last executing test programs:

4.415439644s ago: executing program 1 (id=901):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0080002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0)
r3 = getpid()
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x40f00, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xffffff50}, 0x80)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x97, 0x4, 0x94, 0x0, 0xfa4, 0xa, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1, 0x3}, 0x400, 0x7, 0x5, 0x4, 0x4, 0x5, 0x401, 0x0, 0x3, 0x0, 0x81}, r3, 0x5, 0xffffffffffffffff, 0xc)

3.625669331s ago: executing program 1 (id=904):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4a, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11, 0xb, &(0x7f0000000040), 0xcf)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff8500000004000000"], 0x0, 0xf3, 0x0, 0x0, 0x0, 0x31}, 0x94)
sendmsg$inet(r2, 0x0, 0x48014)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000000000000000e700000000", @ANYRES32=0x0], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))

3.315072828s ago: executing program 3 (id=910):
r0 = socket$kcm(0x15, 0x2, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x9f40, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) (async, rerun: 64)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32, @ANYBLOB="00000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000859e1533cbd05c05f925fd21adfd5d00000085000000b700000000000700000000000000a6e9d24292b5456876a32bc687a5f58eb4bf851e10461923dfa92836e55809cbecbacfdef934d7dfa4e1783c8cc1f08ac971ed43d99487f83cfe34c30b3fbd7558f855a04bea72291778de21c0ca012ee3a2f2b5e42024f358d522d842cd487b446b6645abc7a5e4c587d81d92db84e07cd1dae2581cc16b047880e126516db2867f05b93ed322a5d6fd636ab60938e90000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', r7, 0x0, r5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r9) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x2, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r12, 0x702, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x9ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r13 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r11) (async)
r14 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r14, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) (async)
socket$kcm(0x11, 0x3, 0x0)

2.263095441s ago: executing program 3 (id=915):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f6ffffffb704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1})
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x9c}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xf, 0x0, &(0x7f0000000000)="ffffffff7f833e97627153c801d720", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)
sendmsg$kcm(r4, 0x0, 0x1)
r7 = syz_clone(0x0, &(0x7f00000005c0)="309d2de821cd9ff1082ccfc8364f826a3db2abe2d712e9514b61f8f16aa98d0d02b4b310d96d5f3368215dd27d35f934153b6c5b273430a3c6a8962bab640c9c70d7c02de2fd8a11266ca52bc771d0aaed8915d0", 0x54, &(0x7f0000000640), &(0x7f0000000680), &(0x7f0000000740)="4cbf5b85da63e2c77c1fbf8315529975e280545d3a981385718d8d4b4e67a30268366d3bbc8a86d8771e720f7b9b185618f8b41928201c512e24a2bba3670babe0987549a4e89d")
perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0x3, 0xc0, 0x3f, 0x9, 0x0, 0x3, 0xd8031, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x4}, 0x2800, 0xa, 0xfffffff8, 0x4, 0x6, 0x0, 0x8, 0x0, 0xf, 0x0, 0x4}, r7, 0x3, r4, 0xb)
write$cgroup_pid(r4, &(0x7f0000000380)=r7, 0x12)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x34}, 0x140440c4)

2.132528874s ago: executing program 1 (id=916):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x400}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x300)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000086dd21000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.865460179s ago: executing program 1 (id=919):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x240a, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
socketpair(0x15, 0x800, 0x8, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000184100000800000000000000000000009250db58c46cf8c555b609ea"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0xa6, &(0x7f0000000700)=""/166, 0x41000, 0x91529883b03c9dc8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x0, 0x10000000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000840)=[{0x4, 0x5, 0x6, 0x6}, {0x2, 0x1, 0x5}, {0x0, 0x3, 0xf}, {0x1, 0x4, 0x0, 0xc}, {0x2, 0x2, 0x0, 0x2}, {0x1, 0x3, 0x0, 0x2}], 0x10, 0x35d}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000980)=r5, 0x4)
close(r3)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x1e, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x1, 0x4, 0x7, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call, @alu={0x7, 0x0, 0x2, 0x6, 0xa, 0x14f, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x32}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000003c0)='syzkaller\x00', 0xfffff256, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.343890701s ago: executing program 3 (id=923):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
write$cgroup_devices(r2, 0x0, 0xfefb)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000580)=""/157}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x9}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000000c0), 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000640)=r4, 0x4)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000040)='\t!=&\x00')
r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r7)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000002c0)={'dvmrp0\x00', 0x400})

1.263859712s ago: executing program 1 (id=924):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4a, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11, 0xb, &(0x7f0000000040), 0xcf)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff8500000004000000"], 0x0, 0xf3, 0x0, 0x0, 0x0, 0x31}, 0x94)
sendmsg$inet(r2, 0x0, 0x48014)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000000000000000e700000000", @ANYRES32=0x0], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))

1.208148684s ago: executing program 2 (id=925):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200590414000600002f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f6184b8a34f90186cee84400000000000000001900000000", 0x3c}, {&(0x7f0000000800)="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", 0x3ff}, {&(0x7f0000003200)="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", 0xac8}], 0x3}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x891b, &(0x7f0000000400)={'rose0\x00', @random="0200ff7fffff"})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x3f}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000005000000020000000700000001"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000c2cb38f68fcdce69ea8da20e1a5d92c203b975371c453b7629b8d3d73a7f22295ba8b70a001e0ed849f6e48e9a27817f18f1357a88", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x7779861c4897818a, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000f4ffff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000c18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000000900000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="8520000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7828477aa9eb693784b703000008000000b70300000b00000085000000060000006f6906000400000018200000", @ANYRES32, @ANYBLOB="0000000000020000"], &(0x7f0000000140)='GPL\x00', 0xfff, 0xdf, &(0x7f0000000380)=""/223, 0x41000, 0x20, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0xadef, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000000780)=[{0x5, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xa, 0x8}, {0x3, 0x5, 0xd, 0x4}, {0x3, 0x5, 0xb, 0xc}, {0x0, 0x1, 0x6, 0xc}, {0x3, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x7, 0x8}], 0x10, 0x9}, 0x94)

1.022880107s ago: executing program 0 (id=927):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00200010008188040f80ec59aca2a713a1f848400000005e140602000000000e000a000f00000002800000121f", 0xffec}], 0x1}, 0x90)

949.979889ms ago: executing program 3 (id=928):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10810, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc600d00020004000300ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

939.775449ms ago: executing program 2 (id=929):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00', 0x200})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000e000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000181e0000", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000220000000000ffffffff0000180000000000000000000000082000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000002c0)=""/4096, 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0x0, 0x12000, 0xffff}, 0x1, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001380)=[{0x2, 0x4, 0x5}, {0x4, 0x1, 0xf}, {0x5, 0x1, 0x8, 0x8}, {0x4, 0x4, 0x9}, {0x1, 0x2, 0xf, 0x3}], 0x10, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
gettid() (async)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00', 0x200}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000e000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000181e0000", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000220000000000ffffffff0000180000000000000000000000082000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000002c0)=""/4096, 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0x0, 0x12000, 0xffff}, 0x1, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001380)=[{0x2, 0x4, 0x5}, {0x4, 0x1, 0xf}, {0x5, 0x1, 0x8, 0x8}, {0x4, 0x4, 0x9}, {0x1, 0x2, 0xf, 0x3}], 0x10, 0x5}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) (async)

867.392031ms ago: executing program 0 (id=930):
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x1, 0x1, 0x10, 0x0, 0x0, 0x820a4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0xc05e, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)={'b', ' *:* ', 'rwm\x00'}, 0xa)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a0603000000230003e8000000000000000000ac1414aa3a2008"], 0xfdef)

817.942152ms ago: executing program 0 (id=931):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=',)$\x00')
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8001, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x8, 0x4, 0x401, 0x0, 0x0, 0x1, 0x0, 0x9f}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0x78, 0x3, 0x6, 0x0, 0x0, 0x7, 0x220, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x3}, 0x100, 0x7, 0x1ff, 0x6, 0xf3e6, 0x6, 0x8, 0x0, 0x2, 0x0, 0x800})
r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x2, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r11, r9, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x9, 0x0, 0x4, 0x0, 0xae50, 0x2008, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140), 0x7}, 0x64, 0x9, 0x8, 0x4, 0x200, 0x7, 0x6, 0x0, 0x205c, 0x0, 0x80}, r11, 0x10, r1, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r6, r8}, 0xc)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4)

791.438302ms ago: executing program 2 (id=932):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4581c2, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="15000000660081", 0x7}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xc1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4581c2, 0x0) (async)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="15000000660081", 0x7}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xc1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) (async)

726.226304ms ago: executing program 3 (id=933):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0xeb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

635.294976ms ago: executing program 0 (id=934):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x90, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8001, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x4, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) (fail_nth: 8)

635.196886ms ago: executing program 2 (id=935):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8720b0000005e140602000000100e000a00100000001a80009a6694", 0x2e}], 0x1}, 0x4000080)

310.376103ms ago: executing program 2 (id=936):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e618294938037e70e4509c5bb515e456df3a53e030d4090003f4b051c0c25135cec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local})
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

274.857394ms ago: executing program 1 (id=937):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200590414000600002f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f6184b8a34f90186cee84400000000000000001900000000", 0x3c}, {&(0x7f0000000800)="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", 0x3ff}, {&(0x7f0000003200)="daf0b870b8891eac452b648d1433dda3d842fc7930f917cc79abbe73c0eacefa55d46dbe72678fc65b3843d2d2eff47cc4c9f70690c6e395b8f0ca4429a87ba0664ea02911b61f3353e39695708e5f0945625a52f02edee4a68aeaba668a4b7bf80a39a78c51816b75b4d434e7c1768a89cd4b989ddb24b6c8e06b12b2134f25cf440fd2fa2f61eaa91cd065d3f2d9f23c7df0bbdd307102756d9f2d07fd8cdc1da44c191581ed90b4cdd548fa2c032c643e7c9be5fa0d56a3aeee24ae947300dbc93da4c8b13f4cb806af739d0d19fa0a40892e861aa0a13c2a505975839f2b8795c75d48e733699c2f9b5f102969c6881df87200f9685a074d33e40eeb232b62cd91be42a775559e25ab451b97a77f162f579f49880e765fba7e362fa17cb6c6f0110608ea348bbbab71ec51979748cf039a60b66513458683888c8f8f834cb4eb53861712bfeaa251221ce49c45673acfb21bce6ec3b603933496e473330666056d72a238643c805c44d2de4d4d4d207d5fca564e0a93efc3175130629b1715f43c0fd9be21369ca6de9abbcad974aa027e4fb90078931aebf1d1da29cc265dfaa49a7cec3d496d05048a9a349ac070fc9019be6631a5861087f5377fca4e0abdb807c4337bca7375a1bc747e7631520970a5819833ccafe8844cb0d7381bba926d5dbb49f84faa99678399f998ebc5546cb6e0d86eced151d5c9600c7dfa9c346ae2f159e06f43c01507ef63da93bb418855c44db123441976f8557469f473327f874074d70b9c40dd2a55f2f1b6ae8bdc73b555ec873ad6894e13806dbc07d17509ddddce1faa75cad635713688254085895fbbc9fde71e87fb78f9c7349313ebbdd0dbac0f92cf6c1f58f33f6aa4ec1a09e1682048cac1160b48627e9d6cb905dee73ecf05bdac47a3228d3cd231e51466cc3395e94124df60e10cfacdd6bd54da2766eb0842376a40c24b53dddd7c2df77e1382aed7cd0e49edf4878aee4ee037a3a9219730d18b7f007027569f8c282dbc9968638bea002a89c017130c77c03885edaae5e0ff0e5490bfaa324b1c7d17798baecb41838ca30189b4751c3757e223800676cc5e2ef26ead26937b8ac41eb0c6a1da9b46ed7a466bffc08ec9972b03b37160b8b71a51c2921932a6b27e378eefe87519b63be76ade2078d14e2c189d05ae610ad90110e4dbddb5a43a3a1139793dde49143c53f32de437828e9a8dd692a0d8e90a49eac809b70adc086989e37c20c7a7394f834faf9288f3b3627ac35f9f4fea4678dcfc5a698788a044c089582a219d54f416a6bcedf237452a9ae954bf2578c471934b349212df95a7f72b4983cfa4879ea50f7466214ba132318bb2a966210bd3744e5a6729c2538a6093e87bffe47d1fabfc5f3b7da4aa1f17f0d4eb98c52701151fc6d0f1d22ead5dde648766afb973b97e5de6082defb6f903b7d41cd0460e26d89c4a2571ad50164855268c865353657238fb3050349289522b9015503c0361f8bd9c51c9fe6e19c4368021493c04ca29faaed3c5140f3a81863f920f8039d5e002cae6cc3e040df10cd37fb2dfa2621d62d57ae90e1d2b6b19e8809e5f1b2bb6cec1a0780be35fda88b6e4f25f039e5f32fe2a3c5b90aafeba87bd088463a47640664013cf2618cfb0e6d92673958b5d69167058fdaa219e5778d596672a2988dd451333bcce8956b352a74300c0e98c13692626ca5378d2d759159e11a7f6984edf0b0e66ab1499abfb732737161cd7cdf8d3e2c731729e63ee38ac2c20413939316c62b910eb4a86bd2cbda487e2211a93a6ae2708d4c4c96cca9d1af93504d13ac3845be7340c8565aceadf8ffb1b5f26397452e4f4bf69ed565e11d353d69a8f9abd78614e22ba8e1cff50678d2210d1a9c98a36f4066e1c602057909589d32dfaef422b89c5305281169b243b5e9578e61e2420288ef7829fdde0d2110f43f55104ae2dcef10cf484c78cd96296b58e4f691037e7134ce86e9b0cb1c5317865a4ddbb931e9ae630a073446cce8397b8378f40e7c41d7e11f1b327847a663a1ebbab930fe49adb36c1e9d3ba1e576d14c7a1cd49a51cf78b3bb18deb89f3431d452f8f5436f4f39f004eee94f6a52ad7d2be71e16f7339fbe5ba9f141276405480742688bacbc8848c8da143c7fe272b68b18d54fa400aab36f12f38d217b42c733c551e341d479810523cc009aa6bf38665b78c72e7b6eb86b7bd54de568288e98cffb278dd3b69d2d37dbdd0b211173345dc9052220d53544301668653f201a3d876e715598ed5cc1a94110ef26fdb5aeaa63c2e409a4c23c824c2fcd8a8bbea936e3a697db48408f2304645490a74458596377ffa822145c1caeed21f3307584dd829fb1e936e32ab9fd6dac0e04c2bb8edf514a5d9793f21ad194dd14d7d8476944dd9d0f0fdc4d15589a1dc3cb508c9c9be7afe835cd52005fe71ec180d8cd3852d242dd2db7d9ab52c4abcf16e59a0bf3a53f17cb0a785b2930a360b6beba2e489b11f5a1221594f2b717b8cb1ad7e1f482612439d1bf3b7cacba4433a5e258016aaad92b2ef37b118c5e680da533e8fcef10b775c3722f93258588a7701ed10cc261ee22a13beced92bab4f566bb0bd7151dbcc7315fef4bff709e47e7aec55c8dbd8e03910f9cbe387a0e798afcbe04babdfc55973e714ca16e02d3360b6d1db48b4a54737025720dd5bfee22f3c7862f9d36b0ae21ac5841cdfd8a531bde7e55a39889e2196285810e2f0ddd0e384cd306a3bf38e8a3b345faeedda3c6ee376bb44f75b90db45e977e249349ba996bcdbd1528fdba5a36699e4d18db9b7f697b087f3072461fa6795277a67779d0a6d4070164177894c7a5dc321964c1533ded43a221d23ebf28017a1ee43fa2b8aa9a62f314cc549ddc992ac9a485c408d03e302480487eeaed52239b80bdc2c6e2533a139ce637c223a0c0903c509e293c6c3e4ab78ab26b6f0d883305d3573cf803f5f19c8e4b3d2e14f6c00cfcb9139773c19605800b641bbbd1e344c2f07415008e684162a3f319dfb3ccd5bd505ea1569f378d6acafa71d7581d3b399184243c2ff9f2bfff456367760e4e76e2eeff040353c3dde60d895362ef70cea0d4d3908678ddde222fcaeac02e494b547ca9a26bf3f070e239b4a27cf8a48c4e2aa12b656911b23b59d42c1209e34c70ae3003a8f555b820cebe9b0a459161250ef769133a939c8ef4fcc86c92fd3b550c7058bd3de48ec1660273b3d0f4d4e3a0a4784adb4613fd0043f52641f73b98e796379972df51d1bd27fa6ce61a31226ff0801665f1d258cec20c13a4744de61599253067db66919a86cf6fe785d66c91ce6b73f9452fd5eb9c126e4ee1bff1afc809f9a723b2134de445ddc1eae4eeada608a80b77b4cb8810d5f01589371b01eecfd9a98744ddb58f7837b16209964d4db21e050b0f8a5e2ff76fff8d5a1aae46862a529b3e9cdce82e2c6b64f982b9f40cc0ca8513bd31fcf9e1aac72f840d62912e8a09dd6ad06844f939b945f96927679ec19b2ef22edb12b5403ebfe96bdf3c75c9dc81d7bd67b9ebf02cd703f6dddd3a69a3876489008c8884a8ad4fa3649af1ad2cacff1475faf77a600b6391ef76fc6c76dd2284bbfd529184cbb32b1c68c7c09443d85b97c229b98bb1c504b5534cc27089bc1826c64775c1b5a09bdb08ff46e837f1ff382473ca2bee2e9ce99036947f440b59406301895c47299a7f120d95db83eefdfd0631528e94789c3a3b0d1e63884fffe71f1f7257befdcedbd63d2843f6afa8da347180d35bfe0d5528e3769fcf06f156500874120032d2a97c0cc58fcd7af96bb83a65c2e48702a24c77b6d0d66bcae1eefe39681e1d2a3dc5a2c64a9087d8eddedd367dc7a3a90de0f97ff1101", 0xac8}], 0x3}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x891b, &(0x7f0000000400)={'rose0\x00', @random="0200ff7fffff"})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x3f}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000005000000020000000700000001"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000c2cb38f68fcdce69ea8da20e1a5d92c203b975371c453b7629b8d3d73a7f22295ba8b70a001e0ed849f6e48e9a27817f18f1357a88", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x7779861c4897818a, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000f4ffff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000c18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000000900000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="8520000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7828477aa9eb693784b703000008000000b70300000b00000085000000060000006f6906000400000018200000", @ANYRES32, @ANYBLOB="0000000000020000"], &(0x7f0000000140)='GPL\x00', 0xfff, 0xdf, &(0x7f0000000380)=""/223, 0x41000, 0x20, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0xadef, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000000780)=[{0x5, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xa, 0x8}, {0x3, 0x5, 0xd, 0x4}, {0x3, 0x5, 0xb, 0xc}, {0x0, 0x1, 0x6, 0xc}, {0x3, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x7, 0x8}], 0x10, 0x9}, 0x94)

255.716354ms ago: executing program 3 (id=938):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x3, 0x800, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@generic={0x71, 0x1, 0x1, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x40010040)
r6 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000088)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x30, 0x0, &(0x7f0000000600)="f8ad48c5fce216efcc244f5d86dd6c5fee416a26f2a47171535434145d224d820439ccd9c109b1d38ea5c464189c571e", 0x0, 0x61ab, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000ff9ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

167.435836ms ago: executing program 0 (id=939):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f0000000080)="89000000120081ae08060cdc030000017f03e3f7fffe00006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)

114.874027ms ago: executing program 2 (id=940):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x20, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x4880, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r11 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000080"], 0x48)
close(r12)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_devices(r13, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)

