last executing test programs:

2.499646767s ago: executing program 2 (id=1958):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

2.392962302s ago: executing program 2 (id=1962):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="2e00000010000000", @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r6, r2, 0x22, 0x2b, r3, @void, @void, @void, @value, r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

2.102587096s ago: executing program 2 (id=1965):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942fee"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@remote, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x7}, {@broadcast, 0x8}, {@remote, 0x2}]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x4, [0x8001]}, @generic={0x88, 0x4, "a01a"}, @lsrr={0x83, 0x7, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x4000891)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r5=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r5}, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1.929587026s ago: executing program 2 (id=1969):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)='4', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="a0000000000000000b0100000400000043e2c520c578ad0d79b52008ea172c0d7d7cc6241cb8bb9e6be742f80851e7d1a502bedc0c2a4da1c3c0da096ed25e8c3fae526c09700b3a6bcdffb293d1d4ec80642b2cc5cfacf1e37fe7f1d34933bc5a15aa733e1db0e8c1db400fce316af4f3d838302154d2feb15c1f721a6fcaeb3dd3be72af44ea46445d8410618d28c4fac1602ab56d45cb561212d51770000088000000000000009200000040000000459fae71ec32c699873d5edcf9c6c7ca72ae2780f36a9f5f0e6c2fe3d72228efd5744252e240d68ac38dbd8a7652b381ef33a1e0882c6cde710fa3ad2c0f0b77062dfb4d12675b588d5bbdc2fba065cdd2de40c57c6ea7fe5efe1d1cb76650b1646361cccbe83b39d2bb23795e5f1fd8b41f000000000000e0000000000000000c010000a4000000e0a51d83dc5711f91fe63a552b4ea897a4a03ab8435d08374aaa864f710f033f2420d39fcecfd8651207c39f3468a85ba9a1839991df3315b4c03afbba8cc24a7ea61719d0f8858a99f48a639f4955b1e5b5c1e637ee964a37e2379990b272644d7e8e5913c32e677c623cfc86335a2cb34bf3c3815be8e68a6ea98025c632063cd2ebc230fceb149f4e5221aaece73543ee03e420d65fd92dc037169d8e1f554726b21e16d54321dd01156d1bb9f0569155b69f3a62c66959a849aef0b79f91b1cb8fe3aecf5b0ace96000000000000a8000000000000001401000002000000a10b958486bf6b0cbc98ebdc89064c5d44aea5ffe4ab31df2e9d02c2251a76c19738557bcda205a2d8c4542efe31c63b694ba4e0645e600333d8b43f986313dd3fc77a37737bc207af8730fb0681a919b1063dde130f4317dddd5983c70a4e5d4e77ff7928fb27d54ac3ac8a20c967fb469f58e835bcaa5128c7093e11a3c3cfd46f646dcc91fcdb4a70ee5770c1c1ec33d8b2562440500078000000000000000a010000d6fdffff2ef60dd173b4bf57df11c370733e67cd7c42f2b4e12148b1b011087318bdc755ae1c848b9fe0bf6e731058b71f88bbf8a0daa7e088cbf313b9d6f6095d1aa1a5ee63a395e0b4b1b6bc0b23e405b8d87c2ec0ba97eefa23c2d2f96d4511a9d4bb823ebc2786760000100100000000000006000000ff000000c9e8b55eb3a7fcb473dd3719455ff31861c305bf2ab2fa8fb81379792c069130c32c4f1707b0ee64671bf17810bfd56e03b15fe7c0b79e910e2b522ed68f01d77fcaab2896c9d860e9de2e74e4dc710d61339544aa342b6eaf2a19603bb2fab64b4ea922cb63d5e8b484fbfb9330a1e594778491e9e42e269f27e668835307f62829f30892f7aa7a054a3c10fc01ab8fc219fb5b16408b5955ce3cb3420229ce2b7679ce5e60db78a2a2a388f3280778fc7e762c9feec8c9e101f9a357bbdf12bbcde051c574305a47474e6abf9e30396a5953ed1971a112e9ba37c49603e2ebead6f00c67fda9808d7fcdeb434625afe680caf436f5ad952969312649000000b00000000000000019010000070000004208ce68676a1b55239a58080ba5da591bcb492159f7477460341ab35b5180689ac91bd9e3d2d55040207acce0c8d340d1123777fc46a662e657840588000900363219c0d7b495fa0d9317b587b19c1635a498842d58900e513bfe365869c5abec05e880952dddb89d8e10a2d721fc291052ff28dc60f290a5186c2cc42a4df70c6666a21ddbff160fa5b059ee0e14a1c42b0b871a230b45c36d9f737e23000040000000000000000101000007000000ff18ee2204ef27c8d6bf42fb8cbeafd359a0c387b53e43b1989e50656670e9b8bb5c2cbb38c187361d8e000000000000b8"], 0x5e0}, 0x0)

1.540999933s ago: executing program 0 (id=1977):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x65, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf910000000000d090a2c4c8aa697a00b6080000015b91008500000085000000b7000000f4ff0000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c500"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)

1.432210479s ago: executing program 0 (id=1979):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r4, &(0x7f0000000000), 0x0}, 0x20)

1.254628448s ago: executing program 0 (id=1982):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.151149763s ago: executing program 0 (id=1983):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x7, 0x0, &(0x7f00000001c0)="ffffffff7f833e", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

1.012625079s ago: executing program 0 (id=1986):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b7000000180000008500000050000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="2e000000100000", @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131c"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@remote, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x7}, {@broadcast, 0x8}, {@remote, 0x2}]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x4, [0x8001]}, @generic={0x88, 0x4, "a01a"}, @lsrr={0x83, 0x7, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x4000891)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r6=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r6}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r5, 0xffffffffffffffff, 0x22, 0x2b, r3, @void, @void, @void, @value=r6, r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

980.040151ms ago: executing program 2 (id=1988):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000480)=r0}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001bc0)={r3, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32], 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, 0x0, 0x4000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8b05, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='freezer.state\x00', 0x0, 0x0)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)=@generic={&(0x7f0000001680)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xa, 0x1, 0x0, r7}, @map_fd={0x18, 0x2}, @call={0x85, 0x0, 0x0, 0x54}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000001600)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xfb6d, r9, 0x0, &(0x7f0000001700), 0x0, 0x10, 0xfffffff3}, 0x94)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b91, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000640)='GPL\x00', 0x2, 0xf4, &(0x7f0000000680)=""/244, 0x41100, 0x20, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r2, r10, 0x1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x1, 0x1, 0x5, 0x7}], 0x10, 0x2}, 0x94)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/42, 0x2a}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000018c0)={r11, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', r12, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50)

832.818039ms ago: executing program 3 (id=1990):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r4, &(0x7f0000000000), 0x0}, 0x20)

733.073803ms ago: executing program 1 (id=1991):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

709.185555ms ago: executing program 0 (id=1992):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000abbc328b3915b0ca"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f017", 0x2b}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffc}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x6606, 0x40, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040), 0x1000000000000180, 0x0, 0x0, 0x808e}, 0x40000100)
write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

688.777456ms ago: executing program 3 (id=1993):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

578.484981ms ago: executing program 3 (id=1994):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe7d}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x36, &(0x7f0000000580)=[@cred, @rights]}, 0x493e4dd4a2269370)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000500)=r2, 0x4)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f00000000c0), 0x0}, 0x20)
setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000), 0x8)
socket$kcm(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000001340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x067\xe0\x9cZ\xcb\x02\x80y\xcd\xf5S\xf9\xcf\x11\xe5\xa0\x11Odrk\xceyf\xe0\x19\x13\xe9][<\xe4xv\xa0j\xb8\xfd\xee\x13\xa0\xb6\x1f\x92\xd5\xf9\x03\tO\xaeh\x8cF\xb0\x80\xfd,\xde\xf3-*\x7f\x17\x8a\'m\xd1\xbc\xae\xc0~\xd72f\xa3\xe8S!\xc0[#e\xc5\xab\xc4U\xdf{\x9a\x11S)\x8e\x8f\x92\fU\xe9\x8f\x1eg\x9d\x88.\xd5\n{\x1d\xd3\xb3\xa3\a\v\xaa9\xb1[\xc4\xeb\xe4\xf7\xd9\xdfG_G\xc54\x83\xbe?\x012\xc9\x86\xb5\x05\xa6\x1du\x01A\x81H\xd2\x80\xe5\xd6\x96\x1f')
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0)

561.478752ms ago: executing program 1 (id=1995):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x80000000}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x86, 0x0, 0x3}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xfe, 0x0}}, 0x10)

392.87193ms ago: executing program 1 (id=1996):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x7, 0x0, &(0x7f00000001c0)="ffffffff7f833e", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

378.992271ms ago: executing program 3 (id=1997):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="2e00000010000000", @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r6, r2, 0x22, 0x2b, r3, @void, @void, @void, @value, r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

336.467613ms ago: executing program 1 (id=1998):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b7000000180000008500000050000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="2e0000001000", @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131c"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@remote, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x7}, {@broadcast, 0x8}, {@remote, 0x2}]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x4, [0x8001]}, @generic={0x88, 0x4, "a01a"}, @lsrr={0x83, 0x7, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x4000891)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r6=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r6}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r5, 0xffffffffffffffff, 0x22, 0x2b, r3, @void, @void, @void, @value=r6, r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

176.319611ms ago: executing program 3 (id=1999):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)='4', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x5e0}, 0x0)

175.143791ms ago: executing program 1 (id=2000):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942fee"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@remote, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x7}, {@broadcast, 0x8}, {@remote, 0x2}]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x4, [0x8001]}, @generic={0x88, 0x4, "a01a"}, @lsrr={0x83, 0x7, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x4000891)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r5=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r5}, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

63.396797ms ago: executing program 3 (id=2001):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b7000000180000008500000050000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="2e000000100000", @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131c"], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@remote, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x7}, {@broadcast, 0x8}, {@remote, 0x2}]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x4, [0x8001]}, @generic={0x88, 0x4, "a01a"}, @lsrr={0x83, 0x7, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x4000891)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r6=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r6}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r5, 0xffffffffffffffff, 0x22, 0x2b, r3, @void, @void, @void, @value=r6, r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

57.936557ms ago: executing program 1 (id=2002):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r3, &(0x7f0000000000), 0x0}, 0x20)

0s ago: executing program 2 (id=2003):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

kernel console output (not intermixed with test programs):

