last executing test programs:

5.019799689s ago: executing program 2 (id=2320):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xdc0, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x3e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)

4.709617959s ago: executing program 2 (id=2322):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1b1a82, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000", 0x8}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x7, &(0x7f0000000000)=r3, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1000})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

4.528571305s ago: executing program 2 (id=2324):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES8=r0, @ANYRESHEX=r0], 0x50)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b8e153ccdf10b894d755e849d01bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9697697b53fee3e5f94497031ff2e460d2c011d0db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce00000000000000006494e8109c9ac6ab28db3c65c78c067856bdd51479d9a70cb70f61d174fb23c65e8b46b913796911739a545339ad546ffb3cc017cc0135c0ff04fd8b89a4c69a2abd4303faa480f4ec59a17bb07a8da9a7b7ce1a2bf5388aadce36071bff945c281d03e8d41338d5cbbd80ab84a726f5d1c395e67c74f8261cb83b9aac0fee3f9ac8bce811a4331264a8773fc1f7c9aa246295027d248754b80a2923d35e8016ea876a3b080cd7441d1b76cd566988ff0d4ad44e7de64de907165af57a2e0a7fb80394960bffb935", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e", 0x98}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080))
r6 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ed, 0x3}, 0x823, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000008000000000000000fbffffff18110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020010007b8af8ff00000000bfa800000000000007020000f8ffffffb703000008000000b7040000010000008500400082000000b7080000000000007baaf8ff00000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000000ffffffb702000008000000182300007a355a31ecdb8b625a0d81dc4206b817a721411d7a5aab3e74fce8fe5347dc10a082b0161ce0343b7f8874c5bb44e0a0613c82595b1af70341745a5d92905af711", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
r8 = socket$kcm(0x2, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6b, &(0x7f0000000000)=r10, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r10, 0x4000, r7}, 0x18)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x50}, 0x0)

4.401327299s ago: executing program 1 (id=2325):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES8=r0, @ANYRESHEX=r0], 0x50)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98", 0x82}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080))
r6 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ed, 0x3}, 0x823, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000008000000000000000fbffffff18110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020010007b8af8ff00000000bfa800000000000007020000f8ffffffb703000008000000b7040000010000008500400082000000b7080000000000007baaf8ff00000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000000ffffffb702000008000000182300007a355a31ecdb8b625a0d81dc4206b817a721411d7a5aab3e74fce8fe5347dc10a082b0161ce0343b7f8874c5bb44e0a0613c82595b1af70341745a5d92905af711", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
r8 = socket$kcm(0x2, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6b, &(0x7f0000000000)=r10, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r10, 0x4000, r7}, 0x18)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x50}, 0x0)

3.625736994s ago: executing program 3 (id=2329):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xdc0, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x3e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)

3.613713474s ago: executing program 2 (id=2330):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000007000000000000000002000006040000000000000000000000000000000000000000000000000000090000000000000000000009"], 0x0, 0x5a}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xa, 0x7fffffdb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2000008, 0x0, 0x4}, 0x50)
r4 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x10000, 0x0, r3, 0xb}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x4}, 0x20)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffc4c, &(0x7f0000000080), 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe8a)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRESHEX=r1, @ANYBLOB="1c6e401e", @ANYRESDEC=r4, @ANYRES16=r7], 0xa)

3.379458712s ago: executing program 1 (id=2331):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xc4, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x7, 0xb, 0x40, 0x4}, @generic={0x3, 0x7, 0x6, 0xfffd, 0x3}]}, &(0x7f00000009c0)='GPL\x00', 0x10001, 0x94, &(0x7f0000000a00)=""/148, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r1, r1, r1, r1, r1], &(0x7f0000000b40)=[{0x5, 0x3, 0xf, 0x1}], 0x10, 0x652}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0xd, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xee55, 0x0, 0x0, 0x0, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], &(0x7f0000000400)='syzkaller\x00', 0xd9e, 0x2a, &(0x7f0000000540)=""/42, 0x41100, 0x3, '\x00', 0x0, @sk_lookup=0x24, r3, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff, 0xf}, 0x10, r4, r5, 0x8, &(0x7f0000000c40)=[r1, r1, r1, r1, r1, r1, r1, r6], &(0x7f0000000c80)=[{0x5, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0xb}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x6}, 0x94)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x7f, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r2, r8, 0x10, 0x2020, 0x0, @void, @void, @value=r9}, 0x20)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208001d0040001101a8002e000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

3.312732394s ago: executing program 3 (id=2333):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="34329d06dc104329b5b5fee5", 0xc}, {&(0x7f0000000500)="b59c4dd9f75e904766fd9575954f2dae1bab5b01eca31e70c9ea4bbc39338fc2deaedf6e0f8818c0b4cf612c75b9f15efa2c73fd0c47acfd7a06fc221f1a2c8119298a64101812b08bc7fc5e68e47211d1a512e25d8415043a464d380e9b1815a8b77ed3", 0x64}, {&(0x7f0000000900)="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", 0xcdc}], 0x3}, 0x4010)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3.104234841s ago: executing program 1 (id=2334):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="34329d06dc104329b5b5fee5", 0xc}, {&(0x7f0000000500)="b59c4dd9f75e904766fd9575954f2dae1bab5b01eca31e70c9ea4bbc39338fc2deaedf6e0f8818c0b4cf612c75b9f15efa2c73fd0c47acfd7a06fc221f1a2c8119298a64101812b08bc7fc5e68e47211d1a512e25d8415043a464d380e9b1815a8b7", 0x62}, {&(0x7f0000000900)="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", 0xcdc}], 0x3}, 0x4010)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2.705663133s ago: executing program 0 (id=2337):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x2e, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000054ad000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000ad89020000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018260000", @ANYRES32, @ANYBLOB="0000000008000000183500000500000000000000000000001800000001000000000000000200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000088ccf00b7030000050000008500000006000000185400000b0000000000000000000000bf91000000000000b70200000100000085000000850000c03c905a247600b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x3, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r3, r2, r3], 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x31638efeb2bb4f96}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xc, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000023000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089b"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4)
sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

2.626376106s ago: executing program 3 (id=2338):
r0 = socket$kcm(0xa, 0x3, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1)
setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000300), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x30, 0x5f, 0x61]}}, &(0x7f0000000340)=""/91, 0x1d, 0x5b, 0x0, 0xfb64}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r2 = socket$kcm(0x2c, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x98}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, r3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x102d0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x6}, 0xc001, 0x10040, 0xfffffffc, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305828, &(0x7f0000000040))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0}, 0x20040000)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)=0x20000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x7, 0x0, 0x0, 0x7e93, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x116b2, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r4, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2.399036843s ago: executing program 0 (id=2339):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x80000000, [{0xe, 0x5, 0xfa}]}]}, {0x0, [0x5f, 0x2e, 0x0]}}, 0x0, 0x35, 0x0, 0x0, 0x6}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x0, 0x0, 0x8000, 0x1020}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="7974b26d8d28d17af89c055f03180020fae12540f5e0bce3271ed7e5d0721c8bb9b9134e144d6510619faa7235d1a4146eea99649d2c3769a2d3beb2d644a00e1d19c119f4a1792db9f1fbf911bfeb88737416ac0e8a6622885ffe0254c0f655588133b63ba73f8f492c0b6bed8797b40819db1eacf67c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}, {0x2b, 'cpu'}, {0x2b, 'perf_event'}, {0x5c, 'net_cls'}]}, 0x20)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twww'], 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b", 0x27}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x22, &(0x7f0000000000), 0x10)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x4000)

2.337690785s ago: executing program 3 (id=2340):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES8=r0, @ANYRESHEX=r0], 0x50)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff7b2c20cad352b1", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98", 0x82}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080))
r6 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ed, 0x3}, 0x823, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000008000000000000000fbffffff18110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020010007b8af8ff00000000bfa800000000000007020000f8ffffffb703000008000000b7040000010000008500400082000000b7080000000000007baaf8ff00000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000000ffffffb702000008000000182300007a355a31ecdb8b625a0d81dc4206b817a721411d7a5aab3e74fce8fe5347dc10a082b0161ce0343b7f8874c5bb44e0a0613c82595b1af70341745a5d92905af711", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
r8 = socket$kcm(0x2, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6b, &(0x7f0000000000)=r10, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r10, 0x4000, r7}, 0x18)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x50}, 0x0)

2.278840337s ago: executing program 1 (id=2341):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)

1.950433998s ago: executing program 2 (id=2342):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xdc0, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x3e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)

1.844326801s ago: executing program 1 (id=2343):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES8=r0, @ANYRESHEX=r0], 0x50)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e", 0x98}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080))
r6 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ed, 0x3}, 0x823, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000008000000000000000fbffffff18110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020010007b8af8ff00000000bfa800000000000007020000f8ffffffb703000008000000b7040000010000008500400082000000b7080000000000007baaf8ff00000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000000ffffffb702000008000000182300007a355a31ecdb8b625a0d81dc4206b817a721411d7a5aab3e74fce8fe5347dc10a082b0161ce0343b7f8874c5bb44e0a0613c82595b1af70341745a5d92905af711", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
r8 = socket$kcm(0x2, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6b, &(0x7f0000000000)=r10, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r10, 0x4000, r7}, 0x18)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x50}, 0x0)

1.478944642s ago: executing program 3 (id=2344):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xdc0, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x3e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)

1.476442122s ago: executing program 0 (id=2352):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000000000000000000008000000000000000083f993d587", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38000d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)="c0", 0x1}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000980)={<r3=>0x0, 0x0})
close(r3)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, &(0x7f0000000300), 0x4)
r4 = getpid()
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x81, 0x42, 0x2, 0x0, 0xc, 0x44094, 0x1c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x4}, 0x6400, 0x1, 0xf0, 0x5, 0x2, 0x1, 0xc4f, 0x0, 0x2, 0x0, 0x5}, r4, 0xd, 0xffffffffffffffff, 0x9)
r5 = socket$kcm(0x2, 0xa, 0x2)
socketpair(0x23, 0x6, 0xc0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x12101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

1.475960742s ago: executing program 2 (id=2345):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1b1a82, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x7, &(0x7f0000000000)=r3, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1000})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

1.279202909s ago: executing program 3 (id=2346):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="34329d06dc104329b5b5fee5", 0xc}, {&(0x7f0000000500)="b59c4dd9f75e904766fd9575954f2dae1bab5b01eca31e70c9ea4bbc39338fc2deaedf6e0f8818c0b4cf612c75b9f15efa2c73fd0c47acfd7a06fc221f1a2c8119298a64101812b08bc7fc5e68e47211d1a512e25d8415043a464d380e9b1815a8b77ed3", 0x64}, {&(0x7f0000000900)="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", 0xcdc}], 0x3}, 0x4010)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

810.136404ms ago: executing program 1 (id=2348):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000001c0)='{', 0x1}], 0x1}, 0x4000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12)
r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

695.508538ms ago: executing program 0 (id=2349):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r6, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18)
r7 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4)

445.504615ms ago: executing program 0 (id=2350):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xc4, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0xd, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xee55, 0x0, 0x0, 0x0, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], &(0x7f0000000400)='syzkaller\x00', 0xd9e, 0x2a, &(0x7f0000000540)=""/42, 0x41100, 0x3, '\x00', 0x0, @sk_lookup=0x24, r3, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff, 0xf}, 0x10, r4, r5, 0x8, &(0x7f0000000c40)=[r1, r1, r1, r1, r1, r1, r1, r6], &(0x7f0000000c80)=[{0x5, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0xb}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x6}, 0x94)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x7f, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r2, r8, 0x10, 0x2020, 0x0, @void, @void, @value=r9}, 0x20)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208001d0040001101a8002e000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

0s ago: executing program 0 (id=2351):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

