last executing test programs:

6.583284407s ago: executing program 2 (id=4503):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg(r1, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=ANY=[@ANYBLOB="08010000000000000d01000009000000eb0c43bdbe6c9a77f3c6b2032bde524113e8bd25d53e8c20c2f61bc738ba9c532a6e26f25dc77675f9b87bea354bc8eb64712589a457e855d8d08dfec5dac0a2e7b1ad2c4d6bacbf5b8e53ac2947ac81fc5c29385fe10678e1bd866fe16b75374bd8aac42a96bf7e710213d60c429fe8d157427c5b2142d1663f6cc3e7d13a59100d9abacf1383340c16287e37a4017c506d33ccac2cffa1fbb8d58fd87b60fbd6f63b042986a92467b2fff2e29eab954d3b72de803be614879717ea150f28f3d663ed476f16d498e0bc0f2687ba20fe44f0aaf0ac38b54a16f7bc932035ede6f524c69c1a860429726f042c8c04c558d5000000000000001010000000000000110000000f00000035d643cffac74fc53d79e0286e2e8bae6cd66f7fcfc5b6edf92e5fd3479f3f1cf7fb544a10907b1bef42df2898499b685fa91acf3555387132b22b2ab835f3e5f43074c75ff83224d07731b9712b9602609afb797a52cae6c4f7e56b5043fcd7abd5d6e83f1221d40a7537e917cbfc1714ccb8df16e71d551e423276aade0db2c2fd73f2a64549e1cf19dd8ae23654d387c9bb0b0084aba02442b92cb844b68d12d2c6d28dc8404268ccada31688460bab5b54909075985ae2c5d78bc55afca7669ab426c0cf75789a05b9e963f808504780eba227dfea79dc44275fe7ae8e345f9a9ff3374985c74ae7ac3dd70bfe666e89eb33e8cedd41260f58a22b1eea0e02c88388085bdbeaa8cdca2b5543db7da184cd58a4e77ac3fc277aa58baea1d914ed5a0d1806c13cef4b12d7858d8836217b9dc25018ae1204fb77946c91acb41ffc9776e45683b1fa778b23bd4314141880abc10fa854c862be981081657d836d518608bd371137803ceaab1e546fda2aece9bea665e75f602b382d05de03b6b468f727050944e4cc933cebf29414587bae62e51830e9a0c925f2ae17e0fc2e932ab16db82dd1174ce39e487f656efd3994cf23fbc5272249e0ad6a298669b281e2a72d3a549f2e1a6137da9e9c673e464f6c0b693c2a96ba6c6cf85527dfd98aa191f83ce1affdfc118a398865e63235dbea0d2703f6b2c7ece2641266e379c66a60e16eecf763eb4a760aa21e0188b99716befae7db16d1bc5561423f58eaa5945b3145ec569097950836b5b1355bfa12314bb808b2faf139610a9319aebe240870c189ec3235172d6ee798981eb17978d24e3337f274d2d0402ab3bb2849eb5b4fa5895e6d914142e7073f0c13e959dcd156ce73240a66e010324b5d7066d57e37f94f2180d7a24054d077a047635fcf372c7c3e7b7797f7bdf520e67a0888f075c1de4b54ba18fbde63daade25dc98fa32bc08313960e314fee8c7c3c19d20f7d0f351c9a329780cac535259e7e7f3ac1be1458aabe714dd7e1b8ac4f293bba421350b21dfab098f64e2faafa67a346ac917ce881d340b53d437e3ef3f905fbad77d567465e7e748ff8ed59728ed51bfbf0570647da29c2d63c659fc568226dbed68e705f761c8aa6b8594b90a06a913682112f65330fbaf4efe543e595f6990668953dd0fde19e763815917f1d48103b598f662e58456fd0990683a62179fd00daa90e229b419cfb966e8f38c9cdb9b4f48d03216ab9bce873b5e0e627d6b4e9e95c8faf145578b795bfd49492e272418711fe3484d319d4c06223546760f7451c8300ef75ee221b7a3935fa928834b2846a3213b679b00c5fc857314faf50976163d1ba94d2f9dd6e42fb566706bcce23741d7bfb5ecfaed0a339dc52e67662c7c7593c7651ad38ca75cd04cad79ea05a433a53e720a2460e2e2bd88d9154b365be4e00ceb7defebda8ec3b2d8dd41fa93dfd8a8f3f2bdfb97e560bf3707c483545f735623c609c75d9ccdd0cb78e792713b90719e28882fcdf39241b41fb897363c02d62459af37c55cb761b70e1a72d6c8bef98e9c303899ff90b4687a8f2aa4687c919a3bc7a73b7070b60b98fbcfbc28524f35797fd3ed5c679de5e29eaf9e0e494b900c2f29d24eb3ce03a08ffa2f10f8aa14db7834bae6d92b99a5234ca7444344cb241006d5981d5cedf324678547574c2452f4dcf35617ee5eed8d93be3d8c454f960b74b6cdc418a2c80a665d488dc2074e22b29cbb3612ce53db51e45f4f51e3bb2a02570eb9c3c211ea2df0542d0d36e0ea259b0f0d58dbb4c607ea598f46be2fe0621bc1189a21d358074e8d2e40e0006cd8a39e5050e3c0ae355c6d72f220f09f015df1cd58a2e313a5c8defb5a7af1341552128f519c6faa1c9d931b4b8b2d9d6b1a6d9a0c861ee8d065ce5936d1883dd72ba48c47b161e597c95b2e96d0d79bcf0e21187e06282984ab08d62f2dc79f8df127d702ece77664a6c21fb417dfe4f578a6666e47095abfc284617a473f4b1d8e10a80337a407194dfc10c6c3fc4f099dd2e8adacad5acc430a39d79bc83db07f1ffa24ecbe00def877610b65e41c5bc5e6e2b4c9ea2cc663f05427d10e1d36d2c5204183e166902f5849c31992c78ebfd6045439f27c5c71d7979c83710720249c552fd33673b25dff5b8bef68989db8eaa825ec16dd1cab0b84e6d1bee5ecf79ed6138f3b596e445a367b708de740f86904c0cca0b2d587242d28df2beda944ebb6fbc0090f802b6ca660654e7deb72225f3ccb76654e5042c19d55bf9e705dd7f67321c15534c555cb44b4c1640865ef675525036c8967a20422899ec333a47ee05f85dabb8dd41e6f09e5278eed1abf08928bc479e7a04743bddc900fa2f91af81a8e0f9090fbd56a85d3e677107a35725f114216ede20cf5af630424e8f92e8751283bc80f24bfabc403536f7930efc605bde87dccf75ac69684d5c809b82d74d8975899bac4ad4be423f037ff85869333f203eb85b128025eae91d772759901ae096d4f1390b51c62c0a387ecc831e93322f79e0909b54b7feed4459be3d0c9071369aa9b4a2740d48ced33acaacba788db8991a6b6c21c4db9a330740c3e7bd3149802a724d68600e4092e34b80ebf890dba36ffe45869ed415f7408ea7f8b3ae1917e4fa7df897fbd3611aa417662185689d893c1f396ab45119a07a6b6405b25c338b8e6ea94252328a0112571c783429980746cdf78d9fb294ce10faa1094f225e1078abb92cedb7a0b2a0093177e2966d0065f451c3c0e01cd92c5068d33c106d9e0390093c6770ec3330a11ac9d7951b063180aeed98ba2e160a107f2a2ed345d248f170ede7669db40a01e9bcbd1e2186c4f362783237f1db6103d99cad7f92d3981c1fec64afd9b75456e36be4b6429822dca8ca82b0e53f6fcb266d5f123d696707ac0b1540b300b72c68592e140201e8b9e5f21e2aa240671db1d2b7a3229c10ef09535e07131f05a0082b5d590e4747ecc631971eb3952d10d2e82bf716c94ff3fe45955e9ed3ce382a56741beae295b3cc66b3ea31319392789f143aff81cfdf86f17293c629270bb770cfbe8a8bfed0403734100c1f50cec6d879c4229abe1033fee286904bf136ed6ec1b6764415a5c58e87e69fa68f20716493f8e9ba55c1a99c10d621a23822c5ba2372d8031823d232d653a3277a1ea61227824df94817704c4011a9ffc2fa99a7e77571bfd7bd2d4eb7e760cd45b982929cb72730431a9bbfb69aa8f97fb929cbb0cfed70f36776161ca7fd69493dccf6eea13635e41d99e9ffb8a7784e6b2c814ce6ee0ddf1370145972c04e838f7af1cfb8b0af4cbd78283221a99a99d051f0f3f55c7dae9014f33d7b7e3a7896bbe9c1314a485398b2f33bcf9c7f194ca40418a5d7a664a3aafc33d9b85d10dbc99b8c0fc49f8509c014358725fcdd4e0a0658ae546aedf1a4618ba69a06ec0ec8e9ba50e8fdd866304f77c7f4579f3cc657b31c3420e044af0813dac71ef2e9e99b88d99a71c10d3dc062e90143bdf641f6cd308126d98f2c5ded29779c0e9d28781757fe6671c26624646055b67f9797da3cbf8a94c63fa50ffed4dfb9fa6304e8c94686ea6b90e91a05579901d6773065280ab78d2594de5ca0d274d549e88c65db1d6ef100fda4dd8609da2e0a6406a48b0aa867b5920a32a32dcfb288cd965a5491b937fe4f01587bf726cb506c4b3710f03e74a2ae35ab6023fd0b9e736cff7085c8f49ace7d79a31632d3915c019f9f04c96d25fb6335a3200f0c4b3fb90317560f3ead10afc03ce6d96f8a7935f8af8f11ad596afbde3ed7c78c1a8e20c1aa7a4b655af74402699ec6a0a7f53a2543c99730ea9f97c86d2a5c21687125f24ecae58414de894467b2ad96571c3f5eb773bb2f248d74f0ab941a95d536955630ccb251055f809ff0b3539ea7c60ef836a2e2fc37b2f99a357180a5844670109f5f5a49a5fa3e87968f20d1efe7d2c59e408a9b90301f7101a5fd292147dcc45d12c40d4ece30ee33c175adf80ea3afd8b4218715d32f7a312a30554cb0762e27d903f07e26de4b434c2d91ad21747dd0c65190f42b9eb83fdcc46b85d2fee8ee3821828f3e6eec45091c7cc4c73e1dce5ef5bb5b11e49920a07f7c105d52f040d539ad8abee462ee4b985d7877c006e90663ee521e250832fd355cff046b04b05f3f5d6ad1932d00e872615c6b7f14b606f7faf56eeb827ee8d93e3662defb578d11ebc99d93d2970aa9756e0c763e9726714a28bedabc1d1f0fbe7220b8cc6e7b124039e5a2a978d091f8e3e03ded0585379f42a9c10c468bba3fad70b0c8481f9fbb636701716229c91fe14a9d232cd4803a8d540251615ead13bad8825a9f39b14ba9cdf1815b03e9bb1f633da9f5df389e9c7b2c1d18ab5d834a2086ba07d71b93497bf894db86e0afece48bb3edb26dca302336dd20230627f5b1093dc357b1bd21de46a40fd8dd9ae3b63727f2a6c647166d9b0fbeb9de6564502c1a3b3d4ff6b800ef6ba2fbce8ae01701defae83cef3f95f18890bdfe212a0ed21597a23d623e5376a0ff58c885c94a3b7bf5efd4e20ba07df351fdf310d4c96aef997ffb91c872e88e98b1bb6a9b38017d0020fb36e62cd237f3a617f4b428108d94a7651f5bd77e17a3f78f9937a718685c7f296bab35c3e1803f5cab8703a1e76850ea919787ac2aaa0c2c6134e796f391e04f895bfb2f6f9bbe4b3191063cecee1258941916986a030ff50530f93739cd5b69d6d91ebe9c167698bef2b5ba6e75a7303efe1d1a1dd16b4a05495818bd5ce9d4524543162d055b2b65f55cf42b1248fb12c46eabcc6c40f4f50fc777a87e4df341ed405048490d02ffe1bf7b9539b7b31515465cced03467d674070005ce5cc464cae87a2095d3501b3b574528b8fed9bb151ee135d5be4eab429e8ba2dce933328edd0bb67cc4c44e57c8332ab4167163207a8cc2fc6e7ab7d712e6394d8f3a56a3ac0c092e182dcbc7ed28425339cd85f5cb8fc0828c048f6c752efa93f796b73e80e0b114d8548e9da2abc9c79bdd933d3e62c4c9f2a0b817061758ee5f4be00082092a12834b62c413e3ed80a3cb1926eecec77a4534b93e0744d4125f5d8053f4d3b68913cd6726e8c6a5b5e09ba2bb7cc7366da76e7b9f2fa3c0f4ac4773e7bf2960a98caaf775f92161dcfca537b947b47857ce7a0db0938021ff93838867c7c00c2b1a53afce922116e22f999c0edfc2ac4b32c821631f68707571565090426474792eb7b1f7fbc207dce9f00ee0c37c56a776823cffc60b33da25c80adf4bfb0159dbe6445c4cdc4efa8da65411d5811b8f5a5ea8048fef25d07a5d87d1bc894a7cdad4df08042c22779d85f3569217af04fda20ee2c9cc232b8f290d1be653207d81ad2e9d3e8bc59dd15ad40bb420e00add5d1dd9d91ea1b99b7de933ba31b4c1bd02758281f6b1d7e9f11353e810a2dbceede69bc691e30d7cd9b246f925c16e913ae9e14f95d97c777eb858d20b76ae19ac050e3f502225de4c47d77f5d4876c952f57f41160b10de3edefa93ead46dd5eddfdf0cedb2412c860033e9b75036a2000c14ed7f6e3458279c9f0031c41b202083a906ccef714b0573bacd7cd822e4f1bad71d8ede18a6b0546eaa5f36dfc43401090fb91ff1b03b3651f6f081b1d3dc7898f4f11d7bd6388c798a1868414ed0f50bd4f55a9cedce9495621dcb28915940677f2529dd848f73ce2d8a5a7fe3b149e60909fa7e3b0250dcd1b2ad825419dd6628f1842140000000000000001801000003000000efcd28e167afd004e8b2166b9da4cf2bb5e60c03d3b72aff9e63bf7d2e233b75da8768bb4440124094c05ff100000000e00000000000000019010000040000007dd5b9a84d7221a65e0f4929d1122fbc383883204e02a84aa7ba0818bd037289853a43273b178269fc9799056b5bbf3e6003befd57b838b2f3c2f96e550d46adee01b132956b5c3f1459c291ce91d87a9073b7bbd7e987466c6fab81cf0deec1ef8203e97f905f91ea7add828b5f199714970b08c28abbaafb2a71961c96e8f57d056e48502ce08c0b1815f1b0fe5e9f533997438295fd9f872dead78a368add73570e69fef1b3bd60d0f09a9b33d420b533a204893695a845a910e6e46f49e21358275924059019a4715bccaaea0f0050000000000000000a01000002000000aa77dbf4552515bd3332faf703773045d632d44e15b2d05aed0afa08f71a7ddeb48b32e1c6069726d80ff53d5d177c7ea0e7347447e81db5d1f6372900000000d8"], 0x1360}, 0x24000080)
sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0)

6.08500021s ago: executing program 2 (id=4506):
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d00a1005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0)

4.239256988s ago: executing program 2 (id=4507):
socket$kcm(0x10, 0x0, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8)
close(r2)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851)
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000740), 0x1000000000000079}, 0x48000)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/24], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x10007e924748, 0xd8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0x8a, 0x0, &(0x7f0000000580)="b9ff03030018698cb89e40f086dd6000000e00002f006306771810fd96076bff2fe1e542f881c58b59f506d7c78ae3dcf4cf7a4dc1ec83617c49e27ebe3a262f2a85c1954023eee8db3adb0132d915eedbc3b0c7d90eb63da5fb5afefa5acaef2f35455a6501c01ec3b61db7e2b7550abc29aa3caac2270112f0056cd30c498f0f9d03191cce2aa10f88", 0x0, 0xfa, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000001700850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r7 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe2c, 0x0, 0x0, 0x1}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_int(r10, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='0,0'], 0x79) (fail_nth: 4)

3.880790438s ago: executing program 3 (id=4509):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.872742318s ago: executing program 1 (id=4510):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800"], 0x17)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
close(r4)
socket$kcm(0x2, 0x5, 0x84)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r2)
close(r3)

3.685362223s ago: executing program 2 (id=4512):
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x1000000, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)

3.289124404s ago: executing program 3 (id=4513):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0xfffffffe, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

3.209605766s ago: executing program 3 (id=4514):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
close(r3)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x3}, 0x0, 0xac5d, 0x10000200, 0x3, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000760000000000000f"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r1)
close(r2)

3.102120069s ago: executing program 1 (id=4515):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4100, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0)

3.065242599s ago: executing program 1 (id=4516):
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18048000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x122)

3.04809848s ago: executing program 2 (id=4517):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x402, 0xc262, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

2.618070561s ago: executing program 1 (id=4518):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000))
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0)
recvmsg$unix(r4, 0x0, 0x10060)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})

2.394019017s ago: executing program 3 (id=4519):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9b, 0x4, 0x1000, 0xfffff271, 0x6, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9b, 0x4, 0x1000, 0xfffff271, 0x6, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x3, 0x2) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x40}, 0x20002800)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socket$kcm(0x11, 0xa, 0x300) (async)
socket$kcm(0x11, 0xa, 0x300)
ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
socket$kcm(0x29, 0x0, 0x0)
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) (async)
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}, 0xee0de71c65d25575)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)

2.130241464s ago: executing program 0 (id=4521):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d002f847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.051185556s ago: executing program 0 (id=4522):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4f, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7}, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400), 0x1}, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12280, 0x40000000001002, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) (async)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1.958839148s ago: executing program 0 (id=4523):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0xfffffffe, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.847785451s ago: executing program 0 (id=4524):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x8005)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000740)='GPL\x00', 0xa, 0x4c, &(0x7f0000000780)=""/76, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={0x0, 0xffffffffffffffff, 0x1000000, 0x2f}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x807, 0x6}, 0x828, 0x0, 0x0, 0x0, 0xfffd, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x406)
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0xa162e, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x47}, 0x282a8, 0xa4, 0x2, 0x5, 0x0, 0x9b9b, 0x8, 0x0, 0x40000000, 0x0, 0x2000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff0c2a}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x21, &(0x7f00000009c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x1, 0xc, 0x0, 0x9, 0xffffffffffffffc0, 0x1}, @alu={0x4, 0x0, 0xa, 0x6, 0x5, 0xfffffffffffffff8, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @generic={0xe, 0x4, 0x5, 0x2, 0xa}], &(0x7f0000000b00)='GPL\x00', 0xffff2410, 0x4e, &(0x7f0000000b40)=""/78, 0x41000, 0x24, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xe, 0x80000001, 0x5}, 0x10, 0xbb30, r8, 0x5, &(0x7f0000000c40), &(0x7f0000000c80)=[{0x4, 0x4, 0x2, 0x6}, {0x1, 0x2, 0xa, 0x1}, {0x3, 0x4, 0x4, 0x9}, {0x4, 0x3, 0x7, 0x9}, {0x4, 0x3, 0x10, 0x7}], 0x10, 0x7efe7afd}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

282.118763ms ago: executing program 3 (id=4525):
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x1000000, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)

