last executing test programs:

8.668256688s ago: executing program 1 (id=3897):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}, 0x11a428, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x73)
r4 = socket$kcm(0xa, 0x2, 0x73)
close(r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x7, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, r0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xe, &(0x7f0000001980)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8fdff00150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
socket$kcm(0x10, 0x2, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast})

8.15214618s ago: executing program 1 (id=3899):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)

7.880617137s ago: executing program 1 (id=3902):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r6 = syz_open_procfs$namespace(r1, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000001a0000000000000000250002000000000005000200000000002500000000000000a500feff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000000000002030d000002000000000000070000000000000000000000090200000000005100"], &(0x7f0000000b80)=""/240, 0x40, 0xf0, 0x1}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="00000000050000000000000000000000000000001000000000000000"], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x60000040)
sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="b5745c01fe5ab1b1d6c6abe0da27a60e7305f179ead322617a49b53a495fa753f05bcddc33223065f45c36f9a5224b1e2970d3a2b5c2f6e817b571b3e23e52dc2febda49c8fc297c0ea68b0daa6170657732b428107bdc44c3c0104dc56e4c0cd656fef236c7e9c4ec0282ff68d2941a3d43008b1407f013e4c6ac9546f5baaf2a7ff719af7c98f0d4f4951147178b53135d819937ec1e0b73715efb072b1e806db11b5c37773ed46f6e08697f3866d78996c029f657146ec69f227c397a0a55cdb2a1b09339d664565728e657b469dc99aef5395fb29df8d44a68ae24a6bf61f74dae419f", 0xe5}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x248}, 0x5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r7, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x7, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000800), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', r11, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r12)

5.709068631s ago: executing program 1 (id=3912):
r0 = perf_event_open(&(0x7f0000000140)={0x3, 0xfffffffffffffc7d, 0x29, 0x1, 0x3, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x1009e4, 0x0, 0x8, 0x20005, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x8028, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10000000, r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair(0x26, 0x800, 0x6, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba, 0x4}, 0x10fda7, 0x0, 0x238, 0x0, 0x7, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x1ffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000530a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000008113d712c5282422c4c3a5a3c2b0276c04f76bfe2cd8ba0f6341cd16e742718855908c9d508514c7ca7e9e82e5fd0e2e03bf319b1fb44b27029780ffd6ee6f7aaecd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfdfffffc, 0x1, 0x0, 0x2, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
r8 = socket$kcm(0x10, 0x3, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x80)
recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)

5.441431337s ago: executing program 2 (id=3915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb5bb, 0x9}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}], 0x7}, 0x40012100)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="00000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x6e}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001500)={0x0, r0}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x5b86860dd7791e5c, 0xb, &(0x7f0000001600)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050a"], 0x0, 0x2}, 0x94)
recvmsg(r10, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x1a, 0x1c, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000008000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b79500"/64], &(0x7f0000001840)='GPL\x00', 0x800, 0xa4, &(0x7f0000001880)=""/164, 0x41100, 0x58, '\x00', r3, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000004140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000004180)={0x5, 0x1, 0xffffffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000041c0)=[r0, r8], &(0x7f0000004200)=[{0x0, 0x3, 0x6, 0x6}, {0x5, 0x5, 0x1, 0x2}, {0x5, 0x3, 0xf, 0x1}], 0x10, 0x2}, 0x94)
recvmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
socket$kcm(0x10, 0x2, 0x0)

4.878724141s ago: executing program 1 (id=3917):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0xb}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64], 0x48}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1000, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x4, 0x0, 0x2, 0x13250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0xfffffffffffffffd, 0x4000, 0x9, 0x1017, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c000200", 0x1c}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xa9, '\x00', 0x0, r0, 0x2, 0x5, 0x4}, 0x50)

4.431359182s ago: executing program 1 (id=3920):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r6 = syz_open_procfs$namespace(r1, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000000000002030d000002000000000000070000000000000000000000090200000000005100"], &(0x7f0000000b80)=""/240, 0x40, 0xf0, 0x1}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="00000000050000000000000000000000000000001000000000000000"], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x60000040)
sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="b5745c01fe5ab1b1d6c6abe0da27a60e7305f179ead322617a49b53a495fa753f05bcddc33223065f45c36f9a5224b1e2970d3a2b5c2f6e817b571b3e23e52dc2febda49c8fc297c0ea68b0daa6170657732b428107bdc44c3c0104dc56e4c0cd656fef236c7e9c4ec0282ff68d2941a3d43008b1407f013e4c6ac9546f5baaf2a7ff719af7c98f0d4f4951147178b53135d819937ec1e0b73715efb072b1e806db11b5c37773ed46f6e08697f3866d78996c029f657146ec69f227c397a0a55cdb2a1b09339d664565728e657b469dc99aef5395fb29df8d44a68ae24a6bf61f74dae419f", 0xe5}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x248}, 0x5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r7, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x7, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000800), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', r11, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r12)

4.136395189s ago: executing program 2 (id=3922):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05d4800028088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
close(r4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4)
r6 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x38, 0x0, 0x4)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a75f930a248b705d70eb29c1b54cbe", 0xee}, {&(0x7f0000000840)="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", 0x1c1}, {0x0}], 0x3}, 0x8001)
recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)

3.114684814s ago: executing program 2 (id=3926):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r6 = syz_open_procfs$namespace(r1, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000001a0000000000000000250002000000000005000200000000002500000000000000a500feff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000000000002030d000002000000000000070000000000000000000000090200000000005100"], &(0x7f0000000b80)=""/240, 0x40, 0xf0, 0x1}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRESOCT=r6, @ANYRES32=r8, @ANYBLOB="00000000050000000000000000000000000000001000000000000000"], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
sendmsg$kcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x60000040)
sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="b5745c01fe5ab1b1d6c6abe0da27a60e7305f179ead322617a49b53a495fa753f05bcddc33223065f45c36f9a5224b1e2970d3a2b5c2f6e817b571b3e23e52dc2febda49c8fc297c0ea68b0daa6170657732b428107bdc44c3c0104dc56e4c0cd656fef236c7e9c4ec0282ff68d2941a3d43008b1407f013e4c6ac9546f5baaf2a7ff719af7c98f0d4f4951147178b53135d819937ec1e0b73715efb072b1e806db11b5c37773ed46f6e08697f3866d78996c029f657146ec69f227c397a0a55cdb2a1b09339d664565728e657b469dc99aef5395fb29df8d44a68ae24a6bf61f74dae419f", 0xe5}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x248}, 0x5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r8, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x7, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000800), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', r12, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r13)

2.826462311s ago: executing program 0 (id=3928):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0xb}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000e80b0000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64], 0x48}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1000, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x4, 0x0, 0x2, 0x13250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0xfffffffffffffffd, 0x4000, 0x9, 0x1017, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c000200", 0x1c}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xa9, '\x00', 0x0, r0, 0x2, 0x5, 0x4}, 0x50)

2.451199501s ago: executing program 3 (id=3929):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)

2.264128735s ago: executing program 3 (id=3930):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

2.181193207s ago: executing program 0 (id=3931):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="cdd5e2d58cd3474c5c082321f5ef", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069110a00000000008510000002000000850000000500000095000000000000009500a5b25b5b92fc"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.101214919s ago: executing program 3 (id=3932):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x240, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r2})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000000000100100000e000000180000000000000010010000010000000000000000000000dfd2f206b258a7b00eff1cd3e583d8b18ee873eeed865fc1f9c5b728de6bceab4b5f58ef372624a2c50bee8a9fbdb121cfd2e591b332f5e02f8f73823815b842a8da10ec7d6d2a2c951405bd"], 0x28}, 0xfc40)
socket$kcm(0x2c, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @datasec={0x2, 0x155555ac, 0x0, 0xf, 0x1, [{}], "99"}, @func, @func={0x0, 0x0, 0x0, 0xc, 0x3}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "a58e93"}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f00000019c0)=""/173, 0x76, 0xad, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8940, &(0x7f0000000080))
close(r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)

1.762012348s ago: executing program 0 (id=3933):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7}, @jmp={0x5, 0x1, 0x2, 0xdcaf2897a29b1154, 0x3, 0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000140)='syzkaller\x00', 0x7b, 0x3a, &(0x7f0000000180)=""/58, 0x41100, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xd, 0xffffff7f, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1], 0x0, 0x10, 0xbe4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r0, 0x0, 0x81, 0xff, &(0x7f00000003c0)="dff7a2d0f5b45ce4598e8daa574214a655a52ca40d6b576be19feef5e78f3be4122f502ef7c6d59d0ca4fa6eee5c8c4262c25e88ce425f4d2ee5f725a01f9e033b6e5101f11e5885507804bdc744714e4cef191692f77c14d4aba102c220acabea880c1190ab8858492addf138c638d90864b5007118972029a004aa91aa2ae934", &(0x7f0000000480)=""/255, 0x80000001, 0x0, 0x1000, 0xed, &(0x7f0000000fc0)="fc87e11b046f8555648e34619da16619d8fbb55b19a0cb4cc1ffe462319cc6fd9301199536608b900af6a5b46200b0e45a9b56443346f950c93649c0323ba8a5ba6e24583ef5f50519cbfd09c46f5b22f0ab901d46755d76ce1d6e904a6431900afe841a89b50fa92f062f6ef3683c0d484e57e8b49a04d34fce28a45ed55af16d1e8146c6e7da71c6050347567161ac18df0d25b5b8775493afb7981651fbbb43d3a67b263af9978ee81e312700ce5f5fcf98818ef5bd3b757b72cbce4b0d346cd218dbd27c079300a9718fef896c82e5758b996c42550ddaf5433c292cc43f8efbc932694cff29271e7bc14434faca18a28dc1bd632ca3849429eb6fcfc8f75d9382a8c7a766b963eb3bbc3ea84ef2f337bad4a56c03db135d1878163893384415a1e5390282a4f7636b0a2ba4ab3ae0ebdbd222954c01e12eb984b6826dc5eb1c90c947cb85da4bb8ef8de1491dfe152482e9cc98f28031b037adfe97729303f8ac0266ca47b39ae7f8cec297c64ba39e7d0df0eba74a9b999482bcb949801f3e775dd711bab1d1993b71eaffc37133e30b9018a53cab6f0f6235b383e03c800f12b7b1fb02fe7beadd0362f3498b05a2f9964be47192f5d3492f8bd29e2fd0c5eebf7a8a64614e268ba9665d6265d4eeb20f7ea371bbf0e402ff1d9ae0af968ccb31c51050c16546d7e32a1e14537a720df8839843c6fec52b1fbcb32256565a044f2045316e02d2c30fe29570e79561cef1f9c9988511e93cb3c1fb7092634284a9eebcfefb582732c41918fab4e4efff2af14a932e2d4fad96e81cdc7173b9f340882206659802575989601318efd551e0b647acf9d15d9033669c131985f63f865952ee570e6612d44e64b04b8fb953c5a3311708b37f492a6a89955a4cbd34b36d7b7bb240414ef7826c9ea41c7682aaa3d16183e81b5a6eac92a57edf573b49860eaa55766c1827a50fa6d1e8112d592c0f72d11cea7b27689484548a8abc824b5b8da19824423d98c8dfe77d28aea2597f5db32f77cbe97fc14ed083553479f7591438c1f42c59717e46f98ea3b180e93d65e3701cdeed3425d9572721ed34337d2fd2af1df752208a128225efdc9345dd81a7ea749d915bf0cadcbaad3da16d015c982e83782b3c2d7e5508eedbf0ec44cad9f19c635bf1de5888afad226876f174bb4ca811f2cae2e7f513007bb1a3b4c58bf9c2edc729515871ab727d18881c0010e50c1acedcb48e065140cbe4f35c2d01b527de290ce29df460319e8dc825d60e6c1f8a74ce16c47545288f5649ba7c5ce1fac50479f03289c0ac40ca7629abac3cd7a93bb7ca90baa2614108e2798edc06ae1916be17a3a9ca9413942373c20cb815b83ebe2edf27f20797ad6ef3a6283b2da7fef6e149ff26f58586b314302f4d6be9b5e9423282b48fe54d1e330484482329dfdc52bbc609a15a637cec3ce0ce4e2041e17db1dffa20b73918a40f24a6f84d8224bfbae34714af571da93ed0ce751e03eebe559eca6cbcbb44dfbd4c7d308395c61ddc15e1d31fa1013c052f20c87f8e7a0532d3fbbda5a600bab7738078c8cea5ec393d4f184f9bf7d523c85dbcd2cf5c9939edd27a6377e220a212f921c0dbca4c47f149d5e9b9a1f1578629e7ecf841079682e45f5b90d85b53035e1ab57291ab87372f396817784f1f155f38534e658d08215f128df61222227d0acc0a0fd8cbe416b1e1e89a5ad0d09d421983687b6e6232631d5ab6c63b7c768c023f23c753892ce426bb0529e9a5e66a89252a6b94856576a8a029571597184ba7da96478ec011daf0d96b5bc8897bf1614acfef8323a3d736fa8772eebd58ca497588d565d13b6ab7a30395a545a849e836e54a04a6380cf6b708d67b5d6e47995e9ec43c8ed9f3fee6b41559187e40a989f4140c166bb9935309de661f764bfeb5b4b4545d59f4e9f1d9232f8c669077cae959b76f5f2d2cab9478787c0d3dfa4e2ec02775f39a0f1bd1793eb9d095724dfc0948a24fe024c6d6fd6bcb48238d43ddd69a90452f07c8d2814c16a0ab6f0c7f5578a09b37aaea0bcc3edb19d74c007da0bdffb494dd2b151312330889249ae7c467d235567cc6dbf788d285c421428f4a1863c36302ab22db9c49e99516760e398bc9ce54747d05c0a64686e02f8e9f1b9d1e4612b673165203c1d3f0f4e39260d84863721bf8bbe5e9a590290b7708e6922cee37ebcb1efa34fb766d828734b7b58dc443016411f63bce81d5f1e62dc79404cc2e917c6b1c06ababda304e47e1f7bf4369d94c04e719de60a26a896647d0d31f0c14f6d0f51a47eec46b3f96316533577aac23097d3354325fdefaefa8139bb774dc83c83eb7484a825cfe3cec15c5406057cb60b1368a36001908131ae65d8422ffc6c812029aeb10a21bbee3096d8c03d5adc88c39bf9718743eb26c8eb6f0b38646e2e0ef0738d6aa1c5d16d9aad22ef8540d36b5252d294a0064330b591b0a403667cd4f0efb6db0198497e09a4722bf92847e2e9fa8034a8907b9c1c2f907bd8cf555dfbba5bf347ef32d23be7e59a0ac85397580cb9ffb04bc5d44effa445ab6528cb587e8a9ac74f37749c4900b92a1915977aa8778ada54f8840e172ebff078efb9c22380afb1b52c14df97a75cebbd380b41ff653b4c796d6a20899334245a7cd7195d0c1ec3979e96b73ab56079b68beb373113739f415fc03a19e0e1eafb8afc3db9d1b96c345f44f4ca7ad2be55a449c2590e3e1fac3797befb93f460be0bacab4cbe08a0e1d20305117177609a42e3278e5eac657cf1240636275f4aed1f8199f500fe35e976adbeee31c5f1bbe5a5dfd443224d8dc848ccc45e24acace4bef85bb9f77470aadd65b3940d11633d298973188b18ef01e2826ca4eea9114d095cf4b1710c9de805a5cf9a3f2c9593330f993f2c0b11eb12cd8535b84b6c0986c7d0af03ae2c823307945770b36aedb5e3b4b09eb3cbe0cda0c2892b7b57c2da360409defbbdfda520f36e76804c73442230268999a36efe0940c30e9e40ed641880fea3647276e1e057bb52bfe2a917201bfdb39f5200b1659ab962125959db92ae194bf6eabca89c7e59f7330a6f47d44b08f02c38bd9f81c7a3929960261ef47ffc13229dcba39be58928b4af3fa992a56356af155edf3505e2b0d46febf76203c512a5d88354698dd0f98fe2c044c4bff2e09d307ab059362c0a0285a75a3a77fa13161c4f249cd2d9cadab7c04d62686d4a88a61f00b5a7e39069928366d84a8d4a46f71fa8cb429a0fcb31e4d902de7c056c2366d364a1080e9d4a9493a68d03d0f1dc8f85bfe074bb091ec75be99a754f19f15d47c4b8485ad7203fde959a9fc2270d49fa7222fe8243b33abcd4b638a27f775a09d4b17f4735d5aa7f0e8e337e68dc85aae5eedacdd6f1d83570d270aeef3a56c5d194ad56c7e8ae0185aab6c4f2d6c6ad0a6653d38b37f0c4841a28e3a0ff6ecacfcb2e5a7012c4316b54facaa5484d8d3729248f4fd16b680e59bb488c8ff7ec2d2f19ad73317649069ec436fe3dac1609fa665c67505b232885876453f598cd7e4a7fcbf51adefdfea6795f24ec756f7ac408da5fa6cf69b338b619cf4da3fe1020c73a88e6646b9a20711e2c5ab92422271f442aac85baf536e6e2b7382b25def291e4fceab37ede13cca1eed2c125b1a676f9ca82f07467f9bf415eca155c4a1e152157edddcfb79391e9bfb4cec30b68b559ce1459c951be25a8b138efcc671711a7a390cc97a186374540577cffd96ef0abdcd918aa083dba3e9053ef43301b971639d07890161fe61ecb716d5e6a390550c1a59e91b646397a90e394777f9391cf2b4e0226d88df924a19e948fce3e31bea6e356e66191de846e143656cdfa37b2c02d4583e90cfd1fbb0371e843e881d9902c58a664f45253990eff11a0c36c88b5c13bedc131d18e4f10ae353bc841a2c65452b34907969587d27bf7371e66a24a75b5b3e9af5bd8b78ae13fe3a9597be9b88ff700fd8720237b29fe2a14d7f3b41693e7ceca498ccb4a9c94a3bfec21d7bd2f883ec10459d259831a5beda0897f61ed2aec620cc55d9deeb22f23e8efd9182b402824de1a9fdec5846aeef92eec418b3203df086cafd0d1bb0f0126ecd98869cf662d8b9368a72ae1a0d17d9df6716ccf270c0eac0b2fd9af33a4c69034f13c523a9b6ef00028b93216a293dc80f184342c46186077dade06aa7e15e582660ad6dd1120689c0ba869313d7567844152557495104750e3cf1c3598c80eb4a862b65669abec5a01c9537ce13f59b23e2dde411bb9452a5fabf98804a6e7b0a695b007fa15727dbddb6df06a22b1c58a95ce0833c24bddd55fb3205b9db673a5edc40d94f7d868af671e6efd56dcbd60018695d534756dcf8133e890714f540f39bc6d563e9d8254080adf237be14ca6bb2e2ea820394657c8fdee64c7f0203edb9063a27bcc03019c0ee2f65e61d64d83b560a9330a6548f2f7ab8a3313cb620c7068fac1cfa4daf6b0ada0e613c79d0737e332df6a7639ccec8817db3810e6e5c4c8d65d6d66208c23bd48c62e7e12b0e3f5cc751eb4defbc49adc0c51f0eabad5f251fec9a967a7352dbc15c9764f0dbc6d145670b0090b71d821e94240aceb6a932ed3a09b3036ff27dcbef1ef2d4888c64c88775db750238c7241f10f40cfd4248a965a38ced72b9d19c3c235c2dd6e3df11ec711123d999c2228c9a51c60f76fe6b83060043c2dad681e6de3b939d6c10ab4a2dbda97baf6f0d6e6f90606768ae828cd745cd13207551927008ffcfafe3ee47dae208943d320c63245af59f425c53db80bc25ef01c55070275e5f2b54fbf7b2356f4418fa83c72382a664494b2e7c956759f371d0c838de72a6f49cb4aa2878d0a316faa6099d2bdd0e7153608e79cb1c3f95418da28914a9a0e11c226d5abbb0b54e2bb479638af46a962e918c3e714fd7a5356a383fae8a37c1cceb4fabeaeaa8b12b6365498ff51d01e73d9e8a7cf17eaeaac5345bfdfb3ad7c1276a1daeed064df7aa3fe7cf3f31b8f7314353c98a016e976d6205ec2f28374fc2a3cfb0e2506d57199a30f563830a9ba7f6e59aac2c98b7ed70199bd0b0771e59c703e19242f2071b67576c306466f90307ce70eb4a52e049c364a892516e45792443d532d20565936ae3cd9dd963ff4f503b1623b899e89bdf5e28bbcdb6d6227f8011b9d6b758f5bba0b8ab863ba004a3797e3d2ce12a08cff092f983bfcda69f76d272606c32fad8dc2d1f6642bb721794009e1124c4ecdec7b1f648c1543ee2920d3098cf7328d9228c189759e8574a2a1bebca753c5a196081eecca6ec3924bde4c5de0720ee0d6a7c65aaffc75b986ca6389913bc0672c68509c5917f1a6b9531df8e4d772c42e8dd0b6a96234f8c40f411f5c989cc36a2cfb16b40f854f9943f167abdb8442d2724fbdbd59775e2906a465dc4bf33dbf7c759535fd16ced5df19b3ce3b63a0b053da59f66205146010c9596b2e584e757755f04edf35dcb8f434c604c8ba86de3749c9e4fb08e2289e6612044be3730a7062acab047df603dad27469232aabd6cf87a82dd2cd58e038611fc98922e77a17ef43e23a7b1b0eea63be6a79199153e60235aea277c292b4e1840748ca74c6a4d361f36f19f605f6ee3a7a662f6f941eb0bece804b091be12ca5587d03979494aeb78c2aee34ffd5f8a30e270c0213de2275215f21bb5ba243eb950d8e826ecdd225947b37284113d4a4e94bac6a39ea4947b19f10e9336b17174d0da19b657", &(0x7f0000001fc0)="87b890a947f0a95f207d0330c097394799d185926ae417bcb027f183dbb25bbda7c1e620cd7a12f88828257c6aece55b3a9c6ff7694f7049e7a9ea960901777c608d8b6ef5ef13e38d5c246cb696a718fc1e36b0941a45bbf8baedad5a139cd4ee12545dd36c37cf775d5967250a8a3566573ec5fae9d9c0fe80a3c4583ca8f2a136f4d87096c90303b4f985e3d2e35a3727af7f20d9f18ec7f155febdd0b2919f634bc0fe5e201da608f78a1a0827991f8542db7682277d8f42425521fdb9c2c30a8331a277e981ae7c8bd931f5d02619c7525dcd3b8c6c5bea40b1b43766e620bb9192882c85abeb4bb0c554", 0xa, 0x0, 0x7}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x186e2, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r2)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

