last executing test programs:

6.945060357s ago: executing program 1 (id=2206):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='syzkaller\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='syzkaller\x00') (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

5.79819352s ago: executing program 1 (id=2213):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0, 0x400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9)
socketpair(0xf, 0x3, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110c230006)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0xfe7f, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000009d0a000000000000030142"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x19}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x5)
write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e)

5.454188334s ago: executing program 2 (id=2217):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r2 = syz_clone(0x20000000, &(0x7f00000006c0)="25a5486f8bceadb58495e8d1f00355e9962b52bfb22acefb9374becd4bc4649962e73581cee3af3198e2d1be8e5781cd67b98c48dc5ead75bf14de677aed8e784194f2098823a4fb3b77ba2dc2fe0474a6d6f285afa813a7c72b42740381d9960a7179832ac885f000f1934db45d652f8e8b0c45c65d4a59e2e8a97db0cd1a802b841a9970a5509f", 0x88, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="8d4bb3bcaac6912965064b794678f13cba24be4b2ef92ea0cb17c38ed4c96c86f3e3c4fa7c3ed1ffdaa9858d6cdad1393c768cdfb59d042b86cbc9b24bbcf1708354766019c343a58c80f6bd8f30d2b642be3ea3ebd67dc6b72312bd")
syz_open_procfs$namespace(r2, &(0x7f0000000940)='ns/pid_for_children\x00')
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, &(0x7f00000005c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110cb00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0)

3.846355672s ago: executing program 1 (id=2221):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/204, 0xcc}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/252, 0xfc}], 0x7, &(0x7f00000009c0)=""/196, 0xc4}, 0x2100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x8021)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x3, 0x1}, 0x50)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14}}]}, 0x262)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032f00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a118001500060014", 0x23}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071184b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000100), 0x29, 0x0, 0x0, 0xa, 0x10000}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

3.777851978s ago: executing program 2 (id=2222):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018010000202069250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xec, 0x7, 0x0, 0x7, 0x0, 0x200000, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x5, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
recvmsg(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB='>'], 0x9a)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)

3.751774461s ago: executing program 4 (id=2224):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf5ffffff}, 0x48)

3.520947934s ago: executing program 3 (id=2226):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x300}, 0x2c)

3.504065886s ago: executing program 1 (id=2227):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a0000000e0096a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

3.358538549s ago: executing program 0 (id=2228):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

2.782454606s ago: executing program 4 (id=2229):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/29, 0x1d}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/252, 0xfc}], 0x8, &(0x7f00000009c0)=""/196, 0xc4}, 0x2100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x8021)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x3, 0x1}, 0x50)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14}}]}, 0x262)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a118001500060014", 0x23}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071184b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000100), 0x29, 0x0, 0x0, 0xa, 0x10000, @value=r7}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d35010000000000950041600000000069168c0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2.700176934s ago: executing program 2 (id=2230):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xec, 0x7, 0x0, 0x7, 0x0, 0x200000, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x5, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYBLOB='>'], 0x9a)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)

2.654426549s ago: executing program 3 (id=2231):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$kcm(0x10, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x0, 0x26}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe03, 0x0, 0x0, &(0x7f0000000800), 0xf0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0)

2.520458552s ago: executing program 0 (id=2232):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000005d31, 0x40204, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x9, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904141d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xc8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

2.477125756s ago: executing program 1 (id=2233):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r2 = syz_clone(0x20000000, &(0x7f00000006c0)="25a5486f8bceadb58495e8d1f00355e9962b52bfb22acefb9374becd4bc4649962e73581cee3af3198e2d1be8e5781cd67b98c48dc5ead75bf14de677aed8e784194f2098823a4fb3b77ba2dc2fe0474a6d6f285afa813a7c72b42740381d9960a7179832ac885f000f1934db45d652f8e8b0c45c65d4a59e2e8a97db0cd1a802b841a9970a5509f", 0x88, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="8d4bb3bcaac6912965064b794678f13cba24be4b2ef92ea0cb17c38ed4c96c86f3e3c4fa7c3ed1ffdaa9858d6cdad1393c768cdfb59d042b86cbc9b24bbcf1708354766019c343a58c80f6bd8f30d2b642be3ea3ebd67dc6b72312bd")
syz_open_procfs$namespace(r2, &(0x7f0000000940)='ns/pid_for_children\x00')
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, &(0x7f00000005c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110cb00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0)

2.423982982s ago: executing program 4 (id=2234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e0000001303ed6a33f2ff8689b3f20e"]) (async)
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e0000001303ed6a33f2ff8689b3f20e"])
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000f34b99f32696756c431eba088004000000080000000100000080000000a452dd4fe930006281dab1a71ab30c976edbafbbfd9bfc9989ef5706", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030049df26ae75724f5000f04f4092d0e76500010010f7", @ANYRES32=r1, @ANYBLOB='st\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030049df26ae75724f5000f04f4092d0e76500010010f7", @ANYRES32=r1, @ANYBLOB='st\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000)
recvmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010000) (async)
recvmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0xfe33)
sendmsg$inet(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)}], 0x1, &(0x7f0000000580)}, 0x4080)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) (async)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x121940, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)

2.362584278s ago: executing program 3 (id=2235):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000001400000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) (fail_nth: 18)

2.259563757s ago: executing program 0 (id=2236):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'hugetlb'}]}, 0x1d)
socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1d, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x48)

2.240080169s ago: executing program 2 (id=2237):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040), 0x8)
syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

1.781823285s ago: executing program 4 (id=2238):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffcf, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x6a, 0xa, 0xff00, 0x80ffff}}, &(0x7f0000000140)='GPL\x00', 0x20000002, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

1.658122167s ago: executing program 3 (id=2239):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040), 0x8)
syz_clone(0x240500, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f0000000480)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r3}, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

1.646704648s ago: executing program 4 (id=2240):
r0 = getpid()
r1 = perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x2, 0x0, 0x7, 0x9, 0x0, 0x4b40, 0x20000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000080), 0xe}, 0x110000, 0xfffffffffffffffb, 0x7f, 0x9, 0xde85, 0x10, 0x2, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x67, 0x4, 0xd, 0x81, 0x0, 0x54f2, 0x18a, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x1000, 0x9, 0xbaf, 0x1, 0x4, 0x0, 0x7b, 0x0, 0x7}, r0, 0x8, r1, 0x1b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x8}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, <r5=>0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffff, 0x10}, 0xc)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x405c, 0x0, 0x1, 0xd5c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1d, 0x1, 0xc, 0x4, 0x28410, 0x1, 0x2c5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8)
write$cgroup_type(r12, &(0x7f0000000940), 0x9)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xd1d7c14fc7ca9fd7, 0x1c, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x96}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x7a, &(0x7f0000000500)=""/122, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x8, 0x4, 0xde8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r4, r5, r7, r9, 0xffffffffffffffff, r10, r11, r13], 0x0, 0x10, 0xc78a}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001606fdff0fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48)

1.534494899s ago: executing program 0 (id=2241):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018010000202069250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xec, 0x7, 0x0, 0x7, 0x0, 0x200000, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x5, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
recvmsg(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB='>'], 0x9a)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)

1.060687466s ago: executing program 0 (id=2242):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x9, 0x9, "4841c588ae421299ca205d3c825b704e61b3372ef5022fa81b71cf6d0a23bd1e6ce7bc2d4d280f0e1f412749fe72347435adaa6c250b821d79d5e88ac29f26"}, 0x80, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @local})
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8000007fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x108016, 0xac5d}, 0x0, 0xfbfdffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xc2be, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r3=>r1})
recvmsg$unix(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x1)

962.122855ms ago: executing program 2 (id=2243):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040), 0x8)
syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) (fail_nth: 2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

847.787626ms ago: executing program 1 (id=2244):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/29, 0x1d}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/252, 0xfc}], 0x8, &(0x7f00000009c0)=""/196, 0xc4}, 0x2100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x8021)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x3, 0x1}, 0x50)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14}}]}, 0x262)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a118001500060014", 0x23}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071184b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000100), 0x29, 0x0, 0x0, 0xa, 0x10000, @value=r7}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

549.968205ms ago: executing program 3 (id=2245):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000440)=""/151, 0x27, 0x97, 0x1}, 0x28)

187.084432ms ago: executing program 4 (id=2246):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000005d31, 0x40204, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x9, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904141d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xc8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

185.330952ms ago: executing program 3 (id=2247):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0xa7e, r9}, 0x38)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r11, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], <r12=>0x0, 0xe, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xae, 0x8, 0x8, &(0x7f0000001280)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=r12, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x1c, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe00000}}, @alu={0xb, 0x1, 0x3, 0x4, 0x6, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000800)='GPL\x00', 0x7, 0x71, &(0x7f0000000840)=""/113, 0x41100, 0x10, '\x00', 0x0, @fallback=0x28, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0xb, 0x9, 0x1}, 0x10, r12, r8, 0x8, &(0x7f0000000a00)=[r9, r5, r5, r6, r9, r9, r5], &(0x7f0000000a40)=[{0x1, 0x2, 0xf, 0x7}, {0x2, 0x3, 0xf, 0x6}, {0x5, 0xd, 0xe, 0x7}, {0x5, 0x4, 0x6, 0x4}, {0x0, 0x5, 0xd}, {0x2, 0x4, 0xf, 0x3}, {0x1, 0x4, 0x5}, {0x3, 0x3, 0x4, 0xa}]}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

153.080825ms ago: executing program 2 (id=2248):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xec, 0x7, 0x0, 0x7, 0x0, 0x200000, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x5, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB='>'], 0x9a)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 0 (id=2249):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2, <r0=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4d)
r1 = socket$kcm(0x1e, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000080000000000000007040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="c2", 0x1}], 0x1}, 0x44800)

kernel console output (not intermixed with test programs):