281.545493ms ago: executing program 0 (id=4526):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000280), 0x0}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x15, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@alu={0x7, 0x0, 0xd, 0x1, 0x8, 0xfffffffffffffff4, 0x4}, @ldst={0x3, 0x1, 0x3, 0x4, 0xa, 0x2, 0xb}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x7, 0x7fffffff, 0xef}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000dc0)=[r0, r0], &(0x7f0000000e00)=[{0x1, 0x3, 0x8, 0x1}, {0x1, 0x3, 0xf, 0x6}, {0x0, 0x5, 0xb, 0x4}, {0x2, 0x3, 0x1, 0x3}, {0x3, 0x3, 0xf, 0x5}, {0x3, 0x5, 0x800, 0xd}, {0x1, 0x4, 0x4, 0x3}, {0x4, 0x4, 0xd, 0x8}, {0x1, 0x1, 0x0, 0x6}]}, 0x94) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x1a, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @generic={0x3, 0x6, 0x4, 0x5, 0x800}, @map_fd={0x18, 0xd, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='syzkaller\x00', 0xffffffff, 0xe9, &(0x7f00000010c0)=""/233, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x2, 0x4, 0xe0000000, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=r0, 0x6, 0x0, 0x3ff, &(0x7f0000001400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@map=r0, r1, 0x1d, 0x2003, r2, @value, @void, @void, @void, r3}, 0x20) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x22, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000580)='%+9llu \x00'}, 0x20) (async)
r8 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x22, &(0x7f0000000000)=r10, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x784d, 0x0, r7, 0x0, '\x00', 0x0, r10, 0x5, 0x4, 0x3}, 0x50)
openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r5, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], <r11=>0x0, 0x14, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r11, 0x4) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x4, 0x4, 0xc, 0x7, 0x565c}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x2, 0x75, &(0x7f0000000380)=""/117, 0x41000, 0x24, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x6, 0x916, 0x2}, 0x10, r11, 0x0, 0x1, &(0x7f0000000500)=[r0, r0], &(0x7f0000000540)=[{0x4, 0x4, 0x2, 0x5}]}, 0x94) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r14 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async)
r15 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r13)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r12, 0x0, 0x0}, 0x20)

207.107714ms ago: executing program 1 (id=4527):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

146.729816ms ago: executing program 2 (id=4528):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (fail_nth: 1)

98.210708ms ago: executing program 0 (id=4529):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xc, 0x3, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000003c0), 0x3b, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000080)="d510e438881c57c9aaa6b7ad", 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc)
write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12)
r7 = gettid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400000000000000, 0x3fff7ffa}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x9)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r9)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x7, 0x4, 0x100, 0x10, 0x8}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000100850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)

93.164018ms ago: executing program 1 (id=4530):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008a11900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000b0002000000002f2f0000954b000000000000e7c416"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=4531):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20044800) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8804)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7f}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x80000001, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r3}, 0xc) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) (async)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, &(0x7f0000000340)=""/29, 0x0, &(0x7f0000000500), 0x5, r5, 0x4}, 0x38)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r7 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000200)="fc65501ed03e06925ed0fe94ed926e11f7cfcdd2c1ec22ae654592f206fdfc4491490306d6c4762a9342b6771090f3b5bfd39a743b15eade82bbf1c906518edb702d8ab7aad8a8516c0bcb4fb6341c30906fa714dd6cbeb2c329982c02e613c8de2754ea8be49d1a1a59cb92fea6f953ee380cee0454af8cb9", &(0x7f0000000280)=""/250}, 0x20) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100000000)

kernel console output (not intermixed with test programs):