1.407877746s ago: executing program 2 (id=3934):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05d4800028088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
close(r4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4)
r6 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x38, 0x0, 0x4)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a75f930a248b705d70eb29c1b54cbe", 0xee}, {&(0x7f0000000840)="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", 0x1c1}, {0x0}], 0x3}, 0x8001)
recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)

1.23980761s ago: executing program 0 (id=3935):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x3c, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_clone(0x80881000, 0x0, 0x5, &(0x7f0000000700), 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200c100d8f1"})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6}, 0x20)
openat$cgroup_pressure(r4, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfe33)
setsockopt$sock_attach_bpf(r8, 0x6, 0x15, &(0x7f0000000500), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000000000000000000014000000000000000000000002000000008000000000000011000000000000000000000001000000000000000000000011000000000000000200fdff0000000000000000000000000000000000000000000000000700000083000000"], 0xf}, 0x0)

1.087876904s ago: executing program 3 (id=3936):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

666.515315ms ago: executing program 3 (id=3937):
r0 = perf_event_open(&(0x7f0000000140)={0x3, 0xfffffffffffffc7d, 0x29, 0x1, 0x3, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x1009e4, 0x0, 0x8, 0x20005, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x8028, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10000000, r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair(0x26, 0x800, 0x6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba, 0x4}, 0x10fda7, 0x0, 0x238, 0x0, 0x7, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x1ffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000530a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000008113d712c5282422c4c3a5a3c2b0276c04f76bfe2cd8ba0f6341cd16e742718855908c9d508514c7ca7e9e82e5fd0e2e03bf319b1fb44b27029780ffd6ee6f7aaecd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfdfffffc, 0x1, 0x0, 0x2, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
r8 = socket$kcm(0x10, 0x3, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x80)
recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)

582.202917ms ago: executing program 0 (id=3938):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)

353.439562ms ago: executing program 2 (id=3939):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0xb}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000e80b0000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64], 0x48}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1000, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x4, 0x0, 0x2, 0x13250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0xfffffffffffffffd, 0x4000, 0x9, 0x1017, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c000200", 0x1c}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xa9, '\x00', 0x0, r0, 0x2, 0x5, 0x4}, 0x50)

188.046946ms ago: executing program 3 (id=3940):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$kcm(0x2, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400000004000000030000000000", @ANYRES32=0x0], 0x50)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x1}, 0x50)

60.46551ms ago: executing program 2 (id=3941):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000b00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500000004000000000000000000000000000000000000007b04478d6f5aea77f2420d6ab19b39e6ce7b75f9911809c3945c75c91c31e841c305fea1cd1df4be248aa000ef5a7f65ee5b0139fa156f59505a302ae40caa1eac9077355e139310e558218842b98f8681041c5fdfc3b294fa348ce4343a9b926d3d048a7f4e147e8bb01e5b51e853ec2a2251c4479bddc00e5e358da74169e7c1"], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="cdd5e2d58cd3474c5c082321f5ef", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069110a00000000008510000002000000850000000500000095000000000000009500a5b25b5b92fc"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

0s ago: executing program 0 (id=3942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (rerun: 64)
sendmsg$sock(r1, &(0x7f0000002640)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000002500)=[{&(0x7f0000000200)="1af9869b1700633d7d0c4d9cddd4ecca42bbfe80a0981af0c5aab42c5fb17c9fd1ff24e3cb1d97910c6071f86156e3f1", 0x30}, {&(0x7f0000000240)="7d3b7286b3e4aad53eadef1b039ef0c70063414708fbaebdab1727276e32361143f7", 0x22}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="30e87e200f2dd5c9bd821076abad23179c581dd44747f516b532998059d1433ea6628741ae8e3f62e26935bc2c855934790e212f2622ca112b0402e83cf6e4e6857c7febf6782222cf00629518c8e76fcd161d9058256f79b45c726208349a9b7f1f8279564b35391e02a45603a8c84afd0380596815503572a1c37012dfc71aba7768982c5275e0dc024404ce35e7b63fbd058ae09d632285c8cf7d33ddfd9bbe75a039eddab1f87a94d205b7fd1b194b8d2cbf8f68e1a20c8eff78db7f5dded233810ea55a8c0854b4489a1b1083aa686d375693526a698549ce22d2850609e8145287a458f82265373f2201b8c54a43725dd53da8ce9c50c9a824ff2e0666dc881af9079d7f0352a6ccf8f07cf44aea334a159fe62b4f96b6f5bcec994206cd3fcee776f045e4cd5097d64b1317fa892867207e004fa6d4e72008cbde09e8bca8631694ebcc58d47c40418cf8e81f8c70aa04cfbe2eaf031c3c6bb5f2b05e0c214582e3998da1a4282b2bdbdfd845d0b2c0cc4bae48d531fab7486b62250c1c986982df01323d4b003667fbba5e63fda4fcf7b5395775e6ea48fae109577e25a52dc5a2b6a1d4fd8d41457828cf921d477750d6d468cf20f65f625e2e232a7354072bcccf8bc7c395bae327f90b18ba87a079b66df5b589b703ed261cb8e930aefeac85986cb967d3244dd6d5f70074d55f9fe80791a198c2afdad68043e577412b174766c8975dc3ee56b2233c4a89ad3beebd86b6ead83f3e96380ed2108275e7c6c3328be5f6f274489e631e4c088262ad7ea6178b6f39e617d2b0526485e05c1f59fe377a85aa30ec4b7a12b95d034947e1337ebf35b7740b95d7ee18080b90ba32a487eb321392e819d9094cb629f68dc9d9af43d43ea985fd1e1d7ea757f36f5a8a102b3f67b6e4cec4969f1a3ec790a5a9125d414de8735de0a1e4e07c90f26fd85c2776498060c2c8792494423585ea1130563170f0497a13c34eb2a0c1cd9b0b0d87d1c54d630a2679212df4ad6f411c05fe688706ccc2ef13c58f221fcdcb2b4ed2b7cdbcd2220ed3f7a73538de49e9baf2813650582bd471b576150e4c7999000b356bc866d8f2998f72a400ba7f2808d4255d3ccad50f020f7e0bbce1494a8e0a9e20da59a7bcb83a7db9cb7b182e9b112fc41447cea56d06605a0a060676c97cc3ae5ce7d097fb96d7e3b599c7279a88432ece2f1b52e1ee4278fd50e46136d06502b065888921d84c522030a05ef41ea227cf7f815bdfd78c84116d7e0fbd7c936c15f4981418a7a70f777270aa31e5135f6f82c2d7ad53477e545b7b7101e7d9828f756b45ff2d548b815fb19e885f44b3b5355373268546dac4191e77b2d57e5d9bcb2952589301726c0c7ce4e13f82890eb8c62f3296b997778c71735a50fe9fee02872052116a8c1ad50622a134bcffc89ddc7a8cf89dd4fadb94eabeb780c37bc880fa678efdee65e521e268210195cd2695fc1c0de37ad0cd8a0befcc6adf4063c3e128bc961e84724e3fff18c2a20d007660a6e8e97b66511385e802e45412eb1cc6a6e2dcc0f9f20e9717613f72883368147c72d702fafdff8fbff84c32848153579c6b9b7e67bbd69a4c0e10a398e9745a99a44d3318e3622c43eb11166f6ee3a0a8e75aee328f13959b2cb67984e7a5ea789e88032ed170a825b78f434cbbfcd4910b5790c5368ffa31369f4e8d254d595e0838e445b3043889ba73d79bce0f5dc0ddaf3d688ef2ceba871328e298e947d000ebf4e2c6978d0f20a6386ddc7d5ccf4dd480271c3584d09b9ee7124be22805328efa7e89ae624a177d3c608b65559e213ad359e5ecc441ef28700df6dc4448192ebebb01f12e6939e64ef9d74c0f1d4a0290ea11e99009585370ac0352d7a6b7dfb6eb4f9e9d11b6e67e74300f49584d1e2259af3bcd78693935ac3dc08e7c1df7eb0c738b0ea34ccd08d9612502a3ef17d8bd7a250864e45588fc5a9156671a77575fb00565a5eb2feafd40a52d95175e19ae3111fe3e73b0255d3e1450a7094264f43806dc125eda1361547fa0804f813e9cf5f90b3069e55e73670ddec3d38354e1aa98c5cb97394fb416ae6e32aa5a5914e611f9562be143561d2aee354c61c0aae69eaf4b4ef3281d7aac02ee771063675371c972228015bb2fb42ab017cc29dca38e376baa1d2e5c7e91e25659bd0f5a2f2736c28eca3272b3fe8cdbe5fbffec785c9f99bf4dc33c364835d8498c9acb38e5d26debc2f507bf077fa5d7e1791c5b8543e108f841733324a5e81144f98cf2723fd1ceb6ae1b51aa9b42f52118fdee9af985f92db5fe2d37271d790b5dd02d56f430a5e29a2e6f5e42108769e8a5488615d5cec496ecc03bb913fd38fbcaaeef047d688d3deb73a04c167e92c46bc1b7f90123c7c2117a04ba3383c93c5602d01e3e51d06346ca69fc1358527c3b9c85b8037c9b69dfc7bfa9495e51ea0fb745e4d4db3bd1382871481380dd733c771355e5674251b239bdd3d68f3a9450be7b39dc02c87710c26525a0767a3e34d8fb97800166ccd0b804453507a892606b9dbf6e0bf8ab53a9d8f0ea8f3d03c25f68b1f1366666018111bf698a23648ede461726ade82f5c257d1835c43e6e6162c5f5f3132430d1841bd7cd7a57099552df56df7fef0a8d555c29d7760cc2833a55bd574f0b163981a649bd7dc87bfdeab2dbe9ad6a3aabda7280414b37c75ec15cc02d17f4db727b7e7b8c121754f98fd88f6d283f70993e97e271f2b4244b684b01bb63e6026dfbbdf89934a1ec74a68f2f633a587400d20980d72a6ed5afe211746b0b59a9c56ccc0deb2a3110f761a4e99c580597c4701d26c3c1b6b09b151dead004c63812de560760719a8ca44e7651c8958da090c68a65dc18f32ecc579b8d97b6152acc9062e67422b517342de32c00655fd934dd96c718b85c893cf8316857a75badc102180b9a45e852e9d458bfddd379bc832c70460bca4bce4a2c8e91651ad605aa09286c904627a6c1d32b37177429e06086aecbee99a433ac23894b00fdad4c891f38b382958567f2ab71184c21827dca370d822fb97db4f35a894c9b3671a670f30f4bcacde602ff4494c9acf00cfb9a79fb24526e8b34af7ed3ba97656ab2a4bde37ff4b5ec4017bea81ccf71120253189600edbb4c9eda0fa0142991f057a237fa26f9e3873f0306d641194da6881923aedd945512d7587d7679b760eff15800293024fcbd815e8b199b525d41b2acb22b6c86f236064d5c48777490589f1b9480bde8a6544a319d75dadf681a5cf4368c753fc79ff0b3b9e5e6a99bcf3fa0f387e0266aa36c4181dd0544937993d5334b2c8c78b925cafd293d261f242bf5410046d5465f9c8dc5666a932e92e6c7102ec9e30b855b7ebd6aac397e40f99864cbe4d3962c049f49e3f756f9a801f6620f2342c09848c65a5c624eb28884ffdbf7760d521d0c933971b0fa8365ceccee0c450f093c4865c43988ddd121dd80b651c89faa7721868fd5b3398770f70801e6bbf600776f7a6d7cff6cda884b84fa62547db6364a888deb89c293cb9b3114b83b7231aae6005fc604590d281803979f3aefaca90c67310de4a2f7d1882fefe29b23d82108e9aa8cd5fe3960afad6aaac4a027dfaaaddd8cacb2cd055872241558e8577c042c4211e0e63912dfc8c14378a070d7975158a3823fae3393b0be1a4ba1dd1a3f815e6cad090acc8b722b3aab9d27055e74404ef1d3b4c0b4f180a6dc5ec8752bf32853fe20a9585e7629f6a3ec9823b98961e96b11985775d72e2ce49d2f1f68fdd0b23b9eb1a66a030e6daa692b13821c1e1a3a35c86e0bb06f2103415821673921cbd7cbd08910d7f45a9c8b36affe1c91fb51fc07b181642f813f6243de23440fdbd5b0e7d3fa1640b469507c676a1beb85c821ee585283917c910dfb6a2aa512d987c034393c8e405f82085934a92b952972f56509c392ffbcf1a97ae0598b3aeba54a0da97546136fd7500f1839c791c75c46103cb3c7446a9880edc5b9ba4df2b53ea224a7906c4a0f3b70967f0a02842b2d8dc12b02769ed8ceb3483014c7d25be32e9f8c94daee3e475e5e79ca9bf9be0b4bbc783d9d98c09ed32d53babcb8c3822b54db49723d8f83b312a6c9680333663b054c94039f356a8b88d7736f489207e1d8f8685f0f524e409b61eadad6f7ce18457c9d4f3bfa232250dd7f455c41595af3644cb0b5f749a0f5ae2d9f8b5f065db6502006bd3da810922dbb873d34cf3d0149e5301355d68e477e6d280732cf59e8c95c2663f729e9c52dc5784ed47aa972582e7a088ae42a07fd6417c2d30b2502062b9a866f8b44a19a6d641d074316438a79e3c75b9c209c66e960ee252cbb04b1762ccf66d7c77f93a643913336cf5cc1ae2998e84eb7384d46a5d7b4480a3e55bb48a7bd40e65697dfd107dd3956a6c5c3a1b18d8478bfaf6122ac7552b4b6cf7b77751217696748235770f8f86bfa69e2e86238e77d7eda3046696b908784c6ff5ecb25e6ffb73fe9db48e96c791ace0ed87b3fa64223da3016f187413b7588b682aab02f69801dbf5688e0019aa3b8a8d8fad8212880c41dce372ff5190fe5e4f38d14bfbecce8d7819dac085ebb2d7a16a9a9d5cbca1c8fa5f24fcd27b2d9781214b084f5f7444e2064a6e475c4ecd8cad0cc233c6be14cdfb2839ce9b523c74f7d49e20591401f2fef8da49435d9fa853712a63b42be2b69b6190ef497a7bafb232a9f7b44e076c4369e0cffb51bf12b9620e23f329a7e2c0cb2228f21df532abba5e3b9e1dd60202c97e88246cc961bcbb016758f812c0943fc43431939c47f935a0864d14bea4dc7f682fb29fde3eb4ec52130a22fdaeab3b709351fc2ae4d80e325ad36382822fba70eb52e15334a6e07957d7fc2426e0676762ea41d45acb04af2ee7238a20271d4b5e0c70962a4c1f20f8de24bb8b915932bbe13e156409898ac4e7b3a81d592b95b4af55958218211c7d2659550dab404e70eab5031194c14355ea33e8bd737f930a61f1a38876463f12057e21f241733be2af2623b13c5f4ee7319eb27a9200cde904d01d47d46c6ead7b4bfdfaa8ff5eb5be456dfb8c3e0233968fe45699e86560f3e7dd7cd50f9b9e6f9b1097df605f8f5c812425522bf09a76cf712cd00875b95e74f595bb49fcfeab645f422f438bdeb8872671d8b57f5b80ffde64910871386cd921c8cdb307ba4cbbbacd872f3b187ada02ab251258da1c349736b1eea8665f6cdeb4635cf9a5efb7ddeffd744b14c0aea5ddb07aeedec145f94494c3fcd1df467bef63a34c2b29dd45a4e78c4896cb04280d7b7d95b77d506a228b10dff2528f6c9b87880152b29ac81eb412240e010f4b8244769107f124f7099c4207d01dcb928ad58f2565839d3547d5e7934a62ed59de23893cc723d1639a70518cd62e29a3a36ebe61c6f3837ba5ed91625ee7532f562910685b6c08b407d569753a6885e6c896299aced55f8a337b96cad08e8b68fec7ed5efb12b47d16e23da7bbce2a1dd122145fc7589b9d7c4509d7010b8af9fd7a597a5612ad675e3b098ccf3c483f79f2f319238763b669d621f7cab2d878d40b77aabbf85417fe2777ff367a29ecbc0d33364bf3b42757f1d4079a84549f8a7eb18887c3b5b9e0b97c0c6f818a106298b1e247d6d4068d8458f82e656b9e75251429994fd87212145fabfb26a932dce9cd909fea6b0f155e0bb431ee7d6434a9b9e2d4c6451cf7d934fd86ef5443f262bdce68f4254be76103b4f221e2266d8f74be0c8", 0x1000}], 0x4, &(0x7f0000002540)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x33ac084e}}], 0xf0}, 0x80)

