new route
[ 1356.179321][T22138] IPv6: NLM_F_CREATE should be set when creating new route
[ 1356.186663][T22138] IPv6: NLM_F_CREATE should be set when creating new route
[ 1356.341359][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1356.376411][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.391600][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1356.403113][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.413871][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1356.426383][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.439912][T21902] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1356.543167][T21902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.556723][T21902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.569508][T21902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.578573][T21902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.855236][T17597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.881444][T17597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1356.949331][T17616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.981956][T17616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1357.054825][T22149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4813'.
[ 1357.233131][T22149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4813'.
[ 1357.349157][T22158] netlink: 'syz.0.4814': attribute type 27 has an invalid length.
[ 1357.377478][T22158] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4814'.
[ 1357.870417][T22176] netlink: 'syz.0.4826': attribute type 27 has an invalid length.
[ 1357.891357][T22176] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4826'.
[ 1359.774559][T22207] netlink: 'syz.2.4829': attribute type 27 has an invalid length.
[ 1359.823853][T22207] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4829'.
[ 1360.056224][T22215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1360.064238][T22215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1360.099716][T22215] bridge0: entered allmulticast mode
[ 1360.139063][T22218] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1360.147110][T22218] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1360.155044][T22218] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1360.163083][T22218] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1360.199475][T22218] bridge0: left allmulticast mode
[ 1360.741812][T22230] FAULT_INJECTION: forcing a failure.
[ 1360.741812][T22230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1360.785005][T22230] CPU: 0 PID: 22230 Comm: syz.1.4837 Not tainted syzkaller #0
[ 1360.792584][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1360.802697][T22230] Call Trace:
[ 1360.806021][T22230]  <TASK>
[ 1360.808995][T22230]  dump_stack_lvl+0x18c/0x250
[ 1360.813819][T22230]  ? show_regs_print_info+0x20/0x20
[ 1360.819512][T22230]  ? load_image+0x420/0x420
[ 1360.824579][T22230]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1360.829687][T22230]  ? snprintf+0xe9/0x140
[ 1360.834001][T22230]  should_fail_ex+0x394/0x4c0
[ 1360.838758][T22230]  _copy_to_user+0x2f/0xa0
[ 1360.843415][T22230]  simple_read_from_buffer+0xe7/0x150
[ 1360.849793][T22230]  proc_fail_nth_read+0x1e8/0x260
[ 1360.855124][T22230]  ? proc_fault_inject_write+0x360/0x360
[ 1360.860922][T22230]  ? fsnotify_perm+0x271/0x5e0
[ 1360.866116][T22230]  ? proc_fault_inject_write+0x360/0x360
[ 1360.872469][T22230]  vfs_read+0x298/0x990
[ 1360.876858][T22230]  ? kernel_read+0x1e0/0x1e0
[ 1360.882127][T22230]  ? __fget_files+0x28/0x460
[ 1360.886879][T22230]  ? __fget_files+0x3fc/0x460
[ 1360.892904][T22230]  ? __fdget_pos+0x2a3/0x330
[ 1360.898499][T22230]  ? ksys_read+0x74/0x260
[ 1360.903067][T22230]  ksys_read+0x151/0x260
[ 1360.907357][T22230]  ? vfs_write+0x9a0/0x9a0
[ 1360.911825][T22230]  ? lockdep_hardirqs_on+0x98/0x150
[ 1360.917109][T22230]  do_syscall_64+0x55/0xb0
[ 1360.921642][T22230]  ? clear_bhb_loop+0x40/0x90
[ 1360.926367][T22230]  ? clear_bhb_loop+0x40/0x90
[ 1360.931087][T22230]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1360.937135][T22230] RIP: 0033:0x7f2002b5ea0e
[ 1360.942145][T22230] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1360.962299][T22230] RSP: 002b:00007f2003a82fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1360.970781][T22230] RAX: ffffffffffffffda RBX: 00007f2003a836c0 RCX: 00007f2002b5ea0e
[ 1360.978801][T22230] RDX: 000000000000000f RSI: 00007f2003a830a0 RDI: 0000000000000006
[ 1360.987060][T22230] RBP: 00007f2003a83090 R08: 0000000000000000 R09: 0000000000000000
[ 1360.995177][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1361.003354][T22230] R13: 00007f2002e26038 R14: 00007f2002e25fa0 R15: 00007ffd819451b8
[ 1361.011601][T22230]  </TASK>
[ 1361.087646][T22234] delete_channel: no stack
[ 1361.397501][T22239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4841'.
[ 1361.440795][T22239] hsr_slave_1: entered allmulticast mode
[ 1361.529996][T22243] netlink: 'syz.0.4840': attribute type 27 has an invalid length.
[ 1361.538354][T22243] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4840'.
[ 1361.559815][T22245] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1361.567745][T22245] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1361.579987][T22245] bridge0: entered allmulticast mode
[ 1361.652197][T22245] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1361.659523][T22245] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1361.667218][T22245] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1361.674521][T22245] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1361.699150][T22245] bridge0: left allmulticast mode
[ 1361.761399][T22250] FAULT_INJECTION: forcing a failure.
[ 1361.761399][T22250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1361.806837][T22250] CPU: 0 PID: 22250 Comm: syz.3.4845 Not tainted syzkaller #0
[ 1361.814592][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1361.824978][T22250] Call Trace:
[ 1361.828346][T22250]  <TASK>
[ 1361.831330][T22250]  dump_stack_lvl+0x18c/0x250
[ 1361.836088][T22250]  ? show_regs_print_info+0x20/0x20
[ 1361.841355][T22250]  ? load_image+0x420/0x420
[ 1361.845934][T22250]  ? __might_fault+0xaa/0x120
[ 1361.850684][T22250]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1361.855785][T22250]  should_fail_ex+0x394/0x4c0
[ 1361.860559][T22250]  _copy_from_iter+0x1cd/0x1290
[ 1361.865493][T22250]  ? copyout_mc+0x70/0x70
[ 1361.869985][T22250]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1361.876997][T22250]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1361.882162][T22250]  ? lock_chain_count+0x20/0x20
[ 1361.887095][T22250]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1361.892451][T22250]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1361.898248][T22250]  ? page_copy_sane+0x4e/0x270
[ 1361.903114][T22250]  copy_page_from_iter+0x7b/0x100
[ 1361.908253][T22250]  pipe_write+0x758/0x1b20
[ 1361.912742][T22250]  ? pipe_write+0xcb1/0x1b20
[ 1361.917597][T22250]  ? pipe_read+0x1330/0x1330
[ 1361.922554][T22250]  ? wake_bit_function+0x200/0x200
[ 1361.927747][T22250]  ? common_file_perm+0x198/0x1f0
[ 1361.932853][T22250]  vfs_write+0x474/0x9a0
[ 1361.937169][T22250]  ? file_end_write+0x250/0x250
[ 1361.942094][T22250]  ? __fget_files+0x3fc/0x460
[ 1361.947226][T22250]  ? __fdget_pos+0x1d8/0x330
[ 1361.952106][T22250]  ? ksys_write+0x74/0x260
[ 1361.956609][T22250]  ksys_write+0x151/0x260
[ 1361.961049][T22250]  ? __ia32_sys_read+0x90/0x90
[ 1361.965892][T22250]  ? lockdep_hardirqs_on+0x98/0x150
[ 1361.971201][T22250]  do_syscall_64+0x55/0xb0
[ 1361.975757][T22250]  ? clear_bhb_loop+0x40/0x90
[ 1361.980584][T22250]  ? clear_bhb_loop+0x40/0x90
[ 1361.985493][T22250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1361.991494][T22250] RIP: 0033:0x7fbd7459e1d9
[ 1361.996615][T22250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1362.017414][T22250] RSP: 002b:00007fbd75423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1362.025938][T22250] RAX: ffffffffffffffda RBX: 00007fbd74825fa0 RCX: 00007fbd7459e1d9
[ 1362.033991][T22250] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000
[ 1362.042121][T22250] RBP: 00007fbd75423090 R08: 0000000000000000 R09: 0000000000000000
[ 1362.050288][T22250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1362.058593][T22250] R13: 00007fbd74826038 R14: 00007fbd74825fa0 R15: 00007ffce30e9fd8
[ 1362.066669][T22250]  </TASK>
[ 1362.070222][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.076781][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.616567][T22270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4852'.