0][ T9040]  __kmem_cache_alloc_node+0x53/0x250
[  226.824206][ T9040]  ? bpf_ctx_init+0xbd/0x1a0
[  226.828830][ T9040]  __kmalloc+0xa4/0x230
[  226.833025][ T9040]  bpf_ctx_init+0xbd/0x1a0
[  226.837472][ T9040]  bpf_prog_test_run_flow_dissector+0x2eb/0x640
[  226.843746][ T9040]  ? xdp_convert_buff_to_md+0x200/0x200
[  226.849315][ T9040]  ? __fget_files+0x28/0x4b0
[  226.853928][ T9040]  ? __fget_files+0x28/0x4b0
[  226.858548][ T9040]  ? __fget_files+0x43d/0x4b0
[  226.863246][ T9040]  ? xdp_convert_buff_to_md+0x200/0x200
[  226.868803][ T9040]  bpf_prog_test_run+0x321/0x390
[  226.873750][ T9040]  __sys_bpf+0x49d/0x890
[  226.878005][ T9040]  ? bpf_link_show_fdinfo+0x390/0x390
[  226.883403][ T9040]  ? lock_chain_count+0x20/0x20
[  226.888274][ T9040]  __x64_sys_bpf+0x7c/0x90
[  226.892712][ T9040]  do_syscall_64+0x55/0xb0
[  226.897126][ T9040]  ? clear_bhb_loop+0x40/0x90
[  226.901800][ T9040]  ? clear_bhb_loop+0x40/0x90
[  226.906476][ T9040]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.912373][ T9040] RIP: 0033:0x7f7bc139ce59
[  226.916819][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.936424][ T9040] RSP: 002b:00007f7bc2221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  226.944834][ T9040] RAX: ffffffffffffffda RBX: 00007f7bc1615fa0 RCX: 00007f7bc139ce59
[  226.952809][ T9040] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a
[  226.960772][ T9040] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  226.968734][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.976708][ T9040] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  226.984772][ T9040]  </TASK>
[  227.215254][  T788] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  227.252332][ T9054] netlink: 'syz.1.1188': attribute type 10 has an invalid length.
[  227.332889][ T9054] team0: Port device geneve1 added
[  227.586114][ T9059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.613510][ T9059] netlink: 'syz.2.1190': attribute type 9 has an invalid length.
[  227.622105][ T9059] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1190'.
[  227.934456][ T9069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.940648][ T9064] netlink: 'syz.2.1190': attribute type 9 has an invalid length.
[  227.951882][ T9064] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1190'.
[  228.073957][ T9074] netlink: 'syz.3.1192': attribute type 9 has an invalid length.
[  228.099789][ T9074] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1192'.
[  228.130795][ T9069] netlink: 'syz.3.1192': attribute type 9 has an invalid length.
[  228.156251][ T9069] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1192'.
[  228.699323][ T9088] netlink: 'syz.2.1200': attribute type 46 has an invalid length.
[  228.718291][ T9088] netlink: 'syz.2.1200': attribute type 46 has an invalid length.
[  228.973063][ T9094] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1210'.
[  229.113486][ T9102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  229.221858][ T9102] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1206'.
[  229.935984][ T9109] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1206'.
[  233.012702][ T9149] validate_nla: 7 callbacks suppressed
[  233.012736][ T9149] netlink: 'syz.2.1221': attribute type 12 has an invalid length.
[  233.032938][ T9149] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1221'.
[  233.528228][ T9184] netlink: 'syz.2.1224': attribute type 12 has an invalid length.
[  233.536133][ T9184] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1224'.
[  233.921904][ T9210] netlink: 'syz.0.1226': attribute type 12 has an invalid length.
[  233.959098][ T9210] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1226'.
[  234.001700][ T9211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1227'.
[  234.740390][ T9235] netlink: 'syz.3.1235': attribute type 58 has an invalid length.
[  234.766948][ T9235] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1235'.
[  234.811920][ T9240] netlink: 'syz.1.1236': attribute type 46 has an invalid length.
[  234.831358][ T9240] netlink: 'syz.1.1236': attribute type 46 has an invalid length.
[  235.018444][ T9243] netlink: 'syz.0.1237': attribute type 12 has an invalid length.
[  235.030600][ T9243] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1237'.
[  235.078576][ T9247] netlink: 'syz.3.1238': attribute type 12 has an invalid length.
[  235.104724][ T9247] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1238'.
[  235.297683][ T9259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  235.322945][ T9259] netlink: 'syz.0.1240': attribute type 9 has an invalid length.
[  235.335003][ T9259] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1240'.
[  235.767238][ T9263] netlink: 'syz.0.1240': attribute type 9 has an invalid length.
[  235.775029][ T9263] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1240'.
[  235.913752][ T9281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  235.974423][ T9281] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1243'.
[  236.135607][ T9286] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1243'.
[  236.822007][ T9306] geneve1: entered promiscuous mode
[  236.850708][ T9306] geneve1: entered allmulticast mode
[  236.856894][ T9306] team0: Port device geneve1 added
[  237.724061][ T9339] bridge_slave_1: left allmulticast mode
[  237.747531][ T9339] bridge_slave_1: left promiscuous mode
[  237.765598][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.884122][ T9339] bridge_slave_0: left allmulticast mode
[  237.913388][ T9339] bridge_slave_0: left promiscuous mode
[  237.928661][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.691726][ T9341] validate_nla: 10 callbacks suppressed
[  238.691742][ T9341] netlink: 'syz.1.1269': attribute type 10 has an invalid length.
[  238.714715][ T9343] netlink: 'syz.3.1271': attribute type 46 has an invalid length.
[  238.724415][ T9345] netlink: 'syz.3.1271': attribute type 39 has an invalid length.
[  238.964773][ T9359] netlink: 'syz.2.1275': attribute type 58 has an invalid length.
[  238.986870][ T9359] __nla_validate_parse: 3 callbacks suppressed
[  238.986906][ T9359] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1275'.
[  239.396935][ T9374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.411428][ T9378] netlink: 'syz.2.1282': attribute type 46 has an invalid length.
[  239.429048][ T9378] netlink: 'syz.2.1282': attribute type 46 has an invalid length.
[  239.452867][ T9378] netlink: 'syz.2.1282': attribute type 39 has an invalid length.
[  239.474657][ T9374] netlink: 'syz.1.1281': attribute type 9 has an invalid length.
[  239.489483][ T9374] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1281'.
[  239.653278][ T9383] FAULT_INJECTION: forcing a failure.
[  239.653278][ T9383] name failslab, interval 1, probability 0, space 0, times 0
[  239.693385][ T9383] CPU: 0 PID: 9383 Comm: syz.2.1284 Not tainted syzkaller #0
[  239.700822][ T9383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  239.710902][ T9383] Call Trace:
[  239.714201][ T9383]  <TASK>
[  239.717146][ T9383]  dump_stack_lvl+0x18c/0x250
[  239.721858][ T9383]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  239.728047][ T9383]  ? show_regs_print_info+0x20/0x20
[  239.733273][ T9383]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  239.739482][ T9383]  should_fail_ex+0x39d/0x4d0
[  239.744195][ T9383]  should_failslab+0x9/0x20
[  239.748726][ T9383]  slab_pre_alloc_hook+0x59/0x310
[  239.753783][ T9383]  kmem_cache_alloc+0x5a/0x2d0
[  239.758579][ T9383]  ? skb_clone+0x1eb/0x370
[  239.763022][ T9383]  skb_clone+0x1eb/0x370
[  239.767299][ T9383]  __netlink_deliver_tap+0x41c/0x830
[  239.772622][ T9383]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.777932][ T9383]  netlink_deliver_tap+0x19c/0x1b0
[  239.783073][ T9383]  netlink_sendskb+0x68/0x130
[  239.787778][ T9383]  netlink_ack+0xce1/0x1180
[  239.792307][ T9383]  ? __inet_diag_dump+0x380/0x380
[  239.797439][ T9383]  ? netlink_dump+0xe50/0xe50
[  239.800100][ T9381] netlink: 'syz.1.1281': attribute type 9 has an invalid length.
[  239.802124][ T9383]  ? __inet_diag_dump+0x380/0x380
[  239.802177][ T9383]  ? sock_diag_rcv_msg+0x402/0x600
[  239.820045][ T9383]  netlink_rcv_skb+0x2c5/0x4d0
[  239.824821][ T9383]  ? sock_diag_bind+0xb0/0xb0
[  239.829500][ T9383]  ? netlink_ack+0x1180/0x1180
[  239.834267][ T9383]  ? __lock_acquire+0x7d40/0x7d40
[  239.839300][ T9383]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.844518][ T9383]  sock_diag_rcv+0x2a/0x40
[  239.848948][ T9383]  netlink_unicast+0x751/0x8d0
[  239.853798][ T9383]  netlink_sendmsg+0x8d0/0xbf0
[  239.858574][ T9383]  ? lockdep_hardirqs_on+0x98/0x150
[  239.863785][ T9383]  ? netlink_getsockopt+0x590/0x590
[  239.868984][ T9383]  ? aa_sock_msg_perm+0x94/0x150
[  239.873926][ T9383]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  239.879295][ T9383]  ? security_socket_sendmsg+0x80/0xa0
[  239.884743][ T9383]  ? netlink_getsockopt+0x590/0x590
[  239.889939][ T9383]  ____sys_sendmsg+0x5ba/0x960
[  239.894705][ T9383]  ? __asan_memset+0x22/0x40
[  239.899298][ T9383]  ? __sys_sendmsg_sock+0x30/0x30
[  239.904322][ T9383]  ? __import_iovec+0x5f2/0x850
[  239.909175][ T9383]  ? import_iovec+0x73/0xa0
[  239.913683][ T9383]  ___sys_sendmsg+0x2a6/0x360
[  239.918354][ T9383]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  239.924509][ T9383]  ? __sys_sendmsg+0x2a0/0x2a0
[  239.929282][ T9383]  ? __lock_acquire+0x7d40/0x7d40
[  239.934319][ T9383]  __se_sys_sendmsg+0x1c2/0x2b0
[  239.939165][ T9383]  ? __x64_sys_sendmsg+0x80/0x80
[  239.944114][ T9383]  do_syscall_64+0x55/0xb0
[  239.948524][ T9383]  ? clear_bhb_loop+0x40/0x90
[  239.953192][ T9383]  ? clear_bhb_loop+0x40/0x90
[  239.957861][ T9383]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.963751][ T9383] RIP: 0033:0x7f066159ce59
[  239.968170][ T9383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.987806][ T9383] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.996249][ T9383] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  240.004478][ T9383] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[  240.012445][ T9383] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  240.020413][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.028379][ T9383] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  240.036358][ T9383]  </TASK>
[  240.064193][ T9381] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1281'.
[  240.382193][ T9395] netlink: 'syz.2.1288': attribute type 10 has an invalid length.
[  240.414952][ T9399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.427341][ T9399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.437816][ T9399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.445699][ T9399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.587941][ T9400] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1289'.
[  240.956281][ T9414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  240.985298][ T9414] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1297'.
[  241.195471][ T9423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  241.236306][ T9419] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1297'.
[  241.310780][ T9423] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1299'.
[  241.713615][ T9424] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1299'.
[  241.893882][ T9433] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1303'.
[  242.203288][ T9442] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1307'.
[  242.835366][ T9466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.566406][ T9491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.784149][ T9495] validate_nla: 23 callbacks suppressed
[  243.784166][ T9495] netlink: 'syz.3.1320': attribute type 9 has an invalid length.
[  243.916645][ T9503] netlink: 'syz.1.1326': attribute type 58 has an invalid length.
[  244.172382][ T9510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  244.186722][ T9512] netlink: 'syz.2.1331': attribute type 46 has an invalid length.
[  244.207534][ T9512] netlink: 'syz.2.1331': attribute type 46 has an invalid length.
[  244.217014][ T9512] netlink: 'syz.2.1331': attribute type 39 has an invalid length.
[  244.243147][ T9514] netlink: 'syz.3.1330': attribute type 9 has an invalid length.
[  244.251202][ T9514] __nla_validate_parse: 7 callbacks suppressed
[  244.251215][ T9514] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1330'.
[  244.267861][ T9510] netlink: 'syz.3.1330': attribute type 9 has an invalid length.
[  244.276146][ T9510] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1330'.
[  244.521857][ T9516] netlink: 'syz.2.1333': attribute type 12 has an invalid length.
[  244.546644][ T9516] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1333'.
[  244.611092][ T9519] netlink: 'syz.0.1332': attribute type 10 has an invalid length.
[  245.141144][ T9528] netlink: 'syz.0.1337': attribute type 58 has an invalid length.
[  245.181029][ T9528] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1337'.
[  245.376380][ T9538] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1342'.
[  245.856860][ T9554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  245.931150][ T9554] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1348'.
[  246.052698][ T9559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  246.114980][ T9557] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1348'.
[  246.165469][ T9560] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1350'.
[  246.183781][ T9559] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1350'.
[  246.194465][ T9562] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1351'.
[  246.601731][ T9565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.638904][ T9565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.691117][ T9565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.710664][ T9565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.101418][ T9654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.111867][ T9654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.120084][ T9654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.128344][ T9654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.313574][ T9657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  250.352921][ T9657] validate_nla: 23 callbacks suppressed
[  250.352944][ T9657] netlink: 'syz.1.1385': attribute type 9 has an invalid length.
[  250.370715][ T9657] __nla_validate_parse: 6 callbacks suppressed
[  250.370762][ T9657] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1385'.
[  250.517017][ T9665] netlink: 'syz.3.1389': attribute type 46 has an invalid length.
[  250.553604][ T9665] netlink: 'syz.3.1389': attribute type 46 has an invalid length.
[  251.310505][ T9668] netlink: 'syz.3.1389': attribute type 39 has an invalid length.
[  251.327785][ T9662] netlink: 'syz.1.1385': attribute type 9 has an invalid length.
[  251.354990][ T9662] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1385'.
[  251.483712][ T9674] team0: left allmulticast mode
[  251.507555][ T9674] team_slave_0: left allmulticast mode
[  251.513302][ T9674] team_slave_1: left allmulticast mode
[  251.519347][ T9674] geneve1: left allmulticast mode
[  251.524587][ T9674] team0: left promiscuous mode
[  251.534901][ T9674] team_slave_0: left promiscuous mode
[  251.540914][ T9674] team_slave_1: left promiscuous mode
[  251.549547][ T9674] geneve1: left promiscuous mode
[  251.555046][ T9674] bridge0: port 3(team0) entered disabled state
[  251.575212][ T9674] bridge_slave_1: left allmulticast mode
[  251.581106][ T9674] bridge_slave_1: left promiscuous mode
[  251.587200][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.601545][ T9674] bridge_slave_0: left allmulticast mode
[  251.607466][ T9674] bridge_slave_0: left promiscuous mode
[  251.613446][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.010205][ T9684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.034171][ T9684] netlink: 'syz.3.1403': attribute type 9 has an invalid length.
[  252.042554][ T9684] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1403'.
[  252.126253][ T9688] netlink: 'syz.3.1403': attribute type 9 has an invalid length.
[  252.137208][ T9688] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1403'.
[  252.662751][ T9701] netlink: 'syz.1.1401': attribute type 12 has an invalid length.
[  252.687410][ T9701] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1401'.
[  253.010486][ T9720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.065828][ T9720] netlink: 'syz.0.1407': attribute type 9 has an invalid length.
[  253.075720][ T9720] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.1407'.
[  253.493348][ T9722] netlink: 'syz.0.1407': attribute type 9 has an invalid length.
[  253.501755][ T9722] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.1407'.
[  253.718845][ T9741] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1415'.
[  254.474954][ T9772] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1425'.
[  254.564435][ T9775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  254.598642][ T9775] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.1424'.
[  255.851047][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.858001][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  255.910695][ T9828] validate_nla: 11 callbacks suppressed
[  255.910711][ T9828] netlink: 'syz.2.1440': attribute type 46 has an invalid length.
[  255.940640][ T9828] netlink: 'syz.2.1440': attribute type 46 has an invalid length.
[  255.980462][ T9830] netlink: 'syz.2.1440': attribute type 39 has an invalid length.
[  257.024238][ T9863] netlink: 'syz.0.1452': attribute type 46 has an invalid length.
[  257.036887][ T9863] netlink: 'syz.0.1452': attribute type 46 has an invalid length.
[  257.054195][ T9863] netlink: 'syz.0.1452': attribute type 39 has an invalid length.
[  257.074291][ T9865] netlink: 'syz.2.1451': attribute type 58 has an invalid length.
[  257.083041][ T9865] __nla_validate_parse: 2 callbacks suppressed
[  257.083073][ T9865] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1451'.
[  257.520932][ T9877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  257.559741][ T9877] netlink: 'syz.2.1457': attribute type 9 has an invalid length.
[  257.591307][ T9877] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.1457'.
[  257.850271][ T9878] netlink: 'syz.2.1457': attribute type 9 has an invalid length.
[  257.895185][ T9878] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.1457'.
[  258.457731][ T9898] netlink: 'syz.1.1463': attribute type 58 has an invalid length.
[  258.497408][ T9898] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1463'.
[  259.036342][ T9916] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1470'.
[  259.358647][ T9928] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1475'.
[  259.545500][ T9932] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1477'.
[  259.602632][ T9932] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  260.034250][ T9947] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1483'.
[  260.152541][ T9950] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1485'.
[  261.006991][ T9984] validate_nla: 7 callbacks suppressed
[  261.007007][ T9984] netlink: 'syz.3.1494': attribute type 46 has an invalid length.
