last executing test programs:

2.140836264s ago: executing program 1 (id=3908):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000240), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000a40), 0x4bd)
sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="34329d06dc104329b5b5fee5", 0xc}, {&(0x7f0000000c00)="b59c4dd9f75e904766fd9575954f2dae1bab5b01eca31e70c9ea4bbc39338fc2deaedf6e0f8818c0b4cf612c75b9f15efa2c73fd0c47acfd7a06fc221f1a2c8119298a64101812b08bc7fc5e68e47211d1a512e25d8415043a464d380e9b1815a8b77ed3d3", 0x65}, {&(0x7f0000000fc0)="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", 0xcdc}], 0x3}, 0x4010)
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x30, 0x5f, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000b80)=""/27, 0x1f, 0x1b, 0x1, 0x3, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x14001, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r5, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x0)
r6 = perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000009c0)={0x5, 0x80, 0x9, 0x8, 0x6, 0xb, 0x0, 0x6, 0x70180, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000006, 0x2, @perf_config_ext={0xffff8880b890dffc, 0x4}, 0x18046, 0x4000000000000009, 0xfffffffd, 0x8, 0x22, 0x2, 0x1, 0x0, 0x7, 0x0, 0x6})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r8, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0x4a, &(0x7f0000000440)=""/74, 0x40f00, 0xb635eba0b5c90ee5, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x1, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000000f8ffff09"], 0x980)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x63, &(0x7f0000000140)=""/99, 0x40f00, 0x6d, '\x00', r9, @fallback=0x6, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x94)

1.791826349s ago: executing program 1 (id=3914):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x80000000003, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x17)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="000024000000000061000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRESDEC=r2, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64, @ANYRES8=r3, @ANYRES32=r4], 0x0, 0x54}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYRES32=r5, @ANYBLOB="0100000002000000000000000000000000000000000000000000000012706689ff4d413b91558918e72e17fb7d74da3b29be4c6986b3cd9f9b5ff01708c24f6939fb030f60525fc9b4617cbf36b73de9bf897c09346cd942def6749b1742855f6b1621f0b222f2795679db999dbf93f0862be372b53e79161045761a51"], 0x50)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000300), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000080)='syz1\x00', 0x1ff)
r10 = socket$kcm(0x11, 0x200000000000002, 0x300)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0)
r12 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r12, 0x107, 0x13, &(0x7f00000002c0)=r11, 0x4)
close(r10)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x29, 0xf, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r11})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000040)=r4)

1.637927324s ago: executing program 2 (id=3915):
r0 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1400000037000b63446a80648c2594f90b24fc60", 0x14}], 0x1}, 0x5006)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x7ffffffc, 0x7}, {0x1000000a, 0x5, 0x0, 0x4}], 0x10, 0x4}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5c00000010004bcc9e3be35c6e17aa7f076b876c1d000000000400000300000304001ac0080012000400050000000064bc24eab556a705251e618294ff00516ced84c9f4d4938037e786a6d027ca2e69e50048d00000000002000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40040)
close(r2)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f00000005c0), 0x1c)
ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

1.404088038s ago: executing program 1 (id=3919):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000002680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000026c0), 0x200000, 0x10, &(0x7f0000002700), 0x143}, 0x48)

1.38488731s ago: executing program 0 (id=3920):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
openat$cgroup_type(r0, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x404400, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc3}, 0x50)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x1, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000eb00000f10000000000000630008000000000095f8aad862000000928eb311a9ba4c38b539b778829b569e5b468b4c53db3f7ac9bc09236ced48406ba735a5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43bec5ef0727bfa5532d53"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x52)

1.368710512s ago: executing program 3 (id=3921):
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000780)='cgroup.freeze\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

1.29190935s ago: executing program 2 (id=3922):
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x6, 0x3, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0xe76}, {&(0x7f0000002500)="023f0bec0f86d9150ac50280bc4314dd61724a1a6745387695ef99345c33ad0b9aaa7a9e49160661bcab5d223d7b93b9c530c964d246694481e89a65125de042c077f38f9f2abcc98317cb218f8c9bd8e2b1443efc0985e976", 0x59}], 0x2}, 0x20000001)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x16, &(0x7f0000000a80)=ANY=[], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001480), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x0, 0xe, 0x0, &(0x7f0000000e00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="2e00000036000d005fff80698c6394090124fc092a18af4016000180008e9279ed91d47825d7563c5ddbeceb16e741f28a", 0x31}], 0x1, 0x0, 0x0, 0x39c}, 0x40000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d", 0x10}], 0x1}, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x28, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffeffff}}, @exit, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @call={0x85, 0x0, 0x0, 0x44}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x2, 0x0, 0x9, 0x5, 0x70000000}, @ringbuf_query, @alu={0x7, 0x0, 0xc, 0x0, 0x9, 0x8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xd, 0x7, 0xda35}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=[{0x2, 0x2, 0xd}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4)
r6 = socket$kcm(0x10, 0x0, 0x4)
recvmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000002640)={'wlan1\x00', @random="cbcd59de00"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x100000a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080)=r9, 0x3b)

1.268742632s ago: executing program 0 (id=3923):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x458, 0x0, 0x0, 0x0, 0x61}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.268522612s ago: executing program 1 (id=3924):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='rdma.current\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f00000010c0)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x4, 0xfd90, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x366, 0x10, &(0x7f0000000b00), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000bc0)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r6}, &(0x7f0000000c40), &(0x7f0000000c80)=r2}, 0x20)
recvmsg$unix(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/133, 0x85}], 0x3}, 0x40020000)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x87d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f80)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='>', 0xfffe}], 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000004100)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000008500003052be7c57c2ef495900b600000085000000500000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.182583091s ago: executing program 0 (id=3925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000031c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x11, 0x7, &(0x7f00000032c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000003340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40004, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.120773797s ago: executing program 3 (id=3926):
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x10000, 0x0, 0x4000000, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x73)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x10040)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2754b}], {0x95, 0x0, 0x0, 0x6000000}}, &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x0)

1.023788427s ago: executing program 0 (id=3927):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_clone(0x20008000, &(0x7f0000000040)="1d3d78d69f0eec48bc589831eed078c28a11eaa526428b9fddfa5e45b39fa4e133d61a62f9bbbf439046a8cd9ae4f073545c42336bc9b2242c936eeb6bbfa0734fbbd9881d2bf14302ed7c1cfc9a304ef3c1fa343a9cd179fe77e573", 0x5c, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="a75f36e321f7d2f53cc396f106811b3057383c1cc3b86e402c015e0367464bd41b17feed0932a60126f0dc1deaed6c63cc35cabacb8a03d9db6c00d12a64f21d")
perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a224, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0x62}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x9c, @mcast1, 0x4, 0xffffffff}, 0x80, 0x0}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240))

928.593656ms ago: executing program 0 (id=3928):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0)
close(r0)
perf_event_open(&(0x7f0000000340)={0x7, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000640)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x2, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19db3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000bc0)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x8, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x40004, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x0, 0x5, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(r4)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(r3, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000001fc0)=ANY=[@ANYRES8=r4, @ANYRES8=r5], 0x9a)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r7, &(0x7f0000000900), 0x0}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00b72f0d1c1b6ccdfd18b929bfa30001040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b80)={r9}, 0xc)

744.102665ms ago: executing program 3 (id=3929):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc)
perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002680)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002700)={0xe, 0x4, 0x0, &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400), 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x2c, 0x1)
r6 = perf_event_open(&(0x7f0000002dc0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000032c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18000000}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000003400), 0x13)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002880)={{r3, <r7=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
r8 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r7, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={0x0, r6, 0x0, 0x44, &(0x7f0000000100)='\x90&\x00', <r10=>0x0}, 0xfffffffffffffca4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="120020000000", @ANYRES32, @ANYBLOB, @ANYRES32=r10, @ANYRES64=0x0], 0x20)
sendmsg$inet(r2, 0x0, 0x20)

743.826875ms ago: executing program 1 (id=3930):
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$kcm(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x0, 0x2}, {0x10000002}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x1, 0xe, 0x8}]}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000340)=r4, 0x10)
r6 = socket$kcm(0x2, 0x5, 0x84) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xc}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000a40)=""/224, 0x3a, 0xe0, 0x1}, 0x28) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events.local\x00', 0x26e1, 0x0) (rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x43}, 0x28) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r9, 0xffffffffffffffff, 0x4, 0x5}, 0x50) (async)
setsockopt$sock_attach_bpf(r6, 0x84, 0x77, &(0x7f00000003c0)=r7, 0x62) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r10 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r10, &(0x7f0000000980)={&(0x7f0000000b40)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00) (async)
write$cgroup_devices(r5, &(0x7f0000000300)={'b', ' *:* ', 'rm\x00'}, 0x9) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000500)) (async, rerun: 64)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) (rerun: 64)

686.890641ms ago: executing program 2 (id=3931):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000019903a00007912380000000000950000"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

654.228544ms ago: executing program 3 (id=3932):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = syz_clone(0x2000, &(0x7f0000000600)="138883aa7bd18e0a701d9d3def178c7f380717476608d0cbd35a0c501adf", 0x1e, 0x0, 0x0, &(0x7f0000000c80)="1127a1a5")
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x1, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfe86}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

535.837386ms ago: executing program 1 (id=3933):
socketpair(0x22, 0x5, 0x4, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcde, 0x43a1bd76, 0x7, 0x9, 0x400006, 0x2, 0x0, 0x5, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r3}, &(0x7f0000000d40), &(0x7f0000000d80)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000dc0)={0x0, 0x6000, &(0x7f0000000e00)=[{&(0x7f0000000e40)='U', 0xa00120}], 0x1}, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040ff00000000005000000095808efe842c0000000000b87d21330dedcca596efffc253631666391ab62f414b60489a1d54f07033ac471315025dba36b2b70e2182662d400d611430cbf13bf14cd873d4032af37d7f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000046a631a83"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000001850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={r0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000003000000040000000008", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c", @ANYRES32, @ANYBLOB="060000000000000000000000000000000000000045d62512", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c804)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='EO', 0x2}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r8, @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="88a6071b2e152034d1362afd6b13d187066e0e41134ffb0a4709690fc936c8f693c93d503b82d0035dfdb300869d441767e9eaf1847bfdb76b43bfd58136e84d77b8", @ANYRES16], 0x368}, 0x20044000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

474.006682ms ago: executing program 2 (id=3934):
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000780)='cgroup.freeze\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

374.858222ms ago: executing program 3 (id=3935):
r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000", 0xa1}], 0x1}, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000580)={0x3, 0x80, 0xf9, 0x8a, 0xa, 0x1, 0x0, 0x3, 0x850, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x800, 0x5}, 0x0, 0x2b5896a5, 0x7ae1d758, 0x2, 0x800000000000, 0x1, 0x1000, 0x0, 0xfffffff8, 0x0, 0xa5})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105c43, 0x0)
r5 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="020a01ff02000000e4a17c", 0xb}], 0x1}, 0x0)
r8 = socket$kcm(0xa, 0x3, 0x3a)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x12)
sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socket$kcm(0x11, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00))
perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r10 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000d00)=r9, 0x4)
r11 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff)
sendmsg$inet(r10, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="2c000000000000000000000507000000441c0503e020000100000000ac1414", @ANYRES64], 0x30}, 0x40880)

300.01523ms ago: executing program 0 (id=3936):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x10, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="7910480000000000790040000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f00000007c0)={&(0x7f0000000800)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000900), &(0x7f0000000940)=r1}, 0x20)
ioctl$TUNSETIFF(r1, 0x541b, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8948, &(0x7f0000000380)={'bond0\x00', @link_local})
socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100e64, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
socketpair(0x23, 0x2, 0x0, &(0x7f0000000500))
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89fb, &(0x7f0000000640))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000e6ffffff1a0200000000000000ea2500"], 0x0, 0x2b, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000700)={0x2, 0x80, 0x5, 0x6, 0x39, 0x9, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000780)}, 0x1808, 0x1, 0x3, 0x2, 0xe1ea, 0x0, 0x20, 0x0, 0x6, 0x0, 0x1ff})
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0xa, 0x4001, 0x613, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x2400c800)
r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
close(r7)

214.592788ms ago: executing program 2 (id=3937):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

64.531504ms ago: executing program 2 (id=3938):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2, r1}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000400)={0x0, <r3=>0x0}}, 0x1)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r3}, 0xc)
close(r4)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000009c0), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000a00)='ns/ipc\x00')
sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x38}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x200000000000002a, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40040)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRES32, @ANYRES8=r9], 0xfe33)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380))

0s ago: executing program 3 (id=3939):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x2, 0x2, 0x88, &(0x7f0000001cc0))
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
r2 = perf_event_open(0x0, 0x0, 0xa, r1, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x3, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001ac0), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYRESDEC], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001b40)={r5}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000017c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x2, 0x1}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b700000028000000bca30000140000002403000007feffff720af0ff0000020071a400fe000000001f030000000000002e0a0200000000002604fdffffff000e61143800000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001740), 0xffffffffffffff97, 0x10, &(0x7f0000001780), 0xffffffffffffffc2}, 0x48)
r8 = perf_event_open(&(0x7f0000002140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000006797781c609864eb90830000008000000000dd81f838364ba2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x3, 0x1c, &(0x7f0000002340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000002440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