ace 0, times 0
[  135.559898][ T7005] CPU: 0 PID: 7005 Comm: syz.2.419 Not tainted syzkaller #0
[  135.567246][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  135.577412][ T7005] Call Trace:
[  135.580713][ T7005]  <TASK>
[  135.583752][ T7005]  dump_stack_lvl+0x18c/0x250
[  135.588475][ T7005]  ? show_regs_print_info+0x20/0x20
[  135.593810][ T7005]  ? load_image+0x400/0x400
[  135.598346][ T7005]  ? __lock_acquire+0x7d40/0x7d40
[  135.603394][ T7005]  ? snprintf+0xe9/0x140
[  135.607679][ T7005]  should_fail_ex+0x39d/0x4d0
[  135.612527][ T7005]  _copy_to_user+0x2f/0xa0
[  135.617046][ T7005]  simple_read_from_buffer+0xe7/0x150
[  135.622423][ T7005]  proc_fail_nth_read+0x1e8/0x260
[  135.627503][ T7005]  ? proc_fault_inject_write+0x360/0x360
[  135.633569][ T7005]  ? fsnotify_perm+0x271/0x5e0
[  135.638326][ T7005]  ? proc_fault_inject_write+0x360/0x360
[  135.643952][ T7005]  vfs_read+0x28b/0x970
[  135.648112][ T7005]  ? kernel_read+0x1e0/0x1e0
[  135.652695][ T7005]  ? __fget_files+0x28/0x4b0
[  135.657276][ T7005]  ? __fget_files+0x28/0x4b0
[  135.661859][ T7005]  ? __fget_files+0x43d/0x4b0
[  135.666538][ T7005]  ? __fdget_pos+0x2a3/0x330
[  135.671119][ T7005]  ? ksys_read+0x75/0x260
[  135.675824][ T7005]  ksys_read+0x150/0x260
[  135.680346][ T7005]  ? vfs_write+0x990/0x990
[  135.684783][ T7005]  ? lockdep_hardirqs_on+0x98/0x150
[  135.689980][ T7005]  do_syscall_64+0x55/0xa0
[  135.695093][ T7005]  ? clear_bhb_loop+0x40/0x90
[  135.699773][ T7005]  ? clear_bhb_loop+0x40/0x90
[  135.704542][ T7005]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.710479][ T7005] RIP: 0033:0x7f062695cfce
[  135.714894][ T7005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  135.734612][ T7005] RSP: 002b:00007f06277d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  135.743111][ T7005] RAX: ffffffffffffffda RBX: 00007f06277da6c0 RCX: 00007f062695cfce
[  135.751077][ T7005] RDX: 000000000000000f RSI: 00007f06277da0a0 RDI: 0000000000000005
[  135.759039][ T7005] RBP: 00007f06277da090 R08: 0000000000000000 R09: 0000000000000000
[  135.768053][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.776021][ T7005] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  135.784264][ T7005]  </TASK>
[  135.837059][ T7009] netlink: 'syz.0.420': attribute type 10 has an invalid length.
[  135.994170][ T7015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'.
[  136.940121][ T7029] Q±6ã�`Ò˜: renamed from lo (while UP)
[  137.259339][ T7041] Illegal XDP return value 1301187405 on prog  (id 515) dev N/A, expect packet loss!
[  137.699933][ T7055] netlink: 'syz.2.435': attribute type 10 has an invalid length.
[  137.765412][ T7055] bridge0: port 3(team0) entered disabled state
[  137.826676][ T7055] bridge0: port 3(team0) entered disabled state
[  137.847440][ T7055] team_slave_1: left promiscuous mode
[  137.858788][ T7055] team_slave_1: left allmulticast mode
[  137.898646][ T7055] team0 (unregistering): Port device team_slave_1 removed
[  138.177778][ T7073] delete_channel: no stack
[  140.962999][ T7132] hsr0: entered allmulticast mode
[  140.968101][ T7132] hsr_slave_0: entered allmulticast mode
[  140.978765][ T7132] hsr_slave_1: entered allmulticast mode
[  141.333394][ T7132] syzkaller0: entered promiscuous mode
[  141.345927][ T7132] syzkaller0: entered allmulticast mode
[  141.837216][ T7146] FAULT_INJECTION: forcing a failure.
[  141.837216][ T7146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.858341][ T7146] CPU: 1 PID: 7146 Comm: syz.0.463 Not tainted syzkaller #0
[  141.865683][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  141.875848][ T7146] Call Trace:
[  141.879141][ T7146]  <TASK>
[  141.882086][ T7146]  dump_stack_lvl+0x18c/0x250
[  141.886797][ T7146]  ? show_regs_print_info+0x20/0x20
[  141.892028][ T7146]  ? load_image+0x400/0x400
[  141.896655][ T7146]  ? __might_fault+0xaa/0x120
[  141.901438][ T7146]  ? __lock_acquire+0x7d40/0x7d40
[  141.906493][ T7146]  should_fail_ex+0x39d/0x4d0
[  141.911199][ T7146]  _copy_to_user+0x2f/0xa0
[  141.915641][ T7146]  bpf_test_finish+0x4e7/0x650
[  141.920445][ T7146]  ? convert___skb_to_skb+0x590/0x590
[  141.925918][ T7146]  ? convert_skb_to___skb+0x420/0x420
[  141.931303][ T7146]  ? slab_build_skb+0x25f/0x3f0
[  141.936165][ T7146]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  141.941543][ T7146]  ? cpu_online+0x60/0x60
[  141.945863][ T7146]  bpf_prog_test_run+0x321/0x390
[  141.950792][ T7146]  __sys_bpf+0x49d/0x890
[  141.955032][ T7146]  ? bpf_link_show_fdinfo+0x390/0x390
[  141.960413][ T7146]  ? lock_chain_count+0x20/0x20
[  141.965269][ T7146]  __x64_sys_bpf+0x7c/0x90
[  141.969685][ T7146]  do_syscall_64+0x55/0xa0
[  141.974276][ T7146]  ? clear_bhb_loop+0x40/0x90
[  141.979074][ T7146]  ? clear_bhb_loop+0x40/0x90
[  141.983744][ T7146]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.989629][ T7146] RIP: 0033:0x7fc1cc59c799
[  141.994128][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.013736][ T7146] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.022144][ T7146] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  142.030105][ T7146] RDX: 000000000000002d RSI: 0000200000000180 RDI: 000000000000000a
[  142.038086][ T7146] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  142.046056][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.054016][ T7146] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  142.062050][ T7146]  </TASK>
[  144.054882][ T7160] netlink: 'syz.0.475': attribute type 10 has an invalid length.
[  145.162531][ T7193] sit0: entered promiscuous mode
[  145.181623][ T7193] sit0: entered allmulticast mode
[  145.536458][ T7206] netlink: 'syz.1.482': attribute type 7 has an invalid length.
[  145.550467][ T7206] netlink: 'syz.1.482': attribute type 1 has an invalid length.
[  145.580303][ T7206] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.482'.
[  145.722897][ T7210] netlink: 'syz.0.483': attribute type 10 has an invalid length.
[  145.756969][ T7215] netlink: 'syz.3.484': attribute type 1 has an invalid length.
[  145.765085][ T7215] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.484'.
[  146.094460][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.487'.
[  146.110617][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.487'.
[  146.153516][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.487'.
[  146.339954][ T7227] netlink: 'syz.1.489': attribute type 11 has an invalid length.
[  146.363211][ T7227] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.489'.
[  146.895498][ T7247] FAULT_INJECTION: forcing a failure.
[  146.895498][ T7247] name failslab, interval 1, probability 0, space 0, times 0
[  146.936894][ T7247] CPU: 0 PID: 7247 Comm: syz.0.496 Not tainted syzkaller #0
[  146.944280][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.954370][ T7247] Call Trace:
[  146.957680][ T7247]  <TASK>
[  146.960652][ T7247]  dump_stack_lvl+0x18c/0x250
[  146.965374][ T7247]  ? trace_event_raw_event_lock+0x250/0x250
[  146.971316][ T7247]  ? show_regs_print_info+0x20/0x20
[  146.976556][ T7247]  ? load_image+0x400/0x400
[  146.981091][ T7247]  ? kasan_set_track+0x5f/0x70
[  146.985920][ T7247]  should_fail_ex+0x39d/0x4d0
[  146.990693][ T7247]  should_failslab+0x9/0x20
[  146.995236][ T7247]  slab_pre_alloc_hook+0x59/0x310
[  147.000314][ T7247]  kmem_cache_alloc+0x5a/0x2d0
[  147.005115][ T7247]  ? dst_alloc+0x105/0x170
[  147.009575][ T7247]  dst_alloc+0x105/0x170
[  147.014040][ T7247]  ip_route_output_key_hash_rcu+0x14f6/0x2370
[  147.020172][ T7247]  ? ip_route_output_key_hash+0x13d/0x330
[  147.026199][ T7247]  ip_route_output_key_hash+0x1f3/0x330
[  147.031837][ T7247]  ? kfree+0x31/0x190
[  147.035898][ T7247]  ? ip_route_input_rcu+0x30f0/0x30f0
[  147.041329][ T7247]  ? ip_cmsg_send+0x9c0/0xa70
[  147.046124][ T7247]  ip_route_output_flow+0x2a/0x150
[  147.051281][ T7247]  ? security_sk_classify_flow+0x7b/0x90
[  147.056964][ T7247]  udp_sendmsg+0x1603/0x23b0
[  147.061622][ T7247]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  147.066517][ T7247]  ? udp_cmsg_send+0x350/0x350
[  147.071332][ T7247]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  147.072202][ T7249] pim6reg1: entered promiscuous mode
[  147.077327][ T7247]  ? lock_chain_count+0x20/0x20
[  147.077362][ T7247]  ? inet_sendmsg+0x14b/0x2f0
[  147.092223][ T7247]  ? __local_bh_enable_ip+0x13a/0x1c0
[  147.097604][ T7247]  ? _local_bh_enable+0xa0/0xa0
[  147.102512][ T7247]  ? do_raw_spin_unlock+0x121/0x230
[  147.107725][ T7247]  ? inet_sendmsg+0x14b/0x2f0
[  147.112411][ T7247]  ? inet_sendmsg+0x14b/0x2f0
[  147.117120][ T7247]  ? inet_send_prepare+0x260/0x260
[  147.122235][ T7247]  ____sys_sendmsg+0x5ba/0x960
[  147.127001][ T7247]  ? __lock_acquire+0x7d40/0x7d40
[  147.132127][ T7247]  ? __sys_sendmsg_sock+0x30/0x30
[  147.137146][ T7247]  ? __import_iovec+0x5f2/0x850
[  147.142008][ T7247]  ? import_iovec+0x73/0xa0
[  147.146513][ T7247]  ___sys_sendmsg+0x2a6/0x360
[  147.151198][ T7247]  ? __sys_sendmsg+0x2a0/0x2a0
[  147.156073][ T7247]  ? trace_call_bpf+0xc3/0x6c0
[  147.160879][ T7247]  __se_sys_sendmsg+0x1c2/0x2b0
[  147.165760][ T7247]  ? __x64_sys_sendmsg+0x80/0x80
[  147.170721][ T7247]  ? lockdep_hardirqs_on+0x98/0x150
[  147.175922][ T7247]  do_syscall_64+0x55/0xa0
[  147.180609][ T7247]  ? clear_bhb_loop+0x40/0x90
[  147.185373][ T7247]  ? clear_bhb_loop+0x40/0x90
[  147.190143][ T7247]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.196032][ T7247] RIP: 0033:0x7fc1cc59c799
[  147.200459][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.220239][ T7247] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.228652][ T7247] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  147.236621][ T7247] RDX: 0000000000000810 RSI: 0000200000007940 RDI: 0000000000000005
[  147.244589][ T7247] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  147.252559][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.260614][ T7247] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  147.268630][ T7247]  </TASK>
[  147.283955][ T7249] pim6reg1: entered allmulticast mode
[  147.522914][ T7254] netlink: 'syz.0.499': attribute type 11 has an invalid length.
[  147.549311][ T7254] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.499'.
[  147.606459][ T7254] FAULT_INJECTION: forcing a failure.
[  147.606459][ T7254] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  147.619769][ T7254] CPU: 0 PID: 7254 Comm: syz.0.499 Not tainted syzkaller #0
[  147.626329][ T7256] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[  147.627048][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  147.627061][ T7254] Call Trace:
[  147.627068][ T7254]  <TASK>
[  147.627075][ T7254]  dump_stack_lvl+0x18c/0x250
[  147.643230][ T7256] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.500'.
[  147.644753][ T7254]  ? show_regs_print_info+0x20/0x20
[  147.644786][ T7254]  ? load_image+0x400/0x400
[  147.644809][ T7254]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  147.680542][ T7254]  should_fail_ex+0x39d/0x4d0
[  147.685225][ T7254]  prepare_alloc_pages+0x1e2/0x5f0
[  147.690397][ T7254]  __alloc_pages+0x134/0x460
[  147.694982][ T7254]  ? zone_statistics+0x170/0x170
[  147.699921][ T7254]  alloc_pages_node+0x10e/0x170
[  147.704816][ T7254]  ? skb_splice_from_iter+0xc10/0xc10
[  147.710182][ T7254]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  147.716070][ T7254]  ? __local_bh_disable_ip+0x108/0x1a0
[  147.721521][ T7254]  __napi_alloc_skb+0x381/0x560
[  147.726363][ T7254]  napi_get_frags+0x6c/0x150
[  147.730941][ T7254]  ? napi_get_frags_check+0x24/0x90
[  147.736131][ T7254]  napi_get_frags_check+0x39/0x90
[  147.741148][ T7254]  netif_napi_add_weight+0x9e3/0xdf0
[  147.746448][ T7254]  gro_cells_init+0x197/0x200
[  147.751124][ T7254]  ip6_tnl_dev_init+0x23e/0x900
[  147.755966][ T7254]  register_netdevice+0x67b/0x1bb0
[  147.761073][ T7254]  ? netif_stacked_transfer_operstate+0x210/0x210
[  147.767560][ T7254]  ? __lock_acquire+0x7d40/0x7d40
[  147.772586][ T7254]  ? net_generic+0x1e/0x240
[  147.777086][ T7254]  ip6_tnl_create2+0x80/0x140
[  147.781863][ T7254]  ip6_tnl_locate+0x735/0x830
[  147.786555][ T7254]  ? ip6_tnl_parm_from_user+0x340/0x340
[  147.792095][ T7254]  ? __might_fault+0xaa/0x120
[  147.796767][ T7254]  ? __might_fault+0xc6/0x120
[  147.801438][ T7254]  ? __might_fault+0xaa/0x120
[  147.806193][ T7254]  ? ip6_tnl_siocdevprivate+0x5eb/0xab0
[  147.811759][ T7254]  ip6_tnl_siocdevprivate+0x619/0xab0
[  147.817130][ T7254]  ? ip6_tnl_start_xmit+0x11c0/0x11c0
[  147.822497][ T7254]  ? dev_ioctl+0x83c/0x1140
[  147.827009][ T7254]  ? __lock_acquire+0x7d40/0x7d40
[  147.832214][ T7254]  ? dev_ifsioc+0x958/0xc40
[  147.836714][ T7254]  dev_ioctl+0x84c/0x1140
[  147.841057][ T7254]  sock_ioctl+0x74c/0x7e0
[  147.845388][ T7254]  ? sock_poll+0x3e0/0x3e0
[  147.849889][ T7254]  ? bpf_lsm_file_ioctl+0x9/0x10
[  147.854820][ T7254]  ? security_file_ioctl+0x80/0xa0
[  147.859933][ T7254]  ? sock_poll+0x3e0/0x3e0
[  147.864339][ T7254]  __se_sys_ioctl+0xfd/0x170
[  147.868934][ T7254]  do_syscall_64+0x55/0xa0
[  147.873352][ T7254]  ? clear_bhb_loop+0x40/0x90
[  147.878111][ T7254]  ? clear_bhb_loop+0x40/0x90
[  147.882781][ T7254]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.888667][ T7254] RIP: 0033:0x7fc1cc59c799
[  147.893094][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.912746][ T7254] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  147.921153][ T7254] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  147.929140][ T7254] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000d
[  147.937285][ T7254] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  147.945248][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  147.953208][ T7254] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  147.961185][ T7254]  </TASK>
[  148.037751][ T7261] netlink: 'syz.3.502': attribute type 10 has an invalid length.
[  148.416464][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  149.130774][ T7280] netlink: 10 bytes leftover after parsing attributes in process `syz.3.507'.
[  149.161620][ T7279] netlink: 'syz.2.506': attribute type 10 has an invalid length.
[  149.193184][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.202298][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.246407][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.253888][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.261465][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.268750][ T7279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.327767][ T7279] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  149.424355][ T7283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.506'.
[  149.434085][ T7283] žåÓD`¼$ê: renamed from caif0
[  149.472835][ T7283] A link change request failed with some changes committed already. Interface žåÓD`¼$ê may have been left with an inconsistent configuration, please check.
[  151.548712][ T7307] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.514'.
[  151.969418][ T7314] netlink: 'syz.1.515': attribute type 1 has an invalid length.
[  152.001514][ T7314] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.515'.
[  152.081848][ T7315] netlink: 'syz.3.516': attribute type 10 has an invalid length.
[  155.090220][ T7350] netlink: 'syz.3.528': attribute type 10 has an invalid length.
[  155.217481][ T7352] netlink: 'syz.0.529': attribute type 10 has an invalid length.
[  155.340849][ T7352] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.529'.
[  159.225024][ T7389] netlink: 152 bytes leftover after parsing attributes in process `syz.1.540'.
[  159.288677][ T7391] netlink: 'syz.3.542': attribute type 10 has an invalid length.
[  159.710953][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.545'.
[  159.746208][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.545'.
[  159.782685][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.545'.
[  160.656683][ T7431] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.554'.
[  160.922884][ T7440] netlink: 152 bytes leftover after parsing attributes in process `syz.2.557'.
[  161.562977][ T7451] netlink: 'syz.2.559': attribute type 10 has an invalid length.
[  161.614013][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.623062][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.020552][ T7463] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  162.046165][ T7463] netlink: 'syz.0.562': attribute type 3 has an invalid length.
[  162.056162][ T7463] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.562'.
[  162.218426][ T7463] netlink: 'syz.0.562': attribute type 10 has an invalid length.
[  162.427642][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.566'.
[  163.780011][ T7507] netlink: 152 bytes leftover after parsing attributes in process `syz.3.581'.
[  164.383347][ T7527] syzkaller0: entered promiscuous mode
[  164.390415][ T7527] syzkaller0: entered allmulticast mode
[  166.078621][ T7543] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.594'.
[  166.374088][ T7559] netlink: 'syz.1.595': attribute type 10 has an invalid length.
[  167.677564][ T7591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.608'.
[  167.740970][ T7598] FAULT_INJECTION: forcing a failure.
[  167.740970][ T7598] name failslab, interval 1, probability 0, space 0, times 0
[  167.803183][ T7598] CPU: 0 PID: 7598 Comm: syz.0.611 Not tainted syzkaller #0
[  167.810532][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  167.820779][ T7598] Call Trace:
[  167.824092][ T7598]  <TASK>
[  167.827036][ T7598]  dump_stack_lvl+0x18c/0x250
[  167.831741][ T7598]  ? show_regs_print_info+0x20/0x20
[  167.836970][ T7598]  ? load_image+0x400/0x400
[  167.841523][ T7598]  ? verify_lock_unused+0x140/0x140
[  167.846747][ T7598]  should_fail_ex+0x39d/0x4d0
[  167.851463][ T7598]  should_failslab+0x9/0x20
[  167.856178][ T7598]  slab_pre_alloc_hook+0x59/0x310
[  167.861230][ T7598]  kmem_cache_alloc+0x5a/0x2d0
[  167.865989][ T7598]  ? skb_clone+0x1eb/0x370
[  167.870410][ T7598]  skb_clone+0x1eb/0x370
[  167.874831][ T7598]  __netlink_deliver_tap+0x41c/0x830
[  167.880121][ T7598]  ? netlink_deliver_tap+0x2e/0x1b0
[  167.885349][ T7598]  netlink_deliver_tap+0x19c/0x1b0
[  167.890474][ T7598]  netlink_unicast+0x72c/0x8d0
[  167.895282][ T7598]  netlink_sendmsg+0x8d0/0xbf0
[  167.900075][ T7598]  ? netlink_getsockopt+0x590/0x590
[  167.905286][ T7598]  ? aa_sock_msg_perm+0x94/0x150
[  167.910256][ T7598]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  167.915630][ T7598]  ? security_socket_sendmsg+0x80/0xa0
[  167.921184][ T7598]  ? netlink_getsockopt+0x590/0x590
[  167.926388][ T7598]  ____sys_sendmsg+0x5ba/0x960
[  167.931160][ T7598]  ? __asan_memset+0x22/0x40
[  167.935747][ T7598]  ? __sys_sendmsg_sock+0x30/0x30
[  167.940762][ T7598]  ? __import_iovec+0x5f2/0x850
[  167.945610][ T7598]  ? import_iovec+0x73/0xa0
[  167.950105][ T7598]  ___sys_sendmsg+0x2a6/0x360
[  167.954780][ T7598]  ? get_pid_task+0x20/0x1e0
[  167.959379][ T7598]  ? __sys_sendmsg+0x2a0/0x2a0
[  167.964237][ T7598]  ? __lock_acquire+0x7d40/0x7d40
[  167.969391][ T7598]  __se_sys_sendmsg+0x1c2/0x2b0
[  167.974239][ T7598]  ? __x64_sys_sendmsg+0x80/0x80