kernel console output (not intermixed with test programs):

ed on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.746656][T15688] batman_adv: batadv0: Interface activated: virt_wifi0
[  718.770638][T15696] FAULT_INJECTION: forcing a failure.
[  718.770638][T15696] name failslab, interval 1, probability 0, space 0, times 0
[  718.784692][T15696] CPU: 0 PID: 15696 Comm: syz.2.2889 Not tainted syzkaller #0
[  718.792403][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  718.802512][T15696] Call Trace:
[  718.805834][T15696]  <TASK>
[  718.808799][T15696]  dump_stack_lvl+0x18c/0x250
[  718.813529][T15696]  ? show_regs_print_info+0x20/0x20
[  718.818766][T15696]  ? load_image+0x420/0x420
[  718.823308][T15696]  ? __lock_acquire+0x7eb0/0x7eb0
[  718.828394][T15696]  should_fail_ex+0x394/0x4c0
[  718.833148][T15696]  should_failslab+0x9/0x20
[  718.837723][T15696]  slab_pre_alloc_hook+0x59/0x300
[  718.842813][T15696]  ? bpf_netns_link_release+0x369/0x5e0
[  718.848426][T15696]  ? bpf_netns_link_release+0x369/0x5e0
[  718.854033][T15696]  __kmem_cache_alloc_node+0x53/0x250
[  718.859478][T15696]  ? bpf_netns_link_release+0x369/0x5e0
[  718.865090][T15696]  __kmalloc+0xa7/0x240
[  718.869316][T15696]  bpf_netns_link_release+0x369/0x5e0
[  718.874743][T15696]  bpf_link_free+0x123/0x300
[  718.879379][T15696]  ? idr_preload_end+0x200/0x200
[  718.884381][T15696]  bpf_link_release+0x6e/0x80
[  718.889112][T15696]  __fput+0x221/0x940
[  718.893165][T15696]  __se_sys_close+0x15c/0x1e0
[  718.897892][T15696]  do_syscall_64+0x55/0xb0
[  718.902361][T15696]  ? clear_bhb_loop+0x40/0x90
[  718.907108][T15696]  ? clear_bhb_loop+0x40/0x90
[  718.911851][T15696]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.917812][T15696] RIP: 0033:0x7fc208f9e159
[  718.922279][T15696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.941956][T15696] RSP: 002b:00007fc209e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  718.950412][T15696] RAX: ffffffffffffffda RBX: 00007fc209225fa0 RCX: 00007fc208f9e159
[  718.958437][T15696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  718.966472][T15696] RBP: 00007fc209e22090 R08: 0000000000000000 R09: 0000000000000000
[  718.974517][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.982717][T15696] R13: 00007fc209226038 R14: 00007fc209225fa0 R15: 00007ffc765316b8
[  718.990752][T15696]  </TASK>
[  719.148329][T15703] netlink: 'syz.2.2891': attribute type 3 has an invalid length.
[  719.166918][T15703] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2891'.
[  719.950745][T15712] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2893'.
[  719.974623][T15712] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2893'.
[  720.168165][T15720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2894'.
[  720.963613][T15736] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2
[  720.994358][T15736] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1
[  721.063886][T15743] netlink: 'syz.3.2905': attribute type 3 has an invalid length.
[  722.522583][T15759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.549056][T15759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.562970][T15759] bond0 (unregistering): Released all slaves
[  722.575038][T15763] FAULT_INJECTION: forcing a failure.
[  722.575038][T15763] name failslab, interval 1, probability 0, space 0, times 0
[  722.594561][T15763] CPU: 0 PID: 15763 Comm: syz.2.2912 Not tainted syzkaller #0
[  722.602103][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  722.612227][T15763] Call Trace:
[  722.615544][T15763]  <TASK>
[  722.618507][T15763]  dump_stack_lvl+0x18c/0x250
[  722.623258][T15763]  ? show_regs_print_info+0x20/0x20
[  722.628492][T15763]  ? load_image+0x420/0x420
[  722.633061][T15763]  ? lockdep_hardirqs_on+0x98/0x150
[  722.638329][T15763]  should_fail_ex+0x394/0x4c0
[  722.643055][T15763]  should_failslab+0x9/0x20
[  722.647615][T15763]  slab_pre_alloc_hook+0x59/0x300
[  722.652682][T15763]  kmem_cache_alloc_node+0x5e/0x310
[  722.657916][T15763]  ? __alloc_skb+0x103/0x2c0
[  722.662550][T15763]  __alloc_skb+0x103/0x2c0
[  722.667053][T15763]  alloc_skb_with_frags+0xcd/0x7a0
[  722.672221][T15763]  ? __might_fault+0xaa/0x120
[  722.676943][T15763]  ? __lock_acquire+0x7eb0/0x7eb0
[  722.682007][T15763]  ? mark_lock+0x94/0x320
[  722.686375][T15763]  sock_alloc_send_pskb+0x883/0x9a0
[  722.691642][T15763]  ? sock_kzfree_s+0x50/0x50
[  722.696260][T15763]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  722.702469][T15763]  packet_sendmsg+0x2f9c/0x4a30
[  722.707358][T15763]  ? aa_sk_perm+0x970/0x970
[  722.711936][T15763]  ? __might_sleep+0xe0/0xe0
[  722.716572][T15763]  ? verify_lock_unused+0x140/0x140
[  722.721820][T15763]  ? aa_sk_perm+0x83c/0x970
[  722.726395][T15763]  ? packet_getsockopt+0xad0/0xad0
[  722.731551][T15763]  ? tomoyo_socket_listen_permission+0xd6/0x390
[  722.737829][T15763]  ? aa_sock_msg_perm+0x94/0x150
[  722.742803][T15763]  ? apparmor_socket_sendmsg+0x8e/0x330
[  722.748400][T15763]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  722.753721][T15763]  ? security_socket_sendmsg+0x80/0xa0
[  722.759212][T15763]  ? packet_getsockopt+0xad0/0xad0
[  722.764381][T15763]  ____sys_sendmsg+0x61b/0x980
[  722.769239][T15763]  ? __asan_memset+0x22/0x40
[  722.773878][T15763]  ? __sys_sendmsg_sock+0x30/0x30
[  722.778939][T15763]  ? __import_iovec+0x3fa/0x850
[  722.783836][T15763]  ? import_iovec+0x73/0xa0
[  722.788378][T15763]  ___sys_sendmsg+0x2a6/0x360
[  722.793097][T15763]  ? get_pid_task+0x20/0x1e0
[  722.797740][T15763]  ? __sys_sendmsg+0x2b0/0x2b0
[  722.802577][T15763]  ? __lock_acquire+0x7eb0/0x7eb0
[  722.807666][T15763]  __se_sys_sendmsg+0x1d0/0x2c0
[  722.812565][T15763]  ? __x64_sys_sendmsg+0x80/0x80
[  722.817605][T15763]  ? lockdep_hardirqs_on+0x98/0x150
[  722.822867][T15763]  do_syscall_64+0x55/0xb0
[  722.827321][T15763]  ? clear_bhb_loop+0x40/0x90
[  722.832027][T15763]  ? clear_bhb_loop+0x40/0x90
[  722.836737][T15763]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  722.842667][T15763] RIP: 0033:0x7fc208f9e159
[  722.847111][T15763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.866750][T15763] RSP: 002b:00007fc209e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  722.875215][T15763] RAX: ffffffffffffffda RBX: 00007fc209225fa0 RCX: 00007fc208f9e159
[  722.883226][T15763] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000006
[  722.891315][T15763] RBP: 00007fc209e22090 R08: 0000000000000000 R09: 0000000000000000
[  722.899307][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.907302][T15763] R13: 00007fc209226038 R14: 00007fc209225fa0 R15: 00007ffc765316b8
[  722.915334][T15763]  </TASK>
[  723.197942][T15772] netlink: 'syz.3.2916': attribute type 3 has an invalid length.
[  723.206131][T15772] __nla_validate_parse: 5 callbacks suppressed
[  723.206148][T15772] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2916'.
[  723.333579][T15775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2914'.
[  724.123254][T15785] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2
[  724.144709][T15785] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1
[  724.204162][T15787] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2920'.
[  724.237736][T15787] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2920'.
[  724.853914][T15794] FAULT_INJECTION: forcing a failure.
[  724.853914][T15794] name failslab, interval 1, probability 0, space 0, times 0
[  724.906463][T15794] CPU: 0 PID: 15794 Comm: syz.3.2923 Not tainted syzkaller #0
[  724.914027][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  724.924140][T15794] Call Trace:
[  724.927466][T15794]  <TASK>
[  724.930435][T15794]  dump_stack_lvl+0x18c/0x250
[  724.935167][T15794]  ? show_regs_print_info+0x20/0x20
[  724.940425][T15794]  ? load_image+0x420/0x420
[  724.944992][T15794]  ? __lock_acquire+0x7eb0/0x7eb0
[  724.950074][T15794]  ? verify_lock_unused+0x140/0x140
[  724.955332][T15794]  should_fail_ex+0x394/0x4c0
[  724.960080][T15794]  should_failslab+0x9/0x20
[  724.964644][T15794]  slab_pre_alloc_hook+0x59/0x300
[  724.969750][T15794]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  724.975651][T15794]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  724.981253][T15794]  __kmem_cache_alloc_node+0x53/0x250
[  724.986688][T15794]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  724.992298][T15794]  __kmalloc+0xa7/0x240
[  724.996509][T15794]  bpf_prog_test_run_skb+0x242/0x18f0
[  725.001929][T15794]  ? __fget_files+0x28/0x460
[  725.006558][T15794]  ? __fget_files+0x3fc/0x460
[  725.011286][T15794]  ? cpu_online+0x60/0x60
[  725.015658][T15794]  bpf_prog_test_run+0x31f/0x390
[  725.020630][T15794]  __sys_bpf+0x49d/0x890
[  725.024900][T15794]  ? bpf_link_show_fdinfo+0x560/0x560
[  725.030318][T15794]  ? lock_chain_count+0x20/0x20
[  725.035204][T15794]  __x64_sys_bpf+0x7c/0x90
[  725.039657][T15794]  do_syscall_64+0x55/0xb0
[  725.044110][T15794]  ? clear_bhb_loop+0x40/0x90
[  725.048814][T15794]  ? clear_bhb_loop+0x40/0x90
[  725.053522][T15794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.059472][T15794] RIP: 0033:0x7ffa8499e159
[  725.063913][T15794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.083552][T15794] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  725.092003][T15794] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  725.100005][T15794] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  725.107997][T15794] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  725.115996][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.123991][T15794] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  725.132016][T15794]  </TASK>
[  725.269096][T15798] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2925'.
[  725.352892][T15799] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.415795][T15799] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2925'.
[  725.503350][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.546864][T15798] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2925'.
[  725.597853][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.636271][T15798] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2925'.
[  725.655946][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.700199][T15798] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2925'.
[  725.758048][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.796380][T15798] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2925'.
[  725.851261][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.885430][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.913654][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  725.944634][T15798] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  729.343975][T15832] __nla_validate_parse: 12 callbacks suppressed
[  729.344000][T15832] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2933'.
[  729.364224][T15832] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2933'.
[  732.821804][T15857] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2941'.
[  732.923711][T15860] validate_nla: 7 callbacks suppressed
[  732.923730][T15860] netlink: 'syz.1.2942': attribute type 3 has an invalid length.
[  732.950254][T15860] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2942'.
[  733.162110][T15863] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2944'.
[  733.195318][T15863] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  733.234434][T15872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2943'.
[  733.251669][T15863] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  733.718590][T15875] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2946'.
[  733.733877][T15875] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2946'.
[  734.166908][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  737.452501][T15895] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2951'.
[  737.482007][T15896] netlink: 'syz.3.2953': attribute type 21 has an invalid length.
[  737.656110][T15903] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2962'.
[  737.791942][T15906] netlink: 'syz.3.2955': attribute type 3 has an invalid length.
[  737.800254][T15906] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2955'.
[  737.909690][T15907] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2956'.
[  737.937493][T15907] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2956'.
[  737.994291][T15914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2957'.
[  738.596054][T15920] netlink: 'syz.0.2958': attribute type 22 has an invalid length.
[  738.616665][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'.
[  739.165146][T15936] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2964'.
[  739.856311][T15940] netlink: set zone limit has 8 unknown bytes
[  740.178384][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.850169][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.867765][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.887357][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.901968][T15951] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2967'.
[  741.916623][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.924789][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.966852][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  741.975380][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  742.013057][T15947] netlink: 'syz.1.2966': attribute type 10 has an invalid length.
[  742.072645][T15953] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2969'.
[  742.581242][T15955] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2968'.
[  742.610562][T15955] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2968'.
[  742.883528][T15968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2971'.
[  743.250641][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'.
[  743.836036][T15983] validate_nla: 2 callbacks suppressed
[  743.836057][T15983] netlink: 'syz.0.2976': attribute type 3 has an invalid length.
[  743.877412][T15983] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2976'.
[  744.332321][T15993] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2979'.
[  745.160966][T16004] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2981'.
[  747.266713][T16004] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2981'.
[  747.458495][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  747.464924][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  747.480955][T16007] netlink: 'syz.3.2982': attribute type 3 has an invalid length.
[  747.516724][T16007] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2982'.
[  748.139523][T16022] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2985'.
[  748.501157][T16034] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2989'.
[  748.608298][T16039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2987'.
[  751.784941][T16051] netlink: 'syz.3.2998': attribute type 3 has an invalid length.
[  751.801076][T16051] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2998'.
[  752.492659][T16064] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3001'.
[  752.516176][T16050] netlink: 'syz.1.2996': attribute type 22 has an invalid length.
[  752.547426][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'.
[  753.010119][T16083] IPv6: NLM_F_CREATE should be specified when creating new route
[  753.036921][T16083] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3005'.
[  753.994979][T16088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3007'.
[  755.669674][T16094] netlink: 'syz.1.3016': attribute type 1 has an invalid length.
[  755.696714][T16094] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3016'.
[  755.706103][T16094] netlink: 'syz.1.3016': attribute type 1 has an invalid length.
[  756.047919][T16099] FAULT_INJECTION: forcing a failure.
[  756.047919][T16099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.071949][T16099] CPU: 1 PID: 16099 Comm: syz.3.3009 Not tainted syzkaller #0
[  756.079538][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  756.089664][T16099] Call Trace:
[  756.093015][T16099]  <TASK>
[  756.096031][T16099]  dump_stack_lvl+0x18c/0x250
[  756.100786][T16099]  ? show_regs_print_info+0x20/0x20
[  756.106065][T16099]  ? load_image+0x420/0x420
[  756.110632][T16099]  ? __lock_acquire+0x7eb0/0x7eb0
[  756.115705][T16099]  ? snprintf+0xe9/0x140
[  756.120004][T16099]  should_fail_ex+0x394/0x4c0
[  756.124917][T16099]  _copy_to_user+0x2f/0xa0
[  756.129387][T16099]  simple_read_from_buffer+0xe7/0x150
[  756.134808][T16099]  proc_fail_nth_read+0x1e8/0x260
[  756.139877][T16099]  ? proc_fault_inject_write+0x360/0x360
[  756.145548][T16099]  ? fsnotify_perm+0x271/0x5e0
[  756.150357][T16099]  ? proc_fault_inject_write+0x360/0x360
[  756.156023][T16099]  vfs_read+0x298/0x990
[  756.160218][T16099]  ? kernel_read+0x1e0/0x1e0
[  756.164840][T16099]  ? __fget_files+0x28/0x460
[  756.169470][T16099]  ? __fget_files+0x3fc/0x460
[  756.174201][T16099]  ? __fdget_pos+0x2a3/0x330
[  756.178846][T16099]  ? ksys_read+0x74/0x260
[  756.183216][T16099]  ksys_read+0x151/0x260
[  756.187500][T16099]  ? vfs_write+0x9a0/0x9a0
[  756.191953][T16099]  ? lockdep_hardirqs_on+0x98/0x150
[  756.197183][T16099]  do_syscall_64+0x55/0xb0
[  756.201635][T16099]  ? clear_bhb_loop+0x40/0x90
[  756.206341][T16099]  ? clear_bhb_loop+0x40/0x90
[  756.211055][T16099]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.217009][T16099] RIP: 0033:0x7ffa8495e98e
[  756.221478][T16099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  756.241113][T16099] RSP: 002b:00007ffa85906fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  756.249555][T16099] RAX: ffffffffffffffda RBX: 00007ffa859076c0 RCX: 00007ffa8495e98e
[  756.257572][T16099] RDX: 000000000000000f RSI: 00007ffa859070a0 RDI: 000000000000000a
[  756.265571][T16099] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  756.273572][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.281659][T16099] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  756.289671][T16099]  </TASK>
[  756.348437][T16101] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3011'.
[  756.451463][T16106] netlink: 'syz.0.3013': attribute type 3 has an invalid length.
[  756.486575][T16106] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3013'.
[  757.060821][T16123] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3017'.
[  757.115520][T16124] netlink: 'syz.3.3014': attribute type 9 has an invalid length.
[  757.135453][T16124] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3014'.
[  757.729038][T16137] netlink: 'syz.0.3022': attribute type 21 has an invalid length.
[  757.758588][T16137] netlink: 'syz.0.3022': attribute type 6 has an invalid length.
[  757.789570][T16137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3022'.
[  757.882783][T16139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3021'.
[  758.094500][T16143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3024'.
[  760.772508][T16151] netlink: 'syz.0.3026': attribute type 3 has an invalid length.
[  760.816871][T16151] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3026'.
[  760.956992][T16157] netlink: 'syz.3.3027': attribute type 10 has an invalid length.
[  761.873441][T16175] IPv6: NLM_F_CREATE should be specified when creating new route
[  761.907054][T16175] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3028'.
[  762.014042][T16179] netlink: 'syz.3.3032': attribute type 21 has an invalid length.
[  762.025693][T16179] netlink: 'syz.3.3032': attribute type 6 has an invalid length.
[  762.042646][T16179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3032'.
[  762.075332][T16182] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3031'.
[  762.147881][T16182] netlink: 'syz.1.3031': attribute type 3 has an invalid length.
[  762.240713][T16184] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3034'.
[  766.254827][T16229] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3046'.
[  766.383938][T16221] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3047'.
[  766.461925][T16221] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3047'.
[  766.664724][T16232] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3048'.
[  766.729191][T16232] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3048'.