[  261.023584][ T9984] netlink: 'syz.3.1494': attribute type 46 has an invalid length.
[  261.075620][ T9988] netlink: 'syz.3.1494': attribute type 39 has an invalid length.
[  262.107186][T10001] netlink: 'syz.2.1497': attribute type 10 has an invalid length.
[  262.129233][T10001] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1497'.
[  262.218880][T10007] netlink: 'syz.3.1499': attribute type 10 has an invalid length.
[  263.625741][T10037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.659633][T10037] netlink: 'syz.3.1508': attribute type 9 has an invalid length.
[  263.668575][T10037] netlink: 194424 bytes leftover after parsing attributes in process `syz.3.1508'.
[  264.185778][T10046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  264.200616][T10040] netlink: 'syz.3.1508': attribute type 9 has an invalid length.
[  264.228904][T10040] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.1508'.
[  264.333640][T10046] netlink: 'syz.1.1509': attribute type 9 has an invalid length.
[  264.366184][T10046] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.1509'.
[  264.436026][T10055] netlink: 'syz.2.1512': attribute type 46 has an invalid length.
[  264.676093][T10055] netlink: 'syz.2.1512': attribute type 46 has an invalid length.
[  264.783988][T10048] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.1509'.
[  264.962596][T10060] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1514'.
[  265.126864][T10073] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1519'.
[  265.268677][T10080] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1521'.
[  265.894575][T10093] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1526'.
[  266.029717][T10097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  266.133306][T10097] validate_nla: 7 callbacks suppressed
[  266.133397][T10097] netlink: 'syz.0.1529': attribute type 9 has an invalid length.
[  266.163787][T10097] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.1529'.
[  266.693940][T10103] netlink: 'syz.0.1529': attribute type 9 has an invalid length.
[  267.415958][T10146] FAULT_INJECTION: forcing a failure.
[  267.415958][T10146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.435330][T10146] CPU: 0 PID: 10146 Comm: syz.2.1546 Not tainted syzkaller #0
[  267.442855][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  267.453019][T10146] Call Trace:
[  267.456291][T10146]  <TASK>
[  267.459222][T10146]  dump_stack_lvl+0x18c/0x250
[  267.463901][T10146]  ? show_regs_print_info+0x20/0x20
[  267.469123][T10146]  ? load_image+0x420/0x420
[  267.473621][T10146]  ? __lock_acquire+0x7d40/0x7d40
[  267.478651][T10146]  ? snprintf+0xe9/0x140
[  267.482930][T10146]  should_fail_ex+0x39d/0x4d0
[  267.487662][T10146]  _copy_to_user+0x2f/0xa0
[  267.492121][T10146]  simple_read_from_buffer+0xe7/0x150
[  267.497529][T10146]  proc_fail_nth_read+0x1e8/0x260
[  267.502587][T10146]  ? proc_fault_inject_write+0x360/0x360
[  267.508337][T10146]  ? fsnotify_perm+0x271/0x5e0
[  267.513115][T10146]  ? proc_fault_inject_write+0x360/0x360
[  267.518793][T10146]  vfs_read+0x28b/0x970
[  267.523074][T10146]  ? kernel_read+0x1e0/0x1e0
[  267.527692][T10146]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  267.533874][T10146]  ? lockdep_hardirqs_on+0x98/0x150
[  267.539097][T10146]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  267.545302][T10146]  ksys_read+0x150/0x260
[  267.549748][T10146]  ? vfs_write+0x990/0x990
[  267.554193][T10146]  ? lockdep_hardirqs_on+0x98/0x150
[  267.559598][T10146]  do_syscall_64+0x55/0xb0
[  267.564035][T10146]  ? clear_bhb_loop+0x40/0x90
[  267.568740][T10146]  ? clear_bhb_loop+0x40/0x90
[  267.573442][T10146]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.579450][T10146] RIP: 0033:0x7f066155d68e
[  267.583885][T10146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  267.603522][T10146] RSP: 002b:00007f0662498fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  267.611968][T10146] RAX: ffffffffffffffda RBX: 00007f06624996c0 RCX: 00007f066155d68e
[  267.620134][T10146] RDX: 000000000000000f RSI: 00007f06624990a0 RDI: 000000000000000c
[  267.628119][T10146] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  267.636191][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.644229][T10146] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  267.652242][T10146]  </TASK>
[  267.688934][T10140] netlink: 'syz.0.1543': attribute type 10 has an invalid length.
[  267.697910][T10140] __nla_validate_parse: 1 callbacks suppressed
[  267.698047][T10140] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1543'.
[  268.754560][T10155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  268.793564][T10155] netlink: 'syz.2.1548': attribute type 9 has an invalid length.
[  268.827865][T10155] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.1548'.
[  269.205774][T10161] netlink: 'syz.2.1548': attribute type 9 has an invalid length.
[  269.221343][T10161] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.1548'.
[  271.183535][T10178] netlink: 'syz.3.1558': attribute type 10 has an invalid length.
[  271.216136][T10175] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  271.627463][T10196] netlink: 'syz.3.1564': attribute type 3 has an invalid length.
[  271.635801][T10196] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1564'.
[  272.111770][T10214] FAULT_INJECTION: forcing a failure.
[  272.111770][T10214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.125213][T10214] CPU: 1 PID: 10214 Comm: syz.3.1568 Not tainted syzkaller #0
[  272.132715][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  272.142888][T10214] Call Trace:
[  272.146203][T10214]  <TASK>
[  272.149164][T10214]  dump_stack_lvl+0x18c/0x250
[  272.153893][T10214]  ? show_regs_print_info+0x20/0x20
[  272.159117][T10214]  ? load_image+0x420/0x420
[  272.163625][T10214]  ? __might_fault+0xaa/0x120
[  272.168328][T10214]  ? __lock_acquire+0x7d40/0x7d40
[  272.173387][T10214]  ? unix_ioctl+0x261/0x670
[  272.177928][T10214]  should_fail_ex+0x39d/0x4d0
[  272.182652][T10214]  _copy_from_user+0x2f/0xe0
[  272.187284][T10214]  sock_do_ioctl+0x190/0x310
[  272.191909][T10214]  ? sock_show_fdinfo+0xb0/0xb0
[  272.196780][T10214]  sock_ioctl+0x5ba/0x7e0
[  272.201205][T10214]  ? sock_poll+0x3e0/0x3e0
[  272.205628][T10214]  ? bpf_lsm_file_ioctl+0x9/0x10
[  272.210563][T10214]  ? security_file_ioctl+0x80/0xa0
[  272.215668][T10214]  ? sock_poll+0x3e0/0x3e0
[  272.220081][T10214]  __se_sys_ioctl+0xfd/0x170
[  272.224669][T10214]  do_syscall_64+0x55/0xb0
[  272.229081][T10214]  ? clear_bhb_loop+0x40/0x90
[  272.233760][T10214]  ? clear_bhb_loop+0x40/0x90
[  272.238430][T10214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.244326][T10214] RIP: 0033:0x7f7bc139ce59
[  272.248739][T10214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.268345][T10214] RSP: 002b:00007f7bc2221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.276757][T10214] RAX: ffffffffffffffda RBX: 00007f7bc1615fa0 RCX: 00007f7bc139ce59
[  272.284726][T10214] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005
[  272.292698][T10214] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  272.300663][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.308627][T10214] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  272.316604][T10214]  </TASK>
[  272.410705][T10220] netlink: 'syz.3.1569': attribute type 10 has an invalid length.
[  272.847800][T10235] netlink: 'syz.0.1576': attribute type 3 has an invalid length.
[  272.872882][T10235] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1576'.
[  273.149833][T10249] netlink: 'syz.0.1579': attribute type 10 has an invalid length.
[  274.151798][T10270] netlink: 'syz.1.1584': attribute type 6 has an invalid length.
[  274.161515][T10270] netlink: 'syz.1.1584': attribute type 1 has an invalid length.
[  274.180372][T10270] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1584'.
[  274.207866][T10274] netlink: 'syz.3.1587': attribute type 12 has an invalid length.
[  274.228086][T10274] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1587'.
[  274.583601][T10290] netlink: 'syz.2.1588': attribute type 3 has an invalid length.
[  274.604263][T10290] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1588'.
[  274.604630][T10292] netlink: 'syz.3.1590': attribute type 10 has an invalid length.
[  274.994136][T10307] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1594'.
[  275.219708][T10316] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1597'.
[  275.790959][T10339] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1606'.
[  275.997011][T10346] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1609'.
[  276.155455][T10351] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  276.202617][T10354] validate_nla: 9 callbacks suppressed
[  276.202633][T10354] netlink: 'syz.3.1611': attribute type 10 has an invalid length.
[  276.795085][T10376] netlink: 'syz.0.1618': attribute type 58 has an invalid length.
[  276.811742][T10376] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1618'.
[  276.911566][T10382] netlink: 'syz.2.1620': attribute type 5 has an invalid length.
[  276.920927][T10382] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1620'.
[  277.115845][T10387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  277.186913][T10387] netlink: 'syz.0.1621': attribute type 9 has an invalid length.
[  277.553217][T10392] netlink: 'syz.0.1621': attribute type 9 has an invalid length.
[  280.218170][T10414] netlink: 'syz.3.1629': attribute type 58 has an invalid length.
[  280.247072][T10414] __nla_validate_parse: 2 callbacks suppressed
[  280.247117][T10414] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1629'.
[  280.352102][T10422] netlink: 'syz.2.1630': attribute type 12 has an invalid length.
[  280.373601][T10422] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1630'.
[  280.689499][T10437] FAULT_INJECTION: forcing a failure.
[  280.689499][T10437] name failslab, interval 1, probability 0, space 0, times 0
[  280.702637][T10437] CPU: 1 PID: 10437 Comm: syz.1.1636 Not tainted syzkaller #0
[  280.710119][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  280.720212][T10437] Call Trace:
[  280.723506][T10437]  <TASK>
[  280.726447][T10437]  dump_stack_lvl+0x18c/0x250
[  280.731241][T10437]  ? show_regs_print_info+0x20/0x20
[  280.736459][T10437]  ? load_image+0x420/0x420
[  280.740982][T10437]  ? __might_sleep+0xe0/0xe0
[  280.745581][T10437]  ? __lock_acquire+0x7d40/0x7d40
[  280.750646][T10437]  should_fail_ex+0x39d/0x4d0
[  280.755352][T10437]  should_failslab+0x9/0x20
[  280.759871][T10437]  slab_pre_alloc_hook+0x59/0x310
[  280.764906][T10437]  ? tomoyo_encode+0x28b/0x540
[  280.769679][T10437]  ? tomoyo_encode+0x28b/0x540
[  280.774445][T10437]  __kmem_cache_alloc_node+0x53/0x250
[  280.779839][T10437]  ? tomoyo_encode+0x28b/0x540
[  280.784614][T10437]  __kmalloc+0xa4/0x230
[  280.788787][T10437]  tomoyo_encode+0x28b/0x540
[  280.793396][T10437]  tomoyo_realpath_from_path+0x592/0x5d0
[  280.799054][T10437]  tomoyo_path_number_perm+0x248/0x620
[  280.804517][T10437]  ? tomoyo_path_number_perm+0x217/0x620
[  280.810157][T10437]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  280.815632][T10437]  ? ksys_write+0x1c4/0x260
[  280.820201][T10437]  ? __fget_files+0x28/0x4b0
[  280.824798][T10437]  ? __fget_files+0x28/0x4b0
[  280.829511][T10437]  security_file_ioctl+0x70/0xa0
[  280.834459][T10437]  __se_sys_ioctl+0x48/0x170
[  280.839064][T10437]  do_syscall_64+0x55/0xb0
[  280.843487][T10437]  ? clear_bhb_loop+0x40/0x90
[  280.848164][T10437]  ? clear_bhb_loop+0x40/0x90
[  280.852847][T10437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.858748][T10437] RIP: 0033:0x7f680cd9ce59
[  280.863173][T10437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.882791][T10437] RSP: 002b:00007f680dd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  280.891225][T10437] RAX: ffffffffffffffda RBX: 00007f680d015fa0 RCX: 00007f680cd9ce59
[  280.899203][T10437] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003
[  280.907179][T10437] RBP: 00007f680dd44090 R08: 0000000000000000 R09: 0000000000000000
[  280.915156][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.923127][T10437] R13: 00007f680d016038 R14: 00007f680d015fa0 R15: 00007ffe83862e18
[  280.931143][T10437]  </TASK>
[  280.935444][T10437] ERROR: Out of memory at tomoyo_realpath_from_path.
[  280.950622][T10438] Driver unsupported XDP return value 0 on prog  (id 1141) dev N/A, expect packet loss!
[  281.032140][T10441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.099323][T10441] netlink: 'syz.1.1637': attribute type 9 has an invalid length.
[  281.119559][T10441] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.1637'.
[  281.535496][T10444] netlink: 'syz.1.1637': attribute type 9 has an invalid length.
[  281.546134][T10444] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.1637'.
[  281.760791][T10455] netlink: 'syz.0.1642': attribute type 12 has an invalid length.
[  281.831300][T10455] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1642'.
[  281.860521][T10460] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.1644'.
[  281.884882][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'.
[  281.894142][T10462] FAULT_INJECTION: forcing a failure.
[  281.894142][T10462] name failslab, interval 1, probability 0, space 0, times 0
[  281.911712][T10462] CPU: 1 PID: 10462 Comm: syz.2.1645 Not tainted syzkaller #0
[  281.919216][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  281.929291][T10462] Call Trace:
[  281.932589][T10462]  <TASK>
[  281.935542][T10462]  dump_stack_lvl+0x18c/0x250
[  281.940249][T10462]  ? show_regs_print_info+0x20/0x20
[  281.945474][T10462]  ? load_image+0x420/0x420
[  281.949993][T10462]  ? __might_sleep+0xe0/0xe0
[  281.954590][T10462]  ? __lock_acquire+0x7d40/0x7d40
[  281.959613][T10462]  should_fail_ex+0x39d/0x4d0
[  281.964300][T10462]  should_failslab+0x9/0x20
[  281.968798][T10462]  slab_pre_alloc_hook+0x59/0x310
[  281.973817][T10462]  ? lockdep_hardirqs_on+0x98/0x150
[  281.979020][T10462]  kmem_cache_alloc_node+0x60/0x320
[  281.984220][T10462]  ? __alloc_skb+0x103/0x2c0
[  281.988813][T10462]  __alloc_skb+0x103/0x2c0
[  281.993227][T10462]  netlink_ack+0x376/0x1180
[  281.997733][T10462]  ? __dev_queue_xmit+0x265/0x3660
[  282.002842][T10462]  ? netlink_dump+0xe50/0xe50
[  282.007520][T10462]  ? ref_tracker_free+0x690/0x840
[  282.012557][T10462]  netlink_rcv_skb+0x2c5/0x4d0
[  282.017318][T10462]  ? rtnetlink_bind+0x80/0x80
[  282.022363][T10462]  ? netlink_ack+0x1180/0x1180
[  282.027153][T10462]  ? __lock_acquire+0x7d40/0x7d40
[  282.032195][T10462]  ? netlink_deliver_tap+0x2e/0x1b0
[  282.037398][T10462]  netlink_unicast+0x751/0x8d0
[  282.042162][T10462]  netlink_sendmsg+0x8d0/0xbf0
[  282.046925][T10462]  ? netlink_getsockopt+0x590/0x590
[  282.052130][T10462]  ? aa_sock_msg_perm+0x94/0x150
[  282.057065][T10462]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  282.062345][T10462]  ? security_socket_sendmsg+0x80/0xa0
[  282.067794][T10462]  ? netlink_getsockopt+0x590/0x590
[  282.072984][T10462]  ____sys_sendmsg+0x5ba/0x960
[  282.077749][T10462]  ? __asan_memset+0x22/0x40
[  282.082332][T10462]  ? __sys_sendmsg_sock+0x30/0x30
[  282.087347][T10462]  ? __import_iovec+0x5f2/0x850
[  282.092194][T10462]  ? import_iovec+0x73/0xa0
[  282.096689][T10462]  ___sys_sendmsg+0x2a6/0x360
[  282.101364][T10462]  ? __sys_sendmsg+0x2a0/0x2a0
[  282.106147][T10462]  ? trace_call_bpf+0xc3/0x6c0
[  282.110930][T10462]  __se_sys_sendmsg+0x1c2/0x2b0
[  282.115782][T10462]  ? __x64_sys_sendmsg+0x80/0x80
[  282.120727][T10462]  ? lockdep_hardirqs_on+0x98/0x150
[  282.125928][T10462]  do_syscall_64+0x55/0xb0
[  282.130345][T10462]  ? clear_bhb_loop+0x40/0x90
[  282.135026][T10462]  ? clear_bhb_loop+0x40/0x90
[  282.139692][T10462]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  282.145579][T10462] RIP: 0033:0x7f066159ce59
[  282.149985][T10462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.169641][T10462] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.178051][T10462] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  282.186016][T10462] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  282.193978][T10462] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  282.201939][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.209906][T10462] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  282.217882][T10462]  </TASK>
[  282.275593][T10467] netlink: 'syz.3.1647': attribute type 46 has an invalid length.
[  282.298125][T10467] netlink: 'syz.3.1647': attribute type 46 has an invalid length.
[  282.342906][T10467] netlink: 'syz.3.1647': attribute type 39 has an invalid length.
[  282.500177][T10474] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1650'.
[  282.510467][T10474] bridge_slave_1: entered promiscuous mode
[  282.747048][T10486] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1654'.
[  282.846143][T10488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.894431][T10488] netlink: 'syz.1.1655': attribute type 9 has an invalid length.
[  282.905712][T10488] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.1655'.
[  282.976669][T10491] netlink: 'syz.1.1655': attribute type 9 has an invalid length.
[  283.163669][T10493] dvmrp1: tun_chr_ioctl cmd 1074025675
[  283.171428][T10493] dvmrp1: persist disabled
[  283.176408][T10493] dvmrp1: tun_chr_ioctl cmd 1074025680
[  283.345628][T10497] netlink: 'syz.0.1659': attribute type 12 has an invalid length.
[  283.418507][T10499] netlink: 'syz.1.1660': attribute type 46 has an invalid length.
[  283.442624][T10499] netlink: 'syz.1.1660': attribute type 46 has an invalid length.
[  284.229069][T10526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.413494][T10542] __nla_validate_parse: 5 callbacks suppressed
[  285.413570][T10542] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1671'.
[  286.026630][T10562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  286.072322][T10562] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.1681'.
[  286.290929][T10564] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1682'.
[  286.535398][T10565] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.1681'.
[  286.633309][T10568] validate_nla: 8 callbacks suppressed
[  286.633325][T10568] netlink: 'syz.2.1683': attribute type 46 has an invalid length.
[  286.707728][T10569] netlink: 'syz.2.1683': attribute type 39 has an invalid length.
[  286.718051][T10568] netlink: 'syz.2.1683': attribute type 46 has an invalid length.
[  286.961197][T10575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.021884][T10575] netlink: 'syz.0.1686': attribute type 9 has an invalid length.
[  287.046868][T10575] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.1686'.
[  287.446733][T10587] netlink: 'syz.3.1691': attribute type 58 has an invalid length.
[  287.462243][T10582] netlink: 'syz.0.1686': attribute type 9 has an invalid length.
[  287.468322][T10587] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1691'.
[  287.481276][T10582] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.1686'.
[  287.835073][T10596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.898036][T10596] netlink: 'syz.3.1694': attribute type 9 has an invalid length.