0s ago: executing program 0 (id=941):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10810, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc600d00020004000300ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

andler
[  353.221525][ T6143] syz.2.91 (6143) used greatest stack depth: 17176 bytes left
[  353.518463][ T6158] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[  353.545726][ T6158] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.95'.
[  353.564387][ T6158] netlink: 5 bytes leftover after parsing attributes in process `syz.0.95'.
[  354.316454][ T6175] netlink: 'syz.2.102': attribute type 10 has an invalid length.
[  354.337510][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'.
[  354.350655][ T6175] bridge0: port 3(team0) entered blocking state
[  354.361675][ T6175] bridge0: port 3(team0) entered disabled state
[  354.403538][ T6175] bridge0: port 3(team0) entered blocking state
[  354.411367][ T6175] bridge0: port 3(team0) entered forwarding state
[  354.657345][ T6191] netlink: 'syz.3.106': attribute type 1 has an invalid length.
[  354.674513][ T6193] netlink: 'syz.1.107': attribute type 10 has an invalid length.
[  354.675503][ T6191] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.106'.
[  354.700274][ T6191] netlink: 5 bytes leftover after parsing attributes in process `syz.3.106'.
[  354.843334][ T6193] veth0_vlan: left promiscuous mode
[  354.889068][ T6193] veth0_vlan: entered promiscuous mode
[  354.943012][ T6193] team0: Device veth0_vlan failed to register rx_handler
[  355.175520][ T6203] netlink: 'syz.0.111': attribute type 10 has an invalid length.
[  355.274211][ T6203] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.111'.
[  355.421975][ T6213] FAULT_INJECTION: forcing a failure.
[  355.421975][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  355.452343][ T6213] CPU: 0 PID: 6213 Comm: syz.1.114 Not tainted syzkaller #0
[  355.459709][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  355.469815][ T6213] Call Trace:
[  355.473264][ T6213]  <TASK>
[  355.476324][ T6213]  dump_stack_lvl+0x18c/0x250
[  355.481265][ T6213]  ? show_regs_print_info+0x20/0x20
[  355.486600][ T6213]  ? load_image+0x420/0x420
[  355.491169][ T6213]  ? __lock_acquire+0x7d80/0x7d80
[  355.496266][ T6213]  should_fail_ex+0x394/0x4c0
[  355.501028][ T6213]  _copy_from_user+0x2f/0xe0
[  355.505644][ T6213]  bpf_test_init+0xde/0x140
[  355.510307][ T6213]  bpf_prog_test_run_xdp+0x4cd/0x1140
[  355.515680][ T6213]  ? __lock_acquire+0x7d80/0x7d80
[  355.520716][ T6213]  ? dev_put+0x80/0x80
[  355.524792][ T6213]  ? dev_put+0x80/0x80
[  355.528857][ T6213]  bpf_prog_test_run+0x31f/0x390
[  355.533843][ T6213]  __sys_bpf+0x49d/0x890
[  355.538084][ T6213]  ? bpf_link_show_fdinfo+0x390/0x390
[  355.543465][ T6213]  ? lock_chain_count+0x20/0x20
[  355.548326][ T6213]  __x64_sys_bpf+0x7c/0x90
[  355.552739][ T6213]  do_syscall_64+0x55/0xb0
[  355.557158][ T6213]  ? clear_bhb_loop+0x40/0x90
[  355.561932][ T6213]  ? clear_bhb_loop+0x40/0x90
[  355.566604][ T6213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  355.572584][ T6213] RIP: 0033:0x7f0affd9de59
[  355.577037][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.596678][ T6213] RSP: 002b:00007f0b00bc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  355.605100][ T6213] RAX: ffffffffffffffda RBX: 00007f0b00026090 RCX: 00007f0affd9de59
[  355.613068][ T6213] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  355.621065][ T6213] RBP: 00007f0b00bc1090 R08: 0000000000000000 R09: 0000000000000000
[  355.629034][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.637017][ T6213] R13: 00007f0b00026128 R14: 00007f0b00026090 R15: 00007ffd3dce4318
[  355.645016][ T6213]  </TASK>
[  355.692685][ T6219] warning: `syz.0.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  355.859570][ T6224] netlink: 'syz.1.118': attribute type 1 has an invalid length.
[  355.868203][ T6224] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.118'.
[  355.880398][ T6224] netlink: 5 bytes leftover after parsing attributes in process `syz.1.118'.
[  356.914818][ T6243] netlink: 'syz.3.124': attribute type 10 has an invalid length.
[  357.069560][ T6243] veth0_vlan: left promiscuous mode
[  357.111906][ T6243] veth0_vlan: entered promiscuous mode
[  357.156624][ T6243] team0: Device veth0_vlan failed to register rx_handler
[  357.195873][ T6247] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[  357.204279][ T6247] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.126'.
[  357.437117][ T6253] FAULT_INJECTION: forcing a failure.
[  357.437117][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  357.473753][ T6253] CPU: 0 PID: 6253 Comm: syz.1.129 Not tainted syzkaller #0
[  357.481102][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  357.491181][ T6253] Call Trace:
[  357.494479][ T6253]  <TASK>
[  357.497426][ T6253]  dump_stack_lvl+0x18c/0x250
[  357.502143][ T6253]  ? show_regs_print_info+0x20/0x20
[  357.507373][ T6253]  ? load_image+0x420/0x420
[  357.512952][ T6253]  ? __might_fault+0xaa/0x120
[  357.517702][ T6253]  ? __lock_acquire+0x7d80/0x7d80
[  357.522778][ T6253]  should_fail_ex+0x394/0x4c0
[  357.527494][ T6253]  _copy_from_user+0x2f/0xe0
[  357.532110][ T6253]  ___sys_sendmsg+0x1c7/0x360
[  357.536970][ T6253]  ? __sys_sendmsg+0x2b0/0x2b0
[  357.542052][ T6253]  ? ktime_get+0x7f/0x280
[  357.546441][ T6253]  __se_sys_sendmsg+0x1d0/0x2c0
[  357.551353][ T6253]  ? perf_trace_preemptirq_template+0x269/0x330
[  357.557645][ T6253]  ? __x64_sys_sendmsg+0x80/0x80
[  357.560279][ T6252] netlink: 'syz.3.127': attribute type 3 has an invalid length.
[  357.562604][ T6253]  ? lockdep_hardirqs_on+0x98/0x150
[  357.562634][ T6253]  do_syscall_64+0x55/0xb0
[  357.562658][ T6253]  ? clear_bhb_loop+0x40/0x90
[  357.562674][ T6253]  ? clear_bhb_loop+0x40/0x90
[  357.562692][ T6253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  357.571960][ T6252] __nla_validate_parse: 1 callbacks suppressed
[  357.572271][ T6252] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.127'.
[  357.575622][ T6253] RIP: 0033:0x7f0affd9de59
[  357.575645][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.575659][ T6253] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  357.575678][ T6253] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  357.575690][ T6253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  357.575700][ T6253] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  357.575710][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.575721][ T6253] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  357.575755][ T6253]  </TASK>
[  357.760539][ T6259] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[  357.782939][ T6259] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.130'.
[  357.792932][ T6259] netlink: 5 bytes leftover after parsing attributes in process `syz.0.130'.
[  358.348739][ T6276] FAULT_INJECTION: forcing a failure.
[  358.348739][ T6276] name failslab, interval 1, probability 0, space 0, times 1
[  358.361669][ T6276] CPU: 1 PID: 6276 Comm: syz.0.138 Not tainted syzkaller #0
[  358.369021][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  358.379107][ T6276] Call Trace:
[  358.382404][ T6276]  <TASK>
[  358.385351][ T6276]  dump_stack_lvl+0x18c/0x250
[  358.390056][ T6276]  ? verify_lock_unused+0x140/0x140
[  358.395275][ T6276]  ? show_regs_print_info+0x20/0x20
[  358.400494][ T6276]  ? load_image+0x420/0x420
[  358.405020][ T6276]  ? perf_trace_lock+0xfc/0x3b0
[  358.409908][ T6276]  ? trace_event_raw_event_lock+0x240/0x240
[  358.415838][ T6276]  should_fail_ex+0x394/0x4c0
[  358.420541][ T6276]  should_failslab+0x9/0x20
[  358.425061][ T6276]  slab_pre_alloc_hook+0x59/0x300
[  358.430147][ T6276]  ? dst_cow_metrics_generic+0x56/0x1b0
[  358.435774][ T6276]  __kmem_cache_alloc_node+0x53/0x250
[  358.441161][ T6276]  ? dst_cow_metrics_generic+0x56/0x1b0
[  358.446719][ T6276]  kmalloc_trace+0x2a/0xe0
[  358.451143][ T6276]  dst_cow_metrics_generic+0x56/0x1b0
[  358.456529][ T6276]  rt6_do_update_pmtu+0x118/0x560
[  358.461657][ T6276]  __ip6_rt_update_pmtu+0x311/0xd40
[  358.466864][ T6276]  ? __asan_memset+0x22/0x40
[  358.471457][ T6276]  ? ip6_update_pmtu+0x360/0x360
[  358.476400][ T6276]  ? xfrm_lookup_with_ifid+0x167f/0x1950
[  358.482123][ T6276]  ? __xfrm_sk_clone_policy+0x850/0x850
[  358.487679][ T6276]  ? ip6_rt_update_pmtu+0x35/0xc0
[  358.492704][ T6276]  ? ip6_link_failure+0x4c0/0x4c0
[  358.497734][ T6276]  tnl_update_pmtu+0x5b1/0x1040
[  358.502665][ T6276]  ip_tunnel_xmit+0xd2b/0x25b0
[  358.507464][ T6276]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  358.512517][ T6276]  ? validate_xmit_xfrm+0xbb/0x1340
[  358.517724][ T6276]  ? skb_push+0x8e/0xe0
[  358.521911][ T6276]  ipgre_xmit+0x7eb/0xb70
[  358.526252][ T6276]  dev_hard_start_xmit+0x269/0x790
[  358.531511][ T6276]  ? __dev_queue_xmit+0x275/0x3630
[  358.536642][ T6276]  __dev_queue_xmit+0x198c/0x3630
[  358.541707][ T6276]  ? __dev_queue_xmit+0x275/0x3630
[  358.546852][ T6276]  ? netdev_core_pick_tx+0x370/0x370
[  358.552146][ T6276]  ? pskb_expand_head+0x17a/0x1150
[  358.557265][ T6276]  ? pskb_expand_head+0x17a/0x1150
[  358.562377][ T6276]  ? skb_release_data+0x1de/0x7f0
[  358.567417][ T6276]  ? __bpf_redirect+0x4d1/0xdf0
[  358.572356][ T6276]  __bpf_tx_skb+0x181/0x260
[  358.576906][ T6276]  bpf_clone_redirect+0x315/0x4a0
[  358.581945][ T6276]  bpf_prog_973cd02a7a0e8181+0x5e/0x63
[  358.587507][ T6276]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  358.593494][ T6276]  ? __lock_acquire+0x7d80/0x7d80
[  358.598525][ T6276]  ? lock_chain_count+0x20/0x20
[  358.603377][ T6276]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  358.609622][ T6276]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  358.614920][ T6276]  ? ktime_get+0x7f/0x280
[  358.619348][ T6276]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  358.625596][ T6276]  ? ktime_get_real_ts64+0x440/0x440
[  358.630881][ T6276]  ? __x64_sys_bpf+0x7c/0x90
[  358.635474][ T6276]  ? __local_bh_disable_ip+0x108/0x1a0
[  358.640965][ T6276]  ? __cant_sleep+0x220/0x220
[  358.645659][ T6276]  ? read_tsc+0x9/0x20
[  358.649766][ T6276]  ? ktime_get+0x24b/0x280
[  358.654203][ T6276]  ? bpf_test_run+0x174/0x870
[  358.658888][ T6276]  bpf_test_run+0x2df/0x870
[  358.663408][ T6276]  ? bpf_test_run+0x174/0x870
[  358.668090][ T6276]  ? dst_hold+0x70/0x70
[  358.672282][ T6276]  ? eth_get_headlen+0x210/0x210
[  358.677353][ T6276]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  358.682759][ T6276]  ? cpu_online+0x60/0x60
[  358.687096][ T6276]  bpf_prog_test_run+0x31f/0x390
[  358.692047][ T6276]  __sys_bpf+0x49d/0x890
[  358.696303][ T6276]  ? bpf_link_show_fdinfo+0x390/0x390
[  358.701693][ T6276]  ? lock_chain_count+0x20/0x20
[  358.706554][ T6276]  __x64_sys_bpf+0x7c/0x90
[  358.710973][ T6276]  do_syscall_64+0x55/0xb0
[  358.715446][ T6276]  ? clear_bhb_loop+0x40/0x90
[  358.720227][ T6276]  ? clear_bhb_loop+0x40/0x90
[  358.724928][ T6276]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  358.730832][ T6276] RIP: 0033:0x7fb60bf9de59
[  358.735253][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.755043][ T6276] RSP: 002b:00007fb60ceba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  358.763471][ T6276] RAX: ffffffffffffffda RBX: 00007fb60c225fa0 RCX: 00007fb60bf9de59
[  358.771447][ T6276] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  358.779505][ T6276] RBP: 00007fb60ceba090 R08: 0000000000000000 R09: 0000000000000000
[  358.787474][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  358.795448][ T6276] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  358.803458][ T6276]  </TASK>
[  358.949737][ T6270] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[  358.959665][ T6270] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.135'.
[  358.973361][ T6270] netlink: 9 bytes leftover after parsing attributes in process `syz.1.135'.
[  359.366517][ T6290] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[  359.379768][ T6290] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.142'.
[  359.410357][ T6290] netlink: 5 bytes leftover after parsing attributes in process `syz.1.142'.
[  361.790447][ T6336] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.156'.
[  361.942798][ T6331] syzkaller0: entered promiscuous mode
[  361.951244][ T6331] syzkaller0: entered allmulticast mode
[  361.962956][ T6341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  364.669686][ T6384] netlink: 'syz.0.172': attribute type 17 has an invalid length.
[  364.680700][ T6384] netlink: 148 bytes leftover after parsing attributes in process `syz.0.172'.
[  365.857449][ T6425] netlink: 'syz.0.188': attribute type 46 has an invalid length.
[  366.064821][ T6429] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[  366.072737][ T6429] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.190'.
[  366.090546][ T6429] netlink: 5 bytes leftover after parsing attributes in process `syz.1.190'.
[  366.224708][ T6435] netlink: 'syz.3.193': attribute type 10 has an invalid length.
[  366.262458][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.319325][ T6435] bridge_slave_1: left allmulticast mode
[  366.355692][ T6435] bridge_slave_1: left promiscuous mode
[  366.384976][ T6440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.193'.
[  366.424796][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.021181][ T6460] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[  367.050309][ T6460] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.202'.
[  367.078820][ T6460] netlink: 5 bytes leftover after parsing attributes in process `syz.0.202'.
[  367.501869][ T6479] netlink: 'syz.2.209': attribute type 10 has an invalid length.
[  367.530193][ T6479] veth0_vlan: left promiscuous mode
[  367.552176][ T6479] veth0_vlan: entered promiscuous mode
[  367.607817][ T6479] team0: Device veth0_vlan failed to register rx_handler
[  367.619056][ T6484] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.211'.
[  367.813361][ T6489] netlink: 'syz.2.212': attribute type 21 has an invalid length.
[  367.830178][ T6489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.212'.
[  368.071299][ T6494] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[  368.086092][ T6494] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.215'.
[  368.123338][ T6494] netlink: 5 bytes leftover after parsing attributes in process `syz.2.215'.
[  368.591553][ T6510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.811821][ T6536] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[  369.840028][ T6536] __nla_validate_parse: 3 callbacks suppressed
[  369.840064][ T6536] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.228'.
[  369.880573][ T6536] netlink: 5 bytes leftover after parsing attributes in process `syz.1.228'.
[  370.189921][ T6555] netlink: 'syz.3.235': attribute type 21 has an invalid length.
[  370.999907][ T6563] netlink: 'syz.0.238': attribute type 10 has an invalid length.
[  371.012310][ T6563] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  371.202490][ T6573] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[  371.215183][ T6573] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.242'.
[  371.225401][ T6573] netlink: 5 bytes leftover after parsing attributes in process `syz.2.242'.
[  371.436162][ T6578] FAULT_INJECTION: forcing a failure.
[  371.436162][ T6578] name failslab, interval 1, probability 0, space 0, times 0
[  371.454663][ T6578] CPU: 1 PID: 6578 Comm: syz.1.244 Not tainted syzkaller #0
[  371.462016][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  371.472104][ T6578] Call Trace:
[  371.475408][ T6578]  <TASK>
[  371.478360][ T6578]  dump_stack_lvl+0x18c/0x250
[  371.483074][ T6578]  ? show_regs_print_info+0x20/0x20
[  371.488306][ T6578]  ? load_image+0x420/0x420
[  371.492844][ T6578]  ? __might_sleep+0xe0/0xe0
[  371.497472][ T6578]  ? __lock_acquire+0x7d80/0x7d80
[  371.502527][ T6578]  should_fail_ex+0x394/0x4c0
[  371.507240][ T6578]  should_failslab+0x9/0x20
[  371.511771][ T6578]  slab_pre_alloc_hook+0x59/0x300
[  371.516912][ T6578]  ? apparmor_sk_alloc_security+0x77/0x100
[  371.522792][ T6578]  __kmem_cache_alloc_node+0x53/0x250
[  371.528187][ T6578]  ? apparmor_sk_alloc_security+0x77/0x100
[  371.534015][ T6578]  kmalloc_trace+0x2a/0xe0
[  371.538446][ T6578]  apparmor_sk_alloc_security+0x77/0x100
[  371.544091][ T6578]  security_sk_alloc+0x6e/0xa0
[  371.548899][ T6578]  sk_prot_alloc+0x101/0x210
[  371.553504][ T6578]  ? sk_alloc+0x24/0x350
[  371.557771][ T6578]  sk_alloc+0x3a/0x350
[  371.561849][ T6578]  ? bpf_ctx_init+0x154/0x190
[  371.566536][ T6578]  bpf_prog_test_run_skb+0x371/0x18f0
[  371.571914][ T6578]  ? __fget_files+0x28/0x460
[  371.576543][ T6578]  ? __fget_files+0x3fc/0x460
[  371.581233][ T6578]  ? cpu_online+0x60/0x60
[  371.585601][ T6578]  bpf_prog_test_run+0x31f/0x390
[  371.590542][ T6578]  __sys_bpf+0x49d/0x890
[  371.594785][ T6578]  ? bpf_link_show_fdinfo+0x390/0x390
[  371.600167][ T6578]  ? lock_chain_count+0x20/0x20
[  371.605024][ T6578]  __x64_sys_bpf+0x7c/0x90
[  371.609533][ T6578]  do_syscall_64+0x55/0xb0
[  371.613957][ T6578]  ? clear_bhb_loop+0x40/0x90
[  371.618681][ T6578]  ? clear_bhb_loop+0x40/0x90
[  371.623366][ T6578]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  371.629272][ T6578] RIP: 0033:0x7f0affd9de59
[  371.633694][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.653307][ T6578] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  371.662154][ T6578] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  371.670124][ T6578] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  371.678116][ T6578] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  371.686191][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.694169][ T6578] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  371.702166][ T6578]  </TASK>
[  372.956755][ T6606] netlink: 'syz.3.253': attribute type 1 has an invalid length.
[  372.983804][ T6606] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.253'.
[  373.033427][ T6606] netlink: 5 bytes leftover after parsing attributes in process `syz.3.253'.
[  373.677463][ T6624] netlink: 830 bytes leftover after parsing attributes in process `syz.1.258'.
[  374.266823][ T6642] netlink: 'syz.0.267': attribute type 1 has an invalid length.
[  374.322715][ T6642] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.267'.
[  374.348130][ T6642] netlink: 5 bytes leftover after parsing attributes in process `syz.0.267'.
[  374.623339][ T6658] syzkaller0: entered promiscuous mode
[  374.632140][ T6658] syzkaller0: entered allmulticast mode
[  375.444333][ T6679] netlink: 'syz.3.279': attribute type 1 has an invalid length.
[  375.453883][ T6679] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.279'.
[  375.465464][ T6679] netlink: 5 bytes leftover after parsing attributes in process `syz.3.279'.
[  376.687785][ T6681] netlink: 'syz.3.280': attribute type 21 has an invalid length.
[  376.703660][ T6681] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.712393][ T6681] IPv6: Can't replace route, no match found