[  770.408276][T16265] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3058'.
[  771.385085][T16271] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3059'.
[  771.462236][T16271] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3059'.
[  771.599751][ T5089] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  774.773408][T16299] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3067'.
[  775.179323][T16310] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3072'.
[  775.227010][T16310] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3072'.
[  775.761627][T16319] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3074'.
[  778.003993][T16327] netlink: 'syz.0.3076': attribute type 10 has an invalid length.
[  778.047557][T16327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  778.077214][T16327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  780.958323][T16330] netlink: 'syz.0.3076': attribute type 10 has an invalid length.
[  780.976233][T16342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3078'.
[  781.215203][T16348] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3080'.
[  781.348779][T16358] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3083'.
[  781.377620][T16358] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3083'.
[  781.724721][T16372] netlink: 'syz.0.3087': attribute type 3 has an invalid length.
[  781.746898][T16372] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3087'.
[  782.819605][T16390] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3090'.
[  782.834185][T16386] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3090'.
[  782.880369][T16392] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3092'.
[  782.931625][T16394] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3093'.
[  782.953623][T16394] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3093'.
[  783.130836][T16396] netlink: 'syz.3.3094': attribute type 10 has an invalid length.
[  783.262428][T16396] team0: Port device geneve1 added
[  783.701243][T16408] netlink: 'syz.0.3100': attribute type 3 has an invalid length.
[  784.748991][T16422] netlink: 'syz.3.3105': attribute type 1 has an invalid length.
[  784.766602][T16422] netlink: 'syz.3.3105': attribute type 4 has an invalid length.
[  786.862950][T16428] FAULT_INJECTION: forcing a failure.
[  786.862950][T16428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.880568][T16428] CPU: 1 PID: 16428 Comm: syz.2.3108 Not tainted syzkaller #0
[  786.888103][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  786.894013][T16431] FAULT_INJECTION: forcing a failure.
[  786.894013][T16431] name failslab, interval 1, probability 0, space 0, times 0
[  786.898183][T16428] Call Trace:
[  786.898194][T16428]  <TASK>
[  786.898203][T16428]  dump_stack_lvl+0x18c/0x250
[  786.898246][T16428]  ? show_regs_print_info+0x20/0x20
[  786.927063][T16428]  ? load_image+0x420/0x420
[  786.931627][T16428]  ? __might_fault+0xaa/0x120
[  786.936344][T16428]  ? __lock_acquire+0x7eb0/0x7eb0
[  786.941418][T16428]  ? __virt_addr_valid+0x10c/0x380
[  786.946588][T16428]  should_fail_ex+0x394/0x4c0
[  786.951321][T16428]  _copy_from_user+0x2f/0xe0
[  786.955950][T16428]  ____sys_sendmsg+0x329/0x980
[  786.960768][T16428]  ? __sys_sendmsg_sock+0x30/0x30
[  786.965832][T16428]  ? __import_iovec+0x3fa/0x850
[  786.970739][T16428]  ? import_iovec+0x73/0xa0
[  786.975322][T16428]  ___sys_sendmsg+0x2a6/0x360
[  786.980042][T16428]  ? get_pid_task+0x20/0x1e0
[  786.984695][T16428]  ? __sys_sendmsg+0x2b0/0x2b0
[  786.989536][T16428]  ? __lock_acquire+0x7eb0/0x7eb0
[  786.994648][T16428]  __se_sys_sendmsg+0x1d0/0x2c0
[  786.999541][T16428]  ? __x64_sys_sendmsg+0x80/0x80
[  787.004619][T16428]  ? lockdep_hardirqs_on+0x98/0x150
[  787.009854][T16428]  do_syscall_64+0x55/0xb0
[  787.014301][T16428]  ? clear_bhb_loop+0x40/0x90
[  787.019012][T16428]  ? clear_bhb_loop+0x40/0x90
[  787.023714][T16428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  787.029659][T16428] RIP: 0033:0x7fc208f9e159
[  787.034105][T16428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.053755][T16428] RSP: 002b:00007fc209e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  787.062218][T16428] RAX: ffffffffffffffda RBX: 00007fc209225fa0 RCX: 00007fc208f9e159
[  787.070222][T16428] RDX: 0000000000040880 RSI: 0000200000007940 RDI: 0000000000000004
[  787.078219][T16428] RBP: 00007fc209e22090 R08: 0000000000000000 R09: 0000000000000000
[  787.086211][T16428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  787.094203][T16428] R13: 00007fc209226038 R14: 00007fc209225fa0 R15: 00007ffc765316b8
[  787.102222][T16428]  </TASK>
[  787.105462][T16431] CPU: 0 PID: 16431 Comm: syz.3.3107 Not tainted syzkaller #0
[  787.113020][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  787.123150][T16431] Call Trace:
[  787.126476][T16431]  <TASK>
[  787.129444][T16431]  dump_stack_lvl+0x18c/0x250
[  787.134210][T16431]  ? sctp_sendmsg+0x1519/0x27b0
[  787.139171][T16431]  ? ___sys_sendmsg+0x2a6/0x360
[  787.144085][T16431]  ? show_regs_print_info+0x20/0x20
[  787.149376][T16431]  ? load_image+0x420/0x420
[  787.153944][T16431]  should_fail_ex+0x394/0x4c0
[  787.158677][T16431]  should_failslab+0x9/0x20
[  787.163221][T16431]  slab_pre_alloc_hook+0x59/0x300
[  787.168305][T16431]  ? sctp_add_bind_addr+0x8c/0x360
[  787.173460][T16431]  __kmem_cache_alloc_node+0x53/0x250
[  787.178874][T16431]  ? sctp_add_bind_addr+0x8c/0x360
[  787.184022][T16431]  kmalloc_trace+0x2a/0xe0
[  787.188476][T16431]  sctp_add_bind_addr+0x8c/0x360
[  787.193454][T16431]  sctp_copy_local_addr_list+0x31b/0x4e0
[  787.199196][T16431]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  787.204955][T16431]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  787.211063][T16431]  ? sctp_v6_is_any+0x64/0x70
[  787.215779][T16431]  ? sctp_copy_one_addr+0x8c/0x350
[  787.220928][T16431]  sctp_bind_addr_copy+0xb3/0x3c0
[  787.225987][T16431]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  787.232348][T16431]  sctp_connect_new_asoc+0x2f9/0x6a0
[  787.237767][T16431]  ? __sctp_connect+0xd80/0xd80
[  787.242644][T16431]  ? __local_bh_enable_ip+0x13a/0x1c0
[  787.248051][T16431]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  787.253635][T16431]  ? security_sctp_bind_connect+0x89/0xb0
[  787.259389][T16431]  sctp_sendmsg+0x1519/0x27b0
[  787.264101][T16431]  ? sctp_getsockopt+0xb60/0xb60
[  787.269070][T16431]  ? aa_af_perm+0x330/0x330
[  787.273611][T16431]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  787.280055][T16431]  ? sock_rps_record_flow+0x19/0x3f0
[  787.285372][T16431]  ? inet_sendmsg+0xce/0x2a0
[  787.289987][T16431]  ? inet_send_prepare+0x250/0x250
[  787.295128][T16431]  ____sys_sendmsg+0x61b/0x980
[  787.299930][T16431]  ? __asan_memset+0x22/0x40
[  787.304555][T16431]  ? __sys_sendmsg_sock+0x30/0x30
[  787.309610][T16431]  ? __import_iovec+0x5f2/0x850
[  787.314509][T16431]  ? import_iovec+0x73/0xa0
[  787.319054][T16431]  ___sys_sendmsg+0x2a6/0x360
[  787.323766][T16431]  ? get_pid_task+0x20/0x1e0
[  787.328391][T16431]  ? __sys_sendmsg+0x2b0/0x2b0
[  787.333207][T16431]  ? __lock_acquire+0x7eb0/0x7eb0
[  787.338288][T16431]  __se_sys_sendmsg+0x1d0/0x2c0
[  787.343179][T16431]  ? __x64_sys_sendmsg+0x80/0x80
[  787.348182][T16431]  ? lockdep_hardirqs_on+0x98/0x150
[  787.353432][T16431]  do_syscall_64+0x55/0xb0
[  787.358078][T16431]  ? clear_bhb_loop+0x40/0x90
[  787.362783][T16431]  ? clear_bhb_loop+0x40/0x90
[  787.367680][T16431]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  787.373610][T16431] RIP: 0033:0x7ffa8499e159
[  787.378064][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.397694][T16431] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  787.406134][T16431] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  787.414131][T16431] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003
[  787.422130][T16431] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  787.430130][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  787.438127][T16431] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  787.446164][T16431]  </TASK>
[  787.596234][T16435] __nla_validate_parse: 2 callbacks suppressed
[  787.596276][T16435] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3109'.
[  787.913266][T16448] bridge0: port 3(ip6gretap0) entered blocking state
[  787.920830][T16448] bridge0: port 3(ip6gretap0) entered disabled state
[  787.936797][T16448] ip6gretap0: entered allmulticast mode
[  787.946172][T16448] ip6gretap0: entered promiscuous mode
[  787.958483][T16448] bridge0: port 3(ip6gretap0) entered blocking state
[  787.966514][T16448] bridge0: port 3(ip6gretap0) entered forwarding state
[  788.919808][T16451] netlink: 'syz.2.3114': attribute type 3 has an invalid length.
[  788.940678][T16451] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3114'.
[  789.097382][T16459] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  789.105806][T16459] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  789.161811][T16463] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  789.211773][T16459] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  789.763061][T16475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3120'.
[  790.319457][T16479] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3122'.
[  790.336366][T16479] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3122'.
[  791.675605][T16511] netlink: 'syz.0.3131': attribute type 3 has an invalid length.
[  791.690213][T16511] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3131'.
[  794.056101][T16529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3134'.
[  794.806181][T16554] netlink: 'syz.3.3143': attribute type 3 has an invalid length.
[  794.814932][T16554] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3143'.
[  797.574168][T16561] FAULT_INJECTION: forcing a failure.
[  797.574168][T16561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.595238][T16561] CPU: 1 PID: 16561 Comm: syz.0.3144 Not tainted syzkaller #0
[  797.602810][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  797.612944][T16561] Call Trace:
[  797.616264][T16561]  <TASK>
[  797.619258][T16561]  dump_stack_lvl+0x18c/0x250
[  797.624003][T16561]  ? show_regs_print_info+0x20/0x20
[  797.629251][T16561]  ? load_image+0x420/0x420
[  797.633810][T16561]  ? __might_fault+0xaa/0x120
[  797.638568][T16561]  ? __lock_acquire+0x7eb0/0x7eb0
[  797.643644][T16561]  ? __virt_addr_valid+0x10c/0x380
[  797.648812][T16561]  should_fail_ex+0x394/0x4c0
[  797.653560][T16561]  _copy_from_user+0x2f/0xe0
[  797.658207][T16561]  ____sys_sendmsg+0x329/0x980
[  797.663050][T16561]  ? __sys_sendmsg_sock+0x30/0x30
[  797.668137][T16561]  ? __import_iovec+0x3fa/0x850
[  797.673086][T16561]  ? import_iovec+0x73/0xa0
[  797.677678][T16561]  ___sys_sendmsg+0x2a6/0x360
[  797.682430][T16561]  ? get_pid_task+0x20/0x1e0
[  797.687109][T16561]  ? __sys_sendmsg+0x2b0/0x2b0
[  797.691967][T16561]  ? __lock_acquire+0x7eb0/0x7eb0
[  797.697091][T16561]  __se_sys_sendmsg+0x1d0/0x2c0
[  797.702017][T16561]  ? __x64_sys_sendmsg+0x80/0x80
[  797.707030][T16561]  ? lockdep_hardirqs_on+0x98/0x150
[  797.712288][T16561]  do_syscall_64+0x55/0xb0
[  797.716757][T16561]  ? clear_bhb_loop+0x40/0x90
[  797.721481][T16561]  ? clear_bhb_loop+0x40/0x90
[  797.726198][T16561]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  797.732160][T16561] RIP: 0033:0x7f2c1fb9e159
[  797.736636][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.756376][T16561] RSP: 002b:00007f2c20a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  797.764840][T16561] RAX: ffffffffffffffda RBX: 00007f2c1fe25fa0 RCX: 00007f2c1fb9e159
[  797.772851][T16561] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  797.780862][T16561] RBP: 00007f2c20a6a090 R08: 0000000000000000 R09: 0000000000000000
[  797.788896][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.796913][T16561] R13: 00007f2c1fe26038 R14: 00007f2c1fe25fa0 R15: 00007fff2f7d0ae8
[  797.804943][T16561]  </TASK>
[  797.897223][T16564] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3145'.
[  797.946559][T16568] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3145'.
[  798.543599][T16583] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3152'.
[  798.592243][T16583] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3152'.
[  798.935479][T16595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3154'.
[  801.780777][T16599] FAULT_INJECTION: forcing a failure.
[  801.780777][T16599] name failslab, interval 1, probability 0, space 0, times 0
[  801.816983][T16599] CPU: 1 PID: 16599 Comm: syz.1.3157 Not tainted syzkaller #0
[  801.824560][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  801.834708][T16599] Call Trace:
[  801.838057][T16599]  <TASK>
[  801.841049][T16599]  dump_stack_lvl+0x18c/0x250
[  801.845822][T16599]  ? show_regs_print_info+0x20/0x20
[  801.851095][T16599]  ? load_image+0x420/0x420
[  801.855687][T16599]  ? __lock_acquire+0x7eb0/0x7eb0
[  801.860779][T16599]  ? trace_event_raw_event_lock+0x240/0x240
[  801.866756][T16599]  should_fail_ex+0x394/0x4c0
[  801.871537][T16599]  should_failslab+0x9/0x20
[  801.876113][T16599]  slab_pre_alloc_hook+0x59/0x300
[  801.881230][T16599]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  801.886860][T16599]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  801.892473][T16599]  __kmem_cache_alloc_node+0x53/0x250
[  801.897952][T16599]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  801.903596][T16599]  __kmalloc+0xa7/0x240
[  801.907847][T16599]  bpf_prog_test_run_skb+0x242/0x18f0
[  801.913323][T16599]  ? __fget_files+0x28/0x460
[  801.918007][T16599]  ? __fget_files+0x3fc/0x460
[  801.922819][T16599]  ? cpu_online+0x60/0x60
[  801.927237][T16599]  bpf_prog_test_run+0x31f/0x390
[  801.932261][T16599]  __sys_bpf+0x49d/0x890
[  801.936581][T16599]  ? bpf_link_show_fdinfo+0x560/0x560
[  801.942051][T16599]  ? lock_chain_count+0x20/0x20
[  801.947024][T16599]  __x64_sys_bpf+0x7c/0x90
[  801.951510][T16599]  do_syscall_64+0x55/0xb0
[  801.955996][T16599]  ? clear_bhb_loop+0x40/0x90
[  801.960732][T16599]  ? clear_bhb_loop+0x40/0x90
[  801.965471][T16599]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  801.971428][T16599] RIP: 0033:0x7f13a9f9e159
[  801.975905][T16599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  801.995590][T16599] RSP: 002b:00007f13aadbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  802.004077][T16599] RAX: ffffffffffffffda RBX: 00007f13aa225fa0 RCX: 00007f13a9f9e159
[  802.012116][T16599] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  802.020164][T16599] RBP: 00007f13aadbb090 R08: 0000000000000000 R09: 0000000000000000
[  802.028284][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  802.036311][T16599] R13: 00007f13aa226038 R14: 00007f13aa225fa0 R15: 00007ffd6903cf68
[  802.044393][T16599]  </TASK>
[  802.168228][T16602] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3155'.
[  802.217057][T16602] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3155'.
[  803.062997][T16617] netlink: 'syz.2.3164': attribute type 9 has an invalid length.
[  803.091657][T16617] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3164'.
[  803.305756][T16628] netlink: 'syz.0.3156': attribute type 3 has an invalid length.
[  803.324633][T16628] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3156'.
[  803.557126][T16619] netlink: 'syz.1.3163': attribute type 10 has an invalid length.
[  803.623134][T16619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3163'.
[  803.672754][T16619] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  803.727040][T16619] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.876689][T16619] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  803.965920][T16625] netlink: 'syz.2.3164': attribute type 9 has an invalid length.
[  803.977472][T16625] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3164'.
[  804.228925][T16622] netlink: 'syz.1.3163': attribute type 3 has an invalid length.
[  804.256865][T16622] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.3163'.
[  804.744602][T16639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3166'.
[  805.214155][T16647] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3168'.
[  805.229342][T16647] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3168'.
[  805.659552][T16660] netlink: 'syz.2.3174': attribute type 3 has an invalid length.
[  808.926615][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  808.947248][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  809.070921][T16680] __nla_validate_parse: 4 callbacks suppressed
[  809.070942][T16680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3178'.
[  809.137723][T16676] netlink: 'syz.0.3176': attribute type 10 has an invalid length.
[  809.149961][T16676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3176'.
[  809.174023][T16676] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  809.181820][T16676] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  809.235074][T16676] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  809.254492][T16683] netlink: 'syz.0.3176': attribute type 3 has an invalid length.
[  809.264168][T16683] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.3176'.
[  809.286317][T16687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3177'.
[  809.946856][T16704] netlink: 'syz.2.3186': attribute type 3 has an invalid length.
[  809.955462][T16704] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3186'.
[  810.079970][T16705] FAULT_INJECTION: forcing a failure.
[  810.079970][T16705] name failslab, interval 1, probability 0, space 0, times 0
[  810.138042][T16705] CPU: 0 PID: 16705 Comm: syz.0.3185 Not tainted syzkaller #0
[  810.145633][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  810.155813][T16705] Call Trace:
[  810.159180][T16705]  <TASK>
[  810.162201][T16705]  dump_stack_lvl+0x18c/0x250
[  810.167003][T16705]  ? show_regs_print_info+0x20/0x20
[  810.172325][T16705]  ? load_image+0x420/0x420
[  810.177014][T16705]  ? fib_rules_unregister+0x330/0x330
[  810.182629][T16705]  should_fail_ex+0x394/0x4c0
[  810.187454][T16705]  should_failslab+0x9/0x20
[  810.192065][T16705]  slab_pre_alloc_hook+0x59/0x300
[  810.197193][T16705]  ? find_exception+0x175/0xa30
[  810.202215][T16705]  kmem_cache_alloc+0x5a/0x2c0
[  810.207085][T16705]  ? dst_alloc+0x105/0x170
[  810.211843][T16705]  dst_alloc+0x105/0x170
[  810.216239][T16705]  ip_route_output_key_hash_rcu+0x14a2/0x2350
[  810.222478][T16705]  ? ip_route_output_key_hash+0x13d/0x330
[  810.228312][T16705]  ip_route_output_key_hash+0x1f3/0x330
[  810.233964][T16705]  ? ip_route_input_rcu+0x3120/0x3120
[  810.239445][T16705]  ? read_lock_is_recursive+0x20/0x20
[  810.244896][T16705]  ? crng_make_state+0x411/0x700
[  810.249929][T16705]  ip_route_output_flow+0x2a/0x150
[  810.255126][T16705]  sctp_v4_get_dst+0xc01/0x11d0
[  810.260046][T16705]  ? sctp_v4_get_dst+0x54d/0x11d0
[  810.265155][T16705]  ? sctp_v4_xmit+0xd10/0xd10
[  810.269887][T16705]  ? _get_random_bytes+0x1e8/0x250
[  810.275166][T16705]  ? _raw_spin_unlock+0x40/0x40
[  810.280607][T16705]  ? dst_release+0x72/0x1a0
[  810.285286][T16705]  sctp_transport_route+0x112/0x2b0
[  810.290589][T16705]  sctp_assoc_add_peer+0x6db/0x1440
[  810.295902][T16705]  sctp_connect_new_asoc+0x323/0x6a0
[  810.301268][T16705]  ? __sctp_connect+0xd80/0xd80
[  810.306180][T16705]  ? __local_bh_enable_ip+0x13a/0x1c0
[  810.311647][T16705]  ? _local_bh_enable+0xa0/0xa0
[  810.316571][T16705]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  810.322709][T16705]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  810.328605][T16705]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  810.334258][T16705]  ? security_sctp_bind_connect+0x89/0xb0
[  810.340075][T16705]  sctp_sendmsg+0x1519/0x27b0
[  810.344877][T16705]  ? sctp_getsockopt+0xb60/0xb60
[  810.350088][T16705]  ? aa_af_perm+0x330/0x330
[  810.354694][T16705]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  810.361284][T16705]  ? sock_rps_record_flow+0x19/0x3f0
[  810.366709][T16705]  ? inet_sendmsg+0x7e/0x2a0
[  810.371400][T16705]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  810.376801][T16705]  ? inet_send_prepare+0x250/0x250
[  810.382202][T16705]  ____sys_sendmsg+0x61b/0x980