tl+0x5/0x10
[  286.475315][ T7747]  ? security_file_ioctl+0x7c/0xa0
[  286.480457][ T7747]  ? sock_poll+0x420/0x420
[  286.484898][ T7747]  __se_sys_ioctl+0xfa/0x170
[  286.489525][ T7747]  do_syscall_64+0x4c/0xa0
[  286.493969][ T7747]  ? clear_bhb_loop+0x60/0xb0
[  286.498676][ T7747]  ? clear_bhb_loop+0x60/0xb0
[  286.503423][ T7747]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  286.509360][ T7747] RIP: 0033:0x7fcffb59e159
[  286.513824][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.533458][ T7747] RSP: 002b:00007fcff97f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  286.541896][ T7747] RAX: ffffffffffffffda RBX: 00007fcffb825fa0 RCX: 00007fcffb59e159
[  286.549893][ T7747] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004
[  286.557894][ T7747] RBP: 00007fcff97f6090 R08: 0000000000000000 R09: 0000000000000000
[  286.565889][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.573888][ T7747] R13: 00007fcffb826038 R14: 00007fcffb825fa0 R15: 00007ffce614e8a8
[  286.581931][ T7747]  </TASK>
[  286.600417][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'.
[  288.973906][ T7802] netlink: 'syz.3.1020': attribute type 10 has an invalid length.
[  289.059940][ T7802] team0: Device veth1_vlan failed to register rx_handler
[  289.280593][ T7807] netlink: 'syz.0.1022': attribute type 21 has an invalid length.
[  289.291307][ T7807] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1022'.
[  289.407244][ T7812] syz_tun: tun_net_xmit 86
[  289.444101][ T7812] netlink: 'syz.3.1023': attribute type 2 has an invalid length.
[  289.469496][ T7812] netlink: 'syz.3.1023': attribute type 8 has an invalid length.
[  289.480056][ T7812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1023'.
[  289.516873][ T7821] netlink: 'syz.3.1023': attribute type 2 has an invalid length.
[  289.537500][ T7821] netlink: 'syz.3.1023': attribute type 8 has an invalid length.
[  289.552268][ T7821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1023'.
[  290.448923][    C1] syz_tun: tun_net_xmit 86
[  291.487553][    C1] syz_tun: tun_net_xmit 86
[  291.589716][ T7851] netlink: 'syz.2.1034': attribute type 27 has an invalid length.
[  291.808515][ T7851] bond0: (slave bond_slave_0): Releasing backup interface
[  291.974738][ T7849] netlink: 'syz.3.1035': attribute type 21 has an invalid length.
[  292.000327][ T7849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1035'.
[  292.222015][ T7864] netlink: 'syz.4.1039': attribute type 21 has an invalid length.
[  292.242614][ T7864] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1039'.
[  292.654330][ T7880] delete_channel: no stack
[  293.327520][ T7894] FAULT_INJECTION: forcing a failure.
[  293.327520][ T7894] name failslab, interval 1, probability 0, space 0, times 0
[  293.355849][ T7894] CPU: 0 PID: 7894 Comm: syz.1.1049 Not tainted syzkaller #0
[  293.363300][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  293.373428][ T7894] Call Trace:
[  293.376743][ T7894]  <TASK>
[  293.379717][ T7894]  dump_stack_lvl+0x188/0x24e
[  293.384446][ T7894]  ? show_regs_print_info+0x12/0x12
[  293.389692][ T7894]  ? load_image+0x410/0x410
[  293.394255][ T7894]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  293.400303][ T7894]  ? lock_chain_count+0x20/0x20
[  293.405241][ T7894]  should_fail_ex+0x390/0x4c0
[  293.410009][ T7894]  should_failslab+0x5/0x20
[  293.414563][ T7894]  slab_pre_alloc_hook+0x59/0x300
[  293.419635][ T7894]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  293.425841][ T7894]  kmem_cache_alloc+0x56/0x2f0
[  293.430684][ T7894]  ? skb_clone+0x1e7/0x370
[  293.435157][ T7894]  skb_clone+0x1e7/0x370
[  293.439451][ T7894]  __netlink_deliver_tap+0x3e4/0x7e0
[  293.444795][ T7894]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.450096][ T7894]  netlink_deliver_tap+0x19c/0x1b0
[  293.455261][ T7894]  __netlink_sendskb+0x4b/0x90
[  293.460082][ T7894]  netlink_dump+0x92e/0xcd0
[  293.464646][ T7894]  ? netlink_lookup+0x200/0x200
[  293.469556][ T7894]  ? __inet_diag_dump_start+0x5cf/0x970
[  293.475291][ T7894]  ? __inet_diag_dump_start+0x805/0x970
[  293.480912][ T7894]  __netlink_dump_start+0x52c/0x6f0
[  293.486169][ T7894]  inet_diag_rcv_msg_compat+0x207/0x420
[  293.491783][ T7894]  ? __inet_diag_dump+0x380/0x380
[  293.496881][ T7894]  ? sock_diag_rcv_msg+0x137/0x5e0
[  293.502179][ T7894]  ? inet_diag_rcv_msg_compat+0x420/0x420
[  293.507955][ T7894]  ? inet_diag_dump_start_compat+0x20/0x20
[  293.513814][ T7894]  ? inet_diag_dump+0x50/0x50
[  293.518551][ T7894]  ? trace_raw_output_contention_end+0xd0/0xd0
[  293.524783][ T7894]  ? __inet_diag_dump+0x380/0x380
[  293.529874][ T7894]  sock_diag_rcv_msg+0x3c7/0x5e0
[  293.534886][ T7894]  netlink_rcv_skb+0x1ef/0x440
[  293.539704][ T7894]  ? sock_diag_bind+0xa0/0xa0
[  293.544432][ T7894]  ? netlink_ack+0x1160/0x1160
[  293.549252][ T7894]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.554601][ T7894]  sock_diag_rcv+0x26/0x40
[  293.559077][ T7894]  netlink_unicast+0x7ad/0x920
[  293.563909][ T7894]  netlink_sendmsg+0x8ad/0xbd0
[  293.568728][ T7894]  ? netlink_getsockopt+0x550/0x550
[  293.573993][ T7894]  ? apparmor_socket_sendmsg+0x8a/0x330
[  293.579633][ T7894]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  293.584978][ T7894]  ? security_socket_sendmsg+0x7c/0xa0
[  293.590495][ T7894]  ? netlink_getsockopt+0x550/0x550
[  293.595750][ T7894]  ____sys_sendmsg+0x5ed/0x9a0
[  293.600571][ T7894]  ? __sys_sendmsg_sock+0x30/0x30
[  293.605641][ T7894]  ? __import_iovec+0x306/0x510
[  293.610560][ T7894]  ? import_iovec+0x6f/0xa0
[  293.615115][ T7894]  ___sys_sendmsg+0x2a2/0x360
[  293.619945][ T7894]  ? __sys_sendmsg+0x2a0/0x2a0
[  293.624833][ T7894]  __se_sys_sendmsg+0x1c3/0x2b0
[  293.629773][ T7894]  ? __x64_sys_sendmsg+0x80/0x80
[  293.634808][ T7894]  ? lockdep_hardirqs_on+0x94/0x140
[  293.640090][ T7894]  do_syscall_64+0x4c/0xa0
[  293.644595][ T7894]  ? clear_bhb_loop+0x60/0xb0
[  293.649332][ T7894]  ? clear_bhb_loop+0x60/0xb0
[  293.654075][ T7894]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.660041][ T7894] RIP: 0033:0x7f59ad59e159
[  293.664533][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.684199][ T7894] RSP: 002b:00007f59ae521028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.692709][ T7894] RAX: ffffffffffffffda RBX: 00007f59ad826090 RCX: 00007f59ad59e159
[  293.700737][ T7894] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000008
[  293.708760][ T7894] RBP: 00007f59ae521090 R08: 0000000000000000 R09: 0000000000000000
[  293.716791][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  293.724837][ T7894] R13: 00007f59ad826128 R14: 00007f59ad826090 R15: 00007ffd340fa508
[  293.732917][ T7894]  </TASK>
[  293.788687][ T7899] netlink: 'syz.3.1051': attribute type 21 has an invalid length.
[  293.807919][ T7899] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1051'.
[  294.096682][ T7910] netlink: 'syz.3.1055': attribute type 8 has an invalid length.
[  294.158839][ T7910] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1055'.
[  294.275532][ T7913] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1055'.
[  294.553139][ T7908] netlink: 'syz.2.1054': attribute type 21 has an invalid length.
[  294.567111][ T7908] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1054'.
[  294.748592][ T7923] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1057'.
[  294.783999][ T7923] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1057'.
[  294.849939][ T7923] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  301.531883][ T7983] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1076'.
[  301.541941][ T7983] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1076'.
[  301.692193][ T7983] netlink: 'syz.3.1076': attribute type 10 has an invalid length.
[  301.811536][ T7989] netlink: 'syz.2.1077': attribute type 21 has an invalid length.
[  301.846067][ T7989] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1077'.
[  302.146972][ T7999] netlink: 'syz.2.1081': attribute type 2 has an invalid length.
[  302.172707][ T7999] netlink: 'syz.2.1081': attribute type 1 has an invalid length.
[  302.257207][ T7999] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1081'.
[  302.404970][ T8003] netlink: 'syz.4.1080': attribute type 2 has an invalid length.
[  302.430551][ T8007] netlink: 'syz.3.1082': attribute type 21 has an invalid length.
[  302.446019][ T8003] netlink: 'syz.4.1080': attribute type 1 has an invalid length.
[  302.449587][ T8007] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1082'.
[  302.490485][ T8003] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1080'.
[  302.769975][ T8011] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1084'.
[  302.895464][ T7980] netlink: 'syz.1.1075': attribute type 10 has an invalid length.
[  304.230247][ T8046] netlink: 'syz.0.1091': attribute type 3 has an invalid length.
[  304.248174][ T8047] netlink: 'syz.4.1090': attribute type 10 has an invalid length.
[  304.268806][ T8047] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.278010][ T8046] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1091'.
[  304.303383][ T8047] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.327070][ T8047] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.346877][ T8047] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.455639][ T8044] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1090'.
[  304.476851][ T8044] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.1090'.
[  308.544791][ T8089] __nla_validate_parse: 4 callbacks suppressed
[  308.544922][ T8089] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1103'.
[  308.593840][ T8089] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.1103'.
[  308.615541][ T8092] validate_nla: 6 callbacks suppressed
[  308.615560][ T8092] netlink: 'syz.0.1103': attribute type 10 has an invalid length.
[  308.804441][ T8092] team0: Port device geneve1 added
[  309.039519][ T8098] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1109'.
[  309.144503][ T8098] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  309.252257][ T8099] netlink: 'syz.3.1108': attribute type 21 has an invalid length.
[  309.261383][ T8099] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1108'.
[  309.870159][ T8119] netlink: 'syz.1.1107': attribute type 21 has an invalid length.
[  309.923184][ T8119] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1107'.
[  310.109340][ T8120] netlink: 'syz.1.1107': attribute type 10 has an invalid length.
[  310.159067][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1107'.
[  310.325474][ T8120] bridge0: port 3(veth0_vlan) entered blocking state
[  310.398425][ T8120] bridge0: port 3(veth0_vlan) entered disabled state
[  310.508450][ T8120] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  313.745777][ T8126] netlink: 'syz.0.1115': attribute type 21 has an invalid length.
[  313.766189][ T8126] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1115'.
[  314.321166][ T8147] netlink: 'syz.2.1122': attribute type 2 has an invalid length.
[  314.332382][ T8147] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  314.341487][ T8147] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1122'.
[  314.624679][ T8145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1121'.
[  315.052892][ T8163] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1128'.
[  315.153782][ T8163] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  317.171577][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.178063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  318.392365][ T8186] netlink: 'syz.4.1135': attribute type 10 has an invalid length.
[  318.600636][ T8186] device veth0_vlan left promiscuous mode
[  318.624318][ T8188] netlink: 'syz.0.1133': attribute type 2 has an invalid length.
[  318.644844][ T8188] netlink: 'syz.0.1133': attribute type 1 has an invalid length.
[  318.682334][ T8188] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1133'.
[  318.695206][ T8186] device veth0_vlan entered promiscuous mode
[  318.752595][ T8186] team0: Device veth0_vlan failed to register rx_handler
[  318.924035][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1136'.
[  320.184845][ T8204] netlink: 'syz.2.1141': attribute type 21 has an invalid length.
[  320.197472][ T8204] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1141'.
[  320.216950][ T8211] netlink: 'syz.4.1142': attribute type 4 has an invalid length.
[  320.597011][ T8218] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1146'.
[  320.719511][ T8218] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  321.050827][ T8225] netlink: 'syz.0.1147': attribute type 2 has an invalid length.
[  321.068889][ T8225] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  321.097655][ T8225] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1147'.
[  321.483006][ T8237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1151'.
[  321.832552][ T8251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1163'.
[  321.872015][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1152'.
[  322.468800][ T8278] FAULT_INJECTION: forcing a failure.
[  322.468800][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.485424][ T8278] CPU: 1 PID: 8278 Comm: syz.0.1159 Not tainted syzkaller #0
[  322.492855][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  322.502983][ T8278] Call Trace:
[  322.506298][ T8278]  <TASK>
[  322.509270][ T8278]  dump_stack_lvl+0x188/0x24e
[  322.514022][ T8278]  ? show_regs_print_info+0x12/0x12
[  322.519274][ T8278]  ? load_image+0x410/0x410
[  322.523839][ T8278]  ? __lock_acquire+0x7c40/0x7c40
[  322.528923][ T8278]  should_fail_ex+0x390/0x4c0
[  322.533681][ T8278]  _copy_from_user+0x2c/0x170
[  322.538416][ T8278]  __copy_msghdr+0x384/0x560
[  322.543074][ T8278]  ___sys_sendmsg+0x210/0x360
[  322.547820][ T8278]  ? __sys_sendmsg+0x2a0/0x2a0
[  322.552751][ T8278]  ? __lock_acquire+0x7c40/0x7c40
[  322.557859][ T8278]  __se_sys_sendmsg+0x1c3/0x2b0
[  322.562764][ T8278]  ? __x64_sys_sendmsg+0x80/0x80
[  322.567776][ T8278]  ? lockdep_hardirqs_on+0x94/0x140
[  322.573073][ T8278]  do_syscall_64+0x4c/0xa0
[  322.577540][ T8278]  ? clear_bhb_loop+0x60/0xb0
[  322.582352][ T8278]  ? clear_bhb_loop+0x60/0xb0
[  322.587127][ T8278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.593079][ T8278] RIP: 0033:0x7f876819e159
[  322.597540][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.617207][ T8278] RSP: 002b:00007f8769143028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.625730][ T8278] RAX: ffffffffffffffda RBX: 00007f8768425fa0 RCX: 00007f876819e159
[  322.633751][ T8278] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  322.641850][ T8278] RBP: 00007f8769143090 R08: 0000000000000000 R09: 0000000000000000
[  322.649864][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.657880][ T8278] R13: 00007f8768426038 R14: 00007f8768425fa0 R15: 00007ffe881d2018
[  322.665927][ T8278]  </TASK>
[  322.712663][ T8280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1158'.
[  322.755730][ T8280] netlink: 'syz.3.1158': attribute type 10 has an invalid length.
[  322.776082][ T8280] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.797310][ T8280] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.856357][ T8280] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.873743][ T8280] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.178528][ T8291] netlink: 'syz.1.1162': attribute type 2 has an invalid length.
[  323.219015][ T8291] netlink: 'syz.1.1162': attribute type 1 has an invalid length.
[  323.305417][ T8291] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1162'.
[  323.880260][ T8300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1168'.
[  324.159133][ T8303] netlink: 'syz.3.1169': attribute type 2 has an invalid length.
[  324.227452][ T8303] netlink: 'syz.3.1169': attribute type 1 has an invalid length.
[  324.240250][ T8303] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1169'.
[  324.481485][ T8312] netlink: 'syz.4.1172': attribute type 9 has an invalid length.
[  325.141074][ T8320] netlink: 'syz.3.1173': attribute type 11 has an invalid length.
[  325.164159][ T8320] netlink: 184220 bytes leftover after parsing attributes in process `syz.3.1173'.
[  325.344821][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.416560][ T8327] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1175'.
[  326.671595][ T8328] validate_nla: 3 callbacks suppressed
[  326.671635][ T8328] netlink: 'syz.3.1177': attribute type 2 has an invalid length.
[  326.706858][ T8328] netlink: 'syz.3.1177': attribute type 1 has an invalid length.
[  326.726388][ T8328] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1177'.
[  327.127598][ T8338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1180'.
[  328.072614][ T8349] netlink: 'syz.4.1184': attribute type 2 has an invalid length.
[  328.089456][ T8349] netlink: 'syz.4.1184': attribute type 1 has an invalid length.
[  328.128129][ T8349] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1184'.
[  328.243204][ T4290] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  328.344758][ T8358] netlink: 'syz.3.1189': attribute type 2 has an invalid length.
[  328.427545][ T8358] netlink: 'syz.3.1189': attribute type 1 has an invalid length.
[  328.447478][ T8358] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1189'.
[  328.785658][ T8372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1194'.
[  329.831864][ T4290] Bluetooth: hci1: ISO packet for unknown connection handle 2878
[  330.488712][ T8401] netlink: 'syz.1.1203': attribute type 21 has an invalid length.
[  330.509392][ T8401] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1203'.
[  331.171011][ T8404] netlink: 'syz.3.1204': attribute type 2 has an invalid length.
[  331.184147][ T8404] netlink: 'syz.3.1204': attribute type 1 has an invalid length.