[  167.979190][ T7598]  ? lockdep_hardirqs_on+0x98/0x150
[  167.984497][ T7598]  do_syscall_64+0x55/0xa0
[  167.988914][ T7598]  ? clear_bhb_loop+0x40/0x90
[  167.993672][ T7598]  ? clear_bhb_loop+0x40/0x90
[  167.998349][ T7598]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.004243][ T7598] RIP: 0033:0x7fc1cc59c799
[  168.008662][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.028361][ T7598] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.036773][ T7598] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  168.044753][ T7598] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003
[  168.052815][ T7598] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  168.060877][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.068939][ T7598] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  168.076917][ T7598]  </TASK>
[  168.543645][ T7614] syzkaller0: entered promiscuous mode
[  168.559168][ T7614] syzkaller0: entered allmulticast mode
[  171.217457][ T7645] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.620'.
[  171.275681][ T7647] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  171.301131][ T7647] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  171.429347][ T7652] netlink: 'syz.0.623': attribute type 21 has an invalid length.
[  171.446048][ T7652] netlink: 'syz.0.623': attribute type 6 has an invalid length.
[  171.486462][ T7652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.623'.
[  171.521497][ T7654] FAULT_INJECTION: forcing a failure.
[  171.521497][ T7654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.555164][ T7654] CPU: 1 PID: 7654 Comm: syz.1.626 Not tainted syzkaller #0
[  171.562599][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  171.572679][ T7654] Call Trace:
[  171.575987][ T7654]  <TASK>
[  171.578944][ T7654]  dump_stack_lvl+0x18c/0x250
[  171.584096][ T7654]  ? show_regs_print_info+0x20/0x20
[  171.589325][ T7654]  ? load_image+0x400/0x400
[  171.593905][ T7654]  ? __might_fault+0xaa/0x120
[  171.598617][ T7654]  ? __lock_acquire+0x7d40/0x7d40
[  171.603669][ T7654]  should_fail_ex+0x39d/0x4d0
[  171.608380][ T7654]  _copy_from_user+0x2f/0xe0
[  171.613001][ T7654]  ___sys_sendmsg+0x1c7/0x360
[  171.617702][ T7654]  ? __sys_sendmsg+0x2a0/0x2a0
[  171.622490][ T7654]  ? trace_call_bpf+0xc3/0x6c0
[  171.627313][ T7654]  __se_sys_sendmsg+0x1c2/0x2b0
[  171.632164][ T7654]  ? __x64_sys_sendmsg+0x80/0x80
[  171.637101][ T7654]  ? lockdep_hardirqs_on+0x98/0x150
[  171.642292][ T7654]  do_syscall_64+0x55/0xa0
[  171.646711][ T7654]  ? clear_bhb_loop+0x40/0x90
[  171.651379][ T7654]  ? clear_bhb_loop+0x40/0x90
[  171.656153][ T7654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.662127][ T7654] RIP: 0033:0x7fe1d279c799
[  171.666619][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.686223][ T7654] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.694808][ T7654] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  171.702855][ T7654] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003
[  171.710818][ T7654] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  171.718869][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.726919][ T7654] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  171.734927][ T7654]  </TASK>
[  172.263217][ T7680] netlink: 'syz.2.635': attribute type 9 has an invalid length.
[  172.290205][ T7680] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.635'.
[  172.348156][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'.
[  172.382307][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'.
[  172.400465][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'.
[  172.547788][ T7694] FAULT_INJECTION: forcing a failure.
[  172.547788][ T7694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.577308][ T7694] CPU: 1 PID: 7694 Comm: syz.0.638 Not tainted syzkaller #0
[  172.584661][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  172.594913][ T7694] Call Trace:
[  172.598212][ T7694]  <TASK>
[  172.601162][ T7694]  dump_stack_lvl+0x18c/0x250
[  172.605960][ T7694]  ? show_regs_print_info+0x20/0x20
[  172.611188][ T7694]  ? load_image+0x400/0x400
[  172.615805][ T7694]  ? __might_fault+0xaa/0x120
[  172.620504][ T7694]  ? __lock_acquire+0x7d40/0x7d40
[  172.625724][ T7694]  should_fail_ex+0x39d/0x4d0
[  172.630431][ T7694]  _copy_from_iter+0x1d9/0x12e0
[  172.635309][ T7694]  ? __might_fault+0xaa/0x120
[  172.640006][ T7694]  ? _copy_from_iter+0x24e/0x12e0
[  172.645055][ T7694]  ? __virt_addr_valid+0x18c/0x540
[  172.650389][ T7694]  ? __lock_acquire+0x7d40/0x7d40
[  172.655531][ T7694]  ? copyout_mc+0x70/0x70
[  172.659990][ T7694]  ? copyout_mc+0x70/0x70
[  172.664786][ T7694]  ? __virt_addr_valid+0x18c/0x540
[  172.669924][ T7694]  ? page_copy_sane+0x16a/0x270
[  172.674806][ T7694]  copy_page_from_iter+0x7b/0x100
[  172.679887][ T7694]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  172.685742][ T7694]  unix_stream_sendmsg+0x562/0xbf0
[  172.690901][ T7694]  ? unix_show_fdinfo+0x270/0x270
[  172.695953][ T7694]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  172.702387][ T7694]  ? aa_sock_msg_perm+0x94/0x150
[  172.707323][ T7694]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  172.712650][ T7694]  ? security_socket_sendmsg+0x80/0xa0
[  172.718109][ T7694]  ? unix_show_fdinfo+0x270/0x270
[  172.723134][ T7694]  ____sys_sendmsg+0x5ba/0x960
[  172.727891][ T7694]  ? __asan_memset+0x22/0x40
[  172.732475][ T7694]  ? __sys_sendmsg_sock+0x30/0x30
[  172.737484][ T7694]  ? __import_iovec+0x5f2/0x850
[  172.742331][ T7694]  ? import_iovec+0x73/0xa0
[  172.746910][ T7694]  ___sys_sendmsg+0x2a6/0x360
[  172.751577][ T7694]  ? get_pid_task+0x20/0x1e0
[  172.756215][ T7694]  ? __sys_sendmsg+0x2a0/0x2a0
[  172.761051][ T7694]  ? __lock_acquire+0x7d40/0x7d40
[  172.766269][ T7694]  __se_sys_sendmsg+0x1c2/0x2b0
[  172.771112][ T7694]  ? __x64_sys_sendmsg+0x80/0x80
[  172.776140][ T7694]  ? lockdep_hardirqs_on+0x98/0x150
[  172.781334][ T7694]  do_syscall_64+0x55/0xa0
[  172.785746][ T7694]  ? clear_bhb_loop+0x40/0x90
[  172.790417][ T7694]  ? clear_bhb_loop+0x40/0x90
[  172.795088][ T7694]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.800981][ T7694] RIP: 0033:0x7fc1cc59c799
[  172.805392][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.825108][ T7694] RSP: 002b:00007fc1cd37b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.833517][ T7694] RAX: ffffffffffffffda RBX: 00007fc1cc816090 RCX: 00007fc1cc59c799
[  172.841489][ T7694] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  172.849449][ T7694] RBP: 00007fc1cd37b090 R08: 0000000000000000 R09: 0000000000000000
[  172.857608][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  172.865580][ T7694] R13: 00007fc1cc816128 R14: 00007fc1cc816090 R15: 00007ffd3b4b2398
[  172.873556][ T7694]  </TASK>
[  173.394972][ T7716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.647'.
[  173.411282][ T7716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.647'.
[  173.429866][ T7716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.647'.
[  173.458183][ T7716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.647'.
[  174.555073][ T7741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.357209][ T7762] Ÿë
: port 1(veth0_to_team) entered blocking state
[  175.366366][ T7762] Ÿë
: port 1(veth0_to_team) entered disabled state
[  175.377830][ T7762] veth0_to_team: entered allmulticast mode
[  175.395341][ T7762] veth0_to_team: entered promiscuous mode
[  177.798091][ T7812] netlink: 'syz.3.683': attribute type 8 has an invalid length.
[  177.816289][ T7812] __nla_validate_parse: 1 callbacks suppressed
[  177.816301][ T7812] netlink: 156 bytes leftover after parsing attributes in process `syz.3.683'.
[  178.387109][ T7822] netlink: 'syz.1.687': attribute type 29 has an invalid length.
[  178.397217][ T7822] netlink: 'syz.1.687': attribute type 29 has an invalid length.
[  178.408885][ T7822] netlink: 'syz.1.687': attribute type 29 has an invalid length.
[  178.440538][ T7822] netlink: 'syz.1.687': attribute type 8 has an invalid length.
[  178.453942][ T7822] netlink: 156 bytes leftover after parsing attributes in process `syz.1.687'.
[  179.441195][ T3520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  179.744487][ T7857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.702'.
[  179.790706][ T7857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.702'.
[  179.814362][ T7861] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.703'.
[  179.836090][ T7857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.702'.
[  180.441030][ T7887] netlink: 'syz.0.710': attribute type 10 has an invalid length.
[  180.460881][ T7887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'.
[  180.474106][ T7887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'.
[  180.489635][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'.
[  180.527334][ T7890] netlink: 'syz.1.713': attribute type 10 has an invalid length.
[  180.566275][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.713'.
[  180.621271][ T7892] netlink: 'syz.2.714': attribute type 21 has an invalid length.
[  180.653103][ T7894] netlink: 'syz.0.715': attribute type 10 has an invalid length.
[  182.666126][ T7947] netlink: 'syz.3.734': attribute type 1 has an invalid length.
[  183.254117][ T7960] validate_nla: 6 callbacks suppressed
[  183.254130][ T7960] netlink: 'syz.3.740': attribute type 21 has an invalid length.
[  183.269238][ T7960] __nla_validate_parse: 7 callbacks suppressed
[  183.269252][ T7960] netlink: 164 bytes leftover after parsing attributes in process `syz.3.740'.
[  183.823403][ T7975] netlink: 'syz.2.745': attribute type 10 has an invalid length.
[  183.834413][ T7975] netlink: 55 bytes leftover after parsing attributes in process `syz.2.745'.
[  184.032384][ T7979] : port 1(ip6gretap0) entered blocking state
[  184.038904][ T7979] : port 1(ip6gretap0) entered disabled state
[  184.046152][ T7979] ip6gretap0: entered allmulticast mode
[  184.080077][ T7979] ip6gretap0: entered promiscuous mode
[  184.137239][ T7979] ip6gretap0: left allmulticast mode
[  184.155774][ T7979] ip6gretap0: left promiscuous mode
[  184.165099][ T7979] : port 1(ip6gretap0) entered disabled state
[  184.418135][ T7994] netlink: 'syz.2.751': attribute type 21 has an invalid length.
[  184.765908][ T8002] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  184.773916][ T8002] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.754'.
[  185.146711][ T8014] hsr0: entered promiscuous mode
[  185.160113][ T8014] hsr0: entered allmulticast mode
[  185.168074][ T8014] hsr_slave_0: entered allmulticast mode
[  185.185197][ T8014] hsr_slave_1: entered allmulticast mode
[  185.208431][ T8013] netlink: 'syz.2.757': attribute type 25 has an invalid length.
[  185.251589][ T8013] netlink: 'syz.2.757': attribute type 9 has an invalid length.
[  185.785887][ T8028] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.764'.
[  185.857067][ T8028] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  186.176249][ T8032] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.767'.
[  186.213291][ T8032] netlink: 1 bytes leftover after parsing attributes in process `syz.3.767'.
[  186.330932][ T8036] syzkaller0: entered promiscuous mode
[  186.338408][ T8036] syzkaller0: entered allmulticast mode
[  187.968414][ T8045] netlink: 'syz.3.770': attribute type 10 has an invalid length.
[  188.142847][ T8060] netlink: 'syz.2.775': attribute type 6 has an invalid length.
[  188.155064][ T8060] FAULT_INJECTION: forcing a failure.
[  188.155064][ T8060] name failslab, interval 1, probability 0, space 0, times 0
[  188.170750][ T8060] CPU: 0 PID: 8060 Comm: syz.2.775 Not tainted syzkaller #0
[  188.178168][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  188.188245][ T8060] Call Trace:
[  188.191540][ T8060]  <TASK>
[  188.194492][ T8060]  dump_stack_lvl+0x18c/0x250
[  188.199199][ T8060]  ? show_regs_print_info+0x20/0x20
[  188.204418][ T8060]  ? load_image+0x400/0x400
[  188.208953][ T8060]  ? __might_sleep+0xe0/0xe0
[  188.213569][ T8060]  ? __lock_acquire+0x7d40/0x7d40
[  188.218595][ T8060]  should_fail_ex+0x39d/0x4d0
[  188.223459][ T8060]  should_failslab+0x9/0x20
[  188.228052][ T8060]  slab_pre_alloc_hook+0x59/0x310
[  188.233085][ T8060]  ? nla_find+0x12a/0x150
[  188.237489][ T8060]  ? fib_trie_table+0x33/0x1c0
[  188.242248][ T8060]  ? fib_trie_table+0x33/0x1c0
[  188.247007][ T8060]  __kmem_cache_alloc_node+0x53/0x250
[  188.252432][ T8060]  ? fib_trie_table+0x33/0x1c0
[  188.257189][ T8060]  __kmalloc+0xa4/0x230
[  188.261346][ T8060]  fib_trie_table+0x33/0x1c0
[  188.265961][ T8060]  fib_new_table+0x135/0x2d0
[  188.270583][ T8060]  inet_rtm_newroute+0x133/0x240
[  188.275526][ T8060]  ? __mutex_lock+0x4f9/0xcc0
[  188.280217][ T8060]  ? rcu_read_unlock+0xa0/0xa0
[  188.285013][ T8060]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  188.290135][ T8060]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  188.295365][ T8060]  ? rcu_read_unlock+0xa0/0xa0
[  188.300128][ T8060]  rtnetlink_rcv_msg+0x869/0xfa0
[  188.305068][ T8060]  ? lockdep_hardirqs_on+0x98/0x150
[  188.310290][ T8060]  ? rtnetlink_bind+0x80/0x80
[  188.314964][ T8060]  ? perf_trace_preemptirq_template+0xac/0x330
[  188.321121][ T8060]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  188.327102][ T8060]  ? lock_chain_count+0x20/0x20
[  188.331962][ T8060]  ? __local_bh_enable_ip+0x13a/0x1c0
[  188.337337][ T8060]  ? lockdep_hardirqs_on+0x98/0x150
[  188.342534][ T8060]  ? __local_bh_enable_ip+0x13a/0x1c0
[  188.347926][ T8060]  ? _local_bh_enable+0xa0/0xa0
[  188.352779][ T8060]  ? __dev_queue_xmit+0x265/0x3660
[  188.357886][ T8060]  ? __dev_queue_xmit+0x265/0x3660
[  188.362996][ T8060]  ? __dev_queue_xmit+0x1b2c/0x3660
[  188.368194][ T8060]  ? __dev_queue_xmit+0x265/0x3660
[  188.373304][ T8060]  ? ref_tracker_free+0x690/0x840
[  188.378325][ T8060]  netlink_rcv_skb+0x241/0x4d0
[  188.383086][ T8060]  ? rtnetlink_bind+0x80/0x80
[  188.387754][ T8060]  ? netlink_ack+0x1180/0x1180
[  188.392602][ T8060]  ? __lock_acquire+0x7d40/0x7d40
[  188.397625][ T8060]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.402819][ T8060]  netlink_unicast+0x751/0x8d0
[  188.407582][ T8060]  netlink_sendmsg+0x8d0/0xbf0
[  188.412354][ T8060]  ? netlink_getsockopt+0x590/0x590
[  188.417548][ T8060]  ? aa_sock_msg_perm+0x94/0x150
[  188.422585][ T8060]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  188.427951][ T8060]  ? security_socket_sendmsg+0x80/0xa0
[  188.433403][ T8060]  ? netlink_getsockopt+0x590/0x590
[  188.438598][ T8060]  ____sys_sendmsg+0x5ba/0x960
[  188.443359][ T8060]  ? __asan_memset+0x22/0x40
[  188.447948][ T8060]  ? __sys_sendmsg_sock+0x30/0x30
[  188.453064][ T8060]  ? __import_iovec+0x5f2/0x850
[  188.457913][ T8060]  ? import_iovec+0x73/0xa0
[  188.462408][ T8060]  ___sys_sendmsg+0x2a6/0x360
[  188.467073][ T8060]  ? get_pid_task+0x20/0x1e0
[  188.471660][ T8060]  ? __sys_sendmsg+0x2a0/0x2a0
[  188.476427][ T8060]  ? __lock_acquire+0x7d40/0x7d40
[  188.481469][ T8060]  __se_sys_sendmsg+0x1c2/0x2b0
[  188.486314][ T8060]  ? __x64_sys_sendmsg+0x80/0x80
[  188.491250][ T8060]  ? lockdep_hardirqs_on+0x98/0x150
[  188.496440][ T8060]  do_syscall_64+0x55/0xa0
[  188.500859][ T8060]  ? clear_bhb_loop+0x40/0x90
[  188.505527][ T8060]  ? clear_bhb_loop+0x40/0x90
[  188.510281][ T8060]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.516167][ T8060] RIP: 0033:0x7f062699c799
[  188.520586][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.540445][ T8060] RSP: 002b:00007f06277da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.548856][ T8060] RAX: ffffffffffffffda RBX: 00007f0626c15fa0 RCX: 00007f062699c799
[  188.556817][ T8060] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  188.564780][ T8060] RBP: 00007f06277da090 R08: 0000000000000000 R09: 0000000000000000
[  188.572740][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.580714][ T8060] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  188.588778][ T8060]  </TASK>
[  188.863683][ T8074] FAULT_INJECTION: forcing a failure.
[  188.863683][ T8074] name failslab, interval 1, probability 0, space 0, times 0
[  188.913306][ T8074] CPU: 1 PID: 8074 Comm: syz.0.780 Not tainted syzkaller #0
[  188.920654][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  188.930732][ T8074] Call Trace:
[  188.934048][ T8074]  <TASK>
[  188.937003][ T8074]  dump_stack_lvl+0x18c/0x250
[  188.941713][ T8074]  ? show_regs_print_info+0x20/0x20
[  188.946941][ T8074]  ? load_image+0x400/0x400
[  188.951475][ T8074]  ? verify_lock_unused+0x140/0x140
[  188.956706][ T8074]  should_fail_ex+0x39d/0x4d0
[  188.961413][ T8074]  should_failslab+0x9/0x20
[  188.965942][ T8074]  slab_pre_alloc_hook+0x59/0x310
[  188.971013][ T8074]  kmem_cache_alloc+0x5a/0x2d0
[  188.975801][ T8074]  ? skb_clone+0x1eb/0x370
[  188.980238][ T8074]  skb_clone+0x1eb/0x370
[  188.984607][ T8074]  __netlink_deliver_tap+0x41c/0x830
[  188.989921][ T8074]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.995121][ T8074]  netlink_deliver_tap+0x19c/0x1b0
[  189.000331][ T8074]  netlink_unicast+0x72c/0x8d0
[  189.005204][ T8074]  netlink_sendmsg+0x8d0/0xbf0
[  189.009970][ T8074]  ? netlink_getsockopt+0x590/0x590
[  189.015171][ T8074]  ? aa_sock_msg_perm+0x94/0x150
[  189.020102][ T8074]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  189.025395][ T8074]  ? security_socket_sendmsg+0x80/0xa0
[  189.030930][ T8074]  ? netlink_getsockopt+0x590/0x590
[  189.036127][ T8074]  ____sys_sendmsg+0x5ba/0x960
[  189.040887][ T8074]  ? __asan_memset+0x22/0x40
[  189.045469][ T8074]  ? __sys_sendmsg_sock+0x30/0x30
[  189.050477][ T8074]  ? __import_iovec+0x5f2/0x850
[  189.055319][ T8074]  ? import_iovec+0x73/0xa0
[  189.059809][ T8074]  ___sys_sendmsg+0x2a6/0x360
[  189.064473][ T8074]  ? get_pid_task+0x20/0x1e0
[  189.069075][ T8074]  ? __sys_sendmsg+0x2a0/0x2a0
[  189.073850][ T8074]  ? __lock_acquire+0x7d40/0x7d40
[  189.078881][ T8074]  __se_sys_sendmsg+0x1c2/0x2b0
[  189.083738][ T8074]  ? __x64_sys_sendmsg+0x80/0x80
[  189.088701][ T8074]  ? lockdep_hardirqs_on+0x98/0x150
[  189.093905][ T8074]  do_syscall_64+0x55/0xa0
[  189.098314][ T8074]  ? clear_bhb_loop+0x40/0x90
[  189.102986][ T8074]  ? clear_bhb_loop+0x40/0x90
[  189.107709][ T8074]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.113593][ T8074] RIP: 0033:0x7fc1cc59c799
[  189.118003][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.137686][ T8074] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.146098][ T8074] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  189.154059][ T8074] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003
[  189.162019][ T8074] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  189.170016][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.177979][ T8074] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  189.185969][ T8074]  </TASK>
[  189.206695][ T8074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.780'.
[  189.398526][ T8085] netlink: 168 bytes leftover after parsing attributes in process `syz.0.785'.
[  189.953528][ T8100] : port 1(ip6gretap0) entered blocking state
[  189.960138][ T8100] : port 1(ip6gretap0) entered disabled state