fffffffffffffda RBX: 00007fe48ea25fa0 RCX: 00007fe48e79e0d9
[  676.522024][T16198] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003
[  676.530015][T16198] RBP: 00007fe48f704090 R08: 0000000000000000 R09: 0000000000000000
[  676.537977][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.545956][T16198] R13: 00007fe48ea26038 R14: 00007fe48ea25fa0 R15: 00007fff475e3f38
[  676.554047][T16198]  </TASK>
[  676.830045][T16212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3817'.
[  676.852980][T16212] veth1_vlan: entered allmulticast mode
[  676.952797][T16216] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3819'.
[  676.979460][T16216] syz.1.3819: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  677.001626][T16216] CPU: 1 PID: 16216 Comm: syz.1.3819 Not tainted syzkaller #0
[  677.009141][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  677.019228][T16216] Call Trace:
[  677.022532][T16216]  <TASK>
[  677.025490][T16216]  dump_stack_lvl+0x18c/0x250
[  677.030202][T16216]  ? show_regs_print_info+0x20/0x20
[  677.035473][T16216]  ? load_image+0x420/0x420
[  677.040061][T16216]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  677.046508][T16216]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  677.053053][T16216]  warn_alloc+0x246/0x340
[  677.057508][T16216]  ? stack_trace_save+0xaa/0x100
[  677.062458][T16216]  ? zone_watermark_ok_safe+0x230/0x230
[  677.068016][T16216]  ? kasan_set_track+0x5f/0x70
[  677.072848][T16216]  ? kasan_set_track+0x4e/0x70
[  677.077613][T16216]  ? __kasan_kmalloc+0x8f/0xa0
[  677.082409][T16216]  ? xsk_init_queue+0xad/0x100
[  677.087273][T16216]  ? xsk_setsockopt+0x4c9/0x750
[  677.092125][T16216]  ? do_sock_setsockopt+0x175/0x1a0
[  677.097320][T16216]  ? __x64_sys_setsockopt+0x182/0x200
[  677.102695][T16216]  __vmalloc_node_range+0x129/0x1320
[  677.108024][T16216]  ? free_vm_area+0x50/0x50
[  677.112552][T16216]  vmalloc_user+0x74/0x80
[  677.116887][T16216]  ? xskq_create+0xbf/0x170
[  677.121425][T16216]  xskq_create+0xbf/0x170
[  677.126023][T16216]  xsk_init_queue+0xad/0x100
[  677.130705][T16216]  xsk_setsockopt+0x4c9/0x750
[  677.135477][T16216]  ? xsk_poll+0x670/0x670
[  677.139803][T16216]  ? lockdep_hardirqs_on+0x98/0x150
[  677.145008][T16216]  ? __fget_files+0x28/0x460
[  677.149595][T16216]  ? aa_sock_opt_perm+0x74/0x100
[  677.154528][T16216]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  677.160073][T16216]  ? security_socket_setsockopt+0x7e/0xa0
[  677.165877][T16216]  ? xsk_poll+0x670/0x670
[  677.170255][T16216]  do_sock_setsockopt+0x175/0x1a0
[  677.175279][T16216]  ? __fdget+0x180/0x210
[  677.179531][T16216]  __x64_sys_setsockopt+0x182/0x200
[  677.184757][T16216]  do_syscall_64+0x55/0xb0
[  677.189170][T16216]  ? clear_bhb_loop+0x40/0x90
[  677.193844][T16216]  ? clear_bhb_loop+0x40/0x90
[  677.198523][T16216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  677.204413][T16216] RIP: 0033:0x7fdd6859e0d9
[  677.208827][T16216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.228438][T16216] RSP: 002b:00007fdd694ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  677.236858][T16216] RAX: ffffffffffffffda RBX: 00007fdd68825fa0 RCX: 00007fdd6859e0d9
[  677.244832][T16216] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  677.252800][T16216] RBP: 00007fdd68635024 R08: 0000000000000004 R09: 0000000000000000
[  677.260787][T16216] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  677.268757][T16216] R13: 00007fdd68826038 R14: 00007fdd68825fa0 R15: 00007ffec8c1f198
[  677.276920][T16216]  </TASK>
[  677.304110][T16216] Mem-Info:
[  677.335347][T16216] active_anon:5471 inactive_anon:0 isolated_anon:0
[  677.335347][T16216]  active_file:19438 inactive_file:40187 isolated_file:0
[  677.335347][T16216]  unevictable:768 dirty:186 writeback:0
[  677.335347][T16216]  slab_reclaimable:10552 slab_unreclaimable:93588
[  677.335347][T16216]  mapped:25062 shmem:1361 pagetables:576
[  677.335347][T16216]  sec_pagetables:0 bounce:0
[  677.335347][T16216]  kernel_misc_reclaimable:0
[  677.335347][T16216]  free:1341884 free_pcp:12033 free_cma:0
[  677.388047][T16216] Node 0 active_anon:21884kB inactive_anon:0kB active_file:77752kB inactive_file:160548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100248kB dirty:740kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10612kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no
[  677.445080][T16216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  677.478892][T16216] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  677.529727][T16216] lowmem_reserve[]: 0 2521 2522 2522 2522
[  677.536710][T16216] Node 0 DMA32 free:1464428kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21948kB inactive_anon:0kB active_file:77752kB inactive_file:159724kB unevictable:1536kB writepending:840kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:25424kB local_pcp:10096kB free_cma:0kB
[  677.597418][T16216] lowmem_reserve[]: 0 0 0 0 0
[  677.614924][T16216] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  677.723991][T16216] lowmem_reserve[]: 0 0 0 0 0
[  677.756456][T16216] Node 1 Normal free:3887748kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22752kB local_pcp:13152kB free_cma:0kB
[  677.850045][T16216] lowmem_reserve[]: 0 0 0 0 0
[  677.865834][T16216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  677.905657][T16216] Node 0 DMA32: 2*4kB (UM) 1573*8kB (UME) 1398*16kB (UME) 755*32kB (UME) 304*64kB (UME) 593*128kB (UME) 302*256kB (UM) 131*512kB (UM) 74*1024kB (UM) 30*2048kB (UME) 251*4096kB (UM) = 1464176kB
[  677.940398][T16216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  677.952391][T16216] Node 1 Normal: 279*4kB (UE) 75*8kB (UE) 45*16kB (UE) 160*32kB (UE) 48*64kB (UME) 10*128kB (UME) 0*256kB 2*512kB (UM) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3887748kB
[  677.970002][T16216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  677.980167][T16216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  678.005079][T16216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  678.034045][T16216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  678.055048][T16216] 60986 total pagecache pages
[  678.059792][T16216] 0 pages in swap cache
[  678.063965][T16216] Free swap  = 124996kB
[  678.086042][T16216] Total swap = 124996kB
[  678.090257][T16216] 2097051 pages RAM
[  678.108342][T16216] 0 pages HighMem/MovableOnly
[  678.113253][T16216] 416955 pages reserved
[  678.122525][T16216] 0 pages cma reserved
[  678.448357][T16257] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3835'.
[  678.839123][T16267] validate_nla: 17 callbacks suppressed
[  678.839195][T16267] netlink: 'syz.0.3838': attribute type 29 has an invalid length.
[  678.931284][T16267] netlink: 'syz.0.3838': attribute type 29 has an invalid length.
[  678.998670][T16267] netlink: 'syz.0.3838': attribute type 29 has an invalid length.
[  679.100939][T16267] netlink: 'syz.0.3838': attribute type 29 has an invalid length.
[  679.184540][T16276] netlink: 'syz.0.3838': attribute type 29 has an invalid length.
[  679.711989][T16270] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3839'.
[  680.024847][T16301] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3846'.
[  680.111659][T16310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3852'.
[  680.159038][T16310] veth1_vlan: entered allmulticast mode
[  680.339350][T16317] netlink: 'syz.2.3854': attribute type 29 has an invalid length.
[  680.349855][T16317] netlink: 'syz.2.3854': attribute type 29 has an invalid length.
[  680.435381][T16320] netlink: 'syz.2.3854': attribute type 29 has an invalid length.
[  680.496615][T16317] netlink: 'syz.2.3854': attribute type 29 has an invalid length.
[  680.521207][T16317] netlink: 'syz.2.3854': attribute type 29 has an invalid length.
[  680.734247][T16328] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3857'.
[  680.773924][T16328] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  680.799388][T16328] openvswitch: netlink: Message has 1 unknown bytes.
[  681.101265][T16324] syzkaller0: entered promiscuous mode
[  681.114460][T16324] syzkaller0: entered allmulticast mode
[  681.277512][T16346] FAULT_INJECTION: forcing a failure.
[  681.277512][T16346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.305066][T16346] CPU: 1 PID: 16346 Comm: syz.2.3863 Not tainted syzkaller #0
[  681.312601][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  681.322698][T16346] Call Trace:
[  681.326010][T16346]  <TASK>
[  681.328972][T16346]  dump_stack_lvl+0x18c/0x250
[  681.333697][T16346]  ? show_regs_print_info+0x20/0x20
[  681.338935][T16346]  ? load_image+0x420/0x420
[  681.343582][T16346]  ? __might_fault+0xaa/0x120
[  681.348304][T16346]  ? __lock_acquire+0x7d80/0x7d80
[  681.353383][T16346]  should_fail_ex+0x394/0x4c0
[  681.358119][T16346]  _copy_from_user+0x2f/0xe0
[  681.362756][T16346]  bpf_obj_get_info_by_fd+0x477/0x3120
[  681.368261][T16346]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  681.374012][T16346]  ? bpf_map_get_fd_by_id+0x330/0x330
[  681.379441][T16346]  ? perf_trace_lock+0x303/0x3b0
[  681.384447][T16346]  ? trace_event_raw_event_lock+0x240/0x240
[  681.390444][T16346]  ? file_end_write+0x159/0x250
[  681.395357][T16346]  ? __might_fault+0xaa/0x120
[  681.400137][T16346]  ? __might_fault+0xc6/0x120
[  681.404868][T16346]  ? __might_fault+0xaa/0x120
[  681.409592][T16346]  ? bpf_lsm_bpf+0x9/0x10
[  681.413939][T16346]  ? security_bpf+0x7e/0xa0
[  681.418462][T16346]  __sys_bpf+0x7eb/0x890
[  681.422724][T16346]  ? bpf_link_show_fdinfo+0x390/0x390
[  681.428216][T16346]  ? lock_chain_count+0x20/0x20
[  681.433086][T16346]  __x64_sys_bpf+0x7c/0x90
[  681.437518][T16346]  do_syscall_64+0x55/0xb0
[  681.441942][T16346]  ? clear_bhb_loop+0x40/0x90
[  681.446810][T16346]  ? clear_bhb_loop+0x40/0x90
[  681.451495][T16346]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.457394][T16346] RIP: 0033:0x7fe48e79e0d9
[  681.461814][T16346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.481704][T16346] RSP: 002b:00007fe48f704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  681.490133][T16346] RAX: ffffffffffffffda RBX: 00007fe48ea25fa0 RCX: 00007fe48e79e0d9
[  681.498129][T16346] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f
[  681.506118][T16346] RBP: 00007fe48f704090 R08: 0000000000000000 R09: 0000000000000000
[  681.514181][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.522151][T16346] R13: 00007fe48ea26038 R14: 00007fe48ea25fa0 R15: 00007fff475e3f38
[  681.530155][T16346]  </TASK>
[  682.606959][T16373] FAULT_INJECTION: forcing a failure.
[  682.606959][T16373] name failslab, interval 1, probability 0, space 0, times 0
[  682.630477][T16373] CPU: 0 PID: 16373 Comm: syz.0.3871 Not tainted syzkaller #0
[  682.638110][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  682.648188][T16373] Call Trace:
[  682.651489][T16373]  <TASK>
[  682.654437][T16373]  dump_stack_lvl+0x18c/0x250
[  682.659226][T16373]  ? sctp_sendmsg+0x1519/0x27b0
[  682.664109][T16373]  ? ___sys_sendmsg+0x2a6/0x360
[  682.668984][T16373]  ? show_regs_print_info+0x20/0x20
[  682.674293][T16373]  ? load_image+0x420/0x420
[  682.678847][T16373]  should_fail_ex+0x394/0x4c0
[  682.683559][T16373]  should_failslab+0x9/0x20
[  682.688088][T16373]  slab_pre_alloc_hook+0x59/0x300
[  682.693151][T16373]  ? sctp_add_bind_addr+0x8c/0x360
[  682.698292][T16373]  __kmem_cache_alloc_node+0x53/0x250
[  682.703704][T16373]  ? sctp_add_bind_addr+0x8c/0x360
[  682.708852][T16373]  kmalloc_trace+0x2a/0xe0
[  682.713310][T16373]  sctp_add_bind_addr+0x8c/0x360
[  682.718701][T16373]  sctp_copy_local_addr_list+0x31b/0x4e0
[  682.724377][T16373]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  682.730126][T16373]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  682.736223][T16373]  ? sctp_v6_is_any+0x64/0x70
[  682.740937][T16373]  ? sctp_copy_one_addr+0x8c/0x350
[  682.746170][T16373]  sctp_bind_addr_copy+0xb3/0x3c0
[  682.751233][T16373]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  682.757608][T16373]  sctp_connect_new_asoc+0x2f9/0x6a0
[  682.763028][T16373]  ? __sctp_connect+0xd80/0xd80
[  682.767912][T16373]  ? sctp_sendmsg+0xb7e/0x27b0
[  682.772794][T16373]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  682.778466][T16373]  ? security_sctp_bind_connect+0x89/0xb0
[  682.784241][T16373]  sctp_sendmsg+0x1519/0x27b0
[  682.788972][T16373]  ? sctp_getsockopt+0xb60/0xb60
[  682.793989][T16373]  ? lockdep_hardirqs_on+0x98/0x150
[  682.799260][T16373]  ? aa_af_perm+0x330/0x330
[  682.803798][T16373]  ? aa_sock_msg_perm+0x94/0x150
[  682.808777][T16373]  ? sock_rps_record_flow+0x19/0x3f0
[  682.814115][T16373]  ? inet_sendmsg+0xce/0x2a0
[  682.818755][T16373]  ? inet_send_prepare+0x250/0x250
[  682.823914][T16373]  ____sys_sendmsg+0x61b/0x980
[  682.828720][T16373]  ? __asan_memset+0x22/0x40
[  682.833377][T16373]  ? __sys_sendmsg_sock+0x30/0x30
[  682.838460][T16373]  ? __import_iovec+0x5f2/0x850
[  682.843378][T16373]  ? import_iovec+0x73/0xa0
[  682.847923][T16373]  ___sys_sendmsg+0x2a6/0x360
[  682.852641][T16373]  ? __sys_sendmsg+0x2b0/0x2b0
[  682.857458][T16373]  ? trace_call_bpf+0xc3/0x6c0
[  682.862318][T16373]  __se_sys_sendmsg+0x1d0/0x2c0
[  682.867208][T16373]  ? perf_trace_preemptirq_template+0x269/0x330
[  682.873497][T16373]  ? __x64_sys_sendmsg+0x80/0x80
[  682.878491][T16373]  ? lockdep_hardirqs_on+0x98/0x150
[  682.883730][T16373]  do_syscall_64+0x55/0xb0
[  682.888181][T16373]  ? clear_bhb_loop+0x40/0x90
[  682.892892][T16373]  ? clear_bhb_loop+0x40/0x90
[  682.897623][T16373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.903888][T16373] RIP: 0033:0x7f71add9e0d9
[  682.908379][T16373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.928059][T16373] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  682.936527][T16373] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  682.944536][T16373] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000005
[  682.952588][T16373] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  682.960598][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  682.968604][T16373] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  682.976657][T16373]  </TASK>
[  684.333776][T16360] validate_nla: 1 callbacks suppressed
[  684.333796][T16360] netlink: 'syz.2.3867': attribute type 29 has an invalid length.
[  684.668556][T16393] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3878'.
[  684.800098][T16397] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3880'.
[  685.569524][T16410] netlink: 'syz.1.3885': attribute type 29 has an invalid length.
[  685.585119][T16410] netlink: 'syz.1.3885': attribute type 29 has an invalid length.
[  685.652696][T16410] netlink: 'syz.1.3885': attribute type 29 has an invalid length.
[  685.709904][T16412] netlink: 'syz.1.3885': attribute type 29 has an invalid length.
[  685.749969][T16410] netlink: 'syz.1.3885': attribute type 29 has an invalid length.
[  686.080551][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  686.095151][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  686.188717][T16421] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3890'.
[  686.255544][T16422] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3888'.
[  686.940261][T16440] netlink: 'syz.1.3897': attribute type 29 has an invalid length.
[  686.943258][T16444] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3899'.
[  686.996259][T16440] netlink: 'syz.1.3897': attribute type 29 has an invalid length.
[  687.051271][T16449] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3901'.
[  687.065692][T16450] netlink: 'syz.1.3897': attribute type 29 has an invalid length.
[  687.119162][T16440] netlink: 'syz.1.3897': attribute type 29 has an invalid length.
[  687.929703][T16473] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3910'.
[  688.489374][T16483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3916'.
[  690.918710][T16489] validate_nla: 8 callbacks suppressed
[  690.918729][T16489] netlink: 'syz.0.3917': attribute type 10 has an invalid length.
[  691.060438][T16509] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3923'.
[  691.207432][T16517] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3926'.
[  691.236108][T16516] netlink: 'syz.0.3933': attribute type 29 has an invalid length.
[  691.245896][T16517] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  691.256192][T16516] netlink: 'syz.0.3933': attribute type 29 has an invalid length.
[  691.275819][T16517] openvswitch: netlink: Message has 1 unknown bytes.
[  691.357413][T16522] netlink: 'syz.0.3933': attribute type 29 has an invalid length.
[  691.407161][T16522] netlink: 'syz.0.3933': attribute type 29 has an invalid length.
[  691.724853][T16529] netlink: 'syz.3.3929': attribute type 39 has an invalid length.
[  692.204738][T16552] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3936'.
[  692.465897][T16559] netlink: 'syz.3.3940': attribute type 29 has an invalid length.
[  694.426376][T16559] netlink: 'syz.3.3940': attribute type 29 has an invalid length.
[  694.661567][T16582] netlink: 'syz.2.3947': attribute type 10 has an invalid length.
[  694.720329][T16586] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3948'.
[  694.737530][T16584] netlink: 'syz.0.3946': attribute type 39 has an invalid length.
[  694.842048][T16593] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3949'.
[  694.857253][T16593] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  694.867427][T16593] openvswitch: netlink: Message has 1 unknown bytes.
[  695.157754][T16604] macsec0: entered promiscuous mode
[  695.169405][T16604] macsec0: entered allmulticast mode
[  695.185263][T16604] veth1_macvtap: entered allmulticast mode
[  695.288754][T16609] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3953'.
[  695.498115][T16614] syzkaller0: entered promiscuous mode
[  695.513001][T16614] syzkaller0: entered allmulticast mode
[  698.562603][T16626] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3959'.
[  698.572638][T16632] validate_nla: 5 callbacks suppressed
[  698.572672][T16632] netlink: 'syz.3.3960': attribute type 10 has an invalid length.
[  698.595204][T16640] macsec0: entered promiscuous mode
[  698.600693][T16640] macsec0: entered allmulticast mode
[  698.624566][T16640] veth1_macvtap: entered allmulticast mode
[  698.781107][T16647] netlink: 'syz.1.3967': attribute type 29 has an invalid length.
[  698.791714][T16647] netlink: 'syz.1.3967': attribute type 29 has an invalid length.
[  698.879141][T16652] netlink: 'syz.1.3967': attribute type 29 has an invalid length.
[  698.890141][T16652] netlink: 'syz.1.3967': attribute type 29 has an invalid length.
[  699.273500][T16661] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3975'.
[  699.340943][T16665] netlink: 'syz.1.3974': attribute type 10 has an invalid length.
[  699.416013][T16671] FAULT_INJECTION: forcing a failure.
[  699.416013][T16671] name failslab, interval 1, probability 0, space 0, times 0
[  699.455231][T16671] CPU: 0 PID: 16671 Comm: syz.0.3978 Not tainted syzkaller #0
[  699.462852][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  699.472935][T16671] Call Trace:
[  699.476225][T16671]  <TASK>
[  699.479162][T16671]  dump_stack_lvl+0x18c/0x250
[  699.483844][T16671]  ? show_regs_print_info+0x20/0x20
[  699.489066][T16671]  ? load_image+0x420/0x420
[  699.493576][T16671]  ? __might_sleep+0xe0/0xe0
[  699.498171][T16671]  ? __lock_acquire+0x7d80/0x7d80
[  699.503197][T16671]  should_fail_ex+0x394/0x4c0
[  699.507878][T16671]  should_failslab+0x9/0x20
[  699.512386][T16671]  slab_pre_alloc_hook+0x59/0x300
[  699.517432][T16671]  ? kvmalloc_node+0x70/0x180
[  699.522182][T16671]  ? kvmalloc_node+0x70/0x180
[  699.526880][T16671]  __kmem_cache_alloc_node+0x53/0x250
[  699.532270][T16671]  ? kvmalloc_node+0x70/0x180
[  699.536954][T16671]  __kmalloc_node+0xa6/0x240
[  699.541554][T16671]  kvmalloc_node+0x70/0x180
[  699.546058][T16671]  page_pool_create+0x1eb/0x5c0
[  699.550920][T16671]  bpf_test_run_xdp_live+0x203/0x1b30
[  699.556303][T16671]  ? 0xffffffffa0004740
[  699.560541][T16671]  ? 0xffffffffa0004740
[  699.564689][T16671]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  699.570763][T16671]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  699.576927][T16671]  ? xdp_convert_md_to_buff+0x330/0x330
[  699.582500][T16671]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  699.588830][T16671]  ? _copy_from_user+0xa5/0xe0
[  699.593589][T16671]  ? bpf_test_init+0x119/0x140
[  699.598373][T16671]  ? xdp_convert_md_to_buff+0x5b/0x330
[  699.603831][T16671]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  699.609199][T16671]  ? __lock_acquire+0x7d80/0x7d80
[  699.614228][T16671]  ? dev_put+0x80/0x80
[  699.618303][T16671]  ? dev_put+0x80/0x80
[  699.622368][T16671]  bpf_prog_test_run+0x31f/0x390
[  699.627303][T16671]  __sys_bpf+0x49d/0x890
[  699.631541][T16671]  ? bpf_link_show_fdinfo+0x390/0x390
[  699.636916][T16671]  ? lock_chain_count+0x20/0x20
[  699.641760][T16671]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  699.647743][T16671]  __x64_sys_bpf+0x7c/0x90
[  699.652155][T16671]  do_syscall_64+0x55/0xb0
[  699.656569][T16671]  ? clear_bhb_loop+0x40/0x90
[  699.661240][T16671]  ? clear_bhb_loop+0x40/0x90