][ T6988] bridge_slave_0: left allmulticast mode
[  445.928133][ T6988] bridge_slave_0: left promiscuous mode
[  445.938790][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.063916][ T6988] veth1_macvtap: left promiscuous mode
[  446.075871][ T6988] veth0_macvtap: left promiscuous mode
[  446.088811][ T6988] veth1_vlan: left promiscuous mode
[  447.171242][ T6988]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  447.179897][ T6988] bond_slave_1 (unregistering): left promiscuous mode
[  447.186795][ T6988] bond_slave_1 (unregistering): left allmulticast mode
[  447.231657][ T6988]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.241813][ T6988] bond_slave_0 (unregistering): left promiscuous mode
[  447.255326][ T6988] bond_slave_0 (unregistering): left allmulticast mode
[  447.506359][ T6988]  (unregistering): Released all slaves
[  447.566712][T13582] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.580393][T13583] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.587608][T13583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.673714][T13593] syzkaller0: entered promiscuous mode
[  447.680364][T13593] syzkaller0: entered allmulticast mode
[  449.940174][T13661] FAULT_INJECTION: forcing a failure.
[  449.940174][T13661] name failslab, interval 1, probability 0, space 0, times 0
[  449.952913][T13661] CPU: 1 PID: 13661 Comm: syz.3.2631 Not tainted syzkaller #0
[  449.960397][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  449.970477][T13661] Call Trace:
[  449.973765][T13661]  <TASK>
[  449.976688][T13661]  dump_stack_lvl+0x18c/0x250
[  449.981376][T13661]  ? show_regs_print_info+0x20/0x20
[  449.986606][T13661]  ? load_image+0x420/0x420
[  449.991115][T13661]  ? __might_sleep+0xe0/0xe0
[  449.995719][T13661]  ? __lock_acquire+0x7eb0/0x7eb0
[  450.000743][T13661]  should_fail_ex+0x394/0x4c0
[  450.005415][T13661]  should_failslab+0x9/0x20
[  450.009912][T13661]  slab_pre_alloc_hook+0x59/0x300
[  450.014935][T13661]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  450.020223][T13661]  __kmem_cache_alloc_node+0x53/0x260
[  450.025596][T13661]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  450.030881][T13661]  kmalloc_trace+0x2a/0xe0
[  450.035304][T13661]  __xdp_reg_mem_model+0x1e3/0x5a0
[  450.040417][T13661]  ? kvmalloc_node+0x70/0x180
[  450.045098][T13661]  ? kvmalloc_node+0x70/0x180
[  450.049774][T13661]  ? xdp_reg_mem_model+0x40/0x40
[  450.055332][T13661]  xdp_reg_mem_model+0x22/0x40
[  450.060100][T13661]  bpf_test_run_xdp_live+0x262/0x1b30
[  450.065478][T13661]  ? 0xffffffffa0004c00
[  450.069626][T13661]  ? 0xffffffffa0004c00
[  450.073774][T13661]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  450.079673][T13661]  ? xdp_convert_md_to_buff+0x330/0x330
[  450.085240][T13661]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  450.091481][T13661]  ? _copy_from_user+0xa5/0xe0
[  450.096242][T13661]  ? bpf_test_init+0x119/0x140
[  450.101005][T13661]  ? xdp_convert_md_to_buff+0x5b/0x330
[  450.106466][T13661]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  450.111835][T13661]  ? __lock_acquire+0x7eb0/0x7eb0
[  450.116866][T13661]  ? dev_put+0x80/0x80
[  450.120942][T13661]  ? dev_put+0x80/0x80
[  450.125024][T13661]  bpf_prog_test_run+0x31f/0x390
[  450.129962][T13661]  __sys_bpf+0x49d/0x890
[  450.134203][T13661]  ? bpf_link_show_fdinfo+0x560/0x560
[  450.139578][T13661]  ? lock_chain_count+0x20/0x20
[  450.144436][T13661]  __x64_sys_bpf+0x7c/0x90
[  450.148938][T13661]  do_syscall_64+0x55/0xb0
[  450.153353][T13661]  ? clear_bhb_loop+0x40/0x90
[  450.158027][T13661]  ? clear_bhb_loop+0x40/0x90
[  450.162708][T13661]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  450.168601][T13661] RIP: 0033:0x7efdeb99fb19
[  450.173020][T13661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.192638][T13661] RSP: 002b:00007efdec8ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  450.201057][T13661] RAX: ffffffffffffffda RBX: 00007efdebc25fa0 RCX: 00007efdeb99fb19
[  450.209029][T13661] RDX: 0000000000000050 RSI: 0000200000001a80 RDI: 000000000000000a
[  450.216997][T13661] RBP: 00007efdec8ce090 R08: 0000000000000000 R09: 0000000000000000
[  450.224965][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.232928][T13661] R13: 00007efdebc26038 R14: 00007efdebc25fa0 R15: 00007ffd881c8de8
[  450.240912][T13661]  </TASK>
[  451.411665][T13354] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  451.452090][T13354] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  451.486278][T13354] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  451.517383][T13354] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  451.557368][T13676] netlink: 'syz.2.2636': attribute type 12 has an invalid length.
[  451.580812][T13676] netlink: 'syz.2.2636': attribute type 15 has an invalid length.
[  451.835483][T13354] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.906957][T13354] 8021q: adding VLAN 0 to HW filter on device team0
[  451.963773][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.971067][ T8568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.001296][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.008573][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.350285][T13704] syzkaller0: entered promiscuous mode
[  452.367754][T13704] syzkaller0: entered allmulticast mode
[  453.564431][T13727] netlink: 'syz.2.2646': attribute type 10 has an invalid length.
[  453.575054][T13727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2646'.
[  453.588942][T13727] : entered allmulticast mode
[  453.596974][T13727] bond_slave_0: entered allmulticast mode
[  453.605204][T13727] bond_slave_1: entered allmulticast mode
[  453.617834][T13727] 8021q: adding VLAN 0 to HW filter on device 
[  453.626592][T13727] bridge0: port 3() entered blocking state
[  453.638324][T13727] bridge0: port 3() entered disabled state
[  453.654689][T13727] : entered promiscuous mode
[  453.659733][T13727] bond_slave_0: entered promiscuous mode
[  453.665770][T13727] bond_slave_1: entered promiscuous mode
[  453.678115][T13727] bridge0: port 3() entered blocking state
[  453.684306][T13727] bridge0: port 3() entered forwarding state
[  453.719262][T13714] rxe_eth0 speed is unknown, defaulting to 1000
[  454.063677][T13739] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2648'.
[  455.729362][T13354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.201998][T13354] veth0_vlan: entered promiscuous mode
[  456.397066][T13354] veth1_vlan: entered promiscuous mode
[  456.631962][T13354] veth0_macvtap: entered promiscuous mode
[  456.678201][T13354] veth1_macvtap: entered promiscuous mode
[  456.774150][T13354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.799006][T13354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.848726][T13354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.871026][T13354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.881425][T13354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.892623][T13354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.904673][T13354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.031209][T13354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.050406][T13354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.083751][T13354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.098700][T13354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.108749][T13354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.119692][T13354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.132876][T13354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.158045][T13354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.167808][T13354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.202920][T13354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.224528][T13354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.537817][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.577309][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.710397][ T6988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.755663][ T6988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.233998][T13789] syzkaller0: entered promiscuous mode
[  458.239797][T13789] syzkaller0: entered allmulticast mode
[  459.192057][T13814] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2671'.
[  459.206953][T13814] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  461.277853][T13835] netlink: 'syz.1.2681': attribute type 7 has an invalid length.
[  461.307930][T13835] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2681'.
[  462.227425][T13857] syzkaller0: entered promiscuous mode
[  462.236065][T13857] syzkaller0: entered allmulticast mode
[  462.274431][T13860] netlink: 'syz.3.2688': attribute type 10 has an invalid length.
[  462.302591][T13860] netlink: 'syz.3.2688': attribute type 16 has an invalid length.
[  462.315205][T13860] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2688'.
[  464.813558][T13896] netlink: 'syz.2.2702': attribute type 2 has an invalid length.
[  464.828765][T13896] netlink: 'syz.2.2702': attribute type 8 has an invalid length.
[  464.836785][T13896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2702'.
[  464.860906][T13897] netlink: 'syz.2.2702': attribute type 2 has an invalid length.
[  464.870788][T13897] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2702'.
[  464.912354][T13899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2703'.
[  464.964550][T13899] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.659456][T13920] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2709'.
[  466.087174][T13942] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2715'.
[  467.704010][T13934] syzkaller0: entered promiscuous mode
[  467.709599][T13934] syzkaller0: entered allmulticast mode
[  467.829756][T13952] FAULT_INJECTION: forcing a failure.
[  467.829756][T13952] name failslab, interval 1, probability 0, space 0, times 0
[  467.887752][T13952] CPU: 0 PID: 13952 Comm: syz.2.2716 Not tainted syzkaller #0
[  467.895270][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  467.905419][T13952] Call Trace:
[  467.908710][T13952]  <TASK>
[  467.911649][T13952]  dump_stack_lvl+0x18c/0x250
[  467.916326][T13952]  ? show_regs_print_info+0x20/0x20
[  467.921526][T13952]  ? load_image+0x420/0x420
[  467.926038][T13952]  ? __might_sleep+0xe0/0xe0
[  467.930646][T13952]  ? __lock_acquire+0x7eb0/0x7eb0
[  467.935689][T13952]  ? mark_lock+0x94/0x320
[  467.940026][T13952]  should_fail_ex+0x394/0x4c0
[  467.944707][T13952]  should_failslab+0x9/0x20
[  467.949202][T13952]  slab_pre_alloc_hook+0x59/0x300
[  467.954401][T13952]  ? __get_vm_area_node+0x125/0x370
[  467.959601][T13952]  __kmem_cache_alloc_node+0x53/0x260
[  467.964973][T13952]  ? __get_vm_area_node+0x125/0x370
[  467.970169][T13952]  kmalloc_node_trace+0x26/0xe0
[  467.975022][T13952]  __get_vm_area_node+0x125/0x370
[  467.980056][T13952]  __vmalloc_node_range+0x36f/0x1320
[  467.985346][T13952]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  467.990891][T13952]  ? mark_lock+0x94/0x320
[  467.995219][T13952]  ? __lock_acquire+0x1431/0x7eb0
[  468.000249][T13952]  ? aa_get_newest_label+0xfd/0x5c0
[  468.005446][T13952]  ? free_vm_area+0x50/0x50
[  468.009953][T13952]  ? end_current_label_crit_section+0x170/0x170
[  468.016197][T13952]  ? verify_lock_unused+0x140/0x140
[  468.021393][T13952]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  468.026936][T13952]  __vmalloc+0x7a/0x90
[  468.031004][T13952]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  468.036547][T13952]  bpf_prog_alloc_no_stats+0x46/0x460
[  468.041933][T13952]  bpf_prog_alloc+0x3d/0x1a0
[  468.046524][T13952]  bpf_prog_load+0x6b2/0x1610
[  468.051205][T13952]  ? map_freeze+0x420/0x420
[  468.055710][T13952]  ? __might_fault+0xaa/0x120
[  468.060384][T13952]  ? __lock_acquire+0x7eb0/0x7eb0
[  468.065418][T13952]  ? file_end_write+0x159/0x250
[  468.070272][T13952]  ? __might_fault+0xaa/0x120
[  468.074943][T13952]  ? __might_fault+0xc6/0x120
[  468.079618][T13952]  ? __might_fault+0xaa/0x120
[  468.084302][T13952]  ? bpf_lsm_bpf+0x9/0x10
[  468.088639][T13952]  ? security_bpf+0x7e/0xa0
[  468.093142][T13952]  __sys_bpf+0x5ba/0x890
[  468.097385][T13952]  ? bpf_link_show_fdinfo+0x560/0x560
[  468.102766][T13952]  ? lock_chain_count+0x20/0x20
[  468.107623][T13952]  __x64_sys_bpf+0x7c/0x90
[  468.112075][T13952]  do_syscall_64+0x55/0xb0
[  468.116491][T13952]  ? clear_bhb_loop+0x40/0x90
[  468.121185][T13952]  ? clear_bhb_loop+0x40/0x90
[  468.125862][T13952]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  468.131756][T13952] RIP: 0033:0x7f35ef59fb19
[  468.136166][T13952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.155793][T13952] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  468.164206][T13952] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  468.172184][T13952] RDX: 0000000000000021 RSI: 0000200000000040 RDI: 0000000000000005
[  468.180158][T13952] RBP: 00007f35ed7f6090 R08: 0000000000000000 R09: 0000000000000000
[  468.188126][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.196129][T13952] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  468.204197][T13952]  </TASK>
[  468.239083][T13952] syz.2.2716: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  468.264846][T13952] CPU: 1 PID: 13952 Comm: syz.2.2716 Not tainted syzkaller #0
[  468.272392][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  468.282468][T13952] Call Trace:
[  468.285781][T13952]  <TASK>
[  468.288713][T13952]  dump_stack_lvl+0x18c/0x250
[  468.293442][T13952]  ? show_regs_print_info+0x20/0x20
[  468.298647][T13952]  ? load_image+0x420/0x420
[  468.303156][T13952]  ? __rcu_read_unlock+0x7c/0xd0
[  468.308081][T13952]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  468.314504][T13952]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  468.321013][T13952]  warn_alloc+0x246/0x340
[  468.325355][T13952]  ? __get_vm_area_node+0x125/0x370
[  468.330574][T13952]  ? zone_watermark_ok_safe+0x230/0x230
[  468.336141][T13952]  ? rcu_is_watching+0x15/0xb0
[  468.340920][T13952]  ? __get_vm_area_node+0x356/0x370
[  468.346180][T13952]  __vmalloc_node_range+0x394/0x1320
[  468.351490][T13952]  ? mark_lock+0x94/0x320
[  468.355852][T13952]  ? __lock_acquire+0x1431/0x7eb0
[  468.360917][T13952]  ? aa_get_newest_label+0xfd/0x5c0
[  468.366137][T13952]  ? free_vm_area+0x50/0x50
[  468.370664][T13952]  ? end_current_label_crit_section+0x170/0x170
[  468.376924][T13952]  ? verify_lock_unused+0x140/0x140
[  468.382135][T13952]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  468.387706][T13952]  __vmalloc+0x7a/0x90
[  468.391807][T13952]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  468.397375][T13952]  bpf_prog_alloc_no_stats+0x46/0x460
[  468.402775][T13952]  bpf_prog_alloc+0x3d/0x1a0
[  468.407392][T13952]  bpf_prog_load+0x6b2/0x1610
[  468.412102][T13952]  ? map_freeze+0x420/0x420
[  468.416645][T13952]  ? __might_fault+0xaa/0x120
[  468.421338][T13952]  ? __lock_acquire+0x7eb0/0x7eb0
[  468.426410][T13952]  ? file_end_write+0x159/0x250
[  468.431293][T13952]  ? __might_fault+0xaa/0x120
[  468.435970][T13952]  ? __might_fault+0xc6/0x120
[  468.440645][T13952]  ? __might_fault+0xaa/0x120
[  468.445334][T13952]  ? bpf_lsm_bpf+0x9/0x10
[  468.449672][T13952]  ? security_bpf+0x7e/0xa0
[  468.454212][T13952]  __sys_bpf+0x5ba/0x890
[  468.458481][T13952]  ? bpf_link_show_fdinfo+0x560/0x560
[  468.463886][T13952]  ? lock_chain_count+0x20/0x20
[  468.468771][T13952]  __x64_sys_bpf+0x7c/0x90
[  468.473212][T13952]  do_syscall_64+0x55/0xb0
[  468.477678][T13952]  ? clear_bhb_loop+0x40/0x90
[  468.482386][T13952]  ? clear_bhb_loop+0x40/0x90
[  468.487121][T13952]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  468.493038][T13952] RIP: 0033:0x7f35ef59fb19
[  468.497460][T13952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.517087][T13952] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  468.525506][T13952] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  468.533477][T13952] RDX: 0000000000000021 RSI: 0000200000000040 RDI: 0000000000000005
[  468.541446][T13952] RBP: 00007f35ed7f6090 R08: 0000000000000000 R09: 0000000000000000
[  468.549416][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.557389][T13952] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  468.565377][T13952]  </TASK>
[  468.583957][T13952] Mem-Info:
[  468.587218][T13952] active_anon:7126 inactive_anon:0 isolated_anon:0
[  468.587218][T13952]  active_file:17145 inactive_file:40119 isolated_file:0
[  468.587218][T13952]  unevictable:768 dirty:72 writeback:0
[  468.587218][T13952]  slab_reclaimable:10422 slab_unreclaimable:95946
[  468.587218][T13952]  mapped:24363 shmem:1364 pagetables:508
[  468.587218][T13952]  sec_pagetables:0 bounce:0
[  468.587218][T13952]  kernel_misc_reclaimable:0
[  468.587218][T13952]  free:1333864 free_pcp:12183 free_cma:0
[  468.636270][T13952] Node 0 active_anon:28504kB inactive_anon:0kB active_file:68580kB inactive_file:160272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97452kB dirty:288kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11848kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no
[  468.677718][T13952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  468.709413][T13952] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  468.745177][T13952] lowmem_reserve[]: 0 2503 2504 2504 2504
[  468.759747][T13952] Node 0 DMA32 free:1421128kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:28568kB inactive_anon:0kB active_file:68580kB inactive_file:159444kB unevictable:1536kB writepending:288kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:26536kB local_pcp:20416kB free_cma:0kB
[  468.791024][T13952] lowmem_reserve[]: 0 0 0 0 0
[  468.818838][T13952] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  468.878563][T13952] lowmem_reserve[]: 0 0 0 0 0
[  468.883358][T13952] Node 1 Normal free:3898960kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22688kB local_pcp:9664kB free_cma:0kB
[  468.948615][T13952] lowmem_reserve[]: 0 0 0 0 0
[  468.953409][T13952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  468.980340][T13952] Node 0 DMA32: 980*4kB (UM) 317*8kB (UME) 461*16kB (UME) 1502*32kB (UME) 808*64kB (UME) 517*128kB (UME) 249*256kB (UM) 108*512kB (UME) 32*1024kB (UME) 6*2048kB (UME) 263*4096kB (UM) = 1421128kB