[  287.910541][T10596] netlink: 194424 bytes leftover after parsing attributes in process `syz.3.1694'.
[  288.438178][T10607] netlink: 'syz.1.1696': attribute type 46 has an invalid length.
[  288.667120][T10600] netlink: 'syz.3.1694': attribute type 9 has an invalid length.
[  288.671443][T10607] netlink: 'syz.1.1696': attribute type 46 has an invalid length.
[  288.675114][T10600] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.1694'.
[  289.181676][T10622] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1701'.
[  289.535194][T10633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.530544][T10645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.587875][T10645] __nla_validate_parse: 2 callbacks suppressed
[  290.587923][T10645] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.1708'.
[  290.923141][T10648] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.1708'.
[  290.945966][T10658] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1712'.
[  291.596552][T10681] FAULT_INJECTION: forcing a failure.
[  291.596552][T10681] name failslab, interval 1, probability 0, space 0, times 0
[  291.613089][T10681] CPU: 0 PID: 10681 Comm: syz.3.1721 Not tainted syzkaller #0
[  291.620599][T10681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  291.630664][T10681] Call Trace:
[  291.633960][T10681]  <TASK>
[  291.636904][T10681]  dump_stack_lvl+0x18c/0x250
[  291.641608][T10681]  ? show_regs_print_info+0x20/0x20
[  291.646809][T10681]  ? load_image+0x420/0x420
[  291.651308][T10681]  ? __might_sleep+0xe0/0xe0
[  291.655893][T10681]  ? __lock_acquire+0x7d40/0x7d40
[  291.660921][T10681]  should_fail_ex+0x39d/0x4d0
[  291.665599][T10681]  should_failslab+0x9/0x20
[  291.670103][T10681]  slab_pre_alloc_hook+0x59/0x310
[  291.675131][T10681]  ? tomoyo_encode+0x28b/0x540
[  291.679889][T10681]  ? tomoyo_encode+0x28b/0x540
[  291.684644][T10681]  __kmem_cache_alloc_node+0x53/0x250
[  291.690018][T10681]  ? tomoyo_encode+0x28b/0x540
[  291.694773][T10681]  __kmalloc+0xa4/0x230
[  291.698927][T10681]  tomoyo_encode+0x28b/0x540
[  291.703510][T10681]  tomoyo_realpath_from_path+0x592/0x5d0
[  291.709143][T10681]  tomoyo_path_number_perm+0x248/0x620
[  291.714598][T10681]  ? tomoyo_path_number_perm+0x217/0x620
[  291.720311][T10681]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  291.725764][T10681]  ? ksys_write+0x1c4/0x260
[  291.730288][T10681]  ? __fget_files+0x28/0x4b0
[  291.734874][T10681]  ? __fget_files+0x28/0x4b0
[  291.739470][T10681]  security_file_ioctl+0x70/0xa0
[  291.744402][T10681]  __se_sys_ioctl+0x48/0x170
[  291.748989][T10681]  do_syscall_64+0x55/0xb0
[  291.753406][T10681]  ? clear_bhb_loop+0x40/0x90
[  291.758075][T10681]  ? clear_bhb_loop+0x40/0x90
[  291.762745][T10681]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.768635][T10681] RIP: 0033:0x7f7bc139ce59
[  291.773050][T10681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.792651][T10681] RSP: 002b:00007f7bc2221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.801062][T10681] RAX: ffffffffffffffda RBX: 00007f7bc1615fa0 RCX: 00007f7bc139ce59
[  291.809029][T10681] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  291.816992][T10681] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  291.824982][T10681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.832944][T10681] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  291.840924][T10681]  </TASK>
[  291.851990][T10681] ERROR: Out of memory at tomoyo_realpath_from_path.
[  291.932292][T10684] validate_nla: 10 callbacks suppressed
[  291.932334][T10684] netlink: 'syz.0.1722': attribute type 58 has an invalid length.
[  291.961129][T10684] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1722'.
[  291.993516][T10688] netlink: 'syz.1.1723': attribute type 21 has an invalid length.
[  292.540590][T10714] netlink: 'syz.2.1734': attribute type 58 has an invalid length.
[  292.549304][T10714] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1734'.
[  293.621509][T10757] netlink: 'syz.0.1744': attribute type 58 has an invalid length.
[  293.644671][T10757] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1744'.
[  293.695123][T10759] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1745'.
[  293.906925][T10769] FAULT_INJECTION: forcing a failure.
[  293.906925][T10769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.928214][T10769] CPU: 0 PID: 10769 Comm: syz.0.1749 Not tainted syzkaller #0
[  293.935730][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  293.945811][T10769] Call Trace:
[  293.949119][T10769]  <TASK>
[  293.952068][T10769]  dump_stack_lvl+0x18c/0x250
[  293.956788][T10769]  ? show_regs_print_info+0x20/0x20
[  293.962016][T10769]  ? load_image+0x420/0x420
[  293.966545][T10769]  ? __might_fault+0xaa/0x120
[  293.971242][T10769]  ? __lock_acquire+0x7d40/0x7d40
[  293.976293][T10769]  ? __lock_acquire+0x7d40/0x7d40
[  293.981348][T10769]  should_fail_ex+0x39d/0x4d0
[  293.986063][T10769]  _copy_from_user+0x2f/0xe0
[  293.990783][T10769]  perf_copy_attr+0x16a/0x840
[  293.995522][T10769]  __se_sys_perf_event_open+0x11b/0x1c50
[  294.001194][T10769]  ? __fget_files+0x28/0x4b0
[  294.005841][T10769]  ? mutex_unlock+0x10/0x10
[  294.010367][T10769]  ? __fget_files+0x43d/0x4b0
[  294.015081][T10769]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  294.020757][T10769]  ? lock_chain_count+0x20/0x20
[  294.025731][T10769]  ? lockdep_hardirqs_on+0x98/0x150
[  294.030966][T10769]  ? __x64_sys_perf_event_open+0x20/0xc0
[  294.036630][T10769]  do_syscall_64+0x55/0xb0
[  294.041072][T10769]  ? clear_bhb_loop+0x40/0x90
[  294.045781][T10769]  ? clear_bhb_loop+0x40/0x90
[  294.050503][T10769]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.056429][T10769] RIP: 0033:0x7f229a59ce59
[  294.060882][T10769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.080518][T10769] RSP: 002b:00007f229b457028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  294.088972][T10769] RAX: ffffffffffffffda RBX: 00007f229a815fa0 RCX: 00007f229a59ce59
[  294.096973][T10769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  294.104979][T10769] RBP: 00007f229b457090 R08: 0000000000000000 R09: 0000000000000000
[  294.112974][T10769] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  294.121058][T10769] R13: 00007f229a816038 R14: 00007f229a815fa0 R15: 00007ffe95064d68
[  294.129072][T10769]  </TASK>
[  295.031798][T10796] netlink: 'syz.3.1758': attribute type 58 has an invalid length.
[  295.057501][T10796] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1758'.
[  295.322613][T10803] netlink: 'syz.0.1762': attribute type 39 has an invalid length.
[  295.515934][T10815] FAULT_INJECTION: forcing a failure.
[  295.515934][T10815] name failslab, interval 1, probability 0, space 0, times 0
[  295.530316][T10815] CPU: 0 PID: 10815 Comm: syz.1.1764 Not tainted syzkaller #0
[  295.537913][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  295.548513][T10815] Call Trace:
[  295.551814][T10815]  <TASK>
[  295.554762][T10815]  dump_stack_lvl+0x18c/0x250
[  295.559469][T10815]  ? show_regs_print_info+0x20/0x20
[  295.564692][T10815]  ? load_image+0x420/0x420
[  295.569224][T10815]  ? __might_sleep+0xe0/0xe0
[  295.573842][T10815]  ? __lock_acquire+0x7d40/0x7d40
[  295.578899][T10815]  ? lock_chain_count+0x20/0x20
[  295.583778][T10815]  should_fail_ex+0x39d/0x4d0
[  295.588507][T10815]  should_failslab+0x9/0x20
[  295.593049][T10815]  slab_pre_alloc_hook+0x59/0x310
[  295.598136][T10815]  ? _raw_spin_unlock+0x40/0x40
[  295.602995][T10815]  ? string+0x26d/0x2b0
[  295.607158][T10815]  ? __request_module+0x2d1/0x600
[  295.612206][T10815]  __kmem_cache_alloc_node+0x53/0x250
[  295.617585][T10815]  ? __request_module+0x2d1/0x600
[  295.622605][T10815]  kmalloc_trace+0x2a/0xe0
[  295.627025][T10815]  __request_module+0x2d1/0x600
[  295.631885][T10815]  ? module_enforce_rwx_sections+0x150/0x150
[  295.637870][T10815]  ? dev_load+0x21/0x1f0
[  295.642119][T10815]  ? bpf_lsm_capable+0x9/0x10
[  295.646801][T10815]  ? dev_load+0x21/0x1f0
[  295.651040][T10815]  dev_load+0x18b/0x1f0
[  295.655194][T10815]  dev_ioctl+0x837/0x1140
[  295.659527][T10815]  sock_ioctl+0x74c/0x7e0
[  295.663851][T10815]  ? sock_poll+0x3e0/0x3e0
[  295.668276][T10815]  ? bpf_lsm_file_ioctl+0x9/0x10
[  295.673205][T10815]  ? security_file_ioctl+0x80/0xa0
[  295.678309][T10815]  ? sock_poll+0x3e0/0x3e0
[  295.682718][T10815]  __se_sys_ioctl+0xfd/0x170
[  295.687309][T10815]  do_syscall_64+0x55/0xb0
[  295.691722][T10815]  ? clear_bhb_loop+0x40/0x90
[  295.696388][T10815]  ? clear_bhb_loop+0x40/0x90
[  295.701055][T10815]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.706944][T10815] RIP: 0033:0x7f680cd9ce59
[  295.711352][T10815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.730965][T10815] RSP: 002b:00007f680dd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  295.739378][T10815] RAX: ffffffffffffffda RBX: 00007f680d015fa0 RCX: 00007f680cd9ce59
[  295.747345][T10815] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006
[  295.755309][T10815] RBP: 00007f680dd44090 R08: 0000000000000000 R09: 0000000000000000
[  295.763270][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.771235][T10815] R13: 00007f680d016038 R14: 00007f680d015fa0 R15: 00007ffe83862e18
[  295.779216][T10815]  </TASK>
[  296.293706][T10832] netlink: 'syz.3.1770': attribute type 58 has an invalid length.
[  296.319104][T10832] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1770'.
[  296.795112][T10854] netlink: 'syz.3.1777': attribute type 1 has an invalid length.
[  296.819960][T10854] netlink: 'syz.3.1777': attribute type 3 has an invalid length.
[  296.832730][T10854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1777'.
[  296.882068][T10854] netlink: 'syz.3.1777': attribute type 10 has an invalid length.
[  296.894000][T10854] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1777'.
[  297.172720][T10863] FAULT_INJECTION: forcing a failure.
[  297.172720][T10863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.199592][T10863] CPU: 0 PID: 10863 Comm: syz.3.1780 Not tainted syzkaller #0
[  297.207112][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  297.217273][T10863] Call Trace:
[  297.220566][T10863]  <TASK>
[  297.223501][T10863]  dump_stack_lvl+0x18c/0x250
[  297.228201][T10863]  ? show_regs_print_info+0x20/0x20
[  297.233514][T10863]  ? load_image+0x420/0x420
[  297.238041][T10863]  ? __lock_acquire+0x7d40/0x7d40
[  297.243088][T10863]  ? snprintf+0xe9/0x140
[  297.247360][T10863]  should_fail_ex+0x39d/0x4d0
[  297.252067][T10863]  _copy_to_user+0x2f/0xa0
[  297.256514][T10863]  simple_read_from_buffer+0xe7/0x150
[  297.261916][T10863]  proc_fail_nth_read+0x1e8/0x260
[  297.266964][T10863]  ? proc_fault_inject_write+0x360/0x360
[  297.272615][T10863]  ? fsnotify_perm+0x271/0x5e0
[  297.277397][T10863]  ? proc_fault_inject_write+0x360/0x360
[  297.283049][T10863]  vfs_read+0x28b/0x970
[  297.287234][T10863]  ? kernel_read+0x1e0/0x1e0
[  297.291860][T10863]  ? __fget_files+0x28/0x4b0
[  297.296482][T10863]  ? __fget_files+0x28/0x4b0
[  297.301093][T10863]  ? __fget_files+0x43d/0x4b0
[  297.305797][T10863]  ? __fdget_pos+0x2a3/0x330
[  297.310407][T10863]  ? ksys_read+0x75/0x260
[  297.314760][T10863]  ksys_read+0x150/0x260
[  297.319019][T10863]  ? vfs_write+0x990/0x990
[  297.323460][T10863]  ? lockdep_hardirqs_on+0x98/0x150
[  297.328681][T10863]  do_syscall_64+0x55/0xb0
[  297.333112][T10863]  ? clear_bhb_loop+0x40/0x90
[  297.337804][T10863]  ? clear_bhb_loop+0x40/0x90
[  297.342502][T10863]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  297.348455][T10863] RIP: 0033:0x7f7bc135d68e
[  297.352891][T10863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  297.372530][T10863] RSP: 002b:00007f7bc2220fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  297.380963][T10863] RAX: ffffffffffffffda RBX: 00007f7bc22216c0 RCX: 00007f7bc135d68e
[  297.388954][T10863] RDX: 000000000000000f RSI: 00007f7bc22210a0 RDI: 0000000000000004
[  297.396934][T10863] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  297.404914][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.412899][T10863] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  297.420900][T10863]  </TASK>
[  297.711836][T10867] netlink: 'syz.3.1782': attribute type 58 has an invalid length.
[  297.754168][T10867] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1782'.
[  297.861031][T10865] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1781'.
[  297.903439][T10865] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1781'.
[  297.959653][T10865] tipc: Started in network mode
[  298.000596][T10865] tipc: Node identity d, cluster identity 56
[  298.029237][T10865] tipc: Node number set to 13
[  298.799013][T10890] netlink: 'syz.1.1790': attribute type 12 has an invalid length.
[  298.825181][T10890] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1790'.
[  299.083121][T10900] netlink: 'syz.2.1792': attribute type 58 has an invalid length.
[  299.100447][T10900] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1792'.
[  299.220483][T10904] netlink: 'syz.1.1794': attribute type 39 has an invalid length.
[  300.046763][T10921] netlink: 'syz.2.1801': attribute type 58 has an invalid length.
[  300.082559][T10921] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1801'.
[  300.375309][T10928] netlink: 'syz.1.1804': attribute type 46 has an invalid length.
[  300.409710][T10928] netlink: 'syz.1.1804': attribute type 46 has an invalid length.
[  300.426285][T10928] netlink: 'syz.1.1804': attribute type 39 has an invalid length.
[  300.648159][T10937] netlink: 'syz.1.1808': attribute type 58 has an invalid length.
[  300.656478][T10937] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1808'.
[  300.701684][T10939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.769379][T10939] netlink: 'syz.2.1809': attribute type 9 has an invalid length.
[  301.082426][T10950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.624370][T10953] __nla_validate_parse: 5 callbacks suppressed
[  301.624388][T10953] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.1813'.
[  302.151323][T10982] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1821'.
[  302.162676][T10982] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1821'.
[  302.173634][T10982] tipc: Started in network mode
[  302.197541][T10982] tipc: Node identity d, cluster identity 56
[  302.205125][T10982] tipc: Node number set to 13
[  302.465530][T11002] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1828'.
[  302.992658][T11007] validate_nla: 7 callbacks suppressed
[  302.992695][T11007] netlink: 'syz.3.1829': attribute type 12 has an invalid length.
[  303.063140][T11007] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1829'.
[  303.364905][T11017] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1832'.
[  303.381566][T11017] bridge_slave_1: entered promiscuous mode
[  303.888859][T11032] netlink: 'syz.0.1837': attribute type 46 has an invalid length.
[  303.951149][T11035] netlink: 'syz.0.1837': attribute type 39 has an invalid length.
[  304.005843][T11032] netlink: 'syz.0.1837': attribute type 46 has an invalid length.
[  304.364455][T11046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  304.454108][T11046] netlink: 'syz.2.1840': attribute type 9 has an invalid length.
[  304.470471][T11050] netlink: 'syz.3.1841': attribute type 12 has an invalid length.
[  304.479405][T11050] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1841'.
[  304.504520][T11046] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.1840'.
[  304.701416][T11054] netlink: 'syz.2.1840': attribute type 9 has an invalid length.
[  304.709723][T11054] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.1840'.
[  305.041193][T11069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  305.114596][T11069] netlink: 'syz.0.1845': attribute type 9 has an invalid length.
[  305.128554][T11069] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.1845'.
[  305.372464][T11072] netlink: 'syz.0.1845': attribute type 9 has an invalid length.
[  305.693494][T11088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  305.773622][T11094] netlink: 'syz.1.1854': attribute type 9 has an invalid length.
[  306.417066][T11108] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  306.541920][T11114] FAULT_INJECTION: forcing a failure.
[  306.541920][T11114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.555808][T11114] CPU: 0 PID: 11114 Comm: syz.3.1862 Not tainted syzkaller #0
[  306.563353][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  306.573443][T11114] Call Trace:
[  306.576734][T11114]  <TASK>
[  306.579676][T11114]  dump_stack_lvl+0x18c/0x250
[  306.584470][T11114]  ? show_regs_print_info+0x20/0x20
[  306.589696][T11114]  ? load_image+0x420/0x420
[  306.594223][T11114]  ? __might_fault+0xaa/0x120
[  306.598923][T11114]  ? __lock_acquire+0x7d40/0x7d40
[  306.603971][T11114]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  306.610239][T11114]  should_fail_ex+0x39d/0x4d0
[  306.614942][T11114]  _copy_from_user+0x2f/0xe0
[  306.619546][T11114]  __sys_bpf+0x23e/0x890
[  306.623799][T11114]  ? bpf_link_show_fdinfo+0x390/0x390
[  306.629201][T11114]  ? lock_chain_count+0x20/0x20
[  306.634076][T11114]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  306.640088][T11114]  __x64_sys_bpf+0x7c/0x90
[  306.644527][T11114]  do_syscall_64+0x55/0xb0
[  306.649337][T11114]  ? clear_bhb_loop+0x40/0x90
[  306.654015][T11114]  ? clear_bhb_loop+0x40/0x90
[  306.658696][T11114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  306.664604][T11114] RIP: 0033:0x7f7bc139ce59
[  306.669024][T11114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.688647][T11114] RSP: 002b:00007f7bc2221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  306.697080][T11114] RAX: ffffffffffffffda RBX: 00007f7bc1615fa0 RCX: 00007f7bc139ce59
[  306.705152][T11114] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  306.713215][T11114] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  306.721193][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.729170][T11114] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  306.737164][T11114]  </TASK>
[  306.841330][T11113] __nla_validate_parse: 3 callbacks suppressed
[  306.841387][T11113] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1861'.
[  308.231162][T11150] validate_nla: 14 callbacks suppressed
[  308.231196][T11150] netlink: 'syz.2.1874': attribute type 12 has an invalid length.
[  308.256554][T11150] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1874'.
[  308.302575][T11155] netlink: 'syz.3.1875': attribute type 10 has an invalid length.
[  308.368271][T11156] netlink: 'syz.3.1875': attribute type 10 has an invalid length.
[  308.401321][T11155] netlink: 'syz.3.1875': attribute type 10 has an invalid length.
[  308.410041][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'.
[  308.420284][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'.
[  308.432749][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'.
[  308.498640][T11162] netlink: 'syz.2.1877': attribute type 40 has an invalid length.
[  308.508145][T11162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'.
[  308.517452][T11162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'.
[  308.530087][T11162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'.