[  810.387186][T16705]  ? __asan_memset+0x22/0x40
[  810.391968][T16705]  ? __sys_sendmsg_sock+0x30/0x30
[  810.397598][T16705]  ? __import_iovec+0x5f2/0x850
[  810.402583][T16705]  ? import_iovec+0x73/0xa0
[  810.407226][T16705]  ___sys_sendmsg+0x2a6/0x360
[  810.412027][T16705]  ? __sys_sendmsg+0x2b0/0x2b0
[  810.417179][T16705]  ? trace_call_bpf+0xc3/0x6c0
[  810.422127][T16705]  __se_sys_sendmsg+0x1d0/0x2c0
[  810.427051][T16705]  ? perf_trace_preemptirq_template+0x269/0x330
[  810.433392][T16705]  ? __x64_sys_sendmsg+0x80/0x80
[  810.438471][T16705]  ? lockdep_hardirqs_on+0x98/0x150
[  810.443758][T16705]  do_syscall_64+0x55/0xb0
[  810.448252][T16705]  ? clear_bhb_loop+0x40/0x90
[  810.452991][T16705]  ? clear_bhb_loop+0x40/0x90
[  810.457761][T16705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  810.463735][T16705] RIP: 0033:0x7f2c1fb9e159
[  810.468214][T16705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.487917][T16705] RSP: 002b:00007f2c20a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  810.496410][T16705] RAX: ffffffffffffffda RBX: 00007f2c1fe25fa0 RCX: 00007f2c1fb9e159
[  810.504449][T16705] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000006
[  810.512480][T16705] RBP: 00007f2c20a6a090 R08: 0000000000000000 R09: 0000000000000000
[  810.520506][T16705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  810.528560][T16705] R13: 00007f2c1fe26038 R14: 00007f2c1fe25fa0 R15: 00007fff2f7d0ae8
[  810.536669][T16705]  </TASK>
[  811.597991][T16723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3188'.
[  811.812458][T16727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3191'.
[  812.495029][T16746] netlink: 'syz.2.3198': attribute type 3 has an invalid length.
[  812.516955][T16746] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3198'.
[  813.549267][T16760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3202'.
[  814.079457][T16778] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3207'.
[  814.488204][T16793] netlink: 'syz.0.3212': attribute type 3 has an invalid length.
[  814.526650][T16793] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3212'.
[  815.276420][T16803] netlink: 'syz.3.3213': attribute type 9 has an invalid length.
[  815.316547][T16803] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3213'.
[  815.492126][T16801] netlink: 'syz.3.3213': attribute type 9 has an invalid length.
[  815.567471][T16801] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3213'.
[  815.999972][T16810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3215'.
[  818.688784][T16821] FAULT_INJECTION: forcing a failure.
[  818.688784][T16821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  818.721189][T16821] CPU: 1 PID: 16821 Comm: syz.1.3220 Not tainted syzkaller #0
[  818.728754][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  818.738870][T16821] Call Trace:
[  818.742195][T16821]  <TASK>
[  818.745171][T16821]  dump_stack_lvl+0x18c/0x250
[  818.749919][T16821]  ? show_regs_print_info+0x20/0x20
[  818.755182][T16821]  ? load_image+0x420/0x420
[  818.759773][T16821]  ? __might_fault+0xaa/0x120
[  818.764500][T16821]  ? __lock_acquire+0x7eb0/0x7eb0
[  818.769599][T16821]  should_fail_ex+0x394/0x4c0
[  818.774344][T16821]  _copy_from_iter+0x1cd/0x1290
[  818.779277][T16821]  ? rcu_is_watching+0x15/0xb0
[  818.784209][T16821]  ? copyout_mc+0x70/0x70
[  818.788615][T16821]  ? __virt_addr_valid+0x10c/0x380
[  818.793754][T16821]  ? __virt_addr_valid+0x10c/0x380
[  818.798930][T16821]  ? __virt_addr_valid+0x10c/0x380
[  818.804093][T16821]  ? __check_object_size+0x4fc/0xa40
[  818.809399][T16821]  netlink_sendmsg+0x76b/0xbf0
[  818.814193][T16821]  ? netlink_getsockopt+0x590/0x590
[  818.819428][T16821]  ? apparmor_socket_sendmsg+0x8e/0x330
[  818.825035][T16821]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  818.830384][T16821]  ? security_socket_sendmsg+0x80/0xa0
[  818.835898][T16821]  ? netlink_getsockopt+0x590/0x590
[  818.841166][T16821]  ____sys_sendmsg+0x61b/0x980
[  818.846001][T16821]  ? __asan_memset+0x22/0x40
[  818.850651][T16821]  ? __sys_sendmsg_sock+0x30/0x30
[  818.855728][T16821]  ? __import_iovec+0x5f2/0x850
[  818.860649][T16821]  ? import_iovec+0x73/0xa0
[  818.865211][T16821]  ___sys_sendmsg+0x2a6/0x360
[  818.869945][T16821]  ? get_pid_task+0x20/0x1e0
[  818.874683][T16821]  ? __sys_sendmsg+0x2b0/0x2b0
[  818.879529][T16821]  ? __lock_acquire+0x7eb0/0x7eb0
[  818.884664][T16821]  __se_sys_sendmsg+0x1d0/0x2c0
[  818.889606][T16821]  ? __x64_sys_sendmsg+0x80/0x80
[  818.894617][T16821]  ? lockdep_hardirqs_on+0x98/0x150
[  818.899874][T16821]  do_syscall_64+0x55/0xb0
[  818.904376][T16821]  ? clear_bhb_loop+0x40/0x90
[  818.909113][T16821]  ? clear_bhb_loop+0x40/0x90
[  818.913849][T16821]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  818.919804][T16821] RIP: 0033:0x7f13a9f9e159
[  818.924266][T16821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.943909][T16821] RSP: 002b:00007f13aadbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  818.952382][T16821] RAX: ffffffffffffffda RBX: 00007f13aa225fa0 RCX: 00007f13a9f9e159
[  818.960381][T16821] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005
[  818.968385][T16821] RBP: 00007f13aadbb090 R08: 0000000000000000 R09: 0000000000000000
[  818.976472][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  818.984479][T16821] R13: 00007f13aa226038 R14: 00007f13aa225fa0 R15: 00007ffd6903cf68
[  818.992496][T16821]  </TASK>
[  819.310643][T16833] netlink: 'syz.2.3224': attribute type 3 has an invalid length.
[  819.330246][T16834] tap0: tun_chr_ioctl cmd 1074025675
[  819.335666][T16834] tap0: persist enabled
[  819.337370][T16833] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3224'.
[  819.355423][T16834] tap0: tun_chr_ioctl cmd 1074025675
[  819.405041][T16834] tap0: persist enabled
[  820.324373][T16850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3228'.
[  820.972657][T16875] netlink: 'syz.2.3237': attribute type 3 has an invalid length.
[  820.996743][T16875] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3237'.
[  822.194566][T16889] netlink: 'syz.3.3241': attribute type 29 has an invalid length.
[  822.228475][T16889] netlink: 'syz.3.3241': attribute type 29 has an invalid length.
[  822.261577][T16889] netlink: 'syz.3.3241': attribute type 29 has an invalid length.
[  822.296798][T16889] netlink: 'syz.3.3241': attribute type 29 has an invalid length.
[  823.128238][T16895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3242'.
[  824.330522][T16902] FAULT_INJECTION: forcing a failure.
[  824.330522][T16902] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  824.371371][T16902] CPU: 1 PID: 16902 Comm: syz.0.3245 Not tainted syzkaller #0
[  824.378926][T16902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  824.389031][T16902] Call Trace:
[  824.392366][T16902]  <TASK>
[  824.395365][T16902]  dump_stack_lvl+0x18c/0x250
[  824.400107][T16902]  ? show_regs_print_info+0x20/0x20
[  824.405367][T16902]  ? load_image+0x420/0x420
[  824.409968][T16902]  ? __lock_acquire+0x7eb0/0x7eb0
[  824.415076][T16902]  should_fail_ex+0x394/0x4c0
[  824.419818][T16902]  _copy_from_user+0x2f/0xe0
[  824.424463][T16902]  __copy_msghdr+0x388/0x560
[  824.429111][T16902]  ___sys_sendmsg+0x214/0x360
[  824.433852][T16902]  ? get_pid_task+0x20/0x1e0
[  824.438511][T16902]  ? __sys_sendmsg+0x2b0/0x2b0
[  824.443351][T16902]  ? __lock_acquire+0x7eb0/0x7eb0
[  824.448457][T16902]  __se_sys_sendmsg+0x1d0/0x2c0
[  824.453374][T16902]  ? __x64_sys_sendmsg+0x80/0x80
[  824.458391][T16902]  ? lockdep_hardirqs_on+0x98/0x150
[  824.463733][T16902]  do_syscall_64+0x55/0xb0
[  824.468209][T16902]  ? clear_bhb_loop+0x40/0x90
[  824.472944][T16902]  ? clear_bhb_loop+0x40/0x90
[  824.477678][T16902]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  824.483645][T16902] RIP: 0033:0x7f2c1fb9e159
[  824.488106][T16902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.508117][T16902] RSP: 002b:00007f2c20a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.516598][T16902] RAX: ffffffffffffffda RBX: 00007f2c1fe25fa0 RCX: 00007f2c1fb9e159
[  824.524623][T16902] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000005
[  824.532649][T16902] RBP: 00007f2c20a6a090 R08: 0000000000000000 R09: 0000000000000000
[  824.540681][T16902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  824.548711][T16902] R13: 00007f2c1fe26038 R14: 00007f2c1fe25fa0 R15: 00007fff2f7d0ae8
[  824.556752][T16902]  </TASK>
[  825.470248][T16916] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3250'.
[  825.517725][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'.
[  825.641539][T16920] netlink: 'syz.2.3251': attribute type 3 has an invalid length.
[  825.735586][T16920] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3251'.
[  826.367127][T16934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3254'.
[  827.307493][T16951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3266'.
[  827.527645][T16955] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3260'.
[  827.562562][T16955] netlink: zone id is out of range
[  827.606796][T16955] netlink: zone id is out of range
[  827.644116][T16955] netlink: zone id is out of range
[  827.655347][T16955] netlink: zone id is out of range
[  827.672741][T16959] netlink: 'syz.3.3261': attribute type 10 has an invalid length.
[  827.777424][T16955] netlink: zone id is out of range
[  827.777455][T16955] netlink: zone id is out of range
[  827.777480][T16955] netlink: zone id is out of range
[  827.777505][T16955] netlink: zone id is out of range
[  827.777530][T16955] netlink: zone id is out of range
[  827.777555][T16955] netlink: zone id is out of range
[  828.052968][T16964] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3263'.
[  828.462263][T16969] netlink: 'syz.1.3265': attribute type 3 has an invalid length.
[  828.491500][T16969] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3265'.
[  829.301852][T16986] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3270'.
[  829.361102][T16988] netlink: 'syz.0.3271': attribute type 29 has an invalid length.
[  829.390966][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'.
[  829.436729][T16988] netlink: 'syz.0.3271': attribute type 29 has an invalid length.
[  829.445845][T16989] netlink: 'syz.0.3271': attribute type 29 has an invalid length.
[  829.898120][T17006] netlink: 'syz.3.3278': attribute type 29 has an invalid length.
[  829.921937][T17007] netlink: 'syz.3.3278': attribute type 29 has an invalid length.
[  829.937912][T17006] netlink: 'syz.3.3278': attribute type 29 has an invalid length.
[  830.057315][T17007] netlink: 'syz.3.3278': attribute type 21 has an invalid length.
[  830.294807][T17018] netlink: 'syz.1.3282': attribute type 3 has an invalid length.
[  831.647866][T17045] __nla_validate_parse: 6 callbacks suppressed
[  831.647888][T17045] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3289'.
[  832.351129][T17065] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3295'.
[  832.387739][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  832.427168][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  832.436166][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  832.447285][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  832.455731][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  832.464966][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  834.569899][   T51] Bluetooth: hci0: command tx timeout
[  834.702343][T17068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3293'.
[  834.909476][T17083] FAULT_INJECTION: forcing a failure.
[  834.909476][T17083] name failslab, interval 1, probability 0, space 0, times 0
[  834.936728][T17083] CPU: 1 PID: 17083 Comm: syz.1.3297 Not tainted syzkaller #0
[  834.944277][T17083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  834.954387][T17083] Call Trace:
[  834.957700][T17083]  <TASK>
[  834.960654][T17083]  dump_stack_lvl+0x18c/0x250
[  834.965379][T17083]  ? show_regs_print_info+0x20/0x20
[  834.970630][T17083]  ? load_image+0x420/0x420
[  834.975192][T17083]  ? __might_sleep+0xe0/0xe0
[  834.979836][T17083]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.984911][T17083]  should_fail_ex+0x394/0x4c0
[  834.989654][T17083]  should_failslab+0x9/0x20
[  834.994199][T17083]  slab_pre_alloc_hook+0x59/0x300
[  834.999273][T17083]  ? scm_fp_dup+0x57/0x350
[  835.003727][T17083]  ? scm_fp_dup+0x57/0x350
[  835.008179][T17083]  __kmem_cache_alloc_node+0x53/0x250
[  835.013599][T17083]  ? scm_fp_dup+0x57/0x350
[  835.018051][T17083]  __kmalloc_node_track_caller+0xa4/0x230
[  835.023814][T17083]  kmemdup+0x2b/0x70
[  835.027746][T17083]  scm_fp_dup+0x57/0x350
[  835.032024][T17083]  ? unix_scm_to_skb+0x291/0x460
[  835.037042][T17083]  unix_scm_to_skb+0x2b2/0x460
[  835.041867][T17083]  unix_stream_sendmsg+0x4af/0xbf0
[  835.047058][T17083]  ? unix_show_fdinfo+0x280/0x280
[  835.052127][T17083]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  835.058588][T17083]  ? apparmor_socket_sendmsg+0x8e/0x330
[  835.064165][T17083]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  835.069490][T17083]  ? security_socket_sendmsg+0x80/0xa0
[  835.074985][T17083]  ? unix_show_fdinfo+0x280/0x280
[  835.080049][T17083]  ____sys_sendmsg+0x61b/0x980
[  835.084868][T17083]  ? __sys_sendmsg_sock+0x30/0x30
[  835.089929][T17083]  ? __import_iovec+0x5f2/0x850
[  835.094821][T17083]  ? import_iovec+0x73/0xa0
[  835.099363][T17083]  ___sys_sendmsg+0x2a6/0x360
[  835.104078][T17083]  ? get_pid_task+0x20/0x1e0
[  835.108709][T17083]  ? __sys_sendmsg+0x2b0/0x2b0
[  835.113520][T17083]  ? __lock_acquire+0x7eb0/0x7eb0
[  835.118623][T17083]  __se_sys_sendmsg+0x1d0/0x2c0
[  835.123526][T17083]  ? perf_trace_preemptirq_template+0x269/0x330
[  835.129821][T17083]  ? __x64_sys_sendmsg+0x80/0x80
[  835.134818][T17083]  ? lockdep_hardirqs_on+0x98/0x150
[  835.140063][T17083]  do_syscall_64+0x55/0xb0
[  835.144520][T17083]  ? clear_bhb_loop+0x40/0x90
[  835.149265][T17083]  ? clear_bhb_loop+0x40/0x90
[  835.153972][T17083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  835.159904][T17083] RIP: 0033:0x7f13a9f9e159
[  835.164351][T17083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.184012][T17083] RSP: 002b:00007f13aadbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.192457][T17083] RAX: ffffffffffffffda RBX: 00007f13aa225fa0 RCX: 00007f13a9f9e159
[  835.200459][T17083] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000004
[  835.208458][T17083] RBP: 00007f13aadbb090 R08: 0000000000000000 R09: 0000000000000000
[  835.216454][T17083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  835.224473][T17083] R13: 00007f13aa226038 R14: 00007f13aa225fa0 R15: 00007ffd6903cf68
[  835.232492][T17083]  </TASK>
[  835.342995][T14617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.492770][T14617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.630489][T14617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.646674][   T51] Bluetooth: hci0: command tx timeout
[  837.004933][T14617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.228222][T17117] validate_nla: 10 callbacks suppressed
[  837.228267][T17117] netlink: 'syz.3.3305': attribute type 3 has an invalid length.
[  837.248373][T17117] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3305'.
[  838.724461][T17066] chnl_net:caif_netlink_parms(): no params data found
[  838.736813][   T51] Bluetooth: hci0: command tx timeout
[  838.989497][T17066] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.996988][T17066] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.004304][T17066] bridge_slave_0: entered allmulticast mode
[  839.012921][T17066] bridge_slave_0: entered promiscuous mode
[  839.062573][T17066] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.070806][T17066] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.081351][T17066] bridge_slave_1: entered allmulticast mode
[  839.089179][T17066] bridge_slave_1: entered promiscuous mode
[  839.173971][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.189217][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  839.292097][T17134] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3308'.
[  839.361622][T17066] team0: Port device team_slave_0 added
[  839.368434][T14617] tipc: Left network mode
[  839.388435][T17066] team0: Port device team_slave_1 added
[  839.429080][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  839.436101][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  839.486985][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.647997][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.655048][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  839.711569][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  840.038861][T17152] netlink: 'syz.1.3314': attribute type 3 has an invalid length.
[  840.047059][T17152] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3314'.
[  840.268530][T17066] hsr_slave_0: entered promiscuous mode
[  840.299350][T17066] hsr_slave_1: entered promiscuous mode
[  840.330355][T17066] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  840.361016][T17066] Cannot create hsr debugfs directory
[  840.807739][   T51] Bluetooth: hci0: command tx timeout
[  841.132281][T17165] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3315'.
[  841.218372][T17165] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3315'.
[  841.669716][T17180] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3318'.
[  841.701129][T17185] netlink: 'syz.0.3326': attribute type 21 has an invalid length.
[  841.736585][T17185] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.3326'.
[  841.962690][T17194] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3320'.
[  842.130350][T17195] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3320'.
[  842.332488][T14617] D: (slave wlan1): Releasing backup interface
[  842.460036][T17208] netlink: 'syz.0.3323': attribute type 3 has an invalid length.
[  842.492732][T17208] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3323'.
[  842.622151][T17066] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  842.837098][T17066] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  842.948901][T17066] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  843.177192][T14617] hsr_slave_0: left promiscuous mode
[  843.194216][T14617] hsr_slave_1: left promiscuous mode
[  843.217109][T14617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  843.224652][T14617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  843.368074][T14617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  843.375581][T14617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  843.420270][T14617] bridge_slave_1: left allmulticast mode
[  843.439817][T14617] bridge_slave_1: left promiscuous mode
[  843.445700][T14617] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.519225][T14617] bridge_slave_0: left allmulticast mode
[  843.524974][T14617] bridge_slave_0: left promiscuous mode
[  843.538521][T17221] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3324'.
[  843.567103][T14617] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.705447][T14617] veth1_macvtap: left promiscuous mode
[  843.713244][T14617] veth0_macvtap: left promiscuous mode
[  843.723968][T14617] veth1_vlan: left promiscuous mode
[  843.737276][T14617] »»»»»»: left promiscuous mode
[  845.020657][T14617] team0 (unregistering): Port device team_slave_1 removed
[  845.079702][T14617] team0 (unregistering): Port device C removed
[  845.140388][T14617] D (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.219288][T14617] D (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.268293][T14617] team0 (unregistering): Port device veth0_to_bond removed
[  845.750762][T14617] team0 (unregistering): Port device bridge0 removed
[  845.798806][T14617] D (unregistering): Released all slaves
[  845.908458][T17066] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  845.921995][T17221] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3324'.
[  845.973538][T17235] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3328'.
[  846.156020][T17240] netlink: 'syz.3.3331': attribute type 21 has an invalid length.
[  846.252515][T17066] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.295860][T17066] 8021q: adding VLAN 0 to HW filter on device team0
