last executing test programs:

5.981902959s ago: executing program 0 (id=14133):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0201", 0x9}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x800)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x1, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x4044454)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000041de7d5400000000004fd4b6b074330858e14784178e84dfd621afa209e59bbe3de9607c1c336bc65d43179bb1daf0a80cafde3738f81d1fdeae116c63454e3eb7788fe5e79ffa5aff1acd83720c2d67a62350081d8dcb21e2a552bacc23871eefaf67bd1996b7a23dc276abb007001d0f7b325d0ea18cd2e08aa20ae3ea813066ee6b9b84a047d23d2d1879f6f1ae532cf2105f63a85df776f722d4114ccdbeadc558ead949f9c20d636d2683dea45b8c30ff647eee6cc8a119cce05871fc2bbc049dded7", @ANYRES32, @ANYRES32, @ANYBLOB="030000000500"/27], 0x50)
r4 = socket$kcm(0x22, 0x2, 0x21)
sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000005281000000000000cc0c000018580000090000e4ffffff000000000085000000a00000001839000002000000000000000000000042252dae7c06b3cdf279918cf34de740b22a422e1fa26b458e7be3207f3e659fa2dfe06b2962263ae26fb930810d98954d7d65244ab3a2944917986afb9be3", @ANYRES32=r2, @ANYBLOB="0000000004000000488004001000000018200000", @ANYRES32=r3, @ANYBLOB="0000000003000000185100000c00000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100000008500000006000000183800000100000000000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x8, 0xdb, &(0x7f0000000980)=""/219, 0x40f00, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x5, 0x7, 0x7fff}, 0x10, 0x10442, 0xffffffffffffffff, 0x1, &(0x7f0000000b00)=[r5, r5, 0xffffffffffffffff, r2, r2], &(0x7f0000000b40)=[{0x1, 0x2, 0x83f1}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000c40)=r6, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.46067551s ago: executing program 2 (id=14124):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000002980)=""/4101, 0x1005}, {&(0x7f0000001980)=""/4074, 0xfea}, {&(0x7f0000003ac0)=""/202, 0xca}, {&(0x7f0000003bc0)=""/124, 0x7c}, {0x0}], 0x6}, 0x20)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)

4.193804278s ago: executing program 0 (id=14125):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 3)

4.079774571s ago: executing program 2 (id=14127):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108a82, 0xac5d, 0x401, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=<r2=>r1, @ANYBLOB="0f00"/14, @ANYRES32=<r3=>0x0, @ANYRES32, @ANYBLOB="040000000300000000000000100900980000000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r4=>r1}, 0x4)
mkdir(0x0, 0x20)
r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES8=r5, @ANYRESDEC=r4, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRES16], 0x8b)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x8, 0x66, 0xff, 0xff, 0x0, 0x7, 0x1064, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x9}, 0x2, 0x1, 0x9, 0x0, 0xe37, 0x1, 0x78b, 0x0, 0x0, 0x0, 0x3})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004850)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0)
sendmsg$kcm(r7, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

3.747811038s ago: executing program 0 (id=14130):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002980)=""/4101, 0x1005}, {&(0x7f0000001980)=""/4085, 0xff5}, {&(0x7f0000003ac0)=""/202, 0xca}, {&(0x7f0000003bc0)=""/124, 0x7c}, {&(0x7f0000000400)=""/233, 0xe9}], 0x5}, 0x20)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x4, 0x49, 0x4, 0x2, 0x0, 0x4, 0x40011, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x5, @perf_config_ext={0x80000001, 0x1dc7}, 0x100, 0xc, 0xffff, 0x4, 0x8, 0x3, 0x401, 0x0, 0x3, 0x0, 0x78}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0xc, 0x2a, 0x0, 0x0, 0xfffffffffffffffe, 0x43000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x101, 0x7}, 0x44, 0x0, 0x5, 0x9, 0x80, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0x1, r1, 0x2)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)

3.708213989s ago: executing program 3 (id=14132):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9b, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b591101080a97b960ace1cd8816", 0xffeb}], 0x1}, 0x0) (fail_nth: 4)