[  189.966478][ T8100] ip6gretap0: entered allmulticast mode
[  189.991650][ T8100] ip6gretap0: entered promiscuous mode
[  190.058751][ T8100] ip6gretap0: left allmulticast mode
[  190.064665][ T8100] ip6gretap0: left promiscuous mode
[  190.080697][ T8100] : port 1(ip6gretap0) entered disabled state
[  190.227285][ T8109] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.793'.
[  190.302488][ T8109] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  190.358945][ T8109] CPU: 1 PID: 8109 Comm: syz.2.793 Not tainted syzkaller #0
[  190.366391][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  190.376479][ T8109] Call Trace:
[  190.379807][ T8109]  <TASK>
[  190.382762][ T8109]  dump_stack_lvl+0x18c/0x250
[  190.387487][ T8109]  ? show_regs_print_info+0x20/0x20
[  190.392725][ T8109]  ? load_image+0x400/0x400
[  190.397281][ T8109]  sysfs_warn_dup+0x8e/0xa0
[  190.401815][ T8109]  sysfs_do_create_link_sd+0xc0/0x110
[  190.407228][ T8109]  device_add_class_symlinks+0x1cf/0x240
[  190.412895][ T8109]  device_add+0x507/0xc20
[  190.417232][ T8109]  wiphy_register+0x1dad/0x2ae0
[  190.422092][ T8109]  ? cfg80211_event_work+0x40/0x40
[  190.427195][ T8109]  ? minstrel_ht_alloc+0x88a/0x990
[  190.432398][ T8109]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  190.438476][ T8109]  ieee80211_register_hw+0x3464/0x4250
[  190.443951][ T8109]  ? ieee80211_tasklet_handler+0x20/0x20
[  190.449575][ T8109]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  190.455466][ T8109]  ? __debug_object_init+0xec/0x450
[  190.460671][ T8109]  ? __asan_memset+0x22/0x40
[  190.465259][ T8109]  ? __hrtimer_init+0x186/0x270
[  190.470114][ T8109]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  190.475861][ T8109]  ? mac80211_hwsim_free+0x220/0x220
[  190.481140][ T8109]  ? rcu_is_watching+0x15/0xb0
[  190.485902][ T8109]  ? kstrndup+0xbd/0x140
[  190.490147][ T8109]  hwsim_new_radio_nl+0xdc9/0x1a90
[  190.495258][ T8109]  ? __nla_validate+0x50/0x50
[  190.499953][ T8109]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  190.506384][ T8109]  ? __nla_parse+0x40/0x50
[  190.510890][ T8109]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  190.517221][ T8109]  genl_family_rcv_msg_doit+0x211/0x310
[  190.522763][ T8109]  ? end_current_label_crit_section+0x170/0x170
[  190.529010][ T8109]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  190.534923][ T8109]  ? bpf_lsm_capable+0x9/0x10
[  190.539605][ T8109]  ? security_capable+0x89/0xb0
[  190.544467][ T8109]  genl_rcv_msg+0x619/0x7a0
[  190.548976][ T8109]  ? genl_bind+0x360/0x360
[  190.553385][ T8109]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  190.559796][ T8109]  ? lockdep_hardirqs_on+0x98/0x150
[  190.564994][ T8109]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  190.571149][ T8109]  netlink_rcv_skb+0x241/0x4d0
[  190.575912][ T8109]  ? genl_bind+0x360/0x360
[  190.580325][ T8109]  ? netlink_ack+0x1180/0x1180
[  190.585094][ T8109]  ? __lock_acquire+0x7d40/0x7d40
[  190.590125][ T8109]  ? down_read+0x1ac/0x2e0
[  190.594540][ T8109]  genl_rcv+0x28/0x40
[  190.598537][ T8109]  netlink_unicast+0x751/0x8d0
[  190.603352][ T8109]  netlink_sendmsg+0x8d0/0xbf0
[  190.608215][ T8109]  ? lockdep_hardirqs_on+0x98/0x150
[  190.613423][ T8109]  ? netlink_getsockopt+0x590/0x590
[  190.618631][ T8109]  ? __sanitizer_cov_trace_pc+0x5c/0x60
[  190.624267][ T8109]  ? security_socket_sendmsg+0x80/0xa0
[  190.629723][ T8109]  ? netlink_getsockopt+0x590/0x590
[  190.634922][ T8109]  ____sys_sendmsg+0x5ba/0x960
[  190.639686][ T8109]  ? __asan_memset+0x22/0x40
[  190.644275][ T8109]  ? __sys_sendmsg_sock+0x30/0x30
[  190.649311][ T8109]  ? __import_iovec+0x5f2/0x850
[  190.654166][ T8109]  ? import_iovec+0x73/0xa0
[  190.658664][ T8109]  ___sys_sendmsg+0x2a6/0x360
[  190.663427][ T8109]  ? __sys_sendmsg+0x2a0/0x2a0
[  190.668209][ T8109]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  190.674463][ T8109]  __se_sys_sendmsg+0x1c2/0x2b0
[  190.679310][ T8109]  ? __x64_sys_sendmsg+0x80/0x80
[  190.684252][ T8109]  ? lockdep_hardirqs_on+0x98/0x150
[  190.689449][ T8109]  do_syscall_64+0x55/0xa0
[  190.694037][ T8109]  ? clear_bhb_loop+0x40/0x90
[  190.698706][ T8109]  ? clear_bhb_loop+0x40/0x90
[  190.703376][ T8109]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  190.709263][ T8109] RIP: 0033:0x7f062699c799
[  190.713674][ T8109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.733377][ T8109] RSP: 002b:00007f06277da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.741786][ T8109] RAX: ffffffffffffffda RBX: 00007f0626c15fa0 RCX: 00007f062699c799
[  190.749836][ T8109] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  190.757801][ T8109] RBP: 00007f0626a32c99 R08: 0000000000000000 R09: 0000000000000000
[  190.765766][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.773816][ T8109] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  190.781800][ T8109]  </TASK>
[  191.224822][ T8120] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  191.559626][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  191.560418][ T5767] Bluetooth: hci3: command 0x0406 tx timeout
[  191.565835][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[  191.575017][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  192.011114][ T8148] netlink: 14 bytes leftover after parsing attributes in process `syz.3.812'.
[  192.034452][ T8148] netlink: get zone limit has 4 unknown bytes
[  192.058484][ T8150] FAULT_INJECTION: forcing a failure.
[  192.058484][ T8150] name failslab, interval 1, probability 0, space 0, times 0
[  192.079702][ T8150] CPU: 0 PID: 8150 Comm: syz.1.813 Not tainted syzkaller #0
[  192.087045][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  192.097114][ T8150] Call Trace:
[  192.100459][ T8150]  <TASK>
[  192.103402][ T8150]  dump_stack_lvl+0x18c/0x250
[  192.108266][ T8150]  ? show_regs_print_info+0x20/0x20
[  192.113586][ T8150]  ? load_image+0x400/0x400
[  192.118202][ T8150]  ? __lock_acquire+0x7d40/0x7d40
[  192.123252][ T8150]  should_fail_ex+0x39d/0x4d0
[  192.127958][ T8150]  should_failslab+0x9/0x20
[  192.132666][ T8150]  slab_pre_alloc_hook+0x59/0x310
[  192.137800][ T8150]  ? __lock_acquire+0x7d40/0x7d40
[  192.142851][ T8150]  kmem_cache_alloc+0x5a/0x2d0
[  192.147641][ T8150]  ? security_file_alloc+0x34/0x120
[  192.152867][ T8150]  security_file_alloc+0x34/0x120
[  192.157915][ T8150]  init_file+0x94/0x1f0
[  192.162099][ T8150]  alloc_empty_file+0xb7/0x1d0
[  192.166887][ T8150]  alloc_file+0x5c/0x600
[  192.171162][ T8150]  alloc_file_pseudo+0x184/0x210
[  192.176119][ T8150]  ? alloc_empty_backing_file+0xe0/0xe0
[  192.181685][ T8150]  ? alloc_fd+0x58f/0x630
[  192.186042][ T8150]  anon_inode_getfd+0xca/0x1c0
[  192.190833][ T8150]  btf_new_fd+0x856/0x9f0
[  192.195195][ T8150]  ? bpf_btf_show_fdinfo+0x80/0x80
[  192.200331][ T8150]  ? capable+0x88/0xe0
[  192.204429][ T8150]  __sys_bpf+0x670/0x890
[  192.208690][ T8150]  ? bpf_link_show_fdinfo+0x390/0x390
[  192.214095][ T8150]  ? lock_chain_count+0x20/0x20
[  192.218967][ T8150]  __x64_sys_bpf+0x7c/0x90
[  192.223397][ T8150]  do_syscall_64+0x55/0xa0
[  192.227916][ T8150]  ? clear_bhb_loop+0x40/0x90
[  192.232690][ T8150]  ? clear_bhb_loop+0x40/0x90
[  192.237513][ T8150]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.243438][ T8150] RIP: 0033:0x7fe1d279c799
[  192.247961][ T8150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.267595][ T8150] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  192.276025][ T8150] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  192.284115][ T8150] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[  192.292102][ T8150] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  192.300096][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  192.308080][ T8150] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  192.316098][ T8150]  </TASK>
[  192.455678][ T8153] netlink: 'syz.1.814': attribute type 21 has an invalid length.
[  192.483669][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.814'.
[  193.017832][ T8162] netlink: 'syz.0.818': attribute type 25 has an invalid length.
[  193.028357][ T8162] netlink: 'syz.0.818': attribute type 9 has an invalid length.
[  194.357972][ T8187] dvmrp1: tun_chr_ioctl cmd 1074812118
[  194.379837][ T8188] dvmrp1: tun_chr_ioctl cmd 2147767517
[  194.646123][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.652761][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  195.736154][ T8220] netlink: 'syz.3.841': attribute type 10 has an invalid length.
[  195.767833][ T8220] netlink: 2 bytes leftover after parsing attributes in process `syz.3.841'.
[  195.803233][ T8220] bridge0: port 3(hsr0) entered blocking state
[  195.837437][ T8220] bridge0: port 3(hsr0) entered disabled state
[  195.914400][ T8220] bridge0: port 3(hsr0) entered blocking state
[  195.923493][ T8220] bridge0: port 3(hsr0) entered forwarding state
[  196.471379][ T8234] netlink: 'syz.3.844': attribute type 10 has an invalid length.
[  197.704819][ T8254] netlink: 188 bytes leftover after parsing attributes in process `syz.3.855'.
[  199.142604][ T8293] netlink: 'syz.0.869': attribute type 10 has an invalid length.
[  199.152297][ T8293] hsr0: left promiscuous mode
[  199.157347][ T8293] hsr0: left allmulticast mode
[  199.162863][ T8293] hsr_slave_0: left allmulticast mode
[  199.168583][ T8293] hsr_slave_1: left allmulticast mode
[  199.318202][ T8295] netlink: 'syz.1.870': attribute type 10 has an invalid length.
[  199.330762][ T8295] netlink: 2 bytes leftover after parsing attributes in process `syz.1.870'.
[  199.346847][ T8295] hsr0: entered promiscuous mode
[  199.395773][ T8295] bridge0: port 3(hsr0) entered blocking state
[  199.408008][ T8295] bridge0: port 3(hsr0) entered disabled state
[  199.426857][ T8295] hsr0: entered allmulticast mode
[  199.434721][ T8295] hsr_slave_0: entered allmulticast mode
[  199.441547][ T8295] hsr_slave_1: entered allmulticast mode
[  199.499125][ T8295] bridge0: port 3(hsr0) entered blocking state
[  199.507479][ T8295] bridge0: port 3(hsr0) entered forwarding state
[  200.235135][ T8322] netlink: 'syz.1.881': attribute type 10 has an invalid length.
[  201.010190][ T8335] netlink: 'syz.2.885': attribute type 10 has an invalid length.
[  201.018226][ T8335] netlink: 2 bytes leftover after parsing attributes in process `syz.2.885'.
[  201.049629][ T8335] hsr0: entered promiscuous mode
[  201.100691][ T8335] bridge0: port 3(hsr0) entered blocking state
[  201.108295][ T8335] bridge0: port 3(hsr0) entered disabled state
[  201.127239][ T8335] hsr0: entered allmulticast mode
[  201.144084][ T8335] hsr_slave_0: entered allmulticast mode
[  201.165208][ T8335] hsr_slave_1: entered allmulticast mode
[  201.452182][ T8346] netlink: 'syz.2.890': attribute type 6 has an invalid length.
[  202.664433][ T8368] netlink: 'syz.2.896': attribute type 10 has an invalid length.
[  203.162119][ T8389] FAULT_INJECTION: forcing a failure.
[  203.162119][ T8389] name failslab, interval 1, probability 0, space 0, times 0
[  203.191042][ T8389] CPU: 0 PID: 8389 Comm: syz.1.903 Not tainted syzkaller #0
[  203.198390][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  203.208482][ T8389] Call Trace:
[  203.211779][ T8389]  <TASK>
[  203.214736][ T8389]  dump_stack_lvl+0x18c/0x250
[  203.219447][ T8389]  ? sctp_sendmsg+0x1575/0x28c0
[  203.224322][ T8389]  ? ___sys_sendmsg+0x2a6/0x360
[  203.229201][ T8389]  ? show_regs_print_info+0x20/0x20
[  203.234433][ T8389]  ? load_image+0x400/0x400
[  203.238975][ T8389]  should_fail_ex+0x39d/0x4d0
[  203.243700][ T8389]  should_failslab+0x9/0x20
[  203.248236][ T8389]  slab_pre_alloc_hook+0x59/0x310
[  203.253365][ T8389]  ? sctp_add_bind_addr+0x8c/0x360
[  203.258668][ T8389]  __kmem_cache_alloc_node+0x53/0x250
[  203.264061][ T8389]  ? sctp_add_bind_addr+0x8c/0x360
[  203.269196][ T8389]  kmalloc_trace+0x2a/0xe0
[  203.273627][ T8389]  sctp_add_bind_addr+0x8c/0x360
[  203.278582][ T8389]  sctp_copy_local_addr_list+0x315/0x4f0
[  203.284252][ T8389]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  203.289986][ T8389]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  203.296084][ T8389]  ? sctp_v4_is_any+0x35/0x60
[  203.300766][ T8389]  ? sctp_copy_one_addr+0x8c/0x350
[  203.305917][ T8389]  sctp_bind_addr_copy+0xb3/0x3c0
[  203.311056][ T8389]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  203.317407][ T8389]  sctp_connect_new_asoc+0x2f9/0x6a0
[  203.322711][ T8389]  ? __sctp_connect+0xd80/0xd80
[  203.327570][ T8389]  ? __local_bh_enable_ip+0x13a/0x1c0
[  203.333094][ T8389]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  203.338642][ T8389]  ? security_sctp_bind_connect+0x89/0xb0
[  203.344377][ T8389]  sctp_sendmsg+0x1575/0x28c0
[  203.349070][ T8389]  ? sctp_getsockopt+0xb60/0xb60
[  203.354010][ T8389]  ? aa_sk_perm+0x83c/0x970
[  203.358515][ T8389]  ? aa_af_perm+0x330/0x330
[  203.363019][ T8389]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  203.369428][ T8389]  ? sock_rps_record_flow+0x19/0x3f0
[  203.374725][ T8389]  ? inet_sendmsg+0xe9/0x2f0
[  203.379308][ T8389]  ? inet_send_prepare+0x260/0x260
[  203.384415][ T8389]  ____sys_sendmsg+0x5ba/0x960
[  203.389177][ T8389]  ? __lock_acquire+0x7d40/0x7d40
[  203.394195][ T8389]  ? __asan_memset+0x22/0x40
[  203.398782][ T8389]  ? __sys_sendmsg_sock+0x30/0x30
[  203.403806][ T8389]  ? __import_iovec+0x5f2/0x850
[  203.408657][ T8389]  ? import_iovec+0x73/0xa0
[  203.413244][ T8389]  ___sys_sendmsg+0x2a6/0x360
[  203.417928][ T8389]  ? __sys_sendmsg+0x2a0/0x2a0
[  203.422706][ T8389]  ? __lock_acquire+0x7d40/0x7d40
[  203.427758][ T8389]  __se_sys_sendmsg+0x1c2/0x2b0
[  203.432627][ T8389]  ? __x64_sys_sendmsg+0x80/0x80
[  203.437572][ T8389]  ? lockdep_hardirqs_on+0x98/0x150
[  203.442766][ T8389]  do_syscall_64+0x55/0xa0
[  203.447179][ T8389]  ? clear_bhb_loop+0x40/0x90
[  203.451848][ T8389]  ? clear_bhb_loop+0x40/0x90
[  203.456545][ T8389]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.462432][ T8389] RIP: 0033:0x7fe1d279c799
[  203.466842][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.486531][ T8389] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.494937][ T8389] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  203.502899][ T8389] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000004
[  203.510957][ T8389] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  203.518925][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  203.526978][ T8389] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  203.534955][ T8389]  </TASK>
[  203.932870][ T8410] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.911'.
[  204.151674][ T8416] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.912'.
[  204.179391][ T8416] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.912'.
[  204.400174][ T8412] syzkaller0: entered promiscuous mode
[  204.418279][ T8412] syzkaller0: entered allmulticast mode
[  206.266961][ T8432] netlink: 'syz.3.917': attribute type 10 has an invalid length.
[  206.646313][ T8450] netlink: 'syz.1.923': attribute type 9 has an invalid length.
[  206.687075][ T8456] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.923'.
[  206.710477][ T8450] netlink: 399 bytes leftover after parsing attributes in process `syz.1.923'.
[  206.949202][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.957146][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.985508][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.996898][ T8458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.387366][ T8482] FAULT_INJECTION: forcing a failure.
[  207.387366][ T8482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.402066][ T8482] CPU: 0 PID: 8482 Comm: syz.2.934 Not tainted syzkaller #0
[  207.409569][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  207.419634][ T8482] Call Trace:
[  207.422909][ T8482]  <TASK>
[  207.425917][ T8482]  dump_stack_lvl+0x18c/0x250
[  207.430603][ T8482]  ? show_regs_print_info+0x20/0x20
[  207.435819][ T8482]  ? load_image+0x400/0x400
[  207.440327][ T8482]  ? __might_fault+0xaa/0x120
[  207.445045][ T8482]  ? __lock_acquire+0x7d40/0x7d40
[  207.448866][ T8485] netlink: 'syz.1.933': attribute type 10 has an invalid length.
[  207.450071][ T8482]  should_fail_ex+0x39d/0x4d0
[  207.450104][ T8482]  _copy_from_user+0x2f/0xe0
[  207.450124][ T8482]  __sys_bpf+0x23e/0x890
[  207.450144][ T8482]  ? bpf_link_show_fdinfo+0x390/0x390
[  207.450174][ T8482]  ? lock_chain_count+0x20/0x20
[  207.450201][ T8482]  __x64_sys_bpf+0x7c/0x90
[  207.450218][ T8482]  do_syscall_64+0x55/0xa0
[  207.450240][ T8482]  ? clear_bhb_loop+0x40/0x90
[  207.495129][ T8482]  ? clear_bhb_loop+0x40/0x90
[  207.499820][ T8482]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.505800][ T8482] RIP: 0033:0x7f062699c799
[  207.510209][ T8482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.529820][ T8482] RSP: 002b:00007f06277da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  207.538224][ T8482] RAX: ffffffffffffffda RBX: 00007f0626c15fa0 RCX: 00007f062699c799
[  207.546186][ T8482] RDX: 0000000000000023 RSI: 0000200000000400 RDI: 0000000000000005
[  207.554150][ T8482] RBP: 00007f06277da090 R08: 0000000000000000 R09: 0000000000000000
[  207.562110][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.570075][ T8482] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  207.578048][ T8482]  </TASK>
[  208.193189][ T8491] netlink: 'syz.2.936': attribute type 13 has an invalid length.
[  208.203427][ T8491] netlink: 152 bytes leftover after parsing attributes in process `syz.2.936'.
[  208.218915][ T8491] syz_tun: refused to change device tx_queue_len
[  208.226560][ T8491] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  208.672602][ T8503] netlink: 'syz.2.941': attribute type 28 has an invalid length.
[  208.690806][ T8503] netlink: 'syz.2.941': attribute type 29 has an invalid length.
[  208.698583][ T8503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.941'.
[  208.753727][ T8503] netlink: 'syz.2.941': attribute type 39 has an invalid length.
[  208.848992][ T8509] netlink: 'syz.1.943': attribute type 3 has an invalid length.
[  208.884609][ T8509] netlink: 'syz.1.943': attribute type 8 has an invalid length.
[  208.886129][ T8513] netlink: 'syz.2.945': attribute type 29 has an invalid length.
[  208.918016][ T8509] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.943'.
[  210.479604][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  210.576656][ T8553] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.957'.
[  210.778683][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.793065][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.808850][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.817306][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.698404][ T8590] validate_nla: 6 callbacks suppressed
[  211.698420][ T8590] netlink: 'syz.3.974': attribute type 10 has an invalid length.
[  211.735501][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'.
[  212.090225][ T8605] netlink: 'syz.1.982': attribute type 10 has an invalid length.