[  331.194917][ T8404] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1204'.
[  333.172723][ T8412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1208'.
[  333.313597][ T8416] netlink: 'syz.0.1209': attribute type 2 has an invalid length.
[  333.368268][ T8416] netlink: 'syz.0.1209': attribute type 1 has an invalid length.
[  333.393461][ T8416] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1209'.
[  333.948600][ T8430] netlink: 'syz.4.1217': attribute type 21 has an invalid length.
[  334.062104][ T8430] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1217'.
[  334.843394][ T8436] netlink: 'syz.2.1218': attribute type 2 has an invalid length.
[  334.867428][ T8436] netlink: 'syz.2.1218': attribute type 1 has an invalid length.
[  334.924310][ T8436] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1218'.
[  335.486092][ T8451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1223'.
[  335.538102][ T8449] netlink: 13183 bytes leftover after parsing attributes in process `syz.2.1222'.
[  335.878829][ T8465] FAULT_INJECTION: forcing a failure.
[  335.878829][ T8465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  335.918163][ T8465] CPU: 0 PID: 8465 Comm: syz.2.1226 Not tainted syzkaller #0
[  335.925630][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  335.935743][ T8465] Call Trace:
[  335.939061][ T8465]  <TASK>
[  335.942033][ T8465]  dump_stack_lvl+0x188/0x24e
[  335.946766][ T8465]  ? show_regs_print_info+0x12/0x12
[  335.952019][ T8465]  ? load_image+0x410/0x410
[  335.956573][ T8465]  ? __lock_acquire+0x7c40/0x7c40
[  335.961670][ T8465]  ? snprintf+0xe5/0x140
[  335.965985][ T8465]  should_fail_ex+0x390/0x4c0
[  335.970792][ T8465]  _copy_to_user+0x2c/0x130
[  335.975393][ T8465]  simple_read_from_buffer+0xe3/0x150
[  335.980878][ T8465]  proc_fail_nth_read+0x1a6/0x220
[  335.985965][ T8465]  ? proc_fault_inject_write+0x310/0x310
[  335.991632][ T8465]  ? fsnotify_perm+0x248/0x550
[  335.996430][ T8465]  ? proc_fault_inject_write+0x310/0x310
[  336.002094][ T8465]  vfs_read+0x2db/0x960
[  336.006376][ T8465]  ? kernel_read+0x1e0/0x1e0
[  336.011010][ T8465]  ? __fget_files+0x28/0x460
[  336.015657][ T8465]  ? __fget_files+0x3fc/0x460
[  336.020374][ T8465]  ? __fdget_pos+0x2ae/0x360
[  336.025016][ T8465]  ? ksys_read+0x70/0x260
[  336.029468][ T8465]  ksys_read+0x14d/0x260
[  336.033750][ T8465]  ? vfs_write+0x9a0/0x9a0
[  336.038203][ T8465]  ? lockdep_hardirqs_on+0x94/0x140
[  336.043437][ T8465]  do_syscall_64+0x4c/0xa0
[  336.047879][ T8465]  ? clear_bhb_loop+0x60/0xb0
[  336.052591][ T8465]  ? clear_bhb_loop+0x60/0xb0
[  336.057299][ T8465]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  336.063231][ T8465] RIP: 0033:0x7fcffb55e98e
[  336.067677][ T8465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  336.087583][ T8465] RSP: 002b:00007fcff97f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  336.096033][ T8465] RAX: ffffffffffffffda RBX: 00007fcff97f66c0 RCX: 00007fcffb55e98e
[  336.104123][ T8465] RDX: 000000000000000f RSI: 00007fcff97f60a0 RDI: 0000000000000007
[  336.112121][ T8465] RBP: 00007fcff97f6090 R08: 0000000000000000 R09: 0000000000000000
[  336.120124][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.128134][ T8465] R13: 00007fcffb826038 R14: 00007fcffb825fa0 R15: 00007ffce614e8a8
[  336.136239][ T8465]  </TASK>
[  336.316449][ T8471] netlink: 'syz.1.1227': attribute type 2 has an invalid length.
[  336.325135][ T8471] netlink: 'syz.1.1227': attribute type 1 has an invalid length.
[  336.334815][ T8471] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1227'.
[  336.445499][ T8476] netlink: 'syz.0.1229': attribute type 21 has an invalid length.
[  336.479886][ T8476] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1229'.
[  337.277478][ T8483] netlink: 'syz.3.1232': attribute type 2 has an invalid length.
[  337.285604][ T8483] netlink: 'syz.3.1232': attribute type 1 has an invalid length.
[  337.294026][ T8483] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1232'.
[  338.408473][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  338.424197][ T8504] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1237'.
[  338.483169][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1235'.
[  339.219969][ T8518] netlink: 'syz.4.1242': attribute type 21 has an invalid length.
[  339.268364][ T8518] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1242'.
[  342.206893][ T8523] FAULT_INJECTION: forcing a failure.
[  342.206893][ T8523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.223119][ T8523] CPU: 1 PID: 8523 Comm: syz.4.1244 Not tainted syzkaller #0
[  342.230569][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  342.240754][ T8523] Call Trace:
[  342.244070][ T8523]  <TASK>
[  342.247060][ T8523]  dump_stack_lvl+0x188/0x24e
[  342.251791][ T8523]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  342.258015][ T8523]  ? show_regs_print_info+0x12/0x12
[  342.263266][ T8523]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  342.269572][ T8523]  should_fail_ex+0x390/0x4c0
[  342.274326][ T8523]  _copy_to_user+0x2c/0x130
[  342.278888][ T8523]  simple_read_from_buffer+0xe3/0x150
[  342.284323][ T8523]  proc_fail_nth_read+0x1a6/0x220
[  342.289398][ T8523]  ? proc_fault_inject_write+0x310/0x310
[  342.295142][ T8523]  ? fsnotify_perm+0x248/0x550
[  342.299955][ T8523]  ? proc_fault_inject_write+0x310/0x310
[  342.305633][ T8523]  vfs_read+0x2db/0x960
[  342.309848][ T8523]  ? kernel_read+0x1e0/0x1e0
[  342.314483][ T8523]  ? __fget_files+0x28/0x460
[  342.319146][ T8523]  ? __fget_files+0x3fc/0x460
[  342.324036][ T8523]  ? __fdget_pos+0x2ae/0x360
[  342.328917][ T8523]  ? ksys_read+0x70/0x260
[  342.333288][ T8523]  ksys_read+0x14d/0x260
[  342.337571][ T8523]  ? vfs_write+0x9a0/0x9a0
[  342.342050][ T8523]  ? lockdep_hardirqs_on+0x94/0x140
[  342.347292][ T8523]  do_syscall_64+0x4c/0xa0
[  342.351731][ T8523]  ? clear_bhb_loop+0x60/0xb0
[  342.356459][ T8523]  ? clear_bhb_loop+0x60/0xb0
[  342.361165][ T8523]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.367100][ T8523] RIP: 0033:0x7f32f355e98e
[  342.371548][ T8523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  342.391195][ T8523] RSP: 002b:00007f32f17f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  342.399644][ T8523] RAX: ffffffffffffffda RBX: 00007f32f17f66c0 RCX: 00007f32f355e98e
[  342.407642][ T8523] RDX: 000000000000000f RSI: 00007f32f17f60a0 RDI: 000000000000000c
[  342.415639][ T8523] RBP: 00007f32f17f6090 R08: 0000000000000000 R09: 0000000000000000
[  342.423654][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.431669][ T8523] R13: 00007f32f3826038 R14: 00007f32f3825fa0 R15: 00007ffeea7559f8
[  342.439684][ T8523]  </TASK>
[  342.496024][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1244'.
[  342.581935][ T8532] FAULT_INJECTION: forcing a failure.
[  342.581935][ T8532] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.613731][ T8532] CPU: 1 PID: 8532 Comm: syz.1.1245 Not tainted syzkaller #0
[  342.621198][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  342.631306][ T8532] Call Trace:
[  342.634634][ T8532]  <TASK>
[  342.637600][ T8532]  dump_stack_lvl+0x188/0x24e
[  342.642329][ T8532]  ? show_regs_print_info+0x12/0x12
[  342.647598][ T8532]  ? load_image+0x410/0x410
[  342.652137][ T8532]  ? __lock_acquire+0x7c40/0x7c40
[  342.657206][ T8532]  should_fail_ex+0x390/0x4c0
[  342.661929][ T8532]  _copy_from_user+0x2c/0x170
[  342.666666][ T8532]  sctp_setsockopt+0x19a/0xf90
[  342.671532][ T8532]  ? sock_common_recvmsg+0x190/0x190
[  342.676866][ T8532]  __sys_setsockopt+0x2bf/0x3d0
[  342.681950][ T8532]  __x64_sys_setsockopt+0xb1/0xc0
[  342.687034][ T8532]  do_syscall_64+0x4c/0xa0
[  342.691495][ T8532]  ? clear_bhb_loop+0x60/0xb0
[  342.696208][ T8532]  ? clear_bhb_loop+0x60/0xb0
[  342.700921][ T8532]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.706852][ T8532] RIP: 0033:0x7f59ad59e159
[  342.711294][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.730937][ T8532] RSP: 002b:00007f59ae500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  342.739398][ T8532] RAX: ffffffffffffffda RBX: 00007f59ad826180 RCX: 00007f59ad59e159
[  342.747445][ T8532] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000004
[  342.755448][ T8532] RBP: 00007f59ae500090 R08: 0000000000000010 R09: 0000000000000000
[  342.763448][ T8532] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.771459][ T8532] R13: 00007f59ad826218 R14: 00007f59ad826180 R15: 00007ffd340fa508
[  342.779483][ T8532]  </TASK>
[  342.801547][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1243'.
[  343.022884][ T8537] netlink: 'syz.0.1248': attribute type 2 has an invalid length.
[  343.038185][ T8537] netlink: 'syz.0.1248': attribute type 1 has an invalid length.
[  343.067275][ T8537] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1248'.
[  343.242270][ T8545] netlink: 'syz.4.1251': attribute type 10 has an invalid length.
[  344.040142][ T8554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1252'.
[  344.465435][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  346.542907][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  346.589590][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  346.786916][ T8586] netlink: 'syz.0.1262': attribute type 2 has an invalid length.
[  346.796418][ T8586] netlink: 'syz.0.1262': attribute type 1 has an invalid length.
[  346.805940][ T8586] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1262'.
[  347.503531][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1269'.
[  349.806927][ T8602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1266'.
[  349.816933][ T8603] netlink: 'syz.1.1267': attribute type 10 has an invalid length.
[  349.829181][ T8603] team0: Device wlan1 is up. Set it down before adding it as a team port
[  349.858339][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  349.889564][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  349.898184][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  350.064057][ T8629] netlink: 'syz.4.1273': attribute type 21 has an invalid length.
[  350.106969][ T8629] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1273'.
[  350.130274][ T8631] netlink: 'syz.1.1274': attribute type 21 has an invalid length.
[  350.152813][ T8631] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1274'.
[  350.339713][ T8636] netlink: 'syz.0.1276': attribute type 2 has an invalid length.
[  350.355870][ T8636] netlink: 'syz.0.1276': attribute type 1 has an invalid length.
[  350.387464][ T8636] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1276'.
[  352.061518][ T8663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1284'.
[  353.306375][ T8671] netlink: 'syz.1.1288': attribute type 21 has an invalid length.
[  353.327311][ T8671] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1288'.
[  353.336534][ T8675] netlink: 'syz.2.1290': attribute type 21 has an invalid length.
[  353.349570][ T8675] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1290'.
[  353.479557][ T8685] netlink: 'syz.0.1291': attribute type 2 has an invalid length.
[  353.494852][ T8685] netlink: 'syz.0.1291': attribute type 1 has an invalid length.
[  353.506422][ T8685] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1291'.
[  353.999080][ T8700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1299'.
[  355.099401][ T8727] netlink: 'syz.0.1305': attribute type 3 has an invalid length.
[  355.109042][ T8727] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1305'.
[  355.963138][ T8714] netlink: 'syz.4.1304': attribute type 21 has an invalid length.
[  355.974875][ T8714] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1304'.
[  356.255636][ T8730] netlink: 'syz.2.1306': attribute type 2 has an invalid length.
[  356.268591][ T8730] netlink: 'syz.2.1306': attribute type 1 has an invalid length.
[  356.277912][ T8730] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1306'.
[  356.653434][ T8747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1313'.
[  356.805252][ T8752] netlink: 'syz.4.1315': attribute type 21 has an invalid length.
[  356.837922][ T8752] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1315'.
[  356.905257][ T8757] netlink: 'syz.2.1317': attribute type 21 has an invalid length.
[  356.921896][ T8757] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1317'.
[  358.413167][ T8799] validate_nla: 3 callbacks suppressed
[  358.413186][ T8799] netlink: 'syz.3.1329': attribute type 10 has an invalid length.
[  358.499060][ T8801] __nla_validate_parse: 5 callbacks suppressed
[  358.499101][ T8801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1330'.
[  358.737642][ T8806] netlink: 'syz.1.1332': attribute type 21 has an invalid length.
[  358.750857][ T8810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1333'.
[  358.759416][ T8806] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1332'.
[  360.413793][ T8831] netlink: 'syz.1.1338': attribute type 2 has an invalid length.
[  360.429834][ T8831] netlink: 'syz.1.1338': attribute type 1 has an invalid length.
[  360.449771][ T8831] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1338'.
[  360.625687][ T8841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.700551][ T8841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.721871][ T8841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.761960][ T8841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.096257][ T8846] netlink: 'syz.3.1345': attribute type 10 has an invalid length.
[  361.110623][ T8847] netlink: 'syz.2.1346': attribute type 20 has an invalid length.
[  361.119762][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1344'.
[  361.258779][ T8855] FAULT_INJECTION: forcing a failure.
[  361.258779][ T8855] name failslab, interval 1, probability 0, space 0, times 0
[  361.299493][ T8855] CPU: 0 PID: 8855 Comm: syz.0.1347 Not tainted syzkaller #0
[  361.306992][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  361.317108][ T8855] Call Trace:
[  361.320432][ T8855]  <TASK>
[  361.323407][ T8855]  dump_stack_lvl+0x188/0x24e
[  361.328183][ T8855]  ? show_regs_print_info+0x12/0x12
[  361.333447][ T8855]  ? load_image+0x410/0x410
[  361.338017][ T8855]  ? __might_sleep+0xd0/0xd0
[  361.342675][ T8855]  ? __lock_acquire+0x7c40/0x7c40
[  361.347767][ T8855]  should_fail_ex+0x390/0x4c0
[  361.352555][ T8855]  should_failslab+0x5/0x20
[  361.357152][ T8855]  slab_pre_alloc_hook+0x59/0x300
[  361.362278][ T8855]  kmem_cache_alloc_node+0x5a/0x310
[  361.367536][ T8855]  ? __alloc_skb+0xf9/0x7d0
[  361.372132][ T8855]  __alloc_skb+0xf9/0x7d0
[  361.376515][ T8855]  alloc_skb_with_frags+0xa7/0x710
[  361.381762][ T8855]  sock_alloc_send_pskb+0x87f/0x9a0
[  361.387006][ T8855]  ? verify_lock_unused+0x140/0x140
[  361.392342][ T8855]  ? sock_kzfree_s+0x50/0x50
[  361.396982][ T8855]  ? ip6_dst_lookup_tail+0x11d9/0x1600
[  361.402518][ T8855]  rawv6_send_hdrinc+0x2eb/0x16a0
[  361.407801][ T8855]  ? ip6_dst_hoplimit+0x92/0x340
[  361.412870][ T8855]  ? rawv6_probe_proto_opt+0x300/0x300
[  361.418364][ T8855]  ? ip6_dst_hoplimit+0x92/0x340
[  361.423333][ T8855]  ? ip6_dst_hoplimit+0x92/0x340
[  361.428315][ T8855]  rawv6_sendmsg+0x11a7/0x1710
[  361.433121][ T8855]  ? compat_rawv6_ioctl+0x60/0x60
[  361.438193][ T8855]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  361.444641][ T8855]  ? aa_sock_msg_perm+0x94/0x150
[  361.449623][ T8855]  ? inet_sendmsg+0x7a/0x2a0
[  361.454284][ T8855]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  361.459620][ T8855]  ? inet_send_prepare+0x250/0x250
[  361.464777][ T8855]  ____sys_sendmsg+0x5ed/0x9a0
[  361.469587][ T8855]  ? __sys_sendmsg_sock+0x30/0x30
[  361.474644][ T8855]  ? __import_iovec+0x306/0x510
[  361.479542][ T8855]  ? import_iovec+0x6f/0xa0
[  361.484094][ T8855]  ___sys_sendmsg+0x2a2/0x360
[  361.488807][ T8855]  ? __sys_sendmsg+0x2a0/0x2a0
[  361.493788][ T8855]  ? __lock_acquire+0x7c40/0x7c40
[  361.498872][ T8855]  __se_sys_sendmsg+0x1c3/0x2b0
[  361.503753][ T8855]  ? __x64_sys_sendmsg+0x80/0x80
[  361.508735][ T8855]  ? lockdep_hardirqs_on+0x94/0x140
[  361.513967][ T8855]  do_syscall_64+0x4c/0xa0
[  361.518420][ T8855]  ? clear_bhb_loop+0x60/0xb0
[  361.523140][ T8855]  ? clear_bhb_loop+0x60/0xb0
[  361.527869][ T8855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.533844][ T8855] RIP: 0033:0x7f876819e159
[  361.538301][ T8855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.558124][ T8855] RSP: 002b:00007f8769143028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.566584][ T8855] RAX: ffffffffffffffda RBX: 00007f8768425fa0 RCX: 00007f876819e159
[  361.574588][ T8855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  361.582606][ T8855] RBP: 00007f8769143090 R08: 0000000000000000 R09: 0000000000000000
[  361.590618][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.598619][ T8855] R13: 00007f8768426038 R14: 00007f8768425fa0 R15: 00007ffe881d2018
[  361.606678][ T8855]  </TASK>
[  361.753464][ T8857] netlink: 'syz.3.1348': attribute type 21 has an invalid length.
[  361.777787][ T8857] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1348'.
[  361.817280][ T8864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1351'.
[  362.171704][ T8874] netlink: 'syz.3.1355': attribute type 2 has an invalid length.
[  362.196412][ T8874] netlink: 'syz.3.1355': attribute type 1 has an invalid length.
[  362.205118][ T8874] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1355'.
[  362.224516][ T8879] netlink: 'syz.1.1356': attribute type 2 has an invalid length.
[  362.240273][ T8879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1356'.
[  362.939846][ T8893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1361'.
[  363.594222][ T8916] FAULT_INJECTION: forcing a failure.