[  699.665913][T16671]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  699.671798][T16671] RIP: 0033:0x7f71add9e0d9
[  699.676212][T16671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  699.695813][T16671] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  699.704235][T16671] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  699.712200][T16671] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  699.720166][T16671] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  699.728131][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  699.736092][T16671] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  699.744070][T16671]  </TASK>
[  699.757854][T16671] page_pool_create() gave up with errno -12
[  700.012594][T16679] netlink: 'syz.1.3981': attribute type 1 has an invalid length.
[  700.021295][T16679] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3981'.
[  700.427080][T16693] netlink: 'syz.2.3988': attribute type 10 has an invalid length.
[  700.530981][T16698] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3991'.
[  700.605927][T16698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  701.109628][T16722] netlink: 'syz.0.4001': attribute type 10 has an invalid length.
[  701.295524][T16728] netlink: 'syz.0.4002': attribute type 10 has an invalid length.
[  703.750660][T16797] validate_nla: 2 callbacks suppressed
[  703.750679][T16797] netlink: 'syz.1.4031': attribute type 10 has an invalid length.
[  703.781658][T16799] syzkaller0: entered promiscuous mode
[  703.787432][T16799] syzkaller0: entered allmulticast mode
[  704.515279][T16820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4041'.
[  704.580282][T16821] netlink: 53775 bytes leftover after parsing attributes in process `syz.3.4041'.
[  704.590401][T16821] tc_dump_action: action bad kind
[  704.680419][T16823] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4042'.
[  704.692381][T16823] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  705.115660][T16834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4045'.
[  705.124689][T16834] : renamed from caif0
[  705.135638][T16834] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  705.303196][T16844] netlink: 'syz.0.4050': attribute type 10 has an invalid length.
[  705.755889][T16857] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4054'.
[  705.785053][T16857] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  706.283021][T16875] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.4060'.
[  706.306650][T16875] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4060'.
[  706.749426][T16890] FAULT_INJECTION: forcing a failure.
[  706.749426][T16890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.785751][T16890] CPU: 0 PID: 16890 Comm: syz.0.4064 Not tainted syzkaller #0
[  706.793281][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  706.803451][T16890] Call Trace:
[  706.806838][T16890]  <TASK>
[  706.809833][T16890]  dump_stack_lvl+0x18c/0x250
[  706.814543][T16890]  ? show_regs_print_info+0x20/0x20
[  706.819791][T16890]  ? load_image+0x420/0x420
[  706.824346][T16890]  ? __lock_acquire+0x7d80/0x7d80
[  706.829913][T16890]  ? snprintf+0xe9/0x140
[  706.834166][T16890]  should_fail_ex+0x394/0x4c0
[  706.838938][T16890]  _copy_to_user+0x2f/0xa0
[  706.843361][T16890]  simple_read_from_buffer+0xe7/0x150
[  706.848774][T16890]  proc_fail_nth_read+0x1e8/0x260
[  706.853829][T16890]  ? proc_fault_inject_write+0x360/0x360
[  706.859492][T16890]  ? fsnotify_perm+0x271/0x5e0
[  706.864262][T16890]  ? proc_fault_inject_write+0x360/0x360
[  706.869902][T16890]  vfs_read+0x298/0x990
[  706.874072][T16890]  ? kernel_read+0x1e0/0x1e0
[  706.878692][T16890]  ? __fget_files+0x28/0x460
[  706.883295][T16890]  ? __fget_files+0x3fc/0x460
[  706.888003][T16890]  ? __fdget_pos+0x2a3/0x330
[  706.892591][T16890]  ? ksys_read+0x74/0x260
[  706.896930][T16890]  ksys_read+0x151/0x260
[  706.901194][T16890]  ? vfs_write+0x9a0/0x9a0
[  706.905640][T16890]  ? lockdep_hardirqs_on+0x98/0x150
[  706.910843][T16890]  do_syscall_64+0x55/0xb0
[  706.915255][T16890]  ? clear_bhb_loop+0x40/0x90
[  706.919928][T16890]  ? clear_bhb_loop+0x40/0x90
[  706.924621][T16890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  706.930513][T16890] RIP: 0033:0x7f71add5e90e
[  706.934922][T16890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  706.954527][T16890] RSP: 002b:00007f71aed57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  706.963023][T16890] RAX: ffffffffffffffda RBX: 00007f71aed586c0 RCX: 00007f71add5e90e
[  706.970993][T16890] RDX: 000000000000000f RSI: 00007f71aed580a0 RDI: 0000000000000004
[  706.978959][T16890] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  706.986927][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  706.994909][T16890] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  707.002888][T16890]  </TASK>
[  707.040773][T16895] lo: entered allmulticast mode
[  707.071094][T16896] lo: entered promiscuous mode
[  707.097328][T16896] lo: left allmulticast mode
[  707.371528][T16909] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4072'.
[  707.863211][T16924] veth1_macvtap: left allmulticast mode
[  707.885467][T16924] veth1_macvtap: left promiscuous mode
[  707.891007][T16924] macsec0: left allmulticast mode
[  707.960042][T16928] veth1_macvtap: left allmulticast mode
[  707.990367][T16928] veth1_macvtap: left promiscuous mode
[  708.020500][T16928] macsec0: left allmulticast mode
[  708.613632][T16937] sctp: [Deprecated]: syz.3.4080 (pid 16937) Use of int in maxseg socket option.
[  708.613632][T16937] Use struct sctp_assoc_value instead
[  708.892439][T16948] syzkaller0: entered promiscuous mode
[  708.898238][T16948] syzkaller0: entered allmulticast mode
[  708.977800][T16948] netlink: 'syz.0.4083': attribute type 23 has an invalid length.
[  710.261599][T13976] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  711.523309][T16978] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4094'.
[  711.684217][T16987] netlink: 'syz.2.4097': attribute type 10 has an invalid length.
[  711.718417][T16987] tun0: tun_chr_ioctl cmd 1074812118
[  711.724301][T16987] tun0: tun_chr_ioctl cmd 35108
[  711.733904][T16987] netlink: 'syz.2.4097': attribute type 21 has an invalid length.
[  711.744536][T16987] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4097'.
[  711.755594][T16987] netlink: 'syz.2.4097': attribute type 4 has an invalid length.
[  711.774681][T16987] netlink: 'syz.2.4097': attribute type 9 has an invalid length.
[  711.782760][T16987] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4097'.
[  712.038275][T16990] netlink: 'syz.2.4097': attribute type 9 has an invalid length.
[  712.061532][T16990] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4097'.
[  712.816676][T17007] FAULT_INJECTION: forcing a failure.
[  712.816676][T17007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  712.835204][T17007] CPU: 1 PID: 17007 Comm: syz.1.4102 Not tainted syzkaller #0
[  712.842728][T17007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.852900][T17007] Call Trace:
[  712.856201][T17007]  <TASK>
[  712.859151][T17007]  dump_stack_lvl+0x18c/0x250
[  712.863860][T17007]  ? show_regs_print_info+0x20/0x20
[  712.869092][T17007]  ? load_image+0x420/0x420
[  712.873637][T17007]  ? __might_fault+0xaa/0x120
[  712.878344][T17007]  ? __lock_acquire+0x7d80/0x7d80
[  712.883413][T17007]  should_fail_ex+0x394/0x4c0
[  712.888125][T17007]  _copy_from_user+0x2f/0xe0
[  712.892743][T17007]  ___sys_sendmsg+0x1c7/0x360
[  712.897468][T17007]  ? get_pid_task+0x20/0x1e0
[  712.902091][T17007]  ? __sys_sendmsg+0x2b0/0x2b0
[  712.906914][T17007]  ? __lock_acquire+0x7d80/0x7d80
[  712.911991][T17007]  __se_sys_sendmsg+0x1d0/0x2c0
[  712.916874][T17007]  ? __x64_sys_sendmsg+0x80/0x80
[  712.921856][T17007]  ? lockdep_hardirqs_on+0x98/0x150
[  712.927090][T17007]  do_syscall_64+0x55/0xb0
[  712.931529][T17007]  ? clear_bhb_loop+0x40/0x90
[  712.936234][T17007]  ? clear_bhb_loop+0x40/0x90
[  712.940941][T17007]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  712.946853][T17007] RIP: 0033:0x7fdd6859e0d9
[  712.951290][T17007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.970962][T17007] RSP: 002b:00007fdd694ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  712.979410][T17007] RAX: ffffffffffffffda RBX: 00007fdd68825fa0 RCX: 00007fdd6859e0d9
[  712.987408][T17007] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003
[  712.995412][T17007] RBP: 00007fdd694ce090 R08: 0000000000000000 R09: 0000000000000000
[  713.003409][T17007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.011418][T17007] R13: 00007fdd68826038 R14: 00007fdd68825fa0 R15: 00007ffec8c1f198
[  713.019433][T17007]  </TASK>
[  713.555125][T17020] FAULT_INJECTION: forcing a failure.
[  713.555125][T17020] name failslab, interval 1, probability 0, space 0, times 0
[  713.568133][T17020] CPU: 0 PID: 17020 Comm: syz.0.4108 Not tainted syzkaller #0
[  713.575904][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  713.585961][T17020] Call Trace:
[  713.589238][T17020]  <TASK>
[  713.592286][T17020]  dump_stack_lvl+0x18c/0x250
[  713.597008][T17020]  ? show_regs_print_info+0x20/0x20
[  713.602211][T17020]  ? load_image+0x420/0x420
[  713.606714][T17020]  ? __lock_acquire+0x1262/0x7d80
[  713.611795][T17020]  should_fail_ex+0x394/0x4c0
[  713.616493][T17020]  should_failslab+0x9/0x20
[  713.621016][T17020]  slab_pre_alloc_hook+0x59/0x300
[  713.626054][T17020]  ? kasan_set_track+0x5f/0x70
[  713.630832][T17020]  ? kasan_set_track+0x4e/0x70
[  713.635594][T17020]  ? __kasan_kmalloc+0x8f/0xa0
[  713.640372][T17020]  ? ___neigh_create+0x6f4/0x23d0
[  713.645398][T17020]  ? ___neigh_create+0x6f4/0x23d0
[  713.650431][T17020]  __kmem_cache_alloc_node+0x53/0x250
[  713.655806][T17020]  ? ip_tunnel_xmit+0x1d18/0x25b0
[  713.660832][T17020]  ? ___neigh_create+0x6f4/0x23d0
[  713.665856][T17020]  __kmalloc+0xa7/0x240
[  713.670055][T17020]  ___neigh_create+0x6f4/0x23d0
[  713.674932][T17020]  ip_neigh_gw4+0x351/0x4d0
[  713.679444][T17020]  ? ip_finish_output2+0x1260/0x1260
[  713.684733][T17020]  ? __alloc_skb+0x138/0x2c0
[  713.689319][T17020]  ? __alloc_skb+0x138/0x2c0
[  713.693904][T17020]  ? rcu_is_watching+0x15/0xb0
[  713.698671][T17020]  ? ip_finish_output2+0x45a/0x1260
[  713.703870][T17020]  ip_finish_output2+0xf99/0x1260
[  713.708901][T17020]  ? ip_fast_csum+0x1ee/0x2b0
[  713.713583][T17020]  ? ip_fragment+0x210/0x210
[  713.718171][T17020]  ? ip_frag_next+0x615/0xb00
[  713.722856][T17020]  ? ip_options_fragment+0x1ae/0x290
[  713.728138][T17020]  ? ip_do_fragment+0x7fa/0x1750
[  713.733076][T17020]  ip_do_fragment+0x892/0x1750
[  713.737856][T17020]  ? ip_fragment+0x210/0x210
[  713.742465][T17020]  ip_output+0x2a5/0x3a0
[  713.746713][T17020]  ? ip_output+0x5a/0x3a0
[  713.751051][T17020]  iptunnel_xmit+0x4d0/0x910
[  713.755675][T17020]  ip_tunnel_xmit+0x1d18/0x25b0
[  713.760558][T17020]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  713.765593][T17020]  ? skb_push+0x8e/0xe0
[  713.769766][T17020]  ipgre_xmit+0x7eb/0xb70
[  713.774097][T17020]  dev_hard_start_xmit+0x269/0x790
[  713.779223][T17020]  ? __dev_queue_xmit+0x275/0x3630
[  713.784335][T17020]  __dev_queue_xmit+0x198c/0x3630
[  713.789364][T17020]  ? __dev_queue_xmit+0x275/0x3630
[  713.794498][T17020]  ? netdev_core_pick_tx+0x370/0x370
[  713.799786][T17020]  ? pskb_expand_head+0x17a/0x1150
[  713.804900][T17020]  ? pskb_expand_head+0x17a/0x1150
[  713.810021][T17020]  ? skb_release_data+0x1de/0x7f0
[  713.815061][T17020]  ? __bpf_redirect+0x4d1/0xdf0
[  713.819914][T17020]  __bpf_tx_skb+0x181/0x260
[  713.824417][T17020]  bpf_clone_redirect+0x315/0x4a0
[  713.829544][T17020]  bpf_prog_208b094576c80b22+0x5e/0x63
[  713.835014][T17020]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  713.840997][T17020]  ? __lock_acquire+0x7d80/0x7d80
[  713.846025][T17020]  ? lock_chain_count+0x20/0x20
[  713.850887][T17020]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  713.857129][T17020]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  713.862414][T17020]  ? ktime_get+0x7f/0x280
[  713.866741][T17020]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  713.872978][T17020]  ? ktime_get_real_ts64+0x440/0x440
[  713.878258][T17020]  ? __x64_sys_bpf+0x7c/0x90
[  713.882870][T17020]  ? __local_bh_disable_ip+0x108/0x1a0
[  713.888349][T17020]  ? __cant_sleep+0x220/0x220
[  713.893042][T17020]  ? read_tsc+0x9/0x20
[  713.897115][T17020]  ? ktime_get+0x24b/0x280
[  713.901537][T17020]  ? bpf_test_run+0x174/0x870
[  713.906216][T17020]  bpf_test_run+0x2df/0x870
[  713.910775][T17020]  ? bpf_test_run+0x174/0x870
[  713.915459][T17020]  ? dst_hold+0x70/0x70
[  713.919621][T17020]  ? eth_get_headlen+0x210/0x210
[  713.924574][T17020]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  713.929968][T17020]  ? cpu_online+0x60/0x60
[  713.934297][T17020]  bpf_prog_test_run+0x31f/0x390
[  713.939250][T17020]  __sys_bpf+0x49d/0x890
[  713.943500][T17020]  ? bpf_link_show_fdinfo+0x390/0x390
[  713.948971][T17020]  ? lock_chain_count+0x20/0x20
[  713.953919][T17020]  __x64_sys_bpf+0x7c/0x90
[  713.958334][T17020]  do_syscall_64+0x55/0xb0
[  713.962749][T17020]  ? clear_bhb_loop+0x40/0x90
[  713.967424][T17020]  ? clear_bhb_loop+0x40/0x90
[  713.972189][T17020]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  713.978095][T17020] RIP: 0033:0x7f71add9e0d9
[  713.982513][T17020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.002146][T17020] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  714.010566][T17020] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  714.018538][T17020] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  714.026507][T17020] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  714.034474][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  714.042463][T17020] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  714.050453][T17020]  </TASK>
[  714.455798][T17047] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.4117'.
[  714.482724][T17047] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4117'.
[  714.664753][T17060] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4120'.
[  714.675337][T17060] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  714.721922][T17063] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.4121'.
[  715.321815][T17082] sock: sock_set_timeout: `syz.2.4131' (pid 17082) tries to set negative timeout
[  715.369565][T17077] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.4130'.
[  715.394423][T17077] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4130'.
[  715.767379][T17100] netlink: 'syz.2.4137': attribute type 29 has an invalid length.
[  715.787640][T17100] netlink: 'syz.2.4137': attribute type 29 has an invalid length.
[  715.838334][T17102] netlink: 'syz.3.4138': attribute type 29 has an invalid length.
[  715.857229][T17102] netlink: 'syz.3.4138': attribute type 29 has an invalid length.
[  715.907778][T17107] netlink: 'syz.2.4137': attribute type 29 has an invalid length.
[  715.979119][T17109] netlink: 'syz.2.4137': attribute type 29 has an invalid length.
[  716.010252][T17110] netlink: 'syz.3.4138': attribute type 29 has an invalid length.
[  716.045360][T17114] netlink: 'syz.3.4138': attribute type 29 has an invalid length.
[  716.058919][T17113] netlink: 'syz.0.4141': attribute type 4 has an invalid length.
[  716.144310][T17116] netlink: 'syz.1.4142': attribute type 29 has an invalid length.
[  717.019501][T17136] __nla_validate_parse: 1 callbacks suppressed
[  717.019528][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4148'.
[  719.417672][T17136] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  719.659433][T17142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4151'.
[  719.818248][T17142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4151'.
[  721.066325][T17164] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4160'.
[  721.188635][T17164] hsr_slave_0: left promiscuous mode
[  721.215338][T17164] hsr_slave_1: left promiscuous mode
[  721.266600][T17169] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4162'.
[  721.314688][T17164] bridge0: port 2(hsr0) entered disabled state
[  721.417676][T17164] hsr0 (unregistering): left allmulticast mode
[  721.436396][T17164] bridge0: port 2(hsr0) entered disabled state
[  721.625508][T17181] validate_nla: 8 callbacks suppressed
[  721.625522][T17181] netlink: 'syz.1.4166': attribute type 10 has an invalid length.
[  721.655866][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4166'.
[  723.325964][T17181] netlink: 'syz.1.4166': attribute type 10 has an invalid length.
[  723.334014][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4166'.
[  723.540107][T17192] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4170'.
[  723.604228][T17192] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4170'.
[  723.611904][T17193] netlink: 'syz.2.4169': attribute type 29 has an invalid length.
[  723.615458][T17192] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  723.632974][T17193] netlink: 'syz.2.4169': attribute type 29 has an invalid length.
[  723.795259][T17198] netlink: 'syz.2.4169': attribute type 29 has an invalid length.
[  723.844216][T17198] netlink: 'syz.2.4169': attribute type 29 has an invalid length.
[  723.955834][T17211] netlink: 'syz.0.4176': attribute type 10 has an invalid length.
[  724.013950][T17210] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4175'.
[  724.203981][T17215] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4179'.
[  724.289469][T17217] syzkaller0: entered promiscuous mode
[  724.304838][T17217] syzkaller0: entered allmulticast mode
[  725.393313][T17245] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4190'.
[  726.454416][T17242] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4189'.
[  726.648013][T17255] FAULT_INJECTION: forcing a failure.
[  726.648013][T17255] name failslab, interval 1, probability 0, space 0, times 0
[  726.661309][T17255] CPU: 0 PID: 17255 Comm: syz.0.4194 Not tainted syzkaller #0
[  726.668808][T17255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.678865][T17255] Call Trace:
[  726.682146][T17255]  <TASK>
[  726.685095][T17255]  dump_stack_lvl+0x18c/0x250
[  726.689777][T17255]  ? trace_call_bpf+0xc3/0x6c0
[  726.694544][T17255]  ? show_regs_print_info+0x20/0x20
[  726.699742][T17255]  ? load_image+0x420/0x420
[  726.704275][T17255]  ? __lock_acquire+0x1336/0x7d80
[  726.709303][T17255]  should_fail_ex+0x394/0x4c0
[  726.714009][T17255]  should_failslab+0x9/0x20
[  726.718522][T17255]  slab_pre_alloc_hook+0x59/0x300
[  726.723566][T17255]  kmem_cache_alloc+0x5a/0x2c0
[  726.728335][T17255]  ? radix_tree_node_alloc+0x7e/0x3a0
[  726.733746][T17255]  radix_tree_node_alloc+0x7e/0x3a0
[  726.738965][T17255]  idr_get_free+0x28f/0xa10
[  726.743498][T17255]  idr_alloc_cyclic+0x28a/0x610
[  726.748386][T17255]  ? idr_alloc+0x2e0/0x2e0
[  726.752834][T17255]  ? do_raw_spin_lock+0x11f/0x2b0
[  726.757881][T17255]  ? __radix_tree_preload+0x82/0x880
[  726.763185][T17255]  ? btf_alloc_id+0x30/0x2d0
[  726.767780][T17255]  btf_alloc_id+0x4f/0x2d0
[  726.772196][T17255]  btf_new_fd+0x80a/0x9e0
[  726.776528][T17255]  ? bpf_btf_show_fdinfo+0x80/0x80
[  726.781645][T17255]  ? capable+0x88/0xe0
[  726.785722][T17255]  __sys_bpf+0x670/0x890
[  726.789965][T17255]  ? bpf_link_show_fdinfo+0x390/0x390
[  726.795347][T17255]  ? lock_chain_count+0x20/0x20
[  726.800201][T17255]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  726.806189][T17255]  __x64_sys_bpf+0x7c/0x90
[  726.810604][T17255]  do_syscall_64+0x55/0xb0
[  726.815024][T17255]  ? clear_bhb_loop+0x40/0x90
[  726.819701][T17255]  ? clear_bhb_loop+0x40/0x90
[  726.824393][T17255]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.830308][T17255] RIP: 0033:0x7f71add9e0d9
[  726.834724][T17255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.854324][T17255] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  726.862737][T17255] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  726.870727][T17255] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[  726.878703][T17255] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  726.886672][T17255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  726.894751][T17255] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  726.902744][T17255]  </TASK>
[  726.997016][T17261] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4193'.
[  727.470125][T17265] netlink: 'syz.0.4197': attribute type 29 has an invalid length.
[  727.511710][T17265] netlink: 'syz.0.4197': attribute type 29 has an invalid length.
[  727.594643][T17265] netlink: 'syz.0.4197': attribute type 29 has an invalid length.
[  727.654850][T17265] netlink: 'syz.0.4197': attribute type 29 has an invalid length.
[  727.705585][T17265] netlink: 'syz.0.4197': attribute type 29 has an invalid length.
[  728.179795][T17268] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4199'.
[  728.479924][T17278] netlink: 209804 bytes leftover after parsing attributes in process `syz.1.4203'.
[  728.575595][T17275] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4202'.
[  728.621201][T17280] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4205'.