[  308.622151][T11166] netlink: 'syz.2.1880': attribute type 46 has an invalid length.
[  308.632591][T11166] netlink: 'syz.2.1880': attribute type 46 has an invalid length.
[  308.642850][T11166] netlink: 'syz.2.1880': attribute type 39 has an invalid length.
[  309.383815][T11192] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1888'.
[  309.529366][T11199] netlink: 'syz.1.1891': attribute type 46 has an invalid length.
[  309.539662][T11199] netlink: 'syz.1.1891': attribute type 46 has an invalid length.
[  309.989936][T11214] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1898'.
[  311.979239][T11279] FAULT_INJECTION: forcing a failure.
[  311.979239][T11279] name failslab, interval 1, probability 0, space 0, times 0
[  311.997975][T11279] CPU: 0 PID: 11279 Comm: syz.2.1920 Not tainted syzkaller #0
[  312.005490][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  312.015562][T11279] Call Trace:
[  312.018865][T11279]  <TASK>
[  312.021802][T11279]  dump_stack_lvl+0x18c/0x250
[  312.026474][T11279]  ? show_regs_print_info+0x20/0x20
[  312.031662][T11279]  ? load_image+0x420/0x420
[  312.036162][T11279]  ? verify_lock_unused+0x140/0x140
[  312.041350][T11279]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  312.047060][T11279]  should_fail_ex+0x39d/0x4d0
[  312.051734][T11279]  should_failslab+0x9/0x20
[  312.056230][T11279]  slab_pre_alloc_hook+0x59/0x310
[  312.061262][T11279]  kmem_cache_alloc+0x5a/0x2d0
[  312.066022][T11279]  ? skb_clone+0x1eb/0x370
[  312.070448][T11279]  skb_clone+0x1eb/0x370
[  312.074714][T11279]  __netlink_deliver_tap+0x41c/0x830
[  312.080026][T11279]  ? netlink_deliver_tap+0x2e/0x1b0
[  312.085243][T11279]  netlink_deliver_tap+0x19c/0x1b0
[  312.090369][T11279]  netlink_unicast+0x72c/0x8d0
[  312.095133][T11279]  netlink_sendmsg+0x8d0/0xbf0
[  312.099901][T11279]  ? netlink_getsockopt+0x590/0x590
[  312.105083][T11279]  ? aa_sock_msg_perm+0x94/0x150
[  312.110029][T11279]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  312.115308][T11279]  ? security_socket_sendmsg+0x80/0xa0
[  312.120786][T11279]  ? netlink_getsockopt+0x590/0x590
[  312.125976][T11279]  ____sys_sendmsg+0x5ba/0x960
[  312.130834][T11279]  ? __asan_memset+0x22/0x40
[  312.135437][T11279]  ? __sys_sendmsg_sock+0x30/0x30
[  312.140452][T11279]  ? __import_iovec+0x3fa/0x850
[  312.145292][T11279]  ? import_iovec+0x73/0xa0
[  312.149786][T11279]  ___sys_sendmsg+0x2a6/0x360
[  312.154453][T11279]  ? __sys_sendmsg+0x2a0/0x2a0
[  312.159229][T11279]  __se_sys_sendmsg+0x1c2/0x2b0
[  312.164075][T11279]  ? __x64_sys_sendmsg+0x80/0x80
[  312.169028][T11279]  ? lockdep_hardirqs_on+0x98/0x150
[  312.174223][T11279]  do_syscall_64+0x55/0xb0
[  312.178631][T11279]  ? clear_bhb_loop+0x40/0x90
[  312.183297][T11279]  ? clear_bhb_loop+0x40/0x90
[  312.187976][T11279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  312.193863][T11279] RIP: 0033:0x7f066159ce59
[  312.198268][T11279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.217874][T11279] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  312.226282][T11279] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  312.234421][T11279] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000005
[  312.242385][T11279] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  312.250368][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.258329][T11279] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  312.266318][T11279]  </TASK>
[  312.506080][T11291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  312.593103][T11291] __nla_validate_parse: 4 callbacks suppressed
[  312.593150][T11291] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.1924'.
[  312.732049][T11293] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1925'.
[  312.992557][T11296] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.1924'.
[  313.409887][T11320] netlink: 144300 bytes leftover after parsing attributes in process `syz.1.1935'.
[  313.419715][T11320] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1935'.
[  313.454513][T11320] C: renamed from team_slave_0
[  313.476025][T11320] validate_nla: 9 callbacks suppressed
[  313.476041][T11320] netlink: 'syz.1.1935': attribute type 1 has an invalid length.
[  313.503918][T11320] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1935'.
[  313.540311][T11322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  313.625887][T11322] netlink: 'syz.2.1936': attribute type 9 has an invalid length.
[  313.646540][T11322] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.1936'.
[  313.864193][T11328] netlink: 'syz.2.1936': attribute type 9 has an invalid length.
[  313.874518][T11332] netlink: 'syz.0.1939': attribute type 12 has an invalid length.
[  313.886618][T11328] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.1936'.
[  313.903060][T11332] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1939'.
[  314.225117][T11350] FAULT_INJECTION: forcing a failure.
[  314.225117][T11350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.247286][T11350] CPU: 0 PID: 11350 Comm: syz.2.1946 Not tainted syzkaller #0
[  314.254798][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  314.264853][T11350] Call Trace:
[  314.268140][T11350]  <TASK>
[  314.271067][T11350]  dump_stack_lvl+0x18c/0x250
[  314.275756][T11350]  ? show_regs_print_info+0x20/0x20
[  314.280949][T11350]  ? load_image+0x420/0x420
[  314.285483][T11350]  ? __lock_acquire+0x7d40/0x7d40
[  314.290508][T11350]  should_fail_ex+0x39d/0x4d0
[  314.295191][T11350]  _copy_from_user+0x2f/0xe0
[  314.299782][T11350]  __copy_msghdr+0x3bb/0x580
[  314.304375][T11350]  ___sys_sendmsg+0x214/0x360
[  314.309056][T11350]  ? get_pid_task+0x20/0x1e0
[  314.313646][T11350]  ? __sys_sendmsg+0x2a0/0x2a0
[  314.318678][T11350]  ? __lock_acquire+0x7d40/0x7d40
[  314.323712][T11350]  __se_sys_sendmsg+0x1c2/0x2b0
[  314.328564][T11350]  ? __x64_sys_sendmsg+0x80/0x80
[  314.333507][T11350]  ? lockdep_hardirqs_on+0x98/0x150
[  314.338710][T11350]  do_syscall_64+0x55/0xb0
[  314.343143][T11350]  ? clear_bhb_loop+0x40/0x90
[  314.347814][T11350]  ? clear_bhb_loop+0x40/0x90
[  314.352485][T11350]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.358383][T11350] RIP: 0033:0x7f066159ce59
[  314.362798][T11350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.382579][T11350] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.390993][T11350] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  314.398959][T11350] RDX: 0000000000040810 RSI: 0000200000004c80 RDI: 0000000000000003
[  314.406924][T11350] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  314.414897][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.422862][T11350] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  314.430840][T11350]  </TASK>
[  314.596871][T11355] netlink: 'syz.1.1947': attribute type 46 has an invalid length.
[  314.637983][T11355] netlink: 'syz.1.1947': attribute type 46 has an invalid length.
[  314.679314][T11355] netlink: 'syz.1.1947': attribute type 39 has an invalid length.
[  314.794920][T11360] netlink: 'syz.0.1950': attribute type 12 has an invalid length.
[  314.803648][T11360] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1950'.
[  315.432478][T11388] netlink: 'syz.2.1961': attribute type 46 has an invalid length.
[  315.446587][T11388] netlink: 'syz.2.1961': attribute type 46 has an invalid length.
[  315.723883][T11395] FAULT_INJECTION: forcing a failure.
[  315.723883][T11395] name failslab, interval 1, probability 0, space 0, times 0
[  315.736724][T11395] CPU: 1 PID: 11395 Comm: syz.2.1964 Not tainted syzkaller #0
[  315.744189][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  315.754246][T11395] Call Trace:
[  315.757542][T11395]  <TASK>
[  315.760481][T11395]  dump_stack_lvl+0x18c/0x250
[  315.765179][T11395]  ? show_regs_print_info+0x20/0x20
[  315.770387][T11395]  ? load_image+0x420/0x420
[  315.774889][T11395]  ? __might_sleep+0xe0/0xe0
[  315.779474][T11395]  ? __lock_acquire+0x7d40/0x7d40
[  315.784506][T11395]  should_fail_ex+0x39d/0x4d0
[  315.789189][T11395]  should_failslab+0x9/0x20
[  315.793693][T11395]  slab_pre_alloc_hook+0x59/0x310
[  315.798729][T11395]  ? tomoyo_encode+0x28b/0x540
[  315.803502][T11395]  ? tomoyo_encode+0x28b/0x540
[  315.808257][T11395]  __kmem_cache_alloc_node+0x53/0x250
[  315.813640][T11395]  ? tomoyo_encode+0x28b/0x540
[  315.818408][T11395]  __kmalloc+0xa4/0x230
[  315.822569][T11395]  tomoyo_encode+0x28b/0x540
[  315.827172][T11395]  tomoyo_realpath_from_path+0x592/0x5d0
[  315.832826][T11395]  tomoyo_path_number_perm+0x248/0x620
[  315.838287][T11395]  ? tomoyo_path_number_perm+0x217/0x620
[  315.843941][T11395]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  315.849415][T11395]  ? ksys_write+0x1c4/0x260
[  315.853961][T11395]  ? __fget_files+0x28/0x4b0
[  315.858559][T11395]  ? __fget_files+0x28/0x4b0
[  315.863172][T11395]  security_file_ioctl+0x70/0xa0
[  315.868128][T11395]  __se_sys_ioctl+0x48/0x170
[  315.872727][T11395]  do_syscall_64+0x55/0xb0
[  315.877167][T11395]  ? clear_bhb_loop+0x40/0x90
[  315.881896][T11395]  ? clear_bhb_loop+0x40/0x90
[  315.886578][T11395]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.892486][T11395] RIP: 0033:0x7f066159ce59
[  315.896921][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.916614][T11395] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  315.925028][T11395] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  315.932997][T11395] RDX: 0000200000000200 RSI: 0000000000008991 RDI: 0000000000000003
[  315.940971][T11395] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  315.948936][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.956933][T11395] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  315.964926][T11395]  </TASK>
[  315.969669][T11395] ERROR: Out of memory at tomoyo_realpath_from_path.
[  316.678184][T11422] FAULT_INJECTION: forcing a failure.
[  316.678184][T11422] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  316.694154][T11422] CPU: 1 PID: 11422 Comm: syz.3.1974 Not tainted syzkaller #0
[  316.701659][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  316.711825][T11422] Call Trace:
[  316.715133][T11422]  <TASK>
[  316.718085][T11422]  dump_stack_lvl+0x18c/0x250
[  316.722797][T11422]  ? show_regs_print_info+0x20/0x20
[  316.728025][T11422]  ? load_image+0x420/0x420
[  316.732552][T11422]  ? __might_fault+0xaa/0x120
[  316.737345][T11422]  ? __lock_acquire+0x7d40/0x7d40
[  316.742391][T11422]  should_fail_ex+0x39d/0x4d0
[  316.747093][T11422]  _copy_from_user+0x2f/0xe0
[  316.751713][T11422]  kstrtouint_from_user+0xde/0x170
[  316.756863][T11422]  ? kstrtol_from_user+0x190/0x190
[  316.762020][T11422]  proc_fail_nth_write+0x8f/0x250
[  316.767065][T11422]  ? proc_fail_nth_read+0x260/0x260
[  316.772283][T11422]  ? proc_fail_nth_read+0x260/0x260
[  316.777499][T11422]  vfs_write+0x296/0x990
[  316.781750][T11422]  ? file_end_write+0x250/0x250
[  316.786653][T11422]  ? __fget_files+0x28/0x4b0
[  316.791331][T11422]  ? __fget_files+0x28/0x4b0
[  316.795963][T11422]  ? __fget_files+0x43d/0x4b0
[  316.800732][T11422]  ? __fdget_pos+0x2a3/0x330
[  316.805323][T11422]  ? ksys_write+0x75/0x260
[  316.809738][T11422]  ksys_write+0x150/0x260
[  316.814076][T11422]  ? __ia32_sys_read+0x90/0x90
[  316.818840][T11422]  ? lockdep_hardirqs_on+0x98/0x150
[  316.824049][T11422]  do_syscall_64+0x55/0xb0
[  316.828464][T11422]  ? clear_bhb_loop+0x40/0x90
[  316.833133][T11422]  ? clear_bhb_loop+0x40/0x90
[  316.837814][T11422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  316.843725][T11422] RIP: 0033:0x7f7bc135d68e
[  316.848155][T11422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  316.867767][T11422] RSP: 002b:00007f7bc2220fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  316.876181][T11422] RAX: ffffffffffffffda RBX: 00007f7bc22216c0 RCX: 00007f7bc135d68e
[  316.884153][T11422] RDX: 0000000000000001 RSI: 00007f7bc22210a0 RDI: 0000000000000004
[  316.892117][T11422] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  316.900083][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  316.908048][T11422] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  316.916028][T11422]  </TASK>
[  317.293544][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.300026][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.495635][T11449] FAULT_INJECTION: forcing a failure.
[  317.495635][T11449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.561446][T11449] CPU: 1 PID: 11449 Comm: syz.2.1985 Not tainted syzkaller #0
[  317.568967][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  317.579046][T11449] Call Trace:
[  317.582370][T11449]  <TASK>
[  317.585319][T11449]  dump_stack_lvl+0x18c/0x250
[  317.590028][T11449]  ? show_regs_print_info+0x20/0x20
[  317.595253][T11449]  ? load_image+0x420/0x420
[  317.599782][T11449]  ? __might_fault+0xaa/0x120
[  317.604482][T11449]  ? __lock_acquire+0x7d40/0x7d40
[  317.609534][T11449]  should_fail_ex+0x39d/0x4d0
[  317.614240][T11449]  _copy_from_user+0x2f/0xe0
[  317.618857][T11449]  wext_handle_ioctl+0xc8/0x1d0
[  317.623732][T11449]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  317.629915][T11449]  ? call_commit_handler+0xf0/0xf0
[  317.635061][T11449]  ? sock_ioctl+0x87/0x7e0
[  317.639508][T11449]  sock_ioctl+0x15d/0x7e0
[  317.643863][T11449]  ? sock_poll+0x3e0/0x3e0
[  317.648316][T11449]  ? bpf_lsm_file_ioctl+0x9/0x10
[  317.653272][T11449]  ? security_file_ioctl+0x80/0xa0
[  317.658401][T11449]  ? sock_poll+0x3e0/0x3e0
[  317.662843][T11449]  __se_sys_ioctl+0xfd/0x170
[  317.667451][T11449]  do_syscall_64+0x55/0xb0
[  317.671869][T11449]  ? clear_bhb_loop+0x40/0x90
[  317.676551][T11449]  ? clear_bhb_loop+0x40/0x90
[  317.681250][T11449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  317.687408][T11449] RIP: 0033:0x7f066159ce59
[  317.691839][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.711441][T11449] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.719883][T11449] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  317.727878][T11449] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000007
[  317.735861][T11449] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  317.743830][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.751804][T11449] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  317.759783][T11449]  </TASK>
[  318.360643][T11481] FAULT_INJECTION: forcing a failure.
[  318.360643][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.387116][T11481] CPU: 0 PID: 11481 Comm: syz.0.1998 Not tainted syzkaller #0
[  318.394624][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  318.404836][T11481] Call Trace:
[  318.408127][T11481]  <TASK>
[  318.411065][T11481]  dump_stack_lvl+0x18c/0x250
[  318.415784][T11481]  ? show_regs_print_info+0x20/0x20
[  318.421010][T11481]  ? load_image+0x420/0x420
[  318.425541][T11481]  ? __might_fault+0xaa/0x120
[  318.430242][T11481]  ? __lock_acquire+0x7d40/0x7d40
[  318.435298][T11481]  should_fail_ex+0x39d/0x4d0
[  318.440008][T11481]  _copy_from_iter+0x1d9/0x12e0
[  318.444890][T11481]  ? rep_movs_alternative+0x4a/0x90
[  318.450154][T11481]  ? _copy_from_iter+0x24e/0x12e0
[  318.455203][T11481]  ? __virt_addr_valid+0x18c/0x540
[  318.460339][T11481]  ? __lock_acquire+0x7d40/0x7d40
[  318.465469][T11481]  ? copyout_mc+0x70/0x70
[  318.469813][T11481]  ? copyout_mc+0x70/0x70
[  318.474152][T11481]  ? __virt_addr_valid+0x18c/0x540
[  318.479275][T11481]  ? page_copy_sane+0x16a/0x270
[  318.484129][T11481]  copy_page_from_iter+0x7b/0x100
[  318.489155][T11481]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  318.494967][T11481]  tun_get_user+0x15db/0x3ca0
[  318.499651][T11481]  ? aa_file_perm+0x11b/0xee0
[  318.504330][T11481]  ? rcu_read_unlock+0xa0/0xa0
[  318.509108][T11481]  ? tun_get+0x1c/0x2e0
[  318.513263][T11481]  ? __lock_acquire+0x7d40/0x7d40
[  318.518383][T11481]  ? tun_get+0x1c/0x2e0
[  318.522550][T11481]  tun_chr_write_iter+0x119/0x200
[  318.527609][T11481]  vfs_write+0x46c/0x990
[  318.531857][T11481]  ? file_end_write+0x250/0x250
[  318.536798][T11481]  ? __fget_files+0x43d/0x4b0
[  318.541575][T11481]  ? __fdget_pos+0x1d8/0x330
[  318.546162][T11481]  ? ksys_write+0x75/0x260
[  318.550581][T11481]  ksys_write+0x150/0x260
[  318.554912][T11481]  ? __ia32_sys_read+0x90/0x90
[  318.559739][T11481]  ? lockdep_hardirqs_on+0x98/0x150
[  318.564943][T11481]  do_syscall_64+0x55/0xb0
[  318.569357][T11481]  ? clear_bhb_loop+0x40/0x90
[  318.574029][T11481]  ? clear_bhb_loop+0x40/0x90
[  318.578704][T11481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.584598][T11481] RIP: 0033:0x7f229a59ce59
[  318.589012][T11481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.608615][T11481] RSP: 002b:00007f229b457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  318.617028][T11481] RAX: ffffffffffffffda RBX: 00007f229a815fa0 RCX: 00007f229a59ce59
[  318.625017][T11481] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 00000000000000c8
[  318.632987][T11481] RBP: 00007f229b457090 R08: 0000000000000000 R09: 0000000000000000
[  318.640956][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  318.648929][T11481] R13: 00007f229a816038 R14: 00007f229a815fa0 R15: 00007ffe95064d68
[  318.656908][T11481]  </TASK>
[  318.796706][T11490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  318.859629][T11490] validate_nla: 13 callbacks suppressed
[  318.859666][T11490] netlink: 'syz.0.2002': attribute type 9 has an invalid length.
[  318.876145][T11490] __nla_validate_parse: 3 callbacks suppressed
[  318.876167][T11490] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2002'.
[  318.912536][T11493] FAULT_INJECTION: forcing a failure.
[  318.912536][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.938768][T11493] CPU: 1 PID: 11493 Comm: syz.3.2003 Not tainted syzkaller #0
[  318.946278][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  318.956359][T11493] Call Trace:
[  318.959661][T11493]  <TASK>
[  318.962590][T11493]  dump_stack_lvl+0x18c/0x250
[  318.962620][T11493]  ? show_regs_print_info+0x20/0x20
[  318.962640][T11493]  ? load_image+0x420/0x420
[  318.962660][T11493]  ? __lock_acquire+0x7d40/0x7d40
[  318.962681][T11493]  ? __virt_addr_valid+0x18c/0x540
[  318.962705][T11493]  should_fail_ex+0x39d/0x4d0
[  318.962734][T11493]  _copy_from_user+0x2f/0xe0
[  318.962756][T11493]  bpf_prog_test_run_skb+0x26c/0x18c0
[  318.962781][T11493]  ? __fget_files+0x28/0x4b0
[  318.962801][T11493]  ? __fget_files+0x28/0x4b0
[  318.962822][T11493]  ? __fget_files+0x43d/0x4b0
[  319.015880][T11493]  ? cpu_online+0x60/0x60
[  319.020222][T11493]  bpf_prog_test_run+0x321/0x390
[  319.025165][T11493]  __sys_bpf+0x49d/0x890
[  319.029402][T11493]  ? bpf_link_show_fdinfo+0x390/0x390
[  319.034778][T11493]  ? lock_chain_count+0x20/0x20
[  319.039631][T11493]  __x64_sys_bpf+0x7c/0x90
[  319.044038][T11493]  do_syscall_64+0x55/0xb0
[  319.048445][T11493]  ? clear_bhb_loop+0x40/0x90
[  319.053126][T11493]  ? clear_bhb_loop+0x40/0x90
[  319.057835][T11493]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.063727][T11493] RIP: 0033:0x7f7bc139ce59
[  319.068143][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.087753][T11493] RSP: 002b:00007f7bc2221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  319.096166][T11493] RAX: ffffffffffffffda RBX: 00007f7bc1615fa0 RCX: 00007f7bc139ce59