[  363.594222][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.627031][ T8916] CPU: 1 PID: 8916 Comm: syz.2.1370 Not tainted syzkaller #0
[  363.634529][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  363.644669][ T8916] Call Trace:
[  363.648003][ T8916]  <TASK>
[  363.650981][ T8916]  dump_stack_lvl+0x188/0x24e
[  363.655729][ T8916]  ? show_regs_print_info+0x12/0x12
[  363.661017][ T8916]  ? load_image+0x410/0x410
[  363.665593][ T8916]  ? __lock_acquire+0x7c40/0x7c40
[  363.670846][ T8916]  ? lockdep_hardirqs_on+0x94/0x140
[  363.676102][ T8916]  should_fail_ex+0x390/0x4c0
[  363.680831][ T8916]  _copy_from_user+0x2c/0x170
[  363.685578][ T8916]  __copy_msghdr+0x384/0x560
[  363.690205][ T8916]  ___sys_sendmsg+0x210/0x360
[  363.695008][ T8916]  ? __sys_sendmsg+0x2a0/0x2a0
[  363.699842][ T8916]  ? rcu_is_watching+0x11/0xa0
[  363.704668][ T8916]  __se_sys_sendmsg+0x1c3/0x2b0
[  363.709555][ T8916]  ? __x64_sys_sendmsg+0x80/0x80
[  363.714536][ T8916]  ? syscall_enter_from_user_mode+0x2a/0x80
[  363.720561][ T8916]  do_syscall_64+0x4c/0xa0
[  363.725023][ T8916]  ? clear_bhb_loop+0x60/0xb0
[  363.729733][ T8916]  ? clear_bhb_loop+0x60/0xb0
[  363.734454][ T8916]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  363.740497][ T8916] RIP: 0033:0x7fcffb59e159
[  363.744978][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.764729][ T8916] RSP: 002b:00007fcff97f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.773195][ T8916] RAX: ffffffffffffffda RBX: 00007fcffb825fa0 RCX: 00007fcffb59e159
[  363.781311][ T8916] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000007
[  363.789402][ T8916] RBP: 00007fcff97f6090 R08: 0000000000000000 R09: 0000000000000000
[  363.797587][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.805587][ T8916] R13: 00007fcffb826038 R14: 00007fcffb825fa0 R15: 00007ffce614e8a8
[  363.813630][ T8916]  </TASK>
[  363.944568][ T8920] validate_nla: 1 callbacks suppressed
[  363.944616][ T8920] netlink: 'syz.4.1368': attribute type 2 has an invalid length.
[  364.003714][ T8916] device syzkaller0 entered promiscuous mode
[  364.015597][ T8920] netlink: 'syz.4.1368': attribute type 1 has an invalid length.
[  364.042379][ T8920] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1368'.
[  364.908397][ T8937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1376'.
[  364.997978][ T8942] netlink: 'syz.4.1378': attribute type 21 has an invalid length.
[  365.021407][ T8942] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1378'.
[  365.190566][ T8948] netlink: 'syz.1.1379': attribute type 29 has an invalid length.
[  365.310981][ T8948] netlink: 'syz.1.1379': attribute type 29 has an invalid length.
[  365.330603][ T8954] syz.4.1382 uses obsolete (PF_INET,SOCK_PACKET)
[  365.402943][ T8950] netlink: 'syz.1.1379': attribute type 29 has an invalid length.
[  365.643463][ T8962] netlink: 'syz.4.1382': attribute type 3 has an invalid length.
[  365.738157][ T8962] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1382'.
[  365.919062][ T8967] netlink: 'syz.2.1383': attribute type 2 has an invalid length.
[  365.927901][ T8967] netlink: 'syz.2.1383': attribute type 1 has an invalid length.
[  366.009275][ T8967] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1383'.
[  366.196412][ T8977] netlink: 'syz.3.1386': attribute type 3 has an invalid length.
[  366.209550][ T8977] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.1386'.
[  366.735596][ T8989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'.
[  366.975936][ T8986] device syzkaller0 entered promiscuous mode
[  367.599860][ T9000] team0: Device gre0 is of different type
[  367.740397][ T9027] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1398'.
[  368.002506][ T9023] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1399'.
[  368.066047][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  368.121766][ T9028] : port 1(ip6gretap0) entered blocking state
[  368.158100][ T9028] : port 1(ip6gretap0) entered disabled state
[  368.189482][ T9028] device ip6gretap0 entered promiscuous mode
[  368.239902][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1401'.
[  368.320856][ T9029] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  368.865064][ T9045] device syzkaller0 entered promiscuous mode
[  368.952991][ T9043] validate_nla: 6 callbacks suppressed
[  368.953039][ T9043] netlink: 'syz.0.1406': attribute type 21 has an invalid length.
[  369.022153][ T9054] netlink: 'syz.2.1410': attribute type 12 has an invalid length.
[  369.153148][ T9054] __nla_validate_parse: 4 callbacks suppressed
[  369.153168][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1410'.
[  369.332245][ T9061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1411'.
[  369.843673][ T4290] Bluetooth: hci2: ACL packet too small
[  369.883709][ T9076] netlink: 'syz.2.1413': attribute type 2 has an invalid length.
[  369.941715][ T9076] netlink: 'syz.2.1413': attribute type 1 has an invalid length.
[  369.971832][ T9076] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1413'.
[  371.913676][ T9061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1411'.
[  371.925677][ T9067] netlink: 'syz.3.1412': attribute type 21 has an invalid length.
[  371.949415][ T9074] pim6reg0: tun_chr_ioctl cmd 1074025677
[  371.955632][ T9074] pim6reg0: linktype set to 780
[  371.976750][ T9079] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  372.020530][ T9079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  372.047246][ T9079] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  372.166689][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1417'.
[  372.384823][ T9096] netlink: 'syz.0.1419': attribute type 10 has an invalid length.
[  372.403616][ T9096] device syz_tun entered promiscuous mode
[  372.505701][ T9096] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  372.567887][ T9098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'.
[  372.585328][ T9108] netlink: 'syz.3.1423': attribute type 29 has an invalid length.
[  372.596332][ T9105] netlink: 'syz.4.1422': attribute type 21 has an invalid length.
[  372.617309][ T9105] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1422'.
[  372.634655][ T9108] netlink: 'syz.3.1423': attribute type 29 has an invalid length.
[  372.646811][ T9111] netlink: 'syz.3.1423': attribute type 29 has an invalid length.
[  372.933412][ T9119] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1427'.
[  373.182564][ T9124] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1428'.
[  373.192436][ T9117] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1426'.
[  373.226474][ T7757] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  373.465274][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  374.269333][ T9157] validate_nla: 4 callbacks suppressed
[  374.269374][ T9157] netlink: 'syz.3.1441': attribute type 2 has an invalid length.
[  374.302891][ T9157] netlink: 'syz.3.1441': attribute type 1 has an invalid length.
[  374.317023][ T9157] __nla_validate_parse: 2 callbacks suppressed
[  374.317062][ T9157] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1441'.
[  374.354284][ T9159] netlink: 'syz.1.1442': attribute type 21 has an invalid length.
[  374.397319][ T9159] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1442'.
[  374.625274][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1445'.
[  374.763710][ T9170] netlink: 'syz.4.1444': attribute type 21 has an invalid length.
[  374.787795][ T9170] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1444'.
[  374.829882][ T9176] netlink: 'syz.1.1447': attribute type 6 has an invalid length.
[  374.877798][ T9176] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1447'.
[  375.452878][ T9188] device syzkaller0 entered promiscuous mode
[  375.473673][ T9192] netlink: 'syz.4.1451': attribute type 21 has an invalid length.
[  375.482571][ T9192] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1451'.
[  376.102262][ T9212] netlink: 'syz.0.1456': attribute type 2 has an invalid length.
[  376.124173][ T9212] netlink: 'syz.0.1456': attribute type 1 has an invalid length.
[  376.133153][ T9212] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1456'.
[  376.379359][ T9220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1457'.
[  378.041943][ T9219] netlink: 'syz.4.1459': attribute type 21 has an invalid length.
[  378.058282][ T9219] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1459'.
[  378.336175][ T9232] netlink: 'syz.4.1462': attribute type 21 has an invalid length.
[  378.403999][ T9232] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1462'.
[  378.689776][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.696216][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.625460][ T9275] validate_nla: 3 callbacks suppressed
[  379.625501][ T9275] netlink: 'syz.1.1479': attribute type 21 has an invalid length.
[  379.670423][ T9275] __nla_validate_parse: 2 callbacks suppressed
[  379.670470][ T9275] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1479'.
[  379.910875][ T9272] device syzkaller0 entered promiscuous mode
[  380.220185][ T9289] netlink: 'syz.4.1483': attribute type 3 has an invalid length.
[  380.234116][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1483'.
[  381.438565][ T9314] netlink: 'syz.4.1491': attribute type 1 has an invalid length.
[  381.510659][ T9314] netlink: 'syz.4.1491': attribute type 3 has an invalid length.
[  381.573163][ T9314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1491'.
[  383.199855][ T9311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1491'.
[  383.211115][ T9312] netlink: 'syz.4.1491': attribute type 12 has an invalid length.
[  383.224429][ T9312] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1491'.
[  383.234426][ T9326] netlink: 'syz.2.1494': attribute type 21 has an invalid length.
[  383.247884][ T9326] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1494'.
[  385.428905][ T9357] netlink: 'syz.1.1503': attribute type 21 has an invalid length.
[  385.538220][ T9357] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1503'.
[  388.444952][ T9377] netlink: 'syz.3.1508': attribute type 21 has an invalid length.
[  388.458411][ T9377] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1508'.
[  389.006442][ T9391] netlink: 'syz.4.1511': attribute type 21 has an invalid length.
[  389.040655][ T9391] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1511'.
[  389.505302][ T9404] netlink: 'syz.0.1516': attribute type 21 has an invalid length.
[  389.534086][ T9404] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1516'.
[  389.588243][ T9407] netlink: 'syz.4.1517': attribute type 2 has an invalid length.
[  389.607377][ T9407] netlink: 'syz.4.1517': attribute type 1 has an invalid length.
[  389.636055][ T9407] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1517'.
[  391.522117][ T9429] netlink: 'syz.3.1521': attribute type 6 has an invalid length.
[  391.540470][ T9429] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1521'.
[  391.941012][ T9438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1524'.
[  392.083007][ T9436] netlink: 'syz.0.1522': attribute type 29 has an invalid length.
[  392.210296][ T9435] netlink: 'syz.0.1522': attribute type 1 has an invalid length.
[  392.224915][ T9443] netlink: 'syz.2.1524': attribute type 3 has an invalid length.
[  392.262390][ T9443] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1524'.
[  392.280063][ T9435] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1522'.
[  392.318102][ T9436] netlink: 'syz.0.1522': attribute type 29 has an invalid length.
[  392.917668][ T9449] netlink: 'syz.2.1529': attribute type 21 has an invalid length.
[  393.044628][ T9449] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1529'.
[  394.172455][ T9458] netlink: 'syz.4.1530': attribute type 2 has an invalid length.
[  394.297417][ T9458] netlink: 'syz.4.1530': attribute type 1 has an invalid length.
[  394.305784][ T9458] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1530'.
[  394.641955][ T9468] netlink: 'syz.4.1533': attribute type 6 has an invalid length.
[  394.695364][ T9468] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1533'.
[  396.887974][ T9506] netlink: 'syz.0.1542': attribute type 21 has an invalid length.
[  396.914479][ T9509] FAULT_INJECTION: forcing a failure.
[  396.914479][ T9509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.929200][ T9506] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1542'.
[  396.942736][ T9509] CPU: 1 PID: 9509 Comm: syz.4.1543 Not tainted syzkaller #0
[  396.950217][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  396.960334][ T9509] Call Trace:
[  396.963655][ T9509]  <TASK>
[  396.966629][ T9509]  dump_stack_lvl+0x188/0x24e
[  396.971372][ T9509]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  396.977589][ T9509]  ? show_regs_print_info+0x12/0x12
[  396.982847][ T9509]  ? load_image+0x410/0x410
[  396.987425][ T9509]  should_fail_ex+0x390/0x4c0
[  396.992173][ T9509]  _copy_from_user+0x2c/0x170
[  396.996914][ T9509]  ____sys_sendmsg+0x31a/0x9a0
[  397.001760][ T9509]  ? __sys_sendmsg_sock+0x30/0x30
[  397.006845][ T9509]  ? __import_iovec+0x306/0x510
[  397.011776][ T9509]  ? import_iovec+0x6f/0xa0
[  397.016352][ T9509]  ___sys_sendmsg+0x2a2/0x360
[  397.021098][ T9509]  ? __sys_sendmsg+0x2a0/0x2a0
[  397.025980][ T9509]  __se_sys_sendmsg+0x1c3/0x2b0
[  397.030897][ T9509]  ? __x64_sys_sendmsg+0x80/0x80
[  397.035915][ T9509]  do_syscall_64+0x4c/0xa0
[  397.040387][ T9509]  ? clear_bhb_loop+0x60/0xb0
[  397.045121][ T9509]  ? clear_bhb_loop+0x60/0xb0
[  397.049940][ T9509]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  397.055901][ T9509] RIP: 0033:0x7f32f359e159
[  397.060366][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.080044][ T9509] RSP: 002b:00007f32f17f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.088609][ T9509] RAX: ffffffffffffffda RBX: 00007f32f3825fa0 RCX: 00007f32f359e159
[  397.096640][ T9509] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000007
[  397.104753][ T9509] RBP: 00007f32f17f6090 R08: 0000000000000000 R09: 0000000000000000
[  397.112781][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.120899][ T9509] R13: 00007f32f3826038 R14: 00007f32f3825fa0 R15: 00007ffeea7559f8
[  397.128950][ T9509]  </TASK>
[  397.222282][ T9513] netlink: 'syz.2.1545': attribute type 2 has an invalid length.
[  397.242687][ T9513] netlink: 'syz.2.1545': attribute type 1 has an invalid length.
[  397.281873][ T9513] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1545'.
[  397.964258][ T9523] netlink: 'syz.1.1546': attribute type 29 has an invalid length.
[  398.052323][ T9523] netlink: 'syz.1.1546': attribute type 29 has an invalid length.
[  399.593006][ T9545] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.1554'.
[  402.286626][ T9549] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.1554'.
[  402.608499][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'.
[  402.811358][ T9559] netlink: 'syz.3.1557': attribute type 21 has an invalid length.
[  402.911867][ T9559] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1557'.
[  403.221933][ T9563] netlink: 'syz.1.1559': attribute type 2 has an invalid length.
[  403.274302][ T9563] netlink: 'syz.1.1559': attribute type 1 has an invalid length.
[  403.327501][ T9563] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1559'.
[  404.045792][ T9588] netlink: 'syz.4.1566': attribute type 1 has an invalid length.
[  404.106034][ T9588] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1566'.
[  404.164980][ T9591] netlink: 'syz.4.1566': attribute type 29 has an invalid length.
[  407.050575][ T9591] netlink: 'syz.4.1566': attribute type 29 has an invalid length.
[  407.063445][ T9609] netlink: 'syz.3.1572': attribute type 21 has an invalid length.
[  407.097519][ T9609] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1572'.
[  407.438713][ T9623] netlink: 'syz.1.1575': attribute type 2 has an invalid length.
[  407.486510][ T9623] netlink: 'syz.1.1575': attribute type 1 has an invalid length.
[  407.528399][ T9623] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1575'.
[  407.602925][ T9627] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.1578'.
[  407.692205][ T9627] netlink: zone id is out of range
[  407.759242][ T9627] netlink: zone id is out of range
[  407.830903][ T9627] netlink: zone id is out of range
[  407.850723][ T9627] netlink: get zone limit has 8 unknown bytes
[  409.785826][ T9665] netlink: 'syz.2.1585': attribute type 29 has an invalid length.
[  410.182450][ T9665] netlink: 'syz.2.1585': attribute type 29 has an invalid length.
[  410.594438][ T9682] netlink: 'syz.4.1590': attribute type 10 has an invalid length.
[  410.602826][ T9682] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  410.628811][ T9682] batman_adv: batadv0: Removing interface: veth1_vlan
[  410.662152][ T9682] team0: Device veth1_vlan failed to register rx_handler
[  410.977788][ T9683] device syzkaller0 entered promiscuous mode
[  411.011639][ T9687] netlink: 'syz.1.1591': attribute type 2 has an invalid length.
[  411.045655][ T9687] netlink: 'syz.1.1591': attribute type 1 has an invalid length.
[  411.060485][ T9687] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1591'.
[  413.242832][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.346866][ T9700] device bridge_slave_0 left promiscuous mode
[  413.367290][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.524232][ T9714] netlink: 'syz.4.1602': attribute type 21 has an invalid length.
[  413.555250][ T9714] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1602'.
[  413.822270][ T9724] netlink: 'syz.3.1606': attribute type 10 has an invalid length.
[  414.457122][ T9728] netlink: 'syz.1.1608': attribute type 2 has an invalid length.