[  846.332107][T14645] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.339394][T14645] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.381251][T14622] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.388503][T14622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.555041][T17248] netlink: 'syz.0.3334': attribute type 3 has an invalid length.
[  846.609874][T17248] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3334'.
[  847.645254][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.910475][T17273] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3337'.
[  848.079788][T17273] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3337'.
[  848.350620][T17277] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3338'.
[  848.418120][T17279] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3339'.
[  848.475519][T17279] net_ratelimit: 11 callbacks suppressed
[  848.475539][T17279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  848.535656][T17066] veth0_vlan: entered promiscuous mode
[  848.588310][T17066] veth1_vlan: entered promiscuous mode
[  848.702329][T17066] veth0_macvtap: entered promiscuous mode
[  848.743829][T17066] veth1_macvtap: entered promiscuous mode
[  848.822836][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  848.864682][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  848.875467][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  848.893163][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  848.924227][T17066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  848.937162][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  848.956554][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  848.979968][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  849.002194][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  849.022376][T17292] netlink: 'syz.3.3343': attribute type 3 has an invalid length.
[  849.030936][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  849.042539][T17292] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3343'.
[  849.053488][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  849.074873][T17294] FAULT_INJECTION: forcing a failure.
[  849.074873][T17294] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  849.089714][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  849.202900][T17066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  849.243564][T17066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.276610][T17066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  849.298778][T17294] CPU: 1 PID: 17294 Comm: syz.0.3342 Not tainted syzkaller #0
[  849.306388][T17294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  849.316530][T17294] Call Trace:
[  849.319887][T17294]  <TASK>
[  849.322898][T17294]  dump_stack_lvl+0x18c/0x250
[  849.326911][T17066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  849.327752][T17294]  ? show_regs_print_info+0x20/0x20
[  849.341769][T17294]  ? load_image+0x420/0x420
[  849.346387][T17294]  ? __might_fault+0xaa/0x120
[  849.351158][T17294]  ? __lock_acquire+0x7eb0/0x7eb0
[  849.356299][T17294]  should_fail_ex+0x394/0x4c0
[  849.361178][T17294]  _copy_from_user+0x2f/0xe0
[  849.365895][T17294]  ___sys_sendmsg+0x1c7/0x360
[  849.370666][T17294]  ? get_pid_task+0x20/0x1e0
[  849.375368][T17294]  ? __sys_sendmsg+0x2b0/0x2b0
[  849.380314][T17294]  ? __lock_acquire+0x7eb0/0x7eb0
[  849.385525][T17294]  __se_sys_sendmsg+0x1d0/0x2c0
[  849.390484][T17294]  ? __x64_sys_sendmsg+0x80/0x80
[  849.395613][T17294]  ? lockdep_hardirqs_on+0x98/0x150
[  849.400918][T17294]  do_syscall_64+0x55/0xb0
[  849.405445][T17294]  ? clear_bhb_loop+0x40/0x90
[  849.410199][T17294]  ? clear_bhb_loop+0x40/0x90
[  849.414968][T17294]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  849.420972][T17294] RIP: 0033:0x7f2c1fb9e159
[  849.425475][T17294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.445170][T17294] RSP: 002b:00007f2c20a49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  849.453790][T17294] RAX: ffffffffffffffda RBX: 00007f2c1fe26090 RCX: 00007f2c1fb9e159
[  849.461878][T17294] RDX: 0000000020000000 RSI: 0000200000000300 RDI: 0000000000000003
[  849.469942][T17294] RBP: 00007f2c20a49090 R08: 0000000000000000 R09: 0000000000000000
[  849.477995][T17294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.486051][T17294] R13: 00007f2c1fe26128 R14: 00007f2c1fe26090 R15: 00007fff2f7d0ae8
[  849.494167][T17294]  </TASK>
[  850.065808][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.091689][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.342425][T17309] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3346'.
[  850.460014][T17309] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3346'.
[  850.538128][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.591012][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.844942][T17318] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3349'.
[  850.956818][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'.
[  851.267527][T17313] delete_channel: no stack
[  852.072063][T17342] netlink: 'syz.0.3353': attribute type 3 has an invalid length.
[  852.113162][T17342] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3353'.
[  854.583799][T17376] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3356'.
[  856.066764][T17376] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3356'.
[  856.868569][T17391] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3358'.
[  859.466690][T17381] netlink: 'syz.2.3358': attribute type 10 has an invalid length.
[  859.506571][T17381] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3358'.
[  860.030865][T17404] netlink: 'syz.1.3364': attribute type 3 has an invalid length.
[  860.079804][T17404] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3364'.
[  861.251787][T17423] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3368'.
[  861.276943][T17423] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3368'.
[  861.503494][T17428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3370'.
[  861.540305][T17428] ipvlan0: entered promiscuous mode
[  861.609074][T17433] netlink: 'syz.1.3371': attribute type 2 has an invalid length.
[  861.626318][T17433] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3371'.
[  861.853755][T17442] netlink: 'syz.3.3373': attribute type 21 has an invalid length.
[  861.884404][T17442] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3373'.
[  862.464595][T17453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3377'.
[  862.579325][T17455] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3379'.
[  862.596960][T17455] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3379'.
[  862.623710][T17455] tipc: Started in network mode
[  862.638658][T17455] tipc: Node identity b, cluster identity 73
[  862.666044][T17455] tipc: Node number set to 11
[  863.364267][T17475] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3383'.
[  864.090166][T17488] netlink: 'syz.2.3387': attribute type 3 has an invalid length.
[  865.549077][T17509] __nla_validate_parse: 2 callbacks suppressed
[  865.549100][T17509] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3393'.
[  865.549955][T17506] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3392'.
[  865.605839][T17506] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3392'.
[  865.787061][T17512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3391'.
[  865.971021][T17517] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3394'.
[  866.007775][T17518] netlink: 'syz.0.3394': attribute type 39 has an invalid length.
[  866.643283][T17526] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3397'.
[  866.799145][T17528] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3398'.
[  866.980879][T17527] delete_channel: no stack
[  867.188296][T17537] netlink: 'syz.1.3401': attribute type 3 has an invalid length.
[  867.216910][T17537] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3401'.
[  868.935735][T17553] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3404'.
[  868.975126][T17553] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3404'.
[  869.782834][T17567] netlink: 'syz.0.3407': attribute type 3 has an invalid length.
[  870.332006][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  870.340687][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  870.972068][T17583] __nla_validate_parse: 4 callbacks suppressed
[  870.972094][T17583] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3417'.
[  871.002899][T17583] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3417'.
[  871.047812][T17585] netlink: 'syz.3.3418': attribute type 3 has an invalid length.
[  871.055668][T17585] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3418'.
[  871.771435][T17598] FAULT_INJECTION: forcing a failure.
[  871.771435][T17598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  871.823997][T17598] CPU: 1 PID: 17598 Comm: syz.2.3419 Not tainted syzkaller #0
[  871.831564][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  871.841681][T17598] Call Trace:
[  871.845040][T17598]  <TASK>
[  871.848023][T17598]  dump_stack_lvl+0x18c/0x250
[  871.852859][T17598]  ? show_regs_print_info+0x20/0x20
[  871.858129][T17598]  ? load_image+0x420/0x420
[  871.862740][T17598]  ? __might_fault+0xaa/0x120
[  871.867486][T17598]  ? __lock_acquire+0x7eb0/0x7eb0
[  871.872576][T17598]  should_fail_ex+0x394/0x4c0
[  871.877318][T17598]  _copy_from_user+0x2f/0xe0
[  871.881980][T17598]  mptcp_setsockopt+0x1794/0x3370
[  871.887155][T17598]  ? __fget_files+0x28/0x460
[  871.891811][T17598]  ? pm_nl_exit_net+0x230/0x230
[  871.896725][T17598]  ? aa_af_perm+0x330/0x330
[  871.901297][T17598]  ? __fget_files+0x28/0x460
[  871.905947][T17598]  ? aa_sock_opt_perm+0x74/0x100
[  871.910982][T17598]  ? sock_common_setsockopt+0x36/0xc0
[  871.916416][T17598]  ? sock_common_recvmsg+0x190/0x190
[  871.921797][T17598]  do_sock_setsockopt+0x175/0x1a0
[  871.926895][T17598]  ? __fdget+0x180/0x210
[  871.931210][T17598]  __x64_sys_setsockopt+0x182/0x200
[  871.936482][T17598]  do_syscall_64+0x55/0xb0
[  871.940965][T17598]  ? clear_bhb_loop+0x40/0x90
[  871.945693][T17598]  ? clear_bhb_loop+0x40/0x90
[  871.950432][T17598]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  871.956398][T17598] RIP: 0033:0x7f183a59e159
[  871.960866][T17598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  871.980535][T17598] RSP: 002b:00007f18387f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  871.989017][T17598] RAX: ffffffffffffffda RBX: 00007f183a825fa0 RCX: 00007f183a59e159
[  871.997051][T17598] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 0000000000000004
[  872.005082][T17598] RBP: 00007f18387f6090 R08: 0000000000000004 R09: 0000000000000000
[  872.013116][T17598] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  872.021148][T17598] R13: 00007f183a826038 R14: 00007f183a825fa0 R15: 00007ffdb94ad928
[  872.029203][T17598]  </TASK>
[  872.480088][T17605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3421'.
[  872.707318][T17611] netlink: 'syz.0.3424': attribute type 3 has an invalid length.
[  872.715479][T17611] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3424'.
[  872.892298][T17614] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.3426'.
[  873.631347][T17622] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3428'.
[  873.641705][T17622] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.3428'.
[  873.869638][T17632] netlink: 'syz.1.3430': attribute type 3 has an invalid length.
[  873.908910][T17632] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3430'.
[  874.333056][T17639] sock: sock_set_timeout: `syz.2.3432' (pid 17639) tries to set negative timeout
[  874.681929][T17648] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3434'.
[  875.369607][T17666] netlink: 'syz.0.3439': attribute type 10 has an invalid length.
[  876.042143][T17665] __nla_validate_parse: 5 callbacks suppressed
[  876.042163][T17665] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3439'.
[  876.957943][T17684] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3445'.
[  877.005811][T17688] netlink: 'syz.2.3444': attribute type 3 has an invalid length.
[  877.026591][T17688] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3444'.
[  878.517658][T17684] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3445'.
[  878.901737][T17697] netlink: 'syz.2.3446': attribute type 3 has an invalid length.
[  878.956657][T17697] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3446'.
[  880.564357][T17719] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3452'.
[  880.617265][T17719] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3452'.
[  880.962204][T17725] netlink: 'syz.1.3455': attribute type 3 has an invalid length.
[  880.976547][T17725] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3455'.
[  881.868932][T17741] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3461'.
[  881.889961][T17741] netlink: 'syz.2.3461': attribute type 1 has an invalid length.
[  881.906554][T17741] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.3461'.
[  882.713394][T17754] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3466'.
[  882.724422][T17754] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3466'.
[  883.110515][T17769] netlink: 'syz.3.3472': attribute type 3 has an invalid length.
[  883.140226][T17769] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3472'.
[  884.449828][T17789] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3479'.
[  884.470426][T17789] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3479'.
[  884.693736][T17792] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3481'.
[  885.290313][T17811] netlink: 'syz.2.3488': attribute type 3 has an invalid length.
[  885.313015][T17811] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3488'.
[  885.407695][T17813] FAULT_INJECTION: forcing a failure.
[  885.407695][T17813] name failslab, interval 1, probability 0, space 0, times 0
[  885.456875][T17813] CPU: 1 PID: 17813 Comm: syz.3.3487 Not tainted syzkaller #0
[  885.464524][T17813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  885.474734][T17813] Call Trace:
[  885.478066][T17813]  <TASK>
[  885.481084][T17813]  dump_stack_lvl+0x18c/0x250
[  885.485837][T17813]  ? show_regs_print_info+0x20/0x20
[  885.491108][T17813]  ? load_image+0x420/0x420
[  885.495705][T17813]  ? __might_sleep+0xe0/0xe0
[  885.500361][T17813]  ? __lock_acquire+0x7eb0/0x7eb0
[  885.505453][T17813]  should_fail_ex+0x394/0x4c0
[  885.510201][T17813]  should_failslab+0x9/0x20
[  885.514768][T17813]  slab_pre_alloc_hook+0x59/0x300
[  885.519859][T17813]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  885.525634][T17813]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  885.531438][T17813]  __kmem_cache_alloc_node+0x53/0x250
[  885.536870][T17813]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  885.542626][T17813]  __kmalloc+0xa7/0x240
[  885.546833][T17813]  tomoyo_realpath_from_path+0xe6/0x5c0
[  885.552417][T17813]  ? tomoyo_domain+0xd6/0x120
[  885.557133][T17813]  tomoyo_path_number_perm+0x248/0x5e0
[  885.562636][T17813]  ? tomoyo_path_number_perm+0x217/0x5e0
[  885.568312][T17813]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  885.573812][T17813]  ? ksys_write+0x1d2/0x260
[  885.578375][T17813]  ? __fget_files+0x28/0x460
[  885.583011][T17813]  security_file_ioctl+0x70/0xa0
[  885.587988][T17813]  __se_sys_ioctl+0x48/0x170
[  885.592650][T17813]  do_syscall_64+0x55/0xb0
[  885.597115][T17813]  ? clear_bhb_loop+0x40/0x90
[  885.601854][T17813]  ? clear_bhb_loop+0x40/0x90
[  885.606576][T17813]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  885.612547][T17813] RIP: 0033:0x7ffa8499e159
[  885.617005][T17813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.636763][T17813] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  885.645218][T17813] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  885.653220][T17813] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000004
[  885.661244][T17813] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  885.669259][T17813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.677266][T17813] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  885.685280][T17813]  </TASK>
[  885.726756][T17813] ERROR: Out of memory at tomoyo_realpath_from_path.
[  885.843152][T17823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3491'.
[  886.590541][T17835] FAULT_INJECTION: forcing a failure.
[  886.590541][T17835] name failslab, interval 1, probability 0, space 0, times 0
[  886.711699][T17835] CPU: 1 PID: 17835 Comm: syz.3.3494 Not tainted syzkaller #0
[  886.719257][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  886.729369][T17835] Call Trace:
[  886.732722][T17835]  <TASK>
[  886.735701][T17835]  dump_stack_lvl+0x18c/0x250
[  886.740445][T17835]  ? show_regs_print_info+0x20/0x20
[  886.745701][T17835]  ? load_image+0x420/0x420
[  886.750280][T17835]  ? __might_sleep+0xe0/0xe0
[  886.754951][T17835]  ? __lock_acquire+0x7eb0/0x7eb0
[  886.760038][T17835]  should_fail_ex+0x394/0x4c0
[  886.764783][T17835]  should_failslab+0x9/0x20
[  886.769345][T17835]  slab_pre_alloc_hook+0x59/0x300
[  886.774436][T17835]  ? kvmalloc_node+0x70/0x180
[  886.779173][T17835]  ? kvmalloc_node+0x70/0x180
[  886.783887][T17835]  __kmem_cache_alloc_node+0x53/0x250
[  886.789310][T17835]  ? kvmalloc_node+0x70/0x180
[  886.794021][T17835]  __kmalloc_node+0xa6/0x240
[  886.798651][T17835]  kvmalloc_node+0x70/0x180
[  886.803195][T17835]  unix_prepare_fpl+0x26d/0x480
[  886.808090][T17835]  unix_scm_to_skb+0x2e1/0x460
[  886.812888][T17835]  queue_oob+0x117/0x540
[  886.817171][T17835]  ? scm_stat_add+0xc0/0xc0
[  886.821722][T17835]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10
[  886.827829][T17835]  ? security_socket_getpeersec_dgram+0x83/0xa0
[  886.834124][T17835]  unix_stream_sendmsg+0xaf3/0xbf0
[  886.839277][T17835]  ? aa_af_perm+0x330/0x330
[  886.843822][T17835]  ? __might_fault+0xaa/0x120
[  886.848531][T17835]  ? unix_show_fdinfo+0x280/0x280
[  886.853593][T17835]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  886.860037][T17835]  ? apparmor_socket_sendmsg+0x8e/0x330
[  886.865610][T17835]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  886.871018][T17835]  ? security_socket_sendmsg+0x80/0xa0
[  886.876518][T17835]  ? unix_show_fdinfo+0x280/0x280
[  886.881585][T17835]  ____sys_sendmsg+0x61b/0x980
[  886.886391][T17835]  ? __sys_sendmsg_sock+0x30/0x30
[  886.891454][T17835]  ? __import_iovec+0x5f2/0x850
[  886.896347][T17835]  ? import_iovec+0x73/0xa0
[  886.900898][T17835]  ___sys_sendmsg+0x2a6/0x360
[  886.905611][T17835]  ? get_pid_task+0x20/0x1e0
[  886.910243][T17835]  ? __sys_sendmsg+0x2b0/0x2b0
[  886.915060][T17835]  ? __lock_acquire+0x7eb0/0x7eb0
[  886.920137][T17835]  __se_sys_sendmsg+0x1d0/0x2c0
[  886.925032][T17835]  ? __x64_sys_sendmsg+0x80/0x80
[  886.930019][T17835]  ? lockdep_hardirqs_on+0x98/0x150
[  886.935282][T17835]  do_syscall_64+0x55/0xb0
[  886.939765][T17835]  ? clear_bhb_loop+0x40/0x90
[  886.944468][T17835]  ? clear_bhb_loop+0x40/0x90
[  886.949177][T17835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  886.955191][T17835] RIP: 0033:0x7ffa8499e159
[  886.959663][T17835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  886.979339][T17835] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  886.987789][T17835] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  886.995793][T17835] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000003
[  887.003794][T17835] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  887.011796][T17835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  887.019795][T17835] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  887.027823][T17835]  </TASK>
[  887.503729][T17855] netlink: 'syz.1.3505': attribute type 21 has an invalid length.
[  887.524688][T17855] netlink: 'syz.1.3505': attribute type 11 has an invalid length.
[  888.120001][T17853] __nla_validate_parse: 4 callbacks suppressed
[  888.120026][T17853] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3504'.
[  888.320883][T17853] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3504'.
[  888.843607][T17875] netlink: 'syz.1.3513': attribute type 10 has an invalid length.