[ 1363.763064][T22282] netlink: 'syz.3.4854': attribute type 27 has an invalid length.
[ 1363.791641][T22282] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4854'.
[ 1365.347202][T22284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1365.389697][T22284] bridge0: entered allmulticast mode
[ 1365.444001][T22285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1365.451452][T22285] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1365.519361][T22285] bridge0: left allmulticast mode
[ 1365.857815][T22298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4862'.
[ 1365.945537][T22298] netlink: 'syz.2.4862': attribute type 12 has an invalid length.
[ 1365.965441][T22298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4862'.
[ 1366.060298][T22299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4862'.
[ 1367.904533][T22308] netlink: 'syz.0.4865': attribute type 27 has an invalid length.
[ 1367.914580][T22308] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4865'.
[ 1369.072431][T22323] netlink: 'syz.0.4870': attribute type 25 has an invalid length.
[ 1369.112201][T22323] netlink: 'syz.0.4870': attribute type 10 has an invalid length.
[ 1369.136519][T22320] delete_channel: no stack
[ 1369.153577][T22320] delete_channel: no stack
[ 1369.263392][T22320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4868'.
[ 1369.281827][T22328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4872'.
[ 1369.307182][T22321] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4868'.
[ 1369.708700][T22339] netlink: 'syz.2.4873': attribute type 27 has an invalid length.
[ 1369.730724][T22339] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4873'.
[ 1370.054796][T22343] syzkaller0: entered promiscuous mode
[ 1370.060639][T22343] syzkaller0: entered allmulticast mode
[ 1370.256136][T22346] netlink: 'syz.0.4877': attribute type 1 has an invalid length.
[ 1370.265842][T22346] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4877'.
[ 1372.659014][T22351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1373.814214][T22391] syzkaller0: entered promiscuous mode
[ 1373.820303][T22391] syzkaller0: entered allmulticast mode
[ 1373.936945][T22394] netlink: 'syz.2.4895': attribute type 10 has an invalid length.
[ 1375.698421][T22429] netlink: 'syz.3.4907': attribute type 12 has an invalid length.
[ 1375.706599][T22429] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.4907'.
[ 1377.748035][T22449] macvlan1: entered promiscuous mode
[ 1377.764603][T22449] macvlan1: entered allmulticast mode
[ 1377.792651][T22449] veth1_vlan: entered allmulticast mode
[ 1378.970008][T22479] syzkaller0: entered promiscuous mode
[ 1378.976408][T22479] syzkaller0: entered allmulticast mode
[ 1380.074759][T22502] delete_channel: no stack
[ 1380.080269][T22502] delete_channel: no stack
[ 1380.167606][T22505] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4930'.
[ 1382.042583][T22496] netlink: 'syz.1.4929': attribute type 21 has an invalid length.
[ 1382.051138][T22496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4929'.
[ 1382.060855][T22496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4929'.
[ 1382.072569][T22499] netlink: 'syz.1.4929': attribute type 21 has an invalid length.
[ 1382.084789][T22499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4929'.
[ 1382.094168][T22499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4929'.
[ 1382.105827][T22502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4930'.
[ 1382.127356][T22504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1382.637173][T22517] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4933'.
[ 1382.908068][T22533] FAULT_INJECTION: forcing a failure.
[ 1382.908068][T22533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1382.930801][T22533] CPU: 0 PID: 22533 Comm: syz.1.4939 Not tainted syzkaller #0
[ 1382.938362][T22533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1382.948513][T22533] Call Trace:
[ 1382.951849][T22533]  <TASK>
[ 1382.954839][T22533]  dump_stack_lvl+0x18c/0x250
[ 1382.959582][T22533]  ? show_regs_print_info+0x20/0x20
[ 1382.965103][T22533]  ? load_image+0x420/0x420
[ 1382.969676][T22533]  ? __might_fault+0xaa/0x120
[ 1382.974449][T22533]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1382.979629][T22533]  ? unix_ioctl+0x259/0x6b0
[ 1382.984477][T22533]  should_fail_ex+0x394/0x4c0
[ 1382.989240][T22533]  _copy_from_user+0x2f/0xe0
[ 1382.993990][T22533]  sock_do_ioctl+0x190/0x310
[ 1382.998662][T22533]  ? sock_show_fdinfo+0xb0/0xb0
[ 1383.003631][T22533]  sock_ioctl+0x5be/0x7e0
[ 1383.008039][T22533]  ? sock_poll+0x3e0/0x3e0
[ 1383.012546][T22533]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1383.017547][T22533]  ? security_file_ioctl+0x80/0xa0
[ 1383.022725][T22533]  ? sock_poll+0x3e0/0x3e0
[ 1383.027211][T22533]  __se_sys_ioctl+0xfd/0x170
[ 1383.031872][T22533]  do_syscall_64+0x55/0xb0
[ 1383.036609][T22533]  ? clear_bhb_loop+0x40/0x90
[ 1383.041348][T22533]  ? clear_bhb_loop+0x40/0x90
[ 1383.046114][T22533]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1383.052081][T22533] RIP: 0033:0x7f2002b9e1d9
[ 1383.056556][T22533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1383.076393][T22533] RSP: 002b:00007f2003a83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1383.084966][T22533] RAX: ffffffffffffffda RBX: 00007f2002e25fa0 RCX: 00007f2002b9e1d9
[ 1383.093060][T22533] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[ 1383.101359][T22533] RBP: 00007f2003a83090 R08: 0000000000000000 R09: 0000000000000000
[ 1383.109669][T22533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1383.117702][T22533] R13: 00007f2002e26038 R14: 00007f2002e25fa0 R15: 00007ffd819451b8
[ 1383.125751][T22533]  </TASK>
[ 1383.281696][T22538] syzkaller0: entered promiscuous mode
[ 1383.303146][T22538] syzkaller0: entered allmulticast mode
[ 1383.519052][T22551] delete_channel: no stack
[ 1383.523734][T22551] delete_channel: no stack
[ 1383.632059][T22554] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4943'.
[ 1384.515719][T19425] Bluetooth: hci0: command 0x0406 tx timeout
[ 1385.873489][T22550] netlink: 'syz.1.4944': attribute type 13 has an invalid length.
[ 1385.881674][T22550] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4944'.
[ 1385.892479][T22550] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1385.908875][T22551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4943'.