[  319.104132][T11493] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a
[  319.112093][T11493] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  319.120055][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.128017][T11493] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  319.135993][T11493]  </TASK>
[  319.174466][T11493] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2003'.
[  319.188148][T11493] openvswitch: netlink: Key type 4112 is out of range max 32
[  319.544710][T11503] netlink: 'syz.3.2006': attribute type 46 has an invalid length.
[  319.592032][T11494] netlink: 'syz.0.2002': attribute type 9 has an invalid length.
[  319.597959][T11503] netlink: 'syz.3.2006': attribute type 46 has an invalid length.
[  319.617959][T11494] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2002'.
[  319.632960][T11506] netlink: 'syz.3.2006': attribute type 39 has an invalid length.
[  319.869806][T11511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.907115][T11511] netlink: 'syz.0.2008': attribute type 9 has an invalid length.
[  319.949298][T11511] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2008'.
[  320.172202][T11516] netlink: 'syz.0.2008': attribute type 9 has an invalid length.
[  320.183325][T11516] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2008'.
[  320.961992][T11536] netlink: 'syz.0.2017': attribute type 12 has an invalid length.
[  320.989649][T11536] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2017'.
[  321.032123][T11538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.042946][T11541] netlink: 'syz.1.2019': attribute type 46 has an invalid length.
[  321.056723][T11541] netlink: 'syz.1.2019': attribute type 46 has an invalid length.
[  321.109258][T11538] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.2018'.
[  321.372020][T11544] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.2018'.
[  321.678390][T11553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.760600][T11553] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.2024'.
[  321.965052][T11562] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2028'.
[  322.320204][T11578] FAULT_INJECTION: forcing a failure.
[  322.320204][T11578] name failslab, interval 1, probability 0, space 0, times 0
[  322.333866][T11578] CPU: 0 PID: 11578 Comm: syz.1.2034 Not tainted syzkaller #0
[  322.341364][T11578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  322.351877][T11578] Call Trace:
[  322.355174][T11578]  <TASK>
[  322.358118][T11578]  dump_stack_lvl+0x18c/0x250
[  322.362806][T11578]  ? show_regs_print_info+0x20/0x20
[  322.368017][T11578]  ? load_image+0x420/0x420
[  322.372551][T11578]  ? __might_sleep+0xe0/0xe0
[  322.377169][T11578]  ? __lock_acquire+0x7d40/0x7d40
[  322.382216][T11578]  ? verify_lock_unused+0x140/0x140
[  322.387431][T11578]  should_fail_ex+0x39d/0x4d0
[  322.392126][T11578]  should_failslab+0x9/0x20
[  322.396731][T11578]  slab_pre_alloc_hook+0x59/0x310
[  322.401787][T11578]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  322.407333][T11578]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  322.412877][T11578]  __kmem_cache_alloc_node+0x53/0x250
[  322.418251][T11578]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  322.423790][T11578]  __kmalloc+0xa4/0x230
[  322.427945][T11578]  bpf_prog_test_run_skb+0x245/0x18c0
[  322.433312][T11578]  ? __fget_files+0x28/0x4b0
[  322.437903][T11578]  ? __fget_files+0x28/0x4b0
[  322.442510][T11578]  ? __fget_files+0x43d/0x4b0
[  322.447200][T11578]  ? cpu_online+0x60/0x60
[  322.451555][T11578]  bpf_prog_test_run+0x321/0x390
[  322.456500][T11578]  __sys_bpf+0x49d/0x890
[  322.460745][T11578]  ? bpf_link_show_fdinfo+0x390/0x390
[  322.466121][T11578]  ? lock_chain_count+0x20/0x20
[  322.470968][T11578]  __x64_sys_bpf+0x7c/0x90
[  322.475374][T11578]  do_syscall_64+0x55/0xb0
[  322.479781][T11578]  ? clear_bhb_loop+0x40/0x90
[  322.484446][T11578]  ? clear_bhb_loop+0x40/0x90
[  322.489115][T11578]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.495009][T11578] RIP: 0033:0x7f680cd9ce59
[  322.499421][T11578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.519022][T11578] RSP: 002b:00007f680dd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  322.527431][T11578] RAX: ffffffffffffffda RBX: 00007f680d015fa0 RCX: 00007f680cd9ce59
[  322.535403][T11578] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[  322.543366][T11578] RBP: 00007f680dd44090 R08: 0000000000000000 R09: 0000000000000000
[  322.551341][T11578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.559315][T11578] R13: 00007f680d016038 R14: 00007f680d015fa0 R15: 00007ffe83862e18
[  322.567301][T11578]  </TASK>
[  322.675415][T11582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  323.187679][T11586] delete_channel: no stack
[  323.662353][T11603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  323.886351][T11608] validate_nla: 14 callbacks suppressed
[  323.886363][T11608] netlink: 'syz.3.2043': attribute type 9 has an invalid length.
[  323.901154][T11608] __nla_validate_parse: 6 callbacks suppressed
[  323.901167][T11608] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.2043'.
[  324.510409][T11620] FAULT_INJECTION: forcing a failure.
[  324.510409][T11620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.524809][T11620] CPU: 0 PID: 11620 Comm: syz.1.2049 Not tainted syzkaller #0
[  324.532307][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  324.542377][T11620] Call Trace:
[  324.545674][T11620]  <TASK>
[  324.548622][T11620]  dump_stack_lvl+0x18c/0x250
[  324.553318][T11620]  ? show_regs_print_info+0x20/0x20
[  324.558522][T11620]  ? load_image+0x420/0x420
[  324.563047][T11620]  ? __lock_acquire+0x7d40/0x7d40
[  324.568089][T11620]  ? snprintf+0xe9/0x140
[  324.572353][T11620]  should_fail_ex+0x39d/0x4d0
[  324.577044][T11620]  _copy_to_user+0x2f/0xa0
[  324.581466][T11620]  simple_read_from_buffer+0xe7/0x150
[  324.586870][T11620]  proc_fail_nth_read+0x1e8/0x260
[  324.591932][T11620]  ? proc_fault_inject_write+0x360/0x360
[  324.597598][T11620]  ? fsnotify_perm+0x271/0x5e0
[  324.602383][T11620]  ? proc_fault_inject_write+0x360/0x360
[  324.608042][T11620]  vfs_read+0x28b/0x970
[  324.611376][T11624] netlink: 'syz.0.2052': attribute type 12 has an invalid length.
[  324.612211][T11620]  ? kernel_read+0x1e0/0x1e0
[  324.620356][T11624] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2052'.
[  324.624597][T11620]  ? __fget_files+0x28/0x4b0
[  324.624623][T11620]  ? __fget_files+0x28/0x4b0
[  324.624644][T11620]  ? __fget_files+0x43d/0x4b0
[  324.624673][T11620]  ? __fdget_pos+0x2a3/0x330
[  324.624693][T11620]  ? ksys_read+0x75/0x260
[  324.624717][T11620]  ksys_read+0x150/0x260
[  324.624742][T11620]  ? vfs_write+0x990/0x990
[  324.665284][T11620]  ? lockdep_hardirqs_on+0x98/0x150
[  324.670489][T11620]  do_syscall_64+0x55/0xb0
[  324.674898][T11620]  ? clear_bhb_loop+0x40/0x90
[  324.679567][T11620]  ? clear_bhb_loop+0x40/0x90
[  324.684237][T11620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.690304][T11620] RIP: 0033:0x7f680cd5d68e
[  324.694709][T11620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  324.714311][T11620] RSP: 002b:00007f680dd43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  324.722717][T11620] RAX: ffffffffffffffda RBX: 00007f680dd446c0 RCX: 00007f680cd5d68e
[  324.730681][T11620] RDX: 000000000000000f RSI: 00007f680dd440a0 RDI: 0000000000000007
[  324.738643][T11620] RBP: 00007f680dd44090 R08: 0000000000000000 R09: 0000000000000000
[  324.746609][T11620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.754568][T11620] R13: 00007f680d016038 R14: 00007f680d015fa0 R15: 00007ffe83862e18
[  324.762545][T11620]  </TASK>
[  324.960237][T11631] FAULT_INJECTION: forcing a failure.
[  324.960237][T11631] name failslab, interval 1, probability 0, space 0, times 0
[  324.973654][T11631] CPU: 0 PID: 11631 Comm: syz.2.2055 Not tainted syzkaller #0
[  324.981146][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  324.991223][T11631] Call Trace:
[  324.994520][T11631]  <TASK>
[  324.997480][T11631]  dump_stack_lvl+0x18c/0x250
[  325.002184][T11631]  ? show_regs_print_info+0x20/0x20
[  325.007386][T11631]  ? load_image+0x420/0x420
[  325.011914][T11631]  ? __might_sleep+0xe0/0xe0
[  325.016527][T11631]  ? __lock_acquire+0x7d40/0x7d40
[  325.021589][T11631]  should_fail_ex+0x39d/0x4d0
[  325.026299][T11631]  should_failslab+0x9/0x20
[  325.030827][T11631]  slab_pre_alloc_hook+0x59/0x310
[  325.035879][T11631]  ? kvmalloc_node+0x70/0x180
[  325.040581][T11631]  ? kvmalloc_node+0x70/0x180
[  325.045283][T11631]  __kmem_cache_alloc_node+0x53/0x250
[  325.050689][T11631]  ? kvmalloc_node+0x70/0x180
[  325.055390][T11631]  __kmalloc_node+0xa4/0x230
[  325.060010][T11631]  kvmalloc_node+0x70/0x180
[  325.064637][T11631]  page_pool_create+0x1eb/0x5c0
[  325.069524][T11631]  __veth_napi_enable_range+0x195/0x700
[  325.075105][T11631]  ? __skb_frag_ref+0x1c0/0x1c0
[  325.079991][T11631]  ? netif_napi_add_weight+0xa22/0xdf0
[  325.085487][T11631]  veth_napi_enable_range+0xd0/0x150
[  325.090803][T11631]  veth_set_features+0x1c8/0x2a0
[  325.095779][T11631]  __netdev_update_features+0x9cb/0x18e0
[  325.101461][T11631]  ? dev_xdp_attach+0x1030/0x1030
[  325.106531][T11631]  ? __might_fault+0xaa/0x120
[  325.111232][T11631]  ? __lock_acquire+0x7d40/0x7d40
[  325.116287][T11631]  ? aa_get_newest_label+0xfd/0x5c0
[  325.121510][T11631]  ? __might_fault+0xaa/0x120
[  325.126198][T11631]  ? __might_fault+0xc6/0x120
[  325.130887][T11631]  ? __might_fault+0xaa/0x120
[  325.135601][T11631]  ethtool_set_one_feature+0x2a8/0x2f0
[  325.141097][T11631]  ? apparmor_capable+0x137/0x1a0
[  325.146182][T11631]  ? ethtool_get_one_feature+0x280/0x280
[  325.151869][T11631]  ? security_capable+0x89/0xb0
[  325.156759][T11631]  dev_ethtool+0xfd7/0x18d0
[  325.161297][T11631]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  325.167583][T11631]  ? __lock_acquire+0x7d40/0x7d40
[  325.172636][T11631]  ? __might_fault+0xaa/0x120
[  325.177338][T11631]  ? full_name_hash+0x92/0xe0
[  325.182056][T11631]  ? dev_load+0x21/0x1f0
[  325.186331][T11631]  dev_ioctl+0x392/0x1140
[  325.190706][T11631]  sock_do_ioctl+0x239/0x310
[  325.195329][T11631]  ? sock_show_fdinfo+0xb0/0xb0
[  325.200231][T11631]  sock_ioctl+0x5ba/0x7e0
[  325.204592][T11631]  ? sock_poll+0x3e0/0x3e0
[  325.209043][T11631]  ? bpf_lsm_file_ioctl+0x9/0x10
[  325.214267][T11631]  ? security_file_ioctl+0x80/0xa0
[  325.219404][T11631]  ? sock_poll+0x3e0/0x3e0
[  325.223855][T11631]  __se_sys_ioctl+0xfd/0x170
[  325.228485][T11631]  do_syscall_64+0x55/0xb0
[  325.232936][T11631]  ? clear_bhb_loop+0x40/0x90
[  325.237719][T11631]  ? clear_bhb_loop+0x40/0x90
[  325.242505][T11631]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.248427][T11631] RIP: 0033:0x7f066159ce59
[  325.252866][T11631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.272494][T11631] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  325.281034][T11631] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  325.289041][T11631] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d
[  325.297037][T11631] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  325.305032][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  325.313028][T11631] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  325.321041][T11631]  </TASK>
[  325.329606][T11631] page_pool_create() gave up with errno -12
[  325.335880][T11631] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9
[  325.614270][T11655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.689580][T11655] netlink: 'syz.0.2062': attribute type 9 has an invalid length.
[  325.717987][T11655] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2062'.
[  325.851630][T11663] netlink: 'syz.1.2064': attribute type 12 has an invalid length.
[  325.869660][T11663] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2064'.
[  326.075835][T11660] netlink: 'syz.0.2062': attribute type 9 has an invalid length.
[  326.087360][T11660] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2062'.
[  326.135841][T11668] netlink: 'syz.2.2066': attribute type 46 has an invalid length.
[  326.146302][T11668] netlink: 'syz.2.2066': attribute type 46 has an invalid length.
[  326.159645][T11668] netlink: 'syz.2.2066': attribute type 39 has an invalid length.
[  326.919036][T11699] netlink: 'syz.3.2077': attribute type 46 has an invalid length.
[  326.931831][T11699] netlink: 'syz.3.2077': attribute type 46 has an invalid length.
[  328.717232][T11753] sit0: entered allmulticast mode
[  329.011865][T11758] sit0: entered promiscuous mode
[  329.477678][T11774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.499854][T11774] validate_nla: 4 callbacks suppressed
[  329.499886][T11774] netlink: 'syz.3.2100': attribute type 9 has an invalid length.
[  329.513953][T11774] netlink: 194424 bytes leftover after parsing attributes in process `syz.3.2100'.
[  329.633966][T11780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.686543][T11778] netlink: 'syz.3.2100': attribute type 9 has an invalid length.
[  329.695748][T11778] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.2100'.
[  329.756539][T11780] netlink: 'syz.0.2102': attribute type 9 has an invalid length.
[  329.778816][T11780] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2102'.
[  330.282927][T11781] netlink: 'syz.0.2102': attribute type 9 has an invalid length.
[  330.298163][T11781] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2102'.
[  330.576538][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'.
[  330.603084][T11798] pimreg: tun_chr_ioctl cmd 1074025681
[  331.194612][T11820] netlink: 'syz.2.2117': attribute type 10 has an invalid length.
[  331.205364][T11820] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2117'.
[  331.223705][T11820] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2117'.
[  331.405400][T11825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  331.433550][T11825] netlink: 'syz.2.2119': attribute type 9 has an invalid length.
[  331.443226][T11825] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.2119'.
[  331.642783][T11827] netlink: 'syz.2.2119': attribute type 9 has an invalid length.
[  331.651811][T11827] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.2119'.
[  332.423912][T11857] netlink: 'syz.0.2128': attribute type 27 has an invalid length.
[  332.507013][T11861] netlink: 'syz.1.2129': attribute type 12 has an invalid length.
[  332.527709][T11861] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2129'.
[  332.633069][T11867] netlink: 'syz.3.2131': attribute type 21 has an invalid length.
[  332.698888][T11870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.920561][T11871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  333.401404][T11889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  334.731074][T11921] validate_nla: 7 callbacks suppressed
[  334.731092][T11921] netlink: 'syz.1.2146': attribute type 4 has an invalid length.
[  334.759954][T11921] __nla_validate_parse: 8 callbacks suppressed
[  334.759967][T11921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2146'.
[  335.244781][T11937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  335.279728][T11937] netlink: 'syz.0.2150': attribute type 9 has an invalid length.
[  335.290671][T11937] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2150'.
[  335.435150][T11941] netlink: 'syz.2.2152': attribute type 12 has an invalid length.
[  335.454007][T11941] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2152'.
[  335.537264][T11939] netlink: 'syz.0.2150': attribute type 9 has an invalid length.
[  335.567325][T11939] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2150'.
[  335.671971][T11947] netlink: 'syz.2.2153': attribute type 46 has an invalid length.
[  335.705037][T11947] netlink: 'syz.2.2153': attribute type 46 has an invalid length.
[  335.733046][T11949] netlink: 'syz.2.2153': attribute type 39 has an invalid length.
[  337.022219][T11963] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  337.339746][T11976] netlink: 'syz.3.2162': attribute type 12 has an invalid length.
[  337.348719][T11976] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2162'.
[  337.615156][T11981] netlink: 'syz.1.2164': attribute type 46 has an invalid length.
[  337.707897][T11981] netlink: 'syz.1.2164': attribute type 46 has an invalid length.
[  338.169414][T11998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.216364][T11998] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2171'.
[  338.540502][T12007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2174'.
[  338.551897][T12002] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2171'.
[  338.581344][T12010] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2175'.
[  339.001083][T12022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.023765][T12022] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.2181'.
[  339.997621][T12048] validate_nla: 11 callbacks suppressed
[  339.997636][T12048] netlink: 'syz.0.2190': attribute type 46 has an invalid length.
[  340.006461][T12043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  340.037752][T12048] netlink: 'syz.0.2190': attribute type 46 has an invalid length.
[  340.041097][T12043] netlink: 'syz.1.2189': attribute type 9 has an invalid length.
[  340.054471][T12043] __nla_validate_parse: 2 callbacks suppressed
[  340.054514][T12043] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.2189'.
[  340.071725][T12045] netlink: 'syz.0.2190': attribute type 39 has an invalid length.
[  340.384482][T12046] netlink: 'syz.1.2189': attribute type 9 has an invalid length.
[  340.419834][T12046] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.2189'.
[  341.042914][T12055] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  341.425432][T12080] FAULT_INJECTION: forcing a failure.
[  341.425432][T12080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.440338][T12080] CPU: 0 PID: 12080 Comm: syz.1.2198 Not tainted syzkaller #0
[  341.447833][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  341.457906][T12080] Call Trace:
[  341.461196][T12080]  <TASK>
[  341.464115][T12080]  dump_stack_lvl+0x18c/0x250
[  341.468787][T12080]  ? show_regs_print_info+0x20/0x20
[  341.473982][T12080]  ? load_image+0x420/0x420
[  341.478498][T12080]  ? __lock_acquire+0x7d40/0x7d40
[  341.483508][T12080]  ? snprintf+0xe9/0x140
[  341.487739][T12080]  should_fail_ex+0x39d/0x4d0
[  341.492423][T12080]  _copy_to_user+0x2f/0xa0
[  341.496841][T12080]  simple_read_from_buffer+0xe7/0x150
[  341.502236][T12080]  proc_fail_nth_read+0x1e8/0x260
[  341.507270][T12080]  ? proc_fault_inject_write+0x360/0x360
[  341.512914][T12080]  ? fsnotify_perm+0x271/0x5e0
[  341.517682][T12080]  ? proc_fault_inject_write+0x360/0x360
[  341.523318][T12080]  vfs_read+0x28b/0x970
[  341.527485][T12080]  ? kernel_read+0x1e0/0x1e0
[  341.532078][T12080]  ? __fget_files+0x28/0x4b0
[  341.536662][T12080]  ? __fget_files+0x28/0x4b0
[  341.541250][T12080]  ? __fget_files+0x43d/0x4b0
[  341.545929][T12080]  ? __fdget_pos+0x2a3/0x330
[  341.550537][T12080]  ? ksys_read+0x75/0x260
[  341.554877][T12080]  ksys_read+0x150/0x260
[  341.559127][T12080]  ? vfs_write+0x990/0x990
[  341.563546][T12080]  ? lockdep_hardirqs_on+0x98/0x150
[  341.568748][T12080]  do_syscall_64+0x55/0xb0
[  341.573159][T12080]  ? clear_bhb_loop+0x40/0x90