[  888.954191][T17875] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.996323][T17875] bridge_slave_1: left allmulticast mode
[  889.027344][T17875] bridge_slave_1: left promiscuous mode
[  889.040677][T17875] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.523629][T17875] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  890.784397][T17907] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3518'.
[  890.897244][T17907] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3518'.
[  892.235137][T17930] netlink: 'syz.1.3527': attribute type 3 has an invalid length.
[  892.260284][T17930] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3527'.
[  895.554925][T17944] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3528'.
[  895.569454][T17944] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3528'.
[  895.944672][T17957] netlink: 'syz.2.3536': attribute type 12 has an invalid length.
[  895.975894][T17957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3536'.
[  896.176509][T17957] netlink: 'syz.2.3536': attribute type 1 has an invalid length.
[  896.209485][T17957] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3536'.
[  899.200420][T17968] netlink: 'syz.0.3539': attribute type 3 has an invalid length.
[  899.236528][T17968] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3539'.
[  900.024024][T17976] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3542'.
[  900.034906][T17976] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3542'.
[  901.449968][T18008] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3551'.
[  901.486957][T18008] netlink: 'syz.1.3551': attribute type 4 has an invalid length.
[  901.516356][T18008] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3551'.
[  901.999659][T18015] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3553'.
[  904.273127][T18015] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3553'.
[  904.957852][T18033] netlink: 176484 bytes leftover after parsing attributes in process `syz.0.3560'.
[  905.460940][T18037] netlink: 'syz.3.3563': attribute type 21 has an invalid length.
[  905.478080][T18037] netlink: 'syz.3.3563': attribute type 3 has an invalid length.
[  905.495655][T18037] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3563'.
[  908.553931][T18041] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3564'.
[  908.582127][T18041] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3564'.
[  908.850366][T18053] FAULT_INJECTION: forcing a failure.
[  908.850366][T18053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  908.863771][T18053] CPU: 1 PID: 18053 Comm: syz.3.3569 Not tainted syzkaller #0
[  908.871389][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  908.881500][T18053] Call Trace:
[  908.884823][T18053]  <TASK>
[  908.887836][T18053]  dump_stack_lvl+0x18c/0x250
[  908.892612][T18053]  ? show_regs_print_info+0x20/0x20
[  908.897876][T18053]  ? load_image+0x420/0x420
[  908.902444][T18053]  ? __lock_acquire+0x7eb0/0x7eb0
[  908.907564][T18053]  should_fail_ex+0x394/0x4c0
[  908.912311][T18053]  _copy_from_user+0x2f/0xe0
[  908.916985][T18053]  __copy_msghdr+0x388/0x560
[  908.921640][T18053]  ___sys_sendmsg+0x214/0x360
[  908.926378][T18053]  ? get_pid_task+0x20/0x1e0
[  908.931034][T18053]  ? __sys_sendmsg+0x2b0/0x2b0
[  908.935879][T18053]  ? __lock_acquire+0x7eb0/0x7eb0
[  908.940983][T18053]  __se_sys_sendmsg+0x1d0/0x2c0
[  908.945892][T18053]  ? __x64_sys_sendmsg+0x80/0x80
[  908.950912][T18053]  ? lockdep_hardirqs_on+0x98/0x150
[  908.956171][T18053]  do_syscall_64+0x55/0xb0
[  908.960745][T18053]  ? clear_bhb_loop+0x40/0x90
[  908.965480][T18053]  ? clear_bhb_loop+0x40/0x90
[  908.970215][T18053]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  908.976162][T18053] RIP: 0033:0x7ffa8499e159
[  908.980708][T18053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  909.000439][T18053] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.008891][T18053] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  909.016895][T18053] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000005
[  909.024900][T18053] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  909.032905][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  909.040929][T18053] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  909.048945][T18053]  </TASK>
[  909.130384][T18055] netlink: 'syz.1.3570': attribute type 1 has an invalid length.
[  909.156740][T18055] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3570'.
[  909.657384][T18067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3576'.
[  909.734949][T18067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  909.760301][T18071] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3577'.
[  909.825695][T18071] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3577'.
[  911.441556][T18103] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3587'.
[  911.622565][T18103] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3587'.
[  913.628825][T18151] FAULT_INJECTION: forcing a failure.
[  913.628825][T18151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  913.656559][T18151] CPU: 1 PID: 18151 Comm: syz.1.3602 Not tainted syzkaller #0
[  913.664144][T18151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  913.674317][T18151] Call Trace:
[  913.677716][T18151]  <TASK>
[  913.680721][T18151]  dump_stack_lvl+0x18c/0x250
[  913.685506][T18151]  ? show_regs_print_info+0x20/0x20
[  913.690802][T18151]  ? load_image+0x420/0x420
[  913.695427][T18151]  ? __might_fault+0xaa/0x120
[  913.700205][T18151]  ? __lock_acquire+0x7eb0/0x7eb0
[  913.705346][T18151]  should_fail_ex+0x394/0x4c0
[  913.710152][T18151]  strncpy_from_user+0x36/0x2f0
[  913.715151][T18151]  getname_flags+0xf6/0x500
[  913.719781][T18151]  do_sys_openat2+0xda/0x1d0
[  913.724484][T18151]  ? do_sys_open+0xe0/0xe0
[  913.728983][T18151]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  913.735028][T18151]  ? lock_chain_count+0x20/0x20
[  913.739960][T18151]  __x64_sys_openat+0x139/0x160
[  913.744895][T18151]  do_syscall_64+0x55/0xb0
[  913.749374][T18151]  ? clear_bhb_loop+0x40/0x90
[  913.754140][T18151]  ? clear_bhb_loop+0x40/0x90
[  913.758909][T18151]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  913.764902][T18151] RIP: 0033:0x7f13a9f9e159
[  913.769381][T18151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  913.789072][T18151] RSP: 002b:00007f13aadbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  913.797551][T18151] RAX: ffffffffffffffda RBX: 00007f13aa225fa0 RCX: 00007f13a9f9e159
[  913.805582][T18151] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  913.813639][T18151] RBP: 00007f13aadbb090 R08: 0000000000000000 R09: 0000000000000000
[  913.821688][T18151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  913.829714][T18151] R13: 00007f13aa226038 R14: 00007f13aa225fa0 R15: 00007ffd6903cf68
[  913.837778][T18151]  </TASK>
[  914.328447][T18154] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3603'.
[  914.567139][T18154] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3603'.
[  916.067580][T18187] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3612'.
[  916.548340][T18193] FAULT_INJECTION: forcing a failure.
[  916.548340][T18193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  916.616147][T18193] CPU: 0 PID: 18193 Comm: syz.1.3615 Not tainted syzkaller #0
[  916.623699][T18193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  916.633814][T18193] Call Trace:
[  916.637140][T18193]  <TASK>
[  916.640114][T18193]  dump_stack_lvl+0x18c/0x250
[  916.644874][T18193]  ? show_regs_print_info+0x20/0x20
[  916.650151][T18193]  ? load_image+0x420/0x420
[  916.654723][T18193]  ? __lock_acquire+0x7eb0/0x7eb0
[  916.659808][T18193]  ? snprintf+0xe9/0x140
[  916.664124][T18193]  should_fail_ex+0x394/0x4c0
[  916.668891][T18193]  _copy_to_user+0x2f/0xa0
[  916.673374][T18193]  simple_read_from_buffer+0xe7/0x150
[  916.678804][T18193]  proc_fail_nth_read+0x1e8/0x260
[  916.683903][T18193]  ? proc_fault_inject_write+0x360/0x360
[  916.689604][T18193]  ? fsnotify_perm+0x271/0x5e0
[  916.694430][T18193]  ? proc_fault_inject_write+0x360/0x360
[  916.700159][T18193]  vfs_read+0x298/0x990
[  916.704374][T18193]  ? kernel_read+0x1e0/0x1e0
[  916.709046][T18193]  ? __fget_files+0x28/0x460
[  916.713675][T18193]  ? __fget_files+0x3fc/0x460
[  916.718400][T18193]  ? __fdget_pos+0x2a3/0x330
[  916.723033][T18193]  ? ksys_read+0x74/0x260
[  916.727406][T18193]  ksys_read+0x151/0x260
[  916.731691][T18193]  ? vfs_write+0x9a0/0x9a0
[  916.736153][T18193]  ? lockdep_hardirqs_on+0x98/0x150
[  916.741390][T18193]  do_syscall_64+0x55/0xb0
[  916.745843][T18193]  ? clear_bhb_loop+0x40/0x90
[  916.750551][T18193]  ? clear_bhb_loop+0x40/0x90
[  916.755257][T18193]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  916.761193][T18193] RIP: 0033:0x7f13a9f5e98e
[  916.765634][T18193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  916.785292][T18193] RSP: 002b:00007f13aadbafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  916.793782][T18193] RAX: ffffffffffffffda RBX: 00007f13aadbb6c0 RCX: 00007f13a9f5e98e
[  916.801790][T18193] RDX: 000000000000000f RSI: 00007f13aadbb0a0 RDI: 0000000000000003
[  916.809791][T18193] RBP: 00007f13aadbb090 R08: 0000000000000000 R09: 0000000000000000
[  916.817795][T18193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.825791][T18193] R13: 00007f13aa226038 R14: 00007f13aa225fa0 R15: 00007ffd6903cf68
[  916.833805][T18193]  </TASK>
[  917.573739][T18200] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3617'.
[  917.680573][T18200] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3617'.
[  917.816880][T18204] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3619'.
[  918.599842][T18210] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3621'.
[  918.707076][T18210] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.3621'.
[  919.378901][T18226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3625'.
[  919.474609][T18226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3625'.
[  919.508276][T18223] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3625'.
[  919.668369][T18224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3625'.
[  919.739862][T18225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3625'.
[  920.198210][T18235] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3627'.
[  920.939009][T18244] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3629'.
[  921.030889][T18244] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3629'.
[  921.382298][T18250] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3632'.
[  921.516355][T18250] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.3632'.
[  921.549797][T18249] nr0: port 1(hsr0) entered blocking state
[  921.556595][T18249] nr0: port 1(hsr0) entered forwarding state
[  923.092344][T18265] netlink: 'syz.0.3647': attribute type 3 has an invalid length.
[  924.383371][T18283] nr0: port 1(hsr0) entered blocking state
[  924.389602][T18283] nr0: port 1(hsr0) entered disabled state
[  924.395821][T18283] hsr0: entered allmulticast mode
[  924.415524][T18283] hsr_slave_0: entered allmulticast mode
[  924.434515][T18283] hsr_slave_1: entered allmulticast mode
[  924.478103][T18283] hsr0: entered promiscuous mode
[  924.535755][T18282] nr0: port 1(hsr0) entered blocking state
[  924.542545][T18282] nr0: port 1(hsr0) entered forwarding state
[  924.586048][T18286] __nla_validate_parse: 3 callbacks suppressed
[  924.586072][T18286] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3643'.
[  924.661122][T18286] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.3643'.
[  927.370112][T18319] netlink: 'syz.3.3653': attribute type 3 has an invalid length.
[  927.398860][T18319] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3653'.
[  928.054176][T18326] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3654'.
[  928.075142][T18326] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3654'.
[  928.330741][T18328] FAULT_INJECTION: forcing a failure.
[  928.330741][T18328] name failslab, interval 1, probability 0, space 0, times 0
[  928.355247][T18328] CPU: 1 PID: 18328 Comm: syz.0.3655 Not tainted syzkaller #0
[  928.362832][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  928.372981][T18328] Call Trace:
[  928.376383][T18328]  <TASK>
[  928.379407][T18328]  dump_stack_lvl+0x18c/0x250
[  928.384176][T18328]  ? show_regs_print_info+0x20/0x20
[  928.389459][T18328]  ? load_image+0x420/0x420
[  928.394056][T18328]  ? __might_sleep+0xe0/0xe0
[  928.398737][T18328]  ? __lock_acquire+0x7eb0/0x7eb0
[  928.403870][T18328]  should_fail_ex+0x394/0x4c0
[  928.408655][T18328]  should_failslab+0x9/0x20
[  928.413271][T18328]  slab_pre_alloc_hook+0x59/0x300
[  928.418397][T18328]  ? lockdep_hardirqs_on+0x98/0x150
[  928.423690][T18328]  kmem_cache_alloc_node+0x5e/0x310
[  928.429026][T18328]  ? __alloc_skb+0x103/0x2c0
[  928.433727][T18328]  __alloc_skb+0x103/0x2c0
[  928.438248][T18328]  netlink_sendmsg+0x66a/0xbf0
[  928.443116][T18328]  ? netlink_getsockopt+0x590/0x590
[  928.448401][T18328]  ? apparmor_socket_sendmsg+0x8e/0x330
[  928.454042][T18328]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  928.459415][T18328]  ? security_socket_sendmsg+0x80/0xa0
[  928.465032][T18328]  ? netlink_getsockopt+0x590/0x590
[  928.470383][T18328]  ____sys_sendmsg+0x61b/0x980
[  928.475245][T18328]  ? __asan_memset+0x22/0x40
[  928.479890][T18328]  ? __sys_sendmsg_sock+0x30/0x30
[  928.484964][T18328]  ? __import_iovec+0x5f2/0x850
[  928.489901][T18328]  ? import_iovec+0x73/0xa0
[  928.494490][T18328]  ___sys_sendmsg+0x2a6/0x360
[  928.499242][T18328]  ? __sys_sendmsg+0x2b0/0x2b0
[  928.504102][T18328]  ? ktime_get+0x7f/0x280
[  928.508544][T18328]  __se_sys_sendmsg+0x1d0/0x2c0
[  928.513454][T18328]  ? perf_trace_preemptirq_template+0x269/0x330
[  928.519753][T18328]  ? __x64_sys_sendmsg+0x80/0x80
[  928.524813][T18328]  ? lockdep_hardirqs_on+0x98/0x150
[  928.530099][T18328]  do_syscall_64+0x55/0xb0
[  928.534566][T18328]  ? clear_bhb_loop+0x40/0x90
[  928.539283][T18328]  ? clear_bhb_loop+0x40/0x90
[  928.544028][T18328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  928.549982][T18328] RIP: 0033:0x7f2c1fb9e159
[  928.554454][T18328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  928.574128][T18328] RSP: 002b:00007f2c20a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  928.582596][T18328] RAX: ffffffffffffffda RBX: 00007f2c1fe25fa0 RCX: 00007f2c1fb9e159
[  928.590612][T18328] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  928.598631][T18328] RBP: 00007f2c20a6a090 R08: 0000000000000000 R09: 0000000000000000
[  928.606767][T18328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  928.614889][T18328] R13: 00007f2c1fe26038 R14: 00007f2c1fe25fa0 R15: 00007fff2f7d0ae8
[  928.622964][T18328]  </TASK>
[  929.131177][T18334] nr0: port 1(hsr0) entered blocking state
[  929.148777][T18334] nr0: port 1(hsr0) entered disabled state
[  929.154850][T18334] hsr0: entered allmulticast mode
[  929.264382][T18334] hsr_slave_0: entered allmulticast mode
[  929.286669][T18334] hsr_slave_1: entered allmulticast mode
[  929.315367][T18334] hsr0: entered promiscuous mode
[  929.367446][T18336] nr0: port 1(hsr0) entered blocking state
[  929.373485][T18336] nr0: port 1(hsr0) entered forwarding state
[  929.495844][T18341] netlink: 'syz.3.3660': attribute type 10 has an invalid length.
[  929.522683][T18341] syz_tun: entered promiscuous mode
[  929.963687][T18352] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3664'.
[  929.983051][T18352] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3664'.
[  930.222822][T18358] netlink: 'syz.1.3666': attribute type 3 has an invalid length.
[  930.302498][T18358] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3666'.
[  931.779250][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  931.786919][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  932.481719][T18396] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3677'.
[  932.497140][T18396] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3677'.
[  932.889713][T18405] netlink: 'syz.2.3680': attribute type 10 has an invalid length.
[  932.898781][T18405] syz_tun: entered promiscuous mode
[  932.982320][T18405] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  933.650506][T18429] FAULT_INJECTION: forcing a failure.
[  933.650506][T18429] name failslab, interval 1, probability 0, space 0, times 0
[  933.707104][T18429] CPU: 1 PID: 18429 Comm: syz.2.3689 Not tainted syzkaller #0
[  933.714670][T18429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  933.724800][T18429] Call Trace:
[  933.724955][T18427] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3688'.
[  933.728113][T18429]  <TASK>
[  933.728128][T18429]  dump_stack_lvl+0x18c/0x250
[  933.728178][T18429]  ? show_regs_print_info+0x20/0x20
[  933.728220][T18429]  ? load_image+0x420/0x420
[  933.728264][T18429]  ? __lock_acquire+0x7eb0/0x7eb0
[  933.728313][T18429]  should_fail_ex+0x394/0x4c0
[  933.728371][T18429]  should_failslab+0x9/0x20
[  933.728407][T18429]  slab_pre_alloc_hook+0x59/0x300
[  933.728452][T18429]  ? security_sk_alloc+0x4b/0x130
[  933.728484][T18429]  ? security_sk_alloc+0x4b/0x130
[  933.728513][T18429]  __kmem_cache_alloc_node+0x53/0x250
[  933.790736][T18429]  ? security_sk_alloc+0x4b/0x130
[  933.796027][T18429]  __kmalloc+0xa7/0x240
[  933.800274][T18429]  ? sk_prot_alloc+0xe7/0x210
[  933.805033][T18429]  security_sk_alloc+0x4b/0x130
[  933.809974][T18429]  sk_prot_alloc+0x101/0x210
[  933.814646][T18429]  ? sk_alloc+0x24/0x350
[  933.818970][T18429]  sk_alloc+0x3a/0x350
[  933.823109][T18429]  ? bpf_ctx_init+0x154/0x190
[  933.827939][T18429]  bpf_prog_test_run_skb+0x371/0x18f0
[  933.833403][T18429]  ? __fget_files+0x28/0x460
[  933.838100][T18429]  ? __fget_files+0x3fc/0x460
[  933.842890][T18429]  ? cpu_online+0x60/0x60
[  933.847323][T18429]  bpf_prog_test_run+0x31f/0x390
[  933.852347][T18429]  __sys_bpf+0x49d/0x890
[  933.856670][T18429]  ? bpf_link_show_fdinfo+0x560/0x560
[  933.862167][T18429]  ? lock_chain_count+0x20/0x20
[  933.867123][T18429]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  933.873202][T18429]  __x64_sys_bpf+0x7c/0x90
[  933.877702][T18429]  do_syscall_64+0x55/0xb0
[  933.882195][T18429]  ? clear_bhb_loop+0x40/0x90
[  933.886943][T18429]  ? clear_bhb_loop+0x40/0x90
[  933.891695][T18429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  933.897680][T18429] RIP: 0033:0x7f183a59e159
[  933.902172][T18429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  933.921943][T18429] RSP: 002b:00007f18387f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  933.930539][T18429] RAX: ffffffffffffffda RBX: 00007f183a825fa0 RCX: 00007f183a59e159
[  933.938724][T18429] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  933.946765][T18429] RBP: 00007f18387f6090 R08: 0000000000000000 R09: 0000000000000000
[  933.954812][T18429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  933.962856][T18429] R13: 00007f183a826038 R14: 00007f183a825fa0 R15: 00007ffdb94ad928
[  933.970942][T18429]  </TASK>
[  934.059120][T18427] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3688'.
[  934.296245][T18436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3692'.
[  937.400455][T18480] netlink: 'syz.3.3707': attribute type 10 has an invalid length.
[  937.611699][T18483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3705'.
[  938.003902][T18489] netlink: 'syz.1.3711': attribute type 10 has an invalid length.
[  938.027837][T18489] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3711'.
[  938.055304][T18489] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  938.237663][T18489] batman_adv: batadv0: Removing interface: virt_wifi0
[  941.458459][T18537] netlink: 'syz.0.3719': attribute type 10 has an invalid length.
[  941.583464][T18537] syz_tun: entered promiscuous mode
[  941.929357][T18537] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  942.032281][T18542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3723'.
[  946.191555][T18572] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.3730'.
[  946.297458][T18579] veth0_macvtap: left promiscuous mode
[  948.394477][T18596] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3737'.