[  728.834060][T17290] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4215'.
[  728.929476][T17289] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4208'.
[  728.944033][T17289] hsr_slave_0: left promiscuous mode
[  728.963365][T17289] hsr_slave_1: left promiscuous mode
[  729.073499][T17296] netlink: 'syz.1.4210': attribute type 29 has an invalid length.
[  729.084859][T17289] bridge0: port 3(hsr0) entered disabled state
[  729.150344][T17289] hsr0 (unregistering): left allmulticast mode
[  729.158373][T17289] bridge0: port 3(hsr0) entered disabled state
[  729.309171][T17296] netlink: 'syz.1.4210': attribute type 29 has an invalid length.
[  729.325435][T17298] netlink: 'syz.1.4210': attribute type 29 has an invalid length.
[  729.348572][T17299] netlink: 'syz.1.4210': attribute type 29 has an invalid length.
[  729.371606][T17300] netlink: 'syz.1.4210': attribute type 29 has an invalid length.
[  729.790218][T17310] syzkaller0: entered promiscuous mode
[  729.799562][T17310] syzkaller0: entered allmulticast mode
[  730.754544][T17332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4223'.
[  732.590674][T17332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4223'.
[  732.600173][T17340] validate_nla: 1 callbacks suppressed
[  732.600188][T17340] netlink: 'syz.2.4226': attribute type 29 has an invalid length.
[  732.735189][T17350] netlink: 'syz.3.4228': attribute type 10 has an invalid length.
[  732.785668][T17350] netlink: 'syz.3.4228': attribute type 39 has an invalid length.
[  732.867571][T17350] bridge0: port 3(hsr0) entered disabled state
[  732.931284][T17350] hsr_slave_1 (unregistering): left promiscuous mode
[  733.189669][T17356] syzkaller0: entered promiscuous mode
[  733.198380][T17356] syzkaller0: entered allmulticast mode
[  733.387627][T17373] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4237'.
[  733.416480][T17373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4237'.
[  733.688816][T17375] syzkaller0: entered promiscuous mode
[  733.694457][T17375] syzkaller0: entered allmulticast mode
[  735.657261][T17387] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4242'.
[  735.800765][T17387] bridge0: port 2(dummy0) entered disabled state
[  736.013934][T17393] netlink: 'syz.1.4245': attribute type 9 has an invalid length.
[  736.035409][T17393] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4245'.
[  740.943477][T17416] netlink: 'syz.1.4250': attribute type 29 has an invalid length.
[  741.007595][T17416] netlink: 'syz.1.4250': attribute type 29 has an invalid length.
[  741.042926][T17420] netlink: 'syz.1.4250': attribute type 29 has an invalid length.
[  741.060027][T17416] netlink: 'syz.1.4250': attribute type 29 has an invalid length.
[  741.101773][T17416] netlink: 'syz.1.4250': attribute type 29 has an invalid length.
[  741.649840][T17425] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4252'.
[  741.658993][T17425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  741.698205][T17428] pimreg1: tun_chr_ioctl cmd 2147767517
[  741.848178][T17433] netlink: 'syz.0.4254': attribute type 3 has an invalid length.
[  741.866449][T17433] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.4254'.
[  741.897747][T17437] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4256'.
[  741.915988][T13976] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  741.925602][T13976] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  742.115396][T17446] FAULT_INJECTION: forcing a failure.
[  742.115396][T17446] name failslab, interval 1, probability 0, space 0, times 0
[  742.145323][T17446] CPU: 0 PID: 17446 Comm: syz.0.4261 Not tainted syzkaller #0
[  742.152848][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  742.162936][T17446] Call Trace:
[  742.166237][T17446]  <TASK>
[  742.169188][T17446]  dump_stack_lvl+0x18c/0x250
[  742.173892][T17446]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  742.180074][T17446]  ? show_regs_print_info+0x20/0x20
[  742.185298][T17446]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  742.191500][T17446]  should_fail_ex+0x394/0x4c0
[  742.196218][T17446]  should_failslab+0x9/0x20
[  742.200765][T17446]  slab_pre_alloc_hook+0x59/0x300
[  742.205836][T17446]  ? ethnl_default_start+0x135/0x560
[  742.211156][T17446]  ? ethnl_default_start+0x135/0x560
[  742.216479][T17446]  __kmem_cache_alloc_node+0x53/0x250
[  742.221897][T17446]  ? ethnl_default_start+0x135/0x560
[  742.227211][T17446]  __kmalloc+0xa7/0x240
[  742.231400][T17446]  ethnl_default_start+0x135/0x560
[  742.236713][T17446]  genl_start+0x4b4/0x6c0
[  742.241056][T17446]  __netlink_dump_start+0x43c/0x7a0
[  742.246552][T17446]  genl_family_rcv_msg_dumpit+0x214/0x310
[  742.252305][T17446]  ? genl_rcv_msg+0x7a0/0x7a0
[  742.256981][T17446]  ? genl_get_cmd+0x693/0x930
[  742.261661][T17446]  ? genl_family_rcv_msg_doit+0x310/0x310
[  742.267374][T17446]  ? genl_start+0x6c0/0x6c0
[  742.271874][T17446]  ? genl_dumpit+0x1a0/0x1a0
[  742.276476][T17446]  genl_rcv_msg+0x5de/0x7a0
[  742.280983][T17446]  ? genl_bind+0x360/0x360
[  742.285395][T17446]  ? ethnl_default_doit+0xba0/0xba0
[  742.290696][T17446]  ? ethnl_default_start+0x560/0x560
[  742.295975][T17446]  ? ethnl_default_dumpit+0x8a0/0x8a0
[  742.301373][T17446]  netlink_rcv_skb+0x235/0x4c0
[  742.306137][T17446]  ? genl_bind+0x360/0x360
[  742.310553][T17446]  ? netlink_ack+0x1160/0x1160
[  742.315348][T17446]  ? __lock_acquire+0x7d80/0x7d80
[  742.320377][T17446]  ? net_generic+0x1e/0x240
[  742.324884][T17446]  ? down_read+0x1ac/0x2e0
[  742.329321][T17446]  genl_rcv+0x28/0x40
[  742.333311][T17446]  netlink_unicast+0x7b1/0x930
[  742.338104][T17446]  netlink_sendmsg+0x8d0/0xbf0
[  742.342918][T17446]  ? netlink_getsockopt+0x590/0x590
[  742.348125][T17446]  ? apparmor_socket_sendmsg+0x8e/0x330
[  742.353674][T17446]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  742.358966][T17446]  ? security_socket_sendmsg+0x80/0xa0
[  742.364439][T17446]  ? netlink_getsockopt+0x590/0x590
[  742.369836][T17446]  ____sys_sendmsg+0x61b/0x980
[  742.374613][T17446]  ? __asan_memset+0x22/0x40
[  742.379207][T17446]  ? __sys_sendmsg_sock+0x30/0x30
[  742.384226][T17446]  ? __import_iovec+0x5f2/0x850
[  742.389088][T17446]  ? import_iovec+0x73/0xa0
[  742.393655][T17446]  ___sys_sendmsg+0x2a6/0x360
[  742.398362][T17446]  ? __sys_sendmsg+0x2b0/0x2b0
[  742.403157][T17446]  ? ktime_get+0x7f/0x280
[  742.407515][T17446]  __se_sys_sendmsg+0x1d0/0x2c0
[  742.412382][T17446]  ? __x64_sys_sendmsg+0x80/0x80
[  742.417338][T17446]  ? lockdep_hardirqs_on+0x98/0x150
[  742.422541][T17446]  do_syscall_64+0x55/0xb0
[  742.426957][T17446]  ? clear_bhb_loop+0x40/0x90
[  742.431636][T17446]  ? clear_bhb_loop+0x40/0x90
[  742.436314][T17446]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.442296][T17446] RIP: 0033:0x7f71add9e0d9
[  742.446717][T17446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.466322][T17446] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  742.474733][T17446] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  742.482700][T17446] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  742.490691][T17446] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  742.498665][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.506633][T17446] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  742.514620][T17446]  </TASK>
[  742.691720][T17451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4262'.
[  742.752379][T17452] netlink: 'syz.3.4263': attribute type 29 has an invalid length.
[  742.772532][T17452] netlink: 'syz.3.4263': attribute type 29 has an invalid length.
[  742.782080][T17453] netlink: 'syz.3.4263': attribute type 29 has an invalid length.
[  742.794728][T17452] netlink: 'syz.3.4263': attribute type 29 has an invalid length.
[  743.136607][T17464] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4267'.
[  743.220583][T17473] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4270'.
[  743.477323][T17480] syzkaller0: entered promiscuous mode
[  743.483918][T17480] syzkaller0: entered allmulticast mode
[  743.504551][T17483] delete_channel: no stack
[  743.525312][T17482] delete_channel: no stack
[  746.117312][T17523] syzkaller0: entered promiscuous mode
[  746.122961][T17523] syzkaller0: entered allmulticast mode
[  747.534159][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  747.540888][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  748.971997][T17535] validate_nla: 3 callbacks suppressed
[  748.972008][T17535] netlink: 'syz.2.4289': attribute type 39 has an invalid length.
[  749.160705][T17558] netlink: 'syz.2.4297': attribute type 29 has an invalid length.
[  749.179573][T17558] netlink: 'syz.2.4297': attribute type 29 has an invalid length.
[  749.321623][T17568] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4301'.
[  749.365717][T17568] bridge_slave_1: default FDB implementation only supports local addresses
[  749.415829][T17572] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4302'.
[  749.600455][T17582] netlink: 'syz.3.4307': attribute type 10 has an invalid length.
[  749.610296][T17582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'.
[  749.620716][T17582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  749.652962][T17582] netlink: 'syz.3.4307': attribute type 1 has an invalid length.
[  749.675135][T17582] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.4307'.
[  749.924168][T17591] syzkaller0: entered promiscuous mode
[  749.930304][T17591] syzkaller0: entered allmulticast mode
[  752.338121][T17599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4311'.
[  752.347323][T17599] : renamed from caif0
[  752.354175][T17599] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  752.369850][T17606] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4313'.
[  752.877701][T17632] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4321'.
[  753.488131][T17645] syzkaller0: entered promiscuous mode
[  753.493715][T17645] syzkaller0: entered allmulticast mode
[  753.966972][T17662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4332'.
[  754.340084][T17672] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4335'.
[  755.708117][T17662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4332'.
[  755.717386][T17675] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4336'.
[  755.729936][T17672] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.4335'.
[  755.992378][T17688] FAULT_INJECTION: forcing a failure.
[  755.992378][T17688] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.023262][T17688] CPU: 0 PID: 17688 Comm: syz.1.4340 Not tainted syzkaller #0
[  756.030781][T17688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.040943][T17688] Call Trace:
[  756.040954][T17688]  <TASK>
[  756.040962][T17688]  dump_stack_lvl+0x18c/0x250
[  756.040991][T17688]  ? show_regs_print_info+0x20/0x20
[  756.041010][T17688]  ? load_image+0x420/0x420
[  756.041035][T17688]  ? __might_fault+0xaa/0x120
[  756.041055][T17688]  ? __lock_acquire+0x7d80/0x7d80
[  756.071584][T17688]  should_fail_ex+0x394/0x4c0
[  756.076271][T17688]  _copy_from_iter+0x1cd/0x1290
[  756.081120][T17688]  ? mark_lock+0x94/0x320
[  756.085450][T17688]  ? copyout_mc+0x70/0x70
[  756.089791][T17688]  ? __virt_addr_valid+0x10c/0x380
[  756.094895][T17688]  ? __virt_addr_valid+0x10c/0x380
[  756.099999][T17688]  ? __virt_addr_valid+0x10c/0x380
[  756.105110][T17688]  ? __check_object_size+0x4fc/0xa40
[  756.110404][T17688]  udplite_getfrag+0x4d/0xa0
[  756.114996][T17688]  __ip6_append_data+0x1fa2/0x3d40
[  756.120123][T17688]  ? udpv6_sendmsg+0x2350/0x2350
[  756.125061][T17688]  ? ip6_setup_cork+0xff0/0xff0
[  756.129908][T17688]  ? __local_bh_enable_ip+0x13a/0x1c0
[  756.135274][T17688]  ip6_append_data+0x1b0/0x350
[  756.140038][T17688]  ? udpv6_sendmsg+0x2350/0x2350
[  756.144982][T17688]  udpv6_sendmsg+0xc34/0x2350
[  756.149669][T17688]  ? udpv6_sendmsg+0x2350/0x2350
[  756.154602][T17688]  ? __might_sleep+0xe0/0xe0
[  756.159186][T17688]  ? udp_v6_early_demux+0xf90/0xf90
[  756.164395][T17688]  ? aa_af_perm+0x330/0x330
[  756.168899][T17688]  ? sock_rps_record_flow+0x19/0x3f0
[  756.174185][T17688]  ? inet_send_prepare+0x5b/0x250
[  756.179219][T17688]  ? inet6_sendmsg+0x5f/0xd0
[  756.183802][T17688]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  756.189003][T17688]  ____sys_sendmsg+0x61b/0x980
[  756.193773][T17688]  ? __asan_memset+0x22/0x40
[  756.198377][T17688]  ? __sys_sendmsg_sock+0x30/0x30
[  756.203411][T17688]  ? __import_iovec+0x5f2/0x850
[  756.208312][T17688]  ? import_iovec+0x73/0xa0
[  756.212831][T17688]  ___sys_sendmsg+0x2a6/0x360
[  756.217522][T17688]  ? get_pid_task+0x20/0x1e0
[  756.222114][T17688]  ? __sys_sendmsg+0x2b0/0x2b0
[  756.226890][T17688]  ? __lock_acquire+0x7d80/0x7d80
[  756.231951][T17688]  __se_sys_sendmsg+0x1d0/0x2c0
[  756.236801][T17688]  ? __x64_sys_sendmsg+0x80/0x80
[  756.241761][T17688]  ? lockdep_hardirqs_on+0x98/0x150
[  756.246959][T17688]  do_syscall_64+0x55/0xb0
[  756.251368][T17688]  ? clear_bhb_loop+0x40/0x90
[  756.256041][T17688]  ? clear_bhb_loop+0x40/0x90
[  756.260720][T17688]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.266634][T17688] RIP: 0033:0x7fdd6859e0d9
[  756.271042][T17688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.290660][T17688] RSP: 002b:00007fdd694ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  756.299079][T17688] RAX: ffffffffffffffda RBX: 00007fdd68825fa0 RCX: 00007fdd6859e0d9
[  756.307050][T17688] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[  756.315020][T17688] RBP: 00007fdd694ce090 R08: 0000000000000000 R09: 0000000000000000
[  756.323014][T17688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.330979][T17688] R13: 00007fdd68826038 R14: 00007fdd68825fa0 R15: 00007ffec8c1f198
[  756.338958][T17688]  </TASK>
[  756.351072][T17692] netlink: 'syz.2.4341': attribute type 6 has an invalid length.
[  756.363449][T17692] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4341'.
[  756.389496][T17695] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.4343'.
[  756.512019][T17701] netlink: 'syz.1.4346': attribute type 29 has an invalid length.
[  756.525750][T17701] netlink: 'syz.1.4346': attribute type 29 has an invalid length.
[  756.538605][T17697] netlink: 'syz.3.4344': attribute type 29 has an invalid length.
[  756.561086][T17697] netlink: 'syz.3.4344': attribute type 29 has an invalid length.
[  756.597910][T17701] 
@0Ù: renamed from bridge_slave_0 (while UP)
[  756.618150][T17702] netlink: 'syz.3.4344': attribute type 29 has an invalid length.
[  756.631880][T17697] netlink: 'syz.3.4344': attribute type 29 has an invalid length.
[  756.663827][T17706] netlink: 'syz.1.4346': attribute type 29 has an invalid length.
[  756.674669][T17701] netlink: 'syz.1.4346': attribute type 29 has an invalid length.
[  756.687404][T17697] netlink: 'syz.3.4344': attribute type 29 has an invalid length.
[  756.831429][T17709] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4348'.
[  756.887076][T17709] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  756.920872][T17709] CPU: 0 PID: 17709 Comm: syz.2.4348 Not tainted syzkaller #0
[  756.928433][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.938517][T17709] Call Trace:
[  756.941801][T17709]  <TASK>
[  756.944733][T17709]  dump_stack_lvl+0x18c/0x250
[  756.949419][T17709]  ? show_regs_print_info+0x20/0x20
[  756.954615][T17709]  ? load_image+0x420/0x420
[  756.959131][T17709]  sysfs_warn_dup+0x8e/0xa0
[  756.963638][T17709]  sysfs_do_create_link_sd+0xc0/0x110
[  756.969012][T17709]  device_add_class_symlinks+0x1cf/0x240
[  756.974647][T17709]  device_add+0x4f9/0xc40
[  756.978980][T17709]  wiphy_register+0x1d99/0x2ac0
[  756.983849][T17709]  ? cfg80211_event_work+0x40/0x40
[  756.988960][T17709]  ? minstrel_ht_alloc+0x88a/0x990
[  756.994088][T17709]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  757.000189][T17709]  ieee80211_register_hw+0x2dd8/0x3b30
[  757.005681][T17709]  ? ieee80211_register_hw+0xfb1/0x3b30
[  757.011235][T17709]  ? ieee80211_tasklet_handler+0x20/0x20
[  757.016869][T17709]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  757.022766][T17709]  ? __debug_object_init+0xec/0x450
[  757.027971][T17709]  ? __asan_memset+0x22/0x40
[  757.032564][T17709]  ? __hrtimer_init+0x189/0x270
[  757.037425][T17709]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  757.043188][T17709]  ? mac80211_hwsim_free+0x220/0x220
[  757.048471][T17709]  ? rcu_is_watching+0x15/0xb0
[  757.053234][T17709]  ? kstrndup+0xbd/0x140
[  757.057487][T17709]  hwsim_new_radio_nl+0xdad/0x1a70
[  757.062595][T17709]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  757.068325][T17709]  ? mark_lock+0x94/0x320
[  757.072661][T17709]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  757.079026][T17709]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  757.085200][T17709]  ? lockdep_hardirqs_on+0x98/0x150
[  757.090404][T17709]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  757.096830][T17709]  genl_family_rcv_msg_doit+0x21a/0x310
[  757.102389][T17709]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  757.108297][T17709]  ? bpf_lsm_capable+0x9/0x10
[  757.112977][T17709]  ? security_capable+0x89/0xb0
[  757.117921][T17709]  genl_rcv_msg+0x611/0x7a0
[  757.122434][T17709]  ? genl_bind+0x360/0x360
[  757.126856][T17709]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  757.133187][T17709]  ? mark_lock+0x94/0x320
[  757.137536][T17709]  netlink_rcv_skb+0x235/0x4c0
[  757.142301][T17709]  ? genl_bind+0x360/0x360
[  757.146718][T17709]  ? netlink_ack+0x1160/0x1160
[  757.151591][T17709]  ? down_read+0x190/0x2e0
[  757.156028][T17709]  ? kasan_check_range+0x12/0x290
[  757.161054][T17709]  ? down_read+0x1ac/0x2e0
[  757.165476][T17709]  genl_rcv+0x28/0x40
[  757.169459][T17709]  netlink_unicast+0x7b1/0x930
[  757.174235][T17709]  netlink_sendmsg+0x8d0/0xbf0
[  757.179008][T17709]  ? netlink_getsockopt+0x590/0x590
[  757.184204][T17709]  ? apparmor_socket_sendmsg+0x8e/0x330
[  757.189752][T17709]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  757.195385][T17709]  ? security_socket_sendmsg+0x80/0xa0
[  757.200840][T17709]  ? netlink_getsockopt+0x590/0x590
[  757.206039][T17709]  ____sys_sendmsg+0x61b/0x980
[  757.210809][T17709]  ? __asan_memset+0x22/0x40
[  757.215489][T17709]  ? __sys_sendmsg_sock+0x30/0x30
[  757.220508][T17709]  ? __import_iovec+0x5f2/0x850
[  757.225453][T17709]  ? import_iovec+0x73/0xa0
[  757.229957][T17709]  ___sys_sendmsg+0x2a6/0x360
[  757.234636][T17709]  ? __sys_sendmsg+0x2b0/0x2b0
[  757.239412][T17709]  ? irqentry_enter+0x37/0x50
[  757.244133][T17709]  __se_sys_sendmsg+0x1d0/0x2c0
[  757.248981][T17709]  ? perf_trace_preemptirq_template+0x269/0x330
[  757.255314][T17709]  ? __x64_sys_sendmsg+0x80/0x80
[  757.260272][T17709]  ? lockdep_hardirqs_on+0x98/0x150
[  757.265475][T17709]  do_syscall_64+0x55/0xb0
[  757.269886][T17709]  ? clear_bhb_loop+0x40/0x90
[  757.274660][T17709]  ? clear_bhb_loop+0x40/0x90
[  757.279350][T17709]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  757.285240][T17709] RIP: 0033:0x7fe48e79e0d9
[  757.289659][T17709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  757.309267][T17709] RSP: 002b:00007fe48f704028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  757.317699][T17709] RAX: ffffffffffffffda RBX: 00007fe48ea25fa0 RCX: 00007fe48e79e0d9
[  757.325668][T17709] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  757.333641][T17709] RBP: 00007fe48e835024 R08: 0000000000000000 R09: 0000000000000000
[  757.341624][T17709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.349611][T17709] R13: 00007fe48ea26038 R14: 00007fe48ea25fa0 R15: 00007fff475e3f38
[  757.357603][T17709]  </TASK>
[  757.441904][T17721] FAULT_INJECTION: forcing a failure.
[  757.441904][T17721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  757.483393][T17721] CPU: 1 PID: 17721 Comm: syz.1.4349 Not tainted syzkaller #0
[  757.490944][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  757.501060][T17721] Call Trace:
[  757.504392][T17721]  <TASK>
[  757.507373][T17721]  dump_stack_lvl+0x18c/0x250
[  757.512126][T17721]  ? show_regs_print_info+0x20/0x20
[  757.517383][T17721]  ? load_image+0x420/0x420
[  757.521965][T17721]  ? __might_fault+0xaa/0x120
[  757.526710][T17721]  ? __lock_acquire+0x7d80/0x7d80
[  757.531823][T17721]  should_fail_ex+0x394/0x4c0
[  757.536563][T17721]  _copy_from_iter+0x1cd/0x1290
[  757.541448][T17721]  ? rcu_is_watching+0x15/0xb0
[  757.546251][T17721]  ? copyout_mc+0x70/0x70
[  757.550611][T17721]  ? __virt_addr_valid+0x10c/0x380
[  757.555747][T17721]  ? __virt_addr_valid+0x10c/0x380
[  757.560886][T17721]  ? __virt_addr_valid+0x10c/0x380
[  757.566030][T17721]  ? __check_object_size+0x4fc/0xa40
[  757.571340][T17721]  netlink_sendmsg+0x76b/0xbf0
[  757.576144][T17721]  ? netlink_getsockopt+0x590/0x590
[  757.581399][T17721]  ? apparmor_socket_sendmsg+0x8e/0x330
[  757.586977][T17721]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  757.592307][T17721]  ? security_socket_sendmsg+0x80/0xa0
[  757.597786][T17721]  ? netlink_getsockopt+0x590/0x590
[  757.603013][T17721]  ____sys_sendmsg+0x61b/0x980
[  757.607816][T17721]  ? __asan_memset+0x22/0x40
[  757.612435][T17721]  ? __sys_sendmsg_sock+0x30/0x30