3.669081549s ago: executing program 2 (id=14134):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0xe}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x306)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x334)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000480)=r3)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x0, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000500)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB])
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc000000850000972a000000950000000000000014"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe00}]}}, &(0x7f0000001940)=""/208, 0x26, 0xd0, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x1ff)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

3.553304582s ago: executing program 0 (id=14136):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc02010088a8ffff", 0xe}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x800)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x1, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x4044454)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000041de7d5400000000004fd4b6b074330858e14784178e84dfd621afa209e59bbe3de9607c1c336bc65d43179bb1daf0a80cafde3738f81d1fdeae116c63454e3eb7788fe5e79ffa5aff1acd83720c2d67a62350081d8dcb21e2a552bacc23871eefaf67bd1996b7a23dc276abb007001d0f7b325d0ea18cd2e08aa20ae3ea813066ee6b9b84a047d23d2d1879f6f1ae532cf2105f63a85df776f722d4114ccdbeadc558ead949f9c20d636d2683dea45b8c30ff647eee6cc8a119cce05871fc2bbc049dded7", @ANYRES32, @ANYRES32, @ANYBLOB="030000000500"/27], 0x50)
r4 = socket$kcm(0x22, 0x2, 0x21)
sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000005281000000000000cc0c000018580000090000e4ffffff000000000085000000a00000001839000002000000000000000000000042252dae7c06b3cdf279918cf34de740b22a422e1fa26b458e7be3207f3e659fa2dfe06b2962263ae26fb930810d98954d7d65244ab3a2944917986afb9be3", @ANYRES32=r2, @ANYBLOB="0000000004000000488004001000000018200000", @ANYRES32=r3, @ANYBLOB="0000000003000000185100000c00000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100000008500000006000000183800000100000000000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x8, 0xdb, &(0x7f0000000980)=""/219, 0x40f00, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x5, 0x7, 0x7fff}, 0x10, 0x10442, 0xffffffffffffffff, 0x1, &(0x7f0000000b00)=[r5, r5, 0xffffffffffffffff, r2, r2], &(0x7f0000000b40)=[{0x1, 0x2, 0x83f1}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000c40)=r6, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.217628619s ago: executing program 3 (id=14137):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0xe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x334)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r2)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x0, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB])
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc000000850000972a000000950000000000000014"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe00}]}}, &(0x7f0000001940)=""/208, 0x26, 0xd0, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000200)='syz0\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

3.152269921s ago: executing program 0 (id=14139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

3.090991773s ago: executing program 2 (id=14140):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0xe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x334)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r2)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x0, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB])
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc000000850000972a000000950000000000000014"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe00}]}}, &(0x7f0000001940)=""/208, 0x26, 0xd0, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000200)='syz0\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

3.023227264s ago: executing program 1 (id=14141):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1b47f6f94007134cf6efb8000a007a290457f012d48433e0f2d4b09803d3cc5b88bf889b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb79122fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1ca2a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94148868e884acd5e", 0xd8}], 0x1}, 0x0)

2.937333116s ago: executing program 3 (id=14142):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.867616877s ago: executing program 1 (id=14143):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e0000003e00165495dbc4e2c91e94090324fc602f6ea70f08", 0x19}, {&(0x7f0000000100)="3233237d3eb8a148eeb3e828a2d95bed510e1eaa332eb8ef4aa90f67cc3d1e6308f65063ba965dbbaf8000976944d3b93150c725e1e9cefb9b8b56d644f64fbbec39bc551bd5296fc12532e5d1618ae5792b4344bdf337acac60c17e925710268f8c34638141fb66852013e54a129894bd1e61e8cdf84f81e9d94222df330a2acdb6ac7c221883aa4ae39155ae57f07fbea5295220af09319614881aee38", 0x9e}], 0x2, 0x0, 0x0, 0x39c}, 0x10) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async)
r2 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
close(r4) (async, rerun: 32)
close(r2) (async, rerun: 32)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 64)
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}) (rerun: 64)
sendmsg$unix(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18}, 0x0) (async)
recvmsg$unix(r10, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000004880)=""/4096, 0x1000}], 0x1}, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)