[  376.744895][ T6684] netlink: 'syz.3.280': attribute type 10 has an invalid length.
[  376.818930][ T6684] wg1: entered promiscuous mode
[  376.832349][ T6684] wg1: entered allmulticast mode
[  376.838829][ T6684] team0: Device wg1 is of different type
[  377.290579][ T6694] netlink: 'syz.2.285': attribute type 29 has an invalid length.
[  377.395010][ T6707] FAULT_INJECTION: forcing a failure.
[  377.395010][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.436229][ T6694] netlink: 'syz.2.285': attribute type 29 has an invalid length.
[  377.448491][ T6706] netlink: 'syz.1.288': attribute type 1 has an invalid length.
[  377.470410][ T6707] CPU: 0 PID: 6707 Comm: syz.0.289 Not tainted syzkaller #0
[  377.477789][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  377.487871][ T6707] Call Trace:
[  377.491180][ T6707]  <TASK>
[  377.494132][ T6707]  dump_stack_lvl+0x18c/0x250
[  377.498851][ T6707]  ? show_regs_print_info+0x20/0x20
[  377.504091][ T6707]  ? load_image+0x420/0x420
[  377.508630][ T6707]  ? __might_fault+0xaa/0x120
[  377.513343][ T6707]  ? __lock_acquire+0x7d80/0x7d80
[  377.518410][ T6707]  should_fail_ex+0x394/0x4c0
[  377.523129][ T6707]  _copy_from_iter+0x1cd/0x1290
[  377.528021][ T6707]  ? sock_alloc_send_pskb+0x8a1/0x9a0
[  377.533435][ T6707]  ? copyout_mc+0x70/0x70
[  377.537894][ T6707]  ? __virt_addr_valid+0x10c/0x380
[  377.543047][ T6707]  ? __virt_addr_valid+0x10c/0x380
[  377.548199][ T6707]  ? __virt_addr_valid+0x10c/0x380
[  377.553372][ T6707]  ? __check_object_size+0x4fc/0xa40
[  377.558716][ T6707]  skb_copy_datagram_from_iter+0xf2/0x6f0
[  377.564467][ T6707]  ? skb_put+0x112/0x210
[  377.568736][ T6707]  unix_stream_sendmsg+0x562/0xbf0
[  377.573925][ T6707]  ? unix_show_fdinfo+0x280/0x280
[  377.578976][ T6707]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  377.581710][ T6695] netlink: 'syz.2.285': attribute type 29 has an invalid length.
[  377.585458][ T6707]  ? apparmor_socket_sendmsg+0x8e/0x330
[  377.585484][ T6707]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  377.585503][ T6707]  ? security_socket_sendmsg+0x80/0xa0
[  377.585525][ T6707]  ? unix_show_fdinfo+0x280/0x280
[  377.585550][ T6707]  ____sys_sendmsg+0x61b/0x980
[  377.585583][ T6707]  ? __sys_sendmsg_sock+0x30/0x30
[  377.624538][ T6707]  ? __import_iovec+0x5f2/0x850
[  377.629418][ T6707]  ? import_iovec+0x73/0xa0
[  377.633930][ T6707]  ___sys_sendmsg+0x2a6/0x360
[  377.638611][ T6707]  ? get_pid_task+0x20/0x1e0
[  377.643209][ T6707]  ? __sys_sendmsg+0x2b0/0x2b0
[  377.647998][ T6707]  ? __lock_acquire+0x7d80/0x7d80
[  377.653067][ T6707]  __se_sys_sendmsg+0x1d0/0x2c0
[  377.657947][ T6707]  ? __x64_sys_sendmsg+0x80/0x80
[  377.662937][ T6707]  ? lockdep_hardirqs_on+0x98/0x150
[  377.668158][ T6707]  do_syscall_64+0x55/0xb0
[  377.672588][ T6707]  ? clear_bhb_loop+0x40/0x90
[  377.677263][ T6707]  ? clear_bhb_loop+0x40/0x90
[  377.681940][ T6707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  377.687844][ T6707] RIP: 0033:0x7fb60bf9de59
[  377.692263][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.711896][ T6707] RSP: 002b:00007fb60ceba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.720331][ T6707] RAX: ffffffffffffffda RBX: 00007fb60c225fa0 RCX: 00007fb60bf9de59
[  377.728312][ T6707] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000003
[  377.736295][ T6707] RBP: 00007fb60ceba090 R08: 0000000000000000 R09: 0000000000000000
[  377.744277][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  377.752250][ T6707] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  377.760245][ T6707]  </TASK>
[  377.770325][ T6706] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.288'.
[  377.789875][ T6706] netlink: 5 bytes leftover after parsing attributes in process `syz.1.288'.
[  378.112057][ T6725] netlink: 'syz.2.295': attribute type 39 has an invalid length.
[  378.378709][ T6738] netlink: 14 bytes leftover after parsing attributes in process `syz.1.297'.
[  378.404462][ T6738] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  378.650083][ T6746] netlink: 'syz.0.301': attribute type 1 has an invalid length.
[  378.677159][ T6746] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.301'.
[  378.698506][ T6746] netlink: 5 bytes leftover after parsing attributes in process `syz.0.301'.
[  378.800104][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.808113][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  378.935836][ T6758] netlink: 'syz.1.300': attribute type 3 has an invalid length.
[  379.022559][ T6758] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.300'.
[  380.127613][ T6824] netlink: 164 bytes leftover after parsing attributes in process `syz.2.311'.
[  380.243824][ T6827] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.312'.
[  380.472997][ T6832] __nla_validate_parse: 1 callbacks suppressed
[  380.473037][ T6832] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.314'.
[  381.307181][ T6859] validate_nla: 2 callbacks suppressed
[  381.307232][ T6859] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[  381.322474][ T6859] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.323'.
[  381.340651][ T6859] netlink: 5 bytes leftover after parsing attributes in process `syz.2.323'.
[  381.697159][ T6875] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.329'.
[  381.904355][ T6881] netlink: 'syz.3.332': attribute type 10 has an invalid length.
[  381.929194][ T6881] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  381.995601][ T6883] netlink: 'syz.0.333': attribute type 9 has an invalid length.
[  382.015656][ T6883] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.333'.
[  382.268510][ T6885] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  382.283415][ T6890] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[  382.292130][ T6890] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.336'.
[  382.305737][ T6890] netlink: 5 bytes leftover after parsing attributes in process `syz.0.336'.
[  382.560515][ T6898] FAULT_INJECTION: forcing a failure.
[  382.560515][ T6898] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.609304][ T6898] CPU: 1 PID: 6898 Comm: syz.0.340 Not tainted syzkaller #0
[  382.616663][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  382.626782][ T6898] Call Trace:
[  382.630089][ T6898]  <TASK>
[  382.633043][ T6898]  dump_stack_lvl+0x18c/0x250
[  382.637759][ T6898]  ? show_regs_print_info+0x20/0x20
[  382.642999][ T6898]  ? load_image+0x420/0x420
[  382.647563][ T6898]  ? __might_fault+0xaa/0x120
[  382.652240][ T6898]  should_fail_ex+0x394/0x4c0
[  382.656932][ T6898]  copyin+0x1a/0x90
[  382.660782][ T6898]  _copy_from_iter+0x532/0x1290
[  382.665673][ T6898]  ? copyout_mc+0x70/0x70
[  382.670054][ T6898]  ? __virt_addr_valid+0x10c/0x380
[  382.675184][ T6898]  ? __virt_addr_valid+0x10c/0x380
[  382.680329][ T6898]  ? __virt_addr_valid+0x10c/0x380
[  382.685480][ T6898]  ? __check_object_size+0x4fc/0xa40
[  382.690797][ T6898]  netlink_sendmsg+0x76b/0xbf0
[  382.695700][ T6898]  ? netlink_getsockopt+0x590/0x590
[  382.700951][ T6898]  ? apparmor_socket_sendmsg+0x8e/0x330
[  382.706529][ T6898]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  382.711843][ T6898]  ? security_socket_sendmsg+0x80/0xa0
[  382.717334][ T6898]  ? netlink_getsockopt+0x590/0x590
[  382.722584][ T6898]  ____sys_sendmsg+0x61b/0x980
[  382.727361][ T6898]  ? __asan_memset+0x22/0x40
[  382.731957][ T6898]  ? __sys_sendmsg_sock+0x30/0x30
[  382.736977][ T6898]  ? __import_iovec+0x3fa/0x850
[  382.741824][ T6898]  ? import_iovec+0x73/0xa0
[  382.746321][ T6898]  ___sys_sendmsg+0x2a6/0x360
[  382.751105][ T6898]  ? get_pid_task+0x20/0x1e0
[  382.755693][ T6898]  ? __sys_sendmsg+0x2b0/0x2b0
[  382.760487][ T6898]  ? __lock_acquire+0x7d80/0x7d80
[  382.765528][ T6898]  __se_sys_sendmsg+0x1d0/0x2c0
[  382.770377][ T6898]  ? __x64_sys_sendmsg+0x80/0x80
[  382.775341][ T6898]  ? lockdep_hardirqs_on+0x98/0x150
[  382.780566][ T6898]  do_syscall_64+0x55/0xb0
[  382.785004][ T6898]  ? clear_bhb_loop+0x40/0x90
[  382.789685][ T6898]  ? clear_bhb_loop+0x40/0x90
[  382.794412][ T6898]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  382.800359][ T6898] RIP: 0033:0x7fb60bf9de59
[  382.804783][ T6898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.824403][ T6898] RSP: 002b:00007fb60ceba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.832830][ T6898] RAX: ffffffffffffffda RBX: 00007fb60c225fa0 RCX: 00007fb60bf9de59
[  382.840835][ T6898] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  382.849273][ T6898] RBP: 00007fb60ceba090 R08: 0000000000000000 R09: 0000000000000000
[  382.857360][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.865338][ T6898] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  382.873416][ T6898]  </TASK>
[  383.448491][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.347'.
[  383.466511][ T6923] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[  383.516809][ T6923] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.348'.
[  383.582904][ T6923] netlink: 5 bytes leftover after parsing attributes in process `syz.1.348'.
[  383.679471][ T6920] netlink: 'syz.0.347': attribute type 10 has an invalid length.
[  383.721679][ T6920] FAULT_INJECTION: forcing a failure.
[  383.721679][ T6920] name failslab, interval 1, probability 0, space 0, times 0
[  383.770908][ T6920] CPU: 1 PID: 6920 Comm: syz.0.347 Not tainted syzkaller #0
[  383.778284][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  383.788376][ T6920] Call Trace:
[  383.791726][ T6920]  <TASK>
[  383.794693][ T6920]  dump_stack_lvl+0x18c/0x250
[  383.799445][ T6920]  ? show_regs_print_info+0x20/0x20
[  383.804697][ T6920]  ? load_image+0x420/0x420
[  383.809251][ T6920]  ? __lock_acquire+0x7d80/0x7d80
[  383.814327][ T6920]  should_fail_ex+0x394/0x4c0
[  383.819054][ T6920]  should_failslab+0x9/0x20
[  383.823600][ T6920]  slab_pre_alloc_hook+0x59/0x300
[  383.828683][ T6920]  ? check_preemption_disabled+0x2e/0x110
[  383.834473][ T6920]  kmem_cache_alloc_node+0x5e/0x310
[  383.839740][ T6920]  ? __alloc_skb+0x103/0x2c0
[  383.844400][ T6920]  __alloc_skb+0x103/0x2c0
[  383.848882][ T6920]  rtmsg_ifinfo_build_skb+0x83/0x260
[  383.854232][ T6920]  rtnetlink_event+0x1b7/0x260
[  383.859058][ T6920]  notifier_call_chain+0x18f/0x380
[  383.864237][ T6920]  __netdev_upper_dev_unlink+0x206/0x7b0
[  383.869975][ T6920]  ? netdev_upper_dev_unlink+0xe0/0xe0
[  383.875510][ T6920]  ? netdev_upper_dev_unlink+0x8c/0xe0
[  383.881039][ T6920]  netdev_upper_dev_unlink+0x9a/0xe0
[  383.886384][ T6920]  ? netdev_master_upper_dev_link+0x100/0x100
[  383.892509][ T6920]  ? lockdep_rtnl_is_held+0x26/0x30
[  383.897753][ T6920]  ? macsec_del_dev+0x2f1/0x300
[  383.902713][ T6920]  macsec_common_dellink+0x312/0x3a0
[  383.908052][ T6920]  ? macsec_decrypt_done+0x9d0/0x9d0
[  383.913396][ T6920]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  383.919445][ T6920]  ? lock_chain_count+0x20/0x20
[  383.924363][ T6920]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  383.930665][ T6920]  ? lockdep_hardirqs_on+0x98/0x150
[  383.935934][ T6920]  macsec_dellink+0xe9/0x140
[  383.940573][ T6920]  ? macsec_changelink+0x550/0x550
[  383.945725][ T6920]  rtnl_dellink+0x4ed/0x7c0
[  383.950286][ T6920]  ? rtnl_newlink+0x2170/0x2170
[  383.955323][ T6920]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  383.960492][ T6920]  ? mutex_lock_nested+0x20/0x20
[  383.965615][ T6920]  ? rtnl_newlink+0x2170/0x2170
[  383.970518][ T6920]  rtnetlink_rcv_msg+0x843/0xf90
[  383.975510][ T6920]  ? rtnetlink_rcv_msg+0x220/0xf90
[  383.980678][ T6920]  ? rtnetlink_bind+0x80/0x80
[  383.985412][ T6920]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  383.991380][ T6920]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  383.997155][ T6920]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  384.002933][ T6920]  ? perf_trace_lock+0x303/0x3b0
[  384.007940][ T6920]  netlink_rcv_skb+0x235/0x4c0
[  384.012748][ T6920]  ? rtnetlink_bind+0x80/0x80
[  384.017477][ T6920]  ? netlink_ack+0x1160/0x1160
[  384.022318][ T6920]  ? __lock_acquire+0x7d80/0x7d80
[  384.027400][ T6920]  ? net_generic+0x1e/0x240
[  384.031963][ T6920]  ? netlink_deliver_tap+0x2e/0x1b0
[  384.037208][ T6920]  netlink_unicast+0x7b1/0x930
[  384.042055][ T6920]  netlink_sendmsg+0x8d0/0xbf0
[  384.046970][ T6920]  ? netlink_getsockopt+0x590/0x590
[  384.052310][ T6920]  ? apparmor_socket_sendmsg+0x8e/0x330
[  384.057910][ T6920]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  384.063238][ T6920]  ? security_socket_sendmsg+0x80/0xa0
[  384.068745][ T6920]  ? netlink_getsockopt+0x590/0x590
[  384.073997][ T6920]  ____sys_sendmsg+0x61b/0x980
[  384.078845][ T6920]  ? __asan_memset+0x22/0x40
[  384.083496][ T6920]  ? __sys_sendmsg_sock+0x30/0x30
[  384.088648][ T6920]  ? __import_iovec+0x5f2/0x850
[  384.093607][ T6920]  ? import_iovec+0x73/0xa0
[  384.098162][ T6920]  ___sys_sendmsg+0x2a6/0x360
[  384.102986][ T6920]  ? __sys_sendmsg+0x2b0/0x2b0
[  384.107836][ T6920]  ? ktime_get+0x7f/0x280
[  384.112271][ T6920]  __se_sys_sendmsg+0x1d0/0x2c0
[  384.117167][ T6920]  ? perf_trace_preemptirq_template+0x269/0x330
[  384.123458][ T6920]  ? __x64_sys_sendmsg+0x80/0x80
[  384.128472][ T6920]  ? lockdep_hardirqs_on+0x98/0x150
[  384.133722][ T6920]  do_syscall_64+0x55/0xb0
[  384.138182][ T6920]  ? clear_bhb_loop+0x40/0x90
[  384.142895][ T6920]  ? clear_bhb_loop+0x40/0x90
[  384.147614][ T6920]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  384.153550][ T6920] RIP: 0033:0x7fb60bf9de59
[  384.157999][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.178252][ T6920] RSP: 002b:00007fb60ceba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  384.186720][ T6920] RAX: ffffffffffffffda RBX: 00007fb60c225fa0 RCX: 00007fb60bf9de59
[  384.194736][ T6920] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b
[  384.202740][ T6920] RBP: 00007fb60ceba090 R08: 0000000000000000 R09: 0000000000000000
[  384.210721][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.218698][ T6920] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  384.226707][ T6920]  </TASK>
[  384.345360][ T6920] veth1_macvtap: left promiscuous mode
[  385.125907][ T6953] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[  385.788118][ T6977] __nla_validate_parse: 2 callbacks suppressed
[  385.788142][ T6977] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.367'.
[  386.031565][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.369'.
[  386.074020][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  386.199491][ T6986] netlink: 'syz.3.370': attribute type 1 has an invalid length.
[  386.212532][ T6986] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.370'.
[  386.286959][ T6986] netlink: 5 bytes leftover after parsing attributes in process `syz.3.370'.
[  386.976946][ T7018] netlink: 'syz.3.382': attribute type 1 has an invalid length.
[  386.986916][ T7018] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.382'.
[  387.239954][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.386'.
[  387.323912][ T7024] netlink: 'syz.1.386': attribute type 10 has an invalid length.
[  387.357062][ T7024] veth1_macvtap: left promiscuous mode
[  387.772924][ T7030] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[  388.618587][ T7041] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[  388.678430][ T7041] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.391'.
[  388.700722][ T7041] netlink: 5 bytes leftover after parsing attributes in process `syz.2.391'.
[  389.222957][ T7057] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.395'.
[  389.941733][ T7068] FAULT_INJECTION: forcing a failure.
[  389.941733][ T7068] name failslab, interval 1, probability 0, space 0, times 0
[  389.954696][ T7068] CPU: 0 PID: 7068 Comm: syz.1.402 Not tainted syzkaller #0
[  389.962018][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  389.972147][ T7068] Call Trace:
[  389.975518][ T7068]  <TASK>
[  389.978447][ T7068]  dump_stack_lvl+0x18c/0x250
[  389.983146][ T7068]  ? show_regs_print_info+0x20/0x20
[  389.988362][ T7068]  ? load_image+0x420/0x420
[  389.992881][ T7068]  should_fail_ex+0x394/0x4c0
[  389.997562][ T7068]  should_failslab+0x9/0x20
[  390.002062][ T7068]  slab_pre_alloc_hook+0x59/0x300
[  390.007086][ T7068]  ? kmem_cache_alloc_node+0x1d7/0x310
[  390.012543][ T7068]  ? kmalloc_reserve+0x95/0x240
[  390.017403][ T7068]  kmem_cache_alloc_node+0x5e/0x310
[  390.022598][ T7068]  ? __alloc_skb+0x103/0x2c0
[  390.027205][ T7068]  __alloc_skb+0x103/0x2c0
[  390.031651][ T7068]  skb_segment+0xebd/0x4070
[  390.036177][ T7068]  ? skb_segment+0x7d1/0x4070
[  390.040893][ T7068]  tcp_gso_segment+0x408/0x1950
[  390.045784][ T7068]  ? sk_setup_caps+0x940/0x940
[  390.050564][ T7068]  ipv6_gso_segment+0xb8e/0x2170
[  390.055594][ T7068]  ? inet6_del_offload+0x50/0x50
[  390.060532][ T7068]  ? skb_crc32c_csum_help+0x510/0x510
[  390.065906][ T7068]  ? inet6_del_offload+0x50/0x50
[  390.070946][ T7068]  skb_mac_gso_segment+0x320/0x640
[  390.076159][ T7068]  ? skb_mac_gso_segment+0x185/0x640
[  390.081489][ T7068]  ? skb_eth_gso_segment+0x270/0x270
[  390.086798][ T7068]  ? passthru_features_check+0x20/0x20
[  390.092291][ T7068]  __skb_gso_segment+0x2f9/0x4a0
[  390.097240][ T7068]  validate_xmit_skb+0x549/0xf30
[  390.102186][ T7068]  ? validate_xmit_skb_list+0x120/0x120
[  390.107729][ T7068]  ? __might_fault+0xaa/0x120
[  390.112416][ T7068]  __dev_queue_xmit+0x13a9/0x3630
[  390.117458][ T7068]  ? __dev_queue_xmit+0x275/0x3630
[  390.122673][ T7068]  ? netdev_core_pick_tx+0x370/0x370
[  390.127953][ T7068]  ? virtio_net_hdr_to_skb+0xc5a/0x1470
[  390.133538][ T7068]  ? packet_parse_headers+0x7dd/0xae0
[  390.138938][ T7068]  ? skb_setup_tx_timestamp+0x1f0/0x1f0
[  390.144486][ T7068]  ? packet_extra_vlan_len_allowed+0x200/0x200
[  390.150636][ T7068]  ? skb_copy_datagram_from_iter+0x63c/0x6f0
[  390.156625][ T7068]  ? packet_xmit+0x66/0x340
[  390.161129][ T7068]  ? packet_sendmsg+0x3989/0x4c70
[  390.166155][ T7068]  packet_sendmsg+0x3a7b/0x4c70
[  390.171017][ T7068]  ? balance_push_set+0x140/0x370
[  390.176054][ T7068]  ? aa_sk_perm+0x83c/0x970
[  390.180559][ T7068]  ? packet_getsockopt+0xad0/0xad0
[  390.185672][ T7068]  ? tomoyo_write_file+0x1f0/0xc50
[  390.190778][ T7068]  ? aa_sock_msg_perm+0x94/0x150
[  390.195708][ T7068]  ? apparmor_socket_sendmsg+0x8e/0x330
[  390.201252][ T7068]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  390.206534][ T7068]  ? security_socket_sendmsg+0x80/0xa0
[  390.211996][ T7068]  ? packet_getsockopt+0xad0/0xad0
[  390.217111][ T7068]  ____sys_sendmsg+0x61b/0x980
[  390.221892][ T7068]  ? __asan_memset+0x22/0x40
[  390.226490][ T7068]  ? __sys_sendmsg_sock+0x30/0x30
[  390.231600][ T7068]  ? __import_iovec+0x3fa/0x850
[  390.236454][ T7068]  ? import_iovec+0x73/0xa0
[  390.240956][ T7068]  ___sys_sendmsg+0x2a6/0x360
[  390.246154][ T7068]  ? get_pid_task+0x20/0x1e0
[  390.250747][ T7068]  ? __sys_sendmsg+0x2b0/0x2b0
[  390.255525][ T7068]  ? __lock_acquire+0x7d80/0x7d80
[  390.260567][ T7068]  __se_sys_sendmsg+0x1d0/0x2c0