[ 1385.929056][T22559] netlink: 123048 bytes leftover after parsing attributes in process `syz.3.4945'.
[ 1385.986168][T22557] netlink: 'syz.3.4945': attribute type 10 has an invalid length.
[ 1386.040469][T22557] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1386.059438][T22557] team0: Port device batadv0 added
[ 1386.403370][T22567] netlink: 'syz.0.4948': attribute type 2 has an invalid length.
[ 1386.949292][T22587] caif0: entered promiscuous mode
[ 1386.956246][T22587] caif0: entered allmulticast mode
[ 1387.178690][T22592] syzkaller0: entered promiscuous mode
[ 1387.187434][T22592] syzkaller0: entered allmulticast mode
[ 1387.214400][T22595] netlink: 'syz.2.4957': attribute type 9 has an invalid length.
[ 1387.222876][T22595] __nla_validate_parse: 2 callbacks suppressed
[ 1387.222893][T22595] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4957'.
[ 1390.220310][T22596] netlink: 'syz.2.4957': attribute type 9 has an invalid length.
[ 1390.264477][T22596] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4957'.
[ 1390.283043][T22611] netlink: 'syz.0.4962': attribute type 10 has an invalid length.
[ 1390.298493][T22611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1390.710723][T22626] netlink: 'syz.1.4967': attribute type 27 has an invalid length.
[ 1390.730890][T22626] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4967'.
[ 1391.198356][T22638] syzkaller0: entered promiscuous mode
[ 1391.205253][T22638] syzkaller0: entered allmulticast mode
[ 1391.221109][T22641] netlink: 'syz.0.4972': attribute type 4 has an invalid length.
[ 1393.871677][T22643] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1393.879384][T22643] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1394.441318][T22669] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4982'.
[ 1394.483429][T22669] hsr_slave_0: left promiscuous mode
[ 1394.546968][T22669] hsr_slave_1: left promiscuous mode
[ 1394.903009][T22684] netlink: 'syz.2.4987': attribute type 27 has an invalid length.
[ 1394.930329][T22684] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4987'.
[ 1395.240609][T22691] netlink: 'syz.3.4990': attribute type 4 has an invalid length.
[ 1395.252341][T22691] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4990'.
[ 1395.306316][T22689] syzkaller0: entered promiscuous mode
[ 1395.312135][T22689] syzkaller0: entered allmulticast mode
[ 1395.436716][T22691] syzkaller0: tun_chr_ioctl cmd 2147767506
[ 1395.693330][T22704] FAULT_INJECTION: forcing a failure.
[ 1395.693330][T22704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1395.729937][T22704] CPU: 0 PID: 22704 Comm: syz.0.4994 Not tainted syzkaller #0
[ 1395.737541][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1395.747677][T22704] Call Trace:
[ 1395.751104][T22704]  <TASK>
[ 1395.754090][T22704]  dump_stack_lvl+0x18c/0x250
[ 1395.759372][T22704]  ? show_regs_print_info+0x20/0x20
[ 1395.764744][T22704]  ? load_image+0x420/0x420
[ 1395.769335][T22704]  ? __might_fault+0xaa/0x120
[ 1395.774094][T22704]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1395.779238][T22704]  ? bpf_percpu_hash_update+0x2b/0x200
[ 1395.784819][T22704]  ? __virt_addr_valid+0x10c/0x380
[ 1395.790015][T22704]  should_fail_ex+0x394/0x4c0
[ 1395.795223][T22704]  _copy_from_user+0x2f/0xe0
[ 1395.799893][T22704]  generic_map_update_batch+0x58c/0x800
[ 1395.805533][T22704]  ? rcu_read_unlock+0xa0/0xa0
[ 1395.810424][T22704]  ? __fdget+0x180/0x210
[ 1395.814843][T22704]  ? rcu_read_unlock+0xa0/0xa0
[ 1395.819677][T22704]  bpf_map_do_batch+0x3f2/0x600
[ 1395.824601][T22704]  ? bpf_lsm_xfrm_policy_lookup+0x10/0x10
[ 1395.830848][T22704]  __sys_bpf+0x381/0x890
[ 1395.835174][T22704]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1395.840643][T22704]  ? lock_chain_count+0x20/0x20
[ 1395.845570][T22704]  __x64_sys_bpf+0x7c/0x90
[ 1395.850043][T22704]  do_syscall_64+0x55/0xb0
[ 1395.854514][T22704]  ? clear_bhb_loop+0x40/0x90
[ 1395.859239][T22704]  ? clear_bhb_loop+0x40/0x90
[ 1395.864117][T22704]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1395.870106][T22704] RIP: 0033:0x7f467259e1d9
[ 1395.874661][T22704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1395.894331][T22704] RSP: 002b:00007f4673552028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1395.902813][T22704] RAX: ffffffffffffffda RBX: 00007f4672825fa0 RCX: 00007f467259e1d9
[ 1395.910833][T22704] RDX: 0000000000000038 RSI: 00002000000019c0 RDI: 000000000000001a
[ 1395.919153][T22704] RBP: 00007f4673552090 R08: 0000000000000000 R09: 0000000000000000
[ 1395.927179][T22704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1395.935192][T22704] R13: 00007f4672826038 R14: 00007f4672825fa0 R15: 00007fff8ab81348
[ 1395.943318][T22704]  </TASK>
[ 1398.123504][T22706] netlink: 703 bytes leftover after parsing attributes in process `syz.1.4995'.
[ 1398.703572][T22732] caif0: entered promiscuous mode
[ 1398.713734][T22732] caif0: entered allmulticast mode
[ 1398.722971][T22734] netlink: 'syz.0.5005': attribute type 39 has an invalid length.
[ 1398.933610][T22738] syzkaller0: entered promiscuous mode
[ 1398.939506][T22738] syzkaller0: entered allmulticast mode
[ 1400.345627][T22760] FAULT_INJECTION: forcing a failure.