[  469.021695][T13952] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  469.047238][T13952] Node 1 Normal: 210*4kB (UME) 51*8kB (UME) 41*16kB (UME) 37*32kB (UME) 17*64kB (UME) 8*128kB (UME) 2*256kB (UM) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3898960kB
[  469.174604][T13952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  469.193270][T13952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  469.207324][T13952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  469.258191][T13952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  469.278587][T13952] 60356 total pagecache pages
[  469.283427][T13952] 0 pages in swap cache
[  469.287744][T13952] Free swap  = 124996kB
[  469.293363][T13952] Total swap = 124996kB
[  469.297716][T13952] 2097051 pages RAM
[  469.302092][T13952] 0 pages HighMem/MovableOnly
[  469.307517][T13952] 421729 pages reserved
[  469.359036][T13952] 0 pages cma reserved
[  469.483033][T13969] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2723'.
[  474.686275][T14006] FAULT_INJECTION: forcing a failure.
[  474.686275][T14006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.738773][T14006] CPU: 0 PID: 14006 Comm: syz.1.2734 Not tainted syzkaller #0
[  474.746304][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  474.756386][T14006] Call Trace:
[  474.759686][T14006]  <TASK>
[  474.762632][T14006]  dump_stack_lvl+0x18c/0x250
[  474.767340][T14006]  ? show_regs_print_info+0x20/0x20
[  474.772566][T14006]  ? load_image+0x420/0x420
[  474.777105][T14006]  ? __might_fault+0xaa/0x120
[  474.781796][T14006]  ? __lock_acquire+0x7eb0/0x7eb0
[  474.786837][T14006]  should_fail_ex+0x394/0x4c0
[  474.791535][T14006]  _copy_from_user+0x2f/0xe0
[  474.796135][T14006]  ___sys_sendmsg+0x1c7/0x360
[  474.800829][T14006]  ? __sys_sendmsg+0x2b0/0x2b0
[  474.805614][T14006]  ? __lock_acquire+0x7eb0/0x7eb0
[  474.810655][T14006]  __se_sys_sendmsg+0x1d0/0x2c0
[  474.815515][T14006]  ? __x64_sys_sendmsg+0x80/0x80
[  474.820463][T14006]  ? lockdep_hardirqs_on+0x98/0x150
[  474.825661][T14006]  do_syscall_64+0x55/0xb0
[  474.830086][T14006]  ? clear_bhb_loop+0x40/0x90
[  474.834770][T14006]  ? clear_bhb_loop+0x40/0x90
[  474.839459][T14006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.845367][T14006] RIP: 0033:0x7f92b219fb19
[  474.849785][T14006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.869483][T14006] RSP: 002b:00007f92b3055028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.877928][T14006] RAX: ffffffffffffffda RBX: 00007f92b2426090 RCX: 00007f92b219fb19
[  474.885901][T14006] RDX: 0000000020004080 RSI: 00002000000009c0 RDI: 0000000000000008
[  474.893874][T14006] RBP: 00007f92b3055090 R08: 0000000000000000 R09: 0000000000000000
[  474.901851][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.909831][T14006] R13: 00007f92b2426128 R14: 00007f92b2426090 R15: 00007ffe0a815448
[  474.917850][T14006]  </TASK>
[  475.094871][T14011] netlink: 'syz.0.2737': attribute type 3 has an invalid length.
[  475.108117][T14011] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2737'.
[  475.170955][T14015] syzkaller0: entered promiscuous mode
[  475.178150][T14015] syzkaller0: entered allmulticast mode
[  475.477679][T14026] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2743'.
[  477.417039][T14048] netlink: 'syz.2.2751': attribute type 10 has an invalid length.
[  477.434619][T14048] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2751'.
[  477.585088][T14054] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2754'.
[  477.987100][T14063] netlink: 'syz.2.2758': attribute type 10 has an invalid length.
[  477.999979][T14057] delete_channel: no stack
[  478.028739][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2758'.
[  478.038283][T14063] netlink: 'syz.2.2758': attribute type 10 has an invalid length.
[  478.058699][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2758'.
[  478.437410][T14073] syzkaller0: entered promiscuous mode
[  478.443970][T14073] syzkaller0: entered allmulticast mode
[  482.136357][T14139] syzkaller0: entered promiscuous mode
[  482.174196][T14139] syzkaller0: entered allmulticast mode
[  482.222608][T14142] netlink: 'syz.1.2788': attribute type 10 has an invalid length.
[  482.266046][T14142] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2788'.
[  482.278987][T14142] bond0: entered promiscuous mode
[  482.301329][T14142] bond_slave_0: entered promiscuous mode
[  482.325689][T14142] bond_slave_1: entered promiscuous mode
[  482.373563][T14142] bridge0: port 3(bond0) entered blocking state
[  482.398309][T14142] bridge0: port 3(bond0) entered disabled state
[  482.422958][T14142] bond0: entered allmulticast mode
[  482.429966][T14142] bond_slave_0: entered allmulticast mode
[  482.436448][T14142] bond_slave_1: entered allmulticast mode
[  482.458241][T14142] bridge0: port 3(bond0) entered blocking state
[  482.466265][T14142] bridge0: port 3(bond0) entered forwarding state
[  482.549856][T14145] rxe_eth0 speed is unknown, defaulting to 1000
[  484.412633][T14167] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2792'.
[  485.016048][T14193] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2801'.
[  485.096753][T14194] syzkaller0: entered promiscuous mode
[  485.108405][T14194] syzkaller0: entered allmulticast mode
[  488.126425][T14233] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2817'.
[  488.394043][T14250] syzkaller0: entered promiscuous mode
[  488.409310][T14250] syzkaller0: entered allmulticast mode
[  488.569491][ T5796] Bluetooth: hci4: command 0x0406 tx timeout
[  490.217321][T14276] netlink: 'syz.3.2832': attribute type 10 has an invalid length.
[  490.225316][T14276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2832'.
[  491.565217][T14276] netlink: 'syz.3.2832': attribute type 10 has an invalid length.
[  491.573247][T14276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2832'.
[  491.614950][T14279] netlink: 'syz.0.2833': attribute type 10 has an invalid length.
[  491.634210][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2833'.
[  491.647386][T14279] netlink: 'syz.0.2833': attribute type 10 has an invalid length.
[  491.655794][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2833'.
[  492.458116][T14305] syzkaller0: entered promiscuous mode
[  492.467683][T14305] syzkaller0: entered allmulticast mode
[  492.504297][T14302] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2841'.
[  495.149788][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'.
[  495.346793][T14354] netlink: 'syz.2.2857': attribute type 10 has an invalid length.
[  495.366634][T14354] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2857'.
[  495.948805][T14376] netlink: 'syz.0.2864': attribute type 10 has an invalid length.
[  496.198083][T14382] ref_ctr_offset mismatch. inode: 0x263 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  496.256471][T14377] FAULT_INJECTION: forcing a failure.
[  496.256471][T14377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.279157][T14377] CPU: 0 PID: 14377 Comm: syz.2.2865 Not tainted syzkaller #0
[  496.286853][T14377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  496.296924][T14377] Call Trace:
[  496.300231][T14377]  <TASK>
[  496.303226][T14377]  dump_stack_lvl+0x18c/0x250
[  496.307923][T14377]  ? show_regs_print_info+0x20/0x20
[  496.313389][T14377]  ? load_image+0x420/0x420
[  496.317910][T14377]  ? __lock_acquire+0x7eb0/0x7eb0
[  496.322979][T14377]  ? snprintf+0xe9/0x140
[  496.327248][T14377]  should_fail_ex+0x394/0x4c0
[  496.331933][T14377]  _copy_to_user+0x2f/0xa0
[  496.336365][T14377]  simple_read_from_buffer+0xe7/0x150
[  496.341775][T14377]  proc_fail_nth_read+0x1e8/0x260
[  496.346838][T14377]  ? proc_fault_inject_write+0x360/0x360
[  496.352503][T14377]  ? fsnotify_perm+0x271/0x5e0
[  496.357293][T14377]  ? proc_fault_inject_write+0x360/0x360
[  496.362940][T14377]  vfs_read+0x298/0x990
[  496.367135][T14377]  ? kernel_read+0x1e0/0x1e0
[  496.371745][T14377]  ? __fget_files+0x28/0x460
[  496.376430][T14377]  ? __fget_files+0x3fc/0x460
[  496.381124][T14377]  ? __fdget_pos+0x2a3/0x330
[  496.385734][T14377]  ? ksys_read+0x74/0x260
[  496.390092][T14377]  ksys_read+0x151/0x260
[  496.394370][T14377]  ? vfs_write+0x9a0/0x9a0
[  496.398822][T14377]  ? lockdep_hardirqs_on+0x98/0x150
[  496.404141][T14377]  do_syscall_64+0x55/0xb0
[  496.408713][T14377]  ? clear_bhb_loop+0x40/0x90
[  496.413424][T14377]  ? clear_bhb_loop+0x40/0x90
[  496.418224][T14377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  496.424190][T14377] RIP: 0033:0x7f35ef56034e
[  496.428629][T14377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  496.451017][T14377] RSP: 002b:00007f35ed7b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  496.459537][T14377] RAX: ffffffffffffffda RBX: 00007f35ed7b46c0 RCX: 00007f35ef56034e
[  496.467623][T14377] RDX: 000000000000000f RSI: 00007f35ed7b40a0 RDI: 0000000000000007
[  496.475617][T14377] RBP: 00007f35ed7b4090 R08: 0000000000000000 R09: 0000000000000000
[  496.483776][T14377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.491801][T14377] R13: 00007f35ef826218 R14: 00007f35ef826180 R15: 00007ffe8e961268
[  496.499820][T14377]  </TASK>
[  496.838929][T14390] syzkaller0: entered promiscuous mode
[  496.844562][T14390] syzkaller0: entered allmulticast mode
[  496.937805][T14395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2872'.
[  497.274548][T14405] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  497.584977][T14411] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  497.591720][T14411] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  497.735474][T14413] netlink: 'syz.0.2877': attribute type 10 has an invalid length.
[  497.744942][T14413] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2877'.
[  499.505799][T14428] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2883'.
[  499.591433][T14433] FAULT_INJECTION: forcing a failure.
[  499.591433][T14433] name failslab, interval 1, probability 0, space 0, times 0
[  499.610444][T14433] CPU: 0 PID: 14433 Comm: syz.3.2885 Not tainted syzkaller #0
[  499.617977][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  499.628068][T14433] Call Trace:
[  499.631373][T14433]  <TASK>
[  499.634361][T14433]  dump_stack_lvl+0x18c/0x250
[  499.639069][T14433]  ? sctp_sendmsg+0x1519/0x27b0
[  499.643952][T14433]  ? ___sys_sendmsg+0x2a6/0x360
[  499.648832][T14433]  ? show_regs_print_info+0x20/0x20
[  499.654073][T14433]  ? load_image+0x420/0x420
[  499.658628][T14433]  should_fail_ex+0x394/0x4c0
[  499.663368][T14433]  should_failslab+0x9/0x20
[  499.667911][T14433]  slab_pre_alloc_hook+0x59/0x300
[  499.672976][T14433]  ? sctp_add_bind_addr+0x8c/0x360
[  499.678121][T14433]  __kmem_cache_alloc_node+0x53/0x260
[  499.683524][T14433]  ? sctp_add_bind_addr+0x8c/0x360
[  499.688716][T14433]  kmalloc_trace+0x2a/0xe0
[  499.693190][T14433]  sctp_add_bind_addr+0x8c/0x360
[  499.698194][T14433]  sctp_copy_local_addr_list+0x31b/0x4e0
[  499.703867][T14433]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  499.709731][T14433]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  499.715836][T14433]  ? sctp_v4_is_any+0x35/0x60
[  499.720540][T14433]  ? sctp_copy_one_addr+0x8c/0x350
[  499.725686][T14433]  sctp_bind_addr_copy+0xb3/0x3c0
[  499.730731][T14433]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  499.737175][T14433]  sctp_connect_new_asoc+0x2f9/0x6a0
[  499.742493][T14433]  ? __sctp_connect+0xd80/0xd80
[  499.747450][T14433]  ? __local_bh_enable_ip+0x13a/0x1c0
[  499.752862][T14433]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  499.758429][T14433]  ? security_sctp_bind_connect+0x89/0xb0
[  499.764214][T14433]  sctp_sendmsg+0x1519/0x27b0
[  499.768922][T14433]  ? sctp_getsockopt+0xb60/0xb60
[  499.773875][T14433]  ? aa_sk_perm+0x7bb/0x8e0
[  499.778430][T14433]  ? aa_af_perm+0x330/0x330
[  499.782946][T14433]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  499.789390][T14433]  ? sock_rps_record_flow+0x19/0x3f0
[  499.794709][T14433]  ? inet_sendmsg+0xce/0x2a0
[  499.799316][T14433]  ? inet_send_prepare+0x250/0x250
[  499.804545][T14433]  ____sys_sendmsg+0x61b/0x980
[  499.809339][T14433]  ? __asan_memset+0x22/0x40
[  499.813957][T14433]  ? __sys_sendmsg_sock+0x30/0x30
[  499.818993][T14433]  ? __import_iovec+0x5f2/0x850
[  499.823873][T14433]  ? import_iovec+0x73/0xa0
[  499.828573][T14433]  ___sys_sendmsg+0x2a6/0x360
[  499.833267][T14433]  ? get_pid_task+0x20/0x1e0
[  499.837877][T14433]  ? __sys_sendmsg+0x2b0/0x2b0
[  499.842674][T14433]  ? __lock_acquire+0x7eb0/0x7eb0
[  499.847736][T14433]  __se_sys_sendmsg+0x1d0/0x2c0
[  499.852608][T14433]  ? __x64_sys_sendmsg+0x80/0x80
[  499.857573][T14433]  ? lockdep_hardirqs_on+0x98/0x150
[  499.862798][T14433]  do_syscall_64+0x55/0xb0
[  499.867233][T14433]  ? clear_bhb_loop+0x40/0x90
[  499.871923][T14433]  ? clear_bhb_loop+0x40/0x90
[  499.876616][T14433]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  499.882546][T14433] RIP: 0033:0x7efdeb99fb19
[  499.886986][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.906708][T14433] RSP: 002b:00007efdec8ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  499.915155][T14433] RAX: ffffffffffffffda RBX: 00007efdebc25fa0 RCX: 00007efdeb99fb19
[  499.923144][T14433] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003
[  499.931156][T14433] RBP: 00007efdec8ce090 R08: 0000000000000000 R09: 0000000000000000
[  499.939185][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  499.947177][T14433] R13: 00007efdebc26038 R14: 00007efdebc25fa0 R15: 00007ffd881c8de8
[  499.955183][T14433]  </TASK>
[  500.371508][T14446] netlink: 'syz.1.2891': attribute type 10 has an invalid length.
[  500.393177][T14446] team0: Device nlmon0 is of different type
[  500.415061][T14449] sit0: entered allmulticast mode
[  500.564302][T14461] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2896'.
[  500.626749][T14459] syzkaller0: entered promiscuous mode
[  500.632617][T14459] syzkaller0: entered allmulticast mode
[  500.708414][T14467] netlink: 'syz.2.2898': attribute type 10 has an invalid length.
[  500.738672][T14467] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2898'.
[  501.869665][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.876439][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  509.259245][T14540] FAULT_INJECTION: forcing a failure.
[  509.259245][T14540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.273125][T14540] CPU: 0 PID: 14540 Comm: syz.1.2925 Not tainted syzkaller #0
[  509.280611][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  509.290698][T14540] Call Trace:
[  509.294002][T14540]  <TASK>
[  509.296935][T14540]  dump_stack_lvl+0x18c/0x250
[  509.301620][T14540]  ? show_regs_print_info+0x20/0x20
[  509.306815][T14540]  ? load_image+0x420/0x420
[  509.311413][T14540]  should_fail_ex+0x394/0x4c0
[  509.316188][T14540]  strncpy_from_user+0x36/0x2f0
[  509.321052][T14540]  strncpy_from_user_nofault+0x71/0x140
[  509.326607][T14540]  bpf_probe_read_user_str+0x2a/0x70
[  509.331896][T14540]  bpf_prog_1e3bbe2938cdc17f+0x3f/0x70
[  509.337369][T14540]  __bpf_prog_test_run_raw_tp+0x1f9/0x440
[  509.343100][T14540]  ? __bpf_prog_test_run_raw_tp+0xd3/0x440
[  509.348939][T14540]  ? bpf_prog_test_run_raw_tp+0x680/0x680
[  509.354665][T14540]  ? __lock_acquire+0x7eb0/0x7eb0
[  509.359720][T14540]  bpf_prog_test_run_raw_tp+0x45e/0x680
[  509.365293][T14540]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  509.370848][T14540]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  509.376307][T14540]  bpf_prog_test_run+0x31f/0x390
[  509.381252][T14540]  __sys_bpf+0x49d/0x890
[  509.385637][T14540]  ? bpf_link_show_fdinfo+0x560/0x560
[  509.391023][T14540]  ? lock_chain_count+0x20/0x20
[  509.395909][T14540]  __x64_sys_bpf+0x7c/0x90
[  509.400793][T14540]  do_syscall_64+0x55/0xb0
[  509.405225][T14540]  ? clear_bhb_loop+0x40/0x90
[  509.410071][T14540]  ? clear_bhb_loop+0x40/0x90
[  509.414756][T14540]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  509.420652][T14540] RIP: 0033:0x7f92b219fb19
[  509.425074][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.444752][T14540] RSP: 002b:00007f92b3076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  509.453464][T14540] RAX: ffffffffffffffda RBX: 00007f92b2425fa0 RCX: 00007f92b219fb19
[  509.461438][T14540] RDX: 000000000000000c RSI: 0000200000000a00 RDI: 000000000000000a
[  509.469420][T14540] RBP: 00007f92b3076090 R08: 0000000000000000 R09: 0000000000000000
[  509.477411][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.485489][T14540] R13: 00007f92b2426038 R14: 00007f92b2425fa0 R15: 00007ffe0a815448
[  509.493474][T14540]  </TASK>
[  509.735818][T14551] syzkaller0: entered promiscuous mode
[  509.745794][T14551] syzkaller0: entered allmulticast mode
[  512.512779][T14573] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2937'.
[  512.524364][T14573] hsr_slave_0: left promiscuous mode
[  512.531190][T14573] hsr_slave_1: left promiscuous mode
[  512.611899][T14581] bridge0: port 3() entered disabled state
[  513.641793][T14605] syzkaller0: entered promiscuous mode
[  513.653632][T14605] syzkaller0: entered allmulticast mode
[  513.704132][T14607] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2951'.
[  513.738999][T14607] openvswitch: netlink: Key type 29 is not supported
[  514.169244][T14579] Bluetooth: hci1: command 0x0406 tx timeout
[  514.371428][T14623] netlink: 'syz.3.2955': attribute type 9 has an invalid length.
[  516.644560][T14648] netlink: 'syz.0.2963': attribute type 12 has an invalid length.
[  516.660743][T14648] netlink: 'syz.0.2963': attribute type 15 has an invalid length.
[  516.674855][T14650] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2964'.
[  516.776588][T14652] FAULT_INJECTION: forcing a failure.
[  516.776588][T14652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  516.792982][T14652] CPU: 1 PID: 14652 Comm: syz.2.2965 Not tainted syzkaller #0
[  516.800846][T14652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  516.811021][T14652] Call Trace:
[  516.814364][T14652]  <TASK>
[  516.817323][T14652]  dump_stack_lvl+0x18c/0x250