[  390.265422][ T7068]  ? __x64_sys_sendmsg+0x80/0x80
[  390.270477][ T7068]  ? lockdep_hardirqs_on+0x98/0x150
[  390.275681][ T7068]  do_syscall_64+0x55/0xb0
[  390.280098][ T7068]  ? clear_bhb_loop+0x40/0x90
[  390.284767][ T7068]  ? clear_bhb_loop+0x40/0x90
[  390.289437][ T7068]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  390.295330][ T7068] RIP: 0033:0x7f0affd9de59
[  390.299758][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.319367][ T7068] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  390.327780][ T7068] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  390.335757][ T7068] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  390.343746][ T7068] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  390.351731][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  390.359706][ T7068] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  390.367695][ T7068]  </TASK>
[  390.628452][ T7075] netlink: 'syz.1.403': attribute type 1 has an invalid length.
[  390.685048][ T7075] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.403'.
[  390.865604][ T7078] netlink: 'syz.2.404': attribute type 9 has an invalid length.
[  390.928762][ T7078] __nla_validate_parse: 1 callbacks suppressed
[  390.928779][ T7078] netlink: 146672 bytes leftover after parsing attributes in process `syz.2.404'.
[  391.114358][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  392.169181][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.415'.
[  392.200295][ T5865] wlan1: Creating new IBSS network, BSSID 62:2a:35:04:52:dd
[  392.286727][ T7104] netlink: 'syz.1.415': attribute type 10 has an invalid length.
[  392.551974][ T7107] netlink: 'syz.3.414': attribute type 1 has an invalid length.
[  392.592282][ T7107] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.414'.
[  392.602615][ T7107] netlink: 5 bytes leftover after parsing attributes in process `syz.3.414'.
[  392.749675][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.759239][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.768492][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.777704][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.786939][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.796220][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.805456][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.814670][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.823865][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  392.833039][ T7111] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  394.042376][ T7124] netlink: 'syz.3.422': attribute type 10 has an invalid length.
[  394.094787][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.422'.
[  394.170594][ T7124] batman_adv: batadv0: Adding interface: virt_wifi0
[  394.188458][ T7124] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.252849][ T7124] batman_adv: batadv0: Interface activated: virt_wifi0
[  394.519149][ T7142] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[  394.544215][ T7142] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.428'.
[  394.568745][ T7142] netlink: 5 bytes leftover after parsing attributes in process `syz.2.428'.
[  395.601116][ T7170] netlink: 'syz.3.439': attribute type 1 has an invalid length.
[  395.623244][ T7172] FAULT_INJECTION: forcing a failure.
[  395.623244][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.635933][ T7170] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.439'.
[  395.641893][ T7172] CPU: 1 PID: 7172 Comm: syz.2.440 Not tainted syzkaller #0
[  395.653013][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  395.663111][ T7172] Call Trace:
[  395.666515][ T7172]  <TASK>
[  395.669488][ T7172]  dump_stack_lvl+0x18c/0x250
[  395.674222][ T7172]  ? show_regs_print_info+0x20/0x20
[  395.679472][ T7172]  ? load_image+0x420/0x420
[  395.679630][ T7170] netlink: 5 bytes leftover after parsing attributes in process `syz.3.439'.
[  395.684003][ T7172]  ? __might_fault+0xaa/0x120
[  395.684032][ T7172]  ? __lock_acquire+0x7d80/0x7d80
[  395.684062][ T7172]  should_fail_ex+0x394/0x4c0
[  395.684093][ T7172]  _copy_from_iter+0x1cd/0x1290
[  395.684116][ T7172]  ? rep_movs_alternative+0x4a/0x90
[  395.684149][ T7172]  ? copyout_mc+0x70/0x70
[  395.684178][ T7172]  ? copyout_mc+0x70/0x70
[  395.684199][ T7172]  ? __virt_addr_valid+0x10c/0x380
[  395.684229][ T7172]  ? page_copy_sane+0x16a/0x270
[  395.684257][ T7172]  copy_page_from_iter+0x7b/0x100
[  395.684287][ T7172]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  395.684340][ T7172]  tun_get_user+0xc84/0x3d70
[  395.684382][ T7172]  ? trace_event_raw_event_lock+0x150/0x240
[  395.684413][ T7172]  ? aa_file_perm+0x3e3/0xee0
[  395.684441][ T7172]  ? rcu_read_unlock+0xa0/0xa0
[  395.684486][ T7172]  ? tun_get+0x1c/0x2e0
[  395.684510][ T7172]  ? __lock_acquire+0x7d80/0x7d80
[  395.684546][ T7172]  ? tun_get+0x1c/0x2e0
[  395.684583][ T7172]  tun_chr_write_iter+0x119/0x200
[  395.684610][ T7172]  vfs_write+0x474/0x9a0
[  395.684649][ T7172]  ? file_end_write+0x250/0x250
[  395.684683][ T7172]  ? __fget_files+0x3fc/0x460
[  395.684726][ T7172]  ? __fdget_pos+0x1d8/0x330
[  395.684747][ T7172]  ? ksys_write+0x74/0x260
[  395.684777][ T7172]  ksys_write+0x151/0x260
[  395.684808][ T7172]  ? __ia32_sys_read+0x90/0x90
[  395.684842][ T7172]  ? lockdep_hardirqs_on+0x98/0x150
[  395.684873][ T7172]  do_syscall_64+0x55/0xb0
[  395.684911][ T7172]  ? clear_bhb_loop+0x40/0x90
[  395.684929][ T7172]  ? clear_bhb_loop+0x40/0x90
[  395.684952][ T7172]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.684976][ T7172] RIP: 0033:0x7f789739de59
[  395.684998][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.685015][ T7172] RSP: 002b:00007f7898220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  395.685039][ T7172] RAX: ffffffffffffffda RBX: 00007f7897625fa0 RCX: 00007f789739de59
[  395.685054][ T7172] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  395.685069][ T7172] RBP: 00007f7898220090 R08: 0000000000000000 R09: 0000000000000000
[  395.685082][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.685095][ T7172] R13: 00007f7897626038 R14: 00007f7897625fa0 R15: 00007ffc42a05dd8
[  395.685140][ T7172]  </TASK>
[  395.814928][ T7174] netlink: 'syz.0.441': attribute type 10 has an invalid length.
[  395.949762][ T7174] team0: Device syz_tun is up. Set it down before adding it as a team port
[  396.140496][ T7179] FAULT_INJECTION: forcing a failure.
[  396.140496][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.158874][ T7179] CPU: 0 PID: 7179 Comm: syz.3.443 Not tainted syzkaller #0
[  396.166223][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  396.176385][ T7179] Call Trace:
[  396.179662][ T7179]  <TASK>
[  396.182585][ T7179]  dump_stack_lvl+0x18c/0x250
[  396.187266][ T7179]  ? show_regs_print_info+0x20/0x20
[  396.192494][ T7179]  ? load_image+0x420/0x420
[  396.197015][ T7179]  ? __lock_acquire+0x7d80/0x7d80
[  396.202047][ T7179]  ? snprintf+0xe9/0x140
[  396.206294][ T7179]  should_fail_ex+0x394/0x4c0
[  396.210978][ T7179]  _copy_to_user+0x2f/0xa0
[  396.215420][ T7179]  simple_read_from_buffer+0xe7/0x150
[  396.220827][ T7179]  proc_fail_nth_read+0x1e8/0x260
[  396.225886][ T7179]  ? proc_fault_inject_write+0x360/0x360
[  396.231534][ T7179]  ? fsnotify_perm+0x271/0x5e0
[  396.236308][ T7179]  ? proc_fault_inject_write+0x360/0x360
[  396.241964][ T7179]  vfs_read+0x298/0x990
[  396.246161][ T7179]  ? kernel_read+0x1e0/0x1e0
[  396.250864][ T7179]  ? __fget_files+0x28/0x460
[  396.255489][ T7179]  ? __fget_files+0x3fc/0x460
[  396.260198][ T7179]  ? __fdget_pos+0x2a3/0x330
[  396.264798][ T7179]  ? ksys_read+0x74/0x260
[  396.269152][ T7179]  ksys_read+0x151/0x260
[  396.273431][ T7179]  ? vfs_write+0x9a0/0x9a0
[  396.277874][ T7179]  ? lockdep_hardirqs_on+0x98/0x150
[  396.283170][ T7179]  do_syscall_64+0x55/0xb0
[  396.287592][ T7179]  ? clear_bhb_loop+0x40/0x90
[  396.292271][ T7179]  ? clear_bhb_loop+0x40/0x90
[  396.296951][ T7179]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.302861][ T7179] RIP: 0033:0x7fdb2a95e68e
[  396.307273][ T7179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  396.326880][ T7179] RSP: 002b:00007fdb2b896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  396.335306][ T7179] RAX: ffffffffffffffda RBX: 00007fdb2b8976c0 RCX: 00007fdb2a95e68e
[  396.343292][ T7179] RDX: 000000000000000f RSI: 00007fdb2b8970a0 RDI: 0000000000000008
[  396.351298][ T7179] RBP: 00007fdb2b897090 R08: 0000000000000000 R09: 0000000000000000
[  396.359265][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  396.367233][ T7179] R13: 00007fdb2ac26038 R14: 00007fdb2ac25fa0 R15: 00007ffc1a575608
[  396.375234][ T7179]  </TASK>
[  396.842141][ T7196] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  396.850514][ T7196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.450'.
[  396.851380][ T7198] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[  396.891954][ T7198] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.451'.
[  396.902582][ T7198] netlink: 5 bytes leftover after parsing attributes in process `syz.2.451'.
[  397.287253][ T7211] syzkaller0: entered promiscuous mode
[  397.294904][ T7211] syzkaller0: entered allmulticast mode
[  397.475178][ T7220] netlink: 'syz.0.459': attribute type 10 has an invalid length.
[  398.265042][ T7227] FAULT_INJECTION: forcing a failure.
[  398.265042][ T7227] name failslab, interval 1, probability 0, space 0, times 0
[  398.294408][ T7227] CPU: 0 PID: 7227 Comm: syz.3.462 Not tainted syzkaller #0
[  398.301878][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  398.312055][ T7227] Call Trace:
[  398.315419][ T7227]  <TASK>
[  398.318439][ T7227]  dump_stack_lvl+0x18c/0x250
[  398.323378][ T7227]  ? show_regs_print_info+0x20/0x20
[  398.328935][ T7227]  ? load_image+0x420/0x420
[  398.333577][ T7227]  ? __might_sleep+0xe0/0xe0
[  398.338271][ T7227]  ? __lock_acquire+0x7d80/0x7d80
[  398.343457][ T7227]  should_fail_ex+0x394/0x4c0
[  398.348300][ T7227]  should_failslab+0x9/0x20
[  398.352904][ T7227]  slab_pre_alloc_hook+0x59/0x300
[  398.358033][ T7227]  ? trace_call_bpf+0x5e9/0x6c0
[  398.362985][ T7227]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  398.368803][ T7227]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  398.374612][ T7227]  __kmem_cache_alloc_node+0x53/0x250
[  398.380127][ T7227]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  398.385999][ T7227]  __kmalloc+0xa7/0x240
[  398.390305][ T7227]  tomoyo_realpath_from_path+0xe6/0x5c0
[  398.396124][ T7227]  ? tomoyo_domain+0xd6/0x120
[  398.400977][ T7227]  tomoyo_path_number_perm+0x248/0x5e0
[  398.406563][ T7227]  ? tomoyo_path_number_perm+0x217/0x5e0
[  398.412310][ T7227]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  398.417917][ T7227]  ? ksys_write+0x1d2/0x260
[  398.422830][ T7227]  ? __fget_files+0x28/0x460
[  398.427635][ T7227]  security_file_ioctl+0x70/0xa0
[  398.432700][ T7227]  __se_sys_ioctl+0x48/0x170
[  398.437417][ T7227]  do_syscall_64+0x55/0xb0
[  398.441920][ T7227]  ? clear_bhb_loop+0x40/0x90
[  398.446705][ T7227]  ? clear_bhb_loop+0x40/0x90
[  398.451523][ T7227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  398.457546][ T7227] RIP: 0033:0x7fdb2a99de59
[  398.462166][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.481905][ T7227] RSP: 002b:00007fdb2b897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  398.490463][ T7227] RAX: ffffffffffffffda RBX: 00007fdb2ac25fa0 RCX: 00007fdb2a99de59
[  398.498537][ T7227] RDX: 00002000000013c0 RSI: 0000000000005452 RDI: 0000000000000000
[  398.506592][ T7227] RBP: 00007fdb2b897090 R08: 0000000000000000 R09: 0000000000000000
[  398.514642][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.523429][ T7227] R13: 00007fdb2ac26038 R14: 00007fdb2ac25fa0 R15: 00007ffc1a575608
[  398.531630][ T7227]  </TASK>
[  398.586847][ T7227] ERROR: Out of memory at tomoyo_realpath_from_path.
[  399.941127][ T7233] netlink: 'syz.1.464': attribute type 1 has an invalid length.
[  399.952611][ T7233] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.464'.
[  399.962754][ T7233] netlink: 5 bytes leftover after parsing attributes in process `syz.1.464'.
[  401.214217][ T7254] netlink: 128 bytes leftover after parsing attributes in process `syz.1.472'.
[  401.384533][ T7254] net_ratelimit: 3320 callbacks suppressed
[  401.384646][ T7254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.408670][ T7262] netlink: 'syz.3.475': attribute type 1 has an invalid length.
[  401.464084][ T7262] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.475'.
[  401.504024][ T7262] netlink: 5 bytes leftover after parsing attributes in process `syz.3.475'.
[  402.330565][ T7292] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[  402.344141][ T7292] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.487'.
[  402.363780][ T7292] netlink: 5 bytes leftover after parsing attributes in process `syz.0.487'.
[  403.216429][ T7308] netlink: 'syz.0.492': attribute type 10 has an invalid length.
[  403.246926][ T7308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.492'.
[  403.444264][ T7308] batman_adv: batadv0: Adding interface: virt_wifi0
[  403.493866][ T7308] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.542516][ T7308] batman_adv: batadv0: Interface activated: virt_wifi0
[  403.926994][ T7319] netlink: 144 bytes leftover after parsing attributes in process `syz.2.495'.
[  404.006674][ T7321] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[  404.053742][ T7321] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.497'.
[  404.084127][ T7321] netlink: 5 bytes leftover after parsing attributes in process `syz.1.497'.
[  404.662328][ T7344] syzkaller0: entered promiscuous mode
[  404.668091][ T7344] syzkaller0: entered allmulticast mode
[  405.252184][ T7361] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[  405.262586][ T7361] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.511'.
[  405.276365][ T7361] netlink: 5 bytes leftover after parsing attributes in process `syz.0.511'.
[  407.299244][ T7389] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[  407.324276][ T7389] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.520'.
[  407.350901][ T7389] netlink: 5 bytes leftover after parsing attributes in process `syz.1.520'.
[  407.546996][ T7397] netlink: 'syz.1.524': attribute type 21 has an invalid length.
[  407.563430][ T7399] FAULT_INJECTION: forcing a failure.
[  407.563430][ T7399] name failslab, interval 1, probability 0, space 0, times 0
[  407.599275][ T7399] CPU: 0 PID: 7399 Comm: syz.0.525 Not tainted syzkaller #0
[  407.606627][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  407.616766][ T7399] Call Trace:
[  407.620067][ T7399]  <TASK>
[  407.623023][ T7399]  dump_stack_lvl+0x18c/0x250
[  407.627741][ T7399]  ? show_regs_print_info+0x20/0x20
[  407.632981][ T7399]  ? load_image+0x420/0x420
[  407.637523][ T7399]  ? __might_sleep+0xe0/0xe0
[  407.642140][ T7399]  ? __lock_acquire+0x7d80/0x7d80
[  407.647205][ T7399]  should_fail_ex+0x394/0x4c0
[  407.651918][ T7399]  should_failslab+0x9/0x20
[  407.656499][ T7399]  slab_pre_alloc_hook+0x59/0x300
[  407.661574][ T7399]  kmem_cache_alloc_node+0x5e/0x310
[  407.666815][ T7399]  ? perf_event_alloc+0x146/0x2150
[  407.671964][ T7399]  perf_event_alloc+0x146/0x2150
[  407.676937][ T7399]  ? _raw_spin_unlock+0x28/0x40
[  407.682175][ T7399]  ? find_lively_task_by_vpid+0x19/0x290
[  407.687842][ T7399]  ? find_lively_task_by_vpid+0x19/0x290
[  407.693509][ T7399]  __se_sys_perf_event_open+0x740/0x1c60
[  407.699179][ T7399]  ? mutex_unlock+0x10/0x10
[  407.703715][ T7399]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  407.709377][ T7399]  ? lock_chain_count+0x20/0x20
[  407.714256][ T7399]  ? lockdep_hardirqs_on+0x98/0x150
[  407.719626][ T7399]  ? __x64_sys_perf_event_open+0x20/0xc0
[  407.725325][ T7399]  do_syscall_64+0x55/0xb0
[  407.729771][ T7399]  ? clear_bhb_loop+0x40/0x90
[  407.734509][ T7399]  ? clear_bhb_loop+0x40/0x90
[  407.739211][ T7399]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  407.745145][ T7399] RIP: 0033:0x7fb60bf9de59
[  407.749595][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.769224][ T7399] RSP: 002b:00007fb60ceba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  407.777755][ T7399] RAX: ffffffffffffffda RBX: 00007fb60c225fa0 RCX: 00007fb60bf9de59
[  407.786194][ T7399] RDX: 0000040000000001 RSI: 0000000000000000 RDI: 0000200000000040
[  407.794199][ T7399] RBP: 00007fb60ceba090 R08: 0000000000000009 R09: 0000000000000000
[  407.802201][ T7399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  407.810208][ T7399] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  407.818261][ T7399]  </TASK>
[  408.361186][ T7418] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[  408.404686][ T7418] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.532'.
[  408.470053][ T7418] netlink: 5 bytes leftover after parsing attributes in process `syz.1.532'.
[  408.525022][ T7425] netlink: 'syz.2.534': attribute type 8 has an invalid length.
[  408.563392][ T7425] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.534'.
[  408.665929][ T7428] netlink: 'syz.3.535': attribute type 7 has an invalid length.
[  410.444864][ T7449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  410.452320][ T7449] IPv6: NLM_F_CREATE should be set when creating new route
[  410.459779][ T7449] IPv6: NLM_F_CREATE should be set when creating new route
[  410.467149][ T7449] IPv6: NLM_F_CREATE should be set when creating new route
[  410.512074][ T7452] netlink: 'syz.1.543': attribute type 10 has an invalid length.
[  410.527672][ T7449] netlink: 'syz.3.542': attribute type 9 has an invalid length.
[  410.538088][ T7449] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.542'.
[  410.544209][ T7452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'.
[  410.574435][ T7452] veth0_vlan: left promiscuous mode
[  410.586583][ T7452] veth0_vlan: entered promiscuous mode
[  410.613514][ T7452] batman_adv: batadv0: Adding interface: veth0_vlan
[  410.620523][ T7452] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.652538][ T7452] batman_adv: batadv0: Interface activated: veth0_vlan
[  410.873345][ T7455] netlink: 'syz.3.542': attribute type 9 has an invalid length.
[  410.883611][ T7455] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.542'.
[  410.980448][ T7456] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  411.002646][ T7456] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.544'.
[  411.030963][ T7456] netlink: 5 bytes leftover after parsing attributes in process `syz.2.544'.
[  411.503445][ T7481] netlink: 'syz.2.552': attribute type 3 has an invalid length.
[  411.517219][ T7481] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[  411.528394][ T7481] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[  411.539957][ T7481] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.552'.
[  411.646895][ T7483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.553'.
[  411.727649][ T7485] netlink: 'syz.0.554': attribute type 11 has an invalid length.