[ 1400.345627][T22760] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1400.371313][T22760] CPU: 1 PID: 22760 Comm: syz.3.5018 Not tainted syzkaller #0
[ 1400.378893][T22760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1400.389107][T22760] Call Trace:
[ 1400.392462][T22760]  <TASK>
[ 1400.395460][T22760]  dump_stack_lvl+0x18c/0x250
[ 1400.400225][T22760]  ? show_regs_print_info+0x20/0x20
[ 1400.405507][T22760]  ? load_image+0x420/0x420
[ 1400.410107][T22760]  ? __might_fault+0xaa/0x120
[ 1400.414866][T22760]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1400.419983][T22760]  should_fail_ex+0x394/0x4c0
[ 1400.424814][T22760]  _copy_from_user+0x2f/0xe0
[ 1400.429483][T22760]  kstrtouint_from_user+0xde/0x170
[ 1400.434688][T22760]  ? kstrtol_from_user+0x190/0x190
[ 1400.439895][T22760]  proc_fail_nth_write+0x8f/0x250
[ 1400.444980][T22760]  ? proc_fail_nth_read+0x260/0x260
[ 1400.450251][T22760]  ? proc_fail_nth_read+0x260/0x260
[ 1400.455508][T22760]  vfs_write+0x299/0x9a0
[ 1400.459827][T22760]  ? file_end_write+0x250/0x250
[ 1400.464735][T22760]  ? __fget_files+0x28/0x460
[ 1400.469642][T22760]  ? __fget_files+0x3fc/0x460
[ 1400.474437][T22760]  ? __fdget_pos+0x2a3/0x330
[ 1400.479085][T22760]  ? ksys_write+0x74/0x260
[ 1400.483654][T22760]  ksys_write+0x151/0x260
[ 1400.488048][T22760]  ? __ia32_sys_read+0x90/0x90
[ 1400.492871][T22760]  ? lockdep_hardirqs_on+0x98/0x150
[ 1400.498171][T22760]  do_syscall_64+0x55/0xb0
[ 1400.502633][T22760]  ? clear_bhb_loop+0x40/0x90
[ 1400.507382][T22760]  ? clear_bhb_loop+0x40/0x90
[ 1400.512287][T22760]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1400.518239][T22760] RIP: 0033:0x7fbd7455ea0e
[ 1400.522702][T22760] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1400.542373][T22760] RSP: 002b:00007fbd75422fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1400.550929][T22760] RAX: ffffffffffffffda RBX: 00007fbd754236c0 RCX: 00007fbd7455ea0e
[ 1400.558946][T22760] RDX: 0000000000000001 RSI: 00007fbd754230a0 RDI: 0000000000000006
[ 1400.566963][T22760] RBP: 00007fbd75423090 R08: 0000000000000000 R09: 0000000000000000
[ 1400.574982][T22760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1400.583006][T22760] R13: 00007fbd74826038 R14: 00007fbd74825fa0 R15: 00007ffce30e9fd8
[ 1400.591144][T22760]  </TASK>
[ 1400.886620][T22767] netlink: 'syz.1.5019': attribute type 3 has an invalid length.
[ 1400.904916][T22767] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.5019'.
[ 1400.958129][T22770] netlink: 'syz.3.5021': attribute type 29 has an invalid length.
[ 1402.501040][T22749] netlink: 'syz.0.5013': attribute type 10 has an invalid length.
[ 1402.509391][T22749] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5013'.
[ 1402.522115][T22770] netlink: 'syz.3.5021': attribute type 29 has an invalid length.
[ 1402.991906][T22787] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5027'.
[ 1403.014532][T22787] hsr_slave_0: left promiscuous mode
[ 1403.064718][T22787] hsr_slave_1: left promiscuous mode
[ 1403.916247][T22790] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5028'.
[ 1403.944332][T22790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1404.476732][T22815] netlink: 'syz.0.5034': attribute type 27 has an invalid length.
[ 1404.529513][T22815] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5034'.
[ 1404.929470][T22831] netlink: 'syz.2.5041': attribute type 29 has an invalid length.
[ 1404.953848][T22831] netlink: 'syz.2.5041': attribute type 29 has an invalid length.
[ 1404.989817][T22833] netlink: 'syz.2.5041': attribute type 29 has an invalid length.
[ 1405.128944][T22842] netlink: 'syz.0.5043': attribute type 15 has an invalid length.
[ 1405.146045][T22842] netlink: 'syz.0.5043': attribute type 7 has an invalid length.
[ 1405.159947][T22842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5043'.
[ 1405.431399][T22851] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5047'.
[ 1405.792050][T22862] netlink: 179504 bytes leftover after parsing attributes in process `syz.3.5049'.
[ 1406.306908][T22875] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5058'.
[ 1406.338921][T22875] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5058'.
[ 1406.391388][T22885] validate_nla: 3 callbacks suppressed
[ 1406.391443][T22885] netlink: 'syz.3.5059': attribute type 27 has an invalid length.
[ 1406.417907][T22885] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5059'.
[ 1409.844738][T22910] tap0: tun_chr_ioctl cmd 1074025677
[ 1409.852248][T22910] tap0: linktype set to 773
[ 1410.012454][T22914] FAULT_INJECTION: forcing a failure.
[ 1410.012454][T22914] name failslab, interval 1, probability 0, space 0, times 0
[ 1410.025301][T22914] CPU: 0 PID: 22914 Comm: syz.0.5066 Not tainted syzkaller #0
[ 1410.032817][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1410.042928][T22914] Call Trace:
[ 1410.046259][T22914]  <TASK>
[ 1410.049235][T22914]  dump_stack_lvl+0x18c/0x250
[ 1410.053975][T22914]  ? show_regs_print_info+0x20/0x20
[ 1410.059308][T22914]  ? load_image+0x420/0x420
[ 1410.063896][T22914]  should_fail_ex+0x394/0x4c0
[ 1410.068730][T22914]  should_failslab+0x9/0x20
[ 1410.073293][T22914]  slab_pre_alloc_hook+0x59/0x300
[ 1410.078371][T22914]  kmem_cache_alloc+0x5a/0x2c0
[ 1410.083203][T22914]  ? skb_clone+0x1eb/0x370
[ 1410.087688][T22914]  skb_clone+0x1eb/0x370
[ 1410.092000][T22914]  bpf_clone_redirect+0x16d/0x4a0
[ 1410.097089][T22914]  bpf_prog_bf17f61a12bc632f+0x5e/0x63
[ 1410.102608][T22914]  ? perf_prepare_sample+0x1060/0x1e50
[ 1410.108139][T22914]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1410.114499][T22914]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1410.120637][T22914]  ? lockdep_softirqs_on+0x5b0/0x5b0
[ 1410.125988][T22914]  ? lock_chain_count+0x20/0x20
[ 1410.130915][T22914]  ? __local_bh_disable_ip+0x108/0x1a0
[ 1410.136428][T22914]  ? __cant_sleep+0x220/0x220
[ 1410.141178][T22914]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1410.146612][T22914]  ? _local_bh_enable+0xa0/0xa0
[ 1410.151537][T22914]  ? bpf_test_timer_continue+0x135/0x380
[ 1410.157230][T22914]  ? bpf_test_run+0x174/0x870
[ 1410.161976][T22914]  bpf_test_run+0x2df/0x870
[ 1410.166557][T22914]  ? bpf_test_run+0x174/0x870
[ 1410.171301][T22914]  ? dst_hold+0x70/0x70
[ 1410.175530][T22914]  ? eth_get_headlen+0x210/0x210
[ 1410.180547][T22914]  bpf_prog_test_run_skb+0xdbb/0x18f0
[ 1410.186020][T22914]  ? cpu_online+0x60/0x60
[ 1410.190423][T22914]  bpf_prog_test_run+0x31f/0x390
[ 1410.195423][T22914]  __sys_bpf+0x49d/0x890
[ 1410.199735][T22914]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1410.205193][T22914]  ? lock_chain_count+0x20/0x20
[ 1410.210115][T22914]  __x64_sys_bpf+0x7c/0x90
[ 1410.214595][T22914]  do_syscall_64+0x55/0xb0
[ 1410.219056][T22914]  ? clear_bhb_loop+0x40/0x90
[ 1410.223795][T22914]  ? clear_bhb_loop+0x40/0x90
[ 1410.228535][T22914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1410.234510][T22914] RIP: 0033:0x7f467259e1d9
[ 1410.238983][T22914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1410.259878][T22914] RSP: 002b:00007f4673552028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1410.268378][T22914] RAX: ffffffffffffffda RBX: 00007f4672825fa0 RCX: 00007f467259e1d9
[ 1410.276426][T22914] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1410.284467][T22914] RBP: 00007f4673552090 R08: 0000000000000000 R09: 0000000000000000
[ 1410.292494][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1410.300523][T22914] R13: 00007f4672826038 R14: 00007f4672825fa0 R15: 00007fff8ab81348
[ 1410.310488][T22914]  </TASK>
[ 1410.626300][T22926] netlink: 'syz.1.5068': attribute type 27 has an invalid length.