[  341.577859][T12080]  ? clear_bhb_loop+0x40/0x90
[  341.582524][T12080]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.588412][T12080] RIP: 0033:0x7f680cd5d68e
[  341.592822][T12080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  341.612424][T12080] RSP: 002b:00007f680dd43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  341.620838][T12080] RAX: ffffffffffffffda RBX: 00007f680dd446c0 RCX: 00007f680cd5d68e
[  341.628801][T12080] RDX: 000000000000000f RSI: 00007f680dd440a0 RDI: 0000000000000004
[  341.636769][T12080] RBP: 00007f680dd44090 R08: 0000000000000000 R09: 0000000000000000
[  341.644732][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  341.652700][T12080] R13: 00007f680d016038 R14: 00007f680d015fa0 R15: 00007ffe83862e18
[  341.660679][T12080]  </TASK>
[  341.857019][T12088] netlink: 'syz.1.2201': attribute type 46 has an invalid length.
[  341.921751][T12088] netlink: 'syz.1.2201': attribute type 46 has an invalid length.
[  341.937906][T12091] netlink: 'syz.1.2201': attribute type 39 has an invalid length.
[  342.062445][T12095] netlink: 'syz.0.2211': attribute type 46 has an invalid length.
[  342.092913][T12095] netlink: 'syz.0.2211': attribute type 46 has an invalid length.
[  342.140010][T12097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  342.199200][T12097] netlink: 194424 bytes leftover after parsing attributes in process `syz.3.2204'.
[  342.416198][T12099] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  342.686390][T12105] delete_channel: no stack
[  342.738352][T12100] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.2204'.
[  342.902912][T12115] netlink: 63719 bytes leftover after parsing attributes in process `syz.1.2208'.
[  343.227961][T12127] FAULT_INJECTION: forcing a failure.
[  343.227961][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.250636][T12127] CPU: 1 PID: 12127 Comm: syz.3.2215 Not tainted syzkaller #0
[  343.258171][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  343.268265][T12127] Call Trace:
[  343.271567][T12127]  <TASK>
[  343.274518][T12127]  dump_stack_lvl+0x18c/0x250
[  343.279238][T12127]  ? show_regs_print_info+0x20/0x20
[  343.284475][T12127]  ? load_image+0x420/0x420
[  343.289016][T12127]  ? __might_fault+0xaa/0x120
[  343.293753][T12127]  ? __lock_acquire+0x7d40/0x7d40
[  343.298826][T12127]  should_fail_ex+0x39d/0x4d0
[  343.303554][T12127]  _copy_from_iter+0x1d9/0x12e0
[  343.308440][T12127]  ? slab_post_alloc_hook+0x8a/0x4b0
[  343.313758][T12127]  ? __virt_addr_valid+0x18c/0x540
[  343.318908][T12127]  ? __lock_acquire+0x7d40/0x7d40
[  343.323965][T12127]  ? rcu_is_watching+0x15/0xb0
[  343.328774][T12127]  ? copyout_mc+0x70/0x70
[  343.333146][T12127]  ? __virt_addr_valid+0x18c/0x540
[  343.338294][T12127]  ? __virt_addr_valid+0x18c/0x540
[  343.343437][T12127]  ? __virt_addr_valid+0x469/0x540
[  343.348589][T12127]  ? __check_object_size+0x506/0xa20
[  343.353917][T12127]  netlink_sendmsg+0x76b/0xbf0
[  343.358731][T12127]  ? netlink_getsockopt+0x590/0x590
[  343.363968][T12127]  ? aa_sock_msg_perm+0x94/0x150
[  343.368944][T12127]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  343.374260][T12127]  ? security_socket_sendmsg+0x80/0xa0
[  343.379744][T12127]  ? netlink_getsockopt+0x590/0x590
[  343.384977][T12127]  ____sys_sendmsg+0x5ba/0x960
[  343.389876][T12127]  ? __asan_memset+0x22/0x40
[  343.394501][T12127]  ? __sys_sendmsg_sock+0x30/0x30
[  343.399553][T12127]  ? __import_iovec+0x5f2/0x850
[  343.404450][T12127]  ? import_iovec+0x73/0xa0
[  343.408990][T12127]  ___sys_sendmsg+0x2a6/0x360
[  343.413699][T12127]  ? get_pid_task+0x20/0x1e0
[  343.418329][T12127]  ? __sys_sendmsg+0x2a0/0x2a0
[  343.423174][T12127]  ? __lock_acquire+0x7d40/0x7d40
[  343.428260][T12127]  __se_sys_sendmsg+0x1c2/0x2b0
[  343.433188][T12127]  ? __x64_sys_sendmsg+0x80/0x80
[  343.438162][T12127]  ? lockdep_hardirqs_on+0x98/0x150
[  343.443370][T12127]  do_syscall_64+0x55/0xb0
[  343.447790][T12127]  ? clear_bhb_loop+0x40/0x90
[  343.452465][T12127]  ? clear_bhb_loop+0x40/0x90
[  343.457145][T12127]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  343.463049][T12127] RIP: 0033:0x7f7bc139ce59
[  343.467464][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.487074][T12127] RSP: 002b:00007f7bc2221028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.495490][T12127] RAX: ffffffffffffffda RBX: 00007f7bc1615fa0 RCX: 00007f7bc139ce59
[  343.503461][T12127] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  343.511428][T12127] RBP: 00007f7bc2221090 R08: 0000000000000000 R09: 0000000000000000
[  343.519404][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.527462][T12127] R13: 00007f7bc1616038 R14: 00007f7bc1615fa0 R15: 00007ffdf0641748
[  343.535631][T12127]  </TASK>
[  344.043631][T12138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  344.076002][T12140] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.2221'.
[  344.093528][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'.
[  344.099666][T12138] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.2220'.
[  344.262697][T12147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2224'.
[  344.377995][T12145] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2223'.
[  345.150913][T12175] validate_nla: 12 callbacks suppressed
[  345.150931][T12175] netlink: 'syz.2.2235': attribute type 21 has an invalid length.
[  345.234655][T12178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  345.255210][T12178] netlink: 'syz.2.2237': attribute type 9 has an invalid length.
[  345.263893][T12178] __nla_validate_parse: 4 callbacks suppressed
[  345.263937][T12178] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.2237'.
[  345.494232][T12180] netlink: 'syz.2.2237': attribute type 9 has an invalid length.
[  345.515544][T12180] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.2237'.
[  347.299571][T12227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.356545][T12227] netlink: 'syz.3.2251': attribute type 9 has an invalid length.
[  347.392555][T12227] netlink: 194424 bytes leftover after parsing attributes in process `syz.3.2251'.
[  347.412848][T12231] netlink: 'syz.0.2254': attribute type 46 has an invalid length.
[  347.442165][T12231] netlink: 'syz.0.2254': attribute type 46 has an invalid length.
[  347.824914][T12231] netlink: 'syz.0.2254': attribute type 39 has an invalid length.
[  347.904455][T12234] netlink: 'syz.3.2251': attribute type 9 has an invalid length.
[  347.912467][T12234] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.2251'.
[  349.543577][T12272] netlink: 'syz.3.2265': attribute type 9 has an invalid length.
[  349.556117][T12272] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2265'.
[  350.764508][T12280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.801284][T12280] netlink: 'syz.1.2267': attribute type 9 has an invalid length.
[  350.816933][T12280] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.2267'.
[  350.982380][T12287] FAULT_INJECTION: forcing a failure.
[  350.982380][T12287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  351.020274][T12281] netlink: 'syz.1.2267': attribute type 9 has an invalid length.
[  351.041993][T12281] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.2267'.
[  351.058983][T12287] CPU: 1 PID: 12287 Comm: syz.2.2269 Not tainted syzkaller #0
[  351.066504][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  351.076577][T12287] Call Trace:
[  351.079870][T12287]  <TASK>
[  351.082811][T12287]  dump_stack_lvl+0x18c/0x250
[  351.087672][T12287]  ? show_regs_print_info+0x20/0x20
[  351.093051][T12287]  ? load_image+0x420/0x420
[  351.097612][T12287]  ? __lock_acquire+0x7d40/0x7d40
[  351.102702][T12287]  ? __virt_addr_valid+0x18c/0x540
[  351.107868][T12287]  should_fail_ex+0x39d/0x4d0
[  351.112611][T12287]  _copy_to_user+0x2f/0xa0
[  351.117074][T12287]  map_get_next_key+0x4fd/0x620
[  351.121974][T12287]  ? map_get_next_key+0x2d7/0x620
[  351.127026][T12287]  __sys_bpf+0x715/0x890
[  351.131298][T12287]  ? bpf_link_show_fdinfo+0x390/0x390
[  351.136706][T12287]  ? lock_chain_count+0x20/0x20
[  351.141587][T12287]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  351.147601][T12287]  __x64_sys_bpf+0x7c/0x90
[  351.152046][T12287]  do_syscall_64+0x55/0xb0
[  351.156484][T12287]  ? clear_bhb_loop+0x40/0x90
[  351.161274][T12287]  ? clear_bhb_loop+0x40/0x90
[  351.165970][T12287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  351.171964][T12287] RIP: 0033:0x7f066159ce59
[  351.176381][T12287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.195990][T12287] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  351.204519][T12287] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  351.212490][T12287] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000004
[  351.220454][T12287] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  351.228458][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.236429][T12287] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  351.244404][T12287]  </TASK>
[  351.671168][T12302] syzkaller0: entered promiscuous mode
[  351.693200][T12302] syzkaller0: entered allmulticast mode
[  351.708483][T12307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2275'.
[  351.742683][T12310] netlink: 'syz.0.2276': attribute type 12 has an invalid length.
[  351.757886][T12310] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2276'.
[  351.925821][T12315] netlink: 'syz.0.2278': attribute type 46 has an invalid length.
[  351.974326][T12315] netlink: 'syz.0.2278': attribute type 46 has an invalid length.
[  351.991074][T12316] netlink: 'syz.0.2278': attribute type 39 has an invalid length.
[  352.489912][T12337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  352.512556][T12337] netlink: 'syz.2.2285': attribute type 9 has an invalid length.
[  352.522091][T12337] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.2285'.
[  352.701870][T12339] netlink: 'syz.2.2285': attribute type 9 has an invalid length.
[  352.717300][T12339] netlink: 156568 bytes leftover after parsing attributes in process `syz.2.2285'.
[  352.850781][T12343] netlink: 'syz.0.2287': attribute type 12 has an invalid length.
[  352.914746][T12343] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2287'.
[  352.951646][T12345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2288'.
[  353.121283][T12351] netlink: 'syz.2.2291': attribute type 46 has an invalid length.
[  353.555638][T12348] syzkaller0: entered promiscuous mode
[  353.569801][T12348] syzkaller0: entered allmulticast mode
[  353.594914][T12364] FAULT_INJECTION: forcing a failure.
[  353.594914][T12364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.643348][T12364] CPU: 1 PID: 12364 Comm: syz.2.2295 Not tainted syzkaller #0
[  353.650860][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  353.660947][T12364] Call Trace:
[  353.664234][T12364]  <TASK>
[  353.667170][T12364]  dump_stack_lvl+0x18c/0x250
[  353.671865][T12364]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  353.678042][T12364]  ? show_regs_print_info+0x20/0x20
[  353.683258][T12364]  ? load_image+0x420/0x420
[  353.687929][T12364]  should_fail_ex+0x39d/0x4d0
[  353.692630][T12364]  _copy_from_user+0x2f/0xe0
[  353.697230][T12364]  bpf_prog_test_run_skb+0x26c/0x18c0
[  353.702729][T12364]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  353.708901][T12364]  ? lockdep_hardirqs_on+0x98/0x150
[  353.714115][T12364]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  353.720310][T12364]  ? cpu_online+0x60/0x60
[  353.724672][T12364]  bpf_prog_test_run+0x321/0x390
[  353.729619][T12364]  __sys_bpf+0x49d/0x890
[  353.733907][T12364]  ? bpf_link_show_fdinfo+0x390/0x390
[  353.739430][T12364]  ? lock_chain_count+0x20/0x20
[  353.744292][T12364]  __x64_sys_bpf+0x7c/0x90
[  353.748715][T12364]  do_syscall_64+0x55/0xb0
[  353.753139][T12364]  ? clear_bhb_loop+0x40/0x90
[  353.757993][T12364]  ? clear_bhb_loop+0x40/0x90
[  353.762757][T12364]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  353.768659][T12364] RIP: 0033:0x7f066159ce59
[  353.773080][T12364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.792699][T12364] RSP: 002b:00007f0662499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  353.801126][T12364] RAX: ffffffffffffffda RBX: 00007f0661815fa0 RCX: 00007f066159ce59
[  353.809207][T12364] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a
[  353.817208][T12364] RBP: 00007f0662499090 R08: 0000000000000000 R09: 0000000000000000
[  353.825200][T12364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.833182][T12364] R13: 00007f0661816038 R14: 00007f0661815fa0 R15: 00007ffc3a270218
[  353.841185][T12364]  </TASK>
[  354.174552][T12370] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2298'.
[  354.233691][T12371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.265021][T12371] netlink: 194424 bytes leftover after parsing attributes in process `syz.2.2299'.
[  355.480265][T12396] syzkaller0: entered promiscuous mode
[  355.485940][T12396] syzkaller0: entered allmulticast mode
[  356.174353][T12420] validate_nla: 11 callbacks suppressed
[  356.174390][T12420] netlink: 'syz.2.2313': attribute type 12 has an invalid length.
[  356.188989][T12420] __nla_validate_parse: 2 callbacks suppressed
[  356.189078][T12420] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2313'.
[  356.523130][T12424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.591480][T12424] netlink: 'syz.0.2315': attribute type 9 has an invalid length.
[  356.603032][T12424] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2315'.
[  356.817001][T12432] netlink: 'syz.1.2319': attribute type 12 has an invalid length.
[  356.828659][T12432] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2319'.
[  356.841819][T12434] netlink: 'syz.2.2320': attribute type 12 has an invalid length.
[  356.850443][T12434] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2320'.
[  356.902792][T12430] netlink: 'syz.0.2315': attribute type 9 has an invalid length.
[  356.910962][T12430] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2315'.
[  357.255227][T12444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.310387][T12444] netlink: 'syz.0.2323': attribute type 9 has an invalid length.
[  357.327502][T12444] netlink: 194424 bytes leftover after parsing attributes in process `syz.0.2323'.
[  357.572031][T12449] netlink: 'syz.0.2323': attribute type 9 has an invalid length.
[  357.581202][T12449] netlink: 156568 bytes leftover after parsing attributes in process `syz.0.2323'.
[  358.216548][T12462] netlink: 'syz.3.2329': attribute type 12 has an invalid length.
[  358.237635][T12462] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2329'.
[  358.422272][T12468] netlink: 'syz.1.2331': attribute type 46 has an invalid length.
[  358.440750][T12468] netlink: 'syz.1.2331': attribute type 46 has an invalid length.
[  358.491900][T12472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  358.513210][T12470] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2332'.
[  358.515010][T12472] netlink: 194424 bytes leftover after parsing attributes in process `syz.3.2333'.
[  358.795276][T12475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  360.512952][T12516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.107636][T12524] sock: sock_timestamping_bind_phc: sock not bind to device
[  361.308456][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.318634][T12519] validate_nla: 9 callbacks suppressed
[  361.318656][T12519] netlink: 'syz.3.2346': attribute type 9 has an invalid length.
[  361.334287][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.343878][T12519] __nla_validate_parse: 6 callbacks suppressed
[  361.343891][T12519] netlink: 156568 bytes leftover after parsing attributes in process `syz.3.2346'.
[  361.343924][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.403051][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.411023][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  361.420078][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.446000][T12528] netlink: 'syz.0.2350': attribute type 46 has an invalid length.
[  361.515360][T12529] netlink: 'syz.0.2350': attribute type 39 has an invalid length.
[  361.532481][T12528] netlink: 'syz.0.2350': attribute type 46 has an invalid length.
[  361.641630][ T9179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.815528][ T9179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.917808][ T9179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.935451][T12525] chnl_net:caif_netlink_parms(): no params data found
[  361.989575][T12525] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.996771][T12525] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.004044][T12525] bridge_slave_0: entered allmulticast mode
[  362.014752][T12525] bridge_slave_0: entered promiscuous mode
[  362.033707][ T9179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.046788][T12525] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.054075][T12525] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.061580][T12525] bridge_slave_1: entered allmulticast mode
[  362.068447][T12525] bridge_slave_1: entered promiscuous mode
[  362.096855][T12525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.109542][T12525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.142945][T12525] team0: Port device team_slave_0 added
[  362.152132][T12525] team0: Port device team_slave_1 added
[  362.189718][T12525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.196692][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.223027][T12525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.236799][T12525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.243873][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.270104][T12525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.359856][T12525] hsr_slave_0: entered promiscuous mode
[  362.366478][T12525] hsr_slave_1: entered promiscuous mode
[  363.274360][T12525] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  363.300814][T12525] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  363.311045][T12525] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  363.322237][T12525] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  363.405314][T12525] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.449621][T12525] 8021q: adding VLAN 0 to HW filter on device team0
[  363.463040][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.470162][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.493422][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.500645][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.527332][ T5783] Bluetooth: hci2: command tx timeout
[  363.735552][T12525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.772968][T12525] veth0_vlan: entered promiscuous mode
[  363.826822][T12525] veth1_vlan: entered promiscuous mode
[  363.854895][T12525] veth0_macvtap: entered promiscuous mode
[  363.904997][ T9179] veth1_macvtap: left promiscuous mode
[  363.911473][ T9179] veth0_macvtap: left promiscuous mode
[  363.919323][ T9179] veth1_vlan: left promiscuous mode
[  363.924742][ T9179] veth0_vlan: left promiscuous mode
[  365.607802][ T5783] Bluetooth: hci2: command tx timeout
[  367.687319][ T5783] Bluetooth: hci2: command tx timeout
[  369.767325][ T5783] Bluetooth: hci2: command tx timeout