[  412.487703][ T7518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.580693][ T7547] validate_nla: 9 callbacks suppressed
[  413.580740][ T7547] netlink: 'syz.3.577': attribute type 1 has an invalid length.
[  413.619071][ T7547] __nla_validate_parse: 9 callbacks suppressed
[  413.631285][ T7547] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.577'.
[  413.646136][ T7547] netlink: 5 bytes leftover after parsing attributes in process `syz.3.577'.
[  413.689452][ T7552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.436545][ T7566] FAULT_INJECTION: forcing a failure.
[  414.436545][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.453972][ T7566] CPU: 1 PID: 7566 Comm: syz.0.583 Not tainted syzkaller #0
[  414.461330][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  414.471502][ T7566] Call Trace:
[  414.474823][ T7566]  <TASK>
[  414.477803][ T7566]  dump_stack_lvl+0x18c/0x250
[  414.482638][ T7566]  ? show_regs_print_info+0x20/0x20
[  414.487897][ T7566]  ? load_image+0x420/0x420
[  414.492566][ T7566]  ? __lock_acquire+0x7d80/0x7d80
[  414.497649][ T7566]  ? snprintf+0xe9/0x140
[  414.501934][ T7566]  should_fail_ex+0x394/0x4c0
[  414.506703][ T7566]  _copy_to_user+0x2f/0xa0
[  414.511153][ T7566]  simple_read_from_buffer+0xe7/0x150
[  414.516564][ T7566]  proc_fail_nth_read+0x1e8/0x260
[  414.521621][ T7566]  ? proc_fault_inject_write+0x360/0x360
[  414.527368][ T7566]  ? fsnotify_perm+0x271/0x5e0
[  414.532150][ T7566]  ? proc_fault_inject_write+0x360/0x360
[  414.537811][ T7566]  vfs_read+0x298/0x990
[  414.542001][ T7566]  ? kernel_read+0x1e0/0x1e0
[  414.546614][ T7566]  ? __fget_files+0x28/0x460
[  414.551221][ T7566]  ? __fget_files+0x3fc/0x460
[  414.555937][ T7566]  ? __fdget_pos+0x2a3/0x330
[  414.560542][ T7566]  ? ksys_read+0x74/0x260
[  414.564896][ T7566]  ksys_read+0x151/0x260
[  414.569161][ T7566]  ? vfs_write+0x9a0/0x9a0
[  414.573608][ T7566]  ? lockdep_hardirqs_on+0x98/0x150
[  414.578834][ T7566]  do_syscall_64+0x55/0xb0
[  414.583281][ T7566]  ? clear_bhb_loop+0x40/0x90
[  414.587973][ T7566]  ? clear_bhb_loop+0x40/0x90
[  414.592669][ T7566]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  414.598580][ T7566] RIP: 0033:0x7fb60bf5e68e
[  414.603014][ T7566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.622645][ T7566] RSP: 002b:00007fb60ceb9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  414.631096][ T7566] RAX: ffffffffffffffda RBX: 00007fb60ceba6c0 RCX: 00007fb60bf5e68e
[  414.639179][ T7566] RDX: 000000000000000f RSI: 00007fb60ceba0a0 RDI: 0000000000000008
[  414.647168][ T7566] RBP: 00007fb60ceba090 R08: 0000000000000000 R09: 0000000000000000
[  414.655156][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  414.663140][ T7566] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  414.671171][ T7566]  </TASK>
[  415.346559][ T7584] netlink: 'syz.3.590': attribute type 1 has an invalid length.
[  415.360962][ T7584] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.590'.
[  415.376997][ T7584] netlink: 5 bytes leftover after parsing attributes in process `syz.3.590'.
[  415.662776][ T7599] netlink: 'syz.3.595': attribute type 1 has an invalid length.
[  415.672230][ T7599] netlink: 'syz.3.595': attribute type 4 has an invalid length.
[  415.681105][ T7599] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.595'.
[  417.633880][ T7617] netlink: 'syz.3.603': attribute type 1 has an invalid length.
[  417.667103][ T7617] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.603'.
[  417.729237][ T7617] netlink: 5 bytes leftover after parsing attributes in process `syz.3.603'.
[  417.760418][ T7619] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.604'.
[  417.807550][ T7619] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.604'.
[  418.650055][ T7649] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[  418.672168][ T7649] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.615'.
[  418.707046][ T7649] netlink: 5 bytes leftover after parsing attributes in process `syz.1.615'.
[  419.340701][ T7666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.622'.
[  419.399842][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.419104][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.496997][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.515131][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.551136][ T7666] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  419.570902][ T7666] batman_adv: batadv0: Removing interface: virt_wifi0
[  420.066713][ T7682] netlink: 'syz.2.626': attribute type 1 has an invalid length.
[  420.096640][ T7682] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.626'.
[  420.125429][ T7682] netlink: 5 bytes leftover after parsing attributes in process `syz.2.626'.
[  420.199481][ T7688] bridge0: entered promiscuous mode
[  420.234694][ T7688] bridge0: entered allmulticast mode
[  420.629034][ T7701] netlink: 'syz.0.633': attribute type 10 has an invalid length.
[  420.833449][ T7701] veth0_vlan: left promiscuous mode
[  420.869859][ T7701] veth0_vlan: entered promiscuous mode
[  420.908269][ T7701] team0: Device veth0_vlan failed to register rx_handler
[  421.091134][ T7706] syzkaller0: entered promiscuous mode
[  421.132980][ T7706] syzkaller0: entered allmulticast mode
[  421.469571][ T7724] netlink: 'syz.1.639': attribute type 1 has an invalid length.
[  421.492804][ T7724] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.639'.
[  421.519123][ T7724] netlink: 5 bytes leftover after parsing attributes in process `syz.1.639'.
[  422.090368][ T7738] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.644'.
[  422.255852][ T7738] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.644'.
[  422.354827][ T7738] bridge_slave_1: default FDB implementation only supports local addresses
[  423.041853][ T7758] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[  423.072179][ T7757] FAULT_INJECTION: forcing a failure.
[  423.072179][ T7757] name failslab, interval 1, probability 0, space 0, times 0
[  423.079151][ T7758] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.650'.
[  423.113413][ T7757] CPU: 1 PID: 7757 Comm: syz.1.649 Not tainted syzkaller #0
[  423.120783][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  423.130890][ T7757] Call Trace:
[  423.134214][ T7757]  <TASK>
[  423.137375][ T7757]  dump_stack_lvl+0x18c/0x250
[  423.142123][ T7757]  ? show_regs_print_info+0x20/0x20
[  423.147375][ T7757]  ? load_image+0x420/0x420
[  423.152014][ T7757]  ? __might_sleep+0xe0/0xe0
[  423.156699][ T7757]  ? __lock_acquire+0x7d80/0x7d80
[  423.161778][ T7757]  ? stack_trace_save+0xaa/0x100
[  423.166783][ T7757]  ? stack_trace_snprint+0xf0/0xf0
[  423.172049][ T7757]  should_fail_ex+0x394/0x4c0
[  423.176887][ T7757]  should_failslab+0x9/0x20
[  423.181435][ T7757]  slab_pre_alloc_hook+0x59/0x300
[  423.186512][ T7757]  ? kasan_set_track+0x5f/0x70
[  423.191319][ T7757]  ? kasan_set_track+0x4e/0x70
[  423.196129][ T7757]  ? __kasan_kmalloc+0x8f/0xa0
[  423.200951][ T7757]  kmem_cache_alloc_node+0x5e/0x310
[  423.206197][ T7757]  ? netlink_sendmsg+0x8d0/0xbf0
[  423.211181][ T7757]  ? __alloc_skb+0x103/0x2c0
[  423.215842][ T7757]  __alloc_skb+0x103/0x2c0
[  423.220335][ T7757]  netlink_dump+0x1ee/0xec0
[  423.224942][ T7757]  ? netlink_lookup+0x200/0x200
[  423.229897][ T7757]  ? __asan_memset+0x22/0x40
[  423.234554][ T7757]  ? genl_start+0x491/0x6c0
[  423.239140][ T7757]  __netlink_dump_start+0x57c/0x7a0
[  423.244417][ T7757]  genl_family_rcv_msg_dumpit+0x214/0x310
[  423.250500][ T7757]  ? genl_rcv_msg+0x7a0/0x7a0
[  423.255226][ T7757]  ? genl_get_cmd+0x4aa/0x930
[  423.259981][ T7757]  ? genl_family_rcv_msg_doit+0x310/0x310
[  423.265760][ T7757]  ? genl_start+0x6c0/0x6c0
[  423.270304][ T7757]  ? genl_dumpit+0x1a0/0x1a0
[  423.274983][ T7757]  genl_rcv_msg+0x5de/0x7a0
[  423.279565][ T7757]  ? genl_bind+0x360/0x360
[  423.284033][ T7757]  ? devlink_nl_trap_group_fill+0x780/0x780
[  423.290108][ T7757]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  423.296786][ T7757]  netlink_rcv_skb+0x235/0x4c0
[  423.301604][ T7757]  ? genl_bind+0x360/0x360
[  423.306081][ T7757]  ? netlink_ack+0x1160/0x1160
[  423.310938][ T7757]  ? __lock_acquire+0x7d80/0x7d80
[  423.316032][ T7757]  ? down_read+0x1ac/0x2e0
[  423.320507][ T7757]  genl_rcv+0x28/0x40
[  423.324557][ T7757]  netlink_unicast+0x7b1/0x930
[  423.329399][ T7757]  netlink_sendmsg+0x8d0/0xbf0
[  423.334244][ T7757]  ? netlink_getsockopt+0x590/0x590
[  423.339510][ T7757]  ? apparmor_socket_sendmsg+0x8e/0x330
[  423.345116][ T7757]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  423.350455][ T7757]  ? security_socket_sendmsg+0x80/0xa0
[  423.355982][ T7757]  ? netlink_getsockopt+0x590/0x590
[  423.361257][ T7757]  ____sys_sendmsg+0x61b/0x980
[  423.366111][ T7757]  ? __asan_memset+0x22/0x40
[  423.370764][ T7757]  ? __sys_sendmsg_sock+0x30/0x30
[  423.375835][ T7757]  ? __import_iovec+0x5f2/0x850
[  423.380768][ T7757]  ? import_iovec+0x73/0xa0
[  423.385336][ T7757]  ___sys_sendmsg+0x2a6/0x360
[  423.390086][ T7757]  ? __sys_sendmsg+0x2b0/0x2b0
[  423.394964][ T7757]  ? ktime_get+0x7f/0x280
[  423.399334][ T7757]  ? trace_call_bpf+0xc3/0x6c0
[  423.404233][ T7757]  __se_sys_sendmsg+0x1d0/0x2c0
[  423.409187][ T7757]  ? __x64_sys_sendmsg+0x80/0x80
[  423.414228][ T7757]  ? lockdep_hardirqs_on+0x98/0x150
[  423.419482][ T7757]  do_syscall_64+0x55/0xb0
[  423.423944][ T7757]  ? clear_bhb_loop+0x40/0x90
[  423.428662][ T7757]  ? clear_bhb_loop+0x40/0x90
[  423.433393][ T7757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  423.439340][ T7757] RIP: 0033:0x7f0affd9de59
[  423.443807][ T7757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.463548][ T7757] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  423.472068][ T7757] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  423.480139][ T7757] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  423.488145][ T7757] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  423.496132][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.504118][ T7757] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  423.512144][ T7757]  </TASK>
[  424.082701][ T7778] __nla_validate_parse: 2 callbacks suppressed
[  424.082748][ T7778] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.659'.
[  424.506225][ T7794] netlink: 'syz.2.663': attribute type 1 has an invalid length.
[  424.525761][ T7794] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.663'.
[  424.545259][ T7794] netlink: 5 bytes leftover after parsing attributes in process `syz.2.663'.
[  424.694370][ T7798] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.665'.
[  425.027853][ T7809] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.669'.
[  425.547983][ T7830] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  425.559738][ T7830] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.677'.
[  425.569965][ T7830] netlink: 5 bytes leftover after parsing attributes in process `syz.1.677'.
[  425.796871][ T7832] vlan0: entered promiscuous mode
[  425.807890][ T7832] vlan0: entered allmulticast mode
[  425.813433][ T7832] veth0_vlan: entered allmulticast mode
[  425.944248][ T7839] IPv6: Can't replace route, no match found
[  426.232801][ T7841] netlink: 'syz.3.682': attribute type 21 has an invalid length.
[  426.293721][ T7841] netlink: 164 bytes leftover after parsing attributes in process `syz.3.682'.
[  426.682633][ T7856] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[  426.697884][ T7856] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.687'.
[  426.730777][ T7856] netlink: 5 bytes leftover after parsing attributes in process `syz.0.687'.
[  426.925610][ T7862] syzkaller0: entered promiscuous mode
[  426.947155][ T7862] syzkaller0: entered allmulticast mode
[  427.434272][ T5874] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  430.334332][ T7895] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[  430.342418][ T7895] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.700'.
[  430.357793][ T7895] netlink: 5 bytes leftover after parsing attributes in process `syz.1.700'.
[  430.427791][ T7897] netlink: 'syz.2.702': attribute type 10 has an invalid length.
[  430.578724][ T7904] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  430.586276][ T7897] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.702'.
[  430.636382][ T7906] FAULT_INJECTION: forcing a failure.
[  430.636382][ T7906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.659518][ T7906] CPU: 1 PID: 7906 Comm: syz.1.705 Not tainted syzkaller #0
[  430.666864][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  430.677445][ T7906] Call Trace:
[  430.680727][ T7906]  <TASK>
[  430.683697][ T7906]  dump_stack_lvl+0x18c/0x250
[  430.688385][ T7906]  ? show_regs_print_info+0x20/0x20
[  430.693590][ T7906]  ? load_image+0x420/0x420
[  430.698100][ T7906]  ? __lock_acquire+0x7d80/0x7d80
[  430.703133][ T7906]  should_fail_ex+0x394/0x4c0
[  430.707820][ T7906]  _copy_from_user+0x2f/0xe0
[  430.712411][ T7906]  bpf_test_init+0xde/0x140
[  430.716923][ T7906]  bpf_prog_test_run_xdp+0x4cd/0x1140
[  430.722295][ T7906]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  430.729510][ T7906]  ? dev_put+0x80/0x80
[  430.733603][ T7906]  ? dev_put+0x80/0x80
[  430.737675][ T7906]  bpf_prog_test_run+0x31f/0x390
[  430.742614][ T7906]  __sys_bpf+0x49d/0x890
[  430.746864][ T7906]  ? bpf_link_show_fdinfo+0x390/0x390
[  430.752268][ T7906]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  430.758443][ T7906]  __x64_sys_bpf+0x7c/0x90
[  430.762862][ T7906]  do_syscall_64+0x55/0xb0
[  430.767282][ T7906]  ? clear_bhb_loop+0x40/0x90
[  430.771959][ T7906]  ? clear_bhb_loop+0x40/0x90
[  430.776640][ T7906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  430.782554][ T7906] RIP: 0033:0x7f0affd9de59
[  430.786971][ T7906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.806587][ T7906] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  430.815008][ T7906] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  430.823003][ T7906] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  430.831059][ T7906] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  430.839029][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.846995][ T7906] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  430.854979][ T7906]  </TASK>
[  431.109661][ T7916] FAULT_INJECTION: forcing a failure.
[  431.109661][ T7916] name failslab, interval 1, probability 0, space 0, times 0
[  431.130670][ T7916] CPU: 1 PID: 7916 Comm: syz.3.711 Not tainted syzkaller #0
[  431.132233][ T7914] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  431.138090][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  431.138103][ T7916] Call Trace:
[  431.138110][ T7916]  <TASK>
[  431.138118][ T7916]  dump_stack_lvl+0x18c/0x250
[  431.138150][ T7916]  ? show_regs_print_info+0x20/0x20
[  431.138175][ T7916]  ? load_image+0x420/0x420
[  431.138199][ T7916]  ? __might_sleep+0xe0/0xe0
[  431.138220][ T7916]  ? __lock_acquire+0x7d80/0x7d80
[  431.138245][ T7916]  should_fail_ex+0x394/0x4c0
[  431.138272][ T7916]  should_failslab+0x9/0x20
[  431.138293][ T7916]  slab_pre_alloc_hook+0x59/0x300
[  431.138320][ T7916]  ? __get_vm_area_node+0x125/0x370
[  431.138343][ T7916]  __kmem_cache_alloc_node+0x53/0x250
[  431.138369][ T7916]  ? __get_vm_area_node+0x125/0x370
[  431.161514][ T7914] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.710'.
[  431.162267][ T7916]  kmalloc_node_trace+0x26/0xe0
[  431.162305][ T7916]  __get_vm_area_node+0x125/0x370
[  431.162335][ T7916]  __vmalloc_node_range+0x36f/0x1320
[  431.175150][ T7914] netlink: 9 bytes leftover after parsing attributes in process `syz.2.710'.
[  431.176677][ T7916]  ? netlink_sendmsg+0x602/0xbf0
[  431.176709][ T7916]  ? netlink_insert+0x1094/0x1390
[  431.176744][ T7916]  ? netlink_insert+0x2ba/0x1390
[  431.176772][ T7916]  ? free_vm_area+0x50/0x50
[  431.176801][ T7916]  ? netlink_sendmsg+0x602/0xbf0
[  431.273940][ T7916]  vmalloc+0x79/0x90
[  431.277872][ T7916]  ? netlink_sendmsg+0x602/0xbf0
[  431.282842][ T7916]  netlink_sendmsg+0x602/0xbf0
[  431.287698][ T7916]  ? netlink_getsockopt+0x590/0x590
[  431.292936][ T7916]  ? apparmor_socket_sendmsg+0x8e/0x330
[  431.298552][ T7916]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  431.303867][ T7916]  ? security_socket_sendmsg+0x80/0xa0
[  431.309356][ T7916]  ? netlink_getsockopt+0x590/0x590
[  431.314581][ T7916]  ____sys_sendmsg+0x61b/0x980
[  431.319371][ T7916]  ? __asan_memset+0x22/0x40
[  431.323981][ T7916]  ? __sys_sendmsg_sock+0x30/0x30
[  431.329015][ T7916]  ? __import_iovec+0x5f2/0x850
[  431.333876][ T7916]  ? import_iovec+0x73/0xa0
[  431.338387][ T7916]  ___sys_sendmsg+0x2a6/0x360
[  431.343082][ T7916]  ? __sys_sendmsg+0x2b0/0x2b0
[  431.347862][ T7916]  ? ktime_get+0x7f/0x280
[  431.352213][ T7916]  __se_sys_sendmsg+0x1d0/0x2c0
[  431.357068][ T7916]  ? perf_trace_preemptirq_template+0x269/0x330
[  431.363313][ T7916]  ? __x64_sys_sendmsg+0x80/0x80
[  431.368264][ T7916]  ? lockdep_hardirqs_on+0x98/0x150
[  431.373468][ T7916]  do_syscall_64+0x55/0xb0
[  431.377893][ T7916]  ? clear_bhb_loop+0x40/0x90
[  431.382567][ T7916]  ? clear_bhb_loop+0x40/0x90
[  431.387256][ T7916]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.393186][ T7916] RIP: 0033:0x7fdb2a99de59
[  431.397627][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.417249][ T7916] RSP: 002b:00007fdb2b897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.425671][ T7916] RAX: ffffffffffffffda RBX: 00007fdb2ac25fa0 RCX: 00007fdb2a99de59
[  431.433646][ T7916] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  431.441618][ T7916] RBP: 00007fdb2b897090 R08: 0000000000000000 R09: 0000000000000000
[  431.449589][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.457554][ T7916] R13: 00007fdb2ac26038 R14: 00007fdb2ac25fa0 R15: 00007ffc1a575608
[  431.465532][ T7916]  </TASK>
[  431.488754][ T7923] delete_channel: no stack
[  431.498815][ T7916] syz.3.711: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  431.516589][ T7916] CPU: 0 PID: 7916 Comm: syz.3.711 Not tainted syzkaller #0
[  431.523925][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  431.534003][ T7916] Call Trace:
[  431.537300][ T7916]  <TASK>
[  431.540238][ T7916]  dump_stack_lvl+0x18c/0x250
[  431.544952][ T7916]  ? show_regs_print_info+0x20/0x20
[  431.550171][ T7916]  ? load_image+0x420/0x420
[  431.554785][ T7916]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  431.561236][ T7916]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  431.567774][ T7916]  warn_alloc+0x246/0x340
[  431.572135][ T7916]  ? __get_vm_area_node+0x125/0x370
[  431.577367][ T7916]  ? zone_watermark_ok_safe+0x230/0x230
[  431.582945][ T7916]  ? rcu_is_watching+0x15/0xb0
[  431.587720][ T7916]  ? __get_vm_area_node+0x356/0x370
[  431.593816][ T7916]  __vmalloc_node_range+0x394/0x1320
[  431.599132][ T7916]  ? netlink_insert+0x1094/0x1390
[  431.604177][ T7916]  ? netlink_insert+0x2ba/0x1390
[  431.609116][ T7916]  ? free_vm_area+0x50/0x50
[  431.613634][ T7916]  ? netlink_sendmsg+0x602/0xbf0