[  212.303514][ T8608] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  212.311241][ T8608] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  213.087544][ T8641] netlink: 'syz.0.993': attribute type 1 has an invalid length.
[  213.116536][ T8641] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.993'.
[  213.428824][ T8652] netlink: 'syz.1.997': attribute type 9 has an invalid length.
[  213.449677][ T8652] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.997'.
[  214.146353][ T8666] netlink: 'syz.2.1002': attribute type 10 has an invalid length.
[  214.408540][ T8669] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1004'.
[  214.704120][ T8680] FAULT_INJECTION: forcing a failure.
[  214.704120][ T8680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.734095][ T8680] CPU: 0 PID: 8680 Comm: syz.0.1008 Not tainted syzkaller #0
[  214.741602][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  214.751688][ T8680] Call Trace:
[  214.754986][ T8680]  <TASK>
[  214.757940][ T8680]  dump_stack_lvl+0x18c/0x250
[  214.762654][ T8680]  ? show_regs_print_info+0x20/0x20
[  214.767883][ T8680]  ? load_image+0x400/0x400
[  214.772424][ T8680]  ? __lock_acquire+0x7d40/0x7d40
[  214.777576][ T8680]  ? __virt_addr_valid+0x18c/0x540
[  214.782714][ T8680]  should_fail_ex+0x39d/0x4d0
[  214.787403][ T8680]  _copy_from_user+0x2f/0xe0
[  214.792002][ T8680]  bpf_test_init+0xde/0x140
[  214.796597][ T8680]  bpf_prog_test_run_xdp+0x4d1/0x10e0
[  214.801981][ T8680]  ? dev_put+0x80/0x80
[  214.806067][ T8680]  ? dev_put+0x80/0x80
[  214.810136][ T8680]  bpf_prog_test_run+0x321/0x390
[  214.815075][ T8680]  __sys_bpf+0x49d/0x890
[  214.819406][ T8680]  ? bpf_link_show_fdinfo+0x390/0x390
[  214.824789][ T8680]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  214.831048][ T8680]  __x64_sys_bpf+0x7c/0x90
[  214.835554][ T8680]  do_syscall_64+0x55/0xa0
[  214.839970][ T8680]  ? clear_bhb_loop+0x40/0x90
[  214.844642][ T8680]  ? clear_bhb_loop+0x40/0x90
[  214.849318][ T8680]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.855207][ T8680] RIP: 0033:0x7fc1cc59c799
[  214.859617][ T8680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.879222][ T8680] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  214.887632][ T8680] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  214.895598][ T8680] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  214.903562][ T8680] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  214.911526][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.919505][ T8680] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  214.927491][ T8680]  </TASK>
[  215.575694][ T8702] netlink: 'syz.3.1017': attribute type 10 has an invalid length.
[  215.634757][ T8705] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1017'.
[  215.870267][ T8709] netlink: 'syz.0.1020': attribute type 10 has an invalid length.
[  216.485699][   T12] tipc: Subscription rejected, illegal request
[  217.297581][ T8739] FAULT_INJECTION: forcing a failure.
[  217.297581][ T8739] name failslab, interval 1, probability 0, space 0, times 0
[  217.349571][ T8739] CPU: 1 PID: 8739 Comm: syz.1.1031 Not tainted syzkaller #0
[  217.357043][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  217.367153][ T8739] Call Trace:
[  217.370572][ T8739]  <TASK>
[  217.373555][ T8739]  dump_stack_lvl+0x18c/0x250
[  217.378305][ T8739]  ? show_regs_print_info+0x20/0x20
[  217.383570][ T8739]  ? load_image+0x400/0x400
[  217.388140][ T8739]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  217.394186][ T8739]  ? lock_chain_count+0x20/0x20
[  217.399114][ T8739]  should_fail_ex+0x39d/0x4d0
[  217.403875][ T8739]  should_failslab+0x9/0x20
[  217.408431][ T8739]  slab_pre_alloc_hook+0x59/0x310
[  217.413514][ T8739]  ? sctp_add_bind_addr+0x8c/0x360
[  217.418689][ T8739]  __kmem_cache_alloc_node+0x53/0x250
[  217.424159][ T8739]  ? sctp_add_bind_addr+0x8c/0x360
[  217.429322][ T8739]  kmalloc_trace+0x2a/0xe0
[  217.433811][ T8739]  sctp_add_bind_addr+0x8c/0x360
[  217.438832][ T8739]  sctp_copy_local_addr_list+0x315/0x4f0
[  217.444624][ T8739]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  217.450415][ T8739]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  217.456551][ T8739]  ? sctp_v4_is_any+0x35/0x60
[  217.461277][ T8739]  ? sctp_copy_one_addr+0x8c/0x350
[  217.466430][ T8739]  sctp_bind_addr_copy+0xb3/0x3c0
[  217.471711][ T8739]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  217.478068][ T8739]  sctp_connect_new_asoc+0x2f9/0x6a0
[  217.483375][ T8739]  ? __sctp_connect+0xd80/0xd80
[  217.488248][ T8739]  ? sctp_sendmsg+0xbc7/0x28c0
[  217.493027][ T8739]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  217.498604][ T8739]  ? security_sctp_bind_connect+0x89/0xb0
[  217.504525][ T8739]  sctp_sendmsg+0x1575/0x28c0
[  217.509256][ T8739]  ? sctp_getsockopt+0xb60/0xb60
[  217.514233][ T8739]  ? aa_sk_perm+0x83c/0x970
[  217.518835][ T8739]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  217.525000][ T8739]  ? lockdep_hardirqs_on+0x98/0x150
[  217.530219][ T8739]  ? aa_af_perm+0x330/0x330
[  217.534737][ T8739]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  217.541177][ T8739]  ? sock_rps_record_flow+0x19/0x3f0
[  217.546484][ T8739]  ? inet_sendmsg+0xe9/0x2f0
[  217.551090][ T8739]  ? inet_send_prepare+0x260/0x260
[  217.556218][ T8739]  ____sys_sendmsg+0x5ba/0x960
[  217.561015][ T8739]  ? __asan_memset+0x22/0x40
[  217.565712][ T8739]  ? __sys_sendmsg_sock+0x30/0x30
[  217.570745][ T8739]  ? __import_iovec+0x5f2/0x850
[  217.575719][ T8739]  ? import_iovec+0x73/0xa0
[  217.580242][ T8739]  ___sys_sendmsg+0x2a6/0x360
[  217.584944][ T8739]  ? __sys_sendmsg+0x2a0/0x2a0
[  217.589772][ T8739]  ? __lock_acquire+0x7d40/0x7d40
[  217.594910][ T8739]  __se_sys_sendmsg+0x1c2/0x2b0
[  217.599784][ T8739]  ? __x64_sys_sendmsg+0x80/0x80
[  217.604778][ T8739]  ? lockdep_hardirqs_on+0x98/0x150
[  217.610089][ T8739]  do_syscall_64+0x55/0xa0
[  217.614517][ T8739]  ? clear_bhb_loop+0x40/0x90
[  217.619202][ T8739]  ? clear_bhb_loop+0x40/0x90
[  217.623896][ T8739]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.629901][ T8739] RIP: 0033:0x7fe1d279c799
[  217.634330][ T8739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.653946][ T8739] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.662381][ T8739] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  217.670449][ T8739] RDX: 0000000004000040 RSI: 00002000000029c0 RDI: 0000000000000006
[  217.678432][ T8739] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  217.686410][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  217.694456][ T8739] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  217.702477][ T8739]  </TASK>
[  218.256485][ T8752] netlink: 'syz.3.1036': attribute type 10 has an invalid length.
[  219.482895][ T8800] FAULT_INJECTION: forcing a failure.
[  219.482895][ T8800] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  219.525895][ T8800] CPU: 1 PID: 8800 Comm: syz.1.1052 Not tainted syzkaller #0
[  219.533326][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  219.543405][ T8800] Call Trace:
[  219.546692][ T8800]  <TASK>
[  219.549678][ T8800]  dump_stack_lvl+0x18c/0x250
[  219.554389][ T8800]  ? show_regs_print_info+0x20/0x20
[  219.559617][ T8800]  ? load_image+0x400/0x400
[  219.564497][ T8800]  ? __lock_acquire+0x7d40/0x7d40
[  219.569548][ T8800]  should_fail_ex+0x39d/0x4d0
[  219.574280][ T8800]  prepare_alloc_pages+0x1e2/0x5f0
[  219.579506][ T8800]  __alloc_pages+0x134/0x460
[  219.584093][ T8800]  ? zone_statistics+0x170/0x170
[  219.589027][ T8800]  ? alloc_pages+0x4dc/0x740
[  219.593605][ T8800]  ? do_raw_spin_unlock+0x121/0x230
[  219.598794][ T8800]  __get_free_pages+0xc/0x30
[  219.603372][ T8800]  kasan_populate_vmalloc_pte+0x35/0x100
[  219.609002][ T8800]  __apply_to_page_range+0x860/0xdd0
[  219.614293][ T8800]  ? kasan_populate_vmalloc+0x70/0x70
[  219.619660][ T8800]  ? apply_to_page_range+0x50/0x50
[  219.624769][ T8800]  ? do_raw_spin_unlock+0x121/0x230
[  219.629968][ T8800]  alloc_vmap_area+0x1d0c/0x1e30
[  219.634915][ T8800]  ? vm_map_ram+0xcb0/0xcb0
[  219.639439][ T8800]  ? rcu_is_watching+0x15/0xb0
[  219.644203][ T8800]  __get_vm_area_node+0x162/0x370
[  219.649231][ T8800]  __vmalloc_node_range+0x36e/0x1330
[  219.654511][ T8800]  ? bloom_map_alloc+0x22a/0x470
[  219.659455][ T8800]  ? end_current_label_crit_section+0x170/0x170
[  219.665695][ T8800]  ? free_vm_area+0x50/0x50
[  219.670196][ T8800]  bpf_map_area_alloc+0xf1/0x110
[  219.675128][ T8800]  ? bloom_map_alloc+0x22a/0x470
[  219.680063][ T8800]  bloom_map_alloc+0x22a/0x470
[  219.684836][ T8800]  map_create+0x877/0x12f0
[  219.689243][ T8800]  ? bpf_lsm_bpf+0x9/0x10
[  219.693566][ T8800]  __sys_bpf+0x651/0x890
[  219.697798][ T8800]  ? bpf_link_show_fdinfo+0x390/0x390
[  219.703170][ T8800]  ? lock_chain_count+0x20/0x20
[  219.708018][ T8800]  __x64_sys_bpf+0x7c/0x90
[  219.712452][ T8800]  do_syscall_64+0x55/0xa0
[  219.716871][ T8800]  ? clear_bhb_loop+0x40/0x90
[  219.721540][ T8800]  ? clear_bhb_loop+0x40/0x90
[  219.726204][ T8800]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.732103][ T8800] RIP: 0033:0x7fe1d279c799
[  219.736567][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.756273][ T8800] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  219.764684][ T8800] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  219.772646][ T8800] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000
[  219.780642][ T8800] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  219.788606][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  219.796568][ T8800] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  219.804586][ T8800]  </TASK>
[  220.207040][ T8809] netlink: 'syz.0.1056': attribute type 10 has an invalid length.
[  221.184866][ T8840] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  221.804778][ T8862] netlink: 'syz.2.1075': attribute type 10 has an invalid length.
[  222.969982][ T8868] syz.1.1077 (8868) used greatest stack depth: 18856 bytes left
[  224.155119][ T8914] FAULT_INJECTION: forcing a failure.
[  224.155119][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.169528][ T8914] CPU: 1 PID: 8914 Comm: syz.0.1093 Not tainted syzkaller #0
[  224.176950][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  224.187036][ T8914] Call Trace:
[  224.190342][ T8914]  <TASK>
[  224.193302][ T8914]  dump_stack_lvl+0x18c/0x250
[  224.198023][ T8914]  ? show_regs_print_info+0x20/0x20
[  224.203269][ T8914]  ? load_image+0x400/0x400
[  224.207818][ T8914]  ? __might_fault+0xaa/0x120
[  224.212531][ T8914]  ? __lock_acquire+0x7d40/0x7d40
[  224.217592][ T8914]  should_fail_ex+0x39d/0x4d0
[  224.222400][ T8914]  _copy_from_user+0x2f/0xe0
[  224.227019][ T8914]  ___sys_sendmsg+0x1c7/0x360
[  224.231829][ T8914]  ? __sys_sendmsg+0x2a0/0x2a0
[  224.236647][ T8914]  ? __lock_acquire+0x7d40/0x7d40
[  224.241752][ T8914]  __se_sys_sendmsg+0x1c2/0x2b0
[  224.246610][ T8914]  ? __x64_sys_sendmsg+0x80/0x80
[  224.251572][ T8914]  ? lockdep_hardirqs_on+0x98/0x150
[  224.256783][ T8914]  do_syscall_64+0x55/0xa0
[  224.261205][ T8914]  ? clear_bhb_loop+0x40/0x90
[  224.265883][ T8914]  ? clear_bhb_loop+0x40/0x90
[  224.270561][ T8914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.276455][ T8914] RIP: 0033:0x7fc1cc59c799
[  224.280885][ T8914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.300582][ T8914] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.308996][ T8914] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  224.316973][ T8914] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  224.325028][ T8914] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  224.333090][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.341144][ T8914] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  224.349134][ T8914]  </TASK>
[  225.076528][ T8938] FAULT_INJECTION: forcing a failure.
[  225.076528][ T8938] name failslab, interval 1, probability 0, space 0, times 0
[  225.132182][ T8938] CPU: 1 PID: 8938 Comm: syz.2.1101 Not tainted syzkaller #0
[  225.139618][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  225.149709][ T8938] Call Trace:
[  225.153012][ T8938]  <TASK>
[  225.155959][ T8938]  dump_stack_lvl+0x18c/0x250
[  225.160665][ T8938]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  225.166851][ T8938]  ? show_regs_print_info+0x20/0x20
[  225.172076][ T8938]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  225.178260][ T8938]  ? dump_stack+0x9/0x20
[  225.182537][ T8938]  should_fail_ex+0x39d/0x4d0
[  225.187246][ T8938]  should_failslab+0x9/0x20
[  225.191791][ T8938]  slab_pre_alloc_hook+0x59/0x310
[  225.196853][ T8938]  ? bpf_prog_test_run_skb+0x238/0x12b0
[  225.202405][ T8938]  ? bpf_prog_test_run_skb+0x238/0x12b0
[  225.208126][ T8938]  __kmem_cache_alloc_node+0x53/0x250
[  225.213514][ T8938]  ? bpf_prog_test_run_skb+0x238/0x12b0
[  225.219070][ T8938]  __kmalloc+0xa4/0x230
[  225.223243][ T8938]  bpf_prog_test_run_skb+0x238/0x12b0
[  225.228607][ T8938]  ? lockdep_hardirqs_on+0x98/0x150
[  225.233800][ T8938]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  225.239957][ T8938]  ? cpu_online+0x60/0x60
[  225.244281][ T8938]  bpf_prog_test_run+0x321/0x390
[  225.249224][ T8938]  __sys_bpf+0x49d/0x890
[  225.253462][ T8938]  ? bpf_link_show_fdinfo+0x390/0x390
[  225.258867][ T8938]  ? lock_chain_count+0x20/0x20
[  225.263810][ T8938]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  225.269792][ T8938]  __x64_sys_bpf+0x7c/0x90
[  225.274205][ T8938]  do_syscall_64+0x55/0xa0
[  225.278730][ T8938]  ? clear_bhb_loop+0x40/0x90
[  225.283412][ T8938]  ? clear_bhb_loop+0x40/0x90
[  225.288094][ T8938]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.294163][ T8938] RIP: 0033:0x7f062699c799
[  225.298742][ T8938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.318518][ T8938] RSP: 002b:00007f06277da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  225.326946][ T8938] RAX: ffffffffffffffda RBX: 00007f0626c15fa0 RCX: 00007f062699c799
[  225.334917][ T8938] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  225.342920][ T8938] RBP: 00007f06277da090 R08: 0000000000000000 R09: 0000000000000000
[  225.350895][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.358871][ T8938] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  225.366852][ T8938]  </TASK>
[  227.709255][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1109'.
[  227.733706][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  228.034048][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1113'.
[  228.093199][ T8973] netlink: 'syz.1.1114': attribute type 29 has an invalid length.
[  228.123272][ T8978] netlink: 'syz.3.1112': attribute type 3 has an invalid length.
[  228.143998][ T8973] netlink: 'syz.1.1114': attribute type 3 has an invalid length.
[  228.173067][ T8973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1114'.
[  228.189382][ T8978] netlink: 'syz.3.1112': attribute type 1 has an invalid length.
[  228.242651][ T8978] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1112'.
[  228.637910][ T8993] netlink: 'syz.0.1116': attribute type 1 has an invalid length.
[  228.684397][ T8993] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1116'.
[  230.007177][ T9014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'.
[  230.075196][ T9016] netlink: 'syz.1.1126': attribute type 3 has an invalid length.
[  230.114976][ T9016] netlink: 'syz.1.1126': attribute type 1 has an invalid length.
[  230.156487][ T9016] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1126'.
[  230.725244][ T9029] netlink: 'syz.1.1131': attribute type 1 has an invalid length.
[  230.745964][ T9029] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1131'.
[  231.485029][ T9051] netlink: 'syz.0.1138': attribute type 10 has an invalid length.
[  231.828299][ T9065] netlink: 'syz.3.1141': attribute type 3 has an invalid length.
[  231.849703][ T9065] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1141'.
[  232.256555][ T9080] FAULT_INJECTION: forcing a failure.
[  232.256555][ T9080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.273215][ T9080] CPU: 1 PID: 9080 Comm: syz.2.1147 Not tainted syzkaller #0
[  232.280899][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  232.290964][ T9080] Call Trace:
[  232.294246][ T9080]  <TASK>
[  232.297182][ T9080]  dump_stack_lvl+0x18c/0x250
[  232.301891][ T9080]  ? show_regs_print_info+0x20/0x20
[  232.307119][ T9080]  ? load_image+0x400/0x400
[  232.311651][ T9080]  ? __might_fault+0xaa/0x120
[  232.316339][ T9080]  ? __lock_acquire+0x7d40/0x7d40
[  232.321394][ T9080]  should_fail_ex+0x39d/0x4d0
[  232.326103][ T9080]  _copy_from_user+0x2f/0xe0
[  232.330792][ T9080]  ___sys_sendmsg+0x1c7/0x360
[  232.335494][ T9080]  ? __sys_sendmsg+0x2a0/0x2a0
[  232.340306][ T9080]  ? __lock_acquire+0x7d40/0x7d40
[  232.345388][ T9080]  __se_sys_sendmsg+0x1c2/0x2b0
[  232.350250][ T9080]  ? __x64_sys_sendmsg+0x80/0x80
[  232.355220][ T9080]  ? lockdep_hardirqs_on+0x98/0x150
[  232.360429][ T9080]  do_syscall_64+0x55/0xa0
[  232.364856][ T9080]  ? clear_bhb_loop+0x40/0x90
[  232.369537][ T9080]  ? clear_bhb_loop+0x40/0x90
[  232.374219][ T9080]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  232.380124][ T9080] RIP: 0033:0x7f062699c799
[  232.384552][ T9080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.404258][ T9080] RSP: 002b:00007f06277da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.412686][ T9080] RAX: ffffffffffffffda RBX: 00007f0626c15fa0 RCX: 00007f062699c799
[  232.420662][ T9080] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  232.428642][ T9080] RBP: 00007f06277da090 R08: 0000000000000000 R09: 0000000000000000
[  232.436621][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.444605][ T9080] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  232.452634][ T9080]  </TASK>
[  234.709751][ T9167] FAULT_INJECTION: forcing a failure.
[  234.709751][ T9167] name failslab, interval 1, probability 0, space 0, times 0
[  234.722513][ T9167] CPU: 1 PID: 9167 Comm: syz.3.1183 Not tainted syzkaller #0
[  234.729907][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  234.739987][ T9167] Call Trace:
[  234.743287][ T9167]  <TASK>
[  234.746237][ T9167]  dump_stack_lvl+0x18c/0x250
[  234.750938][ T9167]  ? show_regs_print_info+0x20/0x20
[  234.756156][ T9167]  ? load_image+0x400/0x400
[  234.760676][ T9167]  should_fail_ex+0x39d/0x4d0
[  234.765356][ T9167]  should_failslab+0x9/0x20
[  234.769856][ T9167]  slab_pre_alloc_hook+0x59/0x310
[  234.774870][ T9167]  ? verify_lock_unused+0x140/0x140
[  234.780072][ T9167]  kmem_cache_alloc+0x5a/0x2d0
[  234.784854][ T9167]  ? skb_clone+0x1eb/0x370
[  234.789278][ T9167]  skb_clone+0x1eb/0x370
[  234.793520][ T9167]  bpf_clone_redirect+0x167/0x4a0
[  234.798571][ T9167]  bpf_prog_4a8c2353fb668905+0x64/0x6c
[  234.804037][ T9167]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  234.810023][ T9167]  ? lock_chain_count+0x20/0x20
[  234.814874][ T9167]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  234.821112][ T9167]  ? lockdep_softirqs_on+0x580/0x580
[  234.826674][ T9167]  ? ktime_get+0x7f/0x280
[  234.831029][ T9167]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  234.837294][ T9167]  ? ktime_get_real_ts64+0x440/0x440