[  378.732962][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.739365][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  421.636453][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  421.645556][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  421.655940][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  421.664907][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  421.674299][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  421.682334][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  423.767369][ T5779] Bluetooth: hci4: command tx timeout
[  425.847272][ T5779] Bluetooth: hci4: command tx timeout
[  427.927284][ T5779] Bluetooth: hci4: command tx timeout
[  430.007372][ T5779] Bluetooth: hci4: command tx timeout
[  440.180623][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.186922][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  482.667690][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  482.679458][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  482.687886][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  482.696695][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  482.705240][ T5783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  482.712828][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  484.807277][ T5783] Bluetooth: hci5: command tx timeout
[  486.887312][ T5779] Bluetooth: hci5: command tx timeout
[  488.327323][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  488.967301][ T5783] Bluetooth: hci5: command tx timeout
[  491.047294][ T5783] Bluetooth: hci5: command tx timeout
[  501.610496][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.616856][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  523.367283][   T29] INFO: task kworker/u4:0:11 blocked for more than 143 seconds.
[  523.375000][   T29]       Not tainted syzkaller #0
[  523.380101][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  523.389909][   T29] task:kworker/u4:0    state:D stack:21464 pid:11    ppid:2      flags:0x00004000
[  523.399203][   T29] Workqueue: ipv6_addrconf addrconf_dad_work
[  523.405324][   T29] Call Trace:
[  523.408706][   T29]  <TASK>
[  523.411678][   T29]  __schedule+0x1553/0x45a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  523.416297][   T29]  ? lock_chain_count+0x20/0x20
[  523.421267][   T29]  ? asan.module_dtor+0x20/0x20
[  523.426143][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  523.430916][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  523.436604][   T29]  ? kthread_data+0x4f/0xc0
[  523.441250][   T29]  ? wq_worker_sleeping+0x63/0x240
[  523.446391][   T29]  schedule+0xbd/0x170
[  523.450576][   T29]  schedule_preempt_disabled+0x13/0x20
[  523.456066][   T29]  __mutex_lock+0x6a9/0xcc0
[  523.460699][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  523.465406][   T29]  ? addrconf_dad_work+0xd4/0x1530
[  523.470584][   T29]  ? mutex_lock_nested+0x20/0x20
[  523.475556][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  523.480913][   T29]  addrconf_dad_work+0xd4/0x1530
[  523.485884][   T29]  ? ipv6_get_saddr_eval+0xee0/0xee0
[  523.491280][   T29]  ? read_lock_is_recursive+0x20/0x20
[  523.496683][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  523.502288][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  523.513496][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  523.524650][   T29]  process_scheduled_works+0xa5d/0x15d0
[  523.560121][   T29]  ? worker_attach_to_pool+0x380/0x380
[  523.565657][   T29]  ? assign_work+0x3d2/0x5d0
[  523.603657][   T29]  worker_thread+0xa55/0xfc0
[  523.625915][   T29]  kthread+0x2fa/0x390
[  523.647213][   T29]  ? pr_cont_work+0x560/0x560
[  523.651975][   T29]  ? kthread_blkcg+0xd0/0xd0
[  523.656592][   T29]  ret_from_fork+0x48/0x80
[  523.677230][   T29]  ? kthread_blkcg+0xd0/0xd0
[  523.681887][   T29]  ret_from_fork_asm+0x11/0x20
[  523.686690][   T29]  </TASK>
[  523.707328][   T29] INFO: task kworker/u4:11:9183 blocked for more than 143 seconds.
[  523.715275][   T29]       Not tainted syzkaller #0
[  523.738580][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  523.757304][   T29] task:kworker/u4:11   state:D stack:22008 pid:9183  ppid:2      flags:0x00004000
[  523.766675][   T29] Workqueue: events_unbound linkwatch_event
[  523.790045][   T29] Call Trace:
[  523.793377][   T29]  <TASK>
[  523.796810][   T29]  __schedule+0x1553/0x45a0
[  523.829320][   T29]  ? asan.module_dtor+0x20/0x20
[  523.834236][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  523.867203][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  523.872739][   T29]  ? kthread_data+0x4f/0xc0
[  523.897285][   T29]  ? wq_worker_sleeping+0x63/0x240
[  523.902470][   T29]  schedule+0xbd/0x170
[  523.906565][   T29]  schedule_preempt_disabled+0x13/0x20
[  523.927888][   T29]  __mutex_lock+0x6a9/0xcc0
[  523.932461][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  523.947190][   T29]  ? linkwatch_event+0xe/0x60
[  523.951926][   T29]  ? mutex_lock_nested+0x20/0x20
[  523.956899][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  523.977230][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  523.983018][   T29]  linkwatch_event+0xe/0x60
[  523.997754][   T29]  process_scheduled_works+0xa5d/0x15d0
[  524.003406][   T29]  ? worker_attach_to_pool+0x380/0x380
[  524.019688][   T29]  ? assign_work+0x3d2/0x5d0
[  524.024354][   T29]  worker_thread+0xa55/0xfc0
[  524.040341][   T29]  kthread+0x2fa/0x390
[  524.044467][   T29]  ? pr_cont_work+0x560/0x560
[  524.060496][   T29]  ? kthread_blkcg+0xd0/0xd0
[  524.071848][   T29]  ret_from_fork+0x48/0x80
[  524.081917][   T29]  ? kthread_blkcg+0xd0/0xd0
[  524.092362][   T29]  ret_from_fork_asm+0x11/0x20
[  524.103156][   T29]  </TASK>
[  524.160361][   T29] INFO: task syz-executor:12525 blocked for more than 144 seconds.
[  524.193549][   T29]       Not tainted syzkaller #0
[  524.210287][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  524.228394][   T29] task:syz-executor    state:D stack:21736 pid:12525 ppid:1      flags:0x00004004
[  524.254888][   T29] Call Trace:
[  524.262607][   T29]  <TASK>
[  524.269631][   T29]  __schedule+0x1553/0x45a0
[  524.279812][   T29]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.295444][   T29]  ? asan.module_dtor+0x20/0x20
[  524.306811][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  524.322241][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  524.327890][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  524.334091][   T29]  schedule+0xbd/0x170
[  524.339823][   T29]  schedule_preempt_disabled+0x13/0x20
[  524.345317][   T29]  __mutex_lock+0x6a9/0xcc0
[  524.349893][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  524.354585][   T29]  ? rtnetlink_rcv_msg+0x811/0xfa0
[  524.362492][   T29]  ? mutex_lock_nested+0x20/0x20
[  524.367550][   T29]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  524.372848][   T29]  rtnetlink_rcv_msg+0x811/0xfa0
[  524.377977][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  524.383211][   T29]  ? rtnetlink_bind+0x80/0x80
[  524.388202][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[  524.394428][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  524.400588][   T29]  ? lock_chain_count+0x20/0x20
[  524.405505][   T29]  ? __local_bh_enable_ip+0x13a/0x1c0
[  524.411032][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  524.416267][   T29]  ? __local_bh_enable_ip+0x13a/0x1c0
[  524.421759][   T29]  ? _local_bh_enable+0xa0/0xa0
[  524.426634][   T29]  ? __dev_queue_xmit+0x265/0x3660
[  524.432008][   T29]  ? __dev_queue_xmit+0x265/0x3660
[  524.437179][   T29]  ? __dev_queue_xmit+0x1b2c/0x3660
[  524.442405][   T29]  ? __dev_queue_xmit+0x265/0x3660
[  524.447675][   T29]  ? ref_tracker_free+0x690/0x840
[  524.452726][   T29]  netlink_rcv_skb+0x241/0x4d0
[  524.457538][   T29]  ? rtnetlink_bind+0x80/0x80
[  524.462242][   T29]  ? netlink_ack+0x1180/0x1180
[  524.467038][   T29]  ? __lock_acquire+0x7d40/0x7d40
[  524.472273][   T29]  ? netlink_deliver_tap+0x2e/0x1b0
[  524.477530][   T29]  netlink_unicast+0x751/0x8d0
[  524.482325][   T29]  netlink_sendmsg+0x8d0/0xbf0
[  524.487190][   T29]  ? netlink_getsockopt+0x590/0x590
[  524.492687][   T29]  ? aa_sock_msg_perm+0x94/0x150
[  524.497850][   T29]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  524.503265][   T29]  ? security_socket_sendmsg+0x80/0xa0
[  524.508844][   T29]  __sys_sendto+0x4a9/0x6b0
[  524.513535][   T29]  ? __ia32_sys_getpeername+0x90/0x90
[  524.519052][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  524.525067][   T29]  ? lock_chain_count+0x20/0x20
[  524.529987][   T29]  __x64_sys_sendto+0xde/0xf0
[  524.534690][   T29]  do_syscall_64+0x55/0xb0
[  524.539333][   T29]  ? clear_bhb_loop+0x40/0x90
[  524.544029][   T29]  ? clear_bhb_loop+0x40/0x90
[  524.548757][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.554664][   T29] RIP: 0033:0x7f1a7c15d68e
[  524.559192][   T29] RSP: 002b:00007fff792fa928 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  524.567667][   T29] RAX: ffffffffffffffda RBX: 00005555581fa500 RCX: 00007f1a7c15d68e
[  524.575654][   T29] RDX: 0000000000000040 RSI: 00007f1a7cf44670 RDI: 0000000000000003
[  524.583761][   T29] RBP: 0000000000000001 R08: 00007fff792fa9a4 R09: 000000000000000c
[  524.591952][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  524.600041][   T29] R13: 0000000000000000 R14: 00007f1a7cf44670 R15: 0000000000000000
[  524.608103][   T29]  </TASK>
[  524.611983][   T29] 
[  524.611983][   T29] Showing all locks held in the system:
[  524.622213][   T29] 1 lock held by pool_workqueue_/3:
[  524.627714][   T29]  #0: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  524.640586][   T29] 3 locks held by kworker/u4:0/11:
[  524.645736][   T29]  #0: ffff88802c3fe138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.657446][   T29]  #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.670415][   T29]  #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530
[  524.679921][   T29] 1 lock held by khungtaskd/29:
[  524.684773][   T29]  #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  524.694801][   T29] 1 lock held by klogd/5128:
[  524.699439][   T29]  #0: ffff8880b8e3c098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  524.709428][   T29] 2 locks held by getty/5532:
[  524.714114][   T29]  #0: ffff88802d16b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  524.723979][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  524.734278][   T29] 1 lock held by syz-executor/5774:
[  524.739534][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  524.748653][   T29] 2 locks held by syz-executor/5773:
[  524.754002][   T29]  #0: ffff888025300e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500
[  524.764135][   T29]  #1: ffff8880253000b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5d6/0x1220
[  524.773994][   T29] 1 lock held by syz-executor/5776:
[  524.779232][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  524.788302][   T29] 3 locks held by kworker/0:4/5817:
[  524.793519][   T29]  #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.805989][   T29]  #1: ffffc900048ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.817200][   T29]  #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90
[  524.826943][   T29] 2 locks held by kworker/0:5/5838:
[  524.832317][   T29]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.843467][   T29]  #1: ffffc9000498fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.855560][   T29] 4 locks held by kworker/u4:9/9179:
[  524.860892][   T29]  #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.871837][   T29]  #1: ffffc9000c0a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.882441][   T29]  #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  524.892028][   T29]  #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa80
[  524.902360][   T29] 3 locks held by kworker/u4:11/9183:
[  524.908140][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.920936][   T29]  #1: ffffc9000c107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  524.932151][   T29]  #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  524.941209][   T29] 1 lock held by syz-executor/12525:
[  524.946500][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  524.956084][   T29] 1 lock held by syz-executor/12579:
[  524.961451][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  524.971091][   T29] 1 lock held by syz-executor/12590:
[  524.976391][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  524.998003][   T29] 
[  525.002461][   T29] =============================================
[  525.002461][   T29] 
[  525.013216][   T29] NMI backtrace for cpu 0
[  525.017590][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  525.024823][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  525.034888][   T29] Call Trace:
[  525.038176][   T29]  <TASK>
[  525.041123][   T29]  dump_stack_lvl+0x18c/0x250
[  525.045818][   T29]  ? show_regs_print_info+0x20/0x20
[  525.051012][   T29]  ? load_image+0x420/0x420
[  525.055525][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  525.060505][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  525.066666][   T29]  ? _printk+0xde/0x130
[  525.070827][   T29]  ? load_image+0x420/0x420
[  525.075328][   T29]  ? load_image+0x420/0x420
[  525.079835][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  525.085916][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  525.091903][   T29]  watchdog+0xf3d/0xf80
[  525.096059][   T29]  ? watchdog+0x1e1/0xf80
[  525.100398][   T29]  kthread+0x2fa/0x390
[  525.104473][   T29]  ? hungtask_pm_notify+0x90/0x90
[  525.109510][   T29]  ? kthread_blkcg+0xd0/0xd0
[  525.114113][   T29]  ret_from_fork+0x48/0x80
[  525.118536][   T29]  ? kthread_blkcg+0xd0/0xd0
[  525.123111][   T29]  ret_from_fork_asm+0x11/0x20
[  525.127886][   T29]  </TASK>
[  525.131461][   T29] Sending NMI from CPU 0 to CPUs 1:
[  525.136721][    C1] NMI backtrace for cpu 1
[  525.136730][    C1] CPU: 1 PID: 9179 Comm: kworker/u4:9 Not tainted syzkaller #0
[  525.136745][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  525.136754][    C1] Workqueue: netns cleanup_net
[  525.136773][    C1] RIP: 0010:debug_object_free+0x27a/0x480
[  525.136796][    C1] Code: c6 ad fd 4c 89 6d 00 4d 85 ed 74 1e 49 83 c5 08 4c 89 e8 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 ef e8 ea c5 ad fd 49 89 6d 00 <43> 80 3c 3e 00 74 08 4c 89 e7 e8 d7 c5 ad fd 49 be 00 01 00 00 00
[  525.136808][    C1] RSP: 0018:ffffc9000c0a72c8 EFLAGS: 00000046
[  525.136819][    C1] RAX: 1ffff1100613f5ac RBX: 1ffff11005ff7e39 RCX: 0000000000000001
[  525.136829][    C1] RDX: ffffffff9749f5d8 RSI: 0000000000000004 RDI: ffff88802ffbf1d0
[  525.136839][    C1] RBP: ffffffff9749f5c8 R08: 0000000000000003 R09: 0000000000000004
[  525.136848][    C1] R10: dffffc0000000000 R11: fffff52001814e34 R12: ffff88802ffbf1c0
[  525.136857][    C1] R13: ffff8880309fad60 R14: 1ffff11005ff7e38 R15: dffffc0000000000
[  525.136868][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  525.136879][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  525.136889][    C1] CR2: 00007ffd9f8ed590 CR3: 000000000cf32000 CR4: 00000000003506e0
[  525.136902][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  525.136910][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  525.136919][    C1] Call Trace:
[  525.136924][    C1]  <TASK>
[  525.136933][    C1]  schedule_hrtimeout_range_clock+0x2b9/0x3d0
[  525.136956][    C1]  ? hrtimer_nanosleep_restart+0x1d0/0x1d0
[  525.136976][    C1]  ? __remove_hrtimer+0x470/0x470
[  525.136995][    C1]  ? read_tsc+0x9/0x20
[  525.137008][    C1]  ? ktime_get+0x24b/0x280
[  525.137024][    C1]  ? usleep_range_state+0xc5/0x1b0
[  525.137041][    C1]  usleep_range_state+0x127/0x1b0
[  525.137059][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  525.137079][    C1]  ? schedule_timeout_idle+0x90/0x90
[  525.137102][    C1]  napi_disable+0x104/0x1f0
[  525.137117][    C1]  ? napi_watchdog+0x130/0x130
[  525.137129][    C1]  ? queue_delayed_work_on+0x1a1/0x200
[  525.137147][    C1]  ? delayed_work_timer_fn+0x80/0x80
[  525.137160][    C1]  veth_napi_del_range+0xb7/0x210
[  525.137177][    C1]  ? veth_open+0x230/0x230
[  525.137190][    C1]  veth_close+0x17a/0x1a0
[  525.137204][    C1]  __dev_close_many+0x1d5/0x2b0
[  525.137221][    C1]  ? ret_from_fork+0x48/0x80
[  525.137235][    C1]  ? ret_from_fork_asm+0x11/0x20
[  525.137253][    C1]  ? dev_close_many+0x410/0x410
[  525.137275][    C1]  dev_close_many+0x223/0x410
[  525.137294][    C1]  ? __dev_open+0x430/0x430
[  525.137309][    C1]  ? mark_lock+0x94/0x320
[  525.137329][    C1]  unregister_netdevice_many_notify+0x4c4/0x1900
[  525.137349][    C1]  ? call_rcu+0x68c/0x950
[  525.137370][    C1]  ? unregister_netdevice_many+0x20/0x20
[  525.137388][    C1]  ? unregister_netdevice_queue+0x1ae/0x370
[  525.137405][    C1]  ? list_netdevice+0x730/0x730
[  525.137425][    C1]  default_device_exit_batch+0x9ee/0xa80
[  525.137447][    C1]  ? __might_sleep+0xe0/0xe0
[  525.137464][    C1]  ? netdev_exit+0xc0/0xc0
[  525.137480][    C1]  ? rdma_dev_init_net+0x280/0x280
[  525.137598][    C1]  ? netdev_exit+0xc0/0xc0
[  525.137614][    C1]  cleanup_net+0x795/0xbb0
[  525.137630][    C1]  ? ops_free_list+0x3b0/0x3b0
[  525.137647][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  525.137664][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  525.137682][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  525.137698][    C1]  process_scheduled_works+0xa5d/0x15d0
[  525.137728][    C1]  ? worker_attach_to_pool+0x380/0x380
[  525.137747][    C1]  ? assign_work+0x3d2/0x5d0
[  525.137765][    C1]  worker_thread+0xa55/0xfc0
[  525.137793][    C1]  kthread+0x2fa/0x390
[  525.137806][    C1]  ? pr_cont_work+0x560/0x560
[  525.137822][    C1]  ? kthread_blkcg+0xd0/0xd0
[  525.137835][    C1]  ret_from_fork+0x48/0x80
[  525.137850][    C1]  ? kthread_blkcg+0xd0/0xd0
[  525.137863][    C1]  ret_from_fork_asm+0x11/0x20
[  525.137886][    C1]  </TASK>
[  525.139393][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  525.139403][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  525.139420][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  525.139430][   T29] Call Trace:
[  525.139443][   T29]  <TASK>
[  525.139450][   T29]  dump_stack_lvl+0x18c/0x250
[  525.139474][   T29]  ? show_regs_print_info+0x20/0x20
[  525.139493][   T29]  ? load_image+0x420/0x420
[  525.139518][   T29]  panic+0x2dc/0x730
[  525.139540][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  525.139562][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  525.139581][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  525.139603][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  525.139629][   T29]  watchdog+0xf7c/0xf80
[  525.139650][   T29]  ? watchdog+0x1e1/0xf80
[  525.139674][   T29]  kthread+0x2fa/0x390
[  525.139688][   T29]  ? hungtask_pm_notify+0x90/0x90
[  525.139708][   T29]  ? kthread_blkcg+0xd0/0xd0
[  525.139724][   T29]  ret_from_fork+0x48/0x80
[  525.139741][   T29]  ? kthread_blkcg+0xd0/0xd0
[  525.139756][   T29]  ret_from_fork_asm+0x11/0x20
[  525.139786][   T29]  </TASK>
[  525.142507][   T29] Kernel Offset: disabled
[  525.634373][   T29] Rebooting in 86400 seconds..