[  431.618598][ T7916]  vmalloc+0x79/0x90
[  431.622782][ T7916]  ? netlink_sendmsg+0x602/0xbf0
[  431.627748][ T7916]  netlink_sendmsg+0x602/0xbf0
[  431.632546][ T7916]  ? netlink_getsockopt+0x590/0x590
[  431.637770][ T7916]  ? apparmor_socket_sendmsg+0x8e/0x330
[  431.643342][ T7916]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  431.648648][ T7916]  ? security_socket_sendmsg+0x80/0xa0
[  431.654138][ T7916]  ? netlink_getsockopt+0x590/0x590
[  431.659370][ T7916]  ____sys_sendmsg+0x61b/0x980
[  431.664174][ T7916]  ? __asan_memset+0x22/0x40
[  431.668795][ T7916]  ? __sys_sendmsg_sock+0x30/0x30
[  431.673859][ T7916]  ? __import_iovec+0x5f2/0x850
[  431.678754][ T7916]  ? import_iovec+0x73/0xa0
[  431.683302][ T7916]  ___sys_sendmsg+0x2a6/0x360
[  431.688021][ T7916]  ? __sys_sendmsg+0x2b0/0x2b0
[  431.690765][ T7930] netlink: 'syz.1.713': attribute type 1 has an invalid length.
[  431.692819][ T7916]  ? ktime_get+0x7f/0x280
[  431.692869][ T7916]  __se_sys_sendmsg+0x1d0/0x2c0
[  431.692896][ T7916]  ? perf_trace_preemptirq_template+0x269/0x330
[  431.700901][ T7930] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.713'.
[  431.704833][ T7916]  ? __x64_sys_sendmsg+0x80/0x80
[  431.704876][ T7916]  ? lockdep_hardirqs_on+0x98/0x150
[  431.704899][ T7916]  do_syscall_64+0x55/0xb0
[  431.704922][ T7916]  ? clear_bhb_loop+0x40/0x90
[  431.704947][ T7916]  ? clear_bhb_loop+0x40/0x90
[  431.704965][ T7916]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.704989][ T7916] RIP: 0033:0x7fdb2a99de59
[  431.705008][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.716918][ T7930] netlink: 5 bytes leftover after parsing attributes in process `syz.1.713'.
[  431.725244][ T7916] RSP: 002b:00007fdb2b897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.725270][ T7916] RAX: ffffffffffffffda RBX: 00007fdb2ac25fa0 RCX: 00007fdb2a99de59
[  431.725282][ T7916] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  431.725292][ T7916] RBP: 00007fdb2b897090 R08: 0000000000000000 R09: 0000000000000000
[  431.725303][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.725313][ T7916] R13: 00007fdb2ac26038 R14: 00007fdb2ac25fa0 R15: 00007ffc1a575608
[  431.725337][ T7916]  </TASK>
[  431.753212][ T7931] FAULT_INJECTION: forcing a failure.
[  431.753212][ T7931] name failslab, interval 1, probability 0, space 0, times 0
[  431.788710][ T7916] Mem-Info:
[  431.790572][ T7931] CPU: 0 PID: 7931 Comm: syz.2.714 Not tainted syzkaller #0
[  431.790594][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  431.790605][ T7931] Call Trace:
[  431.790613][ T7931]  <TASK>
[  431.790622][ T7931]  dump_stack_lvl+0x18c/0x250
[  431.812758][ T7916] active_anon:5643 inactive_anon:0 isolated_anon:0
[  431.812758][ T7916]  active_file:15279 inactive_file:39991 isolated_file:0
[  431.812758][ T7916]  unevictable:768 dirty:215 writeback:0
[  431.812758][ T7916]  slab_reclaimable:10368 slab_unreclaimable:93498
[  431.812758][ T7916]  mapped:24568 shmem:1361 pagetables:588
[  431.812758][ T7916]  sec_pagetables:0 bounce:0
[  431.812758][ T7916]  kernel_misc_reclaimable:0
[  431.812758][ T7916]  free:1350228 free_pcp:7266 free_cma:0
[  431.815506][ T7931]  ? bpf_prog_973cd02a7a0e8181+0x5e/0x63
[  431.815530][ T7931]  ? bpf_prog_test_run_skb+0xdbb/0x18f0
[  431.815553][ T7931]  ? show_regs_print_info+0x20/0x20
[  431.815579][ T7931]  ? load_image+0x420/0x420
[  431.815615][ T7931]  should_fail_ex+0x394/0x4c0
[  431.815644][ T7931]  should_failslab+0x9/0x20
[  431.961520][ T7931]  slab_pre_alloc_hook+0x59/0x300
[  431.966582][ T7931]  ? lockdep_init_map_type+0x9c/0x8e0
[  431.971950][ T7931]  ? nf_ct_ext_add+0x1ad/0x440
[  431.976799][ T7931]  ? nf_ct_ext_add+0x1ad/0x440
[  431.981561][ T7931]  __kmem_cache_alloc_node+0x53/0x250
[  431.986943][ T7931]  ? nf_ct_ext_add+0x1ad/0x440
[  431.991706][ T7931]  __kmalloc_node_track_caller+0xa4/0x230
[  431.997430][ T7931]  ? rcu_is_watching+0x15/0xb0
[  432.002198][ T7931]  krealloc+0x86/0x120
[  432.006269][ T7931]  nf_ct_ext_add+0x1ad/0x440
[  432.010886][ T7931]  init_conntrack+0x5e9/0xf40
[  432.015591][ T7931]  ? early_drop+0x7f0/0x7f0
[  432.020103][ T7931]  ? nf_conntrack_find_get+0x670/0x670
[  432.025651][ T7931]  ? __local_bh_enable_ip+0x13a/0x1c0
[  432.031022][ T7931]  ? __siphash_unaligned+0x25c/0x3d0
[  432.036320][ T7931]  nf_conntrack_in+0xc29/0x1630
[  432.041185][ T7931]  ? nf_ct_pernet+0x270/0x270
[  432.045906][ T7931]  ? ipt_do_table+0x2c5/0x15c0
[  432.050762][ T7931]  ? read_lock_is_recursive+0x20/0x20
[  432.056142][ T7931]  ? get_random_u32+0x4d5/0x930
[  432.061033][ T7931]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  432.066485][ T7931]  ? ipv4_conntrack_local+0x123/0x200
[  432.071867][ T7931]  ? ipv4_conntrack_in+0x20/0x20
[  432.076803][ T7931]  nf_hook_slow+0xbd/0x200
[  432.081236][ T7931]  ? nf_hook+0x390/0x390
[  432.085593][ T7931]  nf_hook+0x228/0x390
[  432.089666][ T7931]  ? nf_hook+0xa2/0x390
[  432.094169][ T7931]  ? __ip_local_out+0x5f0/0x5f0
[  432.099030][ T7931]  ? nf_hook+0x390/0x390
[  432.103275][ T7931]  ? dst_release+0x1a0/0x1a0
[  432.107863][ T7931]  ? __asan_memset+0x22/0x40
[  432.112482][ T7931]  ? ip6_update_pmtu+0x360/0x360
[  432.117430][ T7931]  ? ip_fast_csum+0x1ee/0x2b0
[  432.122122][ T7931]  __ip_local_out+0x4db/0x5f0
[  432.126806][ T7931]  ? nf_hook+0x390/0x390
[  432.131051][ T7931]  ip_local_out+0x2a/0x130
[  432.135489][ T7931]  iptunnel_xmit+0x4d0/0x910
[  432.140101][ T7931]  ip_tunnel_xmit+0x1d18/0x25b0
[  432.145001][ T7931]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  432.150035][ T7931]  ? validate_xmit_xfrm+0xbb/0x1340
[  432.155321][ T7931]  ? skb_push+0x8e/0xe0
[  432.159482][ T7931]  ipgre_xmit+0x7eb/0xb70
[  432.163818][ T7931]  dev_hard_start_xmit+0x269/0x790
[  432.168936][ T7931]  ? __dev_queue_xmit+0x275/0x3630
[  432.174045][ T7931]  __dev_queue_xmit+0x198c/0x3630
[  432.179155][ T7931]  ? __dev_queue_xmit+0x275/0x3630
[  432.184282][ T7931]  ? netdev_core_pick_tx+0x370/0x370
[  432.189569][ T7931]  ? pskb_expand_head+0x17a/0x1150
[  432.194776][ T7931]  ? pskb_expand_head+0x17a/0x1150
[  432.199886][ T7931]  ? skb_release_data+0x1de/0x7f0
[  432.204943][ T7931]  ? __bpf_redirect+0x4d1/0xdf0
[  432.209918][ T7931]  __bpf_tx_skb+0x181/0x260
[  432.214446][ T7931]  bpf_clone_redirect+0x315/0x4a0
[  432.219494][ T7931]  bpf_prog_973cd02a7a0e8181+0x5e/0x63
[  432.224993][ T7931]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  432.230977][ T7931]  ? __lock_acquire+0x7d80/0x7d80
[  432.236020][ T7931]  ? lock_chain_count+0x20/0x20
[  432.240889][ T7931]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  432.247163][ T7931]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  432.252466][ T7931]  ? ktime_get+0x7f/0x280
[  432.256841][ T7931]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  432.263101][ T7931]  ? ktime_get_real_ts64+0x440/0x440
[  432.268384][ T7931]  ? __x64_sys_bpf+0x7c/0x90
[  432.272973][ T7931]  ? __local_bh_disable_ip+0x108/0x1a0
[  432.278429][ T7931]  ? __cant_sleep+0x220/0x220
[  432.283106][ T7931]  ? read_tsc+0x9/0x20
[  432.287178][ T7931]  ? ktime_get+0x24b/0x280
[  432.291592][ T7931]  ? bpf_test_run+0x174/0x870
[  432.296272][ T7931]  bpf_test_run+0x2df/0x870
[  432.300784][ T7931]  ? bpf_test_run+0x174/0x870
[  432.305480][ T7931]  ? dst_hold+0x70/0x70
[  432.309783][ T7931]  ? eth_get_headlen+0x210/0x210
[  432.314747][ T7931]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  432.320143][ T7931]  ? cpu_online+0x60/0x60
[  432.324470][ T7931]  bpf_prog_test_run+0x31f/0x390
[  432.329412][ T7931]  __sys_bpf+0x49d/0x890
[  432.333654][ T7931]  ? bpf_link_show_fdinfo+0x390/0x390
[  432.339037][ T7931]  ? lock_chain_count+0x20/0x20
[  432.343907][ T7931]  __x64_sys_bpf+0x7c/0x90
[  432.348326][ T7931]  do_syscall_64+0x55/0xb0
[  432.352783][ T7931]  ? clear_bhb_loop+0x40/0x90
[  432.357549][ T7931]  ? clear_bhb_loop+0x40/0x90
[  432.362227][ T7931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  432.368124][ T7931] RIP: 0033:0x7f789739de59
[  432.372551][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.392242][ T7931] RSP: 002b:00007f7898220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  432.400657][ T7931] RAX: ffffffffffffffda RBX: 00007f7897625fa0 RCX: 00007f789739de59
[  432.408632][ T7931] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  432.416604][ T7931] RBP: 00007f7898220090 R08: 0000000000000000 R09: 0000000000000000
[  432.424572][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  432.432539][ T7931] R13: 00007f7897626038 R14: 00007f7897625fa0 R15: 00007ffc42a05dd8
[  432.440518][ T7931]  </TASK>
[  432.460476][ T7916] Node 0 active_anon:22576kB inactive_anon:0kB active_file:61156kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98356kB dirty:960kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10712kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no
[  432.503899][ T7916] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  432.534752][ T7916] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  432.580134][ T7916] lowmem_reserve[]: 0 2521 2522 2522 2522
[  432.586368][ T7916] Node 0 DMA32 free:1488792kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22536kB inactive_anon:0kB active_file:61156kB inactive_file:158940kB unevictable:1536kB writepending:960kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:12392kB local_pcp:10084kB free_cma:0kB
[  432.618198][ T7916] lowmem_reserve[]: 0 0 0 0 0
[  432.623143][ T7916] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  432.658376][ T7916] lowmem_reserve[]: 0 0 0 0 0
[  432.663269][ T7916] Node 1 Normal free:3896504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17280kB local_pcp:4416kB free_cma:0kB
[  432.699280][ T7916] lowmem_reserve[]: 0 0 0 0 0
[  432.727726][ T7916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  432.741069][ T7916] Node 0 DMA32: 648*4kB (UME) 2023*8kB (UM) 1222*16kB (UME) 840*32kB (UME) 129*64kB (UME) 34*128kB (UM) 18*256kB (UME) 24*512kB (ME) 5*1024kB (UM) 4*2048kB (UME) 337*4096kB (UM) = 1488376kB
[  432.760669][ T7916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  432.783724][ T7916] Node 1 Normal: 262*4kB (UME) 58*8kB (UME) 39*16kB (UME) 89*32kB (UME) 27*64kB (UME) 7*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3896504kB
[  432.824324][ T7916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  432.855390][ T7916] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  432.857377][ T7937] netlink: 'syz.1.716': attribute type 1 has an invalid length.
[  432.865270][ T7916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  432.876383][ T7937] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.716'.
[  432.896887][ T7937] netlink: 9 bytes leftover after parsing attributes in process `syz.1.716'.
[  432.906524][ T7939] netlink: 'syz.2.717': attribute type 10 has an invalid length.
[  432.918975][ T7939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.717'.
[  432.933652][ T7916] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  432.943010][ T7916] 56641 total pagecache pages
[  432.959408][ T7916] 0 pages in swap cache
[  432.965270][ T7916] Free swap  = 124996kB
[  432.969767][ T7916] Total swap = 124996kB
[  432.977721][ T7916] 2097051 pages RAM
[  432.981816][ T7916] 0 pages HighMem/MovableOnly
[  432.987066][ T7916] 416953 pages reserved
[  432.991247][ T7916] 0 pages cma reserved
[  433.693939][ T7965] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[  433.967894][ T7971] syzkaller0: entered promiscuous mode
[  433.973426][ T7971] syzkaller0: entered allmulticast mode
[  436.023458][ T8001] netlink: 'syz.0.736': attribute type 1 has an invalid length.
[  436.047462][ T8001] __nla_validate_parse: 4 callbacks suppressed
[  436.047515][ T8001] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.736'.
[  436.064208][ T8001] netlink: 5 bytes leftover after parsing attributes in process `syz.0.736'.
[  436.085679][ T8003] netlink: 'syz.1.737': attribute type 17 has an invalid length.
[  436.093694][ T8003] netlink: 148 bytes leftover after parsing attributes in process `syz.1.737'.
[  436.887859][ T8030] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  436.914930][ T8030] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.747'.
[  436.938944][ T8030] netlink: 5 bytes leftover after parsing attributes in process `syz.1.747'.
[  437.669528][ T8058] netlink: 'syz.3.758': attribute type 1 has an invalid length.
[  437.701162][ T8058] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.758'.
[  437.720899][ T8058] netlink: 5 bytes leftover after parsing attributes in process `syz.3.758'.
[  437.728423][ T8061] netlink: 'syz.1.759': attribute type 10 has an invalid length.
[  437.751507][ T8061] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  437.827456][ T8061] batman_adv: batadv0: Removing interface: veth0_vlan
[  437.858954][ T8061] veth0_vlan: left promiscuous mode
[  437.871311][ T8061] veth0_vlan: entered promiscuous mode
[  437.899311][ T8061] team0: Device veth0_vlan failed to register rx_handler
[  438.240030][ T8073] netlink: 'syz.0.764': attribute type 21 has an invalid length.
[  438.248417][ T8073] netlink: 168 bytes leftover after parsing attributes in process `syz.0.764'.
[  438.392343][ T8075] netlink: 158864 bytes leftover after parsing attributes in process `syz.1.765'.
[  438.440814][ T8075] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  438.451481][ T8084] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.767'.
[  438.472342][ T5825] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  438.774851][ T8090] netlink: 'syz.1.770': attribute type 1 has an invalid length.
[  438.872919][ T8093] netlink: 'syz.3.771': attribute type 2 has an invalid length.
[  439.831262][ T8104] FAULT_INJECTION: forcing a failure.
[  439.831262][ T8104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.864588][ T8104] CPU: 1 PID: 8104 Comm: syz.2.776 Not tainted syzkaller #0
[  439.871945][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  439.882029][ T8104] Call Trace:
[  439.885340][ T8104]  <TASK>
[  439.888305][ T8104]  dump_stack_lvl+0x18c/0x250
[  439.893021][ T8104]  ? show_regs_print_info+0x20/0x20
[  439.898249][ T8104]  ? load_image+0x420/0x420
[  439.902781][ T8104]  ? __might_fault+0xaa/0x120
[  439.907489][ T8104]  ? __lock_acquire+0x7d80/0x7d80
[  439.912543][ T8104]  should_fail_ex+0x394/0x4c0
[  439.917256][ T8104]  _copy_from_user+0x2f/0xe0
[  439.921881][ T8104]  mptcp_setsockopt+0x2065/0x3370
[  439.927056][ T8104]  ? aa_sk_perm+0x83c/0x970
[  439.931563][ T8104]  ? __fget_files+0x28/0x460
[  439.936153][ T8104]  ? pm_nl_exit_net+0x230/0x230
[  439.941011][ T8104]  ? aa_af_perm+0x330/0x330
[  439.945513][ T8104]  ? __fget_files+0x28/0x460
[  439.950100][ T8104]  ? aa_sock_opt_perm+0x74/0x100
[  439.955040][ T8104]  ? sock_common_setsockopt+0x36/0xc0
[  439.960412][ T8104]  ? sock_common_recvmsg+0x190/0x190
[  439.965697][ T8104]  do_sock_setsockopt+0x175/0x1a0
[  439.970731][ T8104]  __x64_sys_setsockopt+0x182/0x200
[  439.975933][ T8104]  do_syscall_64+0x55/0xb0
[  439.980358][ T8104]  ? clear_bhb_loop+0x40/0x90
[  439.985048][ T8104]  ? clear_bhb_loop+0x40/0x90
[  439.989721][ T8104]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.995617][ T8104] RIP: 0033:0x7f789739de59
[  440.000033][ T8104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.019643][ T8104] RSP: 002b:00007f7898220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  440.028060][ T8104] RAX: ffffffffffffffda RBX: 00007f7897625fa0 RCX: 00007f789739de59
[  440.036030][ T8104] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000007
[  440.043995][ T8104] RBP: 00007f7898220090 R08: 0000000000000008 R09: 0000000000000000
[  440.051962][ T8104] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  440.059926][ T8104] R13: 00007f7897626038 R14: 00007f7897625fa0 R15: 00007ffc42a05dd8
[  440.067904][ T8104]  </TASK>
[  440.116378][ T8113] netlink: 'syz.0.780': attribute type 21 has an invalid length.
[  440.238063][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.244896][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  440.317949][ T8120] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  441.062204][ T8141] FAULT_INJECTION: forcing a failure.
[  441.062204][ T8141] name failslab, interval 1, probability 0, space 0, times 0
[  441.088979][ T8141] CPU: 1 PID: 8141 Comm: syz.1.789 Not tainted syzkaller #0
[  441.096326][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  441.106400][ T8141] Call Trace:
[  441.109744][ T8141]  <TASK>
[  441.112697][ T8141]  dump_stack_lvl+0x18c/0x250
[  441.117422][ T8141]  ? show_regs_print_info+0x20/0x20
[  441.122653][ T8141]  ? load_image+0x420/0x420
[  441.127182][ T8141]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  441.133281][ T8141]  ? __asan_memset+0x22/0x40
[  441.137896][ T8141]  should_fail_ex+0x394/0x4c0
[  441.142580][ T8141]  should_failslab+0x9/0x20
[  441.147087][ T8141]  slab_pre_alloc_hook+0x59/0x300
[  441.152943][ T8141]  ? __debug_object_init+0xec/0x450
[  441.158150][ T8141]  kmem_cache_alloc+0x5a/0x2c0
[  441.162931][ T8141]  ? slab_build_skb+0x28/0x3e0
[  441.167702][ T8141]  slab_build_skb+0x28/0x3e0
[  441.172306][ T8141]  bpf_prog_test_run_skb+0x38f/0x18f0
[  441.177682][ T8141]  ? __fget_files+0x28/0x460
[  441.182362][ T8141]  ? __fget_files+0x3fc/0x460
[  441.187049][ T8141]  ? cpu_online+0x60/0x60
[  441.191378][ T8141]  bpf_prog_test_run+0x31f/0x390
[  441.196345][ T8141]  __sys_bpf+0x49d/0x890
[  441.200589][ T8141]  ? bpf_link_show_fdinfo+0x390/0x390
[  441.205978][ T8141]  ? lock_chain_count+0x20/0x20
[  441.210856][ T8141]  __x64_sys_bpf+0x7c/0x90
[  441.215371][ T8141]  do_syscall_64+0x55/0xb0
[  441.219809][ T8141]  ? clear_bhb_loop+0x40/0x90
[  441.224485][ T8141]  ? clear_bhb_loop+0x40/0x90
[  441.229156][ T8141]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.235057][ T8141] RIP: 0033:0x7f0affd9de59
[  441.239474][ T8141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.259091][ T8141] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  441.267509][ T8141] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  441.275482][ T8141] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  441.283448][ T8141] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  441.291417][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.299398][ T8141] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  441.307379][ T8141]  </TASK>
[  441.355948][ T8144] validate_nla: 1 callbacks suppressed
[  441.355969][ T8144] netlink: 'syz.0.790': attribute type 3 has an invalid length.
[  441.358185][ T8140] __nla_validate_parse: 5 callbacks suppressed
[  441.358232][ T8140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.788'.
[  441.376113][ T8144] netlink: 16795 bytes leftover after parsing attributes in process `syz.0.790'.
[  441.447468][ T8144] netlink: 'syz.0.790': attribute type 10 has an invalid length.
[  441.464382][ T8144] veth0_vlan: left promiscuous mode
[  441.471180][ T8144] veth0_vlan: entered promiscuous mode