[ 1410.641985][T22926] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5068'.
[ 1410.965287][T22935] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5073'.
[ 1410.995267][T22935] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5073'.
[ 1411.471446][T22946] FAULT_INJECTION: forcing a failure.
[ 1411.471446][T22946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1411.516807][T22946] CPU: 0 PID: 22946 Comm: syz.0.5076 Not tainted syzkaller #0
[ 1411.524372][T22946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1411.534487][T22946] Call Trace:
[ 1411.537816][T22946]  <TASK>
[ 1411.540798][T22946]  dump_stack_lvl+0x18c/0x250
[ 1411.545639][T22946]  ? show_regs_print_info+0x20/0x20
[ 1411.550907][T22946]  ? load_image+0x420/0x420
[ 1411.555481][T22946]  ? __might_fault+0xaa/0x120
[ 1411.560219][T22946]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1411.565307][T22946]  ? __virt_addr_valid+0x10c/0x380
[ 1411.570524][T22946]  should_fail_ex+0x394/0x4c0
[ 1411.575277][T22946]  _copy_to_user+0x2f/0xa0
[ 1411.579798][T22946]  bpf_verifier_vlog+0x4e6/0x840
[ 1411.584817][T22946]  btf_verifier_log+0x11e/0x1a0
[ 1411.589747][T22946]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1411.595967][T22946]  ? lockdep_hardirqs_on+0x98/0x150
[ 1411.601251][T22946]  ? btf_parse_graph_root+0xb00/0xb00
[ 1411.606696][T22946]  ? __btf_verifier_log_type+0x1f4/0x690
[ 1411.612415][T22946]  __btf_verifier_log_type+0x457/0x690
[ 1411.617955][T22946]  ? btf_int_show+0x2810/0x2810
[ 1411.622875][T22946]  ? kvmalloc_node+0x70/0x180
[ 1411.627623][T22946]  ? rcu_is_watching+0x15/0xb0
[ 1411.632457][T22946]  ? kvmalloc_node+0x70/0x180
[ 1411.637202][T22946]  ? __kmalloc_node+0xe4/0x240
[ 1411.642042][T22946]  btf_float_check_meta+0x113/0x170
[ 1411.647302][T22946]  btf_check_all_metas+0x371/0xaf0
[ 1411.652496][T22946]  btf_parse_type_sec+0xfc/0x1960
[ 1411.657628][T22946]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1411.663864][T22946]  ? btf_parse_str_sec+0xa6/0x2a0
[ 1411.668967][T22946]  ? btf_parse_str_sec+0x20d/0x2a0
[ 1411.674155][T22946]  btf_new_fd+0x440/0x9e0
[ 1411.678552][T22946]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1411.684781][T22946]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1411.689995][T22946]  ? bpf_btf_load+0x4e/0x90
[ 1411.694580][T22946]  __sys_bpf+0x670/0x890
[ 1411.698896][T22946]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1411.704345][T22946]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1411.710579][T22946]  __x64_sys_bpf+0x7c/0x90
[ 1411.715066][T22946]  do_syscall_64+0x55/0xb0
[ 1411.719547][T22946]  ? clear_bhb_loop+0x40/0x90
[ 1411.724278][T22946]  ? clear_bhb_loop+0x40/0x90
[ 1411.729019][T22946]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1411.734988][T22946] RIP: 0033:0x7f467259e1d9
[ 1411.739483][T22946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.759268][T22946] RSP: 002b:00007f4673531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1411.767753][T22946] RAX: ffffffffffffffda RBX: 00007f4672826090 RCX: 00007f467259e1d9
[ 1411.775796][T22946] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[ 1411.784091][T22946] RBP: 00007f4673531090 R08: 0000000000000000 R09: 0000000000000000
[ 1411.792125][T22946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1411.800157][T22946] R13: 00007f4672826128 R14: 00007f4672826090 R15: 00007fff8ab81348
[ 1411.808293][T22946]  </TASK>
[ 1412.114088][T22956] netlink: 'syz.2.5079': attribute type 29 has an invalid length.
[ 1412.143226][T22956] netlink: 'syz.2.5079': attribute type 29 has an invalid length.
[ 1412.156214][T22956] netlink: 'syz.2.5079': attribute type 29 has an invalid length.
[ 1412.324008][T22961] FAULT_INJECTION: forcing a failure.
[ 1412.324008][T22961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1412.363873][T22961] CPU: 0 PID: 22961 Comm: syz.2.5081 Not tainted syzkaller #0
[ 1412.371464][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1412.381608][T22961] Call Trace:
[ 1412.384958][T22961]  <TASK>
[ 1412.387960][T22961]  dump_stack_lvl+0x18c/0x250
[ 1412.392735][T22961]  ? show_regs_print_info+0x20/0x20
[ 1412.398017][T22961]  ? load_image+0x420/0x420
[ 1412.402618][T22961]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1412.407740][T22961]  ? snprintf+0xe9/0x140
[ 1412.412077][T22961]  should_fail_ex+0x394/0x4c0
[ 1412.416878][T22961]  _copy_to_user+0x2f/0xa0
[ 1412.421427][T22961]  simple_read_from_buffer+0xe7/0x150
[ 1412.426893][T22961]  proc_fail_nth_read+0x1e8/0x260
[ 1412.432024][T22961]  ? proc_fault_inject_write+0x360/0x360
[ 1412.437771][T22961]  ? fsnotify_perm+0x271/0x5e0
[ 1412.442612][T22961]  ? proc_fault_inject_write+0x360/0x360
[ 1412.448339][T22961]  vfs_read+0x298/0x990
[ 1412.452555][T22961]  ? kernel_read+0x1e0/0x1e0
[ 1412.457193][T22961]  ? __fget_files+0x28/0x460
[ 1412.461827][T22961]  ? __fget_files+0x3fc/0x460
[ 1412.466617][T22961]  ? __fdget_pos+0x2a3/0x330
[ 1412.471276][T22961]  ? ksys_read+0x74/0x260
[ 1412.475680][T22961]  ksys_read+0x151/0x260
[ 1412.480018][T22961]  ? vfs_write+0x9a0/0x9a0
[ 1412.484522][T22961]  ? lockdep_hardirqs_on+0x98/0x150
[ 1412.489787][T22961]  do_syscall_64+0x55/0xb0
[ 1412.494280][T22961]  ? clear_bhb_loop+0x40/0x90
[ 1412.499033][T22961]  ? clear_bhb_loop+0x40/0x90
[ 1412.503846][T22961]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1412.509841][T22961] RIP: 0033:0x7fd3c455ea0e
[ 1412.514342][T22961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1412.534046][T22961] RSP: 002b:00007fd3c546afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1412.542562][T22961] RAX: ffffffffffffffda RBX: 00007fd3c546b6c0 RCX: 00007fd3c455ea0e
[ 1412.550721][T22961] RDX: 000000000000000f RSI: 00007fd3c546b0a0 RDI: 0000000000000005
[ 1412.558783][T22961] RBP: 00007fd3c546b090 R08: 0000000000000000 R09: 0000000000000000
[ 1412.566843][T22961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1412.574952][T22961] R13: 00007fd3c4826038 R14: 00007fd3c4825fa0 R15: 00007ffd3377c9c8
[ 1412.583090][T22961]  </TASK>
[ 1412.710642][T22967] netlink: 'syz.0.5082': attribute type 27 has an invalid length.