[  949.524779][T18592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3736'.
[  949.561310][T18596] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3737'.
[  949.750081][T18599] netlink: 'syz.2.3739': attribute type 21 has an invalid length.
[  949.768198][T18599] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3739'.
[  950.001519][T18603] netlink: 'syz.1.3738': attribute type 10 has an invalid length.
[  950.044385][T18603] syz_tun: entered promiscuous mode
[  950.050815][T18609] netlink: 'syz.2.3742': attribute type 3 has an invalid length.
[  950.050862][T18609] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3742'.
[  950.295087][T18603] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  951.346580][T18631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3747'.
[  951.777084][T18636] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3748'.
[  951.788445][T18636] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3748'.
[  952.312203][T18651] 
€Â: renamed from vlan1 (while UP)
[  952.686154][T18659] netlink: 'syz.2.3755': attribute type 6 has an invalid length.
[  952.739268][T18659] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3755'.
[  953.069332][T18665] netlink: 'syz.0.3757': attribute type 3 has an invalid length.
[  953.116334][T18665] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3757'.
[  954.825476][T18686] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  955.097769][T18690] netlink: 'syz.2.3764': attribute type 3 has an invalid length.
[  955.121350][T18690] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3764'.
[  956.059568][T18695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3763'.
[  956.180538][T18704] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.3765'.
[  957.133858][T14462] wlan1: Trigger new scan to find an IBSS to join
[  957.860796][T18726] netlink: 'syz.3.3772': attribute type 3 has an invalid length.
[  957.877979][T18726] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3772'.
[  958.463731][T18734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3775'.
[  958.915995][T18739] netlink: 'syz.1.3773': attribute type 3 has an invalid length.
[  958.949052][T18739] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3773'.
[  959.446988][T18717] Bluetooth: hci0: command 0x0406 tx timeout
[  959.504519][T18749] FAULT_INJECTION: forcing a failure.
[  959.504519][T18749] name failslab, interval 1, probability 0, space 0, times 0
[  959.538423][T18749] CPU: 0 PID: 18749 Comm: syz.3.3777 Not tainted syzkaller #0
[  959.546013][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  959.556166][T18749] Call Trace:
[  959.559535][T18749]  <TASK>
[  959.562562][T18749]  dump_stack_lvl+0x18c/0x250
[  959.567347][T18749]  ? sctp_sendmsg+0x1519/0x27b0
[  959.572293][T18749]  ? ___sys_sendmsg+0x2a6/0x360
[  959.577285][T18749]  ? show_regs_print_info+0x20/0x20
[  959.582589][T18749]  ? load_image+0x420/0x420
[  959.587254][T18749]  should_fail_ex+0x394/0x4c0
[  959.592064][T18749]  should_failslab+0x9/0x20
[  959.596701][T18749]  slab_pre_alloc_hook+0x59/0x300
[  959.601835][T18749]  ? sctp_add_bind_addr+0x8c/0x360
[  959.607053][T18749]  __kmem_cache_alloc_node+0x53/0x250
[  959.612554][T18749]  ? sctp_add_bind_addr+0x8c/0x360
[  959.617773][T18749]  kmalloc_trace+0x2a/0xe0
[  959.622305][T18749]  sctp_add_bind_addr+0x8c/0x360
[  959.627410][T18749]  sctp_copy_local_addr_list+0x31b/0x4e0
[  959.633194][T18749]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  959.639046][T18749]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  959.645256][T18749]  ? sctp_v4_is_any+0x35/0x60
[  959.650042][T18749]  ? sctp_copy_one_addr+0x8c/0x350
[  959.655319][T18749]  sctp_bind_addr_copy+0xb3/0x3c0
[  959.660468][T18749]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  959.666930][T18749]  sctp_connect_new_asoc+0x2f9/0x6a0
[  959.672505][T18749]  ? __sctp_connect+0xd80/0xd80
[  959.677437][T18749]  ? __local_bh_enable_ip+0x13a/0x1c0
[  959.682957][T18749]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  959.688600][T18749]  ? security_sctp_bind_connect+0x89/0xb0
[  959.694435][T18749]  sctp_sendmsg+0x1519/0x27b0
[  959.699357][T18749]  ? sctp_getsockopt+0xb60/0xb60
[  959.704410][T18749]  ? aa_af_perm+0x330/0x330
[  959.709039][T18749]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  959.715562][T18749]  ? sock_rps_record_flow+0x19/0x3f0
[  959.720961][T18749]  ? inet_sendmsg+0xce/0x2a0
[  959.725674][T18749]  ? inet_send_prepare+0x250/0x250
[  959.730896][T18749]  ____sys_sendmsg+0x61b/0x980
[  959.735814][T18749]  ? __asan_memset+0x22/0x40
[  959.740527][T18749]  ? __sys_sendmsg_sock+0x30/0x30
[  959.746169][T18749]  ? __import_iovec+0x5f2/0x850
[  959.751179][T18749]  ? import_iovec+0x73/0xa0
[  959.755804][T18749]  ___sys_sendmsg+0x2a6/0x360
[  959.760618][T18749]  ? __sys_sendmsg+0x2b0/0x2b0
[  959.765574][T18749]  ? __lock_acquire+0x7eb0/0x7eb0
[  959.770808][T18749]  __se_sys_sendmsg+0x1d0/0x2c0
[  959.775771][T18749]  ? __x64_sys_sendmsg+0x80/0x80
[  959.780880][T18749]  ? lockdep_hardirqs_on+0x98/0x150
[  959.786196][T18749]  do_syscall_64+0x55/0xb0
[  959.790707][T18749]  ? clear_bhb_loop+0x40/0x90
[  959.795466][T18749]  ? clear_bhb_loop+0x40/0x90
[  959.800271][T18749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  959.806277][T18749] RIP: 0033:0x7ffa8499e159
[  959.810781][T18749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  959.830478][T18749] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  959.838995][T18749] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  959.847049][T18749] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003
[  959.855093][T18749] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  959.863154][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  959.871237][T18749] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  959.879357][T18749]  </TASK>
[  961.128668][T14638] wlan1: Trigger new scan to find an IBSS to join
[  962.052978][T18768] netlink: 'syz.2.3784': attribute type 3 has an invalid length.
[  962.077724][T18768] netlink: 'syz.2.3784': attribute type 6 has an invalid length.
[  962.097577][T18768] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3784'.
[  962.735933][T18783] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3786'.
[  962.746890][T18783] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3786'.
[  963.281385][T18794] netlink: 'syz.1.3788': attribute type 3 has an invalid length.
[  963.351533][T18794] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3788'.
[  964.095276][T14645] wlan1: Trigger new scan to find an IBSS to join
[  964.207032][T14645] wlan1: Creating new IBSS network, BSSID 9e:2c:64:a6:b5:3c
[  964.798444][T18807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3790'.
[  967.003412][T18828] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3798'.
[  967.020873][T18828] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3798'.
[  968.534101][T18831] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3799'.
[  968.632388][T18831] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3799'.
[  968.889842][T18847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3803'.
[  970.191766][T18868] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3811'.
[  970.310774][T18868] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3811'.
[  970.356291][T18867] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3812'.
[  970.388797][T18867] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3812'.
[  971.197860][T18883] syzkaller0: entered promiscuous mode
[  971.277031][T18883] syzkaller0: entered allmulticast mode
[  971.646753][T18890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3819'.
[  973.021843][T18904] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3824'.
[  973.034740][T18904] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3824'.
[  974.367418][T18930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3832'.
[  974.895392][T18937] IPv6: Can't replace route, no match found
[  975.205504][T18937] syzkaller0: entered promiscuous mode
[  975.247132][T18937] syzkaller0: entered allmulticast mode
[  976.084574][T18948] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3837'.
[  979.215283][T18939] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3830'.
[  979.224491][T18939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  979.245282][T18948] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3837'.
[  980.256179][T18971] : renamed from bond0
[  980.604449][T18976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3847'.
[  980.637949][T18975] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3848'.
[  980.651241][T18975] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3848'.
[  982.156299][T19006] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3858'.
[  982.237874][T19006] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3858'.
[  982.892092][T19031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3865'.
[  984.360960][T19040] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3870'.
[  984.400439][T19040] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3870'.
[  984.760972][T19053] FAULT_INJECTION: forcing a failure.
[  984.760972][T19053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  984.856643][T19053] CPU: 0 PID: 19053 Comm: syz.3.3872 Not tainted syzkaller #0
[  984.864194][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  984.874302][T19053] Call Trace:
[  984.877623][T19053]  <TASK>
[  984.880577][T19053]  dump_stack_lvl+0x18c/0x250
[  984.885300][T19053]  ? show_regs_print_info+0x20/0x20
[  984.890538][T19053]  ? load_image+0x420/0x420
[  984.895107][T19053]  ? __might_fault+0xaa/0x120
[  984.899839][T19053]  ? __lock_acquire+0x7eb0/0x7eb0
[  984.904911][T19053]  should_fail_ex+0x394/0x4c0
[  984.909644][T19053]  _copy_from_user+0x2f/0xe0
[  984.914273][T19053]  ___sys_recvmsg+0x174/0x590
[  984.919007][T19053]  ? __sys_recvmsg+0x2a0/0x2a0
[  984.923846][T19053]  ? ksys_write+0x1d2/0x260
[  984.928392][T19053]  ? __fget_files+0x3fc/0x460
[  984.933116][T19053]  __x64_sys_recvmsg+0x21e/0x2f0
[  984.938094][T19053]  ? ___sys_recvmsg+0x590/0x590
[  984.942993][T19053]  ? lockdep_hardirqs_on+0x98/0x150
[  984.948250][T19053]  do_syscall_64+0x55/0xb0
[  984.952702][T19053]  ? clear_bhb_loop+0x40/0x90
[  984.957416][T19053]  ? clear_bhb_loop+0x40/0x90
[  984.962135][T19053]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  984.968073][T19053] RIP: 0033:0x7ffa8499e159
[  984.972523][T19053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  984.992157][T19053] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  985.000600][T19053] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  985.008600][T19053] RDX: 0000000000000100 RSI: 0000200000000340 RDI: 0000000000000003
[  985.016605][T19053] RBP: 00007ffa85907090 R08: 0000000000000000 R09: 0000000000000000
[  985.024604][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  985.032598][T19053] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  985.040617][T19053]  </TASK>
[  985.527747][T19068] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3879'.
[  985.577316][T19068] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3879'.
[  985.982574][T19076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3881'.
[  987.244418][T19106] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3891'.
[  987.270702][T19106] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3891'.
[  988.047545][T19119] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3896'.
[  988.336031][T19121] netlink: 'syz.1.3897': attribute type 2 has an invalid length.
[  988.355300][T19121] netlink: 'syz.1.3897': attribute type 8 has an invalid length.
[  988.365507][T19121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3897'.
[  988.687542][T19132] C: renamed from team_slave_0 (while UP)
[  988.719863][T19132] netlink: 'syz.3.3900': attribute type 3 has an invalid length.
[  988.760002][T19132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3900'.
[  989.357130][T19140] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3903'.
[  989.411876][T19140] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3903'.
[  990.328638][T19158] netlink: 'syz.2.3907': attribute type 3 has an invalid length.
[  990.352781][T19158] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3907'.
[  991.416264][T19170] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3912'.
[  991.473458][T19170] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3912'.
[  991.592442][T19178] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3915'.
[  991.888417][T19180] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3916'.
[  991.911860][T19180] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3916'.
[  992.851805][T19200] netlink: 'syz.0.3923': attribute type 3 has an invalid length.
[  992.876708][T19200] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3923'.
[  993.227564][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  993.234051][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  993.903822][T19217] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3927'.
[  993.976968][T19217] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3927'.
[  996.211283][T19251] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3937'.
[  996.275169][T19251] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3937'.
[  996.656973][    C1] 
[  996.656989][    C1] ================================
[  996.656996][    C1] WARNING: inconsistent lock state
[  996.657012][    C1] syzkaller #0 Not tainted
[  996.657023][    C1] --------------------------------
[  996.657028][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  996.657037][    C1] syz.3.3940/19258 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  996.657059][    C1] ffff888066051a00 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  996.657114][    C1] {INITIAL USE} state was registered at:
[  996.657121][    C1]   lock_acquire+0x19e/0x420
[  996.657145][    C1]   _raw_spin_lock+0x2e/0x40
[  996.657170][    C1]   htab_lock_bucket+0x17d/0x300
[  996.657191][    C1]   htab_map_delete_elem+0x19f/0x640
[  996.657210][    C1]   bpf_prog_a8e63e838209a5e2+0x49/0x4b
[  996.657231][    C1]   bpf_overflow_handler+0x1fc/0x510
[  996.657259][    C1]   __perf_event_overflow+0x461/0x660
[  996.657282][    C1]   perf_swevent_event+0x319/0x570
[  996.657302][    C1]   perf_bp_event+0x319/0x430
[  996.657323][    C1]   hw_breakpoint_exceptions_notify+0x23e/0x670
[  996.657347][    C1]   notifier_call_chain+0x18f/0x380
[  996.657368][    C1]   atomic_notifier_call_chain+0xda/0x180
[  996.657392][    C1]   notify_die+0x145/0x1a0
[  996.657413][    C1]   notify_debug+0x2e/0x50
[  996.657428][    C1]   noist_exc_debug+0x77/0x120
[  996.657444][    C1]   asm_exc_debug+0x33/0x40
[  996.657478][    C1] irq event stamp: 3838
[  996.657486][    C1] hardirqs last  enabled at (3837): [<ffffffff8a92b225>] syscall_enter_from_user_mode+0x25/0x80
[  996.657516][    C1] hardirqs last disabled at (3838): [<ffffffff8a927943>] exc_debug+0x73/0x140
[  996.657537][    C1] softirqs last  enabled at (3578): [<ffffffff81977717>] bpf_map_alloc_id+0x87/0xd0
[  996.657565][    C1] softirqs last disabled at (3576): [<ffffffff819776b1>] bpf_map_alloc_id+0x21/0xd0
[  996.657591][    C1] 
[  996.657591][    C1] other info that might help us debug this:
[  996.657598][    C1]  Possible unsafe locking scenario:
[  996.657598][    C1] 
[  996.657603][    C1]        CPU0
[  996.657607][    C1]        ----
[  996.657611][    C1]   lock(&htab->lockdep_key);
[  996.657633][    C1]   <Interrupt>
[  996.657637][    C1]     lock(&htab->lockdep_key);
[  996.657649][    C1] 
[  996.657649][    C1]  *** DEADLOCK ***
[  996.657649][    C1] 
[  996.657653][    C1] no locks held by syz.3.3940/19258.
[  996.657662][    C1] 
[  996.657662][    C1] stack backtrace:
[  996.657669][    C1] CPU: 1 PID: 19258 Comm: syz.3.3940 Not tainted syzkaller #0
[  996.657687][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  996.657699][    C1] Call Trace:
[  996.657707][    C1]  <#DB>
[  996.657716][    C1]  dump_stack_lvl+0x18c/0x250
[  996.657755][    C1]  ? show_regs_print_info+0x20/0x20
[  996.657798][    C1]  ? print_usage_bug+0x43d/0x6a0
[  996.657826][    C1]  ? verify_lock_unused+0x15/0x140
[  996.657858][    C1]  lock_acquire+0x2c2/0x420
[  996.657891][    C1]  ? htab_lock_bucket+0x17d/0x300
[  996.657920][    C1]  ? read_lock_is_recursive+0x20/0x20
[  996.657970][    C1]  _raw_spin_lock+0x2e/0x40
[  996.657996][    C1]  ? htab_lock_bucket+0x17d/0x300
[  996.658019][    C1]  htab_lock_bucket+0x17d/0x300
[  996.658050][    C1]  ? htab_lru_map_delete_node+0x770/0x770
[  996.658084][    C1]  ? pcpu_freelist_pop+0x12a/0x190
[  996.658117][    C1]  ? htab_map_hash+0x1e8/0x330
[  996.658147][    C1]  htab_map_delete_elem+0x19f/0x640
[  996.658181][    C1]  ? htab_map_update_elem+0x1270/0x1270
[  996.658205][    C1]  ? __bpf_get_stackid+0x772/0x900
[  996.658250][    C1]  bpf_prog_a8e63e838209a5e2+0x49/0x4b
[  996.658275][    C1]  bpf_overflow_handler+0x1fc/0x510
[  996.658314][    C1]  ? bpf_overflow_handler+0xde/0x510
[  996.658345][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  996.658374][    C1]  ? rcu_is_watching+0x15/0xb0
[  996.658405][    C1]  ? lock_release+0xb5/0x8c0
[  996.658437][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  996.658470][    C1]  __perf_event_overflow+0x461/0x660
[  996.658509][    C1]  perf_swevent_event+0x319/0x570
[  996.658541][    C1]  ? perf_tp_event+0x1550/0x1550
[  996.658564][    C1]  ? trace_call_bpf+0x5e9/0x6c0
[  996.658584][    C1]  ? trace_call_bpf+0xc3/0x6c0
[  996.658630][    C1]  perf_bp_event+0x319/0x430
[  996.658666][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  996.658747][    C1]  ? lock_acquire+0x2c2/0x420
[  996.658787][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  996.658825][    C1]  notifier_call_chain+0x18f/0x380
[  996.658859][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  996.658891][    C1]  atomic_notifier_call_chain+0xda/0x180
[  996.658923][    C1]  notify_die+0x145/0x1a0
[  996.658955][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  996.658998][    C1]  ? rcu_is_watching+0x15/0xb0
[  996.659032][    C1]  notify_debug+0x2e/0x50
[  996.659053][    C1]  exc_debug+0xde/0x140
[  996.659079][    C1]  asm_exc_debug+0x1e/0x40
[  996.659108][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  996.659130][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  996.659146][    C1] RSP: 0018:ffffc9000b9f7d50 EFLAGS: 00050202
[  996.659163][    C1] RAX: ffffffff84348a01 RBX: 0000000000000080 RCX: 000000000000007f
[  996.659178][    C1] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc9000b9f7dc1
[  996.659191][    C1] RBP: ffffc9000b9f7ee8 R08: ffffc9000b9f7e3f R09: 1ffff9200173efc7
[  996.659206][    C1] R10: dffffc0000000000 R11: fffff5200173efc8 R12: 0000200000000380
[  996.659221][    C1] R13: 0000000000000080 R14: ffffc9000b9f7dc0 R15: 0000200000000300
[  996.659249][    C1]  ? rcuref_put_slowpath+0xc1/0x150
[  996.659288][    C1]  </#DB>
[  996.659294][    C1]  <TASK>
[  996.659300][    C1]  _copy_from_user+0x8b/0xe0
[  996.659329][    C1]  __sys_bpf+0x23e/0x890
[  996.659359][    C1]  ? bpf_link_show_fdinfo+0x560/0x560
[  996.659411][    C1]  ? lock_chain_count+0x20/0x20
[  996.659452][    C1]  __x64_sys_bpf+0x7c/0x90
[  996.659478][    C1]  do_syscall_64+0x55/0xb0
[  996.659507][    C1]  ? clear_bhb_loop+0x40/0x90
[  996.659525][    C1]  ? clear_bhb_loop+0x40/0x90
[  996.659548][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  996.659579][    C1] RIP: 0033:0x7ffa8499e159
[  996.659597][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  996.659614][    C1] RSP: 002b:00007ffa85907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  996.659641][    C1] RAX: ffffffffffffffda RBX: 00007ffa84c25fa0 RCX: 00007ffa8499e159
[  996.659656][    C1] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[  996.659669][    C1] RBP: 00007ffa84a3506b R08: 0000000000000000 R09: 0000000000000000
[  996.659681][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  996.659693][    C1] R13: 00007ffa84c26038 R14: 00007ffa84c25fa0 R15: 00007ffd8197e4c8
[  996.659734][    C1]  </TASK>