[  757.617499][T17721]  ? __import_iovec+0x5f2/0x850
[  757.622409][T17721]  ? import_iovec+0x73/0xa0
[  757.626965][T17721]  ___sys_sendmsg+0x2a6/0x360
[  757.631688][T17721]  ? __sys_sendmsg+0x2b0/0x2b0
[  757.636529][T17721]  ? __lock_acquire+0x7d80/0x7d80
[  757.641718][T17721]  __se_sys_sendmsg+0x1d0/0x2c0
[  757.646595][T17721]  ? perf_trace_preemptirq_template+0x269/0x330
[  757.652885][T17721]  ? __x64_sys_sendmsg+0x80/0x80
[  757.657885][T17721]  ? lockdep_hardirqs_on+0x98/0x150
[  757.663106][T17721]  do_syscall_64+0x55/0xb0
[  757.667539][T17721]  ? clear_bhb_loop+0x40/0x90
[  757.672318][T17721]  ? clear_bhb_loop+0x40/0x90
[  757.677016][T17721]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  757.682929][T17721] RIP: 0033:0x7fdd6859e0d9
[  757.687389][T17721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  757.707013][T17721] RSP: 002b:00007fdd694ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  757.715457][T17721] RAX: ffffffffffffffda RBX: 00007fdd68826090 RCX: 00007fdd6859e0d9
[  757.723480][T17721] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b
[  757.731478][T17721] RBP: 00007fdd694ad090 R08: 0000000000000000 R09: 0000000000000000
[  757.739472][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  757.747475][T17721] R13: 00007fdd68826128 R14: 00007fdd68826090 R15: 00007ffec8c1f198
[  757.755506][T17721]  </TASK>
[  757.882507][T17719] syzkaller0: entered promiscuous mode
[  757.889197][T17719] syzkaller0: entered allmulticast mode
[  758.075558][T13627] syzkaller0 selects TX queue 2, but real number of TX queues is 2
[  758.084250][T17727] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4352'.
[  758.091631][T17732] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4355'.
[  758.555969][T17744] FAULT_INJECTION: forcing a failure.
[  758.555969][T17744] name failslab, interval 1, probability 0, space 0, times 0
[  758.569110][T17744] CPU: 1 PID: 17744 Comm: syz.1.4359 Not tainted syzkaller #0
[  758.576638][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  758.586731][T17744] Call Trace:
[  758.590027][T17744]  <TASK>
[  758.592989][T17744]  dump_stack_lvl+0x18c/0x250
[  758.597707][T17744]  ? show_regs_print_info+0x20/0x20
[  758.602928][T17744]  ? load_image+0x420/0x420
[  758.607463][T17744]  ? __might_sleep+0xe0/0xe0
[  758.612070][T17744]  ? __lock_acquire+0x7d80/0x7d80
[  758.617124][T17744]  should_fail_ex+0x394/0x4c0
[  758.621863][T17744]  should_failslab+0x9/0x20
[  758.626399][T17744]  slab_pre_alloc_hook+0x59/0x300
[  758.631452][T17744]  ? __lock_acquire+0x7d80/0x7d80
[  758.636508][T17744]  kmem_cache_alloc_node+0x5e/0x310
[  758.641725][T17744]  ? __alloc_skb+0x103/0x2c0
[  758.646343][T17744]  __alloc_skb+0x103/0x2c0
[  758.650786][T17744]  netlink_sendmsg+0x66a/0xbf0
[  758.655589][T17744]  ? netlink_getsockopt+0x590/0x590
[  758.660808][T17744]  ? apparmor_socket_sendmsg+0x8e/0x330
[  758.666394][T17744]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  758.671707][T17744]  ? security_socket_sendmsg+0x80/0xa0
[  758.677192][T17744]  ? netlink_getsockopt+0x590/0x590
[  758.682420][T17744]  ____sys_sendmsg+0x61b/0x980
[  758.687222][T17744]  ? __asan_memset+0x22/0x40
[  758.691882][T17744]  ? __sys_sendmsg_sock+0x30/0x30
[  758.697388][T17744]  ? __import_iovec+0x5f2/0x850
[  758.702301][T17744]  ? import_iovec+0x73/0xa0
[  758.706841][T17744]  ___sys_sendmsg+0x2a6/0x360
[  758.711562][T17744]  ? __sys_sendmsg+0x2b0/0x2b0
[  758.716398][T17744]  ? __lock_acquire+0x7d80/0x7d80
[  758.721496][T17744]  __se_sys_sendmsg+0x1d0/0x2c0
[  758.726373][T17744]  ? __x64_sys_sendmsg+0x80/0x80
[  758.731365][T17744]  ? lockdep_hardirqs_on+0x98/0x150
[  758.736589][T17744]  do_syscall_64+0x55/0xb0
[  758.741016][T17744]  ? clear_bhb_loop+0x40/0x90
[  758.745791][T17744]  ? clear_bhb_loop+0x40/0x90
[  758.750485][T17744]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  758.756394][T17744] RIP: 0033:0x7fdd6859e0d9
[  758.760826][T17744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.780447][T17744] RSP: 002b:00007fdd694ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  758.788966][T17744] RAX: ffffffffffffffda RBX: 00007fdd68825fa0 RCX: 00007fdd6859e0d9
[  758.796949][T17744] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  758.804934][T17744] RBP: 00007fdd694ce090 R08: 0000000000000000 R09: 0000000000000000
[  758.812923][T17744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.820906][T17744] R13: 00007fdd68826038 R14: 00007fdd68825fa0 R15: 00007ffec8c1f198
[  758.828932][T17744]  </TASK>
[  760.217682][T17738] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.225390][T17738] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.255503][T17746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  760.262845][T17746] IPv6: NLM_F_CREATE should be set when creating new route
[  760.270371][T17746] IPv6: NLM_F_CREATE should be set when creating new route
[  760.277753][T17746] IPv6: NLM_F_CREATE should be set when creating new route
[  760.287665][T17747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4360'.
[  760.584591][T17760] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4365'.
[  760.643406][T17758] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4364'.
[  760.873832][T17766] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  760.914314][T17766] bridge0: port 4(bond0) entered blocking state
[  760.920877][T17766] bridge0: port 4(bond0) entered forwarding state
[  760.927787][T17766] bridge0: port 3(hsr0) entered blocking state
[  760.934129][T17766] bridge0: port 3(hsr0) entered forwarding state
[  760.940907][T17766] bridge0: port 1(
c
@0Ù) entered blocking state
[  760.947503][T17766] bridge0: port 1(
c
@0Ù) entered forwarding state
[  760.971028][T17766] bridge0: port 4(bond0) entered disabled state
[  760.977661][T17766] bridge0: port 3(hsr0) entered disabled state
[  760.984087][T17766] bridge0: port 1(
c
@0Ù) entered disabled state
[  761.046063][T17767] IPv6: NLM_F_CREATE should be specified when creating new route
[  761.085347][T17767] IPv6: Can't replace route, no match found
[  761.664776][T17789] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4375'.
[  761.666583][T17784] validate_nla: 7 callbacks suppressed
[  761.666671][T17784] netlink: 'syz.0.4372': attribute type 21 has an invalid length.
[  761.693486][T17784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  761.701630][T17784] IPv6: NLM_F_CREATE should be set when creating new route
[  761.709830][T17784] IPv6: NLM_F_CREATE should be set when creating new route
[  761.717641][T17784] IPv6: NLM_F_CREATE should be set when creating new route
[  761.771416][T17791] syzkaller0: entered promiscuous mode
[  761.777196][T17791] syzkaller0: entered allmulticast mode
[  761.785524][T17793] netlink: 'syz.0.4372': attribute type 10 has an invalid length.
[  761.793786][T17793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4372'.
[  762.028101][T17798] FAULT_INJECTION: forcing a failure.
[  762.028101][T17798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  762.041614][T17798] CPU: 0 PID: 17798 Comm: syz.2.4376 Not tainted syzkaller #0
[  762.049110][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  762.059190][T17798] Call Trace:
[  762.062499][T17798]  <TASK>
[  762.065447][T17798]  dump_stack_lvl+0x18c/0x250
[  762.070162][T17798]  ? show_regs_print_info+0x20/0x20
[  762.075404][T17798]  ? load_image+0x420/0x420
[  762.079953][T17798]  ? __might_fault+0xaa/0x120
[  762.084660][T17798]  ? __lock_acquire+0x7d80/0x7d80
[  762.089807][T17798]  ? __virt_addr_valid+0x10c/0x380
[  762.094954][T17798]  should_fail_ex+0x394/0x4c0
[  762.099669][T17798]  _copy_to_user+0x2f/0xa0
[  762.104119][T17798]  bpf_verifier_vlog+0x432/0x840
[  762.109115][T17798]  __btf_verifier_log+0xe3/0x140
[  762.114094][T17798]  ? kernel_text_address+0xa0/0xd0
[  762.119249][T17798]  ? btf_check_sec_info+0x350/0x350
[  762.124502][T17798]  __btf_verifier_log_type+0x3c9/0x690
[  762.130013][T17798]  ? __stack_depot_save+0x1f/0x660
[  762.135157][T17798]  ? btf_int_show+0x2810/0x2810
[  762.140090][T17798]  ? __kasan_kmalloc+0x8f/0xa0
[  762.144855][T17798]  ? __kmalloc_node+0xb6/0x240
[  762.149698][T17798]  ? kvmalloc_node+0x70/0x180
[  762.154375][T17798]  ? btf_parse_type_sec+0x1b0/0x1960
[  762.159662][T17798]  ? btf_new_fd+0x440/0x9e0
[  762.164168][T17798]  ? __x64_sys_bpf+0x7c/0x90
[  762.168754][T17798]  ? do_syscall_64+0x55/0xb0
[  762.173343][T17798]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  762.179417][T17798]  btf_verifier_log_vsi+0x17d/0x3d0
[  762.184625][T17798]  ? btf_datasec_show+0x970/0x970
[  762.189665][T17798]  btf_datasec_resolve+0x734/0xd10
[  762.194826][T17798]  btf_resolve+0x423/0x14a0
[  762.199338][T17798]  btf_parse_type_sec+0x576/0x1960
[  762.204461][T17798]  ? btf_verifier_log+0x1a0/0x1a0
[  762.209492][T17798]  ? btf_parse_str_sec+0x20d/0x2a0
[  762.214604][T17798]  btf_new_fd+0x440/0x9e0
[  762.218938][T17798]  ? bpf_btf_show_fdinfo+0x80/0x80
[  762.224048][T17798]  ? capable+0x88/0xe0
[  762.228124][T17798]  __sys_bpf+0x670/0x890
[  762.232389][T17798]  ? bpf_link_show_fdinfo+0x390/0x390
[  762.237776][T17798]  ? lock_chain_count+0x20/0x20
[  762.242666][T17798]  __x64_sys_bpf+0x7c/0x90
[  762.247192][T17798]  do_syscall_64+0x55/0xb0
[  762.251629][T17798]  ? clear_bhb_loop+0x40/0x90
[  762.256307][T17798]  ? clear_bhb_loop+0x40/0x90
[  762.260985][T17798]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  762.266877][T17798] RIP: 0033:0x7fe48e79e0d9
[  762.271288][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  762.290890][T17798] RSP: 002b:00007fe48f704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  762.299300][T17798] RAX: ffffffffffffffda RBX: 00007fe48ea25fa0 RCX: 00007fe48e79e0d9
[  762.307271][T17798] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012
[  762.315236][T17798] RBP: 00007fe48f704090 R08: 0000000000000000 R09: 0000000000000000
[  762.323220][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  762.331205][T17798] R13: 00007fe48ea26038 R14: 00007fe48ea25fa0 R15: 00007fff475e3f38
[  762.339187][T17798]  </TASK>
[  762.600923][T17805] netlink: 'syz.0.4381': attribute type 3 has an invalid length.
[  762.609074][T17805] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.4381'.
[  764.267902][T17796] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4377'.
[  764.277676][T17803] netlink: 'syz.2.4380': attribute type 21 has an invalid length.
[  764.286423][T17803] netlink: 'syz.2.4380': attribute type 1 has an invalid length.
[  764.294555][T17803] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.4380'.
[  764.458922][T17814] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4385'.
[  764.668342][T17825] FAULT_INJECTION: forcing a failure.
[  764.668342][T17825] name failslab, interval 1, probability 0, space 0, times 0
[  764.676681][T17827] FAULT_INJECTION: forcing a failure.
[  764.676681][T17827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  764.689893][T17825] CPU: 0 PID: 17825 Comm: syz.1.4389 Not tainted syzkaller #0
[  764.701666][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  764.711759][T17825] Call Trace:
[  764.715078][T17825]  <TASK>
[  764.718035][T17825]  dump_stack_lvl+0x18c/0x250
[  764.722749][T17825]  ? show_regs_print_info+0x20/0x20
[  764.727983][T17825]  ? load_image+0x420/0x420
[  764.732517][T17825]  ? __might_sleep+0xe0/0xe0
[  764.737134][T17825]  ? __lock_acquire+0x7d80/0x7d80
[  764.742212][T17825]  should_fail_ex+0x394/0x4c0
[  764.746937][T17825]  should_failslab+0x9/0x20
[  764.751483][T17825]  slab_pre_alloc_hook+0x59/0x300
[  764.756541][T17825]  ? sctp_transport_new+0x7e/0x630
[  764.761668][T17825]  __kmem_cache_alloc_node+0x53/0x250
[  764.767057][T17825]  ? sctp_transport_new+0x7e/0x630
[  764.772178][T17825]  kmalloc_trace+0x2a/0xe0
[  764.776654][T17825]  sctp_transport_new+0x7e/0x630
[  764.781617][T17825]  sctp_assoc_add_peer+0x24e/0x1350
[  764.786853][T17825]  sctp_connect_new_asoc+0x323/0x6a0
[  764.792157][T17825]  ? __sctp_connect+0xd80/0xd80
[  764.797088][T17825]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  764.802905][T17825]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  764.808728][T17825]  ? sctp_endpoint_lookup_assoc+0x22f/0x260
[  764.814638][T17825]  __sctp_connect+0x5b7/0xd80
[  764.819348][T17825]  ? sctp_send_asconf+0x170/0x170
[  764.824378][T17825]  ? __local_bh_enable_ip+0x13a/0x1c0
[  764.829779][T17825]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  764.835338][T17825]  ? security_sctp_bind_connect+0x89/0xb0
[  764.841070][T17825]  sctp_setsockopt_connectx+0x104/0x1a0
[  764.846629][T17825]  sctp_setsockopt+0x6d8/0x11e0
[  764.851483][T17825]  ? sock_common_recvmsg+0x190/0x190
[  764.856771][T17825]  do_sock_setsockopt+0x175/0x1a0
[  764.861827][T17825]  ? __fdget+0x180/0x210
[  764.866166][T17825]  __x64_sys_setsockopt+0x182/0x200
[  764.871376][T17825]  do_syscall_64+0x55/0xb0
[  764.875792][T17825]  ? clear_bhb_loop+0x40/0x90
[  764.880469][T17825]  ? clear_bhb_loop+0x40/0x90
[  764.885151][T17825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  764.891049][T17825] RIP: 0033:0x7fdd6859e0d9
[  764.895472][T17825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  764.915080][T17825] RSP: 002b:00007fdd694ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  764.923497][T17825] RAX: ffffffffffffffda RBX: 00007fdd68825fa0 RCX: 00007fdd6859e0d9
[  764.931472][T17825] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  764.939456][T17825] RBP: 00007fdd694ce090 R08: 000000000000001c R09: 0000000000000000
[  764.947426][T17825] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  764.955395][T17825] R13: 00007fdd68826038 R14: 00007fdd68825fa0 R15: 00007ffec8c1f198
[  764.963394][T17825]  </TASK>
[  764.987222][T17827] CPU: 0 PID: 17827 Comm: syz.0.4390 Not tainted syzkaller #0
[  764.994758][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  765.004825][T17827] Call Trace:
[  765.008109][T17827]  <TASK>
[  765.011038][T17827]  dump_stack_lvl+0x18c/0x250
[  765.015719][T17827]  ? show_regs_print_info+0x20/0x20
[  765.020913][T17827]  ? load_image+0x420/0x420
[  765.025436][T17827]  ? __lock_acquire+0x7d80/0x7d80
[  765.030468][T17827]  ? snprintf+0xe9/0x140
[  765.034714][T17827]  should_fail_ex+0x394/0x4c0
[  765.039393][T17827]  _copy_to_user+0x2f/0xa0
[  765.043812][T17827]  simple_read_from_buffer+0xe7/0x150
[  765.049183][T17827]  proc_fail_nth_read+0x1e8/0x260
[  765.054208][T17827]  ? proc_fault_inject_write+0x360/0x360
[  765.059852][T17827]  ? fsnotify_perm+0x271/0x5e0
[  765.064616][T17827]  ? proc_fault_inject_write+0x360/0x360
[  765.070250][T17827]  vfs_read+0x298/0x990
[  765.074410][T17827]  ? kernel_read+0x1e0/0x1e0
[  765.079001][T17827]  ? __fget_files+0x28/0x460
[  765.083594][T17827]  ? __fget_files+0x3fc/0x460
[  765.088279][T17827]  ? __fdget_pos+0x2a3/0x330
[  765.092901][T17827]  ? ksys_read+0x74/0x260
[  765.097231][T17827]  ksys_read+0x151/0x260
[  765.101473][T17827]  ? vfs_write+0x9a0/0x9a0
[  765.105890][T17827]  ? lockdep_hardirqs_on+0x98/0x150
[  765.111095][T17827]  do_syscall_64+0x55/0xb0
[  765.115505][T17827]  ? clear_bhb_loop+0x40/0x90
[  765.120182][T17827]  ? clear_bhb_loop+0x40/0x90
[  765.124855][T17827]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  765.130742][T17827] RIP: 0033:0x7f71add5e90e
[  765.135153][T17827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  765.154781][T17827] RSP: 002b:00007f71aed57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  765.163196][T17827] RAX: ffffffffffffffda RBX: 00007f71aed586c0 RCX: 00007f71add5e90e
[  765.171164][T17827] RDX: 000000000000000f RSI: 00007f71aed580a0 RDI: 0000000000000004
[  765.179132][T17827] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  765.187098][T17827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  765.195066][T17827] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  765.203050][T17827]  </TASK>
[  765.227474][T17830] syzkaller0: entered promiscuous mode
[  765.233097][T17830] syzkaller0: entered allmulticast mode
[  765.240088][T17823] netlink: 'syz.3.4388': attribute type 21 has an invalid length.
[  765.248431][T17823] IPv6: NLM_F_CREATE should be specified when creating new route
[  765.257975][T17823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  765.265489][T17823] IPv6: NLM_F_CREATE should be set when creating new route
[  765.273199][T17823] IPv6: NLM_F_CREATE should be set when creating new route
[  765.280782][T17823] IPv6: NLM_F_CREATE should be set when creating new route
[  765.302448][T17832] netlink: 'syz.3.4388': attribute type 10 has an invalid length.
[  765.310943][T17832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4388'.
[  767.050960][T17838] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.122809][T17844] syzkaller0: entered promiscuous mode
[  767.135746][T17844] syzkaller0: entered allmulticast mode
[  767.235564][T17854] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4398'.
[  767.277601][T17857] FAULT_INJECTION: forcing a failure.
[  767.277601][T17857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.299005][T17857] CPU: 1 PID: 17857 Comm: syz.3.4399 Not tainted syzkaller #0
[  767.306531][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  767.316583][T17857] Call Trace:
[  767.319854][T17857]  <TASK>
[  767.322774][T17857]  dump_stack_lvl+0x18c/0x250
[  767.327448][T17857]  ? show_regs_print_info+0x20/0x20
[  767.332638][T17857]  ? load_image+0x420/0x420
[  767.337135][T17857]  ? __might_fault+0xaa/0x120
[  767.341799][T17857]  ? __lock_acquire+0x7d80/0x7d80
[  767.346836][T17857]  should_fail_ex+0x394/0x4c0
[  767.351507][T17857]  _copy_to_user+0x2f/0xa0
[  767.355928][T17857]  bpf_test_finish+0x19f/0x650
[  767.360718][T17857]  ? bpf_test_run+0x174/0x870
[  767.365394][T17857]  ? convert_skb_to___skb+0x420/0x420
[  767.370764][T17857]  ? kasan_check_range+0x89/0x290
[  767.375784][T17857]  bpf_prog_test_run_skb+0x1135/0x18f0
[  767.381273][T17857]  ? cpu_online+0x60/0x60
[  767.385611][T17857]  bpf_prog_test_run+0x31f/0x390
[  767.390544][T17857]  __sys_bpf+0x49d/0x890
[  767.394784][T17857]  ? bpf_link_show_fdinfo+0x390/0x390
[  767.400155][T17857]  ? lock_chain_count+0x20/0x20
[  767.405016][T17857]  __x64_sys_bpf+0x7c/0x90
[  767.409438][T17857]  do_syscall_64+0x55/0xb0
[  767.413875][T17857]  ? clear_bhb_loop+0x40/0x90
[  767.418584][T17857]  ? clear_bhb_loop+0x40/0x90
[  767.423256][T17857]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  767.429142][T17857] RIP: 0033:0x7f5c6219e0d9
[  767.433558][T17857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.453190][T17857] RSP: 002b:00007f5c62fad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  767.461621][T17857] RAX: ffffffffffffffda RBX: 00007f5c62425fa0 RCX: 00007f5c6219e0d9
[  767.469587][T17857] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  767.477566][T17857] RBP: 00007f5c62fad090 R08: 0000000000000000 R09: 0000000000000000
[  767.485543][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.493521][T17857] R13: 00007f5c62426038 R14: 00007f5c62425fa0 R15: 00007ffcd8cfd1c8
[  767.501536][T17857]  </TASK>
[  767.609013][T17860] netlink: 'syz.3.4402': attribute type 46 has an invalid length.
[  767.662429][T17865] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4402'.
[  768.753974][T17872] FAULT_INJECTION: forcing a failure.
[  768.753974][T17872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  768.768075][T17872] CPU: 1 PID: 17872 Comm: syz.0.4405 Not tainted syzkaller #0
[  768.776014][T17872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  768.786089][T17872] Call Trace:
[  768.789363][T17872]  <TASK>
[  768.792286][T17872]  dump_stack_lvl+0x18c/0x250
[  768.796987][T17872]  ? show_regs_print_info+0x20/0x20
[  768.802195][T17872]  ? load_image+0x420/0x420
[  768.806705][T17872]  ? __might_fault+0xaa/0x120
[  768.811395][T17872]  ? __lock_acquire+0x7d80/0x7d80
[  768.816434][T17872]  should_fail_ex+0x394/0x4c0
[  768.821109][T17872]  _copy_from_user+0x2f/0xe0
[  768.825713][T17872]  ___sys_sendmsg+0x1c7/0x360
[  768.830393][T17872]  ? __sys_sendmsg+0x2b0/0x2b0
[  768.835161][T17872]  ? ktime_get+0x7f/0x280
[  768.839518][T17872]  ? trace_call_bpf+0xc3/0x6c0
[  768.844312][T17872]  __se_sys_sendmsg+0x1d0/0x2c0
[  768.849197][T17872]  ? perf_trace_preemptirq_template+0x269/0x330
[  768.855463][T17872]  ? __x64_sys_sendmsg+0x80/0x80
[  768.860436][T17872]  ? lockdep_hardirqs_on+0x98/0x150
[  768.865638][T17872]  do_syscall_64+0x55/0xb0
[  768.870046][T17872]  ? clear_bhb_loop+0x40/0x90
[  768.874713][T17872]  ? clear_bhb_loop+0x40/0x90
[  768.879406][T17872]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  768.885319][T17872] RIP: 0033:0x7f71add9e0d9
[  768.889743][T17872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.909347][T17872] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  768.917756][T17872] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  768.925720][T17872] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000006
[  768.933683][T17872] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  768.941646][T17872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.949609][T17872] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  768.957594][T17872]  </TASK>