2.798932469s ago: executing program 1 (id=14144):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x5, 0x1, 0x5}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x3}, @enum64={0xb, 0x2, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x9, 0x7}, {0xb, 0x80000000}]}, @union={0x10, 0x5, 0x0, 0x5, 0x1, 0xe42, [{0x2, 0x3, 0xffff}, {0xa, 0x4}, {0x2, 0x4, 0x100}, {0xc, 0x2, 0xfffff42a}, {0x1, 0x0, 0xe5a}]}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0xbc, 0x0, 0x1, 0x9, 0x10000, @value=r1}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @generic={0x0, 0x6, 0x4, 0x4, 0xe3b}, @map_fd={0x18, 0x4}]}, 0x0, 0x7, 0x24, &(0x7f0000000340)=""/36, 0x40f00, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0xe, 0xa}, {0x1, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x7, 0xfffffffb, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x8}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000001c000080851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r3, r4}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48)
r9 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
socket$kcm(0xa, 0x6, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r9, 0x0, 0x1, 0xfffffffb, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f000000000000000000", 0x2c}], 0x1}, 0x44004)

2.581229804s ago: executing program 1 (id=14145):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108a82, 0xac5d, 0x401, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=<r2=>r1, @ANYBLOB="0f00"/19, @ANYRES32=<r3=>0x0, @ANYRES32, @ANYBLOB="040000000300000000000000100900980000000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r4=>r1}, 0x4)
mkdir(0x0, 0x20)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES8=r6, @ANYRESDEC=r4, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRES16], 0x8b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x8, 0x66, 0xff, 0xff, 0x0, 0x7, 0x1064, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x9}, 0x2, 0x1, 0x9, 0x0, 0xe37, 0x1, 0x78b, 0x0, 0x0, 0x0, 0x3})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6"], &(0x7f0000000140)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
r10 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004850)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9})
sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)

2.580902454s ago: executing program 4 (id=14146):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000)