[  414.502638][ T9728] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  414.537762][ T9728] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1608'.
[  416.982169][ T9744] netlink: 'syz.2.1612': attribute type 10 has an invalid length.
[  417.127897][ T9758] netlink: 'syz.1.1617': attribute type 10 has an invalid length.
[  417.256491][ T9758] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  417.465894][ T9767] netlink: 'syz.0.1618': attribute type 21 has an invalid length.
[  417.508240][ T9767] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1618'.
[  417.756275][ T9779] netlink: 'syz.2.1623': attribute type 2 has an invalid length.
[  417.797278][ T9779] netlink: 'syz.2.1623': attribute type 1 has an invalid length.
[  417.813394][ T9779] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1623'.
[  418.206228][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1627'.
[  418.291984][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1627'.
[  418.458929][ T9789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1627'.
[  418.775532][ T9798] FAULT_INJECTION: forcing a failure.
[  418.775532][ T9798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.856468][ T9798] CPU: 0 PID: 9798 Comm: syz.2.1630 Not tainted syzkaller #0
[  418.863932][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  418.874030][ T9798] Call Trace:
[  418.877365][ T9798]  <TASK>
[  418.880333][ T9798]  dump_stack_lvl+0x188/0x24e
[  418.885062][ T9798]  ? show_regs_print_info+0x12/0x12
[  418.890326][ T9798]  ? load_image+0x410/0x410
[  418.894903][ T9798]  ? __lock_acquire+0x7c40/0x7c40
[  418.900005][ T9798]  should_fail_ex+0x390/0x4c0
[  418.904745][ T9798]  _copy_to_user+0x2c/0x130
[  418.909312][ T9798]  bpf_verifier_vlog+0x172/0x3a0
[  418.914316][ T9798]  __btf_verifier_log+0xdf/0x130
[  418.919338][ T9798]  ? btf_check_sec_info+0x350/0x350
[  418.924603][ T9798]  ? btf_parse_hdr+0x1dd/0x7d0
[  418.929418][ T9798]  btf_parse_hdr+0x37e/0x7d0
[  418.934062][ T9798]  btf_new_fd+0x367/0x760
[  418.938450][ T9798]  __sys_bpf+0x612/0x780
[  418.942753][ T9798]  ? bpf_link_show_fdinfo+0x380/0x380
[  418.948187][ T9798]  ? lock_chain_count+0x20/0x20
[  418.953142][ T9798]  __x64_sys_bpf+0x78/0x90
[  418.957616][ T9798]  do_syscall_64+0x4c/0xa0
[  418.962080][ T9798]  ? clear_bhb_loop+0x60/0xb0
[  418.966810][ T9798]  ? clear_bhb_loop+0x60/0xb0
[  418.971534][ T9798]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  418.977488][ T9798] RIP: 0033:0x7fcffb59e159
[  418.981947][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.001683][ T9798] RSP: 002b:00007fcff97f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  419.010237][ T9798] RAX: ffffffffffffffda RBX: 00007fcffb825fa0 RCX: 00007fcffb59e159
[  419.018250][ T9798] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012
[  419.026281][ T9798] RBP: 00007fcff97f6090 R08: 0000000000000000 R09: 0000000000000000
[  419.034388][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.042397][ T9798] R13: 00007fcffb826038 R14: 00007fcffb825fa0 R15: 00007ffce614e8a8
[  419.050428][ T9798]  </TASK>
[  419.623396][ T9819] netlink: 'syz.2.1636': attribute type 21 has an invalid length.
[  419.647769][ T9819] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1636'.
[  419.671118][ T9823] netlink: 'syz.3.1637': attribute type 10 has an invalid length.
[  419.688672][ T9823] team0: Device veth1_vlan failed to register rx_handler
[  419.746405][ T9821] netlink: 'syz.4.1638': attribute type 2 has an invalid length.
[  419.756273][ T9821] netlink: 'syz.4.1638': attribute type 1 has an invalid length.
[  419.782403][ T9821] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1638'.
[  419.798052][ T9825] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1639'.
[  419.964451][ T9830] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1640'.
[  421.443190][ T9855] device bridge_slave_0 left promiscuous mode
[  421.465719][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.524942][ T9866] netlink: 'syz.2.1651': attribute type 10 has an invalid length.
[  421.592152][ T9866] team0: Device veth1_vlan failed to register rx_handler
[  421.863216][ T9871] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1654'.
[  422.355509][ T9883] validate_nla: 2 callbacks suppressed
[  422.355548][ T9883] netlink: 'syz.4.1657': attribute type 21 has an invalid length.
[  422.385169][ T9883] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1657'.
[  423.020843][ T9898] netlink: 'syz.0.1663': attribute type 10 has an invalid length.
[  424.029879][ T9917] netlink: 'syz.3.1668': attribute type 10 has an invalid length.
[  424.186643][ T9922] netlink: 'syz.1.1667': attribute type 2 has an invalid length.
[  424.250813][ T9922] netlink: 'syz.1.1667': attribute type 1 has an invalid length.
[  424.332714][ T9917] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  424.361210][ T9922] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1667'.
[  424.378555][ T9921] netlink: 'syz.2.1671': attribute type 21 has an invalid length.
[  424.402893][ T9921] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1671'.
[  424.493394][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.834986][ T9934] device bridge_slave_0 left promiscuous mode
[  424.873398][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.362129][ T9951] netlink: 'syz.0.1679': attribute type 10 has an invalid length.
[  425.970382][ T9960] netlink: 'syz.1.1681': attribute type 10 has an invalid length.
[  426.440354][ T9965] netlink: 'syz.2.1685': attribute type 21 has an invalid length.
[  426.456574][ T9965] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1685'.
[  426.479534][ T9968] netlink: 'syz.4.1686': attribute type 21 has an invalid length.
[  426.512395][ T9968] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1686'.
[  426.592625][ T9973] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1688'.
[  426.639221][ T9975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.783831][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.093153][ T9975] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  428.259988][ T9989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1690'.
[  430.728179][T10029] validate_nla: 3 callbacks suppressed
[  430.728221][T10029] netlink: 'syz.1.1703': attribute type 2 has an invalid length.
[  430.822572][T10029] netlink: 'syz.1.1703': attribute type 1 has an invalid length.
[  430.901214][T10029] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1703'.
[  431.926199][T10024] netlink: 'syz.4.1700': attribute type 21 has an invalid length.
[  431.962812][T10024] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1700'.
[  431.984925][T10023] netlink: 'syz.0.1702': attribute type 21 has an invalid length.
[  431.997253][T10023] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1702'.
[  432.263318][T10033] netlink: 'syz.4.1706': attribute type 10 has an invalid length.
[  432.295905][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.448865][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.651844][T10033] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  432.731344][T10039] netlink: 'syz.1.1708': attribute type 10 has an invalid length.
[  432.874262][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1708'.
[  433.348194][T10039] team0: Port device geneve0 added
[  433.377017][T10035] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1705'.
[  433.434492][T10042] netlink: 'syz.1.1708': attribute type 2 has an invalid length.
[  433.477470][T10042] netlink: 'syz.1.1708': attribute type 8 has an invalid length.
[  433.485285][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1708'.
[  433.931906][T10073] netlink: 1059 bytes leftover after parsing attributes in process `syz.1.1716'.
[  434.385876][T10080] netlink: 'syz.1.1718': attribute type 2 has an invalid length.
[  434.411357][T10077] netlink: 'syz.2.1719': attribute type 21 has an invalid length.
[  434.411516][T10080] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1718'.
[  434.469937][T10077] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1719'.
[  434.878774][T10089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1722'.
[  435.181541][T10090] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1721'.
[  435.468231][T10099] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  436.154969][T10117] validate_nla: 4 callbacks suppressed
[  436.155002][T10117] netlink: 'syz.2.1731': attribute type 4 has an invalid length.
[  436.744383][T10113] netlink: 'syz.4.1730': attribute type 21 has an invalid length.
[  436.777589][T10123] netlink: 'syz.3.1732': attribute type 21 has an invalid length.
[  436.857661][T10097] netlink: 'syz.1.1725': attribute type 16 has an invalid length.
[  436.970451][T10097] netlink: 'syz.1.1725': attribute type 3 has an invalid length.
[  437.136790][T10097] __nla_validate_parse: 5 callbacks suppressed
[  437.136811][T10097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1725'.
[  437.512396][T10138] netlink: 'syz.3.1736': attribute type 2 has an invalid length.
[  437.648004][T10138] netlink: 'syz.3.1736': attribute type 1 has an invalid length.
[  437.689678][T10138] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1736'.
[  438.325538][T10149] netlink: 'syz.0.1750': attribute type 2 has an invalid length.
[  438.336824][T10149] netlink: 'syz.0.1750': attribute type 1 has an invalid length.
[  438.346184][T10149] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1750'.
[  438.472275][T10152] FAULT_INJECTION: forcing a failure.
[  438.472275][T10152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.557122][T10152] CPU: 0 PID: 10152 Comm: syz.3.1741 Not tainted syzkaller #0
[  438.564681][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  438.574793][T10152] Call Trace:
[  438.578135][T10152]  <TASK>
[  438.581116][T10152]  dump_stack_lvl+0x188/0x24e
[  438.585863][T10152]  ? show_regs_print_info+0x12/0x12
[  438.591114][T10152]  ? load_image+0x410/0x410
[  438.595690][T10152]  ? __lock_acquire+0x7c40/0x7c40
[  438.600779][T10152]  ? snprintf+0xe5/0x140
[  438.605080][T10152]  should_fail_ex+0x390/0x4c0
[  438.609799][T10152]  _copy_to_user+0x2c/0x130
[  438.614362][T10152]  simple_read_from_buffer+0xe3/0x150
[  438.619784][T10152]  proc_fail_nth_read+0x1a6/0x220
[  438.624871][T10152]  ? proc_fault_inject_write+0x310/0x310
[  438.630750][T10152]  ? fsnotify_perm+0x248/0x550
[  438.635546][T10152]  ? proc_fault_inject_write+0x310/0x310
[  438.641214][T10152]  vfs_read+0x2db/0x960
[  438.646024][T10152]  ? kernel_read+0x1e0/0x1e0
[  438.650672][T10152]  ? __fget_files+0x28/0x460
[  438.655386][T10152]  ? __fget_files+0x3fc/0x460
[  438.660189][T10152]  ? __fdget_pos+0x2ae/0x360
[  438.664834][T10152]  ? ksys_read+0x70/0x260
[  438.669229][T10152]  ksys_read+0x14d/0x260
[  438.673631][T10152]  ? vfs_write+0x9a0/0x9a0
[  438.678090][T10152]  ? lockdep_hardirqs_on+0x94/0x140
[  438.683325][T10152]  do_syscall_64+0x4c/0xa0
[  438.687779][T10152]  ? clear_bhb_loop+0x60/0xb0
[  438.692486][T10152]  ? clear_bhb_loop+0x60/0xb0
[  438.697193][T10152]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  438.703128][T10152] RIP: 0033:0x7fd5c7d5e98e
[  438.707568][T10152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  438.727248][T10152] RSP: 002b:00007fd5c8cb7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  438.735699][T10152] RAX: ffffffffffffffda RBX: 00007fd5c8cb86c0 RCX: 00007fd5c7d5e98e
[  438.743703][T10152] RDX: 000000000000000f RSI: 00007fd5c8cb80a0 RDI: 0000000000000006
[  438.751715][T10152] RBP: 00007fd5c8cb8090 R08: 0000000000000000 R09: 0000000000000000
[  438.759718][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.767731][T10152] R13: 00007fd5c8026038 R14: 00007fd5c8025fa0 R15: 00007ffd99d6aa88
[  438.775760][T10152]  </TASK>
[  438.899984][T10159] netlink: 'syz.4.1740': attribute type 2 has an invalid length.
[  438.973077][T10159] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1740'.
[  439.154246][T10165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1743'.
[  439.373025][T10161] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1742'.
[  440.179979][T10176] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1745'.
[  440.252986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.259662][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.546128][T10184] FAULT_INJECTION: forcing a failure.
[  440.546128][T10184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.621302][T10184] CPU: 1 PID: 10184 Comm: syz.4.1749 Not tainted syzkaller #0
[  440.628855][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  440.638956][T10184] Call Trace:
[  440.642300][T10184]  <TASK>
[  440.645277][T10184]  dump_stack_lvl+0x188/0x24e
[  440.650019][T10184]  ? show_regs_print_info+0x12/0x12
[  440.655291][T10184]  ? load_image+0x410/0x410
[  440.659936][T10184]  ? __might_fault+0xa6/0x120
[  440.664663][T10184]  should_fail_ex+0x390/0x4c0
[  440.669403][T10184]  copyin+0x1b/0x120
[  440.673360][T10184]  _copy_from_iter+0x447/0x1130
[  440.678278][T10184]  ? copyout_mc+0x110/0x110
[  440.682832][T10184]  ? __virt_addr_valid+0x188/0x540
[  440.688051][T10184]  ? __virt_addr_valid+0x188/0x540
[  440.693205][T10184]  ? __virt_addr_valid+0x467/0x540
[  440.698351][T10184]  ? __phys_addr_symbol+0x2b/0x70
[  440.703415][T10184]  ? __check_object_size+0x4f6/0xa70
[  440.708731][T10184]  netlink_sendmsg+0x755/0xbd0
[  440.713535][T10184]  ? netlink_getsockopt+0x550/0x550
[  440.718762][T10184]  ? apparmor_socket_sendmsg+0x8a/0x330
[  440.724341][T10184]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  440.729656][T10184]  ? security_socket_sendmsg+0x7c/0xa0
[  440.735147][T10184]  ? netlink_getsockopt+0x550/0x550
[  440.740379][T10184]  ____sys_sendmsg+0x5ed/0x9a0
[  440.745174][T10184]  ? __sys_sendmsg_sock+0x30/0x30
[  440.750225][T10184]  ? __import_iovec+0x306/0x510
[  440.755205][T10184]  ? import_iovec+0x6f/0xa0
[  440.759742][T10184]  ___sys_sendmsg+0x2a2/0x360
[  440.764466][T10184]  ? __sys_sendmsg+0x2a0/0x2a0
[  440.769273][T10184]  ? __lock_acquire+0x7c40/0x7c40
[  440.774349][T10184]  __se_sys_sendmsg+0x1c3/0x2b0
[  440.779226][T10184]  ? ct_nmi_exit+0x145/0x1c0
[  440.783850][T10184]  ? __x64_sys_sendmsg+0x80/0x80
[  440.788824][T10184]  ? lockdep_hardirqs_on+0x94/0x140
[  440.794056][T10184]  do_syscall_64+0x4c/0xa0
[  440.798509][T10184]  ? clear_bhb_loop+0x60/0xb0
[  440.803216][T10184]  ? clear_bhb_loop+0x60/0xb0
[  440.807924][T10184]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  440.813870][T10184] RIP: 0033:0x7f32f359e159
[  440.818316][T10184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.837954][T10184] RSP: 002b:00007f32f17f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.846401][T10184] RAX: ffffffffffffffda RBX: 00007f32f3825fa0 RCX: 00007f32f359e159
[  440.854421][T10184] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  440.862424][T10184] RBP: 00007f32f17f6090 R08: 0000000000000000 R09: 0000000000000000
[  440.870509][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.878500][T10184] R13: 00007f32f3826038 R14: 00007f32f3825fa0 R15: 00007ffeea7559f8
[  440.886530][T10184]  </TASK>
[  441.093809][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1753'.
[  441.168734][T10193] validate_nla: 5 callbacks suppressed
[  441.168753][T10193] netlink: 'syz.0.1754': attribute type 2 has an invalid length.
[  441.186850][T10188] netlink: 'syz.2.1753': attribute type 2 has an invalid length.
[  441.205784][T10193] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  441.217027][T10188] netlink: 'syz.2.1753': attribute type 8 has an invalid length.
[  441.240282][T10193] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1754'.
[  441.255794][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1753'.
[  442.509159][T10210] netlink: 'syz.1.1757': attribute type 2 has an invalid length.
[  442.548803][T10210] netlink: 'syz.1.1757': attribute type 1 has an invalid length.
[  442.608103][T10210] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1757'.
[  442.827451][T10215] netlink: 'syz.4.1762': attribute type 21 has an invalid length.
[  442.884989][T10215] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1762'.
[  442.985281][T10225] FAULT_INJECTION: forcing a failure.
[  442.985281][T10225] name failslab, interval 1, probability 0, space 0, times 0
[  443.063660][T10225] CPU: 1 PID: 10225 Comm: syz.0.1766 Not tainted syzkaller #0
[  443.071215][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  443.081328][T10225] Call Trace:
[  443.084654][T10225]  <TASK>
[  443.087636][T10225]  dump_stack_lvl+0x188/0x24e
[  443.092375][T10225]  ? show_regs_print_info+0x12/0x12
[  443.097756][T10225]  ? load_image+0x410/0x410
[  443.102325][T10225]  ? __might_sleep+0xd0/0xd0
[  443.106972][T10225]  ? __lock_acquire+0x7c40/0x7c40
[  443.112070][T10225]  should_fail_ex+0x390/0x4c0
[  443.116823][T10225]  should_failslab+0x5/0x20
[  443.121375][T10225]  slab_pre_alloc_hook+0x59/0x300
[  443.126462][T10225]  kmem_cache_alloc_lru+0x49/0x2e0
[  443.131632][T10225]  ? new_inode_pseudo+0x7e/0x1c0
[  443.136632][T10225]  new_inode_pseudo+0x7e/0x1c0
[  443.141449][T10225]  ? __ns_get_path+0x2c/0x650
[  443.146259][T10225]  __ns_get_path+0x252/0x650
[  443.150920][T10225]  ns_get_path+0x50/0x90
[  443.155225][T10225]  proc_ns_get_link+0x168/0x290
[  443.160149][T10225]  ? proc_ns_instantiate+0xf0/0xf0
[  443.165322][T10225]  ? try_to_unlazy+0x33e/0x5c0
[  443.170143][T10225]  ? proc_ns_instantiate+0xf0/0xf0
[  443.175314][T10225]  pick_link+0x6ad/0xe20
[  443.179625][T10225]  step_into+0xc14/0xee0
[  443.184370][T10225]  ? pid_revalidate+0x1e/0x250
[  443.189192][T10225]  ? set_root+0x3a0/0x3a0
[  443.193574][T10225]  ? pid_revalidate+0x209/0x250
[  443.198473][T10225]  ? lookup_fast+0x494/0x4c0
[  443.203121][T10225]  path_openat+0x15dd/0x2f10
[  443.207781][T10225]  ? verify_lock_unused+0x140/0x140