[ 1412.730372][T22967] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5082'.
[ 1413.215705][T22987] FAULT_INJECTION: forcing a failure.
[ 1413.215705][T22987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1413.230401][T22987] CPU: 0 PID: 22987 Comm: syz.0.5089 Not tainted syzkaller #0
[ 1413.237925][T22987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1413.248042][T22987] Call Trace:
[ 1413.251388][T22987]  <TASK>
[ 1413.254371][T22987]  dump_stack_lvl+0x18c/0x250
[ 1413.259112][T22987]  ? show_regs_print_info+0x20/0x20
[ 1413.264364][T22987]  ? load_image+0x420/0x420
[ 1413.268936][T22987]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1413.274078][T22987]  ? __virt_addr_valid+0x10c/0x380
[ 1413.279282][T22987]  should_fail_ex+0x394/0x4c0
[ 1413.284037][T22987]  _copy_from_user+0x2f/0xe0
[ 1413.288699][T22987]  map_update_elem+0x501/0x710
[ 1413.293553][T22987]  __sys_bpf+0x6b5/0x890
[ 1413.297867][T22987]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1413.303317][T22987]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1413.309547][T22987]  __x64_sys_bpf+0x7c/0x90
[ 1413.314029][T22987]  do_syscall_64+0x55/0xb0
[ 1413.318512][T22987]  ? clear_bhb_loop+0x40/0x90
[ 1413.323244][T22987]  ? clear_bhb_loop+0x40/0x90
[ 1413.327974][T22987]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1413.333928][T22987] RIP: 0033:0x7f467259e1d9
[ 1413.338413][T22987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1413.358165][T22987] RSP: 002b:00007f4673552028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1413.366625][T22987] RAX: ffffffffffffffda RBX: 00007f4672825fa0 RCX: 00007f467259e1d9
[ 1413.374635][T22987] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002
[ 1413.382645][T22987] RBP: 00007f4673552090 R08: 0000000000000000 R09: 0000000000000000
[ 1413.391003][T22987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1413.399016][T22987] R13: 00007f4672826038 R14: 00007f4672825fa0 R15: 00007fff8ab81348
[ 1413.407051][T22987]  </TASK>
[ 1413.475321][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.526630][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.555692][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.581137][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.595031][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.609677][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.636715][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.662663][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1413.675024][T22993] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5090'.
[ 1414.366479][T23018] netlink: 'syz.2.5096': attribute type 27 has an invalid length.
[ 1415.191532][T23041] FAULT_INJECTION: forcing a failure.
[ 1415.191532][T23041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1415.208957][T23041] CPU: 1 PID: 23041 Comm: syz.2.5107 Not tainted syzkaller #0
[ 1415.216631][T23041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1415.226834][T23041] Call Trace:
[ 1415.230158][T23041]  <TASK>
[ 1415.233226][T23041]  dump_stack_lvl+0x18c/0x250
[ 1415.237950][T23041]  ? show_regs_print_info+0x20/0x20
[ 1415.243191][T23041]  ? load_image+0x420/0x420
[ 1415.247840][T23041]  ? __might_fault+0xaa/0x120
[ 1415.252560][T23041]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1415.257630][T23041]  should_fail_ex+0x394/0x4c0
[ 1415.262469][T23041]  _copy_from_user+0x2f/0xe0
[ 1415.267462][T23041]  __sys_bpf+0x23e/0x890
[ 1415.271746][T23041]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1415.277177][T23041]  ? lock_chain_count+0x20/0x20
[ 1415.282166][T23041]  __x64_sys_bpf+0x7c/0x90
[ 1415.286630][T23041]  do_syscall_64+0x55/0xb0
[ 1415.291257][T23041]  ? clear_bhb_loop+0x40/0x90
[ 1415.296063][T23041]  ? clear_bhb_loop+0x40/0x90
[ 1415.300797][T23041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1415.306764][T23041] RIP: 0033:0x7fd3c459e1d9
[ 1415.311245][T23041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1415.331070][T23041] RSP: 002b:00007fd3c546b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1415.339611][T23041] RAX: ffffffffffffffda RBX: 00007fd3c4825fa0 RCX: 00007fd3c459e1d9
[ 1415.347621][T23041] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005
[ 1415.355623][T23041] RBP: 00007fd3c546b090 R08: 0000000000000000 R09: 0000000000000000
[ 1415.363735][T23041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1415.371861][T23041] R13: 00007fd3c4826038 R14: 00007fd3c4825fa0 R15: 00007ffd3377c9c8
[ 1415.379914][T23041]  </TASK>
[ 1415.592163][T23052] netlink: 'syz.3.5109': attribute type 27 has an invalid length.
[ 1416.063239][T23072] netlink: 'syz.0.5117': attribute type 3 has an invalid length.
[ 1417.023159][T23095] netlink: 'syz.3.5124': attribute type 27 has an invalid length.