[  234.842583][ T9167]  ? __x64_sys_bpf+0x7c/0x90
[  234.847172][ T9167]  ? __local_bh_disable_ip+0x108/0x1a0
[  234.852621][ T9167]  ? __cant_sleep+0x220/0x220
[  234.857293][ T9167]  ? read_tsc+0x9/0x20
[  234.861353][ T9167]  ? ktime_get+0x24b/0x280
[  234.865768][ T9167]  ? bpf_test_run+0x174/0x870
[  234.870437][ T9167]  bpf_test_run+0x2df/0x870
[  234.874951][ T9167]  ? bpf_test_run+0x174/0x870
[  234.879626][ T9167]  ? convert___skb_to_skb+0x590/0x590
[  234.885104][ T9167]  ? eth_get_headlen+0x210/0x210
[  234.890043][ T9167]  ? slab_build_skb+0x25f/0x3f0
[  234.894904][ T9167]  ? convert___skb_to_skb+0x3d/0x590
[  234.900184][ T9167]  bpf_prog_test_run_skb+0xad2/0x12b0
[  234.905561][ T9167]  ? cpu_online+0x60/0x60
[  234.909884][ T9167]  bpf_prog_test_run+0x321/0x390
[  234.914819][ T9167]  __sys_bpf+0x49d/0x890
[  234.919057][ T9167]  ? bpf_link_show_fdinfo+0x390/0x390
[  234.924431][ T9167]  ? lock_chain_count+0x20/0x20
[  234.929300][ T9167]  __x64_sys_bpf+0x7c/0x90
[  234.933721][ T9167]  do_syscall_64+0x55/0xa0
[  234.938135][ T9167]  ? clear_bhb_loop+0x40/0x90
[  234.942806][ T9167]  ? clear_bhb_loop+0x40/0x90
[  234.947479][ T9167]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.953372][ T9167] RIP: 0033:0x7f6b4e19c799
[  234.957865][ T9167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.977470][ T9167] RSP: 002b:00007f6b4efc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  234.985873][ T9167] RAX: ffffffffffffffda RBX: 00007f6b4e415fa0 RCX: 00007f6b4e19c799
[  234.993836][ T9167] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[  235.001799][ T9167] RBP: 00007f6b4efc8090 R08: 0000000000000000 R09: 0000000000000000
[  235.009763][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.017721][ T9167] R13: 00007f6b4e416038 R14: 00007f6b4e415fa0 R15: 00007ffcbd84c298
[  235.025714][ T9167]  </TASK>
[  236.828647][ T9231] validate_nla: 2 callbacks suppressed
[  236.828663][ T9231] netlink: 'syz.3.1203': attribute type 10 has an invalid length.
[  237.369301][ T9251] netlink: 'syz.0.1210': attribute type 6 has an invalid length.
[  237.400788][ T9251] __nla_validate_parse: 1 callbacks suppressed
[  237.400807][ T9251] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1210'.
[  237.649764][   T23] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  238.683963][ T9281] netlink: 'syz.1.1220': attribute type 6 has an invalid length.
[  238.694266][ T9281] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1220'.
[  239.032342][ T9279] netlink: 'syz.0.1221': attribute type 10 has an invalid length.
[  239.240089][ T6820] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  239.261195][ T9290] IPv6: Can't replace route, no match found
[  240.133918][ T9322] netlink: 'syz.2.1233': attribute type 6 has an invalid length.
[  240.142975][ T9322] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1233'.
[  240.306862][ T9327] netlink: 'syz.3.1234': attribute type 2 has an invalid length.
[  240.327955][ T9327] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1234'.
[  240.711276][ T9340] netlink: 'syz.1.1238': attribute type 10 has an invalid length.
[  240.721028][ T9341] IPv6: Can't replace route, no match found
[  241.037776][ T9353] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1242'.
[  241.930674][ T9373] IPv6: Can't replace route, no match found
[  242.696397][ T9403] FAULT_INJECTION: forcing a failure.
[  242.696397][ T9403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.740413][ T9403] CPU: 1 PID: 9403 Comm: syz.1.1260 Not tainted syzkaller #0
[  242.747857][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  242.758026][ T9403] Call Trace:
[  242.761313][ T9403]  <TASK>
[  242.764256][ T9403]  dump_stack_lvl+0x18c/0x250
[  242.768956][ T9403]  ? show_regs_print_info+0x20/0x20
[  242.774174][ T9403]  ? load_image+0x400/0x400
[  242.778696][ T9403]  ? __might_fault+0xaa/0x120
[  242.783656][ T9403]  ? __lock_acquire+0x7d40/0x7d40
[  242.788710][ T9403]  should_fail_ex+0x39d/0x4d0
[  242.793415][ T9403]  _copy_from_user+0x2f/0xe0
[  242.798026][ T9403]  bpf_prog_test_run_skb+0x266/0x12b0
[  242.803414][ T9403]  ? __fget_files+0x28/0x4b0
[  242.808031][ T9403]  ? __fget_files+0x28/0x4b0
[  242.813071][ T9403]  ? __fget_files+0x43d/0x4b0
[  242.817788][ T9403]  ? cpu_online+0x60/0x60
[  242.822138][ T9403]  bpf_prog_test_run+0x321/0x390
[  242.827090][ T9403]  __sys_bpf+0x49d/0x890
[  242.831353][ T9403]  ? bpf_link_show_fdinfo+0x390/0x390
[  242.836757][ T9403]  ? lock_chain_count+0x20/0x20
[  242.841638][ T9403]  __x64_sys_bpf+0x7c/0x90
[  242.846068][ T9403]  do_syscall_64+0x55/0xa0
[  242.850503][ T9403]  ? clear_bhb_loop+0x40/0x90
[  242.855193][ T9403]  ? clear_bhb_loop+0x40/0x90
[  242.859883][ T9403]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.865875][ T9403] RIP: 0033:0x7fe1d279c799
[  242.870297][ T9403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.890010][ T9403] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  242.898445][ T9403] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  242.906434][ T9403] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  242.914422][ T9403] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  242.922399][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.930381][ T9403] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  242.938389][ T9403]  </TASK>
[  245.722087][ T9420] netlink: 'syz.2.1266': attribute type 21 has an invalid length.
[  245.782253][ T9420] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1266'.
[  245.794314][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'.
[  245.844211][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'.
[  245.865984][ T9421] IPv6: Can't replace route, no match found
[  245.889549][ T9420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'.
[  245.919992][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'.
[  246.051063][ T9436] netlink: 'syz.0.1270': attribute type 46 has an invalid length.
[  246.464442][ T9443] netlink: 'syz.0.1273': attribute type 10 has an invalid length.
[  246.474447][ T9443] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.483678][ T9443] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.496719][ T9443] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.505804][ T9443] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.652001][ T9448] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1275'.
[  247.802758][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  247.832514][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  247.890106][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  247.925964][ T9477] FAULT_INJECTION: forcing a failure.
[  247.925964][ T9477] name failslab, interval 1, probability 0, space 0, times 0
[  247.944279][ T9478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  247.956046][ T9477] CPU: 1 PID: 9477 Comm: syz.3.1286 Not tainted syzkaller #0
[  247.963457][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  247.973527][ T9477] Call Trace:
[  247.976817][ T9477]  <TASK>
[  247.979856][ T9477]  dump_stack_lvl+0x18c/0x250
[  247.984658][ T9477]  ? show_regs_print_info+0x20/0x20
[  247.989881][ T9477]  ? load_image+0x400/0x400
[  247.994395][ T9477]  ? lockdep_hardirqs_on+0x98/0x150
[  247.999621][ T9477]  should_fail_ex+0x39d/0x4d0
[  248.004413][ T9477]  should_failslab+0x9/0x20
[  248.009015][ T9477]  slab_pre_alloc_hook+0x59/0x310
[  248.014062][ T9477]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  248.020318][ T9477]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  248.026570][ T9477]  __kmem_cache_alloc_node+0x53/0x250
[  248.031967][ T9477]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  248.038227][ T9477]  __kmalloc+0xa4/0x230
[  248.042404][ T9477]  ? netlink_lookup+0x30/0x200
[  248.047188][ T9477]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  248.053279][ T9477]  genl_start+0x180/0x6b0
[  248.057641][ T9477]  ? netlink_lookup+0x30/0x200
[  248.062437][ T9477]  __netlink_dump_start+0x4a9/0x810
[  248.067666][ T9477]  genl_family_rcv_msg_dumpit+0x214/0x310
[  248.073412][ T9477]  ? genl_rcv_msg+0x7a0/0x7a0
[  248.078097][ T9477]  ? genl_get_cmd+0x4a9/0x920
[  248.082794][ T9477]  ? genl_family_rcv_msg_doit+0x310/0x310
[  248.088521][ T9477]  ? genl_start+0x6b0/0x6b0
[  248.093031][ T9477]  ? genl_dumpit+0x1a0/0x1a0
[  248.097641][ T9477]  ? radix_tree_lookup+0xdd/0x280
[  248.102707][ T9477]  genl_rcv_msg+0x5e5/0x7a0
[  248.107249][ T9477]  ? genl_bind+0x360/0x360
[  248.111688][ T9477]  ? devlink_nl_trap_fill+0x570/0x570
[  248.117172][ T9477]  ? perf_trace_lock+0xfc/0x3b0
[  248.122037][ T9477]  ? perf_trace_preemptirq_template+0x269/0x330
[  248.128310][ T9477]  netlink_rcv_skb+0x241/0x4d0
[  248.133097][ T9477]  ? genl_bind+0x360/0x360
[  248.137526][ T9477]  ? netlink_ack+0x1180/0x1180
[  248.142320][ T9477]  ? __lock_acquire+0x7d40/0x7d40
[  248.147427][ T9477]  ? down_read+0x1ac/0x2e0
[  248.151860][ T9477]  genl_rcv+0x28/0x40
[  248.155861][ T9477]  netlink_unicast+0x751/0x8d0
[  248.160656][ T9477]  netlink_sendmsg+0x8d0/0xbf0
[  248.165442][ T9477]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  248.171277][ T9477]  ? netlink_getsockopt+0x590/0x590
[  248.176506][ T9477]  ? aa_sock_msg_perm+0x94/0x150
[  248.181461][ T9477]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  248.186783][ T9477]  ? security_socket_sendmsg+0x80/0xa0
[  248.192287][ T9477]  ? netlink_getsockopt+0x590/0x590
[  248.197545][ T9477]  ____sys_sendmsg+0x5ba/0x960
[  248.202328][ T9477]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  248.208546][ T9477]  ? __asan_memset+0x22/0x40
[  248.213158][ T9477]  ? __sys_sendmsg_sock+0x30/0x30
[  248.218280][ T9477]  ? __import_iovec+0x5f2/0x850
[  248.223166][ T9477]  ? import_iovec+0x73/0xa0
[  248.227689][ T9477]  ___sys_sendmsg+0x2a6/0x360
[  248.232407][ T9477]  ? __sys_sendmsg+0x2a0/0x2a0
[  248.237217][ T9477]  ? trace_call_bpf+0xc3/0x6c0
[  248.242003][ T9477]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  248.248389][ T9477]  __se_sys_sendmsg+0x1c2/0x2b0
[  248.253259][ T9477]  ? __x64_sys_sendmsg+0x80/0x80
[  248.258253][ T9477]  ? lockdep_hardirqs_on+0x98/0x150
[  248.263559][ T9477]  do_syscall_64+0x55/0xa0
[  248.267990][ T9477]  ? clear_bhb_loop+0x40/0x90
[  248.272691][ T9477]  ? clear_bhb_loop+0x40/0x90
[  248.277396][ T9477]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.283318][ T9477] RIP: 0033:0x7f6b4e19c799
[  248.287752][ T9477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.307384][ T9477] RSP: 002b:00007f6b4efc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.315827][ T9477] RAX: ffffffffffffffda RBX: 00007f6b4e415fa0 RCX: 00007f6b4e19c799
[  248.323814][ T9477] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  248.331973][ T9477] RBP: 00007f6b4efc8090 R08: 0000000000000000 R09: 0000000000000000
[  248.340132][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.348115][ T9477] R13: 00007f6b4e416038 R14: 00007f6b4e415fa0 R15: 00007ffcbd84c298
[  248.356114][ T9477]  </TASK>
[  248.460514][ T9479] netlink: 'syz.3.1286': attribute type 10 has an invalid length.
[  248.764040][ T9486] netlink: 'syz.2.1288': attribute type 10 has an invalid length.
[  250.353431][ T9527] netlink: 'syz.1.1303': attribute type 10 has an invalid length.
[  251.580723][ T9556] netlink: 'syz.1.1313': attribute type 46 has an invalid length.
[  251.588680][ T9556] __nla_validate_parse: 1 callbacks suppressed
[  251.588692][ T9556] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1313'.
[  251.887276][ T9564] netlink: 'syz.3.1316': attribute type 10 has an invalid length.
[  251.930617][ T9564] hsr_slave_0: left promiscuous mode
[  251.947975][ T9566] netlink: 'syz.1.1317': attribute type 4 has an invalid length.
[  251.958598][ T9564] hsr_slave_1: left promiscuous mode
[  251.984076][ T9566] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1317'.
[  252.006291][ T9564] bridge0: port 3(hsr0) entered disabled state
[  252.038495][ T9569] FAULT_INJECTION: forcing a failure.
[  252.038495][ T9569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.061582][ T9569] CPU: 1 PID: 9569 Comm: syz.1.1317 Not tainted syzkaller #0
[  252.069066][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  252.079192][ T9569] Call Trace:
[  252.082541][ T9569]  <TASK>
[  252.085512][ T9569]  dump_stack_lvl+0x18c/0x250
[  252.090250][ T9569]  ? show_regs_print_info+0x20/0x20
[  252.095580][ T9569]  ? load_image+0x400/0x400
[  252.100171][ T9569]  ? __might_fault+0xaa/0x120
[  252.104923][ T9569]  ? __lock_acquire+0x7d40/0x7d40
[  252.110022][ T9569]  should_fail_ex+0x39d/0x4d0
[  252.114799][ T9569]  _copy_from_iter+0x1d9/0x12e0
[  252.119719][ T9569]  ? __virt_addr_valid+0x18c/0x540
[  252.124897][ T9569]  ? __lock_acquire+0x7d40/0x7d40
[  252.130078][ T9569]  ? copyout_mc+0x70/0x70
[  252.134480][ T9569]  ? __virt_addr_valid+0x18c/0x540
[  252.139721][ T9569]  ? __virt_addr_valid+0x18c/0x540
[  252.144887][ T9569]  ? __virt_addr_valid+0x469/0x540
[  252.150076][ T9569]  ? __check_object_size+0x506/0xa20
[  252.155416][ T9569]  kernfs_fop_write_iter+0x1a4/0x520
[  252.160774][ T9569]  vfs_write+0x46c/0x990
[  252.165087][ T9569]  ? file_end_write+0x250/0x250
[  252.169997][ T9569]  ? __fget_files+0x43d/0x4b0
[  252.174765][ T9569]  ? __fdget_pos+0x2a3/0x330
[  252.179458][ T9569]  ? ksys_write+0x75/0x260
[  252.183960][ T9569]  ksys_write+0x150/0x260
[  252.188348][ T9569]  ? __ia32_sys_read+0x90/0x90
[  252.193178][ T9569]  ? lockdep_hardirqs_on+0x98/0x150
[  252.198459][ T9569]  do_syscall_64+0x55/0xa0
[  252.202922][ T9569]  ? clear_bhb_loop+0x40/0x90
[  252.207727][ T9569]  ? clear_bhb_loop+0x40/0x90
[  252.212450][ T9569]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  252.218380][ T9569] RIP: 0033:0x7fe1d279c799
[  252.223005][ T9569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.242750][ T9569] RSP: 002b:00007fe1d366f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  252.251212][ T9569] RAX: ffffffffffffffda RBX: 00007fe1d2a16090 RCX: 00007fe1d279c799
[  252.259256][ T9569] RDX: 0000000000000012 RSI: 00002000000003c0 RDI: 000000000000000d
[  252.267287][ T9569] RBP: 00007fe1d366f090 R08: 0000000000000000 R09: 0000000000000000
[  252.275300][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.283311][ T9569] R13: 00007fe1d2a16128 R14: 00007fe1d2a16090 R15: 00007ffeeed582d8
[  252.291395][ T9569]  </TASK>
[  252.384249][ T9564] bridge0: port 3(hsr0) entered disabled state
[  253.015224][ T9586] netlink: 'syz.0.1325': attribute type 4 has an invalid length.
[  253.031940][ T9586] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1325'.
[  254.106763][ T9617] netlink: 'syz.1.1338': attribute type 3 has an invalid length.
[  254.129659][ T9617] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1338'.
[  254.203646][ T9614] netlink: 'syz.0.1336': attribute type 10 has an invalid length.
[  254.225106][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.432928][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.681876][ T9614] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  255.071793][ T9640] netlink: 'syz.2.1344': attribute type 10 has an invalid length.
[  255.101946][ T9640] netlink: 'syz.2.1344': attribute type 9 has an invalid length.
[  255.139112][ T9640] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1344'.
[  255.253050][ T9644] netlink: 'syz.2.1344': attribute type 9 has an invalid length.
[  255.319217][ T9644] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1344'.
[  255.801759][ T9662] netlink: 'syz.3.1352': attribute type 2 has an invalid length.
[  255.819704][ T9662] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1352'.
[  255.873441][ T9664] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1354'.
[  256.044055][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  256.050494][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  257.218228][ T9699] validate_nla: 12 callbacks suppressed
[  257.218266][ T9699] netlink: 'syz.3.1367': attribute type 1 has an invalid length.
[  257.234967][ T9699] netlink: 'syz.3.1367': attribute type 2 has an invalid length.
[  257.249764][ T9699] netlink: 'syz.3.1367': attribute type 2 has an invalid length.
[  257.257882][ T9699] netlink: 'syz.3.1367': attribute type 3 has an invalid length.
[  257.269485][ T9699] netlink: 'syz.3.1367': attribute type 4 has an invalid length.
[  257.291601][ T9699] netlink: 'syz.3.1367': attribute type 5 has an invalid length.
[  257.321577][ T9699] netlink: 'syz.3.1367': attribute type 6 has an invalid length.
[  257.347001][ T9699] netlink: 'syz.3.1367': attribute type 7 has an invalid length.
[  257.355957][ T9699] netlink: 'syz.3.1367': attribute type 9 has an invalid length.
[  257.369822][ T9699] netlink: 'syz.3.1367': attribute type 10 has an invalid length.
[  257.378741][ T9699] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1367'.
[  257.991193][ T9723] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1378'.
[  258.014196][ T9723] openvswitch: netlink: Key type 29 is not supported
[  258.210606][ T9730] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1380'.
[  258.433653][ T9735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  258.441173][ T9735] IPv6: NLM_F_CREATE should be set when creating new route
[  258.448726][ T9735] IPv6: NLM_F_CREATE should be set when creating new route
[  258.456366][ T9735] IPv6: NLM_F_CREATE should be set when creating new route
[  258.552457][ T9737] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1383'.
[  259.185228][ T9762] syzkaller0: entered promiscuous mode
[  259.191025][ T9762] syzkaller0: entered allmulticast mode
[  261.504345][ T9800] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1410'.
[  261.555311][ T9802] netlink: 711 bytes leftover after parsing attributes in process `syz.1.1410'.
[  261.600073][ T9800] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  261.638373][ T9805] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1411'.
[  262.451648][ T9818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  262.459431][ T9818] IPv6: NLM_F_CREATE should be set when creating new route
[  262.467033][ T9818] IPv6: NLM_F_CREATE should be set when creating new route
[  262.474503][ T9818] IPv6: NLM_F_CREATE should be set when creating new route
[  262.611473][ T9819] validate_nla: 19 callbacks suppressed
[  262.611490][ T9819] netlink: 'syz.3.1415': attribute type 10 has an invalid length.
[  264.109751][ T9877] netlink: 'syz.1.1437': attribute type 21 has an invalid length.
[  264.128326][ T9877] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1437'.
[  264.139226][ T9875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  264.146738][ T9875] IPv6: NLM_F_CREATE should be set when creating new route
[  264.154446][ T9875] IPv6: NLM_F_CREATE should be set when creating new route
[  264.161985][ T9875] IPv6: NLM_F_CREATE should be set when creating new route
[  264.244854][ T9881] netlink: 'syz.0.1435': attribute type 10 has an invalid length.
[  264.592465][ T9896] netlink: 'syz.2.1443': attribute type 21 has an invalid length.
[  264.608073][ T9896] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  264.616927][ T9896] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1443'.