[  443.213048][T10225]  ? do_sys_openat2+0xdd/0x4f0
[  443.217886][T10225]  ? do_filp_open+0x420/0x420
[  443.222723][T10225]  do_filp_open+0x1ee/0x420
[  443.227417][T10225]  ? vfs_tmpfile+0x470/0x470
[  443.232168][T10225]  ? _raw_spin_unlock+0x24/0x40
[  443.237449][T10225]  ? alloc_fd+0x590/0x640
[  443.241897][T10225]  do_sys_openat2+0x14b/0x4f0
[  443.246651][T10225]  ? ct_nmi_exit+0x145/0x1c0
[  443.251309][T10225]  ? do_sys_open+0xe0/0xe0
[  443.255880][T10225]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  443.262018][T10225]  ? srcu_init_notifier_head+0x90/0x90
[  443.267660][T10225]  ? lock_chain_count+0x20/0x20
[  443.272576][T10225]  ? exit_to_user_mode_loop+0xdc/0x110
[  443.278178][T10225]  __x64_sys_openat+0x135/0x160
[  443.283102][T10225]  do_syscall_64+0x4c/0xa0
[  443.287580][T10225]  ? clear_bhb_loop+0x60/0xb0
[  443.292310][T10225]  ? clear_bhb_loop+0x60/0xb0
[  443.297042][T10225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  443.303085][T10225] RIP: 0033:0x7f876815e98e
[  443.307640][T10225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  443.327563][T10225] RSP: 002b:00007f8769142ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  443.336118][T10225] RAX: ffffffffffffffda RBX: 00007f87691436c0 RCX: 00007f876815e98e
[  443.344232][T10225] RDX: 0000000000000000 RSI: 00007f8769142f90 RDI: ffffffffffffff9c
[  443.352257][T10225] RBP: 00007f8769143090 R08: 0000000000000000 R09: 0000000000000000
[  443.360276][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  443.368306][T10225] R13: 00007f8768426038 R14: 00007f8768425fa0 R15: 00007ffe881d2018
[  443.376349][T10225]  </TASK>
[  443.679288][T10230] netlink: 'syz.1.1767': attribute type 21 has an invalid length.
[  443.718602][T10230] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1767'.
[  443.970794][T10233] netlink: 'syz.4.1768': attribute type 2 has an invalid length.
[  444.010161][T10233] netlink: 'syz.4.1768': attribute type 1 has an invalid length.
[  444.054711][T10233] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1768'.
[  444.560104][T10237] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1780'.
[  446.254832][T10268] validate_nla: 1 callbacks suppressed
[  446.254854][T10268] netlink: 'syz.4.1778': attribute type 21 has an invalid length.
[  446.357498][T10268] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1778'.
[  446.917497][T10272] netlink: 'syz.2.1781': attribute type 2 has an invalid length.
[  446.955618][T10272] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  447.025783][T10272] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1781'.
[  447.214479][T10277] netlink: 'syz.1.1782': attribute type 2 has an invalid length.
[  447.314188][T10277] netlink: 'syz.1.1782': attribute type 1 has an invalid length.
[  447.409397][T10277] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1782'.
[  447.741215][T10295] netlink: 'syz.2.1786': attribute type 21 has an invalid length.
[  447.788972][T10295] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1786'.
[  448.511987][T10308] netlink: 'syz.0.1793': attribute type 10 has an invalid length.
[  448.538158][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1793'.
[  448.693777][T10311] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1792'.
[  448.764116][T10317] netlink: 'syz.3.1794': attribute type 21 has an invalid length.
[  448.785006][T10311] openvswitch: netlink: Flow key attr not present in new flow.
[  448.809125][T10317] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1794'.
[  449.406712][T10322] netlink: 'syz.3.1797': attribute type 2 has an invalid length.
[  449.465025][T10322] netlink: 'syz.3.1797': attribute type 1 has an invalid length.
[  449.532006][T10322] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1797'.
[  451.677431][T10338] netlink: 'syz.0.1803': attribute type 21 has an invalid length.
[  451.700510][T10338] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1803'.
[  451.923948][T10343] netlink: 'syz.3.1805': attribute type 21 has an invalid length.
[  452.001442][T10343] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1805'.
[  452.912389][T10355] netlink: 'syz.3.1807': attribute type 21 has an invalid length.
[  452.932437][T10355] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1807'.
[  453.545757][T10373] netlink: 'syz.3.1812': attribute type 21 has an invalid length.
[  453.774059][T10379] netlink: 'syz.2.1813': attribute type 10 has an invalid length.
[  453.868747][T10379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1813'.
[  453.878823][T10379] device dummy0 entered promiscuous mode
[  453.886232][T10379] bridge0: port 3(dummy0) entered blocking state
[  453.894436][T10379] bridge0: port 3(dummy0) entered disabled state
[  453.905545][T10379] bridge0: port 3(dummy0) entered blocking state
[  453.912224][T10379] bridge0: port 3(dummy0) entered forwarding state
[  453.959856][T10380] netlink: 'syz.2.1813': attribute type 10 has an invalid length.
[  453.978507][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1813'.
[  454.517683][T10384] netlink: 'syz.4.1816': attribute type 21 has an invalid length.
[  454.568235][T10384] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1816'.
[  454.780418][T10397] netlink: 'syz.2.1819': attribute type 2 has an invalid length.
[  454.867323][T10397] netlink: 'syz.2.1819': attribute type 1 has an invalid length.
[  454.876604][T10397] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1819'.
[  454.886434][T10394] netlink: 'syz.3.1820': attribute type 2 has an invalid length.
[  454.895552][T10394] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1820'.
[  455.297232][T10402] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1823'.
[  455.353343][T10408] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1822'.
[  455.420451][T10408] tc_dump_action: action bad kind
[  457.192722][T10435] validate_nla: 2 callbacks suppressed
[  457.192763][T10435] netlink: 'syz.0.1832': attribute type 2 has an invalid length.
[  457.257621][T10435] netlink: 'syz.0.1832': attribute type 1 has an invalid length.
[  457.287411][T10435] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1832'.
[  457.329709][T10437] netlink: 'syz.3.1834': attribute type 21 has an invalid length.
[  457.349009][T10437] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1834'.
[  457.506482][T10442] netlink: 'syz.1.1835': attribute type 2 has an invalid length.
[  457.522315][T10442] netlink: 'syz.1.1835': attribute type 1 has an invalid length.
[  457.555036][T10439] netlink: 'syz.4.1833': attribute type 2 has an invalid length.
[  457.607258][T10439] netlink: 'syz.4.1833': attribute type 1 has an invalid length.
[  458.279317][T10458] netlink: 'syz.0.1841': attribute type 21 has an invalid length.
[  458.299454][T10458] __nla_validate_parse: 2 callbacks suppressed
[  458.299508][T10458] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1841'.
[  458.524534][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  461.232121][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  461.538414][T10488] netlink: 'syz.0.1849': attribute type 2 has an invalid length.
[  461.546767][T10488] netlink: 'syz.0.1849': attribute type 1 has an invalid length.
[  461.576548][T10488] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1849'.
[  461.586875][T10487] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1848'.
[  461.682207][T10492] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1850'.
[  461.830760][T10496] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1852'.
[  462.443045][T10507] validate_nla: 2 callbacks suppressed
[  462.443093][T10507] netlink: 'syz.4.1856': attribute type 21 has an invalid length.
[  462.584068][T10507] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1856'.
[  463.910464][T10527] netlink: 'syz.4.1860': attribute type 2 has an invalid length.
[  463.919237][T10527] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1860'.
[  466.132001][T10544] netlink: 'syz.1.1866': attribute type 21 has an invalid length.
[  466.141993][T10544] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1866'.
[  466.278299][T10561] syz_tun: tun_net_xmit 86
[  466.362209][T10559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1870'.
[  466.941968][T10577] netlink: 'syz.4.1874': attribute type 2 has an invalid length.
[  467.067383][T10577] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1874'.
[  467.330134][    C1] syz_tun: tun_net_xmit 86
[  467.337427][T10581] netlink: 'syz.0.1877': attribute type 2 has an invalid length.
[  467.345563][T10581] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  467.371663][T10581] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1877'.
[  467.504930][T10583] netlink: 'syz.1.1878': attribute type 21 has an invalid length.
[  467.514468][T10583] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1878'.
[  468.155632][T10597] netlink: 'syz.0.1883': attribute type 21 has an invalid length.
[  468.167020][T10597] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1883'.
[  468.372097][    C1] syz_tun: tun_net_xmit 86
[  471.049557][T10618] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1888'.
[  471.680243][T10635] netlink: 'syz.2.1894': attribute type 2 has an invalid length.
[  471.734483][T10635] netlink: 'syz.2.1894': attribute type 1 has an invalid length.
[  471.781822][T10635] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1894'.
[  472.075836][T10644] netlink: 'syz.0.1898': attribute type 2 has an invalid length.
[  472.101664][T10644] netlink: 'syz.0.1898': attribute type 1 has an invalid length.
[  472.120934][T10644] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1898'.
[  472.224290][T10649] netlink: 'syz.4.1900': attribute type 21 has an invalid length.
[  472.236450][T10649] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1900'.
[  473.590871][T10666] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35
[  473.848091][T10665] netlink: 'syz.0.1906': attribute type 3 has an invalid length.
[  474.001817][T10665] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1906'.
[  475.228229][T10667] netlink: 'syz.4.1905': attribute type 21 has an invalid length.
[  475.236092][T10667] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1905'.
[  475.517947][T10678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1909'.
[  475.675661][T10680] netlink: 'syz.3.1910': attribute type 2 has an invalid length.
[  475.717363][T10680] netlink: 'syz.3.1910': attribute type 1 has an invalid length.
[  475.778562][T10680] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1910'.
[  476.560234][T10693] netlink: 'syz.1.1914': attribute type 21 has an invalid length.
[  476.587293][T10693] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1914'.
[  476.798538][T10698] netlink: 'syz.4.1917': attribute type 21 has an invalid length.
[  476.857531][T10698] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1917'.
[  476.868118][T10708] netlink: 'syz.2.1918': attribute type 3 has an invalid length.
[  476.876509][T10708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1918'.
[  476.906551][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  477.336164][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  477.553216][T10716] netlink: 'syz.2.1922': attribute type 21 has an invalid length.
[  477.599769][T10716] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1922'.
[  477.751086][T10720] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1925'.
[  478.738145][T10737] netlink: 'syz.1.1928': attribute type 2 has an invalid length.
[  478.747294][T10737] netlink: 'syz.1.1928': attribute type 1 has an invalid length.
[  478.756708][T10737] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1928'.
[  479.795061][T10746] FAULT_INJECTION: forcing a failure.
[  479.795061][T10746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.866998][T10746] CPU: 0 PID: 10746 Comm: syz.2.1930 Not tainted syzkaller #0
[  479.874547][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  479.884695][T10746] Call Trace:
[  479.888021][T10746]  <TASK>
[  479.890995][T10746]  dump_stack_lvl+0x188/0x24e
[  479.895741][T10746]  ? show_regs_print_info+0x12/0x12
[  479.901086][T10746]  ? load_image+0x410/0x410
[  479.905876][T10746]  ? __lock_acquire+0x7c40/0x7c40
[  479.910998][T10746]  should_fail_ex+0x390/0x4c0
[  479.915775][T10746]  _copy_from_user+0x2c/0x170
[  479.920800][T10746]  bpf_prog_test_run_skb+0x263/0x18e0
[  479.926230][T10746]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  479.932440][T10746]  ? lockdep_hardirqs_on+0x94/0x140
[  479.937709][T10746]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  479.944011][T10746]  ? cpu_online+0xa0/0xa0
[  479.948404][T10746]  bpf_prog_test_run+0x31c/0x390
[  479.953417][T10746]  __sys_bpf+0x62b/0x780
[  479.957750][T10746]  ? bpf_link_show_fdinfo+0x380/0x380
[  479.963203][T10746]  ? lock_chain_count+0x20/0x20
[  479.968453][T10746]  __x64_sys_bpf+0x78/0x90
[  479.972940][T10746]  do_syscall_64+0x4c/0xa0
[  479.977415][T10746]  ? clear_bhb_loop+0x60/0xb0
[  479.982159][T10746]  ? clear_bhb_loop+0x60/0xb0
[  479.986919][T10746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.992878][T10746] RIP: 0033:0x7fcffb59e159
[  479.997344][T10746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.017009][T10746] RSP: 002b:00007fcff97f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  480.025565][T10746] RAX: ffffffffffffffda RBX: 00007fcffb825fa0 RCX: 00007fcffb59e159
[  480.033593][T10746] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[  480.041610][T10746] RBP: 00007fcff97f6090 R08: 0000000000000000 R09: 0000000000000000
[  480.050153][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.058261][T10746] R13: 00007fcffb826038 R14: 00007fcffb825fa0 R15: 00007ffce614e8a8
[  480.066278][T10746]  </TASK>
[  480.088797][T10748] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1932'.
[  480.118320][T10750] netlink: 'syz.0.1931': attribute type 2 has an invalid length.
[  480.181183][T10750] netlink: 'syz.0.1931': attribute type 1 has an invalid length.
[  480.238467][T10750] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1931'.
[  480.563451][T10758] netlink: 'syz.4.1934': attribute type 2 has an invalid length.
[  480.591541][T10758] netlink: 'syz.4.1934': attribute type 1 has an invalid length.
[  480.629341][T10758] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1934'.
[  480.927486][T10763] netlink: 'syz.0.1937': attribute type 21 has an invalid length.
[  480.978629][T10763] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1937'.
[  482.279924][T10782] netlink: 'syz.4.1943': attribute type 2 has an invalid length.
[  482.293869][T10782] netlink: 'syz.4.1943': attribute type 1 has an invalid length.
[  482.306312][T10782] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1943'.
[  483.699731][T10789] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1945'.
[  483.955234][T10798] netlink: 'syz.2.1947': attribute type 2 has an invalid length.
[  483.967013][T10798] netlink: 'syz.2.1947': attribute type 1 has an invalid length.
[  483.976213][T10798] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1947'.
[  484.701169][T10814] netlink: 'syz.3.1955': attribute type 2 has an invalid length.
[  484.718601][T10814] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1955'.
[  485.641937][T10827] validate_nla: 1 callbacks suppressed
[  485.641982][T10827] netlink: 'syz.3.1960': attribute type 2 has an invalid length.
[  485.673640][T10827] netlink: 'syz.3.1960': attribute type 1 has an invalid length.
[  485.725324][T10827] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1960'.
[  487.839540][T10845] netlink: 'syz.3.1964': attribute type 21 has an invalid length.
[  487.851560][T10845] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1964'.
[  487.861744][T10845] netlink: 'syz.3.1964': attribute type 5 has an invalid length.
[  487.911739][T10845] netlink: 'syz.3.1964': attribute type 6 has an invalid length.
[  487.928124][T10845] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1964'.
[  488.078564][T10857] netlink: 'syz.4.1968': attribute type 2 has an invalid length.
[  488.086773][T10857] netlink: 'syz.4.1968': attribute type 1 has an invalid length.
[  488.112049][T10861] netlink: 'syz.0.1970': attribute type 4 has an invalid length.
[  488.118162][T10857] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1968'.
[  488.298847][T10863] netlink: 'syz.1.1971': attribute type 2 has an invalid length.
[  488.310168][T10863] netlink: 'syz.1.1971': attribute type 1 has an invalid length.
[  488.318883][T10863] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1971'.
[  488.436945][T10867] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1973'.
[  488.720946][T10875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1976'.
[  489.563722][T10889] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1983'.
[  489.672701][T10897] FAULT_INJECTION: forcing a failure.
[  489.672701][T10897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.689207][T10897] CPU: 0 PID: 10897 Comm: syz.0.1986 Not tainted syzkaller #0
[  489.696746][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  489.706847][T10897] Call Trace:
[  489.710174][T10897]  <TASK>
[  489.713154][T10897]  dump_stack_lvl+0x188/0x24e
[  489.717889][T10897]  ? show_regs_print_info+0x12/0x12
[  489.723143][T10897]  ? load_image+0x410/0x410
[  489.727714][T10897]  ? __lock_acquire+0x7c40/0x7c40
[  489.732811][T10897]  ? snprintf+0xe5/0x140
[  489.737133][T10897]  should_fail_ex+0x390/0x4c0
[  489.741876][T10897]  _copy_to_user+0x2c/0x130
[  489.746443][T10897]  simple_read_from_buffer+0xe3/0x150
[  489.751885][T10897]  proc_fail_nth_read+0x1a6/0x220
[  489.757067][T10897]  ? proc_fault_inject_write+0x310/0x310
[  489.762797][T10897]  ? fsnotify_perm+0x248/0x550