[  441.482451][ T8144] team0: Device veth0_vlan failed to register rx_handler
[  441.706941][ T8152] netlink: 'syz.1.792': attribute type 1 has an invalid length.
[  441.723133][ T8152] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.792'.
[  441.754113][ T8152] netlink: 5 bytes leftover after parsing attributes in process `syz.1.792'.
[  442.042849][ T8168] netlink: 830 bytes leftover after parsing attributes in process `syz.2.799'.
[  442.321276][ T8174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.801'.
[  443.169317][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'.
[  443.189356][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'.
[  443.199905][ T8180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'.
[  443.242937][ T8181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'.
[  443.448790][ T8186] netlink: 'syz.3.805': attribute type 1 has an invalid length.
[  444.608225][ T8216] syzkaller0: entered promiscuous mode
[  444.616385][ T8216] syzkaller0: entered allmulticast mode
[  445.187521][ T8228] netlink: 'syz.1.819': attribute type 1 has an invalid length.
[  446.582545][ T8222] netlink: 'syz.0.817': attribute type 21 has an invalid length.
[  446.590487][ T8222] IPv6: NLM_F_CREATE should be specified when creating new route
[  446.598375][ T8222] IPv6: Can't replace route, no match found
[  446.605077][ T8223] netlink: 'syz.0.817': attribute type 10 has an invalid length.
[  446.660575][ T8223] wg1: entered promiscuous mode
[  446.669371][ T8223] wg1: entered allmulticast mode
[  446.675627][ T8223] team0: Device wg1 is of different type
[  446.826325][ T8237] netlink: 'syz.3.822': attribute type 33 has an invalid length.
[  446.843028][ T8237] __nla_validate_parse: 4 callbacks suppressed
[  446.843045][ T8237] netlink: 164 bytes leftover after parsing attributes in process `syz.3.822'.
[  446.882046][ T8241] FAULT_INJECTION: forcing a failure.
[  446.882046][ T8241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.897592][ T8241] CPU: 0 PID: 8241 Comm: syz.1.824 Not tainted syzkaller #0
[  446.904946][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  446.915051][ T8241] Call Trace:
[  446.918371][ T8241]  <TASK>
[  446.921337][ T8241]  dump_stack_lvl+0x18c/0x250
[  446.926079][ T8241]  ? show_regs_print_info+0x20/0x20
[  446.931327][ T8241]  ? load_image+0x420/0x420
[  446.935893][ T8241]  ? __might_fault+0xaa/0x120
[  446.940622][ T8241]  ? __lock_acquire+0x7d80/0x7d80
[  446.945712][ T8241]  should_fail_ex+0x394/0x4c0
[  446.950464][ T8241]  _copy_from_iter+0x1cd/0x1290
[  446.955632][ T8241]  ? rep_movs_alternative+0x4a/0x90
[  446.960915][ T8241]  ? copyout_mc+0x70/0x70
[  446.965349][ T8241]  ? copyout_mc+0x70/0x70
[  446.969733][ T8241]  ? __virt_addr_valid+0x10c/0x380
[  446.975001][ T8241]  ? page_copy_sane+0x16a/0x270
[  446.976496][ T8243] netlink: 164 bytes leftover after parsing attributes in process `syz.2.825'.
[  446.979886][ T8241]  copy_page_from_iter+0x7b/0x100
[  446.993919][ T8241]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  446.999816][ T8241]  unix_stream_sendmsg+0x562/0xbf0
[  447.005044][ T8241]  ? unix_show_fdinfo+0x280/0x280
[  447.010111][ T8241]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  447.016567][ T8241]  ? apparmor_socket_sendmsg+0x8e/0x330
[  447.022136][ T8241]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  447.027435][ T8241]  ? security_socket_sendmsg+0x80/0xa0
[  447.032938][ T8241]  ? unix_show_fdinfo+0x280/0x280
[  447.037989][ T8241]  ____sys_sendmsg+0x61b/0x980
[  447.042792][ T8241]  ? __sys_sendmsg_sock+0x30/0x30
[  447.047841][ T8241]  ? __import_iovec+0x5f2/0x850
[  447.052822][ T8241]  ? import_iovec+0x73/0xa0
[  447.057360][ T8241]  ___sys_sendmsg+0x2a6/0x360
[  447.062072][ T8241]  ? __sys_sendmsg+0x2b0/0x2b0
[  447.066907][ T8241]  ? __lock_acquire+0x7d80/0x7d80
[  447.072008][ T8241]  __se_sys_sendmsg+0x1d0/0x2c0
[  447.076885][ T8241]  ? __x64_sys_sendmsg+0x80/0x80
[  447.081885][ T8241]  ? lockdep_hardirqs_on+0x98/0x150
[  447.087118][ T8241]  do_syscall_64+0x55/0xb0
[  447.091636][ T8241]  ? clear_bhb_loop+0x40/0x90
[  447.096411][ T8241]  ? clear_bhb_loop+0x40/0x90
[  447.101102][ T8241]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  447.107015][ T8241] RIP: 0033:0x7f0affd9de59
[  447.111446][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.131068][ T8241] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.139502][ T8241] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  447.147572][ T8241] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000003
[  447.155562][ T8241] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  447.163577][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  447.171571][ T8241] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  447.179592][ T8241]  </TASK>
[  447.539982][ T8252] netlink: 'syz.3.828': attribute type 1 has an invalid length.
[  447.548048][ T8252] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.828'.
[  447.565345][ T8252] netlink: 5 bytes leftover after parsing attributes in process `syz.3.828'.
[  447.651148][ T8256] netlink: 14 bytes leftover after parsing attributes in process `syz.0.830'.
[  447.661601][ T8256] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  447.816729][ T8263] netlink: 'syz.3.834': attribute type 39 has an invalid length.
[  449.697347][ T8311] netlink: 'syz.0.840': attribute type 1 has an invalid length.
[  449.713811][ T8311] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.840'.
[  449.741979][ T8311] netlink: 5 bytes leftover after parsing attributes in process `syz.0.840'.
[  449.788726][ T8306] syz.2.839 (8306) used obsolete PPPIOCDETACH ioctl
[  449.921399][ T8319] sctp: [Deprecated]: syz.0.844 (pid 8319) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.921399][ T8319] Use struct sctp_sack_info instead
[  450.126576][ T8327] netlink: 'syz.2.846': attribute type 21 has an invalid length.
[  450.136234][ T8327] netlink: 'syz.2.846': attribute type 1 has an invalid length.
[  450.145496][ T8327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.846'.
[  450.207539][ T8319] netlink: 'syz.0.844': attribute type 4 has an invalid length.
[  450.222773][ T8319] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.844'.
[  450.694153][ T8340] netlink: 'syz.0.849': attribute type 10 has an invalid length.
[  451.085346][ T8345] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.851'.
[  451.718455][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.726652][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.760748][ T8347] validate_nla: 1 callbacks suppressed
[  451.760769][ T8347] netlink: 'syz.3.852': attribute type 1 has an invalid length.
[  451.768446][ T8340] bridge0: left promiscuous mode
[  451.820402][ T8340] bridge0: left allmulticast mode
[  451.871553][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.878833][ T8340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.886479][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.893712][ T8340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.968781][ T8340] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  452.230396][ T8351] __nla_validate_parse: 2 callbacks suppressed
[  452.230413][ T8351] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.854'.
[  452.276252][ T8351] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô'
[  452.303685][ T8351] CPU: 1 PID: 8351 Comm: syz.1.854 Not tainted syzkaller #0
[  452.311052][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  452.321144][ T8351] Call Trace:
[  452.324447][ T8351]  <TASK>
[  452.327406][ T8351]  dump_stack_lvl+0x18c/0x250
[  452.332167][ T8351]  ? show_regs_print_info+0x20/0x20
[  452.337427][ T8351]  ? load_image+0x420/0x420
[  452.341990][ T8351]  sysfs_warn_dup+0x8e/0xa0
[  452.346542][ T8351]  sysfs_do_create_link_sd+0xc0/0x110
[  452.351963][ T8351]  device_add_class_symlinks+0x1cf/0x240
[  452.357690][ T8351]  device_add+0x4f9/0xc40
[  452.362065][ T8351]  wiphy_register+0x1d99/0x2ac0
[  452.367097][ T8351]  ? cfg80211_event_work+0x40/0x40
[  452.372257][ T8351]  ? minstrel_ht_alloc+0x88a/0x990
[  452.377516][ T8351]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  452.383723][ T8351]  ieee80211_register_hw+0x2dd8/0x3b30
[  452.389302][ T8351]  ? ieee80211_register_hw+0xef1/0x3b30
[  452.394895][ T8351]  ? ieee80211_tasklet_handler+0x20/0x20
[  452.400572][ T8351]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  452.406521][ T8351]  ? __debug_object_init+0xec/0x450
[  452.411745][ T8351]  ? __asan_memset+0x22/0x40
[  452.416352][ T8351]  ? __hrtimer_init+0x189/0x270
[  452.421217][ T8351]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  452.427008][ T8351]  ? mac80211_hwsim_free+0x220/0x220
[  452.432386][ T8351]  ? rcu_is_watching+0x15/0xb0
[  452.437156][ T8351]  ? kstrndup+0xbd/0x140
[  452.441414][ T8351]  hwsim_new_radio_nl+0xdad/0x1a70
[  452.446558][ T8351]  ? __nla_validate+0x50/0x50
[  452.451293][ T8351]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  452.457697][ T8351]  ? __nla_parse+0x40/0x50
[  452.462136][ T8351]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  452.468486][ T8351]  genl_family_rcv_msg_doit+0x21a/0x310
[  452.474058][ T8351]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  452.479977][ T8351]  ? bpf_lsm_capable+0x9/0x10
[  452.484663][ T8351]  ? security_capable+0x89/0xb0
[  452.489578][ T8351]  genl_rcv_msg+0x611/0x7a0
[  452.494165][ T8351]  ? genl_bind+0x360/0x360
[  452.498612][ T8351]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  452.504980][ T8351]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  452.511583][ T8351]  ? ref_tracker_free+0x686/0x830
[  452.516638][ T8351]  netlink_rcv_skb+0x235/0x4c0
[  452.521419][ T8351]  ? genl_bind+0x360/0x360
[  452.525847][ T8351]  ? netlink_ack+0x1160/0x1160
[  452.530627][ T8351]  ? __lock_acquire+0x7d80/0x7d80
[  452.535677][ T8351]  ? down_read+0x1ac/0x2e0
[  452.540104][ T8351]  genl_rcv+0x28/0x40
[  452.544181][ T8351]  netlink_unicast+0x7b1/0x930
[  452.548996][ T8351]  netlink_sendmsg+0x8d0/0xbf0
[  452.553794][ T8351]  ? netlink_getsockopt+0x590/0x590
[  452.559011][ T8351]  ? apparmor_socket_sendmsg+0x8e/0x330
[  452.564568][ T8351]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  452.569864][ T8351]  ? security_socket_sendmsg+0x80/0xa0
[  452.575330][ T8351]  ? netlink_getsockopt+0x590/0x590
[  452.580544][ T8351]  ____sys_sendmsg+0x61b/0x980
[  452.585355][ T8351]  ? __asan_memset+0x22/0x40
[  452.589950][ T8351]  ? __sys_sendmsg_sock+0x30/0x30
[  452.594980][ T8351]  ? __import_iovec+0x5f2/0x850
[  452.599844][ T8351]  ? import_iovec+0x73/0xa0
[  452.604356][ T8351]  ___sys_sendmsg+0x2a6/0x360
[  452.609044][ T8351]  ? __sys_sendmsg+0x2b0/0x2b0
[  452.613863][ T8351]  __se_sys_sendmsg+0x1d0/0x2c0
[  452.618724][ T8351]  ? __x64_sys_sendmsg+0x80/0x80
[  452.623699][ T8351]  ? lockdep_hardirqs_on+0x98/0x150
[  452.628917][ T8351]  do_syscall_64+0x55/0xb0
[  452.633342][ T8351]  ? clear_bhb_loop+0x40/0x90
[  452.638023][ T8351]  ? clear_bhb_loop+0x40/0x90
[  452.642703][ T8351]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.648606][ T8351] RIP: 0033:0x7f0affd9de59
[  452.653049][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.672674][ T8351] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.681099][ T8351] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  452.689080][ T8351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  452.697058][ T8351] RBP: 00007f0affe33e6f R08: 0000000000000000 R09: 0000000000000000
[  452.705033][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.713006][ T8351] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  452.721010][ T8351]  </TASK>
[  452.744255][ T8354] netlink: 'syz.3.856': attribute type 10 has an invalid length.
[  453.126839][ T8362] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  453.420137][ T8371] netlink: 'syz.3.861': attribute type 1 has an invalid length.
[  453.438798][ T8371] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.861'.
[  453.452489][ T8371] netlink: 5 bytes leftover after parsing attributes in process `syz.3.861'.
[  453.719767][ T8378] FAULT_INJECTION: forcing a failure.
[  453.719767][ T8378] name failslab, interval 1, probability 0, space 0, times 0
[  453.746751][ T8378] CPU: 0 PID: 8378 Comm: syz.1.864 Not tainted syzkaller #0
[  453.754106][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  453.764198][ T8378] Call Trace:
[  453.767498][ T8378]  <TASK>
[  453.770718][ T8378]  dump_stack_lvl+0x18c/0x250
[  453.775437][ T8378]  ? show_regs_print_info+0x20/0x20
[  453.780675][ T8378]  ? load_image+0x420/0x420
[  453.785222][ T8378]  ? perf_trace_lock_acquire+0x105/0x400
[  453.790901][ T8378]  ? verify_lock_unused+0x140/0x140
[  453.796137][ T8378]  ? perf_trace_lock_acquire+0x105/0x400
[  453.801812][ T8378]  should_fail_ex+0x394/0x4c0
[  453.806524][ T8378]  should_failslab+0x9/0x20
[  453.811051][ T8378]  slab_pre_alloc_hook+0x59/0x300
[  453.816100][ T8378]  kmem_cache_alloc+0x5a/0x2c0
[  453.820877][ T8378]  ? skb_clone+0x1eb/0x370
[  453.825302][ T8378]  skb_clone+0x1eb/0x370
[  453.829548][ T8378]  __netlink_deliver_tap+0x411/0x7f0
[  453.834868][ T8378]  ? netlink_deliver_tap+0x2e/0x1b0
[  453.840102][ T8378]  netlink_deliver_tap+0x19c/0x1b0
[  453.845231][ T8378]  netlink_unicast+0x77b/0x930
[  453.850005][ T8378]  netlink_sendmsg+0x8d0/0xbf0
[  453.854784][ T8378]  ? netlink_getsockopt+0x590/0x590
[  453.859986][ T8378]  ? apparmor_socket_sendmsg+0x8e/0x330
[  453.865533][ T8378]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  453.870836][ T8378]  ? security_socket_sendmsg+0x80/0xa0
[  453.876311][ T8378]  ? netlink_getsockopt+0x590/0x590
[  453.881531][ T8378]  ____sys_sendmsg+0x61b/0x980
[  453.886316][ T8378]  ? __asan_memset+0x22/0x40
[  453.890916][ T8378]  ? __sys_sendmsg_sock+0x30/0x30
[  453.895940][ T8378]  ? __import_iovec+0x3fa/0x850
[  453.900800][ T8378]  ? import_iovec+0x73/0xa0
[  453.905306][ T8378]  ___sys_sendmsg+0x2a6/0x360
[  453.909990][ T8378]  ? get_pid_task+0x20/0x1e0
[  453.914587][ T8378]  ? __sys_sendmsg+0x2b0/0x2b0
[  453.919378][ T8378]  ? __lock_acquire+0x7d80/0x7d80
[  453.924426][ T8378]  __se_sys_sendmsg+0x1d0/0x2c0
[  453.929299][ T8378]  ? __x64_sys_sendmsg+0x80/0x80
[  453.934260][ T8378]  ? lockdep_hardirqs_on+0x98/0x150
[  453.939463][ T8378]  do_syscall_64+0x55/0xb0
[  453.943882][ T8378]  ? clear_bhb_loop+0x40/0x90
[  453.948556][ T8378]  ? clear_bhb_loop+0x40/0x90
[  453.953236][ T8378]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.959138][ T8378] RIP: 0033:0x7f0affd9de59
[  453.963556][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.983232][ T8378] RSP: 002b:00007f0b00be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.991680][ T8378] RAX: ffffffffffffffda RBX: 00007f0b00025fa0 RCX: 00007f0affd9de59
[  453.999654][ T8378] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  454.007631][ T8378] RBP: 00007f0b00be2090 R08: 0000000000000000 R09: 0000000000000000
[  454.015603][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.023576][ T8378] R13: 00007f0b00026038 R14: 00007f0b00025fa0 R15: 00007ffd3dce4318
[  454.031571][ T8378]  </TASK>
[  454.054103][ T8378] netlink: 14 bytes leftover after parsing attributes in process `syz.1.864'.
[  454.228003][ T8385] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.866'.
[  454.926376][ T8402] netlink: 188 bytes leftover after parsing attributes in process `syz.2.870'.
[  455.023810][ T8404] netlink: 'syz.0.871': attribute type 1 has an invalid length.
[  455.047688][ T8404] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.871'.
[  455.116044][ T8404] netlink: 5 bytes leftover after parsing attributes in process `syz.0.871'.
[  455.949943][ T8431] netlink: 'syz.1.880': attribute type 10 has an invalid length.
[  455.996923][ T8431] netlink: 55 bytes leftover after parsing attributes in process `syz.1.880'.
[  456.225826][ T8430] netlink: 'syz.1.880': attribute type 10 has an invalid length.
[  456.249189][ T8430] netlink: 55 bytes leftover after parsing attributes in process `syz.1.880'.
[  456.686023][ T8435] netlink: 'syz.1.881': attribute type 21 has an invalid length.
[  456.694716][ T8435] netlink: 'syz.1.881': attribute type 6 has an invalid length.
[  456.721126][ T8439] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  457.044994][   T59] wlan1: Trigger new scan to find an IBSS to join
[  457.602516][ T8471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  457.610508][ T8471] IPv6: NLM_F_CREATE should be set when creating new route
[  457.618583][ T8471] IPv6: NLM_F_CREATE should be set when creating new route
[  457.626626][ T8471] IPv6: NLM_F_CREATE should be set when creating new route
[  457.679669][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[  457.679723][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  457.686182][ T5826] Bluetooth: hci0: command 0x0406 tx timeout
[  457.693589][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  457.859647][ T8473] netlink: 'syz.3.894': attribute type 1 has an invalid length.
[  457.914856][ T8473] __nla_validate_parse: 5 callbacks suppressed
[  457.914878][ T8473] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.894'.
[  457.938107][ T8473] netlink: 5 bytes leftover after parsing attributes in process `syz.3.894'.
[  458.428830][ T8479] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  458.464883][ T8479] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.896'.
[  458.473199][ T8481] netlink: 'syz.2.897': attribute type 28 has an invalid length.
[  458.484467][ T8481] netlink: 'syz.2.897': attribute type 29 has an invalid length.
[  458.497908][ T8481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.897'.
[  458.609466][ T8481] syzkaller0: entered promiscuous mode
[  458.638008][ T8481] syzkaller0: entered allmulticast mode
[  458.780073][ T8484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.898'.
[  458.864302][ T8484] netlink: 'syz.3.898': attribute type 10 has an invalid length.
[  459.040929][ T8484] veth1_macvtap: left promiscuous mode
[  459.501584][ T8491] netlink: 156 bytes leftover after parsing attributes in process `syz.1.901'.
[  459.725084][ T8506] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[  459.740479][ T8506] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.906'.
[  459.759533][ T8506] netlink: 5 bytes leftover after parsing attributes in process `syz.2.906'.
[  460.084266][ T5865] wlan1: Trigger new scan to find an IBSS to join
[  460.146293][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'.
[  460.242179][ T8523] netlink: 'syz.2.913': attribute type 10 has an invalid length.
[  460.290169][ T8523] veth1_macvtap: left promiscuous mode
[  461.129919][ T5865] wlan1: Creating new IBSS network, BSSID 02:db:2b:13:11:21
[  461.319329][ T8537] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  461.363667][ T8537] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.917'.
[  461.546799][ T8541] syzkaller0: entered promiscuous mode
[  461.552480][ T8541] syzkaller0: entered allmulticast mode