[  770.278998][T17860] netlink: 'syz.3.4402': attribute type 46 has an invalid length.
[  770.411160][T17880] FAULT_INJECTION: forcing a failure.
[  770.411160][T17880] name failslab, interval 1, probability 0, space 0, times 0
[  770.425061][T17880] CPU: 0 PID: 17880 Comm: syz.2.4408 Not tainted syzkaller #0
[  770.432566][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  770.442654][T17880] Call Trace:
[  770.445954][T17880]  <TASK>
[  770.448901][T17880]  dump_stack_lvl+0x18c/0x250
[  770.453604][T17880]  ? sctp_sendmsg+0x1519/0x27b0
[  770.458492][T17880]  ? ___sys_sendmsg+0x2a6/0x360
[  770.463368][T17880]  ? show_regs_print_info+0x20/0x20
[  770.468596][T17880]  ? load_image+0x420/0x420
[  770.473151][T17880]  should_fail_ex+0x394/0x4c0
[  770.477861][T17880]  should_failslab+0x9/0x20
[  770.482393][T17880]  slab_pre_alloc_hook+0x59/0x300
[  770.487458][T17880]  ? sctp_add_bind_addr+0x8c/0x360
[  770.492600][T17880]  __kmem_cache_alloc_node+0x53/0x250
[  770.498017][T17880]  ? sctp_add_bind_addr+0x8c/0x360
[  770.503159][T17880]  kmalloc_trace+0x2a/0xe0
[  770.507623][T17880]  sctp_add_bind_addr+0x8c/0x360
[  770.512597][T17880]  sctp_copy_local_addr_list+0x31b/0x4e0
[  770.518276][T17880]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  770.524026][T17880]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  770.530131][T17880]  ? sctp_v6_is_any+0x64/0x70
[  770.534834][T17880]  ? sctp_copy_one_addr+0x8c/0x350
[  770.539979][T17880]  sctp_bind_addr_copy+0xb3/0x3c0
[  770.545037][T17880]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  770.551413][T17880]  sctp_connect_new_asoc+0x2f9/0x6a0
[  770.556739][T17880]  ? __sctp_connect+0xd80/0xd80
[  770.561625][T17880]  ? __local_bh_enable_ip+0x13a/0x1c0
[  770.567026][T17880]  ? _local_bh_enable+0xa0/0xa0
[  770.571902][T17880]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  770.577739][T17880]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  770.583669][T17880]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  770.589257][T17880]  ? security_sctp_bind_connect+0x89/0xb0
[  770.595011][T17880]  sctp_sendmsg+0x1519/0x27b0
[  770.599739][T17880]  ? sctp_getsockopt+0xb60/0xb60
[  770.604722][T17880]  ? aa_af_perm+0x330/0x330
[  770.609286][T17880]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  770.615747][T17880]  ? sock_rps_record_flow+0x19/0x3f0
[  770.621107][T17880]  ? inet_sendmsg+0x7e/0x2a0
[  770.625726][T17880]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  770.631060][T17880]  ? inet_send_prepare+0x250/0x250
[  770.636214][T17880]  ____sys_sendmsg+0x61b/0x980
[  770.641016][T17880]  ? __asan_memset+0x22/0x40
[  770.645637][T17880]  ? __sys_sendmsg_sock+0x30/0x30
[  770.650690][T17880]  ? __import_iovec+0x5f2/0x850
[  770.655598][T17880]  ? import_iovec+0x73/0xa0
[  770.660138][T17880]  ___sys_sendmsg+0x2a6/0x360
[  770.664850][T17880]  ? get_pid_task+0x20/0x1e0
[  770.669478][T17880]  ? __sys_sendmsg+0x2b0/0x2b0
[  770.674296][T17880]  ? __lock_acquire+0x7d80/0x7d80
[  770.679378][T17880]  __se_sys_sendmsg+0x1d0/0x2c0
[  770.684261][T17880]  ? __x64_sys_sendmsg+0x80/0x80
[  770.689259][T17880]  ? lockdep_hardirqs_on+0x98/0x150
[  770.694496][T17880]  do_syscall_64+0x55/0xb0
[  770.698967][T17880]  ? clear_bhb_loop+0x40/0x90
[  770.703766][T17880]  ? clear_bhb_loop+0x40/0x90
[  770.708486][T17880]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  770.714414][T17880] RIP: 0033:0x7fe48e79e0d9
[  770.718857][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.738496][T17880] RSP: 002b:00007fe48f704028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  770.746948][T17880] RAX: ffffffffffffffda RBX: 00007fe48ea25fa0 RCX: 00007fe48e79e0d9
[  770.754946][T17880] RDX: 000000002400c041 RSI: 0000200000000000 RDI: 0000000000000003
[  770.763031][T17880] RBP: 00007fe48f704090 R08: 0000000000000000 R09: 0000000000000000
[  770.771031][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  770.779055][T17880] R13: 00007fe48ea26038 R14: 00007fe48ea25fa0 R15: 00007fff475e3f38
[  770.787167][T17880]  </TASK>
[  770.811165][T17882] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4409'.
[  771.096767][T17890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4413'.
[  771.124635][T17890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4413'.
[  771.156454][T17890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4413'.
[  771.280620][T17892] netlink: 'syz.1.4414': attribute type 21 has an invalid length.
[  771.663495][T13976] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  771.839029][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  771.850224][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  771.862677][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  771.876130][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  771.893499][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  771.901326][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  771.933734][ T7933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.113553][ T7933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.222011][T17908] syzkaller0: entered promiscuous mode
[  772.233429][T17908] syzkaller0: entered allmulticast mode
[  772.294478][T17914] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4420'.
[  772.338896][ T7933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.495465][ T7933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.327085][T17927] netlink: 'syz.3.4424': attribute type 9 has an invalid length.
[  773.336667][T17927] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4424'.
[  774.009502][T13976] Bluetooth: hci3: command tx timeout
[  775.178427][T13976] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  775.274177][T17938] netlink: 'syz.0.4428': attribute type 3 has an invalid length.
[  775.322423][T17938] netlink: 'syz.0.4428': attribute type 1 has an invalid length.
[  775.355432][T17938] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4428'.
[  775.421706][T17903] chnl_net:caif_netlink_parms(): no params data found
[  775.471784][T17948] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4429'.
[  775.844250][T17963] FAULT_INJECTION: forcing a failure.
[  775.844250][T17963] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  775.863235][T17963] CPU: 1 PID: 17963 Comm: syz.0.4431 Not tainted syzkaller #0
[  775.870744][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  775.881034][T17963] Call Trace:
[  775.884329][T17963]  <TASK>
[  775.887278][T17963]  dump_stack_lvl+0x18c/0x250
[  775.891988][T17963]  ? show_regs_print_info+0x20/0x20
[  775.897217][T17963]  ? load_image+0x420/0x420
[  775.901935][T17963]  ? __might_fault+0xaa/0x120
[  775.906646][T17963]  ? __lock_acquire+0x7d80/0x7d80
[  775.911691][T17963]  ? __virt_addr_valid+0x10c/0x380
[  775.916833][T17963]  should_fail_ex+0x394/0x4c0
[  775.921552][T17963]  _copy_to_user+0x2f/0xa0
[  775.925994][T17963]  generic_map_lookup_batch+0x85d/0xc60
[  775.931586][T17963]  ? bpf_map_update_value+0x710/0x710
[  775.936985][T17963]  ? __fdget+0x180/0x210
[  775.941255][T17963]  ? bpf_map_update_value+0x710/0x710
[  775.946652][T17963]  bpf_map_do_batch+0x2e3/0x600
[  775.951529][T17963]  ? security_bpf+0x7e/0xa0
[  775.956058][T17963]  __sys_bpf+0x7d7/0x890
[  775.960328][T17963]  ? bpf_link_show_fdinfo+0x390/0x390
[  775.965736][T17963]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  775.971936][T17963]  __x64_sys_bpf+0x7c/0x90
[  775.976378][T17963]  do_syscall_64+0x55/0xb0
[  775.980828][T17963]  ? clear_bhb_loop+0x40/0x90
[  775.985525][T17963]  ? clear_bhb_loop+0x40/0x90
[  775.990229][T17963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  775.996146][T17963] RIP: 0033:0x7f71add9e0d9
[  776.000585][T17963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.020213][T17963] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  776.028657][T17963] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  776.036664][T17963] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000018
[  776.044708][T17963] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  776.052751][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.060750][T17963] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  776.068768][T17963]  </TASK>
[  776.086324][T13976] Bluetooth: hci3: command tx timeout
[  776.157247][T17903] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.180012][T17903] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.193044][T17903] bridge_slave_0: entered allmulticast mode
[  776.223408][T17903] bridge_slave_0: entered promiscuous mode
[  776.239775][T17966] netlink: 'syz.3.4432': attribute type 21 has an invalid length.
[  776.259288][T17966] netlink: 'syz.3.4432': attribute type 1 has an invalid length.
[  776.270345][T17966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4432'.
[  776.380874][T17903] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.394582][T17903] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.408961][T17903] bridge_slave_1: entered allmulticast mode
[  776.426916][T17903] bridge_slave_1: entered promiscuous mode
[  776.561320][T17903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  776.744907][T13976] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  776.779427][T17903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  776.838730][T17903] team0: Port device team_slave_0 added
[  776.858731][T17903] team0: Port device team_slave_1 added
[  777.027456][T17989] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4437'.
[  777.052756][T17982] syzkaller0: entered promiscuous mode
[  777.076576][T17982] syzkaller0: entered allmulticast mode
[  777.168047][T17903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  777.185960][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  777.245076][T17903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  777.290854][T17903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  777.318182][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  777.385413][T17903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  777.550666][T17999] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4446'.
[  777.644304][T17996] netlink: 'syz.1.4439': attribute type 3 has an invalid length.
[  777.685336][T17996] netlink: 'syz.1.4439': attribute type 1 has an invalid length.
[  777.705793][T17996] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4439'.
[  778.172859][T13976] Bluetooth: hci3: command tx timeout
[  780.238097][T13976] Bluetooth: hci3: command tx timeout
[  780.574024][T17903] hsr_slave_0: entered promiscuous mode
[  780.597282][T17903] hsr_slave_1: entered promiscuous mode
[  780.604174][T18025] netlink: 'syz.1.4444': attribute type 21 has an invalid length.
[  780.633252][T18025] netlink: 'syz.1.4444': attribute type 1 has an invalid length.
[  780.668396][T18025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4444'.
[  780.754529][T18032] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  780.817320][T18032] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  781.399109][T18056] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4452'.
[  781.535720][T18058] netlink: 'syz.3.4453': attribute type 29 has an invalid length.
[  781.866554][T18058] netlink: 'syz.3.4453': attribute type 29 has an invalid length.
[  782.038539][T18061] netlink: 'syz.3.4453': attribute type 29 has an invalid length.
[  782.151362][T18077] netlink: 'syz.0.4456': attribute type 3 has an invalid length.
[  782.159578][T18067] syzkaller0: entered promiscuous mode
[  782.159604][T18067] syzkaller0: entered allmulticast mode
[  782.186526][T18077] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4456'.
[  782.272112][T18064] netlink: 'syz.3.4453': attribute type 29 has an invalid length.
[  782.401115][T18069] netlink: 'syz.3.4453': attribute type 29 has an invalid length.
[  783.658427][T18090] FAULT_INJECTION: forcing a failure.
[  783.658427][T18090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  783.680455][T18090] CPU: 0 PID: 18090 Comm: syz.0.4461 Not tainted syzkaller #0
[  783.688003][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  783.698093][T18090] Call Trace:
[  783.701383][T18090]  <TASK>
[  783.704326][T18090]  dump_stack_lvl+0x18c/0x250
[  783.709035][T18090]  ? show_regs_print_info+0x20/0x20
[  783.714249][T18090]  ? load_image+0x420/0x420
[  783.718778][T18090]  ? __might_fault+0xaa/0x120
[  783.723472][T18090]  ? __lock_acquire+0x7d80/0x7d80
[  783.728509][T18090]  ? bpf_percpu_hash_update+0x2b/0x200
[  783.733994][T18090]  ? __virt_addr_valid+0x10c/0x380
[  783.739132][T18090]  should_fail_ex+0x394/0x4c0
[  783.743841][T18090]  _copy_from_user+0x2f/0xe0
[  783.748453][T18090]  generic_map_update_batch+0x58c/0x800
[  783.754045][T18090]  ? rcu_read_unlock+0xa0/0xa0
[  783.758852][T18090]  ? __fdget+0x180/0x210
[  783.763121][T18090]  ? rcu_read_unlock+0xa0/0xa0
[  783.767922][T18090]  bpf_map_do_batch+0x3f2/0x600
[  783.772787][T18090]  ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10
[  783.779320][T18090]  __sys_bpf+0x381/0x890
[  783.783584][T18090]  ? bpf_link_show_fdinfo+0x390/0x390
[  783.789015][T18090]  ? lock_chain_count+0x20/0x20
[  783.793905][T18090]  __x64_sys_bpf+0x7c/0x90
[  783.798367][T18090]  do_syscall_64+0x55/0xb0
[  783.802793][T18090]  ? clear_bhb_loop+0x40/0x90
[  783.807489][T18090]  ? clear_bhb_loop+0x40/0x90
[  783.812190][T18090]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  783.818095][T18090] RIP: 0033:0x7f71add9e0d9
[  783.822523][T18090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.842165][T18090] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  783.850598][T18090] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  783.858583][T18090] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  783.866566][T18090] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  783.874553][T18090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  783.882553][T18090] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  783.890582][T18090]  </TASK>
[  784.193687][T18092] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4462'.
[  785.297157][ T7933] bridge_slave_0: left allmulticast mode
[  785.314548][ T7933] bridge_slave_0: left promiscuous mode
[  785.321000][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.367946][ T7933] veth0_macvtap: left promiscuous mode
[  785.373628][ T7933] veth0_vlan: left promiscuous mode
[  785.493688][T18097] netlink: 'syz.1.4464': attribute type 3 has an invalid length.
[  785.502843][T18097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4464'.
[  786.378789][T18102] netlink: 'syz.0.4465': attribute type 21 has an invalid length.
[  786.401777][T18102] netlink: 'syz.0.4465': attribute type 1 has an invalid length.
[  786.433759][T18102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4465'.
[  786.448653][T17903] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  786.479551][T17903] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  786.541648][T17903] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  786.634595][T17903] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  787.210284][T17903] 8021q: adding VLAN 0 to HW filter on device bond0
[  787.279424][T17903] 8021q: adding VLAN 0 to HW filter on device team0
[  787.337017][T13627] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.344232][T13627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  787.377692][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.384816][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.439732][T18118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4469'.
[  787.493349][T17903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  788.037701][T18132] syzkaller0: entered promiscuous mode
[  788.055148][T18132] syzkaller0: entered allmulticast mode
[  788.326639][T18142] netlink: 'syz.0.4472': attribute type 29 has an invalid length.
[  790.593827][T18142] netlink: 'syz.0.4472': attribute type 29 has an invalid length.
[  790.620152][T18148] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4474'.
[  790.671385][T17903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.859494][T17903] veth0_vlan: entered promiscuous mode
[  790.873391][T18160] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4475'.
[  790.926607][T17903] veth1_vlan: entered promiscuous mode
[  791.004185][T18162] netlink: 'syz.1.4476': attribute type 29 has an invalid length.
[  791.044136][T17903] veth0_macvtap: entered promiscuous mode
[  791.059080][T18162] netlink: 'syz.1.4476': attribute type 29 has an invalid length.
[  791.089237][T17903] veth1_macvtap: entered promiscuous mode
[  791.105611][T18170] netlink: 'syz.1.4476': attribute type 29 has an invalid length.
[  791.139326][T17903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.172574][T17903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  791.190502][T18162] netlink: 'syz.1.4476': attribute type 29 has an invalid length.
[  791.242996][T18170] netlink: 'syz.1.4476': attribute type 29 has an invalid length.
[  791.272771][T17903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.303442][T17903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.345060][T17903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.360101][T17903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.578979][T18180] netlink: 'syz.3.4479': attribute type 13 has an invalid length.
[  791.590463][T18180] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4479'.
[  791.656866][ T7933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.664738][ T7933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.789833][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.810066][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.060882][T18192] syzkaller0: entered promiscuous mode
[  792.125631][T18192] syzkaller0: entered allmulticast mode
[  792.144754][T18204] netlink: 'syz.1.4486': attribute type 8 has an invalid length.
[  792.179054][T18204] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4486'.
[  794.251752][T18204] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4486'.
[  794.262014][T18209] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4485'.
[  794.283293][T18224] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.4488'.
[  794.498804][T18229] netlink: 'syz.1.4489': attribute type 29 has an invalid length.
[  794.520205][T18229] netlink: 'syz.1.4489': attribute type 29 has an invalid length.
[  794.594615][T18229] netlink: 'syz.1.4489': attribute type 29 has an invalid length.
[  794.626222][T18233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  794.643346][T18229] netlink: 'syz.1.4489': attribute type 29 has an invalid length.
[  794.669058][T18229] netlink: 'syz.1.4489': attribute type 29 has an invalid length.
[  795.290879][T18264] netlink: 'syz.0.4496': attribute type 29 has an invalid length.
[  795.551287][T18272] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4499'.
[  795.841689][T18276] syzkaller0: entered promiscuous mode
[  795.864152][T18276] syzkaller0: entered allmulticast mode
[  795.875727][T18281] netlink: 'syz.2.4503': attribute type 6 has an invalid length.
[  795.883744][T18281] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4503'.
[  795.915677][T18285] netlink: 'syz.1.4504': attribute type 29 has an invalid length.
[  797.823477][T18288] validate_nla: 1 callbacks suppressed
[  797.823488][T18288] netlink: 'syz.1.4504': attribute type 29 has an invalid length.
[  797.845220][T18296] netlink: 'syz.2.4506': attribute type 10 has an invalid length.
[  797.978200][T18307] FAULT_INJECTION: forcing a failure.
[  797.978200][T18307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  798.010734][T18307] CPU: 1 PID: 18307 Comm: syz.2.4507 Not tainted syzkaller #0
[  798.018284][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  798.028384][T18307] Call Trace:
[  798.031704][T18307]  <TASK>
[  798.034773][T18307]  dump_stack_lvl+0x18c/0x250
[  798.039530][T18307]  ? show_regs_print_info+0x20/0x20
[  798.044784][T18307]  ? load_image+0x420/0x420
[  798.049442][T18307]  ? __lock_acquire+0x7d80/0x7d80
[  798.054519][T18307]  ? snprintf+0xe9/0x140
[  798.058815][T18307]  should_fail_ex+0x394/0x4c0
[  798.063564][T18307]  _copy_to_user+0x2f/0xa0
[  798.068030][T18307]  simple_read_from_buffer+0xe7/0x150
[  798.073449][T18307]  proc_fail_nth_read+0x1e8/0x260
[  798.078525][T18307]  ? proc_fault_inject_write+0x360/0x360
[  798.084232][T18307]  ? fsnotify_perm+0x271/0x5e0
[  798.089056][T18307]  ? proc_fault_inject_write+0x360/0x360
[  798.094863][T18307]  vfs_read+0x298/0x990
[  798.099132][T18307]  ? kernel_read+0x1e0/0x1e0
[  798.103889][T18307]  ? __fget_files+0x28/0x460
[  798.108529][T18307]  ? __fget_files+0x3fc/0x460
[  798.113244][T18307]  ? __fdget_pos+0x2a3/0x330
[  798.117844][T18307]  ? ksys_read+0x74/0x260
[  798.122246][T18307]  ksys_read+0x151/0x260
[  798.126512][T18307]  ? vfs_write+0x9a0/0x9a0
[  798.130951][T18307]  ? lockdep_hardirqs_on+0x98/0x150
[  798.136259][T18307]  do_syscall_64+0x55/0xb0
[  798.140692][T18307]  ? clear_bhb_loop+0x40/0x90
[  798.145377][T18307]  ? clear_bhb_loop+0x40/0x90
[  798.150067][T18307]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.155970][T18307] RIP: 0033:0x7f651555e90e