[  489.767622][T10897]  ? proc_fault_inject_write+0x310/0x310
[  489.773319][T10897]  vfs_read+0x2db/0x960
[  489.777596][T10897]  ? kernel_read+0x1e0/0x1e0
[  489.782291][T10897]  ? __fget_files+0x28/0x460
[  489.786932][T10897]  ? __fget_files+0x3fc/0x460
[  489.791664][T10897]  ? __fdget_pos+0x2ae/0x360
[  489.796323][T10897]  ? ksys_read+0x70/0x260
[  489.800708][T10897]  ksys_read+0x14d/0x260
[  489.804996][T10897]  ? vfs_write+0x9a0/0x9a0
[  489.809472][T10897]  ? lockdep_hardirqs_on+0x94/0x140
[  489.814885][T10897]  do_syscall_64+0x4c/0xa0
[  489.819328][T10897]  ? clear_bhb_loop+0x60/0xb0
[  489.824120][T10897]  ? clear_bhb_loop+0x60/0xb0
[  489.828828][T10897]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  489.834760][T10897] RIP: 0033:0x7f876815e98e
[  489.839208][T10897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  489.859100][T10897] RSP: 002b:00007f8769142fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  489.867557][T10897] RAX: ffffffffffffffda RBX: 00007f87691436c0 RCX: 00007f876815e98e
[  489.875922][T10897] RDX: 000000000000000f RSI: 00007f87691430a0 RDI: 0000000000000004
[  489.883936][T10897] RBP: 00007f8769143090 R08: 0000000000000000 R09: 0000000000000000
[  489.891966][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.899968][T10897] R13: 00007f8768426038 R14: 00007f8768425fa0 R15: 00007ffe881d2018
[  489.907978][T10897]  </TASK>
[  490.609796][T10915] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1988'.
[  491.352657][T10928] validate_nla: 6 callbacks suppressed
[  491.352745][T10928] netlink: 'syz.0.1996': attribute type 2 has an invalid length.
[  491.464750][T10928] netlink: 'syz.0.1996': attribute type 1 has an invalid length.
[  491.494368][T10928] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1996'.
[  491.771655][T10940] netlink: 'syz.3.2000': attribute type 1 has an invalid length.
[  491.793487][T10940] netlink: 'syz.3.2000': attribute type 1 has an invalid length.
[  491.862774][T10940] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2000'.
[  492.286026][T10952] netlink: 'syz.3.2003': attribute type 3 has an invalid length.
[  493.890072][T10964] netlink: 'syz.3.2006': attribute type 2 has an invalid length.
[  493.912039][T10964] netlink: 'syz.3.2006': attribute type 1 has an invalid length.
[  493.934694][T10964] __nla_validate_parse: 2 callbacks suppressed
[  493.934733][T10964] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2006'.
[  494.351872][T10982] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2014'.
[  494.815675][T10991] netlink: 'syz.4.2017': attribute type 2 has an invalid length.
[  494.842756][T10991] netlink: 'syz.4.2017': attribute type 1 has an invalid length.
[  494.925586][T10991] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2017'.
[  495.079843][T10995] netlink: 'syz.0.2018': attribute type 2 has an invalid length.
[  495.166992][T10995] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2018'.
[  497.403638][T11026] device syzkaller0 entered promiscuous mode
[  499.454775][T11057] validate_nla: 1 callbacks suppressed
[  499.454811][T11057] netlink: 'syz.0.2031': attribute type 2 has an invalid length.
[  499.481374][T11057] netlink: 'syz.0.2031': attribute type 1 has an invalid length.
[  499.510723][T11057] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2031'.
[  499.534501][T11059] netlink: 'syz.3.2034': attribute type 2 has an invalid length.
[  499.549487][T11059] netlink: 'syz.3.2034': attribute type 1 has an invalid length.
[  499.565737][T11059] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2034'.
[  500.000205][T11065] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2036'.
[  501.494616][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.501398][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.915240][T11065] netlink: 'syz.4.2036': attribute type 10 has an invalid length.
[  501.935283][T11065] team0: Device veth1_vlan failed to register rx_handler
[  502.085726][T11070] netlink: 'syz.0.2038': attribute type 28 has an invalid length.
[  502.118064][T11070] netlink: 'syz.0.2038': attribute type 3 has an invalid length.
[  502.142022][T11070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2038'.
[  502.186359][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2037'.
[  502.222124][T11076] netlink: 'syz.4.2040': attribute type 10 has an invalid length.
[  502.473658][T11079] device sit0 entered promiscuous mode
[  502.781124][T11081] netlink: 'syz.3.2043': attribute type 3 has an invalid length.
[  502.793866][T11081] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.2043'.
[  502.886800][T11088] netlink: 'syz.1.2041': attribute type 2 has an invalid length.
[  502.908400][T11088] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2041'.
[  504.108829][T11105] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2051'.
[  504.338482][T11105] team0: Device veth1_vlan failed to register rx_handler
[  504.504047][T11111] validate_nla: 2 callbacks suppressed
[  504.504069][T11111] netlink: 'syz.1.2050': attribute type 2 has an invalid length.
[  504.557627][T11111] netlink: 'syz.1.2050': attribute type 1 has an invalid length.
[  504.642781][T11111] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2050'.
[  504.760144][T11119] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2063'.
[  504.859912][T11119] netlink: 'syz.0.2063': attribute type 10 has an invalid length.
[  504.877693][T11119] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  505.241846][T11132] netlink: 'syz.1.2054': attribute type 2 has an invalid length.
[  505.358369][T11132] netlink: 'syz.1.2054': attribute type 1 has an invalid length.
[  505.423558][T11132] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2054'.
[  506.000944][T11137] netlink: 'syz.2.2056': attribute type 29 has an invalid length.
[  507.367795][T11119] batman_adv: batadv0: Removing interface: veth1_vlan
[  507.382761][T11119] team0: Device veth1_vlan failed to register rx_handler
[  507.428018][T11137] netlink: 'syz.2.2056': attribute type 29 has an invalid length.
[  508.324122][T11145] netlink: 'syz.2.2057': attribute type 21 has an invalid length.
[  508.334626][T11145] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2057'.
[  508.357268][T11151] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2062'.
[  508.387606][T11153] netlink: 'syz.1.2064': attribute type 10 has an invalid length.
[  508.396119][T11153] team0: Device wlan1 is up. Set it down before adding it as a team port
[  509.122712][T11175] netlink: 'syz.3.2071': attribute type 2 has an invalid length.
[  509.141705][T11175] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2071'.
[  510.340413][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'.
[  510.366176][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'.
[  510.388761][T11189] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2073'.
[  510.513724][T11204] netlink: 'syz.2.2076': attribute type 10 has an invalid length.
[  510.528179][T11204] team0: Device bridge0 is up. Set it down before adding it as a team port
[  510.560796][T11205] netlink: 'syz.0.2077': attribute type 21 has an invalid length.
[  510.587368][T11205] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2077'.
[  511.377547][T11210] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2079'.
[  513.986773][T11255] netlink: 'syz.1.2090': attribute type 21 has an invalid length.
[  514.017174][T11255] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2090'.
[  515.464229][T11283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2099'.
[  515.587540][T11284] netlink: 'syz.3.2100': attribute type 39 has an invalid length.
[  515.864818][T11294] netlink: 'syz.0.2103': attribute type 2 has an invalid length.
[  515.898417][T11294] netlink: 'syz.0.2103': attribute type 1 has an invalid length.
[  515.917818][T11294] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2103'.
[  516.312189][T11299] netlink: 'syz.0.2106': attribute type 21 has an invalid length.
[  516.331400][T11299] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2106'.
[  516.526378][T11314] FAULT_INJECTION: forcing a failure.
[  516.526378][T11314] name failslab, interval 1, probability 0, space 0, times 0
[  516.561047][T11314] CPU: 0 PID: 11314 Comm: syz.1.2112 Not tainted syzkaller #0
[  516.568631][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  516.578770][T11314] Call Trace:
[  516.582121][T11314]  <TASK>
[  516.585126][T11314]  dump_stack_lvl+0x188/0x24e
[  516.589896][T11314]  ? show_regs_print_info+0x12/0x12
[  516.595174][T11314]  ? load_image+0x410/0x410
[  516.599779][T11314]  ? __might_sleep+0xd0/0xd0
[  516.604452][T11314]  ? __lock_acquire+0x7c40/0x7c40
[  516.609584][T11314]  should_fail_ex+0x390/0x4c0
[  516.614381][T11314]  should_failslab+0x5/0x20
[  516.618970][T11314]  slab_pre_alloc_hook+0x59/0x300
[  516.624154][T11314]  ? ___sys_sendmsg+0x2a2/0x360
[  516.629085][T11314]  ? __se_sys_sendmsg+0x1c3/0x2b0
[  516.634180][T11314]  ? do_syscall_64+0x4c/0xa0
[  516.638837][T11314]  kmem_cache_alloc_node+0x5a/0x310
[  516.644100][T11314]  ? __alloc_skb+0xf9/0x7d0
[  516.648780][T11314]  __alloc_skb+0xf9/0x7d0
[  516.653196][T11314]  netlink_dump+0x1e1/0xcd0
[  516.657874][T11314]  ? netlink_lookup+0x200/0x200
[  516.662803][T11314]  ? memcpy+0x3c/0x60
[  516.667017][T11314]  ? genl_start+0x2d7/0x490
[  516.671692][T11314]  __netlink_dump_start+0x52c/0x6f0
[  516.676959][T11314]  genl_family_rcv_msg_dumpit+0x228/0x3c0
[  516.682771][T11314]  ? genl_rcv_msg+0x790/0x790
[  516.687523][T11314]  ? aa_get_newest_label+0xf9/0x5b0
[  516.692828][T11314]  ? end_current_label_crit_section+0x170/0x170
[  516.699212][T11314]  ? genl_family_rcv_msg_doit+0x350/0x350
[  516.705028][T11314]  ? genl_start+0x490/0x490
[  516.709593][T11314]  ? genl_lock_dumpit+0x90/0x90
[  516.714586][T11314]  ? apparmor_capable+0x12c/0x190
[  516.719706][T11314]  ? bpf_lsm_capable+0x5/0x10
[  516.724434][T11314]  ? security_capable+0x85/0xb0
[  516.729356][T11314]  genl_rcv_msg+0x5c8/0x790
[  516.733973][T11314]  ? genl_bind+0x360/0x360
[  516.738492][T11314]  ? batadv_gw_node_free+0x410/0x410
[  516.744024][T11314]  netlink_rcv_skb+0x1ef/0x440
[  516.748885][T11314]  ? genl_bind+0x360/0x360
[  516.753401][T11314]  ? netlink_ack+0x1160/0x1160
[  516.758290][T11314]  ? down_read+0x1a8/0x2d0
[  516.762773][T11314]  genl_rcv+0x24/0x40
[  516.766824][T11314]  netlink_unicast+0x7ad/0x920
[  516.771687][T11314]  netlink_sendmsg+0x8ad/0xbd0
[  516.776565][T11314]  ? netlink_getsockopt+0x550/0x550
[  516.781848][T11314]  ? apparmor_socket_sendmsg+0x16c/0x330
[  516.787586][T11314]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  516.792939][T11314]  ? security_socket_sendmsg+0x7c/0xa0
[  516.798477][T11314]  ? netlink_getsockopt+0x550/0x550
[  516.803750][T11314]  ____sys_sendmsg+0x5ed/0x9a0
[  516.808632][T11314]  ? __sys_sendmsg_sock+0x30/0x30
[  516.813724][T11314]  ? __import_iovec+0x306/0x510
[  516.818664][T11314]  ? import_iovec+0x6f/0xa0
[  516.823237][T11314]  ___sys_sendmsg+0x2a2/0x360
[  516.827993][T11314]  ? __sys_sendmsg+0x2a0/0x2a0
[  516.832871][T11314]  ? __lock_acquire+0x7c40/0x7c40
[  516.838038][T11314]  __se_sys_sendmsg+0x1c3/0x2b0
[  516.842968][T11314]  ? __x64_sys_sendmsg+0x80/0x80
[  516.847995][T11314]  ? lockdep_hardirqs_on+0x94/0x140
[  516.853279][T11314]  do_syscall_64+0x4c/0xa0
[  516.857769][T11314]  ? clear_bhb_loop+0x60/0xb0
[  516.862516][T11314]  ? clear_bhb_loop+0x60/0xb0
[  516.867269][T11314]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.873238][T11314] RIP: 0033:0x7f59ad59e159
[  516.877718][T11314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.897382][T11314] RSP: 002b:00007f59ae542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  516.905928][T11314] RAX: ffffffffffffffda RBX: 00007f59ad825fa0 RCX: 00007f59ad59e159
[  516.913972][T11314] RDX: 0000000024000010 RSI: 0000200000000100 RDI: 0000000000000005
[  516.922015][T11314] RBP: 00007f59ae542090 R08: 0000000000000000 R09: 0000000000000000
[  516.930205][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.938269][T11314] R13: 00007f59ad826038 R14: 00007f59ad825fa0 R15: 00007ffd340fa508
[  516.946370][T11314]  </TASK>
[  518.252070][T11334] netlink: 'syz.1.2117': attribute type 2 has an invalid length.
[  518.267411][T11334] netlink: 'syz.1.2117': attribute type 1 has an invalid length.
[  518.286795][T11334] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2117'.
[  518.994474][T11336] netlink: 'syz.3.2119': attribute type 20 has an invalid length.
[  519.181823][T11343] netlink: 'syz.2.2121': attribute type 21 has an invalid length.
[  519.207810][T11343] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2121'.
[  519.969990][T11359] netlink: 'syz.2.2126': attribute type 21 has an invalid length.
[  520.015035][T11359] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2126'.
[  520.660823][T11368] netlink: 'syz.3.2128': attribute type 2 has an invalid length.
[  520.673144][T11368] netlink: 'syz.3.2128': attribute type 1 has an invalid length.
[  520.689871][T11368] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2128'.
[  520.845759][T11374] netlink: 'syz.0.2130': attribute type 2 has an invalid length.
[  520.879132][T11374] netlink: 'syz.0.2130': attribute type 1 has an invalid length.
[  520.896964][T11374] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2130'.
[  521.052872][T11383] netlink: 'syz.2.2131': attribute type 2 has an invalid length.
[  521.100710][T11383] netlink: 'syz.2.2131': attribute type 8 has an invalid length.
[  521.128184][T11383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2131'.
[  521.212151][T11381] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2133'.
[  521.969889][T11398] netlink: 'syz.3.2136': attribute type 21 has an invalid length.
[  522.007241][T11398] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2136'.
[  522.065655][T11406] FAULT_INJECTION: forcing a failure.
[  522.065655][T11406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  522.125390][T11406] CPU: 0 PID: 11406 Comm: syz.1.2139 Not tainted syzkaller #0
[  522.132952][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  522.143053][T11406] Call Trace:
[  522.146372][T11406]  <TASK>
[  522.149345][T11406]  dump_stack_lvl+0x188/0x24e
[  522.154073][T11406]  ? show_regs_print_info+0x12/0x12
[  522.159318][T11406]  ? load_image+0x410/0x410
[  522.163873][T11406]  ? __lock_acquire+0x7c40/0x7c40
[  522.168987][T11406]  should_fail_ex+0x390/0x4c0
[  522.173762][T11406]  _copy_from_user+0x2c/0x170
[  522.178519][T11406]  iovec_from_user+0x143/0x360
[  522.183345][T11406]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  522.189561][T11406]  __import_iovec+0x6c/0x510
[  522.194248][T11406]  import_iovec+0x6f/0xa0
[  522.198646][T11406]  ___sys_sendmsg+0x252/0x360
[  522.203466][T11406]  ? __sys_sendmsg+0x2a0/0x2a0
[  522.208291][T11406]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  522.214078][T11406]  __se_sys_sendmsg+0x1c3/0x2b0
[  522.218965][T11406]  ? __x64_sys_sendmsg+0x80/0x80
[  522.224033][T11406]  ? syscall_enter_from_user_mode+0x2a/0x80
[  522.229976][T11406]  do_syscall_64+0x4c/0xa0
[  522.234415][T11406]  ? clear_bhb_loop+0x60/0xb0
[  522.239121][T11406]  ? clear_bhb_loop+0x60/0xb0
[  522.243833][T11406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  522.249791][T11406] RIP: 0033:0x7f59ad59e159
[  522.254273][T11406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.273974][T11406] RSP: 002b:00007f59ae542028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  522.282425][T11406] RAX: ffffffffffffffda RBX: 00007f59ad825fa0 RCX: 00007f59ad59e159
[  522.290528][T11406] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000007
[  522.298540][T11406] RBP: 00007f59ae542090 R08: 0000000000000000 R09: 0000000000000000
[  522.306653][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.314655][T11406] R13: 00007f59ad826038 R14: 00007f59ad825fa0 R15: 00007ffd340fa508
[  522.322753][T11406]  </TASK>
[  522.533838][T11415] netlink: 'syz.3.2140': attribute type 21 has an invalid length.
[  522.547741][T11415] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'.
[  522.583245][T11419] netlink: 'syz.0.2141': attribute type 1 has an invalid length.
[  522.617214][T11419] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.2141'.
[  523.891350][T11425] bridge0: port 4(ip6gretap0) entered blocking state
[  523.907707][T11425] bridge0: port 4(ip6gretap0) entered disabled state
[  523.932655][T11425] device ip6gretap0 entered promiscuous mode
[  523.949642][T11425] bridge0: port 4(ip6gretap0) entered blocking state
[  523.956571][T11425] bridge0: port 4(ip6gretap0) entered forwarding state
[  524.085013][T11434] netlink: 'syz.3.2144': attribute type 2 has an invalid length.
[  524.094021][T11434] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2144'.
[  524.392991][T11363] device syzkaller0 entered promiscuous mode
[  524.618588][T11433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2145'.
[  525.051065][T11448] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2148'.
[  527.166119][T11440] validate_nla: 3 callbacks suppressed
[  527.166137][T11440] netlink: 'syz.1.2146': attribute type 19 has an invalid length.
[  527.180263][T11440] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2146'.
[  527.197144][T11450] netlink: 'syz.3.2150': attribute type 21 has an invalid length.
[  527.205129][T11450] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2150'.
[  527.359592][T11453] netlink: 'syz.3.2155': attribute type 10 has an invalid length.
[  527.516687][T11455] netlink: 'syz.0.2152': attribute type 2 has an invalid length.
[  527.538694][T11455] netlink: 'syz.0.2152': attribute type 1 has an invalid length.
[  527.558526][T11455] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2152'.