[  516.822041][T14652]  ? show_regs_print_info+0x20/0x20
[  516.827283][T14652]  ? load_image+0x420/0x420
[  516.832631][T14652]  ? __might_fault+0xaa/0x120
[  516.838056][T14652]  ? __lock_acquire+0x7eb0/0x7eb0
[  516.843186][T14652]  should_fail_ex+0x394/0x4c0
[  516.847918][T14652]  _copy_from_user+0x2f/0xe0
[  516.852533][T14652]  __sys_bpf+0x23e/0x890
[  516.856812][T14652]  ? bpf_link_show_fdinfo+0x560/0x560
[  516.862229][T14652]  ? lock_chain_count+0x20/0x20
[  516.867157][T14652]  __x64_sys_bpf+0x7c/0x90
[  516.871616][T14652]  do_syscall_64+0x55/0xb0
[  516.876091][T14652]  ? clear_bhb_loop+0x40/0x90
[  516.880831][T14652]  ? clear_bhb_loop+0x40/0x90
[  516.885562][T14652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.891494][T14652] RIP: 0033:0x7f35ef59fb19
[  516.895936][T14652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.915766][T14652] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  516.924569][T14652] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  516.932663][T14652] RDX: 0000000000000025 RSI: 0000200000000400 RDI: 000000000000000a
[  516.940730][T14652] RBP: 00007f35ed7f6090 R08: 0000000000000000 R09: 0000000000000000
[  516.948745][T14652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.956772][T14652] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  516.964804][T14652]  </TASK>
[  517.308162][T14668] syzkaller0: entered promiscuous mode
[  517.330105][T14668] syzkaller0: entered allmulticast mode
[  517.637191][T14686] netlink: 'syz.0.2974': attribute type 10 has an invalid length.
[  517.682247][T14686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2974'.
[  518.495430][T14708] netlink: 'syz.1.2983': attribute type 1 has an invalid length.
[  518.505757][T14708] netlink: 'syz.1.2983': attribute type 3 has an invalid length.
[  518.514158][T14708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2983'.
[  520.070568][T14708] netlink: 'syz.1.2983': attribute type 10 has an invalid length.
[  520.096479][T14708] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2983'.
[  520.118607][T14696] rxe_eth0 speed is unknown, defaulting to 1000
[  520.353860][T14718] netlink: 'syz.2.2987': attribute type 3 has an invalid length.
[  520.363535][T14718] netlink: 'syz.2.2987': attribute type 6 has an invalid length.
[  520.371925][T14718] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2987'.
[  521.103686][T14745] syzkaller0: entered promiscuous mode
[  521.112824][T14745] syzkaller0: entered allmulticast mode
[  523.577280][T14779] netlink: 'syz.3.3009': attribute type 25 has an invalid length.
[  523.608815][T14779] netlink: 'syz.3.3009': attribute type 10 has an invalid length.
[  523.843477][T14787] netlink: 'syz.1.3012': attribute type 10 has an invalid length.
[  523.851821][T14787] netlink: 'syz.1.3012': attribute type 16 has an invalid length.
[  523.860357][T14787] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3012'.
[  524.044659][T14793] netlink: 'syz.1.3015': attribute type 2 has an invalid length.
[  524.047080][T14791] syzkaller0: entered promiscuous mode
[  524.068630][T14793] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3015'.
[  524.080795][T14791] syzkaller0: entered allmulticast mode
[  528.882353][T14819] netlink: 'syz.2.3022': attribute type 10 has an invalid length.
[  528.953087][T14824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3024'.
[  528.980415][T14822] netlink: 'syz.3.3023': attribute type 2 has an invalid length.
[  528.988415][T14822] netlink: 'syz.3.3023': attribute type 8 has an invalid length.
[  528.997408][T14822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3023'.
[  529.016995][T14822] netlink: 'syz.3.3023': attribute type 2 has an invalid length.
[  529.025565][T14822] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3023'.
[  529.196609][T14828] netlink: 'syz.2.3026': attribute type 29 has an invalid length.
[  529.223760][T14828] netlink: 'syz.2.3026': attribute type 29 has an invalid length.
[  529.234161][T14828] netlink: 'syz.2.3026': attribute type 29 has an invalid length.
[  529.576368][T14846] syzkaller0: entered promiscuous mode
[  529.591516][T14846] syzkaller0: entered allmulticast mode
[  532.428188][T14880] FAULT_INJECTION: forcing a failure.
[  532.428188][T14880] name failslab, interval 1, probability 0, space 0, times 0
[  532.451501][T14880] CPU: 0 PID: 14880 Comm: syz.3.3044 Not tainted syzkaller #0
[  532.459058][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  532.469167][T14880] Call Trace:
[  532.472492][T14880]  <TASK>
[  532.475468][T14880]  dump_stack_lvl+0x18c/0x250
[  532.480212][T14880]  ? show_regs_print_info+0x20/0x20
[  532.485453][T14880]  ? load_image+0x420/0x420
[  532.489979][T14880]  ? __might_sleep+0xe0/0xe0
[  532.494600][T14880]  ? __lock_acquire+0x7eb0/0x7eb0
[  532.499654][T14880]  should_fail_ex+0x394/0x4c0
[  532.504358][T14880]  should_failslab+0x9/0x20
[  532.508887][T14880]  slab_pre_alloc_hook+0x59/0x300
[  532.513962][T14880]  ? __lock_acquire+0x7eb0/0x7eb0
[  532.519049][T14880]  kmem_cache_alloc_node+0x5e/0x320
[  532.524302][T14880]  ? __alloc_skb+0x103/0x2c0
[  532.529000][T14880]  __alloc_skb+0x103/0x2c0
[  532.533479][T14880]  netlink_sendmsg+0x66a/0xbf0
[  532.538391][T14880]  ? netlink_getsockopt+0x590/0x590
[  532.543623][T14880]  ? apparmor_socket_sendmsg+0x170/0x330
[  532.549301][T14880]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  532.554602][T14880]  ? security_socket_sendmsg+0x80/0xa0
[  532.560079][T14880]  ? netlink_getsockopt+0x590/0x590
[  532.565311][T14880]  ____sys_sendmsg+0x61b/0x980
[  532.570119][T14880]  ? __asan_memset+0x22/0x40
[  532.574725][T14880]  ? __sys_sendmsg_sock+0x30/0x30
[  532.579771][T14880]  ? __import_iovec+0x5f2/0x850
[  532.584661][T14880]  ? import_iovec+0x73/0xa0
[  532.589186][T14880]  ___sys_sendmsg+0x2a6/0x360
[  532.593896][T14880]  ? __sys_sendmsg+0x2b0/0x2b0
[  532.598747][T14880]  ? __lock_acquire+0x7eb0/0x7eb0
[  532.603842][T14880]  __se_sys_sendmsg+0x1d0/0x2c0
[  532.608729][T14880]  ? __x64_sys_sendmsg+0x80/0x80
[  532.613737][T14880]  ? lockdep_hardirqs_on+0x98/0x150
[  532.619412][T14880]  do_syscall_64+0x55/0xb0
[  532.623845][T14880]  ? clear_bhb_loop+0x40/0x90
[  532.628534][T14880]  ? clear_bhb_loop+0x40/0x90
[  532.633236][T14880]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  532.639142][T14880] RIP: 0033:0x7efdeb99fb19
[  532.643579][T14880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  532.663296][T14880] RSP: 002b:00007efdec8ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  532.671817][T14880] RAX: ffffffffffffffda RBX: 00007efdebc25fa0 RCX: 00007efdeb99fb19
[  532.679801][T14880] RDX: 0000000020004080 RSI: 00002000000009c0 RDI: 0000000000000009
[  532.687783][T14880] RBP: 00007efdec8ce090 R08: 0000000000000000 R09: 0000000000000000
[  532.695768][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.703753][T14880] R13: 00007efdebc26038 R14: 00007efdebc25fa0 R15: 00007ffd881c8de8
[  532.711773][T14880]  </TASK>
[  534.225959][T14885] netlink: 'syz.3.3045': attribute type 7 has an invalid length.
[  534.393707][T14892] FAULT_INJECTION: forcing a failure.
[  534.393707][T14892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.411048][T14892] CPU: 0 PID: 14892 Comm: syz.0.3046 Not tainted syzkaller #0
[  534.418573][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  534.428654][T14892] Call Trace:
[  534.431973][T14892]  <TASK>
[  534.434931][T14892]  dump_stack_lvl+0x18c/0x250
[  534.439646][T14892]  ? show_regs_print_info+0x20/0x20
[  534.444867][T14892]  ? load_image+0x420/0x420
[  534.449396][T14892]  ? __might_fault+0xaa/0x120
[  534.454077][T14892]  ? __lock_acquire+0x7eb0/0x7eb0
[  534.459191][T14892]  should_fail_ex+0x394/0x4c0
[  534.463901][T14892]  _copy_from_iter+0x1cd/0x1290
[  534.468761][T14892]  ? rcu_is_watching+0x15/0xb0
[  534.473544][T14892]  ? copyout_mc+0x70/0x70
[  534.477880][T14892]  ? __virt_addr_valid+0x10c/0x380
[  534.482993][T14892]  ? __virt_addr_valid+0x10c/0x380
[  534.488105][T14892]  ? __virt_addr_valid+0x10c/0x380
[  534.493238][T14892]  ? __check_object_size+0x4fc/0xa40
[  534.498551][T14892]  netlink_sendmsg+0x76b/0xbf0
[  534.503330][T14892]  ? netlink_getsockopt+0x590/0x590
[  534.508531][T14892]  ? apparmor_socket_sendmsg+0x8e/0x330
[  534.514079][T14892]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  534.519363][T14892]  ? security_socket_sendmsg+0x80/0xa0
[  534.524826][T14892]  ? netlink_getsockopt+0x590/0x590
[  534.530021][T14892]  ____sys_sendmsg+0x61b/0x980
[  534.534979][T14892]  ? __asan_memset+0x22/0x40
[  534.539575][T14892]  ? __sys_sendmsg_sock+0x30/0x30
[  534.544600][T14892]  ? __import_iovec+0x5f2/0x850
[  534.549461][T14892]  ? import_iovec+0x73/0xa0
[  534.553974][T14892]  ___sys_sendmsg+0x2a6/0x360
[  534.558760][T14892]  ? __sys_sendmsg+0x2b0/0x2b0
[  534.563566][T14892]  ? ktime_get+0x7f/0x280
[  534.567934][T14892]  __se_sys_sendmsg+0x1d0/0x2c0
[  534.572796][T14892]  ? __x64_sys_sendmsg+0x80/0x80
[  534.577747][T14892]  ? lockdep_hardirqs_on+0x98/0x150
[  534.582943][T14892]  do_syscall_64+0x55/0xb0
[  534.587357][T14892]  ? clear_bhb_loop+0x40/0x90
[  534.592035][T14892]  ? clear_bhb_loop+0x40/0x90
[  534.596713][T14892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  534.602606][T14892] RIP: 0033:0x7febbd39fb19
[  534.607019][T14892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.626637][T14892] RSP: 002b:00007febbe237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.635064][T14892] RAX: ffffffffffffffda RBX: 00007febbd626090 RCX: 00007febbd39fb19
[  534.643045][T14892] RDX: 0000000000040000 RSI: 0000200000000a80 RDI: 0000000000000005
[  534.651018][T14892] RBP: 00007febbe237090 R08: 0000000000000000 R09: 0000000000000000
[  534.658995][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.666966][T14892] R13: 00007febbd626128 R14: 00007febbd626090 R15: 00007fff71799358
[  534.675041][T14892]  </TASK>
[  534.889233][T14579] Bluetooth: hci0: command 0x0406 tx timeout
[  534.994944][T14908] syzkaller0: entered promiscuous mode
[  535.032856][T14908] syzkaller0: entered allmulticast mode
[  537.351835][T14928] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3057'.
[  537.361270][T14929] netlink: 'syz.3.3055': attribute type 10 has an invalid length.
[  537.369949][T14929] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3055'.
[  537.385836][T14929] bond0: entered promiscuous mode
[  537.391522][T14929] bond_slave_0: entered promiscuous mode
[  537.397586][T14929] bond_slave_1: entered promiscuous mode
[  537.409730][T14929] bridge0: port 3(bond0) entered blocking state
[  537.416366][T14929] bridge0: port 3(bond0) entered disabled state
[  537.427301][T14929] bond0: entered allmulticast mode
[  537.433945][T14929] bond_slave_0: entered allmulticast mode
[  537.447259][T14929] bond_slave_1: entered allmulticast mode
[  537.470441][T14929] bridge0: port 3(bond0) entered blocking state
[  537.476941][T14929] bridge0: port 3(bond0) entered forwarding state
[  537.686274][T14941] netlink: 'syz.3.3061': attribute type 10 has an invalid length.
[  537.729190][T14945] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3059'.
[  537.747238][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3061'.
[  537.792979][T14941] netlink: 'syz.3.3061': attribute type 10 has an invalid length.
[  537.809955][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3061'.
[  538.117530][T14959] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3066'.
[  538.175035][T14959] netlink: 'syz.2.3066': attribute type 10 has an invalid length.
[  538.196290][T14959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3066'.
[  538.206140][T14959] dummy0: entered promiscuous mode
[  538.223498][T14959] dummy0: entered allmulticast mode
[  538.238606][T14959] bridge0: port 4(dummy0) entered blocking state
[  538.256651][T14959] bridge0: port 4(dummy0) entered disabled state
[  538.274837][T14959] bridge0: port 4(dummy0) entered blocking state
[  538.281850][T14959] bridge0: port 4(dummy0) entered forwarding state
[  538.379601][T14964] syzkaller0: entered promiscuous mode
[  538.385151][T14964] syzkaller0: entered allmulticast mode
[  541.753544][T15009] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3079'.
[  541.823493][T15009] netlink: 'syz.1.3079': attribute type 10 has an invalid length.
[  541.843930][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3079'.
[  541.867844][T15009] dummy0: entered promiscuous mode
[  541.882267][T15009] dummy0: entered allmulticast mode
[  541.900852][T15009] bridge0: port 4(dummy0) entered blocking state
[  542.008877][T15009] bridge0: port 4(dummy0) entered disabled state
[  542.064290][T15009] bridge0: port 4(dummy0) entered blocking state
[  542.071395][T15009] bridge0: port 4(dummy0) entered forwarding state
[  542.867253][T15026] syzkaller0: entered promiscuous mode
[  542.898674][T15026] syzkaller0: entered allmulticast mode
[  542.977743][T15029] syzkaller0: entered promiscuous mode
[  542.983821][T15029] syzkaller0: entered allmulticast mode
[  547.857150][T15056] syzkaller0: entered promiscuous mode
[  547.864291][T15056] syzkaller0: entered allmulticast mode
[  549.806137][T15077] syzkaller0: entered promiscuous mode
[  549.818554][T15077] syzkaller0: entered allmulticast mode
[  550.044974][T15093] syzkaller0: entered promiscuous mode
[  550.073617][T15093] syzkaller0: entered allmulticast mode
[  555.101523][T15128] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3104'.
[  555.112240][T15134] netlink: 'syz.0.3104': attribute type 4 has an invalid length.
[  555.129956][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  555.162404][T15129] syzkaller0: entered promiscuous mode
[  555.168114][T15129] syzkaller0: entered allmulticast mode
[  557.976668][T15197] dvmrp1: tun_chr_ioctl cmd 2148553947
[  558.557341][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'.
[  558.618174][T15220] syzkaller0: entered promiscuous mode
[  558.628364][T15220] syzkaller0: entered allmulticast mode
[  558.832322][T15231] FAULT_INJECTION: forcing a failure.
[  558.832322][T15231] name failslab, interval 1, probability 0, space 0, times 0
[  558.855376][T15231] CPU: 1 PID: 15231 Comm: syz.1.3133 Not tainted syzkaller #0
[  558.862903][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  558.872981][T15231] Call Trace:
[  558.876288][T15231]  <TASK>
[  558.879246][T15231]  dump_stack_lvl+0x18c/0x250
[  558.883953][T15231]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  558.890141][T15231]  ? show_regs_print_info+0x20/0x20
[  558.895416][T15231]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  558.901609][T15231]  should_fail_ex+0x394/0x4c0
[  558.906303][T15231]  should_failslab+0x9/0x20
[  558.910811][T15231]  slab_pre_alloc_hook+0x59/0x300
[  558.915849][T15231]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  558.921615][T15231]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  558.927410][T15231]  __kmem_cache_alloc_node+0x53/0x260
[  558.932799][T15231]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  558.938525][T15231]  __kmalloc+0xa7/0x240
[  558.942699][T15231]  tomoyo_realpath_from_path+0xe6/0x5c0
[  558.948250][T15231]  ? tomoyo_domain+0xd6/0x120
[  558.952933][T15231]  tomoyo_path_number_perm+0x248/0x5e0
[  558.958404][T15231]  ? tomoyo_path_number_perm+0x217/0x5e0
[  558.964075][T15231]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  558.969636][T15231]  ? ksys_write+0x1d2/0x260
[  558.974168][T15231]  ? __fget_files+0x28/0x460
[  558.978794][T15231]  security_file_ioctl+0x70/0xa0
[  558.983739][T15231]  __se_sys_ioctl+0x48/0x170
[  558.988332][T15231]  do_syscall_64+0x55/0xb0
[  558.992750][T15231]  ? clear_bhb_loop+0x40/0x90
[  558.997430][T15231]  ? clear_bhb_loop+0x40/0x90
[  559.002110][T15231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.008010][T15231] RIP: 0033:0x7f92b219fb19
[  559.012450][T15231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.032082][T15231] RSP: 002b:00007f92b3055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  559.040588][T15231] RAX: ffffffffffffffda RBX: 00007f92b2426090 RCX: 00007f92b219fb19
[  559.048564][T15231] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000004
[  559.056630][T15231] RBP: 00007f92b3055090 R08: 0000000000000000 R09: 0000000000000000
[  559.064605][T15231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.072594][T15231] R13: 00007f92b2426128 R14: 00007f92b2426090 R15: 00007ffe0a815448
[  559.080585][T15231]  </TASK>
[  559.105398][T15231] ERROR: Out of memory at tomoyo_realpath_from_path.
[  559.385514][T15237] netlink: 'syz.3.3134': attribute type 10 has an invalid length.
[  559.416778][T15237] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3134'.
[  561.725595][T15255] ref_ctr_offset mismatch. inode: 0x39d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  561.781647][T15256] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3141'.
[  561.904155][T15256] syzkaller0: entered promiscuous mode
[  561.916540][T15256] syzkaller0: entered allmulticast mode
[  562.584525][T15272] syzkaller0: entered promiscuous mode
[  562.615481][T15272] syzkaller0: entered allmulticast mode
[  563.294056][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.300684][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  564.589527][T15286] netlink: 'syz.3.3149': attribute type 10 has an invalid length.
[  564.597658][T15286] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3149'.
[  564.786173][T15293] syzkaller0: entered promiscuous mode
[  564.791866][T15293] syzkaller0: entered allmulticast mode
[  568.135525][T15316] sit0: entered allmulticast mode
[  571.393741][T15357] netlink: 'syz.1.3169': attribute type 10 has an invalid length.
[  571.424034][T15357] team0: Device veth1_vlan failed to register rx_handler
[  571.453285][T15360] netlink: 'syz.0.3170': attribute type 12 has an invalid length.
[  571.465996][T15360] netlink: 'syz.0.3170': attribute type 15 has an invalid length.
[  571.681512][T15371] FAULT_INJECTION: forcing a failure.
[  571.681512][T15371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  571.741194][T15371] CPU: 1 PID: 15371 Comm: syz.0.3173 Not tainted syzkaller #0
[  571.748735][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  571.758933][T15371] Call Trace:
[  571.762227][T15371]  <TASK>
[  571.765158][T15371]  dump_stack_lvl+0x18c/0x250
[  571.769838][T15371]  ? show_regs_print_info+0x20/0x20
[  571.775048][T15371]  ? load_image+0x420/0x420
[  571.779563][T15371]  ? __might_fault+0xaa/0x120
[  571.784347][T15371]  ? __lock_acquire+0x7eb0/0x7eb0
[  571.789383][T15371]  should_fail_ex+0x394/0x4c0
[  571.794180][T15371]  _copy_to_user+0x2f/0xa0
[  571.798939][T15371]  bpf_prog_test_run_raw_tp+0x4e2/0x680
[  571.804492][T15371]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  571.809975][T15371]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  571.815562][T15371]  bpf_prog_test_run+0x31f/0x390
[  571.820617][T15371]  __sys_bpf+0x49d/0x890
[  571.824856][T15371]  ? bpf_link_show_fdinfo+0x560/0x560
[  571.830242][T15371]  ? lock_chain_count+0x20/0x20
[  571.835114][T15371]  __x64_sys_bpf+0x7c/0x90
[  571.839544][T15371]  do_syscall_64+0x55/0xb0
[  571.843991][T15371]  ? clear_bhb_loop+0x40/0x90
[  571.848693][T15371]  ? clear_bhb_loop+0x40/0x90
[  571.853394][T15371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.859421][T15371] RIP: 0033:0x7febbd39fb19
[  571.863854][T15371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.883737][T15371] RSP: 002b:00007febbe258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  571.892151][T15371] RAX: ffffffffffffffda RBX: 00007febbd625fa0 RCX: 00007febbd39fb19
[  571.900133][T15371] RDX: 0000000000000025 RSI: 0000200000000400 RDI: 000000000000000a
[  571.908118][T15371] RBP: 00007febbe258090 R08: 0000000000000000 R09: 0000000000000000
[  571.916108][T15371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.924096][T15371] R13: 00007febbd626038 R14: 00007febbd625fa0 R15: 00007fff71799358
[  571.932083][T15371]  </TASK>
[  573.403294][T15425] FAULT_INJECTION: forcing a failure.
[  573.403294][T15425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  573.450972][T15425] CPU: 1 PID: 15425 Comm: syz.2.3194 Not tainted syzkaller #0
[  573.458503][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  573.468586][T15425] Call Trace:
[  573.471884][T15425]  <TASK>
[  573.474829][T15425]  dump_stack_lvl+0x18c/0x250
[  573.479545][T15425]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  573.485739][T15425]  ? show_regs_print_info+0x20/0x20
[  573.490962][T15425]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  573.497162][T15425]  should_fail_ex+0x394/0x4c0
[  573.501872][T15425]  _copy_from_user+0x2f/0xe0
[  573.506480][T15425]  __sys_bpf+0x23e/0x890
[  573.510751][T15425]  ? bpf_link_show_fdinfo+0x560/0x560
[  573.516164][T15425]  ? lock_chain_count+0x20/0x20
[  573.521040][T15425]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  573.527059][T15425]  __x64_sys_bpf+0x7c/0x90
[  573.531506][T15425]  do_syscall_64+0x55/0xb0
[  573.535949][T15425]  ? clear_bhb_loop+0x40/0x90
[  573.540660][T15425]  ? clear_bhb_loop+0x40/0x90
[  573.545374][T15425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  573.551303][T15425] RIP: 0033:0x7f35ef59fb19
[  573.555743][T15425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.575125][T15423] vcan0: entered promiscuous mode
[  573.575353][T15425] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  573.575379][T15425] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  573.575393][T15425] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000f
[  573.575405][T15425] RBP: 00007f35ed7f6090 R08: 0000000000000000 R09: 0000000000000000
[  573.575417][T15425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  573.575429][T15425] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  573.580703][T15423] vcan0: entered allmulticast mode
[  573.588854][T15425]  </TASK>
[  573.761365][T15430] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  573.819663][T15430] team0: Device nlmon0 is of different type
[  573.953245][T15430] syz.1.3195 (15430) used greatest stack depth: 18344 bytes left
[  574.141923][T15438] syzkaller0: entered promiscuous mode
[  574.147951][T15438] syzkaller0: entered allmulticast mode
[  576.014922][T15490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3217'.
[  576.034695][T15490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3217'.
[  576.065109][T15490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3217'.
[  576.408292][T15494] FAULT_INJECTION: forcing a failure.
[  576.408292][T15494] name failslab, interval 1, probability 0, space 0, times 0
[  576.447659][T15494] CPU: 1 PID: 15494 Comm: syz.3.3219 Not tainted syzkaller #0
[  576.455205][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  576.465298][T15494] Call Trace:
[  576.468614][T15494]  <TASK>
[  576.471568][T15494]  dump_stack_lvl+0x18c/0x250
[  576.476294][T15494]  ? show_regs_print_info+0x20/0x20
[  576.481530][T15494]  ? load_image+0x420/0x420
[  576.486069][T15494]  ? verify_lock_unused+0x140/0x140
[  576.491337][T15494]  ? perf_trace_lock+0xfc/0x3b0
[  576.496220][T15494]  should_fail_ex+0x394/0x4c0
[  576.500932][T15494]  should_failslab+0x9/0x20
[  576.505470][T15494]  slab_pre_alloc_hook+0x59/0x300
[  576.510528][T15494]  kmem_cache_alloc+0x5a/0x2d0
[  576.515312][T15494]  ? skb_clone+0x1eb/0x370
[  576.519757][T15494]  skb_clone+0x1eb/0x370
[  576.524078][T15494]  __netlink_deliver_tap+0x411/0x7f0
[  576.529408][T15494]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.534642][T15494]  netlink_deliver_tap+0x19c/0x1b0
[  576.539789][T15494]  netlink_unicast+0x82f/0x9e0
[  576.544614][T15494]  netlink_sendmsg+0x8d0/0xbf0
[  576.549409][T15494]  ? netlink_getsockopt+0x590/0x590
[  576.554615][T15494]  ? apparmor_socket_sendmsg+0x8e/0x330
[  576.560196][T15494]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  576.565484][T15494]  ? security_socket_sendmsg+0x80/0xa0
[  576.570990][T15494]  ? netlink_getsockopt+0x590/0x590
[  576.576188][T15494]  ____sys_sendmsg+0x61b/0x980
[  576.580979][T15494]  ? __asan_memset+0x22/0x40
[  576.585594][T15494]  ? __sys_sendmsg_sock+0x30/0x30
[  576.590626][T15494]  ? __import_iovec+0x5f2/0x850
[  576.595500][T15494]  ? import_iovec+0x73/0xa0
[  576.600026][T15494]  ___sys_sendmsg+0x2a6/0x360
[  576.604797][T15494]  ? __sys_sendmsg+0x2b0/0x2b0
[  576.609601][T15494]  __se_sys_sendmsg+0x1d0/0x2c0
[  576.614448][T15494]  ? perf_trace_preemptirq_template+0x269/0x330
[  576.620799][T15494]  ? __x64_sys_sendmsg+0x80/0x80
[  576.625749][T15494]  ? lockdep_hardirqs_on+0x98/0x150
[  576.630951][T15494]  do_syscall_64+0x55/0xb0
[  576.635384][T15494]  ? clear_bhb_loop+0x40/0x90
[  576.640063][T15494]  ? clear_bhb_loop+0x40/0x90
[  576.644741][T15494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  576.650657][T15494] RIP: 0033:0x7efdeb99fb19
[  576.655072][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.674680][T15494] RSP: 002b:00007efdec8ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.683103][T15494] RAX: ffffffffffffffda RBX: 00007efdebc25fa0 RCX: 00007efdeb99fb19
[  576.691167][T15494] RDX: 0000000000040000 RSI: 0000200000000a80 RDI: 0000000000000005
[  576.699139][T15494] RBP: 00007efdec8ce090 R08: 0000000000000000 R09: 0000000000000000
[  576.707136][T15494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  576.715123][T15494] R13: 00007efdebc26038 R14: 00007efdebc25fa0 R15: 00007ffd881c8de8
[  576.723111][T15494]  </TASK>
[  576.772712][T15494] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3219'.
[  577.373907][T15522] netlink: 'syz.3.3226': attribute type 10 has an invalid length.
[  577.408830][T15522] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3226'.
[  577.816977][T15536] netlink: 'syz.2.3231': attribute type 3 has an invalid length.
[  577.823232][T15533] vcan0: entered promiscuous mode
[  577.833863][T15533] vcan0: entered allmulticast mode
[  577.850301][T15537] netlink: 'syz.3.3232': attribute type 10 has an invalid length.
[  577.867992][T15536] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3231'.
[  577.878991][T15537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3232'.
[  577.898717][T15537] netlink: 'syz.3.3232': attribute type 10 has an invalid length.
[  577.906640][T15537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3232'.
[  581.124618][T15556] netlink: 'syz.0.3238': attribute type 10 has an invalid length.
[  581.182674][T15556] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.255286][T15556] bridge_slave_1: left allmulticast mode
[  581.261587][T15556] bridge_slave_1: left promiscuous mode
[  581.280489][T15556] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.327598][T15556] bridge_slave_1: entered promiscuous mode
[  581.338990][T15556] bridge_slave_1: entered allmulticast mode
[  581.346772][T15556] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  582.010789][T15567] sit0: entered allmulticast mode
[  582.185316][T15581] vcan0: entered promiscuous mode
[  582.198585][T15581] vcan0: entered allmulticast mode
[  583.702895][T15635] netlink: 'syz.0.3269': attribute type 10 has an invalid length.
[  583.711216][T15635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3269'.
[  583.721435][T15635] netlink: 'syz.0.3269': attribute type 10 has an invalid length.
[  583.731486][T15635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3269'.
[  584.013280][T15648] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3274'.
[  584.760103][T15673] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.3283'.
[  584.797935][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'.
[  585.836673][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3285'.
[  585.973858][T15683] netlink: 'syz.0.3286': attribute type 21 has an invalid length.
[  585.996766][T15683] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3286'.
[  586.028957][T15684] netlink: 'syz.0.3286': attribute type 4 has an invalid length.
[  586.048657][T15684] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3286'.
[  586.064502][T15684] »: renamed from bond0 (while UP)
[  586.109179][T15684] bridge0: port 4(») entered disabled state
[  586.476582][T15705] FAULT_INJECTION: forcing a failure.
[  586.476582][T15705] name failslab, interval 1, probability 0, space 0, times 0
[  586.519156][T15705] CPU: 0 PID: 15705 Comm: syz.3.3293 Not tainted syzkaller #0
[  586.526700][T15705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  586.536789][T15705] Call Trace:
[  586.540097][T15705]  <TASK>
[  586.543054][T15705]  dump_stack_lvl+0x18c/0x250
[  586.547772][T15705]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  586.553965][T15705]  ? show_regs_print_info+0x20/0x20
[  586.559210][T15705]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  586.565516][T15705]  should_fail_ex+0x394/0x4c0
[  586.570233][T15705]  should_failslab+0x9/0x20
[  586.574758][T15705]  slab_pre_alloc_hook+0x59/0x300
[  586.579833][T15705]  ? prepend_path+0x8a7/0x950
[  586.584547][T15705]  ? tomoyo_encode+0x2ad/0x570
[  586.589349][T15705]  ? tomoyo_encode+0x2ad/0x570
[  586.594327][T15705]  __kmem_cache_alloc_node+0x53/0x260
[  586.599747][T15705]  ? tomoyo_encode+0x2ad/0x570
[  586.604548][T15705]  __kmalloc+0xa7/0x240
[  586.608767][T15705]  tomoyo_encode+0x2ad/0x570
[  586.613408][T15705]  tomoyo_realpath_from_path+0x57c/0x5c0
[  586.619072][T15705]  tomoyo_path_number_perm+0x248/0x5e0
[  586.624823][T15705]  ? tomoyo_path_number_perm+0x217/0x5e0
[  586.630482][T15705]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  586.636408][T15705]  ? perf_trace_preemptirq_template+0xac/0x330
[  586.642598][T15705]  ? irqentry_enter+0x37/0x50
[  586.647305][T15705]  ? __fget_files+0x28/0x460
[  586.651902][T15705]  security_file_ioctl+0x70/0xa0
[  586.656848][T15705]  __se_sys_ioctl+0x48/0x170
[  586.661441][T15705]  do_syscall_64+0x55/0xb0
[  586.665858][T15705]  ? clear_bhb_loop+0x40/0x90
[  586.670557][T15705]  ? clear_bhb_loop+0x40/0x90
[  586.675320][T15705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  586.681217][T15705] RIP: 0033:0x7efdeb99fb19
[  586.685635][T15705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.705675][T15705] RSP: 002b:00007efdec8ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  586.714110][T15705] RAX: ffffffffffffffda RBX: 00007efdebc26090 RCX: 00007efdeb99fb19
[  586.722087][T15705] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000004
[  586.730056][T15705] RBP: 00007efdec8ad090 R08: 0000000000000000 R09: 0000000000000000
[  586.738375][T15705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.746348][T15705] R13: 00007efdebc26128 R14: 00007efdebc26090 R15: 00007ffd881c8de8
[  586.754338][T15705]  </TASK>
[  586.807599][T15705] ERROR: Out of memory at tomoyo_realpath_from_path.
[  586.864072][T15709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3295'.
[  587.062787][T15710] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3294'.
[  587.155790][T15708] 
€Â0: renamed from pim6reg1
[  587.720361][T15718] netlink: 'syz.3.3297': attribute type 2 has an invalid length.
[  587.728256][T15718] netlink: 'syz.3.3297': attribute type 8 has an invalid length.
[  587.750232][T15719] netlink: 'syz.0.3298': attribute type 10 has an invalid length.
[  587.800338][T15719] bridge0: port 4(») entered blocking state
[  587.806477][T15719] bridge0: port 4(») entered forwarding state
[  587.820267][T15719] 8021q: adding VLAN 0 to HW filter on device »
[  588.045894][T15720] syzkaller0: entered promiscuous mode
[  588.054836][T15720] syzkaller0: entered allmulticast mode
[  588.126456][T15730] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  588.133013][T15730] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  588.153138][T15721] tun0: tun_chr_ioctl cmd 1074812118
[  588.431465][T15742] FAULT_INJECTION: forcing a failure.
[  588.431465][T15742] name failslab, interval 1, probability 0, space 0, times 0
[  588.481981][T15742] CPU: 1 PID: 15742 Comm: syz.1.3304 Not tainted syzkaller #0
[  588.489556][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  588.499645][T15742] Call Trace:
[  588.502955][T15742]  <TASK>
[  588.505914][T15742]  dump_stack_lvl+0x18c/0x250
[  588.510643][T15742]  ? sctp_sendmsg+0x1519/0x27b0
[  588.515536][T15742]  ? ___sys_sendmsg+0x2a6/0x360
[  588.520612][T15742]  ? show_regs_print_info+0x20/0x20
[  588.525986][T15742]  ? load_image+0x420/0x420
[  588.530547][T15742]  should_fail_ex+0x394/0x4c0
[  588.535273][T15742]  should_failslab+0x9/0x20
[  588.539826][T15742]  slab_pre_alloc_hook+0x59/0x300
[  588.544886][T15742]  ? sctp_add_bind_addr+0x8c/0x360
[  588.550033][T15742]  __kmem_cache_alloc_node+0x53/0x260
[  588.555443][T15742]  ? sctp_add_bind_addr+0x8c/0x360
[  588.560622][T15742]  kmalloc_trace+0x2a/0xe0
[  588.565077][T15742]  sctp_add_bind_addr+0x8c/0x360
[  588.570061][T15742]  sctp_copy_local_addr_list+0x31b/0x4e0
[  588.575736][T15742]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  588.581520][T15742]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  588.587622][T15742]  ? sctp_v4_is_any+0x35/0x60
[  588.592313][T15742]  ? sctp_copy_one_addr+0x8c/0x350
[  588.597488][T15742]  sctp_bind_addr_copy+0xb3/0x3c0
[  588.602547][T15742]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  588.608887][T15742]  sctp_connect_new_asoc+0x2f9/0x6a0
[  588.614186][T15742]  ? __sctp_connect+0xd80/0xd80
[  588.619040][T15742]  ? __local_bh_enable_ip+0x13a/0x1c0
[  588.624439][T15742]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  588.630099][T15742]  ? security_sctp_bind_connect+0x89/0xb0
[  588.635834][T15742]  sctp_sendmsg+0x1519/0x27b0
[  588.640549][T15742]  ? sctp_getsockopt+0xb60/0xb60
[  588.645707][T15742]  ? aa_sk_perm+0x7bb/0x8e0
[  588.650368][T15742]  ? aa_af_perm+0x330/0x330
[  588.654897][T15742]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  588.661365][T15742]  ? sock_rps_record_flow+0x19/0x3f0
[  588.666691][T15742]  ? inet_sendmsg+0xce/0x2a0
[  588.671303][T15742]  ? inet_send_prepare+0x250/0x250
[  588.676425][T15742]  ____sys_sendmsg+0x61b/0x980
[  588.681212][T15742]  ? __asan_memset+0x22/0x40
[  588.685827][T15742]  ? __sys_sendmsg_sock+0x30/0x30
[  588.690861][T15742]  ? __import_iovec+0x5f2/0x850
[  588.695763][T15742]  ? import_iovec+0x73/0xa0
[  588.700308][T15742]  ___sys_sendmsg+0x2a6/0x360
[  588.704997][T15742]  ? get_pid_task+0x20/0x1e0
[  588.709599][T15742]  ? __sys_sendmsg+0x2b0/0x2b0
[  588.714379][T15742]  ? __lock_acquire+0x7eb0/0x7eb0
[  588.719445][T15742]  __se_sys_sendmsg+0x1d0/0x2c0
[  588.724307][T15742]  ? __x64_sys_sendmsg+0x80/0x80
[  588.729276][T15742]  ? lockdep_hardirqs_on+0x98/0x150
[  588.734482][T15742]  do_syscall_64+0x55/0xb0
[  588.738918][T15742]  ? clear_bhb_loop+0x40/0x90
[  588.743614][T15742]  ? clear_bhb_loop+0x40/0x90
[  588.748309][T15742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  588.754233][T15742] RIP: 0033:0x7f92b219fb19
[  588.758665][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.778281][T15742] RSP: 002b:00007f92b3076028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.786875][T15742] RAX: ffffffffffffffda RBX: 00007f92b2425fa0 RCX: 00007f92b219fb19
[  588.794854][T15742] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003
[  588.802841][T15742] RBP: 00007f92b3076090 R08: 0000000000000000 R09: 0000000000000000
[  588.810822][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  588.818891][T15742] R13: 00007f92b2426038 R14: 00007f92b2425fa0 R15: 00007ffe0a815448
[  588.826885][T15742]  </TASK>
[  591.433715][T15771] __nla_validate_parse: 4 callbacks suppressed
[  591.433760][T15771] netlink: 12518 bytes leftover after parsing attributes in process `syz.0.3313'.
[  591.475348][T15772] netlink: 'syz.1.3314': attribute type 10 has an invalid length.
[  591.485431][T15772] team0: Device nlmon0 is of different type
[  591.707432][T15782] ipvlan1: entered promiscuous mode
[  591.776613][T15782] ipvlan1: entered allmulticast mode
[  591.803100][T15782] veth0_vlan: entered allmulticast mode
[  591.854858][T15785] netlink: 'syz.0.3319': attribute type 10 has an invalid length.
[  591.869044][T15785] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3319'.
[  592.724115][T15821] FAULT_INJECTION: forcing a failure.
[  592.724115][T15821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  592.738032][T15821] CPU: 1 PID: 15821 Comm: syz.1.3332 Not tainted syzkaller #0
[  592.745531][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  592.755618][T15821] Call Trace:
[  592.758914][T15821]  <TASK>
[  592.761844][T15821]  dump_stack_lvl+0x18c/0x250
[  592.766532][T15821]  ? show_regs_print_info+0x20/0x20
[  592.771732][T15821]  ? load_image+0x420/0x420
[  592.776233][T15821]  ? __lock_acquire+0x7eb0/0x7eb0
[  592.781254][T15821]  ? snprintf+0xe9/0x140
[  592.785496][T15821]  should_fail_ex+0x394/0x4c0
[  592.790179][T15821]  _copy_to_user+0x2f/0xa0
[  592.794635][T15821]  simple_read_from_buffer+0xe7/0x150
[  592.800013][T15821]  proc_fail_nth_read+0x1e8/0x260
[  592.805046][T15821]  ? proc_fault_inject_write+0x360/0x360
[  592.810686][T15821]  ? fsnotify_perm+0x271/0x5e0
[  592.815538][T15821]  ? proc_fault_inject_write+0x360/0x360
[  592.821194][T15821]  vfs_read+0x298/0x990
[  592.825366][T15821]  ? kernel_read+0x1e0/0x1e0
[  592.830050][T15821]  ? __fget_files+0x28/0x460
[  592.834639][T15821]  ? __fget_files+0x3fc/0x460
[  592.839325][T15821]  ? __fdget_pos+0x2a3/0x330
[  592.843920][T15821]  ? ksys_read+0x74/0x260
[  592.848259][T15821]  ksys_read+0x151/0x260
[  592.852534][T15821]  ? vfs_write+0x9a0/0x9a0
[  592.857063][T15821]  ? lockdep_hardirqs_on+0x98/0x150
[  592.862260][T15821]  do_syscall_64+0x55/0xb0
[  592.866682][T15821]  ? clear_bhb_loop+0x40/0x90
[  592.871379][T15821]  ? clear_bhb_loop+0x40/0x90
[  592.876060][T15821]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  592.881957][T15821] RIP: 0033:0x7f92b216034e
[  592.886373][T15821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  592.905982][T15821] RSP: 002b:00007f92b3075fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  592.914398][T15821] RAX: ffffffffffffffda RBX: 00007f92b30766c0 RCX: 00007f92b216034e
[  592.922390][T15821] RDX: 000000000000000f RSI: 00007f92b30760a0 RDI: 0000000000000006
[  592.930459][T15821] RBP: 00007f92b3076090 R08: 0000000000000000 R09: 0000000000000000
[  592.938564][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.946559][T15821] R13: 00007f92b2426038 R14: 00007f92b2425fa0 R15: 00007ffe0a815448
[  592.954572][T15821]  </TASK>
[  594.551922][T15858] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3343'.
[  596.746563][T15873] FAULT_INJECTION: forcing a failure.
[  596.746563][T15873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  596.788509][T15873] CPU: 1 PID: 15873 Comm: syz.0.3348 Not tainted syzkaller #0
[  596.796049][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  596.806135][T15873] Call Trace:
[  596.809438][T15873]  <TASK>
[  596.812389][T15873]  dump_stack_lvl+0x18c/0x250
[  596.817095][T15873]  ? show_regs_print_info+0x20/0x20
[  596.822317][T15873]  ? load_image+0x420/0x420
[  596.826840][T15873]  ? __might_fault+0xaa/0x120
[  596.831538][T15873]  ? __lock_acquire+0x7eb0/0x7eb0
[  596.836787][T15873]  should_fail_ex+0x394/0x4c0
[  596.841490][T15873]  _copy_to_user+0x2f/0xa0
[  596.845928][T15873]  bpf_test_finish+0x25a/0x650
[  596.850711][T15873]  ? convert_skb_to___skb+0x420/0x420
[  596.856347][T15873]  ? _copy_from_user+0xa5/0xe0
[  596.861110][T15873]  ? bpf_test_init+0x119/0x140
[  596.865877][T15873]  bpf_prog_test_run_xdp+0x8b4/0x1140
[  596.871252][T15873]  ? __lock_acquire+0x7eb0/0x7eb0
[  596.876283][T15873]  ? dev_put+0x80/0x80
[  596.880358][T15873]  ? dev_put+0x80/0x80
[  596.884427][T15873]  bpf_prog_test_run+0x31f/0x390
[  596.889365][T15873]  __sys_bpf+0x49d/0x890
[  596.893608][T15873]  ? bpf_link_show_fdinfo+0x560/0x560
[  596.899033][T15873]  ? lock_chain_count+0x20/0x20
[  596.903941][T15873]  __x64_sys_bpf+0x7c/0x90
[  596.908371][T15873]  do_syscall_64+0x55/0xb0
[  596.912794][T15873]  ? clear_bhb_loop+0x40/0x90
[  596.917581][T15873]  ? clear_bhb_loop+0x40/0x90
[  596.922261][T15873]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  596.928158][T15873] RIP: 0033:0x7febbd39fb19
[  596.932585][T15873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.952217][T15873] RSP: 002b:00007febbe258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  596.960636][T15873] RAX: ffffffffffffffda RBX: 00007febbd625fa0 RCX: 00007febbd39fb19
[  596.968624][T15873] RDX: 0000000000000050 RSI: 0000200000001a80 RDI: 000000000000000a
[  596.976603][T15873] RBP: 00007febbe258090 R08: 0000000000000000 R09: 0000000000000000
[  596.984568][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  596.992538][T15873] R13: 00007febbd626038 R14: 00007febbd625fa0 R15: 00007fff71799358
[  597.000601][T15873]  </TASK>
[  597.488971][T15892] FAULT_INJECTION: forcing a failure.
[  597.488971][T15892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.558356][T15892] CPU: 0 PID: 15892 Comm: syz.3.3355 Not tainted syzkaller #0
[  597.565917][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  597.576004][T15892] Call Trace:
[  597.579314][T15892]  <TASK>
[  597.582267][T15892]  dump_stack_lvl+0x18c/0x250
[  597.586991][T15892]  ? show_regs_print_info+0x20/0x20
[  597.592235][T15892]  ? load_image+0x420/0x420
[  597.596787][T15892]  ? __might_fault+0xaa/0x120
[  597.601503][T15892]  ? __lock_acquire+0x7eb0/0x7eb0
[  597.606756][T15892]  should_fail_ex+0x394/0x4c0
[  597.611482][T15892]  _copy_from_user+0x2f/0xe0
[  597.616114][T15892]  kstrtouint_from_user+0xde/0x170
[  597.621277][T15892]  ? kstrtol_from_user+0x190/0x190
[  597.626449][T15892]  proc_fail_nth_write+0x8f/0x250
[  597.631524][T15892]  ? proc_fail_nth_read+0x260/0x260
[  597.636780][T15892]  ? proc_fail_nth_read+0x260/0x260
[  597.642369][T15892]  vfs_write+0x299/0x9a0
[  597.646665][T15892]  ? file_end_write+0x250/0x250
[  597.651566][T15892]  ? __fget_files+0x28/0x460
[  597.656214][T15892]  ? __fget_files+0x3fc/0x460
[  597.660946][T15892]  ? __fdget_pos+0x2a3/0x330
[  597.665618][T15892]  ? ksys_write+0x74/0x260
[  597.670253][T15892]  ksys_write+0x151/0x260
[  597.674634][T15892]  ? __ia32_sys_read+0x90/0x90
[  597.679436][T15892]  ? lockdep_hardirqs_on+0x98/0x150
[  597.684671][T15892]  do_syscall_64+0x55/0xb0
[  597.689122][T15892]  ? clear_bhb_loop+0x40/0x90
[  597.693832][T15892]  ? clear_bhb_loop+0x40/0x90
[  597.698536][T15892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  597.704462][T15892] RIP: 0033:0x7efdeb96034e
[  597.708906][T15892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  597.728641][T15892] RSP: 002b:00007efdec8acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  597.737093][T15892] RAX: ffffffffffffffda RBX: 00007efdec8ad6c0 RCX: 00007efdeb96034e
[  597.745098][T15892] RDX: 0000000000000001 RSI: 00007efdec8ad0a0 RDI: 0000000000000004
[  597.753103][T15892] RBP: 00007efdec8ad090 R08: 0000000000000000 R09: 0000000000000000
[  597.761112][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.769126][T15892] R13: 00007efdebc26128 R14: 00007efdebc26090 R15: 00007ffd881c8de8
[  597.777163][T15892]  </TASK>
[  600.649946][T15923] netlink: 'syz.2.3367': attribute type 29 has an invalid length.
[  600.676466][T15923] netlink: 'syz.2.3367': attribute type 29 has an invalid length.
[  600.829043][T15931] netlink: 'syz.0.3370': attribute type 10 has an invalid length.
[  600.958008][T15923] netlink: 'syz.2.3367': attribute type 10 has an invalid length.
[  600.978555][T15923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3367'.
[  601.021505][T15923] batadv_slave_0: entered promiscuous mode
[  601.027434][T15923] batadv_slave_0: entered allmulticast mode
[  601.061364][T15923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  601.078648][T15923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  601.114183][T15923] bridge0: port 5(batadv_slave_0) entered blocking state
[  601.129752][T15923] bridge0: port 5(batadv_slave_0) entered disabled state
[  601.150516][T15923] bridge0: port 5(batadv_slave_0) entered blocking state
[  601.157885][T15923] bridge0: port 5(batadv_slave_0) entered forwarding state
[  601.429702][T15947] netlink: 'syz.2.3374': attribute type 10 has an invalid length.
[  601.437866][T15947] netlink: 'syz.2.3374': attribute type 16 has an invalid length.
[  601.448023][T15947] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3374'.
[  601.817580][T15961] netlink: 'syz.1.3380': attribute type 29 has an invalid length.
[  601.849782][T15961] netlink: 'syz.1.3380': attribute type 29 has an invalid length.
[  601.867023][T15965] netlink: 'syz.1.3380': attribute type 29 has an invalid length.
[  601.877863][T15973] C: renamed from team_slave_0 (while UP)
[  601.899933][T15973] netlink: 'syz.3.3383': attribute type 3 has an invalid length.
[  601.907696][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.924910][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.937512][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.951134][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.964693][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.978358][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.988853][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  601.999394][T15973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3383'.
[  602.369236][T15991] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.628474][T15999] FAULT_INJECTION: forcing a failure.
[  602.628474][T15999] name failslab, interval 1, probability 0, space 0, times 0
[  602.666968][T15999] CPU: 1 PID: 15999 Comm: syz.1.3394 Not tainted syzkaller #0
[  602.674503][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  602.684587][T15999] Call Trace:
[  602.687905][T15999]  <TASK>
[  602.690858][T15999]  dump_stack_lvl+0x18c/0x250
[  602.695586][T15999]  ? show_regs_print_info+0x20/0x20
[  602.700816][T15999]  ? load_image+0x420/0x420
[  602.705350][T15999]  ? __might_sleep+0xe0/0xe0
[  602.709969][T15999]  ? __lock_acquire+0x7eb0/0x7eb0
[  602.715019][T15999]  ? slab_free_freelist_hook+0x154/0x240
[  602.720698][T15999]  should_fail_ex+0x394/0x4c0
[  602.725507][T15999]  should_failslab+0x9/0x20
[  602.730045][T15999]  slab_pre_alloc_hook+0x59/0x300
[  602.735109][T15999]  ? genl_family_rcv_msg_doit+0x268/0x310
[  602.740960][T15999]  kmem_cache_alloc_node+0x5e/0x320
[  602.746190][T15999]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  602.751856][T15999]  ? __alloc_skb+0x103/0x2c0
[  602.756480][T15999]  __alloc_skb+0x103/0x2c0
[  602.761088][T15999]  netlink_ack+0x377/0x1160
[  602.765622][T15999]  ? genl_rcv_msg+0x27a/0x7a0
[  602.770325][T15999]  ? genl_bind+0x360/0x360
[  602.774778][T15999]  ? netlink_dump+0xec0/0xec0
[  602.779500][T15999]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  602.786135][T15999]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  602.792768][T15999]  netlink_rcv_skb+0x2b3/0x4c0
[  602.797570][T15999]  ? genl_bind+0x360/0x360
[  602.802019][T15999]  ? netlink_ack+0x1160/0x1160
[  602.806831][T15999]  ? __lock_acquire+0x7eb0/0x7eb0
[  602.811893][T15999]  ? net_generic+0x1e/0x240
[  602.816408][T15999]  ? down_read+0x1ac/0x2e0
[  602.820837][T15999]  genl_rcv+0x28/0x40
[  602.824832][T15999]  netlink_unicast+0x856/0x9e0
[  602.829637][T15999]  netlink_sendmsg+0x8d0/0xbf0
[  602.834435][T15999]  ? netlink_getsockopt+0x590/0x590
[  602.839649][T15999]  ? apparmor_socket_sendmsg+0x8e/0x330
[  602.845245][T15999]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  602.850551][T15999]  ? security_socket_sendmsg+0x80/0xa0
[  602.856069][T15999]  ? netlink_getsockopt+0x590/0x590
[  602.861290][T15999]  ____sys_sendmsg+0x61b/0x980
[  602.866097][T15999]  ? __asan_memset+0x22/0x40
[  602.870740][T15999]  ? __sys_sendmsg_sock+0x30/0x30
[  602.875799][T15999]  ? __import_iovec+0x5f2/0x850
[  602.880695][T15999]  ? import_iovec+0x73/0xa0
[  602.885238][T15999]  ___sys_sendmsg+0x2a6/0x360
[  602.889963][T15999]  ? __sys_sendmsg+0x2b0/0x2b0
[  602.894828][T15999]  __se_sys_sendmsg+0x1d0/0x2c0
[  602.899725][T15999]  ? perf_trace_preemptirq_template+0x269/0x330
[  602.906018][T15999]  ? __x64_sys_sendmsg+0x80/0x80
[  602.911016][T15999]  ? lockdep_hardirqs_on+0x98/0x150
[  602.916254][T15999]  do_syscall_64+0x55/0xb0
[  602.920708][T15999]  ? clear_bhb_loop+0x40/0x90
[  602.925430][T15999]  ? clear_bhb_loop+0x40/0x90
[  602.930156][T15999]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  602.936092][T15999] RIP: 0033:0x7f92b219fb19
[  602.940538][T15999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.960184][T15999] RSP: 002b:00007f92b3076028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  602.968640][T15999] RAX: ffffffffffffffda RBX: 00007f92b2425fa0 RCX: 00007f92b219fb19
[  602.976649][T15999] RDX: 0000000000040000 RSI: 0000200000000a80 RDI: 0000000000000005
[  602.984659][T15999] RBP: 00007f92b3076090 R08: 0000000000000000 R09: 0000000000000000
[  602.992671][T15999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.000670][T15999] R13: 00007f92b2426038 R14: 00007f92b2425fa0 R15: 00007ffe0a815448
[  603.008688][T15999]  </TASK>
[  603.205037][T16018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  603.212403][T16018] IPv6: NLM_F_CREATE should be set when creating new route
[  603.220012][T16018] IPv6: NLM_F_CREATE should be set when creating new route
[  603.227286][T16018] IPv6: NLM_F_CREATE should be set when creating new route
[  606.850584][T16106] syzkaller0: entered promiscuous mode
[  606.856139][T16106] syzkaller0: entered allmulticast mode
[  608.706271][T16139] validate_nla: 46 callbacks suppressed
[  608.706286][T16139] netlink: 'syz.0.3441': attribute type 10 has an invalid length.
[  608.735706][T16139] __nla_validate_parse: 39 callbacks suppressed
[  608.735723][T16139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3441'.
[  610.076947][T16131] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3437'.
[  610.095143][T16128] rxe_eth0 speed is unknown, defaulting to 1000
[  610.109631][T16139] netlink: 'syz.0.3441': attribute type 10 has an invalid length.
[  610.138622][T16139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3441'.
[  610.862071][T16166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3452'.
[  611.361214][T16180] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  611.367714][T16180] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  611.397715][T16179] netlink: 'syz.3.3457': attribute type 3 has an invalid length.
[  611.418940][T16179] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3457'.
[  611.589970][T16185] ref_ctr_offset mismatch. inode: 0x60d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  611.609320][T16187] FAULT_INJECTION: forcing a failure.
[  611.609320][T16187] name failslab, interval 1, probability 0, space 0, times 0
[  611.638643][T16187] CPU: 0 PID: 16187 Comm: syz.2.3460 Not tainted syzkaller #0
[  611.646269][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  611.656357][T16187] Call Trace:
[  611.659703][T16187]  <TASK>
[  611.662671][T16187]  dump_stack_lvl+0x18c/0x250
[  611.667389][T16187]  ? sctp_sendmsg+0x1519/0x27b0
[  611.672280][T16187]  ? ___sys_sendmsg+0x2a6/0x360
[  611.677254][T16187]  ? show_regs_print_info+0x20/0x20
[  611.682487][T16187]  ? load_image+0x420/0x420
[  611.687021][T16187]  should_fail_ex+0x394/0x4c0
[  611.691716][T16187]  should_failslab+0x9/0x20
[  611.696221][T16187]  slab_pre_alloc_hook+0x59/0x300
[  611.701334][T16187]  ? sctp_add_bind_addr+0x8c/0x360
[  611.706459][T16187]  __kmem_cache_alloc_node+0x53/0x260
[  611.711858][T16187]  ? sctp_add_bind_addr+0x8c/0x360
[  611.717012][T16187]  kmalloc_trace+0x2a/0xe0
[  611.721437][T16187]  sctp_add_bind_addr+0x8c/0x360
[  611.728149][T16187]  sctp_copy_local_addr_list+0x31b/0x4e0
[  611.733807][T16187]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  611.739534][T16187]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  611.745618][T16187]  ? sctp_v4_is_any+0x35/0x60
[  611.750598][T16187]  ? sctp_copy_one_addr+0x8c/0x350
[  611.755762][T16187]  sctp_bind_addr_copy+0xb3/0x3c0
[  611.760823][T16187]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  611.767165][T16187]  sctp_connect_new_asoc+0x2f9/0x6a0
[  611.772459][T16187]  ? __sctp_connect+0xd80/0xd80
[  611.777318][T16187]  ? __local_bh_enable_ip+0x13a/0x1c0
[  611.782704][T16187]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  611.788259][T16187]  ? security_sctp_bind_connect+0x89/0xb0
[  611.793991][T16187]  sctp_sendmsg+0x1519/0x27b0
[  611.798693][T16187]  ? sctp_getsockopt+0xb60/0xb60
[  611.803639][T16187]  ? aa_sk_perm+0x7bb/0x8e0
[  611.808150][T16187]  ? aa_af_perm+0x330/0x330
[  611.812713][T16187]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  611.819140][T16187]  ? sock_rps_record_flow+0x19/0x3f0
[  611.824433][T16187]  ? inet_sendmsg+0xce/0x2a0
[  611.829037][T16187]  ? inet_send_prepare+0x250/0x250
[  611.834168][T16187]  ____sys_sendmsg+0x61b/0x980
[  611.838948][T16187]  ? __asan_memset+0x22/0x40
[  611.843636][T16187]  ? __sys_sendmsg_sock+0x30/0x30
[  611.848675][T16187]  ? __import_iovec+0x5f2/0x850
[  611.853687][T16187]  ? import_iovec+0x73/0xa0
[  611.858208][T16187]  ___sys_sendmsg+0x2a6/0x360
[  611.862928][T16187]  ? __sys_sendmsg+0x2b0/0x2b0
[  611.867836][T16187]  ? trace_call_bpf+0xc3/0x6c0
[  611.872626][T16187]  __se_sys_sendmsg+0x1d0/0x2c0
[  611.877483][T16187]  ? perf_trace_preemptirq_template+0x269/0x330
[  611.883733][T16187]  ? __x64_sys_sendmsg+0x80/0x80
[  611.888771][T16187]  ? trace_sys_enter+0x1f/0x80
[  611.893545][T16187]  do_syscall_64+0x55/0xb0
[  611.897983][T16187]  ? clear_bhb_loop+0x40/0x90
[  611.902693][T16187]  ? clear_bhb_loop+0x40/0x90
[  611.907388][T16187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  611.913288][T16187] RIP: 0033:0x7f35ef59fb19
[  611.917765][T16187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.937380][T16187] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  611.945804][T16187] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  611.953779][T16187] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003
[  611.961751][T16187] RBP: 00007f35ed7f6090 R08: 0000000000000000 R09: 0000000000000000
[  611.969727][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  611.977698][T16187] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  611.985694][T16187]  </TASK>
[  613.387411][T16238] tun0: tun_chr_ioctl cmd 1074025677
[  613.399160][T16238] tun0: linktype set to 0
[  613.496276][T16238] tun0: tun_chr_ioctl cmd 1074812117
[  613.523535][T16243] netlink: 'syz.3.3482': attribute type 10 has an invalid length.
[  613.568353][T16243] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3482'.