[  461.596735][ T8541] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  461.856078][ T8546] netlink: 'syz.0.921': attribute type 10 has an invalid length.
[  461.877768][ T8546] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  462.382365][ T8567] netlink: 'syz.3.928': attribute type 1 has an invalid length.
[  462.611889][ T8583] FAULT_INJECTION: forcing a failure.
[  462.611889][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.615061][ T8584] team0: Device syz_tun is up. Set it down before adding it as a team port
[  462.629025][ T8583] CPU: 0 PID: 8583 Comm: syz.0.934 Not tainted syzkaller #0
[  462.641001][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  462.651111][ T8583] Call Trace:
[  462.654418][ T8583]  <TASK>
[  462.657377][ T8583]  dump_stack_lvl+0x18c/0x250
[  462.662139][ T8583]  ? show_regs_print_info+0x20/0x20
[  462.667398][ T8583]  ? load_image+0x420/0x420
[  462.671958][ T8583]  ? __might_fault+0xaa/0x120
[  462.676698][ T8583]  ? __lock_acquire+0x7d80/0x7d80
[  462.681731][ T8583]  should_fail_ex+0x394/0x4c0
[  462.686446][ T8583]  _copy_from_iter+0x1cd/0x1290
[  462.691340][ T8583]  ? rep_movs_alternative+0x4a/0x90
[  462.696591][ T8583]  ? copyout_mc+0x70/0x70
[  462.700972][ T8583]  ? copyout_mc+0x70/0x70
[  462.705332][ T8583]  ? __virt_addr_valid+0x10c/0x380
[  462.710479][ T8583]  ? page_copy_sane+0x16a/0x270
[  462.715366][ T8583]  copy_page_from_iter+0x7b/0x100
[  462.720415][ T8583]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  462.726255][ T8583]  tun_get_user+0xc84/0x3d70
[  462.730867][ T8583]  ? trace_event_raw_event_lock+0x150/0x240
[  462.736780][ T8583]  ? aa_file_perm+0x3e3/0xee0
[  462.741468][ T8583]  ? rcu_read_unlock+0xa0/0xa0
[  462.746261][ T8583]  ? tun_get+0x1c/0x2e0
[  462.750421][ T8583]  ? __lock_acquire+0x7d80/0x7d80
[  462.755470][ T8583]  ? tun_get+0x1c/0x2e0
[  462.759640][ T8583]  tun_chr_write_iter+0x119/0x200
[  462.764670][ T8583]  vfs_write+0x474/0x9a0
[  462.768930][ T8583]  ? file_end_write+0x250/0x250
[  462.773805][ T8583]  ? __fget_files+0x3fc/0x460
[  462.778504][ T8583]  ? __fdget_pos+0x1d8/0x330
[  462.783100][ T8583]  ? ksys_write+0x74/0x260
[  462.787538][ T8583]  ksys_write+0x151/0x260
[  462.791915][ T8583]  ? __ia32_sys_read+0x90/0x90
[  462.796765][ T8583]  ? lockdep_hardirqs_on+0x98/0x150
[  462.802010][ T8583]  do_syscall_64+0x55/0xb0
[  462.806442][ T8583]  ? clear_bhb_loop+0x40/0x90
[  462.811126][ T8583]  ? clear_bhb_loop+0x40/0x90
[  462.815811][ T8583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  462.821847][ T8583] RIP: 0033:0x7fb60bf9de59
[  462.826271][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.845891][ T8583] RSP: 002b:00007fb60ceba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.854316][ T8583] RAX: ffffffffffffffda RBX: 00007fb60c225fa0 RCX: 00007fb60bf9de59
[  462.862299][ T8583] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  462.870277][ T8583] RBP: 00007fb60ceba090 R08: 0000000000000000 R09: 0000000000000000
[  462.878256][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.886324][ T8583] R13: 00007fb60c226038 R14: 00007fb60c225fa0 R15: 00007fff8e9ac4b8
[  462.894353][ T8583]  </TASK>
[  462.918620][ T8586] validate_nla: 1 callbacks suppressed
[  462.918638][ T8586] netlink: 'syz.2.936': attribute type 29 has an invalid length.
[  462.944672][ T8586] netlink: 'syz.2.936': attribute type 29 has an invalid length.
[  463.059427][ T8590] netlink: 'syz.3.938': attribute type 10 has an invalid length.
[  463.086328][ T8590] __nla_validate_parse: 4 callbacks suppressed
[  463.086402][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.938'.
[  463.145888][ T8590] bridge0: port 3(team0) entered disabled state
[  463.188881][ T8590] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  463.249659][ T8597] ==================================================================
[  463.257786][ T8597] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  463.265716][ T8597] Write of size 72 at addr ffff88801c754a90 by task syz.2.940/8597
[  463.273635][ T8597] 
[  463.276082][ T8597] CPU: 0 PID: 8597 Comm: syz.2.940 Not tainted syzkaller #0
[  463.282216][ T8599] netlink: 'syz.0.941': attribute type 1 has an invalid length.
[  463.283407][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  463.283422][ T8597] Call Trace:
[  463.283430][ T8597]  <TASK>
[  463.283439][ T8597]  dump_stack_lvl+0x18c/0x250
[  463.291439][ T8599] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.941'.
[  463.301151][ T8597]  ? read_lock_is_recursive+0x20/0x20
[  463.301184][ T8597]  ? show_regs_print_info+0x20/0x20
[  463.301209][ T8597]  ? load_image+0x420/0x420
[  463.301229][ T8597]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  463.301252][ T8597]  ? __virt_addr_valid+0x10c/0x380
[  463.301276][ T8597]  ? __virt_addr_valid+0x10c/0x380
[  463.301299][ T8597]  ? __virt_addr_valid+0x10c/0x380
[  463.301322][ T8597]  print_report+0xa8/0x210
[  463.301349][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  463.301370][ T8597]  kasan_report+0x117/0x150
[  463.301394][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  463.301417][ T8597]  kasan_check_range+0x241/0x290
[  463.347419][ T8599] netlink: 5 bytes leftover after parsing attributes in process `syz.0.941'.
[  463.352204][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  463.352238][ T8597]  __asan_memcpy+0x40/0x70
[  463.352267][ T8597]  __bpf_get_stackid+0x6c7/0x900
[  463.352295][ T8597]  bpf_get_stackid_pe+0x343/0x410
[  463.409700][ T8597]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  463.415189][ T8597]  bpf_overflow_handler+0x1fc/0x510
[  463.420421][ T8597]  ? bpf_overflow_handler+0xde/0x510
[  463.425736][ T8597]  ? tp_perf_event_destroy+0x20/0x20
[  463.431062][ T8597]  ? perf_trace_preemptirq_template+0x144/0x330
[  463.437345][ T8597]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  463.444579][ T8597]  ? __perf_event_account_interrupt+0x187/0x280
[  463.450848][ T8597]  __perf_event_overflow+0x461/0x660
[  463.456215][ T8597]  perf_swevent_event+0x319/0x570
[  463.461272][ T8597]  ? perf_tp_event+0x1550/0x1550
[  463.466238][ T8597]  ? perf_tp_event+0x13f5/0x1550
[  463.471203][ T8597]  ___perf_sw_event+0x4ab/0x730
[  463.476089][ T8597]  ? ___perf_sw_event+0x19e/0x730
[  463.481144][ T8597]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  463.487605][ T8597]  ? rep_movs_alternative+0x4a/0x90
[  463.492831][ T8597]  ? verify_lock_unused+0x140/0x140
[  463.498060][ T8597]  ? kasan_set_track+0x5f/0x70
[  463.502860][ T8597]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  463.508955][ T8597]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  463.514708][ T8597]  ? lock_chain_count+0x20/0x20
[  463.519589][ T8597]  __perf_sw_event+0x139/0x270
[  463.524384][ T8597]  do_user_addr_fault+0x1242/0x12d0
[  463.529616][ T8597]  ? rcu_is_watching+0x15/0xb0
[  463.534411][ T8597]  exc_page_fault+0x64/0x100
[  463.539035][ T8597]  asm_exc_page_fault+0x26/0x30
[  463.543914][ T8597] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  463.549756][ T8597] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  463.569476][ T8597] RSP: 0018:ffffc9000cb17bd0 EFLAGS: 00050206
[  463.575585][ T8597] RAX: ffffffff84312701 RBX: 000000000000056d RCX: 00000000000004ed
[  463.578449][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.583563][ T8597] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88807e3c6080
[  463.583582][ T8597] RBP: ffffc9000cb17d20 R08: 0000000000000004 R09: 0000000000000005
[  463.583595][ T8597] R10: dffffc0000000000 R11: ffffed100fc78cad R12: 00002000000024ed
[  463.583608][ T8597] R13: 1ffff92001962fbd R14: ffff88807e3c6000 R15: 0000200000001f80
[  463.583626][ T8597]  ? _copy_from_user+0x51/0xe0
[  463.583656][ T8597]  _copy_from_user+0x8b/0xe0
[  463.583676][ T8597]  generic_map_update_batch+0x58c/0x800
[  463.583703][ T8597]  ? rcu_read_unlock+0xa0/0xa0
[  463.642458][ T8597]  ? __fdget+0x180/0x210
[  463.646745][ T8597]  ? rcu_read_unlock+0xa0/0xa0
[  463.651540][ T8597]  bpf_map_do_batch+0x3f2/0x600
[  463.656420][ T8597]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  463.662793][ T8597]  __sys_bpf+0x381/0x890
[  463.667090][ T8597]  ? bpf_link_show_fdinfo+0x390/0x390
[  463.672508][ T8597]  ? lock_chain_count+0x20/0x20
[  463.677409][ T8597]  __x64_sys_bpf+0x7c/0x90
[  463.682033][ T8597]  do_syscall_64+0x55/0xb0
[  463.686532][ T8597]  ? clear_bhb_loop+0x40/0x90
[  463.691232][ T8597]  ? clear_bhb_loop+0x40/0x90
[  463.695921][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  463.701863][ T8597] RIP: 0033:0x7f789739de59
[  463.706315][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.725959][ T8597] RSP: 002b:00007f7898220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  463.734379][ T8597] RAX: ffffffffffffffda RBX: 00007f7897625fa0 RCX: 00007f789739de59
[  463.742363][ T8597] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  463.750617][ T8597] RBP: 00007f7897433e6f R08: 0000000000000000 R09: 0000000000000000
[  463.758634][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.766612][ T8597] R13: 00007f7897626038 R14: 00007f7897625fa0 R15: 00007ffc42a05dd8
[  463.774609][ T8597]  </TASK>
[  463.777642][ T8597] 
[  463.779961][ T8597] Allocated by task 8597:
[  463.784366][ T8597]  kasan_set_track+0x4e/0x70
[  463.788963][ T8597]  __kasan_kmalloc+0x8f/0xa0
[  463.793564][ T8597]  __kmalloc_node+0xb6/0x240
[  463.798171][ T8597]  bpf_map_area_alloc+0x5e/0x110
[  463.803127][ T8597]  prealloc_elems_and_freelist+0x86/0x1c0
[  463.808864][ T8597]  stack_map_alloc+0x32b/0x4b0
[  463.813641][ T8597]  map_create+0x877/0x12f0
[  463.818099][ T8597]  __sys_bpf+0x651/0x890
[  463.822348][ T8597]  __x64_sys_bpf+0x7c/0x90
[  463.826794][ T8597]  do_syscall_64+0x55/0xb0
[  463.831302][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  463.837197][ T8597] 
[  463.839526][ T8597] Last potentially related work creation:
[  463.845231][ T8597]  kasan_save_stack+0x3e/0x60
[  463.849903][ T8597]  __kasan_record_aux_stack+0xaf/0xc0
[  463.855375][ T8597]  call_rcu+0x153/0x900
[  463.859646][ T8597]  nf_unregister_net_hooks+0xcb/0x130
[  463.865033][ T8597]  nf_defrag_ipv4_disable+0x95/0xe0
[  463.870249][ T8597]  nf_ct_netns_put+0x2da/0x520
[  463.875027][ T8597]  nf_conncount_destroy+0x41/0x150
[  463.880227][ T8597]  ovs_ct_exit+0x9c/0x200
[  463.884624][ T8597]  ovs_exit_net+0xed/0x7a0
[  463.889069][ T8597]  setup_net+0x7e5/0xa20
[  463.893309][ T8597]  copy_net_ns+0x35e/0x5d0
[  463.897720][ T8597]  create_new_namespaces+0x3ce/0x700
[  463.903001][ T8597]  copy_namespaces+0x42a/0x4a0
[  463.907758][ T8597]  copy_process+0x174a/0x3df0
[  463.912431][ T8597]  kernel_clone+0x24b/0x8a0
[  463.916928][ T8597]  __x64_sys_clone+0x1b7/0x230
[  463.921688][ T8597]  do_syscall_64+0x55/0xb0
[  463.926108][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  463.932007][ T8597] 
[  463.934319][ T8597] The buggy address belongs to the object at ffff88801c754a80
[  463.934319][ T8597]  which belongs to the cache kmalloc-cg-64 of size 64
[  463.948559][ T8597] The buggy address is located 16 bytes inside of
[  463.948559][ T8597]  allocated 40-byte region [ffff88801c754a80, ffff88801c754aa8)
[  463.962538][ T8597] 
[  463.964861][ T8597] The buggy address belongs to the physical page:
[  463.971354][ T8597] page:ffffea000071d500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c754
[  463.981502][ T8597] memcg:ffff888077a58801
[  463.985731][ T8597] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  463.993266][ T8597] page_type: 0xffffffff()
[  463.997591][ T8597] raw: 00fff00000000800 ffff888017c4da00 ffffea00009a6880 0000000000000002
[  464.006174][ T8597] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888077a58801
[  464.014748][ T8597] page dumped because: kasan: bad access detected
[  464.021157][ T8597] page_owner tracks the page as allocated
[  464.026861][ T8597] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5817, tgid 5817 (syz-executor), ts 422699951267, free_ts 422699483152
[  464.045264][ T8597]  post_alloc_hook+0x1c1/0x200
[  464.050030][ T8597]  get_page_from_freelist+0x2181/0x22a0
[  464.055572][ T8597]  __alloc_pages+0x1f0/0x460
[  464.060152][ T8597]  alloc_slab_page+0x5d/0x180
[  464.064816][ T8597]  new_slab+0x87/0x2d0
[  464.068910][ T8597]  ___slab_alloc+0xc5c/0x12f0
[  464.073584][ T8597]  __kmem_cache_alloc_node+0x11f/0x250
[  464.079085][ T8597]  kmalloc_trace+0x2a/0xe0
[  464.083504][ T8597]  alloc_fdtable+0xca/0x2c0
[  464.088007][ T8597]  dup_fd+0x747/0xa20
[  464.091986][ T8597]  copy_files+0xaf/0x110
[  464.096220][ T8597]  copy_process+0x15d1/0x3df0
[  464.100888][ T8597]  kernel_clone+0x24b/0x8a0
[  464.105389][ T8597]  __x64_sys_clone+0x1b7/0x230
[  464.110147][ T8597]  do_syscall_64+0x55/0xb0
[  464.114565][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.120459][ T8597] page last free stack trace:
[  464.125124][ T8597]  free_unref_page_prepare+0x7d7/0x8f0
[  464.130585][ T8597]  free_unref_page+0x32/0x2e0
[  464.135259][ T8597]  vfree+0x1a7/0x340
[  464.139149][ T8597]  do_ip6t_get_ctl+0xf01/0x1220
[  464.144078][ T8597]  nf_getsockopt+0x262/0x280
[  464.148663][ T8597]  ipv6_getsockopt+0x233/0x2e0
[  464.153459][ T8597]  do_sock_getsockopt+0x379/0x450
[  464.158704][ T8597]  __x64_sys_getsockopt+0x1d6/0x280
[  464.163916][ T8597]  do_syscall_64+0x55/0xb0
[  464.168343][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.174244][ T8597] 
[  464.176560][ T8597] Memory state around the buggy address:
[  464.182180][ T8597]  ffff88801c754980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  464.190241][ T8597]  ffff88801c754a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  464.198317][ T8597] >ffff88801c754a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  464.206371][ T8597]                                   ^
[  464.211733][ T8597]  ffff88801c754b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  464.219788][ T8597]  ffff88801c754b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  464.227838][ T8597] ==================================================================
[  464.235902][ T8597] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  464.243084][ T8597] CPU: 0 PID: 8597 Comm: syz.2.940 Not tainted syzkaller #0
[  464.250368][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  464.260421][ T8597] Call Trace:
[  464.263698][ T8597]  <TASK>
[  464.266623][ T8597]  dump_stack_lvl+0x18c/0x250
[  464.271313][ T8597]  ? show_regs_print_info+0x20/0x20
[  464.276537][ T8597]  ? load_image+0x420/0x420
[  464.281045][ T8597]  panic+0x2ca/0x720
[  464.284939][ T8597]  ? __lock_acquire+0x7d80/0x7d80
[  464.289964][ T8597]  ? bpf_jit_dump+0xd0/0xd0
[  464.294470][ T8597]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  464.300362][ T8597]  ? _raw_spin_unlock+0x40/0x40
[  464.305213][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  464.310327][ T8597]  check_panic_on_warn+0x84/0xa0
[  464.315268][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  464.320380][ T8597]  end_report+0x6f/0x130
[  464.324625][ T8597]  kasan_report+0x128/0x150
[  464.329125][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  464.334238][ T8597]  kasan_check_range+0x241/0x290
[  464.339173][ T8597]  ? __bpf_get_stackid+0x6c7/0x900
[  464.344283][ T8597]  __asan_memcpy+0x40/0x70
[  464.348728][ T8597]  __bpf_get_stackid+0x6c7/0x900
[  464.353669][ T8597]  bpf_get_stackid_pe+0x343/0x410
[  464.358695][ T8597]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  464.364169][ T8597]  bpf_overflow_handler+0x1fc/0x510
[  464.369384][ T8597]  ? bpf_overflow_handler+0xde/0x510
[  464.374686][ T8597]  ? tp_perf_event_destroy+0x20/0x20
[  464.379989][ T8597]  ? perf_trace_preemptirq_template+0x144/0x330
[  464.386245][ T8597]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  464.393455][ T8597]  ? __perf_event_account_interrupt+0x187/0x280
[  464.399702][ T8597]  __perf_event_overflow+0x461/0x660
[  464.404994][ T8597]  perf_swevent_event+0x319/0x570
[  464.410021][ T8597]  ? perf_tp_event+0x1550/0x1550
[  464.414958][ T8597]  ? perf_tp_event+0x13f5/0x1550
[  464.419902][ T8597]  ___perf_sw_event+0x4ab/0x730
[  464.424755][ T8597]  ? ___perf_sw_event+0x19e/0x730
[  464.429778][ T8597]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  464.436195][ T8597]  ? rep_movs_alternative+0x4a/0x90
[  464.441482][ T8597]  ? verify_lock_unused+0x140/0x140
[  464.446685][ T8597]  ? kasan_set_track+0x5f/0x70
[  464.451446][ T8597]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  464.457431][ T8597]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  464.463149][ T8597]  ? lock_chain_count+0x20/0x20
[  464.468000][ T8597]  __perf_sw_event+0x139/0x270
[  464.472761][ T8597]  do_user_addr_fault+0x1242/0x12d0
[  464.477959][ T8597]  ? rcu_is_watching+0x15/0xb0
[  464.482721][ T8597]  exc_page_fault+0x64/0x100
[  464.487320][ T8597]  asm_exc_page_fault+0x26/0x30
[  464.492174][ T8597] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  464.497981][ T8597] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  464.517592][ T8597] RSP: 0018:ffffc9000cb17bd0 EFLAGS: 00050206
[  464.523658][ T8597] RAX: ffffffff84312701 RBX: 000000000000056d RCX: 00000000000004ed
[  464.531623][ T8597] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88807e3c6080
[  464.539589][ T8597] RBP: ffffc9000cb17d20 R08: 0000000000000004 R09: 0000000000000005
[  464.547903][ T8597] R10: dffffc0000000000 R11: ffffed100fc78cad R12: 00002000000024ed
[  464.555875][ T8597] R13: 1ffff92001962fbd R14: ffff88807e3c6000 R15: 0000200000001f80
[  464.563849][ T8597]  ? _copy_from_user+0x51/0xe0
[  464.568639][ T8597]  _copy_from_user+0x8b/0xe0
[  464.573241][ T8597]  generic_map_update_batch+0x58c/0x800
[  464.578795][ T8597]  ? rcu_read_unlock+0xa0/0xa0
[  464.583560][ T8597]  ? __fdget+0x180/0x210
[  464.587902][ T8597]  ? rcu_read_unlock+0xa0/0xa0
[  464.592659][ T8597]  bpf_map_do_batch+0x3f2/0x600
[  464.597504][ T8597]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  464.603837][ T8597]  __sys_bpf+0x381/0x890
[  464.608102][ T8597]  ? bpf_link_show_fdinfo+0x390/0x390
[  464.613509][ T8597]  ? lock_chain_count+0x20/0x20
[  464.618358][ T8597]  __x64_sys_bpf+0x7c/0x90
[  464.622770][ T8597]  do_syscall_64+0x55/0xb0
[  464.627190][ T8597]  ? clear_bhb_loop+0x40/0x90
[  464.631859][ T8597]  ? clear_bhb_loop+0x40/0x90
[  464.636526][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.642418][ T8597] RIP: 0033:0x7f789739de59
[  464.646864][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.667130][ T8597] RSP: 002b:00007f7898220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.675556][ T8597] RAX: ffffffffffffffda RBX: 00007f7897625fa0 RCX: 00007f789739de59
[  464.683541][ T8597] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  464.691517][ T8597] RBP: 00007f7897433e6f R08: 0000000000000000 R09: 0000000000000000
[  464.699500][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.707479][ T8597] R13: 00007f7897626038 R14: 00007f7897625fa0 R15: 00007ffc42a05dd8
[  464.715475][ T8597]  </TASK>
[  464.718836][ T8597] Kernel Offset: disabled
[  464.723172][ T8597] Rebooting in 86400 seconds..