[ 1417.302292][T23105] ==================================================================
[ 1417.310450][T23105] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[ 1417.318320][T23105] Write of size 72 at addr ffff888055845510 by task syz.3.5128/23105
[ 1417.326432][T23105] 
[ 1417.328802][T23105] CPU: 0 PID: 23105 Comm: syz.3.5128 Not tainted syzkaller #0
[ 1417.336304][T23105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1417.346401][T23105] Call Trace:
[ 1417.349721][T23105]  <TASK>
[ 1417.352699][T23105]  dump_stack_lvl+0x18c/0x250
[ 1417.357435][T23105]  ? read_lock_is_recursive+0x20/0x20
[ 1417.362875][T23105]  ? show_regs_print_info+0x20/0x20
[ 1417.368129][T23105]  ? load_image+0x420/0x420
[ 1417.372690][T23105]  ? _raw_spin_lock_irqsave+0xc0/0x100
[ 1417.378208][T23105]  ? __virt_addr_valid+0x10c/0x380
[ 1417.383373][T23105]  ? __virt_addr_valid+0x10c/0x380
[ 1417.388546][T23105]  ? __virt_addr_valid+0x10c/0x380
[ 1417.393725][T23105]  print_report+0xa8/0x210
[ 1417.398209][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1417.403383][T23105]  kasan_report+0x117/0x150
[ 1417.407948][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1417.413195][T23105]  kasan_check_range+0x241/0x290
[ 1417.418207][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1417.423389][T23105]  __asan_memcpy+0x40/0x70
[ 1417.427889][T23105]  __bpf_get_stackid+0x6c7/0x900
[ 1417.432901][T23105]  bpf_get_stackid_pe+0x343/0x410
[ 1417.437986][T23105]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[ 1417.443581][T23105]  bpf_overflow_handler+0x1fc/0x510
[ 1417.448850][T23105]  ? perf_prepare_header+0x1e0/0x1e0
[ 1417.454192][T23105]  ? bpf_overflow_handler+0xde/0x510
[ 1417.459542][T23105]  ? tp_perf_event_destroy+0x20/0x20
[ 1417.464902][T23105]  ? __perf_event_account_interrupt+0x187/0x280
[ 1417.471208][T23105]  __perf_event_overflow+0x461/0x660
[ 1417.476562][T23105]  perf_swevent_event+0x319/0x570
[ 1417.481658][T23105]  ? perf_tp_event+0x1550/0x1550
[ 1417.486680][T23105]  ___perf_sw_event+0x4ab/0x730
[ 1417.491602][T23105]  ? ___perf_sw_event+0x19e/0x730
[ 1417.496702][T23105]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1417.503181][T23105]  ? __lock_acquire+0x1431/0x7eb0
[ 1417.508278][T23105]  ? rep_movs_alternative+0x4a/0x90
[ 1417.513543][T23105]  ? verify_lock_unused+0x140/0x140
[ 1417.518823][T23105]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1417.525005][T23105]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1417.531058][T23105]  ? lock_chain_count+0x20/0x20
[ 1417.535969][T23105]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1417.541952][T23105]  __perf_sw_event+0x139/0x270
[ 1417.546786][T23105]  do_user_addr_fault+0x1242/0x12d0
[ 1417.552079][T23105]  ? rcu_is_watching+0x15/0xb0
[ 1417.556941][T23105]  exc_page_fault+0x64/0x100
[ 1417.561616][T23105]  asm_exc_page_fault+0x26/0x30
[ 1417.566532][T23105] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1417.572396][T23105] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1417.592062][T23105] RSP: 0018:ffffc9000fc07bd0 EFLAGS: 00050206
[ 1417.598272][T23105] RAX: ffffffff8434c401 RBX: 000000000000056d RCX: 0000000000000534
[ 1417.606324][T23105] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff888145278039
[ 1417.614372][T23105] RBP: ffffc9000fc07d20 R08: 0000000000000004 R09: 0000000000000005
[ 1417.622399][T23105] R10: dffffc0000000000 R11: ffffed1028a4f0ad R12: 0000200000003534
[ 1417.630430][T23105] R13: 1ffff92001f80fbd R14: ffff888145278000 R15: 0000200000002fc7
[ 1417.638518][T23105]  ? rcuref_put_slowpath+0x141/0x150
[ 1417.643923][T23105]  _copy_from_user+0x8b/0xe0
[ 1417.648572][T23105]  generic_map_update_batch+0x58c/0x800
[ 1417.654184][T23105]  ? rcu_read_unlock+0xa0/0xa0
[ 1417.659004][T23105]  ? __fdget+0x180/0x210
[ 1417.663308][T23105]  ? rcu_read_unlock+0xa0/0xa0
[ 1417.668121][T23105]  bpf_map_do_batch+0x3f2/0x600
[ 1417.673034][T23105]  ? bpf_lsm_xfrm_policy_lookup+0x10/0x10
[ 1417.678837][T23105]  __sys_bpf+0x381/0x890
[ 1417.683229][T23105]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1417.688690][T23105]  ? lock_chain_count+0x20/0x20
[ 1417.693606][T23105]  __x64_sys_bpf+0x7c/0x90
[ 1417.698088][T23105]  do_syscall_64+0x55/0xb0
[ 1417.702562][T23105]  ? clear_bhb_loop+0x40/0x90
[ 1417.707308][T23105]  ? clear_bhb_loop+0x40/0x90
[ 1417.712041][T23105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1417.718029][T23105] RIP: 0033:0x7fbd7459e1d9
[ 1417.722504][T23105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1417.742289][T23105] RSP: 002b:00007fbd75423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1417.750862][T23105] RAX: ffffffffffffffda RBX: 00007fbd74825fa0 RCX: 00007fbd7459e1d9
[ 1417.758905][T23105] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[ 1417.767032][T23105] RBP: 00007fbd74635888 R08: 0000000000000000 R09: 0000000000000000
[ 1417.775071][T23105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1417.783109][T23105] R13: 00007fbd74826038 R14: 00007fbd74825fa0 R15: 00007ffce30e9fd8
[ 1417.791169][T23105]  </TASK>
[ 1417.794254][T23105] 
[ 1417.796634][T23105] Allocated by task 23105:
[ 1417.801211][T23105]  kasan_set_track+0x4e/0x70
[ 1417.805877][T23105]  __kasan_kmalloc+0x8f/0xa0
[ 1417.810537][T23105]  __kmalloc_node+0xb6/0x240
[ 1417.815231][T23105]  bpf_map_area_alloc+0x5e/0x110
[ 1417.820406][T23105]  prealloc_elems_and_freelist+0x86/0x1c0
[ 1417.826196][T23105]  stack_map_alloc+0x32b/0x4b0
[ 1417.831195][T23105]  map_create+0x877/0x12f0
[ 1417.835932][T23105]  __sys_bpf+0x651/0x890
[ 1417.840236][T23105]  __x64_sys_bpf+0x7c/0x90
[ 1417.844713][T23105]  do_syscall_64+0x55/0xb0
[ 1417.849188][T23105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1417.855144][T23105] 
[ 1417.857595][T23105] The buggy address belongs to the object at ffff888055845500
[ 1417.857595][T23105]  which belongs to the cache kmalloc-cg-64 of size 64
[ 1417.871790][T23105] The buggy address is located 16 bytes inside of
[ 1417.871790][T23105]  allocated 40-byte region [ffff888055845500, ffff888055845528)
[ 1417.885909][T23105] 
[ 1417.888276][T23105] The buggy address belongs to the physical page:
[ 1417.894744][T23105] page:ffffea0001561140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55845
[ 1417.904949][T23105] memcg:ffff88807e93a801
[ 1417.909236][T23105] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1417.917191][T23105] page_type: 0xffffffff()
[ 1417.921578][T23105] raw: 00fff00000000800 ffff88801884da00 ffffea000175b800 0000000000000003
[ 1417.930217][T23105] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807e93a801
[ 1417.939273][T23105] page dumped because: kasan: bad access detected
[ 1417.945744][T23105] page_owner tracks the page as allocated
[ 1417.951497][T23105] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 19901, tgid 19899 (syz.3.4216), ts 1209456683730, free_ts 1209403240235
[ 1417.970140][T23105]  post_alloc_hook+0x1c1/0x200
[ 1417.974957][T23105]  get_page_from_freelist+0x2181/0x22a0