[  613.609346][T16245] netlink: 'syz.1.3481': attribute type 10 has an invalid length.
[  613.677869][T16245] team0: Port device syz_tun added
[  614.004452][T16260] netlink: 'syz.0.3486': attribute type 21 has an invalid length.
[  614.047859][T16260] netlink: 'syz.0.3486': attribute type 1 has an invalid length.
[  614.106154][T16260] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.3486'.
[  615.697069][T16307] netlink: 'syz.0.3504': attribute type 10 has an invalid length.
[  615.770118][T16309] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3502'.
[  615.906840][T16307] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.3504'.
[  615.925399][T16317] netlink: 'syz.1.3502': attribute type 10 has an invalid length.
[  615.947838][T16317] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.964198][T16317] bridge_slave_1: left allmulticast mode
[  615.970098][T16317] bridge_slave_1: left promiscuous mode
[  615.976142][T16317] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.999859][T16317] bridge_slave_1: entered promiscuous mode
[  616.005976][T16317] bridge_slave_1: entered allmulticast mode
[  616.020405][T16317] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  616.439044][T16333] : renamed from bond0 (while UP)
[  616.500654][T16333] bridge0: port 3() entered disabled state
[  617.166682][T16356] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.3516'.
[  619.670558][T16351] netlink: 'syz.3.3516': attribute type 10 has an invalid length.
[  619.716172][T16351] team0: Device vxcan1 is of different type
[  619.770426][T16362] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3517'.
[  619.784239][T16367] netlink: 'syz.1.3518': attribute type 11 has an invalid length.
[  619.793882][T16367] netlink: 212896 bytes leftover after parsing attributes in process `syz.1.3518'.
[  619.803744][T16363] netlink: 'syz.0.3517': attribute type 10 has an invalid length.
[  623.283168][T16391] rxe_eth0 speed is unknown, defaulting to 1000
[  623.593817][T16400] mac80211_hwsim hwsim28 ..ãc¤±: renamed from wlan1 (while UP)
[  624.341852][T16401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3529'.
[  624.359567][T16388] rxe_eth0 speed is unknown, defaulting to 1000
[  624.591311][T16407] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3530'.
[  624.641665][T16404] rxe_eth0 speed is unknown, defaulting to 1000
[  624.733064][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.739564][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  630.732777][T16474] netlink: 'syz.0.3547': attribute type 21 has an invalid length.
[  631.209712][T16477] netlink: 'syz.1.3549': attribute type 10 has an invalid length.
[  631.227544][T16477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3549'.
[  631.231090][T16478] syzkaller0: entered promiscuous mode
[  631.242189][T16478] syzkaller0: entered allmulticast mode
[  631.274829][T16477] netlink: 'syz.1.3549': attribute type 10 has an invalid length.
[  631.293280][T16477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3549'.
[  634.839494][T16486] rxe_eth0 speed is unknown, defaulting to 1000
[  635.689946][T16536] rxe_eth0 speed is unknown, defaulting to 1000
[  635.764273][T16544] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3566'.
[  636.073223][T16548] syzkaller0: entered promiscuous mode
[  636.101666][T16548] syzkaller0: entered allmulticast mode
[  637.027436][T16576] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3576'.
[  639.426301][T16591] tap0: tun_chr_ioctl cmd 1074025675
[  639.435403][T16591] tap0: persist enabled
[  639.452786][T16591] tap0: tun_chr_ioctl cmd 1074025675
[  639.462662][T16591] tap0: persist enabled
[  639.846993][T16610] syzkaller0: entered promiscuous mode
[  639.886599][T16610] syzkaller0: entered allmulticast mode
[  640.978642][T16639] netlink: 'syz.0.3598': attribute type 10 has an invalid length.
[  641.003830][T16639] bridge0: port 4(») entered disabled state
[  641.026202][T16639] »: left allmulticast mode
[  641.031009][T16639] bond_slave_0: left allmulticast mode
[  641.036784][T16639] bond_slave_1: left allmulticast mode
[  641.046140][T16639] bridge_slave_1: left allmulticast mode
[  641.052294][T16639] »: left promiscuous mode
[  641.056739][T16639] bond_slave_0: left promiscuous mode
[  641.062819][T16639] bond_slave_1: left promiscuous mode
[  641.068719][T16639] bridge_slave_1: left promiscuous mode
[  641.074953][T16639] bridge0: port 4(») entered disabled state
[  642.959524][T16652] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3602'.
[  643.097099][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'.
[  643.383780][T16668] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3608'.
[  643.400223][T16668] openvswitch: netlink: IP tunnel dst address not specified
[  643.423065][T16672] netlink: 'syz.1.3609': attribute type 10 has an invalid length.
[  643.432770][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3609'.
[  643.443527][T16672] netlink: 'syz.1.3609': attribute type 10 has an invalid length.
[  643.454192][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3609'.
[  643.753301][T16686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3614'.
[  643.873330][T16682] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  643.933692][T16682] syzkaller0: entered promiscuous mode
[  643.940717][T16682] syzkaller0: entered allmulticast mode
[  644.419739][T16700] FAULT_INJECTION: forcing a failure.
[  644.419739][T16700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.435093][T16700] CPU: 0 PID: 16700 Comm: syz.3.3617 Not tainted syzkaller #0
[  644.442607][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  644.452709][T16700] Call Trace:
[  644.456007][T16700]  <TASK>
[  644.458946][T16700]  dump_stack_lvl+0x18c/0x250
[  644.463649][T16700]  ? show_regs_print_info+0x20/0x20
[  644.468951][T16700]  ? load_image+0x420/0x420
[  644.473472][T16700]  ? __lock_acquire+0x7eb0/0x7eb0
[  644.478508][T16700]  ? snprintf+0xe9/0x140
[  644.482768][T16700]  should_fail_ex+0x394/0x4c0
[  644.487477][T16700]  _copy_to_user+0x2f/0xa0
[  644.491904][T16700]  simple_read_from_buffer+0xe7/0x150
[  644.497286][T16700]  proc_fail_nth_read+0x1e8/0x260
[  644.502315][T16700]  ? proc_fault_inject_write+0x360/0x360
[  644.507953][T16700]  ? fsnotify_perm+0x271/0x5e0
[  644.512717][T16700]  ? proc_fault_inject_write+0x360/0x360
[  644.518359][T16700]  vfs_read+0x298/0x990
[  644.522560][T16700]  ? kernel_read+0x1e0/0x1e0
[  644.527155][T16700]  ? __fget_files+0x28/0x460
[  644.531747][T16700]  ? __fget_files+0x3fc/0x460
[  644.536430][T16700]  ? __fdget_pos+0x2a3/0x330
[  644.541043][T16700]  ? ksys_read+0x74/0x260
[  644.545429][T16700]  ksys_read+0x151/0x260
[  644.549677][T16700]  ? vfs_write+0x9a0/0x9a0
[  644.554096][T16700]  ? lockdep_hardirqs_on+0x98/0x150
[  644.559295][T16700]  do_syscall_64+0x55/0xb0
[  644.563737][T16700]  ? clear_bhb_loop+0x40/0x90
[  644.568443][T16700]  ? clear_bhb_loop+0x40/0x90
[  644.573132][T16700]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.579026][T16700] RIP: 0033:0x7efdeb96034e
[  644.583440][T16700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  644.603222][T16700] RSP: 002b:00007efdec8acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  644.611639][T16700] RAX: ffffffffffffffda RBX: 00007efdec8ad6c0 RCX: 00007efdeb96034e
[  644.619608][T16700] RDX: 000000000000000f RSI: 00007efdec8ad0a0 RDI: 0000000000000006
[  644.627579][T16700] RBP: 00007efdec8ad090 R08: 0000000000000000 R09: 0000000000000000
[  644.635640][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.643626][T16700] R13: 00007efdebc26128 R14: 00007efdebc26090 R15: 00007ffd881c8de8
[  644.651697][T16700]  </TASK>
[  646.546555][T16715] ref_ctr_offset mismatch. inode: 0x6f9 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  646.872833][T16730] netlink: 'syz.1.3629': attribute type 10 has an invalid length.
[  646.908879][T16730] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3629'.
[  646.960061][T16730] bridge0: port 3() entered blocking state
[  646.967227][T16730] bridge0: port 3() entered forwarding state
[  647.000586][T16730] 8021q: adding VLAN 0 to HW filter on device 
[  647.170605][T16739] tap0: tun_chr_ioctl cmd 1074025675
[  647.176530][T16739] tap0: persist enabled
[  647.202683][T16739] tap0: tun_chr_ioctl cmd 1074025675
[  647.208050][T16739] tap0: persist enabled
[  647.620413][T16752] netlink: 'syz.2.3636': attribute type 63 has an invalid length.
[  647.628306][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3636'.
[  647.745972][T16752] netlink: 'syz.2.3636': attribute type 63 has an invalid length.
[  647.891195][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3636'.
[  648.012619][T16764] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3641'.
[  648.013538][T16762] netlink: 'syz.0.3640': attribute type 10 has an invalid length.
[  648.049777][T16762] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3640'.
[  648.109396][T16762] »: entered promiscuous mode
[  648.114738][T16762] bond_slave_0: entered promiscuous mode
[  648.148317][T16762] bond_slave_1: entered promiscuous mode
[  648.170263][T16762] bridge_slave_1: entered promiscuous mode
[  648.247551][T16762] 8021q: adding VLAN 0 to HW filter on device »
[  648.265285][T16762] bridge0: port 2(») entered blocking state
[  648.275226][T16762] bridge0: port 2(») entered disabled state
[  648.284385][T16762] »: entered allmulticast mode
[  648.291619][T16762] bond_slave_0: entered allmulticast mode
[  648.297932][T16762] bond_slave_1: entered allmulticast mode
[  648.307367][T16762] bridge_slave_1: entered allmulticast mode
[  648.340639][T16762] bridge0: port 2(») entered blocking state
[  648.347872][T16762] bridge0: port 2(») entered forwarding state
[  648.359997][T16767] netlink: 'syz.3.3642': attribute type 10 has an invalid length.
[  648.385161][T16767] team0: Port device hsr_slave_0 added
[  648.569582][T16762] syz.0.3640 (16762) used greatest stack depth: 17800 bytes left
[  648.573964][T16782] syz.1.3649[16782] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  648.583947][T16782] syz.1.3649[16782] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  649.062662][T16793] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3653'.
[  649.623736][T16814] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3662'.
[  650.519919][T16841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  650.527257][T16841] IPv6: NLM_F_CREATE should be set when creating new route
[  650.534660][T16841] IPv6: NLM_F_CREATE should be set when creating new route
[  650.541961][T16841] IPv6: NLM_F_CREATE should be set when creating new route
[  650.553719][T16841] netlink: 'syz.2.3671': attribute type 9 has an invalid length.
[  650.562121][T16841] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3671'.
[  650.620475][T16843] netlink: 'syz.2.3671': attribute type 9 has an invalid length.
[  650.630119][T16843] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3671'.
[  650.833285][T16831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  652.359114][T16866] : renamed from bond0 (while UP)
[  655.046237][T16866] bridge0: port 3() entered disabled state
[  655.364042][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3681'.
[  655.514567][T16869] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3681'.
[  659.468087][T16915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3698'.
[  659.566937][T16915] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3698'.
[  659.830814][T16933] netlink: 'syz.0.3707': attribute type 9 has an invalid length.
[  659.846379][T16933] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3707'.
[  660.212380][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'.
[  660.860359][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'.
[  660.887585][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'.
[  660.907961][T16961] C: renamed from team_slave_0 (while UP)
[  661.022582][T16962] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3717'.
[  663.394334][T16961] netlink: 'syz.2.3719': attribute type 2 has an invalid length.
[  663.402513][T16961] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3719'.
[  663.415444][T16961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  663.431451][T16957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3717'.
[  663.535752][T16963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'.
[  663.565931][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'.
[  663.785889][T16975] netlink: 'syz.0.3723': attribute type 2 has an invalid length.
[  663.829168][T16975] netlink: 'syz.0.3723': attribute type 8 has an invalid length.
[  663.868607][T16975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3723'.
[  663.924642][T16985] netlink: 'syz.0.3723': attribute type 2 has an invalid length.
[  663.953299][T16985] netlink: 'syz.0.3723': attribute type 8 has an invalid length.
[  663.967781][T16985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3723'.
[  663.985791][T16984] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3726'.
[  666.773056][T17056] netlink: 'syz.1.3757': attribute type 29 has an invalid length.
[  666.793953][T17056] netlink: 'syz.1.3757': attribute type 29 has an invalid length.
[  666.850458][T17061] netlink: 'syz.1.3757': attribute type 29 has an invalid length.
[  666.890977][T17056] netlink: 'syz.1.3757': attribute type 29 has an invalid length.
[  666.955948][T17056] netlink: 'syz.1.3757': attribute type 29 has an invalid length.
[  667.133889][T17073] __nla_validate_parse: 1 callbacks suppressed
[  667.133920][T17073] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3763'.
[  667.178545][T17073] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  667.195661][T17073] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  667.350782][T17083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3768'.
[  667.541431][T17083] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3768'.
[  667.567440][T17096] netlink: 'syz.0.3772': attribute type 39 has an invalid length.
[  667.579521][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3768'.
[  667.949046][T17109] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3777'.
[  668.030976][T17108] delete_channel: no stack
[  668.054875][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'.
[  668.346491][T17124] netlink: 'syz.3.3783': attribute type 10 has an invalid length.
[  668.378658][T17124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3783'.
[  668.387739][T17124] netlink: 'syz.3.3783': attribute type 10 has an invalid length.
[  668.438443][T17124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3783'.
[  668.567600][T17134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3788'.
[  668.677747][T17136] netlink: 'syz.2.3789': attribute type 10 has an invalid length.
[  668.693255][T17136] : left allmulticast mode
[  668.707293][T17136] bond_slave_0: left allmulticast mode
[  668.713493][T17136] bond_slave_1: left allmulticast mode
[  668.725319][T17136] : left promiscuous mode
[  668.736753][T17136] bond_slave_0: left promiscuous mode
[  668.759774][T17136] bond_slave_1: left promiscuous mode
[  668.768003][T17136] bridge0: port 3() entered disabled state
[  668.855440][T17136] 8021q: adding VLAN 0 to HW filter on device 
[  668.879697][T17136] team0: Port device  added
[  669.005207][T17150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3793'.
[  669.363796][T17157] netlink: 'syz.2.3796': attribute type 10 has an invalid length.
[  669.384652][T17157] : entered promiscuous mode
[  669.394636][T17157] bond_slave_0: entered promiscuous mode
[  669.428569][T17157] bond_slave_1: entered promiscuous mode
[  669.596305][T17157] team0: Port device  removed
[  669.617791][T17157] bridge0: port 3() entered blocking state
[  669.628374][T17157] bridge0: port 3() entered disabled state
[  669.670232][T17157] : entered allmulticast mode
[  669.677667][T17157] bond_slave_0: entered allmulticast mode
[  669.713768][T17157] bond_slave_1: entered allmulticast mode
[  670.090947][T17178] FAULT_INJECTION: forcing a failure.
[  670.090947][T17178] name failslab, interval 1, probability 0, space 0, times 0
[  670.104955][T17178] CPU: 1 PID: 17178 Comm: syz.0.3802 Not tainted syzkaller #0
[  670.112463][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  670.122545][T17178] Call Trace:
[  670.125838][T17178]  <TASK>
[  670.128776][T17178]  dump_stack_lvl+0x18c/0x250
[  670.133484][T17178]  ? sctp_sendmsg+0x1519/0x27b0
[  670.138345][T17178]  ? ___sys_sendmsg+0x2a6/0x360
[  670.143202][T17178]  ? show_regs_print_info+0x20/0x20
[  670.148404][T17178]  ? load_image+0x420/0x420
[  670.152943][T17178]  should_fail_ex+0x394/0x4c0
[  670.157628][T17178]  should_failslab+0x9/0x20
[  670.162148][T17178]  slab_pre_alloc_hook+0x59/0x300
[  670.167190][T17178]  ? sctp_add_bind_addr+0x8c/0x360
[  670.172308][T17178]  __kmem_cache_alloc_node+0x53/0x260
[  670.177682][T17178]  ? sctp_add_bind_addr+0x8c/0x360
[  670.182799][T17178]  kmalloc_trace+0x2a/0xe0
[  670.187224][T17178]  sctp_add_bind_addr+0x8c/0x360
[  670.192172][T17178]  sctp_copy_local_addr_list+0x31b/0x4e0
[  670.197810][T17178]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  670.203534][T17178]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  670.209713][T17178]  ? sctp_v4_is_any+0x35/0x60
[  670.214426][T17178]  ? sctp_copy_one_addr+0x8c/0x350
[  670.219548][T17178]  sctp_bind_addr_copy+0xb3/0x3c0
[  670.224581][T17178]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  670.230923][T17178]  sctp_connect_new_asoc+0x2f9/0x6a0
[  670.236230][T17178]  ? __sctp_connect+0xd80/0xd80
[  670.241083][T17178]  ? __local_bh_enable_ip+0x13a/0x1c0
[  670.246466][T17178]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  670.252015][T17178]  ? security_sctp_bind_connect+0x89/0xb0
[  670.257743][T17178]  sctp_sendmsg+0x1519/0x27b0
[  670.262449][T17178]  ? sctp_getsockopt+0xb60/0xb60
[  670.267415][T17178]  ? aa_sk_perm+0x7bb/0x8e0
[  670.271939][T17178]  ? aa_af_perm+0x330/0x330
[  670.276450][T17178]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  670.282896][T17178]  ? sock_rps_record_flow+0x19/0x3f0
[  670.288190][T17178]  ? inet_sendmsg+0xce/0x2a0
[  670.292783][T17178]  ? inet_send_prepare+0x250/0x250