[  264.982796][ T9913] FAULT_INJECTION: forcing a failure.
[  264.982796][ T9913] name failslab, interval 1, probability 0, space 0, times 0
[  264.995512][ T9913] CPU: 1 PID: 9913 Comm: syz.0.1450 Not tainted syzkaller #0
[  265.002894][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  265.012969][ T9913] Call Trace:
[  265.016263][ T9913]  <TASK>
[  265.019193][ T9913]  dump_stack_lvl+0x18c/0x250
[  265.023872][ T9913]  ? show_regs_print_info+0x20/0x20
[  265.029097][ T9913]  ? load_image+0x400/0x400
[  265.033605][ T9913]  should_fail_ex+0x39d/0x4d0
[  265.038286][ T9913]  should_failslab+0x9/0x20
[  265.042868][ T9913]  slab_pre_alloc_hook+0x59/0x310
[  265.047889][ T9913]  kmem_cache_alloc+0x5a/0x2d0
[  265.052652][ T9913]  ? skb_clone+0x1eb/0x370
[  265.057069][ T9913]  skb_clone+0x1eb/0x370
[  265.061325][ T9913]  bpf_clone_redirect+0x167/0x4a0
[  265.066357][ T9913]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  265.072201][ T9913]  ? bpf_test_run+0x174/0x870
[  265.076889][ T9913]  bpf_prog_4a8c2353fb668905+0x64/0x6c
[  265.082365][ T9913]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  265.088639][ T9913]  ? lock_chain_count+0x20/0x20
[  265.093598][ T9913]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  265.099845][ T9913]  ? lockdep_softirqs_on+0x580/0x580
[  265.105134][ T9913]  ? ktime_get+0x7f/0x280
[  265.109475][ T9913]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  265.115798][ T9913]  ? ktime_get_real_ts64+0x440/0x440
[  265.121079][ T9913]  ? __x64_sys_bpf+0x7c/0x90
[  265.125671][ T9913]  ? __local_bh_disable_ip+0x108/0x1a0
[  265.131209][ T9913]  ? __cant_sleep+0x220/0x220
[  265.135879][ T9913]  ? read_tsc+0x9/0x20
[  265.139938][ T9913]  ? ktime_get+0x24b/0x280
[  265.144355][ T9913]  ? bpf_test_run+0x174/0x870
[  265.149029][ T9913]  ? kvm_sched_clock_read+0x11/0x20
[  265.154324][ T9913]  bpf_test_run+0x4fa/0x870
[  265.158835][ T9913]  ? bpf_test_run+0x174/0x870
[  265.163551][ T9913]  ? convert___skb_to_skb+0x590/0x590
[  265.168930][ T9913]  ? eth_get_headlen+0x210/0x210
[  265.173874][ T9913]  ? slab_build_skb+0x25f/0x3f0
[  265.178720][ T9913]  ? convert___skb_to_skb+0x3d/0x590
[  265.184000][ T9913]  bpf_prog_test_run_skb+0xad2/0x12b0
[  265.189391][ T9913]  ? cpu_online+0x60/0x60
[  265.193724][ T9913]  bpf_prog_test_run+0x321/0x390
[  265.198663][ T9913]  __sys_bpf+0x49d/0x890
[  265.202920][ T9913]  ? bpf_link_show_fdinfo+0x390/0x390
[  265.208303][ T9913]  ? lock_chain_count+0x20/0x20
[  265.213157][ T9913]  __x64_sys_bpf+0x7c/0x90
[  265.217571][ T9913]  do_syscall_64+0x55/0xa0
[  265.221983][ T9913]  ? clear_bhb_loop+0x40/0x90
[  265.226654][ T9913]  ? clear_bhb_loop+0x40/0x90
[  265.231329][ T9913]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.237213][ T9913] RIP: 0033:0x7fc1cc59c799
[  265.241622][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.261235][ T9913] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  265.269677][ T9913] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  265.277661][ T9913] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[  265.285642][ T9913] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  265.293615][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.301582][ T9913] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  265.309566][ T9913]  </TASK>
[  266.039624][ T9935] netlink: 'syz.2.1458': attribute type 10 has an invalid length.
[  267.548346][ T9978] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1470'.
[  267.625459][ T9978] netlink: 'syz.0.1470': attribute type 10 has an invalid length.
[  268.377375][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.385105][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.438026][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.445518][ T9978] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.453293][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.460560][ T9978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.477831][ T9978] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  269.497554][T10009] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1483'.
[  269.537057][T10020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1486'.
[  269.578940][T10020] netlink: 'syz.2.1486': attribute type 10 has an invalid length.
[  269.658662][T10009] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  271.070178][T10055] FAULT_INJECTION: forcing a failure.
[  271.070178][T10055] name failslab, interval 1, probability 0, space 0, times 0
[  271.099117][T10055] CPU: 1 PID: 10055 Comm: syz.2.1502 Not tainted syzkaller #0
[  271.106626][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  271.116698][T10055] Call Trace:
[  271.119988][T10055]  <TASK>
[  271.122932][T10055]  dump_stack_lvl+0x18c/0x250
[  271.127653][T10055]  ? show_regs_print_info+0x20/0x20
[  271.132884][T10055]  ? load_image+0x400/0x400
[  271.137415][T10055]  ? __might_sleep+0xe0/0xe0
[  271.142026][T10055]  ? __lock_acquire+0x7d40/0x7d40
[  271.147072][T10055]  ? __lock_acquire+0x1273/0x7d40
[  271.152124][T10055]  should_fail_ex+0x39d/0x4d0
[  271.156830][T10055]  should_failslab+0x9/0x20
[  271.161354][T10055]  slab_pre_alloc_hook+0x59/0x310
[  271.166400][T10055]  kmem_cache_alloc_node+0x60/0x320
[  271.171597][T10055]  ? __alloc_skb+0x103/0x2c0
[  271.176178][T10055]  __alloc_skb+0x103/0x2c0
[  271.180588][T10055]  alloc_skb_with_frags+0xca/0x7b0
[  271.185691][T10055]  ? mark_lock+0x94/0x320
[  271.190019][T10055]  ? __lock_acquire+0x1273/0x7d40
[  271.195040][T10055]  sock_alloc_send_pskb+0x883/0x9a0
[  271.200257][T10055]  ? sock_kzfree_s+0x50/0x50
[  271.204879][T10055]  ? verify_lock_unused+0x140/0x140
[  271.210075][T10055]  ? dev_get_by_index+0x22/0x2d0
[  271.215001][T10055]  ? dev_get_by_index+0x22/0x2d0
[  271.220113][T10055]  packet_sendmsg+0x316e/0x4d70
[  271.224991][T10055]  ? __might_sleep+0xe0/0xe0
[  271.229574][T10055]  ? verify_lock_unused+0x140/0x140
[  271.234758][T10055]  ? mark_lock+0x94/0x320
[  271.239114][T10055]  ? __lock_acquire+0x1273/0x7d40
[  271.244212][T10055]  ? verify_lock_unused+0x140/0x140
[  271.249402][T10055]  ? aa_sk_perm+0x83c/0x970
[  271.253902][T10055]  ? packet_getsockopt+0xad0/0xad0
[  271.259020][T10055]  ? aa_sock_msg_perm+0x94/0x150
[  271.263955][T10055]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  271.269318][T10055]  ? security_socket_sendmsg+0x80/0xa0
[  271.274769][T10055]  ? packet_getsockopt+0xad0/0xad0
[  271.279878][T10055]  ____sys_sendmsg+0x5ba/0x960
[  271.284632][T10055]  ? __lock_acquire+0x7d40/0x7d40
[  271.289740][T10055]  ? __asan_memset+0x22/0x40
[  271.294330][T10055]  ? __sys_sendmsg_sock+0x30/0x30
[  271.299344][T10055]  ? __import_iovec+0x5f2/0x850
[  271.304363][T10055]  ? import_iovec+0x73/0xa0
[  271.308859][T10055]  ___sys_sendmsg+0x2a6/0x360
[  271.313523][T10055]  ? get_pid_task+0x20/0x1e0
[  271.318126][T10055]  ? __sys_sendmsg+0x2a0/0x2a0
[  271.322891][T10055]  ? __lock_acquire+0x7d40/0x7d40
[  271.327942][T10055]  __se_sys_sendmsg+0x1c2/0x2b0
[  271.332786][T10055]  ? __x64_sys_sendmsg+0x80/0x80
[  271.337731][T10055]  ? lockdep_hardirqs_on+0x98/0x150
[  271.342946][T10055]  do_syscall_64+0x55/0xa0
[  271.347354][T10055]  ? clear_bhb_loop+0x40/0x90
[  271.352019][T10055]  ? clear_bhb_loop+0x40/0x90
[  271.356734][T10055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  271.362708][T10055] RIP: 0033:0x7f062699c799
[  271.367116][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.386888][T10055] RSP: 002b:00007f06277da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.395388][T10055] RAX: ffffffffffffffda RBX: 00007f0626c15fa0 RCX: 00007f062699c799
[  271.403613][T10055] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  271.411581][T10055] RBP: 00007f06277da090 R08: 0000000000000000 R09: 0000000000000000
[  271.419543][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.427587][T10055] R13: 00007f0626c16038 R14: 00007f0626c15fa0 R15: 00007ffd218a4c78
[  271.435559][T10055]  </TASK>
[  273.352110][T10117] netlink: 'syz.2.1528': attribute type 33 has an invalid length.
[  273.369234][T10117] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1528'.
[  273.917430][T10140] netlink: 'syz.1.1538': attribute type 10 has an invalid length.
[  275.274011][T10185] netlink: 'syz.3.1559': attribute type 10 has an invalid length.
[  275.750735][T10199] netlink: 'syz.2.1566': attribute type 2 has an invalid length.
[  275.758703][T10199] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1566'.
[  276.152540][T10218] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1573'.
[  276.432663][T10225] netlink: zone id is out of range
[  276.440408][T10225] netlink: set zone limit has 8 unknown bytes
[  276.506578][T10216] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1572'.
[  276.682591][T10232] FAULT_INJECTION: forcing a failure.
[  276.682591][T10232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.713454][T10232] CPU: 0 PID: 10232 Comm: syz.0.1577 Not tainted syzkaller #0
[  276.720956][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  276.731104][T10232] Call Trace:
[  276.734374][T10232]  <TASK>
[  276.737307][T10232]  dump_stack_lvl+0x18c/0x250
[  276.741987][T10232]  ? show_regs_print_info+0x20/0x20
[  276.747180][T10232]  ? load_image+0x400/0x400
[  276.751675][T10232]  ? __might_fault+0xaa/0x120
[  276.756343][T10232]  ? __lock_acquire+0x7d40/0x7d40
[  276.761365][T10232]  should_fail_ex+0x39d/0x4d0
[  276.766217][T10232]  _copy_from_user+0x2f/0xe0
[  276.770838][T10232]  bpf_prog_test_run_skb+0x266/0x12b0
[  276.776206][T10232]  ? __fget_files+0x28/0x4b0
[  276.780801][T10232]  ? __fget_files+0x28/0x4b0
[  276.785414][T10232]  ? __fget_files+0x43d/0x4b0
[  276.790095][T10232]  ? cpu_online+0x60/0x60
[  276.794417][T10232]  bpf_prog_test_run+0x321/0x390
[  276.799372][T10232]  __sys_bpf+0x49d/0x890
[  276.803611][T10232]  ? bpf_link_show_fdinfo+0x390/0x390
[  276.808998][T10232]  ? lock_chain_count+0x20/0x20
[  276.813855][T10232]  __x64_sys_bpf+0x7c/0x90
[  276.818261][T10232]  do_syscall_64+0x55/0xa0
[  276.822673][T10232]  ? clear_bhb_loop+0x40/0x90
[  276.827339][T10232]  ? clear_bhb_loop+0x40/0x90
[  276.832017][T10232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.837896][T10232] RIP: 0033:0x7fc1cc59c799
[  276.842301][T10232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.861896][T10232] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  276.870323][T10232] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  276.878280][T10232] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  276.886341][T10232] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  276.894391][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.902349][T10232] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  276.910320][T10232]  </TASK>
[  277.191596][T10245] netlink: 'syz.2.1583': attribute type 10 has an invalid length.
[  277.442550][T10255] FAULT_INJECTION: forcing a failure.
[  277.442550][T10255] name failslab, interval 1, probability 0, space 0, times 0
[  277.455830][T10255] CPU: 1 PID: 10255 Comm: syz.0.1587 Not tainted syzkaller #0
[  277.463404][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  277.473466][T10255] Call Trace:
[  277.476749][T10255]  <TASK>
[  277.479699][T10255]  dump_stack_lvl+0x18c/0x250
[  277.484446][T10255]  ? show_regs_print_info+0x20/0x20
[  277.489769][T10255]  ? load_image+0x400/0x400
[  277.494426][T10255]  ? __might_sleep+0xe0/0xe0
[  277.499016][T10255]  ? __lock_acquire+0x7d40/0x7d40
[  277.504046][T10255]  should_fail_ex+0x39d/0x4d0
[  277.508819][T10255]  should_failslab+0x9/0x20
[  277.513323][T10255]  slab_pre_alloc_hook+0x59/0x310
[  277.518378][T10255]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  277.524800][T10255]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  277.531221][T10255]  __kmem_cache_alloc_node+0x53/0x250
[  277.536604][T10255]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  277.543015][T10255]  __kmalloc+0xa4/0x230
[  277.547172][T10255]  bpf_prog_test_run_flow_dissector+0x259/0x640
[  277.553409][T10255]  ? xdp_convert_buff_to_md+0x200/0x200
[  277.558950][T10255]  ? __fget_files+0x28/0x4b0
[  277.563538][T10255]  ? __fget_files+0x28/0x4b0
[  277.568128][T10255]  ? __fget_files+0x43d/0x4b0
[  277.572806][T10255]  ? xdp_convert_buff_to_md+0x200/0x200
[  277.578342][T10255]  bpf_prog_test_run+0x321/0x390
[  277.583276][T10255]  __sys_bpf+0x49d/0x890
[  277.587609][T10255]  ? bpf_link_show_fdinfo+0x390/0x390
[  277.592984][T10255]  ? lock_chain_count+0x20/0x20
[  277.597833][T10255]  __x64_sys_bpf+0x7c/0x90
[  277.602240][T10255]  do_syscall_64+0x55/0xa0
[  277.606654][T10255]  ? clear_bhb_loop+0x40/0x90
[  277.611325][T10255]  ? clear_bhb_loop+0x40/0x90
[  277.616020][T10255]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.621922][T10255] RIP: 0033:0x7fc1cc59c799
[  277.626514][T10255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.646137][T10255] RSP: 002b:00007fc1cd39c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  277.654553][T10255] RAX: ffffffffffffffda RBX: 00007fc1cc815fa0 RCX: 00007fc1cc59c799
[  277.662603][T10255] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  277.670567][T10255] RBP: 00007fc1cd39c090 R08: 0000000000000000 R09: 0000000000000000
[  277.678529][T10255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.686500][T10255] R13: 00007fc1cc816038 R14: 00007fc1cc815fa0 R15: 00007ffd3b4b2398
[  277.694659][T10255]  </TASK>
[  277.734186][T10257] netlink: 'syz.1.1588': attribute type 1 has an invalid length.
[  278.444513][T10277] syzkaller0: entered promiscuous mode
[  278.463567][T10277] syzkaller0: entered allmulticast mode
[  280.886698][T10285] netlink: 'syz.1.1601': attribute type 10 has an invalid length.
[  281.507166][T10325] netlink: 'syz.3.1615': attribute type 10 has an invalid length.
[  284.665305][T10357] netlink: 'syz.1.1627': attribute type 10 has an invalid length.
[  285.576440][T10381] netlink: 'syz.0.1644': attribute type 10 has an invalid length.
[  285.684989][T10386] netlink: 'syz.3.1637': attribute type 10 has an invalid length.
[  285.697670][T10386] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.709888][T10386] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.869129][T10386] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.877887][T10386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.888551][T10386] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.897856][T10386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.005730][T10386] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  288.472795][T10429] netlink: 'syz.0.1655': attribute type 10 has an invalid length.
[  289.992858][ T5769] Bluetooth: hci2: SCO packet for unknown connection handle 3186
[  290.407446][T10477] netlink: 'syz.2.1674': attribute type 10 has an invalid length.
[  290.518143][T10473] netlink: 'syz.1.1673': attribute type 5 has an invalid length.
[  291.915272][T10515] netlink: 'syz.1.1691': attribute type 10 has an invalid length.
[  293.921955][T10563] netlink: 'syz.3.1711': attribute type 10 has an invalid length.
[  294.096183][T10573] FAULT_INJECTION: forcing a failure.
[  294.096183][T10573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.111898][T10573] CPU: 1 PID: 10573 Comm: syz.1.1714 Not tainted syzkaller #0
[  294.119413][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  294.129491][T10573] Call Trace:
[  294.132786][T10573]  <TASK>
[  294.135731][T10573]  dump_stack_lvl+0x18c/0x250
[  294.140442][T10573]  ? show_regs_print_info+0x20/0x20
[  294.145685][T10573]  ? load_image+0x400/0x400
[  294.150217][T10573]  ? __might_fault+0xaa/0x120
[  294.154913][T10573]  ? __lock_acquire+0x7d40/0x7d40
[  294.159965][T10573]  should_fail_ex+0x39d/0x4d0
[  294.164761][T10573]  _copy_to_user+0x2f/0xa0
[  294.169288][T10573]  bpf_test_finish+0x19f/0x650
[  294.174112][T10573]  ? convert___skb_to_skb+0x590/0x590
[  294.179514][T10573]  ? convert_skb_to___skb+0x420/0x420
[  294.184908][T10573]  ? slab_build_skb+0x25f/0x3f0
[  294.189787][T10573]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  294.195197][T10573]  ? cpu_online+0x60/0x60
[  294.199559][T10573]  bpf_prog_test_run+0x321/0x390
[  294.204521][T10573]  __sys_bpf+0x49d/0x890
[  294.208783][T10573]  ? bpf_link_show_fdinfo+0x390/0x390
[  294.214174][T10573]  ? lock_chain_count+0x20/0x20
[  294.219138][T10573]  __x64_sys_bpf+0x7c/0x90
[  294.223563][T10573]  do_syscall_64+0x55/0xa0
[  294.228071][T10573]  ? clear_bhb_loop+0x40/0x90
[  294.232766][T10573]  ? clear_bhb_loop+0x40/0x90
[  294.237466][T10573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.243493][T10573] RIP: 0033:0x7fe1d279c799
[  294.247929][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.267562][T10573] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  294.276019][T10573] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  294.284104][T10573] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  294.292111][T10573] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  294.300460][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.308454][T10573] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  294.316470][T10573]  </TASK>
[  295.594882][T10623] netlink: 'syz.0.1733': attribute type 10 has an invalid length.
[  297.147086][T10666] netlink: 'syz.1.1746': attribute type 29 has an invalid length.
[  297.187989][T10666] netlink: 'syz.1.1746': attribute type 3 has an invalid length.
[  297.278765][T10666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1746'.
[  298.172259][T10694] syzkaller0: entered promiscuous mode
[  298.177961][T10694] syzkaller0: entered allmulticast mode
[  299.353351][T10705] netlink: 'syz.2.1761': attribute type 29 has an invalid length.
[  299.362457][T10705] netlink: 'syz.2.1761': attribute type 3 has an invalid length.
[  299.379396][T10705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1761'.
[  300.821084][T10700] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  303.820877][T10806] netlink: 'syz.3.1798': attribute type 10 has an invalid length.
[  306.361102][T10866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1825'.
[  306.376021][T10866] netlink: 'syz.1.1825': attribute type 33 has an invalid length.
[  306.383983][T10866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1825'.
[  308.112960][T10938] netlink: 'syz.1.1858': attribute type 3 has an invalid length.
[  308.127740][T10938] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  308.136285][T10938] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1858'.
[  308.891524][T10961] FAULT_INJECTION: forcing a failure.
[  308.891524][T10961] name failslab, interval 1, probability 0, space 0, times 0
[  308.910408][T10961] CPU: 1 PID: 10961 Comm: syz.1.1862 Not tainted syzkaller #0
[  308.917935][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  308.928105][T10961] Call Trace:
[  308.931392][T10961]  <TASK>
[  308.934315][T10961]  dump_stack_lvl+0x18c/0x250
[  308.939007][T10961]  ? show_regs_print_info+0x20/0x20
[  308.944261][T10961]  ? load_image+0x400/0x400
[  308.948832][T10961]  ? __might_sleep+0xe0/0xe0
[  308.953478][T10961]  ? __lock_acquire+0x7d40/0x7d40