[  527.605889][T11465] netlink: 'syz.4.2154': attribute type 21 has an invalid length.
[  527.617272][T11465] netlink: 'syz.4.2154': attribute type 11 has an invalid length.
[  527.666351][T11474] netlink: 'syz.4.2154': attribute type 21 has an invalid length.
[  527.707279][T11474] netlink: 'syz.4.2154': attribute type 11 has an invalid length.
[  527.880727][T11476] netlink: 'syz.0.2159': attribute type 2 has an invalid length.
[  527.890953][T11476] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2159'.
[  528.252467][T11496] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2164'.
[  528.856718][T11513] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2170'.
[  529.033760][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2173'.
[  529.129094][T11519] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2172'.
[  529.223487][T11523] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2174'.
[  529.459680][T11530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.471461][T11530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.664863][T11535] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2178'.
[  530.152538][T11547] device team0 entered promiscuous mode
[  530.161381][T11547] device team_slave_0 entered promiscuous mode
[  530.179587][T11547] device team_slave_1 entered promiscuous mode
[  530.186205][T11547] device geneve1 entered promiscuous mode
[  530.209145][T11547] bridge0: port 1(team0) entered blocking state
[  530.226322][T11547] bridge0: port 1(team0) entered disabled state
[  530.246107][T11547] bridge0: port 1(team0) entered blocking state
[  530.252641][T11547] bridge0: port 1(team0) entered forwarding state
[  531.566512][T11583] IPv6: NLM_F_CREATE should be specified when creating new route
[  532.471906][T11502] device syzkaller0 entered promiscuous mode
[  532.634649][T11594] validate_nla: 22 callbacks suppressed
[  532.634742][T11594] netlink: 'syz.4.2195': attribute type 21 has an invalid length.
[  532.687520][T11594] __nla_validate_parse: 5 callbacks suppressed
[  532.687569][T11594] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2195'.
[  533.116976][T11623] netlink: 'syz.2.2203': attribute type 2 has an invalid length.
[  533.175366][T11623] netlink: 'syz.2.2203': attribute type 1 has an invalid length.
[  533.218987][T11623] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2203'.
[  537.528169][T11626] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2205'.
[  537.849468][T11630] netlink: 'syz.2.2207': attribute type 2 has an invalid length.
[  537.866359][T11630] netlink: 'syz.2.2207': attribute type 1 has an invalid length.
[  537.878486][T11630] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2207'.
[  538.612770][T11642] netlink: 'syz.0.2210': attribute type 10 has an invalid length.
[  538.625047][T11642] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  538.661802][T11642] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  538.673004][T11642] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  538.999014][T11653] netlink: 'syz.4.2214': attribute type 21 has an invalid length.
[  539.027368][T11653] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2214'.
[  539.404457][T11670] netlink: 'syz.4.2219': attribute type 2 has an invalid length.
[  539.459786][T11670] netlink: 'syz.4.2219': attribute type 1 has an invalid length.
[  539.515825][T11670] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2219'.
[  540.875759][T11678] netlink: 'syz.1.2221': attribute type 21 has an invalid length.
[  540.894062][T11678] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2221'.
[  540.991776][T11680] netlink: 'syz.2.2222': attribute type 2 has an invalid length.
[  541.045131][T11680] netlink: 'syz.2.2222': attribute type 1 has an invalid length.
[  541.085944][T11680] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2222'.
[  541.710668][T11692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2227'.
[  541.747372][T11694] netlink: 'syz.1.2227': attribute type 10 has an invalid length.
[  541.774708][T11694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2227'.
[  541.803422][T11694] bond0: (slave team0): Releasing backup interface
[  541.872731][T11694] bridge0: port 3(team0) entered blocking state
[  541.904340][T11694] bridge0: port 3(team0) entered disabled state
[  541.925160][T11694] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  541.945032][T11699] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2229'.
[  541.962711][ T4290] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  542.058165][T11703] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2230'.
[  542.219646][T11714] FAULT_INJECTION: forcing a failure.
[  542.219646][T11714] name failslab, interval 1, probability 0, space 0, times 0
[  542.282987][T11714] CPU: 0 PID: 11714 Comm: syz.3.2235 Not tainted syzkaller #0
[  542.290537][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  542.300638][T11714] Call Trace:
[  542.303986][T11714]  <TASK>
[  542.306972][T11714]  dump_stack_lvl+0x188/0x24e
[  542.311703][T11714]  ? show_regs_print_info+0x12/0x12
[  542.316960][T11714]  ? load_image+0x410/0x410
[  542.321566][T11714]  ? __might_sleep+0xd0/0xd0
[  542.326561][T11714]  ? __lock_acquire+0x7c40/0x7c40
[  542.331648][T11714]  ? __lock_acquire+0x138a/0x7c40
[  542.336743][T11714]  should_fail_ex+0x390/0x4c0
[  542.341500][T11714]  should_failslab+0x5/0x20
[  542.346052][T11714]  slab_pre_alloc_hook+0x59/0x300
[  542.351157][T11714]  kmem_cache_alloc_node+0x5a/0x310
[  542.356440][T11714]  ? __alloc_skb+0xf9/0x7d0
[  542.360996][T11714]  __alloc_skb+0xf9/0x7d0
[  542.365384][T11714]  alloc_skb_with_frags+0xa7/0x710
[  542.370572][T11714]  sock_alloc_send_pskb+0x87f/0x9a0
[  542.375851][T11714]  ? sock_kzfree_s+0x50/0x50
[  542.380537][T11714]  ? __lock_acquire+0x7c40/0x7c40
[  542.385630][T11714]  ? sock_def_readable+0x1e/0x280
[  542.390712][T11714]  ? sock_def_readable+0x226/0x280
[  542.395894][T11714]  unix_stream_sendmsg+0x431/0xa70
[  542.401194][T11714]  ? unix_show_fdinfo+0x2c0/0x2c0
[  542.406278][T11714]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  542.412756][T11714]  ? apparmor_socket_sendmsg+0x8a/0x330
[  542.418367][T11714]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  542.423707][T11714]  ? security_socket_sendmsg+0x7c/0xa0
[  542.429219][T11714]  ? unix_show_fdinfo+0x2c0/0x2c0
[  542.434305][T11714]  ____sys_sendmsg+0x5ed/0x9a0
[  542.439128][T11714]  ? __sys_sendmsg_sock+0x30/0x30
[  542.444204][T11714]  ? __import_iovec+0x306/0x510
[  542.449124][T11714]  ? import_iovec+0x6f/0xa0
[  542.453690][T11714]  ___sys_sendmsg+0x2a2/0x360
[  542.458423][T11714]  ? __sys_sendmsg+0x2a0/0x2a0
[  542.463256][T11714]  ? __lock_acquire+0x7c40/0x7c40
[  542.468396][T11714]  __se_sys_sendmsg+0x1c3/0x2b0
[  542.473298][T11714]  ? __x64_sys_sendmsg+0x80/0x80
[  542.478306][T11714]  ? lockdep_hardirqs_on+0x94/0x140
[  542.483563][T11714]  do_syscall_64+0x4c/0xa0
[  542.488029][T11714]  ? clear_bhb_loop+0x60/0xb0
[  542.492765][T11714]  ? clear_bhb_loop+0x60/0xb0
[  542.497490][T11714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.503443][T11714] RIP: 0033:0x7fd5c7d9e159
[  542.507901][T11714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.527727][T11714] RSP: 002b:00007fd5c8cb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.536221][T11714] RAX: ffffffffffffffda RBX: 00007fd5c8025fa0 RCX: 00007fd5c7d9e159
[  542.544244][T11714] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003
[  542.552440][T11714] RBP: 00007fd5c8cb8090 R08: 0000000000000000 R09: 0000000000000000
[  542.560472][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  542.568519][T11714] R13: 00007fd5c8026038 R14: 00007fd5c8025fa0 R15: 00007ffd99d6aa88
[  542.576558][T11714]  </TASK>
[  543.286247][T11732] validate_nla: 3 callbacks suppressed
[  543.286288][T11732] netlink: 'syz.0.2241': attribute type 2 has an invalid length.
[  543.335565][T11732] netlink: 'syz.0.2241': attribute type 1 has an invalid length.
[  543.365155][T11732] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2241'.
[  543.968095][T11739] FAULT_INJECTION: forcing a failure.
[  543.968095][T11739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.006774][T11744] netlink: 'syz.1.2244': attribute type 21 has an invalid length.
[  544.007980][T11739] CPU: 1 PID: 11739 Comm: syz.2.2243 Not tainted syzkaller #0
[  544.022573][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  544.032672][T11739] Call Trace:
[  544.035992][T11739]  <TASK>
[  544.038968][T11739]  dump_stack_lvl+0x188/0x24e
[  544.043717][T11739]  ? show_regs_print_info+0x12/0x12
[  544.047863][T11744] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2244'.
[  544.048980][T11739]  ? load_image+0x410/0x410
[  544.049022][T11739]  ? __lock_acquire+0x7c40/0x7c40
[  544.049053][T11739]  ? __local_bh_enable_ip+0x136/0x1c0
[  544.049078][T11739]  ? _local_bh_enable+0xa0/0xa0
[  544.049102][T11739]  should_fail_ex+0x390/0x4c0
[  544.049141][T11739]  copy_fpstate_to_sigframe+0xaae/0xd70
[  544.049205][T11739]  ? copy_fpstate_to_sigframe+0x26a/0xd70
[  544.049238][T11739]  ? fpregs_set+0x5f0/0x5f0
[  544.049265][T11739]  ? ct_irq_exit_irqson+0x113/0x170
[  544.049354][T11739]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  544.049389][T11739]  ? lock_chain_count+0x20/0x20
[  544.049425][T11739]  ? arch_do_signal_or_restart+0x23b/0x1310
[  544.049460][T11739]  ? fpu__alloc_mathframe+0xa3/0x120
[  544.049488][T11739]  arch_do_signal_or_restart+0x67a/0x1310
[  544.049529][T11739]  ? __fget_files+0x3fc/0x460
[  544.049567][T11739]  ? get_sigframe_size+0x10/0x10
[  544.049598][T11739]  ? fput+0x150/0x1a0
[  544.049641][T11739]  ? exit_to_user_mode_loop+0x3b/0x110
[  544.049686][T11739]  exit_to_user_mode_loop+0x70/0x110
[  544.049719][T11739]  exit_to_user_mode_prepare+0xee/0x180
[  544.049753][T11739]  syscall_exit_to_user_mode+0x16/0x40
[  544.049782][T11739]  do_syscall_64+0x58/0xa0
[  544.049800][T11739]  ? clear_bhb_loop+0x60/0xb0
[  544.049819][T11739]  ? clear_bhb_loop+0x60/0xb0
[  544.049845][T11739]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.049880][T11739] RIP: 0033:0x7fcffb59e159
[  544.049901][T11739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.049922][T11739] RSP: 002b:00007fcff97f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  544.049948][T11739] RAX: fffffffffffffffc RBX: 00007fcffb825fa0 RCX: 00007fcffb59e159
[  544.049966][T11739] RDX: 0000000000000100 RSI: 0000200000000000 RDI: 0000000000000003
[  544.049980][T11739] RBP: 00007fcff97f6090 R08: 0000000000000000 R09: 0000000000000000
[  544.049996][T11739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.050009][T11739] R13: 00007fcffb826038 R14: 00007fcffb825fa0 R15: 00007ffce614e8a8
[  544.050043][T11739]  </TASK>
[  544.500217][    C0] 
[  544.500227][    C0] ================================
[  544.500262][    C0] WARNING: inconsistent lock state
[  544.500281][    C0] syzkaller #0 Not tainted
[  544.500290][    C0] --------------------------------
[  544.500296][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  544.500304][    C0] syz.3.2247/11751 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  544.500325][    C0] ffff88805635c4a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0
[  544.500381][    C0] {INITIAL USE} state was registered at:
[  544.500388][    C0]   lock_acquire+0x1bb/0x4a0
[  544.500414][    C0]   _raw_spin_lock+0x2a/0x40
[  544.500441][    C0]   htab_lock_bucket+0x179/0x2f0
[  544.500461][    C0]   __htab_lru_percpu_map_update_elem+0x26e/0x970
[  544.500485][    C0]   bpf_percpu_hash_update+0x115/0x200
[  544.500505][    C0]   bpf_map_update_value+0x30f/0x670
[  544.500529][    C0]   map_update_elem+0x4fa/0x6a0
[  544.500554][    C0]   __sys_bpf+0x4ec/0x780
[  544.500578][    C0]   __x64_sys_bpf+0x78/0x90
[  544.500601][    C0]   do_syscall_64+0x4c/0xa0
[  544.500619][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.500656][    C0] irq event stamp: 1860
[  544.500663][    C0] hardirqs last  enabled at (1859): [<ffffffff8a328ee1>] syscall_enter_from_user_mode+0x21/0x80
[  544.500696][    C0] hardirqs last disabled at (1860): [<ffffffff8a325bce>] exc_debug+0x6e/0x130
[  544.500721][    C0] softirqs last  enabled at (1834): [<ffffffff81911bc7>] bpf_map_alloc_id+0x87/0xd0
[  544.500754][    C0] softirqs last disabled at (1832): [<ffffffff81911b61>] bpf_map_alloc_id+0x21/0xd0
[  544.500786][    C0] 
[  544.500786][    C0] other info that might help us debug this:
[  544.500792][    C0]  Possible unsafe locking scenario:
[  544.500792][    C0] 
[  544.500796][    C0]        CPU0
[  544.500799][    C0]        ----
[  544.500802][    C0]   lock(&htab->lockdep_key);
[  544.500814][    C0]   <Interrupt>
[  544.500818][    C0]     lock(&htab->lockdep_key);
[  544.500829][    C0] 
[  544.500829][    C0]  *** DEADLOCK ***
[  544.500829][    C0] 
[  544.500833][    C0] no locks held by syz.3.2247/11751.
[  544.500841][    C0] 
[  544.500841][    C0] stack backtrace:
[  544.500846][    C0] CPU: 0 PID: 11751 Comm: syz.3.2247 Not tainted syzkaller #0
[  544.500864][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  544.500876][    C0] Call Trace:
[  544.500882][    C0]  <#DB>
[  544.500889][    C0]  dump_stack_lvl+0x188/0x24e
[  544.500912][    C0]  ? show_regs_print_info+0x12/0x12
[  544.500936][    C0]  ? print_usage_bug+0x42a/0x690
[  544.500963][    C0]  ? verify_lock_unused+0x15/0x140
[  544.500992][    C0]  lock_acquire+0x2df/0x4a0
[  544.501021][    C0]  ? htab_lock_bucket+0x179/0x2f0
[  544.501045][    C0]  ? read_lock_is_recursive+0x10/0x10
[  544.501079][    C0]  _raw_spin_lock+0x2a/0x40
[  544.501105][    C0]  ? htab_lock_bucket+0x179/0x2f0
[  544.501127][    C0]  htab_lock_bucket+0x179/0x2f0
[  544.501151][    C0]  ? htab_lru_map_delete_node+0x610/0x610
[  544.501175][    C0]  ? look_up_lock_class+0x75/0x140
[  544.501201][    C0]  ? verify_lock_unused+0x15/0x140
[  544.501228][    C0]  ? htab_map_hash+0x2ed/0x6d0
[  544.501259][    C0]  htab_lru_map_delete_elem+0x1a1/0x760
[  544.501282][    C0]  ? bpf_overflow_handler+0xd9/0x790
[  544.501306][    C0]  ? htab_lru_map_update_elem+0xe60/0xe60
[  544.501333][    C0]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[  544.501353][    C0]  bpf_overflow_handler+0x6d1/0x790
[  544.501378][    C0]  ? bpf_overflow_handler+0xd9/0x790
[  544.501399][    C0]  ? perf_swevent_overflow+0x230/0x230
[  544.501425][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  544.501458][    C0]  __perf_event_overflow+0x457/0x630
[  544.501491][    C0]  perf_swevent_event+0x315/0x570
[  544.501522][    C0]  ? perf_tp_event+0xc10/0xc10
[  544.501557][    C0]  perf_bp_event+0x311/0x3f0
[  544.501588][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  544.501632][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  544.501664][    C0]  ? read_lock_is_recursive+0x10/0x10
[  544.501695][    C0]  hw_breakpoint_exceptions_notify+0x14d/0x470
[  544.501786][    C0]  atomic_notifier_call_chain+0x17a/0x2b0
[  544.501809][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  544.501833][    C0]  notify_die+0x141/0x1a0
[  544.501857][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  544.501887][    C0]  notify_debug+0x20/0x30
[  544.501911][    C0]  exc_debug+0xd9/0x130
[  544.501933][    C0]  asm_exc_debug+0x1a/0x40
[  544.501950][    C0] RIP: 0010:copy_user_short_string+0x26/0x40
[  544.501972][    C0] Code: 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 88 07 <48> ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb 02 89
[  544.501989][    C0] RSP: 0018:ffffc90005e07ba8 EFLAGS: 00040206
[  544.502005][    C0] RAX: ffffffff84164700 RBX: 0000000000000005 RCX: 0000000000000005
[  544.502018][    C0] RDX: 0000000000000005 RSI: ffff88807e006844 RDI: 0000200000000300
[  544.502031][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[  544.502041][    C0] R10: dffffc0000000000 R11: ffffed100fc00d09 R12: 00007fffffffeffb
[  544.502056][    C0] R13: 1ffff92000bc0f90 R14: 0000200000000300 R15: ffff88807e006844
[  544.502074][    C0]  ? _copy_to_user+0xb0/0x130
[  544.502100][    C0]  </#DB>
[  544.502105][    C0]  <TASK>
[  544.502110][    C0]  _copy_to_user+0xea/0x130
[  544.502132][    C0]  generic_map_lookup_batch+0x829/0xbf0
[  544.502165][    C0]  ? bpf_map_update_value+0x670/0x670
[  544.502193][    C0]  ? __fdget+0x17c/0x200
[  544.502222][    C0]  ? bpf_map_update_value+0x670/0x670
[  544.502270][    C0]  bpf_map_do_batch+0x2e0/0x5f0
[  544.502297][    C0]  ? bpf_lsm_bpf+0x5/0x10
[  544.502317][    C0]  ? security_bpf+0x7a/0xa0
[  544.502348][    C0]  __sys_bpf+0x6f7/0x780
[  544.502374][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[  544.502407][    C0]  ? lock_chain_count+0x20/0x20
[  544.502435][    C0]  __x64_sys_bpf+0x78/0x90
[  544.502461][    C0]  do_syscall_64+0x4c/0xa0
[  544.502479][    C0]  ? clear_bhb_loop+0x60/0xb0
[  544.502498][    C0]  ? clear_bhb_loop+0x60/0xb0
[  544.502517][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.502548][    C0] RIP: 0033:0x7fd5c7d9e159
[  544.502564][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.502581][    C0] RSP: 002b:00007fd5c8cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  544.502599][    C0] RAX: ffffffffffffffda RBX: 00007fd5c8025fa0 RCX: 00007fd5c7d9e159
[  544.502611][    C0] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  544.502623][    C0] RBP: 00007fd5c7e3506b R08: 0000000000000000 R09: 0000000000000000
[  544.502634][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  544.502645][    C0] R13: 00007fd5c8026038 R14: 00007fd5c8025fa0 R15: 00007ffd99d6aa88
[  544.502666][    C0]  </TASK>
[  544.503264][T11752] netlink: 'syz.2.2248': attribute type 2 has an invalid length.
[  545.187443][T11752] netlink: 'syz.2.2248': attribute type 1 has an invalid length.
[  545.195866][T11752] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2248'.