[  670.297902][T17178]  ____sys_sendmsg+0x61b/0x980
[  670.302680][T17178]  ? __asan_memset+0x22/0x40
[  670.307274][T17178]  ? __sys_sendmsg_sock+0x30/0x30
[  670.312298][T17178]  ? __import_iovec+0x5f2/0x850
[  670.317158][T17178]  ? import_iovec+0x73/0xa0
[  670.321669][T17178]  ___sys_sendmsg+0x2a6/0x360
[  670.326346][T17178]  ? get_pid_task+0x20/0x1e0
[  670.330940][T17178]  ? __sys_sendmsg+0x2b0/0x2b0
[  670.335830][T17178]  ? __lock_acquire+0x7eb0/0x7eb0
[  670.340875][T17178]  __se_sys_sendmsg+0x1d0/0x2c0
[  670.345738][T17178]  ? __x64_sys_sendmsg+0x80/0x80
[  670.350684][T17178]  ? lockdep_hardirqs_on+0x98/0x150
[  670.355883][T17178]  do_syscall_64+0x55/0xb0
[  670.360301][T17178]  ? clear_bhb_loop+0x40/0x90
[  670.364976][T17178]  ? clear_bhb_loop+0x40/0x90
[  670.369657][T17178]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.375552][T17178] RIP: 0033:0x7febbd39fb19
[  670.379973][T17178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.399586][T17178] RSP: 002b:00007febbe258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  670.408026][T17178] RAX: ffffffffffffffda RBX: 00007febbd625fa0 RCX: 00007febbd39fb19
[  670.416030][T17178] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003
[  670.424014][T17178] RBP: 00007febbe258090 R08: 0000000000000000 R09: 0000000000000000
[  670.431990][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  670.439959][T17178] R13: 00007febbd626038 R14: 00007febbd625fa0 R15: 00007fff71799358
[  670.448047][T17178]  </TASK>
[  670.525048][T17183] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  670.531593][T17183] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  671.190807][T17195] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  671.275404][T17195] syzkaller0: entered promiscuous mode
[  671.305961][T17195] syzkaller0: entered allmulticast mode
[  673.305618][T17214] validate_nla: 4 callbacks suppressed
[  673.305635][T17214] netlink: 'syz.3.3812': attribute type 29 has an invalid length.
[  673.328511][T17228] netlink: 'syz.1.3816': attribute type 10 has an invalid length.
[  673.336419][T17228] __nla_validate_parse: 2 callbacks suppressed
[  673.336431][T17228] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3816'.
[  673.462530][T17235] FAULT_INJECTION: forcing a failure.
[  673.462530][T17235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  673.486896][T17235] CPU: 1 PID: 17235 Comm: syz.2.3819 Not tainted syzkaller #0
[  673.494573][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  673.504779][T17235] Call Trace:
[  673.508175][T17235]  <TASK>
[  673.511214][T17235]  dump_stack_lvl+0x18c/0x250
[  673.515995][T17235]  ? show_regs_print_info+0x20/0x20
[  673.521297][T17235]  ? load_image+0x420/0x420
[  673.525945][T17235]  ? __lock_acquire+0x7eb0/0x7eb0
[  673.531105][T17235]  should_fail_ex+0x394/0x4c0
[  673.535902][T17235]  _copy_from_user+0x2f/0xe0
[  673.540579][T17235]  __copy_msghdr+0x388/0x560
[  673.545350][T17235]  ___sys_sendmsg+0x214/0x360
[  673.550148][T17235]  ? get_pid_task+0x20/0x1e0
[  673.554865][T17235]  ? __sys_sendmsg+0x2b0/0x2b0
[  673.559836][T17235]  ? __lock_acquire+0x7eb0/0x7eb0
[  673.565127][T17235]  __se_sys_sendmsg+0x1d0/0x2c0
[  673.570123][T17235]  ? __x64_sys_sendmsg+0x80/0x80
[  673.575234][T17235]  ? lockdep_hardirqs_on+0x98/0x150
[  673.580566][T17235]  do_syscall_64+0x55/0xb0
[  673.585051][T17235]  ? clear_bhb_loop+0x40/0x90
[  673.589821][T17235]  ? clear_bhb_loop+0x40/0x90
[  673.594608][T17235]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  673.600619][T17235] RIP: 0033:0x7f35ef59fb19
[  673.605106][T17235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.624881][T17235] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  673.633585][T17235] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  673.641647][T17235] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003
[  673.649696][T17235] RBP: 00007f35ed7f6090 R08: 0000000000000000 R09: 0000000000000000
[  673.657816][T17235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  673.665867][T17235] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  673.674180][T17235]  </TASK>
[  675.953837][T17254] netlink: 'syz.1.3826': attribute type 10 has an invalid length.
[  675.967937][T17254] bridge0: port 3() entered disabled state
[  675.978502][T17254] : left allmulticast mode
[  675.983077][T17254] bond_slave_0: left allmulticast mode
[  675.988781][T17254] bond_slave_1: left allmulticast mode
[  675.994294][T17254] bridge_slave_1: left allmulticast mode
[  676.002078][T17254] : left promiscuous mode
[  676.006537][T17254] bond_slave_0: left promiscuous mode
[  676.013047][T17254] bond_slave_1: left promiscuous mode
[  676.018926][T17254] bridge_slave_1: left promiscuous mode
[  676.025645][T17254] bridge0: port 3() entered disabled state
[  676.054528][T17254] 8021q: adding VLAN 0 to HW filter on device 
[  676.067095][T17254] team0: Port device  added
[  676.125093][T17258] netlink: 'syz.0.3827': attribute type 29 has an invalid length.
[  676.154613][T17258] netlink: 'syz.0.3827': attribute type 29 has an invalid length.
[  676.176462][T17263] netlink: 'syz.3.3828': attribute type 10 has an invalid length.
[  676.196163][T17263] geneve0: entered promiscuous mode
[  676.229185][T17263] geneve0: entered allmulticast mode
[  676.234966][T17263] : (slave geneve0): Enslaving as an active interface with an up link
[  676.244023][T17258] netlink: 'syz.0.3827': attribute type 29 has an invalid length.
[  676.269319][T17264] netlink: 'syz.0.3827': attribute type 29 has an invalid length.
[  676.333982][T17258] netlink: 'syz.0.3827': attribute type 29 has an invalid length.
[  676.805098][T17288] netlink: 'syz.3.3839': attribute type 10 has an invalid length.
[  676.823436][T17288] : left allmulticast mode
[  676.828182][T17288] bond_slave_0: left allmulticast mode
[  676.856519][T17288] bond_slave_1: left allmulticast mode
[  676.873735][T17288] geneve0: left allmulticast mode
[  676.898812][T17288] : left promiscuous mode
[  676.903752][T17288] bond_slave_0: left promiscuous mode
[  676.914672][T17288] bond_slave_1: left promiscuous mode
[  676.940432][T17288] bridge0: port 3() entered disabled state
[  677.040119][T17288] 8021q: adding VLAN 0 to HW filter on device 
[  677.065753][T17288] team0: Port device  added
[  677.400888][T17308] team0: Device nlmon0 is up. Set it down before adding it as a team port
[  677.540748][T17313] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  677.548312][T17313] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[  677.709959][T17321] Dead loop on virtual device ip6_vti0, fix it urgently!
[  677.927158][T17329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3856'.
[  678.606902][T17351] validate_nla: 2 callbacks suppressed
[  678.606934][T17351] netlink: 'syz.1.3864': attribute type 13 has an invalid length.
[  679.056286][T17367] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  679.087980][T17367] syzkaller0: entered promiscuous mode
[  679.106085][T17367] syzkaller0: entered allmulticast mode
[  679.341311][T17387] netlink: 'syz.3.3875': attribute type 12 has an invalid length.
[  679.350338][T17387] netlink: 'syz.3.3875': attribute type 15 has an invalid length.
[  680.526596][T17407] netlink: 'syz.3.3881': attribute type 3 has an invalid length.
[  680.558604][T17407] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3881'.
[  684.934542][T17428] netlink: 'syz.0.3887': attribute type 4 has an invalid length.
[  684.942450][T17428] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3887'.
[  684.963014][T17428] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  685.112785][T17449] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3895'.
[  685.122501][T17449] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  685.149410][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'.
[  685.429401][T17463] netlink: 'syz.1.3901': attribute type 10 has an invalid length.
[  685.437536][T17463] netlink: 'syz.1.3901': attribute type 16 has an invalid length.
[  685.455917][T17463] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3901'.
[  686.229162][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  686.235755][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  686.826546][T17490] netlink: 'syz.3.3912': attribute type 2 has an invalid length.
[  686.854422][T17490] netlink: 'syz.3.3912': attribute type 8 has an invalid length.
[  686.877392][T17488] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3911'.
[  686.890925][T17490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3912'.
[  686.918672][T17496] netlink: 'syz.3.3912': attribute type 2 has an invalid length.
[  686.926442][T17496] netlink: 'syz.3.3912': attribute type 8 has an invalid length.
[  686.996399][T17496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3912'.
[  687.013194][T17494] netlink: 'syz.0.3913': attribute type 10 has an invalid length.
[  687.022098][T17494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3913'.
[  687.038902][T17494] netlink: 'syz.0.3913': attribute type 10 has an invalid length.
[  687.046900][T17494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3913'.
[  687.124010][T17502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3915'.
[  687.147284][T17502] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.529772][T17523] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3922'.
[  688.757841][    C0] 
[  688.757850][    C0] ================================
[  688.757854][    C0] WARNING: inconsistent lock state
[  688.757865][    C0] syzkaller #0 Not tainted
[  688.757874][    C0] --------------------------------
[  688.757878][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  688.757885][    C0] syz.2.3938/17565 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  688.757902][    C0] ffffffff8e297dd8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0
[  688.757954][    C0] {INITIAL USE} state was registered at:
[  688.757961][    C0]   lock_acquire+0x19e/0x420
[  688.757979][    C0]   _raw_write_lock_irq+0xaf/0xf0
[  688.757995][    C0]   kernfs_rename_ns+0x5e4/0x830
[  688.758008][    C0]   sysfs_rename_link_ns+0x175/0x1b0
[  688.758024][    C0]   device_rename+0x110/0x1e0
[  688.758039][    C0]   dev_change_name+0x308/0x8e0
[  688.758054][    C0]   do_setlink+0x9b6/0x3f00
[  688.758070][    C0]   rtnl_newlink+0x1848/0x2170
[  688.758084][    C0]   rtnetlink_rcv_msg+0x843/0xf90
[  688.758101][    C0]   netlink_rcv_skb+0x235/0x4c0
[  688.758114][    C0]   netlink_unicast+0x856/0x9e0
[  688.758135][    C0]   netlink_sendmsg+0x8d0/0xbf0
[  688.758157][    C0]   __sys_sendto+0x4a9/0x6b0
[  688.758171][    C0]   __x64_sys_sendto+0xde/0xf0
[  688.758184][    C0]   do_syscall_64+0x55/0xb0
[  688.758202][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  688.758229][    C0] irq event stamp: 2650
[  688.758235][    C0] hardirqs last  enabled at (2649): [<ffffffff81d5833a>] seqcount_lockdep_reader_access+0x10a/0x190
[  688.758260][    C0] hardirqs last disabled at (2650): [<ffffffff8a97b0b3>] exc_debug+0x73/0x140
[  688.758284][    C0] softirqs last  enabled at (2604): [<ffffffff88c332d0>] netlink_insert+0x10d0/0x13e0
[  688.758311][    C0] softirqs last disabled at (2602): [<ffffffff888042df>] release_sock+0x2f/0x1c0
[  688.758332][    C0] 
[  688.758332][    C0] other info that might help us debug this:
[  688.758336][    C0]  Possible unsafe locking scenario:
[  688.758336][    C0] 
[  688.758340][    C0]        CPU0
[  688.758343][    C0]        ----
[  688.758346][    C0]   lock(kernfs_rename_lock);
[  688.758359][    C0]   <Interrupt>
[  688.758361][    C0]     lock(kernfs_rename_lock);
[  688.758369][    C0] 
[  688.758369][    C0]  *** DEADLOCK ***
[  688.758369][    C0] 
[  688.758371][    C0] no locks held by syz.2.3938/17565.
[  688.758378][    C0] 
[  688.758378][    C0] stack backtrace:
[  688.758382][    C0] CPU: 0 PID: 17565 Comm: syz.2.3938 Not tainted syzkaller #0
[  688.758398][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  688.758407][    C0] Call Trace:
[  688.758413][    C0]  <#DB>
[  688.758419][    C0]  dump_stack_lvl+0x18c/0x250
[  688.758440][    C0]  ? show_regs_print_info+0x20/0x20
[  688.758462][    C0]  ? print_usage_bug+0x43d/0x6a0
[  688.758482][    C0]  ? verify_lock_unused+0x15/0x140
[  688.758499][    C0]  lock_acquire+0x2c2/0x420
[  688.758520][    C0]  ? kernfs_path_from_node+0x88/0xbd0
[  688.758544][    C0]  ? read_lock_is_recursive+0x20/0x20
[  688.758562][    C0]  ? search_extable+0x90/0xd0
[  688.758583][    C0]  ? trim_init_extable+0x6f0/0x6f0
[  688.758604][    C0]  ? __get_user_nocheck_8+0xa/0x20
[  688.758628][    C0]  ? look_up_lock_class+0x75/0x140
[  688.758643][    C0]  _raw_read_lock_irqsave+0xbc/0x100
[  688.758663][    C0]  ? kernfs_path_from_node+0x88/0xbd0
[  688.758686][    C0]  ? _raw_read_lock+0x50/0x50
[  688.758703][    C0]  ? rcu_is_watching+0x15/0xb0
[  688.758725][    C0]  ? lock_release+0xb5/0x8c0
[  688.758744][    C0]  ? percpu_ref_tryget+0x15/0x180
[  688.758765][    C0]  kernfs_path_from_node+0x88/0xbd0
[  688.758789][    C0]  ? __lock_acquire+0x7eb0/0x7eb0
[  688.758806][    C0]  ? verify_lock_unused+0x15/0x140
[  688.758826][    C0]  ? look_up_lock_class+0x75/0x140
[  688.758842][    C0]  ? kernfs_name+0x140/0x140
[  688.758865][    C0]  ? get_mem_cgroup_from_mm+0x38/0x290
[  688.758884][    C0]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[  688.758901][    C0]  get_mm_memcg_path+0xb9/0x360
[  688.758926][    C0]  __mmap_lock_do_trace_start_locking+0xe6/0x2f0
[  688.758951][    C0]  ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230
[  688.758986][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  688.759008][    C0]  ? _raw_spin_unlock+0x28/0x40
[  688.759026][    C0]  stack_map_get_build_id_offset+0x661/0x810
[  688.759051][    C0]  ? pcpu_freelist_pop+0x12a/0x190
[  688.759074][    C0]  ? __pcpu_freelist_pop+0x810/0x810
[  688.759097][    C0]  ? __bpf_get_stackid+0x980/0x980
[  688.759120][    C0]  ? get_perf_callchain+0x3f8/0x510
[  688.759150][    C0]  __bpf_get_stackid+0x5ac/0x980
[  688.759177][    C0]  bpf_get_stackid+0x131/0x1f0
[  688.759201][    C0]  bpf_prog_12712c88fd19bd5b+0x29/0x2d
[  688.759218][    C0]  bpf_overflow_handler+0x1fc/0x510
[  688.759245][    C0]  ? bpf_overflow_handler+0xde/0x510
[  688.759267][    C0]  ? tp_perf_event_destroy+0x20/0x20
[  688.759293][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  688.759314][    C0]  __perf_event_overflow+0x461/0x660
[  688.759337][    C0]  perf_swevent_event+0x319/0x570
[  688.759358][    C0]  ? perf_tp_event+0x1550/0x1550
[  688.759383][    C0]  perf_bp_event+0x319/0x430
[  688.759405][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  688.759438][    C0]  ? lock_acquire+0x2c2/0x420
[  688.759458][    C0]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  688.759481][    C0]  notifier_call_chain+0x18f/0x380
[  688.759502][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  688.759522][    C0]  atomic_notifier_call_chain+0xda/0x180
[  688.759544][    C0]  notify_die+0x145/0x1a0
[  688.759565][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  688.759589][    C0]  ? rcu_is_watching+0x15/0xb0
[  688.759611][    C0]  notify_debug+0x2e/0x50
[  688.759628][    C0]  exc_debug+0xde/0x140
[  688.759650][    C0]  asm_exc_debug+0x1e/0x40
[  688.759670][    C0] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  688.759694][    C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  688.759708][    C0] RSP: 0018:ffffc9000dbc7958 EFLAGS: 00050206
[  688.759723][    C0] RAX: ffffffff842cf101 RBX: 000000000000fe33 RCX: 000000000000f473
[  688.759734][    C0] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: ffffc9000e82b9c0
[  688.759746][    C0] RBP: ffffc9000dbc7a90 R08: ffffc9000e83ae32 R09: 1ffff92001d075c6
[  688.759758][    C0] R10: dffffc0000000000 R11: fffff52001d075c7 R12: ffffc9000e82b000
[  688.759770][    C0] R13: 0000200000000040 R14: ffffc9000dbc7c18 R15: 1ffff92001b78f83
[  688.759785][    C0]  ? _copy_from_iter+0x161/0x1290
[  688.759808][    C0]  </#DB>
[  688.759813][    C0]  <TASK>
[  688.759817][    C0]  _copy_from_iter+0x242/0x1290
[  688.759836][    C0]  ? __rwlock_init+0x150/0x150
[  688.759858][    C0]  ? copyout_mc+0x70/0x70
[  688.759874][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  688.759896][    C0]  ? _raw_spin_unlock+0x28/0x40
[  688.759912][    C0]  ? find_vmap_area+0xfc/0x110
[  688.759935][    C0]  ? __check_object_size+0x4fc/0xa40
[  688.759953][    C0]  netlink_sendmsg+0x76b/0xbf0
[  688.759974][    C0]  ? netlink_getsockopt+0x590/0x590
[  688.759991][    C0]  ? apparmor_socket_sendmsg+0x8e/0x330
[  688.760016][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  688.760038][    C0]  ? security_socket_sendmsg+0x80/0xa0
[  688.760060][    C0]  sock_write_iter+0x2dc/0x420
[  688.760079][    C0]  ? sock_read_iter+0x3f0/0x3f0
[  688.760101][    C0]  ? common_file_perm+0x198/0x1f0
[  688.760120][    C0]  vfs_write+0x474/0x9a0
[  688.760151][    C0]  ? file_end_write+0x250/0x250
[  688.760175][    C0]  ? __fget_files+0x3fc/0x460
[  688.760199][    C0]  ? __fdget_pos+0x1d8/0x330
[  688.760220][    C0]  ? ksys_write+0x74/0x260
[  688.760242][    C0]  ksys_write+0x151/0x260
[  688.760265][    C0]  ? __ia32_sys_read+0x90/0x90
[  688.760287][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  688.760304][    C0]  do_syscall_64+0x55/0xb0
[  688.760323][    C0]  ? clear_bhb_loop+0x40/0x90
[  688.760343][    C0]  ? clear_bhb_loop+0x40/0x90
[  688.760365][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  688.760386][    C0] RIP: 0033:0x7f35ef59fb19
[  688.760400][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.760413][    C0] RSP: 002b:00007f35ed7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.760429][    C0] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59fb19
[  688.760441][    C0] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000d
[  688.760452][    C0] RBP: 00007f35ef637b70 R08: 0000000000000000 R09: 0000000000000000
[  688.760461][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.760471][    C0] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007ffe8e961268
[  688.760489][    C0]  </TASK>
[  689.596047][T17565] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.3938'.