[  308.958573][T10961]  should_fail_ex+0x39d/0x4d0
[  308.963318][T10961]  should_failslab+0x9/0x20
[  308.967871][T10961]  slab_pre_alloc_hook+0x59/0x310
[  308.972960][T10961]  ? trace_raw_output_contention_end+0xd0/0xd0
[  308.979165][T10961]  ? fib6_info_alloc+0x30/0xf0
[  308.983982][T10961]  ? fib6_info_alloc+0x30/0xf0
[  308.988802][T10961]  __kmem_cache_alloc_node+0x53/0x250
[  308.994231][T10961]  ? fib6_get_table+0x39/0x260
[  308.999155][T10961]  ? fib6_info_alloc+0x30/0xf0
[  309.003978][T10961]  __kmalloc+0xa4/0x230
[  309.008209][T10961]  fib6_info_alloc+0x30/0xf0
[  309.012875][T10961]  ip6_route_info_create+0x44f/0x1240
[  309.018306][T10961]  ? mutex_lock_nested+0x20/0x20
[  309.023335][T10961]  ip6_route_add+0x28/0x160
[  309.027907][T10961]  ipv6_route_ioctl+0x3b4/0x500
[  309.032833][T10961]  ? rt6_purge_dflt_routers+0xb20/0xb20
[  309.038511][T10961]  ? __might_fault+0xaa/0x120
[  309.043251][T10961]  ? __might_fault+0xc6/0x120
[  309.047985][T10961]  ? __might_fault+0xaa/0x120
[  309.052734][T10961]  inet6_ioctl+0x247/0x2d0
[  309.057208][T10961]  ? inet6_getname+0x650/0x650
[  309.062044][T10961]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  309.067598][T10961]  sock_do_ioctl+0xfc/0x310
[  309.072174][T10961]  ? sock_show_fdinfo+0xb0/0xb0
[  309.077145][T10961]  sock_ioctl+0x5ba/0x7e0
[  309.081538][T10961]  ? sock_poll+0x3e0/0x3e0
[  309.086121][T10961]  ? bpf_lsm_file_ioctl+0x9/0x10
[  309.091125][T10961]  ? security_file_ioctl+0x80/0xa0
[  309.096317][T10961]  ? sock_poll+0x3e0/0x3e0
[  309.100804][T10961]  __se_sys_ioctl+0xfd/0x170
[  309.105482][T10961]  do_syscall_64+0x55/0xa0
[  309.109959][T10961]  ? clear_bhb_loop+0x40/0x90
[  309.114686][T10961]  ? clear_bhb_loop+0x40/0x90
[  309.119427][T10961]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  309.125387][T10961] RIP: 0033:0x7fe1d279c799
[  309.129845][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.149493][T10961] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  309.157968][T10961] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  309.166166][T10961] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003
[  309.174262][T10961] RBP: 00007fe1d3690090 R08: 0000000000000000 R09: 0000000000000000
[  309.182252][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.190265][T10961] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  309.198294][T10961]  </TASK>
[  310.844166][T11008] netlink: 'syz.0.1882': attribute type 21 has an invalid length.
[  310.859675][T11008] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1882'.
[  310.871219][T11008] netlink: 'syz.0.1882': attribute type 4 has an invalid length.
[  310.882307][T11008] netlink: 'syz.0.1882': attribute type 5 has an invalid length.
[  310.890345][T11008] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1882'.
[  313.911997][T11115] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1925'.
[  313.985900][T11115] netlink: 'syz.1.1925': attribute type 29 has an invalid length.
[  314.008367][T11115] netlink: 'syz.1.1925': attribute type 29 has an invalid length.
[  314.089436][T11124] netlink: 'syz.1.1925': attribute type 39 has an invalid length.
[  315.834927][T11178] netlink: 'syz.2.1952': attribute type 4 has an invalid length.
[  315.859155][T11178] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1952'.
[  317.491222][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.497781][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  318.028779][T11264] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1992'.
[  318.075948][T11264] netlink: 'syz.0.1992': attribute type 29 has an invalid length.
[  318.103095][T11264] netlink: 'syz.0.1992': attribute type 29 has an invalid length.
[  318.188000][T11268] netlink: 'syz.0.1992': attribute type 39 has an invalid length.
[  318.695634][T11288] ==================================================================
[  318.703748][T11288] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[  318.711572][T11288] Write of size 72 at addr ffff88802da03090 by task syz.1.2002/11288
[  318.719630][T11288] 
[  318.721940][T11288] CPU: 0 PID: 11288 Comm: syz.1.2002 Not tainted syzkaller #0
[  318.729469][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  318.739513][T11288] Call Trace:
[  318.742870][T11288]  <TASK>
[  318.745793][T11288]  dump_stack_lvl+0x18c/0x250
[  318.750474][T11288]  ? __lock_acquire+0x7d40/0x7d40
[  318.755490][T11288]  ? show_regs_print_info+0x20/0x20
[  318.760698][T11288]  ? load_image+0x400/0x400
[  318.765206][T11288]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  318.770667][T11288]  ? __virt_addr_valid+0x18c/0x540
[  318.775769][T11288]  ? __virt_addr_valid+0x469/0x540
[  318.780868][T11288]  print_report+0xa8/0x210
[  318.785278][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  318.790378][T11288]  kasan_report+0x117/0x150
[  318.794878][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  318.799990][T11288]  kasan_check_range+0x241/0x290
[  318.804929][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  318.810044][T11288]  __asan_memcpy+0x40/0x70
[  318.814460][T11288]  __bpf_get_stackid+0x6bf/0x900
[  318.819394][T11288]  bpf_get_stackid_pe+0x343/0x410
[  318.824417][T11288]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  318.829867][T11288]  bpf_overflow_handler+0x1fc/0x510
[  318.835058][T11288]  ? perf_prepare_header+0x1e0/0x1e0
[  318.840421][T11288]  ? bpf_overflow_handler+0xde/0x510
[  318.845699][T11288]  ? tp_perf_event_destroy+0x20/0x20
[  318.850974][T11288]  ? unwind_get_return_address+0x91/0xc0
[  318.856597][T11288]  ? __perf_event_account_interrupt+0x187/0x280
[  318.862826][T11288]  __perf_event_overflow+0x447/0x630
[  318.868113][T11288]  perf_swevent_event+0x319/0x570
[  318.873130][T11288]  ? perf_tp_event+0x1520/0x1520
[  318.878066][T11288]  ? mark_lock+0x94/0x320
[  318.882403][T11288]  ___perf_sw_event+0x4a7/0x730
[  318.887248][T11288]  ? ___perf_sw_event+0x199/0x730
[  318.892268][T11288]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  318.898763][T11288]  ? rep_movs_alternative+0x4a/0x90
[  318.903970][T11288]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  318.910119][T11288]  ? lock_chain_count+0x20/0x20
[  318.914965][T11288]  __perf_sw_event+0x139/0x270
[  318.919720][T11288]  do_user_addr_fault+0x123e/0x12c0
[  318.924997][T11288]  ? rcu_is_watching+0x15/0xb0
[  318.929754][T11288]  exc_page_fault+0x64/0x100
[  318.934348][T11288]  asm_exc_page_fault+0x26/0x30
[  318.939196][T11288] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  318.944995][T11288] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  318.964604][T11288] RSP: 0018:ffffc90003777ca0 EFLAGS: 00050202
[  318.970676][T11288] RAX: ffffffff842a1401 RBX: 00000000001ff001 RCX: 00000000001fd001
[  318.978635][T11288] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88804b202000
[  318.986598][T11288] RBP: ffffc90003777d01 R08: 0000000000000000 R09: 0000000000000001
[  318.994561][T11288] R10: dffffc0000000000 R11: ffffed100967fe00 R12: 00002000001ff001
[  319.002528][T11288] R13: ffff888031a41000 R14: ffff88804b200000 R15: 0000200000000000
[  319.010503][T11288]  ? _copy_from_user+0x11/0xe0
[  319.015282][T11288]  _copy_from_user+0x8b/0xe0
[  319.019980][T11288]  vmemdup_user+0xac/0x1e0
[  319.024406][T11288]  map_lookup_and_delete_elem+0x395/0xa50
[  319.030119][T11288]  ? __might_fault+0xaa/0x120
[  319.034791][T11288]  __sys_bpf+0x528/0x890
[  319.039025][T11288]  ? bpf_link_show_fdinfo+0x390/0x390
[  319.044390][T11288]  ? lock_chain_count+0x20/0x20
[  319.049241][T11288]  __x64_sys_bpf+0x7c/0x90
[  319.053648][T11288]  do_syscall_64+0x55/0xa0
[  319.058053][T11288]  ? clear_bhb_loop+0x40/0x90
[  319.062715][T11288]  ? clear_bhb_loop+0x40/0x90
[  319.067413][T11288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.073294][T11288] RIP: 0033:0x7fe1d279c799
[  319.077698][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.097322][T11288] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  319.105813][T11288] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  319.113790][T11288] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000015
[  319.121867][T11288] RBP: 00007fe1d2832c99 R08: 0000000000000000 R09: 0000000000000000
[  319.129850][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.137813][T11288] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  319.145783][T11288]  </TASK>
[  319.148873][T11288] 
[  319.151179][T11288] Allocated by task 11288:
[  319.155578][T11288]  kasan_set_track+0x4e/0x70
[  319.160159][T11288]  __kasan_kmalloc+0x8f/0xa0
[  319.164735][T11288]  __kmalloc_node+0xb4/0x230
[  319.169313][T11288]  bpf_map_area_alloc+0x5e/0x110
[  319.174245][T11288]  prealloc_elems_and_freelist+0x86/0x1c0
[  319.179952][T11288]  stack_map_alloc+0x33a/0x4c0
[  319.184708][T11288]  map_create+0x877/0x12f0
[  319.189195][T11288]  __sys_bpf+0x651/0x890
[  319.193423][T11288]  __x64_sys_bpf+0x7c/0x90
[  319.197820][T11288]  do_syscall_64+0x55/0xa0
[  319.202241][T11288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.208140][T11288] 
[  319.210458][T11288] Last potentially related work creation:
[  319.216163][T11288]  kasan_save_stack+0x3e/0x60
[  319.220841][T11288]  __kasan_record_aux_stack+0xaf/0xc0
[  319.226209][T11288]  call_rcu+0x153/0x950
[  319.230419][T11288]  __nf_register_net_hook+0x788/0x910
[  319.235782][T11288]  nf_register_net_hook+0xb2/0x190
[  319.240886][T11288]  nf_register_net_hooks+0x44/0x1b0
[  319.246070][T11288]  ipvlan_l3s_register+0x134/0x1d0
[  319.251172][T11288]  ipvlan_set_port_mode+0x195/0x3f0
[  319.256444][T11288]  ipvlan_link_new+0x710/0xa90
[  319.261201][T11288]  rtnl_newlink+0x1542/0x20a0
[  319.265864][T11288]  rtnetlink_rcv_msg+0x869/0xfa0
[  319.270791][T11288]  netlink_rcv_skb+0x241/0x4d0
[  319.275559][T11288]  netlink_unicast+0x751/0x8d0
[  319.280321][T11288]  netlink_sendmsg+0x8d0/0xbf0
[  319.285077][T11288]  __sys_sendto+0x4a9/0x6b0
[  319.289572][T11288]  __x64_sys_sendto+0xde/0xf0
[  319.294246][T11288]  do_syscall_64+0x55/0xa0
[  319.298654][T11288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.304543][T11288] 
[  319.306856][T11288] Second to last potentially related work creation:
[  319.313421][T11288]  kasan_save_stack+0x3e/0x60
[  319.318084][T11288]  __kasan_record_aux_stack+0xaf/0xc0
[  319.323552][T11288]  call_rcu+0x153/0x950
[  319.327796][T11288]  __nf_register_net_hook+0x788/0x910
[  319.333256][T11288]  nf_register_net_hook+0xb2/0x190
[  319.338366][T11288]  nf_register_net_hooks+0x44/0x1b0
[  319.343568][T11288]  nf_ct_netns_do_get+0x3c0/0x5c0
[  319.348677][T11288]  nf_ct_netns_inet_get+0x1f/0x150
[  319.353787][T11288]  nf_conncount_init+0x127/0x380
[  319.358732][T11288]  ovs_ct_init+0x316/0x490
[  319.363137][T11288]  ovs_init_net+0x1e6/0x250
[  319.367626][T11288]  ops_init+0x397/0x640
[  319.371770][T11288]  register_pernet_operations+0x2b3/0x610
[  319.377478][T11288]  register_pernet_device+0x2a/0x80
[  319.382666][T11288]  dp_init+0x95/0x160
[  319.386635][T11288]  do_one_initcall+0x242/0x790
[  319.391387][T11288]  do_initcall_level+0x137/0x1f0
[  319.396309][T11288]  do_initcalls+0x69/0xd0
[  319.400630][T11288]  kernel_init_freeable+0x3ed/0x580
[  319.405812][T11288]  kernel_init+0x1d/0x1c0
[  319.410131][T11288]  ret_from_fork+0x48/0x80
[  319.414535][T11288]  ret_from_fork_asm+0x11/0x20
[  319.419288][T11288] 
[  319.421602][T11288] The buggy address belongs to the object at ffff88802da03080
[  319.421602][T11288]  which belongs to the cache kmalloc-cg-64 of size 64
[  319.435738][T11288] The buggy address is located 16 bytes inside of
[  319.435738][T11288]  allocated 40-byte region [ffff88802da03080, ffff88802da030a8)
[  319.449696][T11288] 
[  319.452005][T11288] The buggy address belongs to the physical page:
[  319.458511][T11288] page:ffffea0000b680c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802da03000 pfn:0x2da03
[  319.470037][T11288] memcg:ffff888026d9c601
[  319.474270][T11288] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  319.482148][T11288] page_type: 0xffffffff()
[  319.486465][T11288] raw: 00fff00000000800 ffff888017c4da00 ffffea0000915740 0000000000000003
[  319.495031][T11288] raw: ffff88802da03000 000000008020001f 00000001ffffffff ffff888026d9c601
[  319.503594][T11288] page dumped because: kasan: bad access detected
[  319.509996][T11288] page_owner tracks the page as allocated
[  319.515780][T11288] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 15507257779, free_ts 15465069653
[  319.533317][T11288]  post_alloc_hook+0x1c1/0x200
[  319.538081][T11288]  get_page_from_freelist+0x1951/0x19e0
[  319.543616][T11288]  __alloc_pages+0x1f0/0x460
[  319.548282][T11288]  alloc_page_interleave+0x24/0x1e0
[  319.553495][T11288]  alloc_slab_page+0x5d/0x160
[  319.558244][T11288]  new_slab+0x87/0x2d0
[  319.562301][T11288]  ___slab_alloc+0xc5d/0x12f0
[  319.566966][T11288]  __kmem_cache_alloc_node+0x19e/0x250
[  319.572414][T11288]  __kmalloc_node+0xa4/0x230
[  319.576998][T11288]  kvmalloc_node+0x70/0x180
[  319.581499][T11288]  nf_hook_entries_grow+0x27d/0x6d0
[  319.586686][T11288]  __nf_register_net_hook+0x2c9/0x910
[  319.592146][T11288]  nf_register_net_hook+0xb2/0x190
[  319.597263][T11288]  nf_register_net_hooks+0x44/0x1b0
[  319.602444][T11288]  nf_defrag_ipv4_enable+0x87/0x110
[  319.607661][T11288]  nf_ct_netns_do_get+0x18d/0x5c0
[  319.612687][T11288] page last free stack trace:
[  319.617782][T11288]  free_unref_page_prepare+0x7b2/0x8c0
[  319.623240][T11288]  free_unref_page+0x32/0x2e0
[  319.627918][T11288]  __mmdrop+0xb4/0x3d0
[  319.631975][T11288]  free_bprm+0x171/0x3e0
[  319.636209][T11288]  kernel_execve+0x3c2/0x9c0
[  319.640791][T11288]  call_usermodehelper_exec_async+0x20b/0x350
[  319.646843][T11288]  ret_from_fork+0x48/0x80
[  319.651252][T11288]  ret_from_fork_asm+0x11/0x20
[  319.656009][T11288] 
[  319.658315][T11288] Memory state around the buggy address:
[  319.664023][T11288]  ffff88802da02f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  319.672242][T11288]  ffff88802da03000: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  319.680287][T11288] >ffff88802da03080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  319.688329][T11288]                                   ^
[  319.693681][T11288]  ffff88802da03100: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  319.701814][T11288]  ffff88802da03180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  319.709860][T11288] ==================================================================
[  319.718014][T11288] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  319.725200][T11288] CPU: 0 PID: 11288 Comm: syz.1.2002 Not tainted syzkaller #0
[  319.732652][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  319.742696][T11288] Call Trace:
[  319.745963][T11288]  <TASK>
[  319.748886][T11288]  dump_stack_lvl+0x18c/0x250
[  319.753569][T11288]  ? show_regs_print_info+0x20/0x20
[  319.758766][T11288]  ? load_image+0x400/0x400
[  319.763262][T11288]  panic+0x2dc/0x730
[  319.767150][T11288]  ? __lock_acquire+0x7d40/0x7d40
[  319.772167][T11288]  ? bpf_jit_dump+0xd0/0xd0
[  319.776665][T11288]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  319.782547][T11288]  ? _raw_spin_unlock+0x40/0x40
[  319.787387][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  319.792488][T11288]  check_panic_on_warn+0x84/0xa0
[  319.797418][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  319.802522][T11288]  end_report+0x6f/0x130
[  319.807027][T11288]  kasan_report+0x128/0x150
[  319.811606][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  319.816725][T11288]  kasan_check_range+0x241/0x290
[  319.821657][T11288]  ? __bpf_get_stackid+0x6bf/0x900
[  319.826757][T11288]  __asan_memcpy+0x40/0x70
[  319.831165][T11288]  __bpf_get_stackid+0x6bf/0x900
[  319.836099][T11288]  bpf_get_stackid_pe+0x343/0x410
[  319.841282][T11288]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  319.846725][T11288]  bpf_overflow_handler+0x1fc/0x510
[  319.852175][T11288]  ? perf_prepare_header+0x1e0/0x1e0
[  319.857444][T11288]  ? bpf_overflow_handler+0xde/0x510
[  319.862717][T11288]  ? tp_perf_event_destroy+0x20/0x20
[  319.868074][T11288]  ? unwind_get_return_address+0x91/0xc0
[  319.873697][T11288]  ? __perf_event_account_interrupt+0x187/0x280
[  319.879935][T11288]  __perf_event_overflow+0x447/0x630
[  319.885275][T11288]  perf_swevent_event+0x319/0x570
[  319.890288][T11288]  ? perf_tp_event+0x1520/0x1520
[  319.895215][T11288]  ? mark_lock+0x94/0x320
[  319.899535][T11288]  ___perf_sw_event+0x4a7/0x730
[  319.904379][T11288]  ? ___perf_sw_event+0x199/0x730
[  319.909400][T11288]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  319.915802][T11288]  ? rep_movs_alternative+0x4a/0x90
[  319.921077][T11288]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  319.927051][T11288]  ? lock_chain_count+0x20/0x20
[  319.932150][T11288]  __perf_sw_event+0x139/0x270
[  319.936903][T11288]  do_user_addr_fault+0x123e/0x12c0
[  319.942098][T11288]  ? rcu_is_watching+0x15/0xb0
[  319.946854][T11288]  exc_page_fault+0x64/0x100
[  319.951433][T11288]  asm_exc_page_fault+0x26/0x30
[  319.956297][T11288] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  319.962112][T11288] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  319.981707][T11288] RSP: 0018:ffffc90003777ca0 EFLAGS: 00050202
[  319.987760][T11288] RAX: ffffffff842a1401 RBX: 00000000001ff001 RCX: 00000000001fd001
[  319.995720][T11288] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88804b202000
[  320.003679][T11288] RBP: ffffc90003777d01 R08: 0000000000000000 R09: 0000000000000001
[  320.011669][T11288] R10: dffffc0000000000 R11: ffffed100967fe00 R12: 00002000001ff001
[  320.019652][T11288] R13: ffff888031a41000 R14: ffff88804b200000 R15: 0000200000000000
[  320.027964][T11288]  ? _copy_from_user+0x11/0xe0
[  320.032846][T11288]  _copy_from_user+0x8b/0xe0
[  320.037478][T11288]  vmemdup_user+0xac/0x1e0
[  320.041894][T11288]  map_lookup_and_delete_elem+0x395/0xa50
[  320.047612][T11288]  ? __might_fault+0xaa/0x120
[  320.052455][T11288]  __sys_bpf+0x528/0x890
[  320.056692][T11288]  ? bpf_link_show_fdinfo+0x390/0x390
[  320.062061][T11288]  ? lock_chain_count+0x20/0x20
[  320.067018][T11288]  __x64_sys_bpf+0x7c/0x90
[  320.071428][T11288]  do_syscall_64+0x55/0xa0
[  320.075835][T11288]  ? clear_bhb_loop+0x40/0x90
[  320.080598][T11288]  ? clear_bhb_loop+0x40/0x90
[  320.085304][T11288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.091184][T11288] RIP: 0033:0x7fe1d279c799
[  320.095589][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.115278][T11288] RSP: 002b:00007fe1d3690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  320.123685][T11288] RAX: ffffffffffffffda RBX: 00007fe1d2a15fa0 RCX: 00007fe1d279c799
[  320.131644][T11288] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000015
[  320.139600][T11288] RBP: 00007fe1d2832c99 R08: 0000000000000000 R09: 0000000000000000
[  320.147558][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.155516][T11288] R13: 00007fe1d2a16038 R14: 00007fe1d2a15fa0 R15: 00007ffeeed582d8
[  320.163499][T11288]  </TASK>
[  320.167053][T11288] Kernel Offset: disabled
[  320.171364][T11288] Rebooting in 86400 seconds..