[ 1417.980641][T23105]  __alloc_pages+0x1f0/0x460
[ 1417.985332][T23105]  alloc_slab_page+0x5d/0x180
[ 1417.990079][T23105]  new_slab+0x87/0x2d0
[ 1417.994197][T23105]  ___slab_alloc+0xc5c/0x12f0
[ 1417.998924][T23105]  __kmem_cache_alloc_node+0x11f/0x250
[ 1418.004442][T23105]  kmalloc_trace+0x2a/0xe0
[ 1418.008991][T23105]  alloc_fdtable+0xca/0x2c0
[ 1418.013560][T23105]  dup_fd+0x747/0xa20
[ 1418.017611][T23105]  copy_files+0xaf/0x110
[ 1418.021909][T23105]  copy_process+0x157d/0x3da0
[ 1418.026641][T23105]  kernel_clone+0x24b/0x8a0
[ 1418.031201][T23105]  __x64_sys_clone+0x1b7/0x230
[ 1418.036034][T23105]  do_syscall_64+0x55/0xb0
[ 1418.040522][T23105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1418.046506][T23105] page last free stack trace:
[ 1418.051232][T23105]  free_unref_page_prepare+0x7d7/0x8f0
[ 1418.056764][T23105]  free_unref_page+0x32/0x2e0
[ 1418.061500][T23105]  vfree+0x1a7/0x340
[ 1418.065467][T23105]  delayed_vfree_work+0x55/0x80
[ 1418.070387][T23105]  process_scheduled_works+0xa60/0x1600
[ 1418.075995][T23105]  worker_thread+0xa5e/0xfe0
[ 1418.080645][T23105]  kthread+0x2fa/0x390
[ 1418.084764][T23105]  ret_from_fork+0x48/0x80
[ 1418.089240][T23105]  ret_from_fork_asm+0x11/0x20
[ 1418.094071][T23105] 
[ 1418.096444][T23105] Memory state around the buggy address:
[ 1418.102120][T23105]  ffff888055845400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1418.110236][T23105]  ffff888055845480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1418.118349][T23105] >ffff888055845500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 1418.126435][T23105]                                   ^
[ 1418.131829][T23105]  ffff888055845580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1418.139914][T23105]  ffff888055845600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1418.147993][T23105] ==================================================================
[ 1418.156090][T23105] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1418.163349][T23105] CPU: 0 PID: 23105 Comm: syz.3.5128 Not tainted syzkaller #0
[ 1418.170840][T23105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1418.180918][T23105] Call Trace:
[ 1418.184223][T23105]  <TASK>
[ 1418.187183][T23105]  dump_stack_lvl+0x18c/0x250
[ 1418.191891][T23105]  ? show_regs_print_info+0x20/0x20
[ 1418.197118][T23105]  ? load_image+0x420/0x420
[ 1418.201657][T23105]  panic+0x2ca/0x720
[ 1418.205580][T23105]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1418.210642][T23105]  ? bpf_jit_dump+0xd0/0xd0
[ 1418.215182][T23105]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1418.221116][T23105]  ? _raw_spin_unlock+0x40/0x40
[ 1418.226001][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1418.231148][T23105]  check_panic_on_warn+0x84/0xa0
[ 1418.236118][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1418.241265][T23105]  end_report+0x6f/0x130
[ 1418.245538][T23105]  kasan_report+0x128/0x150
[ 1418.250075][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1418.255223][T23105]  kasan_check_range+0x241/0x290
[ 1418.260190][T23105]  ? __bpf_get_stackid+0x6c7/0x900
[ 1418.265332][T23105]  __asan_memcpy+0x40/0x70
[ 1418.269792][T23105]  __bpf_get_stackid+0x6c7/0x900
[ 1418.274839][T23105]  bpf_get_stackid_pe+0x343/0x410
[ 1418.280102][T23105]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[ 1418.285652][T23105]  bpf_overflow_handler+0x1fc/0x510
[ 1418.290907][T23105]  ? perf_prepare_header+0x1e0/0x1e0
[ 1418.296221][T23105]  ? bpf_overflow_handler+0xde/0x510
[ 1418.301548][T23105]  ? tp_perf_event_destroy+0x20/0x20
[ 1418.306884][T23105]  ? __perf_event_account_interrupt+0x187/0x280
[ 1418.313158][T23105]  __perf_event_overflow+0x461/0x660
[ 1418.318479][T23105]  perf_swevent_event+0x319/0x570
[ 1418.323539][T23105]  ? perf_tp_event+0x1550/0x1550
[ 1418.328510][T23105]  ___perf_sw_event+0x4ab/0x730
[ 1418.333398][T23105]  ? ___perf_sw_event+0x19e/0x730
[ 1418.338452][T23105]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1418.344919][T23105]  ? __lock_acquire+0x1431/0x7eb0
[ 1418.350245][T23105]  ? rep_movs_alternative+0x4a/0x90
[ 1418.355478][T23105]  ? verify_lock_unused+0x140/0x140
[ 1418.360713][T23105]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1418.366727][T23105]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1418.372750][T23105]  ? lock_chain_count+0x20/0x20
[ 1418.377668][T23105]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1418.383604][T23105]  __perf_sw_event+0x139/0x270
[ 1418.388406][T23105]  do_user_addr_fault+0x1242/0x12d0
[ 1418.393642][T23105]  ? rcu_is_watching+0x15/0xb0
[ 1418.398450][T23105]  exc_page_fault+0x64/0x100
[ 1418.403085][T23105]  asm_exc_page_fault+0x26/0x30
[ 1418.407963][T23105] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1418.413837][T23105] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1418.433476][T23105] RSP: 0018:ffffc9000fc07bd0 EFLAGS: 00050206
[ 1418.439591][T23105] RAX: ffffffff8434c401 RBX: 000000000000056d RCX: 0000000000000534
[ 1418.447586][T23105] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff888145278039
[ 1418.455588][T23105] RBP: ffffc9000fc07d20 R08: 0000000000000004 R09: 0000000000000005
[ 1418.463582][T23105] R10: dffffc0000000000 R11: ffffed1028a4f0ad R12: 0000200000003534
[ 1418.471584][T23105] R13: 1ffff92001f80fbd R14: ffff888145278000 R15: 0000200000002fc7
[ 1418.479636][T23105]  ? rcuref_put_slowpath+0x141/0x150
[ 1418.484969][T23105]  _copy_from_user+0x8b/0xe0
[ 1418.489593][T23105]  generic_map_update_batch+0x58c/0x800
[ 1418.495607][T23105]  ? rcu_read_unlock+0xa0/0xa0
[ 1418.500398][T23105]  ? __fdget+0x180/0x210
[ 1418.504690][T23105]  ? rcu_read_unlock+0xa0/0xa0
[ 1418.509479][T23105]  bpf_map_do_batch+0x3f2/0x600
[ 1418.514364][T23105]  ? bpf_lsm_xfrm_policy_lookup+0x10/0x10
[ 1418.520122][T23105]  __sys_bpf+0x381/0x890
[ 1418.524408][T23105]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1418.529816][T23105]  ? lock_chain_count+0x20/0x20
[ 1418.534708][T23105]  __x64_sys_bpf+0x7c/0x90
[ 1418.539155][T23105]  do_syscall_64+0x55/0xb0
[ 1418.543606][T23105]  ? clear_bhb_loop+0x40/0x90
[ 1418.548360][T23105]  ? clear_bhb_loop+0x40/0x90
[ 1418.553174][T23105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1418.559112][T23105] RIP: 0033:0x7fbd7459e1d9
[ 1418.563558][T23105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1418.583217][T23105] RSP: 002b:00007fbd75423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1418.591678][T23105] RAX: ffffffffffffffda RBX: 00007fbd74825fa0 RCX: 00007fbd7459e1d9
[ 1418.599687][T23105] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[ 1418.607683][T23105] RBP: 00007fbd74635888 R08: 0000000000000000 R09: 0000000000000000
[ 1418.615687][T23105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1418.623689][T23105] R13: 00007fbd74826038 R14: 00007fbd74825fa0 R15: 00007ffce30e9fd8
[ 1418.631702][T23105]  </TASK>
[ 1418.634931][T23105] Kernel Offset: disabled
[ 1418.639279][T23105] Rebooting in 86400 seconds..