[  798.160420][T18307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  798.180119][T18307] RSP: 002b:00007f651652ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  798.188552][T18307] RAX: ffffffffffffffda RBX: 00007f65165306c0 RCX: 00007f651555e90e
[  798.196535][T18307] RDX: 000000000000000f RSI: 00007f65165300a0 RDI: 000000000000000d
[  798.204515][T18307] RBP: 00007f6516530090 R08: 0000000000000000 R09: 0000000000000000
[  798.212525][T18307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.220519][T18307] R13: 00007f6515826038 R14: 00007f6515825fa0 R15: 00007ffebfe05998
[  798.228535][T18307]  </TASK>
[  798.472156][T18316] FAULT_INJECTION: forcing a failure.
[  798.472156][T18316] name failslab, interval 1, probability 0, space 0, times 0
[  798.504856][T18316] CPU: 0 PID: 18316 Comm: syz.0.4511 Not tainted syzkaller #0
[  798.512386][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  798.522466][T18316] Call Trace:
[  798.525778][T18316]  <TASK>
[  798.528734][T18316]  dump_stack_lvl+0x18c/0x250
[  798.533619][T18316]  ? show_regs_print_info+0x20/0x20
[  798.538828][T18316]  ? load_image+0x420/0x420
[  798.543350][T18316]  ? __might_sleep+0xe0/0xe0
[  798.547962][T18316]  ? __lock_acquire+0x7d80/0x7d80
[  798.553018][T18316]  should_fail_ex+0x394/0x4c0
[  798.557729][T18316]  should_failslab+0x9/0x20
[  798.562293][T18316]  slab_pre_alloc_hook+0x59/0x300
[  798.567422][T18316]  ? __get_vm_area_node+0x125/0x370
[  798.572621][T18316]  __kmem_cache_alloc_node+0x53/0x250
[  798.578081][T18316]  ? __get_vm_area_node+0x125/0x370
[  798.583325][T18316]  kmalloc_node_trace+0x26/0xe0
[  798.588212][T18316]  __get_vm_area_node+0x125/0x370
[  798.593256][T18316]  __vmalloc_node_range+0x36f/0x1320
[  798.598570][T18316]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  798.604121][T18316]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  798.610107][T18316]  ? aa_get_newest_label+0xfd/0x5c0
[  798.615302][T18316]  ? free_vm_area+0x50/0x50
[  798.619829][T18316]  ? end_current_label_crit_section+0x170/0x170
[  798.626154][T18316]  ? safesetid_security_capable+0x42/0x1a0
[  798.631986][T18316]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  798.637532][T18316]  __vmalloc+0x7a/0x90
[  798.641600][T18316]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  798.647147][T18316]  bpf_prog_alloc_no_stats+0x46/0x430
[  798.652524][T18316]  bpf_prog_alloc+0x3d/0x1a0
[  798.657112][T18316]  bpf_prog_load+0x6b2/0x1610
[  798.661792][T18316]  ? map_freeze+0x420/0x420
[  798.666294][T18316]  ? __might_fault+0xaa/0x120
[  798.670966][T18316]  ? __lock_acquire+0x7d80/0x7d80
[  798.675990][T18316]  ? __might_fault+0xaa/0x120
[  798.680667][T18316]  ? __might_fault+0xc6/0x120
[  798.685340][T18316]  ? __might_fault+0xaa/0x120
[  798.690043][T18316]  ? bpf_lsm_bpf+0x9/0x10
[  798.694368][T18316]  ? security_bpf+0x7e/0xa0
[  798.698887][T18316]  __sys_bpf+0x5ba/0x890
[  798.703141][T18316]  ? bpf_link_show_fdinfo+0x390/0x390
[  798.708521][T18316]  ? lock_chain_count+0x20/0x20
[  798.713366][T18316]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  798.719353][T18316]  __x64_sys_bpf+0x7c/0x90
[  798.723767][T18316]  do_syscall_64+0x55/0xb0
[  798.728182][T18316]  ? clear_bhb_loop+0x40/0x90
[  798.732861][T18316]  ? clear_bhb_loop+0x40/0x90
[  798.737535][T18316]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.743426][T18316] RIP: 0033:0x7f71add9e0d9
[  798.747924][T18316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.767529][T18316] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  798.776112][T18316] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  798.784078][T18316] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  798.792045][T18316] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  798.800007][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.807976][T18316] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  798.815952][T18316]  </TASK>
[  798.836643][T18318] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4512'.
[  798.848774][T18316] syz.0.4511: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  798.877195][T18320] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4513'.
[  798.909357][T18316] CPU: 1 PID: 18316 Comm: syz.0.4511 Not tainted syzkaller #0
[  798.916875][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  798.927299][T18316] Call Trace:
[  798.930608][T18316]  <TASK>
[  798.933569][T18316]  dump_stack_lvl+0x18c/0x250
[  798.938278][T18316]  ? show_regs_print_info+0x20/0x20
[  798.943505][T18316]  ? load_image+0x420/0x420
[  798.948040][T18316]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  798.954480][T18316]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  798.961011][T18316]  warn_alloc+0x246/0x340
[  798.965368][T18316]  ? zone_watermark_ok_safe+0x230/0x230
[  798.970942][T18316]  ? __get_vm_area_node+0x356/0x370
[  798.976174][T18316]  __vmalloc_node_range+0x394/0x1320
[  798.981491][T18316]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  798.987503][T18316]  ? aa_get_newest_label+0xfd/0x5c0
[  798.992735][T18316]  ? free_vm_area+0x50/0x50
[  798.997261][T18316]  ? end_current_label_crit_section+0x170/0x170
[  799.003531][T18316]  ? safesetid_security_capable+0x42/0x1a0
[  799.009369][T18316]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  799.014928][T18316]  __vmalloc+0x7a/0x90
[  799.019009][T18316]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  799.024587][T18316]  bpf_prog_alloc_no_stats+0x46/0x430
[  799.030002][T18316]  bpf_prog_alloc+0x3d/0x1a0
[  799.034629][T18316]  bpf_prog_load+0x6b2/0x1610
[  799.039337][T18316]  ? map_freeze+0x420/0x420
[  799.043863][T18316]  ? __might_fault+0xaa/0x120
[  799.048560][T18316]  ? __lock_acquire+0x7d80/0x7d80
[  799.053629][T18316]  ? __might_fault+0xaa/0x120
[  799.058327][T18316]  ? __might_fault+0xc6/0x120
[  799.063026][T18316]  ? __might_fault+0xaa/0x120
[  799.067721][T18316]  ? bpf_lsm_bpf+0x9/0x10
[  799.072074][T18316]  ? security_bpf+0x7e/0xa0
[  799.076610][T18316]  __sys_bpf+0x5ba/0x890
[  799.080877][T18316]  ? bpf_link_show_fdinfo+0x390/0x390
[  799.086286][T18316]  ? lock_chain_count+0x20/0x20
[  799.091159][T18316]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  799.097169][T18316]  __x64_sys_bpf+0x7c/0x90
[  799.101605][T18316]  do_syscall_64+0x55/0xb0
[  799.106037][T18316]  ? clear_bhb_loop+0x40/0x90
[  799.110716][T18316]  ? clear_bhb_loop+0x40/0x90
[  799.115396][T18316]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  799.121296][T18316] RIP: 0033:0x7f71add9e0d9
[  799.125716][T18316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  799.145332][T18316] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  799.153749][T18316] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  799.161713][T18316] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  799.169678][T18316] RBP: 00007f71aed58090 R08: 0000000000000000 R09: 0000000000000000
[  799.177645][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  799.185612][T18316] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  799.193589][T18316]  </TASK>
[  799.207750][T18316] Mem-Info:
[  799.214844][T18316] active_anon:5562 inactive_anon:0 isolated_anon:0
[  799.214844][T18316]  active_file:19438 inactive_file:40235 isolated_file:0
[  799.214844][T18316]  unevictable:768 dirty:179 writeback:0
[  799.214844][T18316]  slab_reclaimable:10542 slab_unreclaimable:93191
[  799.214844][T18316]  mapped:25058 shmem:1361 pagetables:592
[  799.214844][T18316]  sec_pagetables:0 bounce:0
[  799.214844][T18316]  kernel_misc_reclaimable:0
[  799.214844][T18316]  free:1342427 free_pcp:11066 free_cma:0
[  799.263966][T18316] Node 0 active_anon:22248kB inactive_anon:0kB active_file:77752kB inactive_file:160740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100232kB dirty:712kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no
[  799.297651][T18316] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  799.299006][T18322] netlink: 'syz.3.4514': attribute type 30 has an invalid length.
[  799.332575][T18316] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  799.364502][T18316] lowmem_reserve[]: 0 2521 2522 2522 2522
[  799.370928][T18316] Node 0 DMA32 free:1465320kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22212kB inactive_anon:0kB active_file:77752kB inactive_file:159916kB unevictable:1536kB writepending:712kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:23312kB local_pcp:10780kB free_cma:0kB
[  799.413900][T18316] lowmem_reserve[]: 0 0 0 0 0
[  799.431799][T18316] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  799.470227][T18316] lowmem_reserve[]: 0 0 0 0 0
[  799.477609][T18316] Node 1 Normal free:3889284kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21216kB local_pcp:11872kB free_cma:0kB
[  799.523020][T18316] lowmem_reserve[]: 0 0 0 0 0
[  799.535177][T18316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  799.564759][T18316] Node 0 DMA32: 864*4kB (M) 1127*8kB (UME) 1773*16kB (UM) 1147*32kB (UM) 614*64kB (UME) 374*128kB (UM) 275*256kB (UM) 104*512kB (UME) 69*1024kB (UM) 30*2048kB (UME) 255*4096kB (UM) = 1464936kB
[  799.588132][T18316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  799.607793][T18316] Node 1 Normal: 279*4kB (UE) 75*8kB (UE) 45*16kB (UE) 178*32kB (UE) 57*64kB (UME) 13*128kB (UME) 0*256kB 2*512kB (UM) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3889284kB
[  799.626978][T18316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  799.646365][T18335] netlink: 'syz.1.4518': attribute type 29 has an invalid length.
[  799.666177][T18316] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  799.666908][T18330] syzkaller0: entered promiscuous mode
[  799.685730][T18330] syzkaller0: entered allmulticast mode
[  799.698133][T18316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  799.702380][T18335] netlink: 'syz.1.4518': attribute type 29 has an invalid length.
[  799.722239][T18316] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  799.732329][T18316] 61034 total pagecache pages
[  799.737586][T18316] 0 pages in swap cache
[  799.741821][T18316] Free swap  = 124996kB
[  799.759839][T18316] Total swap = 124996kB
[  799.772098][T18316] 2097051 pages RAM
[  799.777788][T18316] 0 pages HighMem/MovableOnly
[  799.782696][T18316] 416955 pages reserved
[  799.787767][T18316] 0 pages cma reserved
[  800.224907][T18353] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.4523'.
[  801.733522][T18336] netlink: 'syz.1.4518': attribute type 29 has an invalid length.
[  801.770262][T18355] netlink: 'syz.0.4524': attribute type 21 has an invalid length.
[  801.780260][T18355] netlink: 'syz.0.4524': attribute type 7 has an invalid length.
[  801.946029][T18361] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4525'.
[  802.069227][T18369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4530'.
[  802.084834][    C1] 
[  802.084843][    C1] ================================
[  802.084847][    C1] WARNING: inconsistent lock state
[  802.084870][    C1] syzkaller #0 Not tainted
[  802.084878][    C1] --------------------------------
[  802.084882][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  802.084890][    C1] syz.0.4529/18366 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  802.084909][    C1] ffffffff8d2978d8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0
[  802.084961][    C1] {INITIAL USE} state was registered at:
[  802.084967][    C1]   lock_acquire+0x19e/0x420
[  802.084985][    C1]   _raw_write_lock_irq+0xaf/0xf0
[  802.085007][    C1]   kernfs_rename_ns+0x5e4/0x830
[  802.085028][    C1]   sysfs_rename_link_ns+0x175/0x1b0
[  802.085044][    C1]   device_rename+0x110/0x1e0
[  802.085061][    C1]   dev_change_name+0x308/0x8e0
[  802.085078][    C1]   do_setlink+0x925/0x3f40
[  802.085094][    C1]   rtnl_newlink+0x1848/0x2170
[  802.085109][    C1]   rtnetlink_rcv_msg+0x843/0xf90
[  802.085110][T18370] FAULT_INJECTION: forcing a failure.
[  802.085110][T18370] name failslab, interval 1, probability 0, space 0, times 0
[  802.085128][    C1]   netlink_rcv_skb+0x235/0x4c0
[  802.085143][    C1]   netlink_unicast+0x7b1/0x930
[  802.085160][    C1]   netlink_sendmsg+0x8d0/0xbf0
[  802.085171][    C1]   __sys_sendto+0x4a9/0x6b0
[  802.085184][    C1]   __x64_sys_sendto+0xde/0xf0
[  802.085197][    C1]   do_syscall_64+0x55/0xb0
[  802.085213][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.085236][    C1] irq event stamp: 2202
[  802.085242][    C1] hardirqs last  enabled at (2201): [<ffffffff81c4acd2>] pcpu_memcg_post_alloc_hook+0x282/0x3f0
[  802.085268][    C1] hardirqs last disabled at (2202): [<ffffffff8a8cb3b3>] exc_debug+0x73/0x140
[  802.085315][    C1] softirqs last  enabled at (2140): [<ffffffff81974bb7>] bpf_map_alloc_id+0x87/0xd0
[  802.085334][    C1] softirqs last disabled at (2138): [<ffffffff81974b51>] bpf_map_alloc_id+0x21/0xd0
[  802.085355][    C1] 
[  802.085355][    C1] other info that might help us debug this:
[  802.085360][    C1]  Possible unsafe locking scenario:
[  802.085360][    C1] 
[  802.085364][    C1]        CPU0
[  802.085368][    C1]        ----
[  802.085371][    C1]   lock(kernfs_rename_lock);
[  802.085381][    C1]   <Interrupt>
[  802.085384][    C1]     lock(kernfs_rename_lock);
[  802.085394][    C1] 
[  802.085394][    C1]  *** DEADLOCK ***
[  802.085394][    C1] 
[  802.085398][    C1] no locks held by syz.0.4529/18366.
[  802.085405][    C1] 
[  802.085405][    C1] stack backtrace:
[  802.085410][    C1] CPU: 1 PID: 18366 Comm: syz.0.4529 Not tainted syzkaller #0
[  802.085426][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  802.085435][    C1] Call Trace:
[  802.085442][    C1]  <#DB>
[  802.085450][    C1]  dump_stack_lvl+0x18c/0x250
[  802.085473][    C1]  ? show_regs_print_info+0x20/0x20
[  802.085500][    C1]  ? print_usage_bug+0x43d/0x6a0
[  802.085520][    C1]  ? verify_lock_unused+0x15/0x140
[  802.085544][    C1]  lock_acquire+0x2c2/0x420
[  802.085569][    C1]  ? kernfs_path_from_node+0x88/0xbd0
[  802.085595][    C1]  ? read_lock_is_recursive+0x20/0x20
[  802.085619][    C1]  ? trace_event_raw_event_lock+0x240/0x240
[  802.085635][    C1]  ? look_up_lock_class+0x75/0x140
[  802.085662][    C1]  _raw_read_lock_irqsave+0xbc/0x100
[  802.085684][    C1]  ? kernfs_path_from_node+0x88/0xbd0
[  802.085707][    C1]  ? _raw_read_lock+0x50/0x50
[  802.085726][    C1]  ? rcu_is_watching+0x15/0xb0
[  802.085747][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[  802.085764][    C1]  ? lock_release+0xb5/0x8c0
[  802.085782][    C1]  ? percpu_ref_tryget+0x15/0x180
[  802.085802][    C1]  kernfs_path_from_node+0x88/0xbd0
[  802.085825][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  802.085848][    C1]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  802.085869][    C1]  ? kernfs_name+0x140/0x140
[  802.085892][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[  802.085912][    C1]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[  802.085934][    C1]  get_mm_memcg_path+0xb9/0x360
[  802.085961][    C1]  __mmap_lock_do_trace_start_locking+0xe6/0x2f0
[  802.085989][    C1]  ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230
[  802.086049][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  802.086074][    C1]  ? _raw_spin_unlock+0x28/0x40
[  802.086102][    C1]  stack_map_get_build_id_offset+0x5d3/0x720
[  802.086130][    C1]  ? pcpu_freelist_pop+0x12a/0x190
[  802.086156][    C1]  ? __bpf_get_stackid+0x900/0x900
[  802.086175][    C1]  ? perf_prepare_sample+0x1558/0x1db0
[  802.086205][    C1]  __bpf_get_stackid+0x564/0x900
[  802.086239][    C1]  bpf_prog_12712c88fd19bd5b+0x29/0x2d
[  802.086259][    C1]  bpf_overflow_handler+0x1fc/0x510
[  802.086289][    C1]  ? perf_prepare_header+0x1e0/0x1e0
[  802.086310][    C1]  ? bpf_overflow_handler+0xde/0x510
[  802.086332][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  802.086366][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  802.086390][    C1]  __perf_event_overflow+0x461/0x660
[  802.086418][    C1]  perf_swevent_event+0x319/0x570
[  802.086441][    C1]  ? perf_tp_event+0x1550/0x1550
[  802.086461][    C1]  ? perf_trace_buf_alloc+0x290/0x290
[  802.086496][    C1]  perf_bp_event+0x319/0x430
[  802.086523][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  802.086585][    C1]  ? lock_acquire+0x2c2/0x420
[  802.086615][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  802.086643][    C1]  notifier_call_chain+0x18f/0x380
[  802.086669][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  802.086693][    C1]  atomic_notifier_call_chain+0xda/0x180
[  802.086717][    C1]  notify_die+0x145/0x1a0
[  802.086740][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  802.086770][    C1]  ? rcu_is_watching+0x15/0xb0
[  802.086795][    C1]  notify_debug+0x2e/0x50
[  802.086812][    C1]  exc_debug+0xde/0x140
[  802.086836][    C1]  asm_exc_debug+0x1e/0x40
[  802.086851][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  802.086870][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  802.086884][    C1] RSP: 0018:ffffc9000bd47b48 EFLAGS: 00050206
[  802.086898][    C1] RAX: ffffffff84320801 RBX: 00000000000000a0 RCX: 0000000000000010
[  802.086909][    C1] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffffc9000beb50d8
[  802.086921][    C1] RBP: 0000000000000000 R08: ffffc9000beb50e7 R09: 1ffff920017d6a1c
[  802.086932][    C1] R10: dffffc0000000000 R11: fffff520017d6a1d R12: 0000200000000320
[  802.086944][    C1] R13: dffffc0000000000 R14: ffffc9000beb5048 R15: 0000200000000280
[  802.086965][    C1]  ? rcuref_put_slowpath+0x101/0x150
[  802.086994][    C1]  </#DB>
[  802.086998][    C1]  <TASK>
[  802.087003][    C1]  _copy_from_user+0x8b/0xe0
[  802.087023][    C1]  copy_from_bpfptr+0x67/0x80
[  802.087043][    C1]  bpf_prog_load+0xa3a/0x1610
[  802.087077][    C1]  ? map_freeze+0x420/0x420
[  802.087116][    C1]  ? __might_fault+0xaa/0x120
[  802.087133][    C1]  ? __might_fault+0xc6/0x120
[  802.087148][    C1]  ? __might_fault+0xaa/0x120
[  802.087165][    C1]  ? bpf_lsm_bpf+0x9/0x10
[  802.087185][    C1]  ? security_bpf+0x7e/0xa0
[  802.087207][    C1]  __sys_bpf+0x5ba/0x890
[  802.087228][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  802.087267][    C1]  ? lock_chain_count+0x20/0x20
[  802.087304][    C1]  __x64_sys_bpf+0x7c/0x90
[  802.087323][    C1]  do_syscall_64+0x55/0xb0
[  802.087338][    C1]  ? clear_bhb_loop+0x40/0x90
[  802.087355][    C1]  ? clear_bhb_loop+0x40/0x90
[  802.087375][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.087391][    C1] RIP: 0033:0x7f71add9e0d9
[  802.087404][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.087417][    C1] RSP: 002b:00007f71aed58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  802.087433][    C1] RAX: ffffffffffffffda RBX: 00007f71ae025fa0 RCX: 00007f71add9e0d9
[  802.087445][    C1] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005
[  802.087455][    C1] RBP: 00007f71ade35024 R08: 0000000000000000 R09: 0000000000000000
[  802.087465][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.087474][    C1] R13: 00007f71ae026038 R14: 00007f71ae025fa0 R15: 00007ffed38de118
[  802.087508][    C1]  </TASK>
[  802.878315][T18370] CPU: 1 PID: 18370 Comm: syz.2.4528 Not tainted syzkaller #0
[  802.885885][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  802.895930][T18370] Call Trace:
[  802.899203][T18370]  <TASK>
[  802.902132][T18370]  dump_stack_lvl+0x18c/0x250
[  802.906812][T18370]  ? slab_pre_alloc_hook+0x31/0x300
[  802.912012][T18370]  ? show_regs_print_info+0x20/0x20
[  802.917200][T18370]  ? load_image+0x420/0x420
[  802.921714][T18370]  ? __might_sleep+0xe0/0xe0
[  802.926305][T18370]  ? __lock_acquire+0x7d80/0x7d80
[  802.931324][T18370]  should_fail_ex+0x394/0x4c0
[  802.935999][T18370]  should_failslab+0x9/0x20
[  802.940498][T18370]  slab_pre_alloc_hook+0x59/0x300
[  802.945540][T18370]  kmem_cache_alloc+0x5a/0x2c0
[  802.950301][T18370]  ? getname_flags+0xbb/0x500
[  802.955074][T18370]  getname_flags+0xbb/0x500
[  802.959632][T18370]  do_sys_openat2+0xda/0x1d0
[  802.964237][T18370]  ? do_sys_open+0xe0/0xe0
[  802.968662][T18370]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  802.974828][T18370]  __x64_sys_openat+0x139/0x160
[  802.979681][T18370]  do_syscall_64+0x55/0xb0
[  802.984091][T18370]  ? clear_bhb_loop+0x40/0x90
[  802.988787][T18370]  ? clear_bhb_loop+0x40/0x90
[  802.993473][T18370]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.999362][T18370] RIP: 0033:0x7f651555e90e
[  803.003864][T18370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  803.023473][T18370] RSP: 002b:00007f651652fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  803.031883][T18370] RAX: ffffffffffffffda RBX: 00007f65165306c0 RCX: 00007f651555e90e
[  803.039854][T18370] RDX: 0000000000000002 RSI: 00007f651652ff90 RDI: ffffffffffffff9c
[  803.047863][T18370] RBP: 00007f6516530090 R08: 0000000000000000 R09: 0000000000000000
[  803.055826][T18370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  803.063801][T18370] R13: 00007f6515826038 R14: 00007f6515825fa0 R15: 00007ffebfe05998
[  803.071776][T18370]  </TASK>
[  808.958377][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  808.964705][ T1295] ieee802154 phy1 wpan1: encryption failed: -22