2.565475104s ago: executing program 3 (id=14147):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000002d40)={&(0x7f00000006c0)=@isdn={0x22, 0x8, 0xff, 0x3}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000b00)="1fb92ac826b390ad57268b9fb0862c7c0a747b36d63c092161d42b1c44bd833759b0aea06614b60ee633da114cbd4785f8faa9c822264da4c9dea0143dddf3f76ae960099f2ecfb1cd7dcd3d4ca9fba9c6c03cfad108fc2d40169ec7737fc46ee1c08b4a8f4d7a65b4989da0fb8a4d744b9deb120f82bdb956e626aed63c8d0df40fe90c4f4c7d543cc7b6ee322d77416be46d27ee3771b30e782e5bcc6b205687227c596c90847227c8aed041fd92e933ffe334970ca47bcd7e4958151d", 0xbe}, {&(0x7f0000000bc0)="7951d37077f5bc43f3040395182b26067f747e8be726934c060a96aefab47c29702ca72dbd3b0a736c2a3873521d85e9", 0x30}, {&(0x7f0000000c00)="bfe4bc9a0b863d01f78919c2492f3880eddc2a403156d5991a6467ad5fb2a0aa010c243329b20623e1f6f3f5113600979cce76291ba941fa1e319e977bc472020d1d8ae7126b93b5d2a9f2ba0ddb03c0b4f6ba5618889b9bbd56016f0cb43762abbb4022eb7830130c0ed070b6d4ea58186fe00d3d26bf1b637c350430f79b02e6a69b1e4364c146fe2e486b9c6c3cc1f266a8b4d38ae68a427318c08043191ed648914c3ac155360c253bd007f5cc5245932d87eba896a9484625d8ea632685fa84653e0434c1ec393b64b8d442", 0xce}, {&(0x7f0000000d00)="6ace92e75fd039567052c343868013a81d91940c533297dabfea3028cdc30b05222fdd8b3865c1ec09c21378f88e4ce992f253dc63a0b68cbff855b1966f756b34e164331ab603de9f5a768fa70b5159798313f15f77b26da92fce54e11772217f769c833f7e2c58c982f6cef8be5af59a9524b8b6d2fa5de62adf725c707b30032eb45fa42e73596b51b1d9c606cbe7688668ae3e133b4b43837e7981306e39e8c56183c0a34d58c99108c967838abf2d26eef47001d16721c3bbfc2ba164250cf340e82204d683dc213fd585cc456121365982515724d6ec6fc187417f13f0de44be8c51601ca98be9a9b1", 0xec}, {&(0x7f0000000e00)="e2930d923b834537a5d2949924874e39957d411f94eb5a", 0x17}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="c82a80bed4091bfddf52d21137b55c012906bad038932a958cc214f4444e19d0788a27ad60a9c54d0af23e07b1f0ccced4e26d1cd694bb9ee04577388d5d4fdcb64dfa659842709d9adaf997240a77a84490ee4dbce33fd4163a60383b13f172187a9b5cfa2a5119a3d8e2c5c93be33780ed72872d48a411f1330f030a1ef274c72ebc28bab3d0e8ea3aedb69dd0773bdb671c0ad8f456db0149c4460d874413c52ad9b0a5c06b75c24b0601586390c9e87e56749da747503901356b895d5790bcfeef426a67b9f9adc662ec119f9363778a9f177eed94c47972d84ebb26f07f08faae03bf0c207a724ecf01", 0xec}], 0x7}, 0x2000c000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f", 0x64}], 0x2}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c215", 0x3c}, {&(0x7f0000000700)}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5e", 0xd0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x800}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x3, 0x12)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020)
recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f00000008c0)=""/57, 0x0, 0x39, 0x0, 0x8, 0x10000}, 0x28)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000f000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001862000002000000000000001a0400008520000003000000181b000048028a2a5d79060753d543429e13f6a5c8f47672c05fbe66ad8d9d96602985551fbf6b22e4b92257605709572babfc73b1591219bff9dcdd4ec9a2406377f618db6a376af75a9bbcb84b23bccd1848acadcd3df9ef2946235ecc26103c02494704afe15a44acf4c1cc2e3ce2b6ba468404b268be48d9e0c010c3ce21e43fa906b5d6ba090000000000000002ab8da6224312dab07e661d464716eabd159626e9dd7b1f56b4fafecfed91b24447742c108e72e83124c0dd2993adb0ec3f1cb43314b27d4114932a5bc126233d990514b70a10d8789f934af3cd2efe20c11a9a40fcd05c3c6ceb9fe61ad25dc32de8b69711b9e26e040a9bd387ef720f18a5f31cffc301731c11a3a8474984f7141b67d794576799bdafebac817f1729083c27d8e231048c55c1c0bc4b502171e9a9ac22ac105d390bb1b7bbb0aea385b8eb986f991e22665ab94948a837911434becba25d145ef8e5881b1bea41937fbfe533e4a8d73fb0e5989ea78a4a841215c4f791b141a812884d18a609ca92e87cdbac44b0", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x51d, 0x67, &(0x7f0000000640)=""/103, 0x41100, 0x0, '\x00', 0x0, 0x17, r9, 0x8, &(0x7f0000000980)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x164f2, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[r4, r10, r4, 0xffffffffffffffff, r4], &(0x7f0000000a00)=[{0x1, 0x4, 0x1, 0x1}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x1}, 0x94)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002f8035", 0xe}], 0x1}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)

2.379589308s ago: executing program 4 (id=14148):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x32, 0x0, 0xfffffffd}, 0x28)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x1, &(0x7f0000000080)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x3, 0x4, 0x0, 0xef, 0x1af1ed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x10, 0xa, 0x9, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r4, 0x0, 0x10001)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x6)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000040))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc29a, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x0)
r7 = getpid()
sendmsg$unix(r4, &(0x7f0000000c80)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000005c0)="9b621593ddc8109219c3ffc81d30a9b674ffe868cd598f41997bb4c8312715813ddcae56885624e33e", 0x29}, {&(0x7f00000009c0)="a5a1a004a49b4aa7586eadfeab94bab6d250f43db5b5f14ff14a2e16b257f28fabf8c48dbeedcbbebca5bb51c4ed1b6b61b425598d6859a5020f3b56eb06f03e5fcb47995213331e3054099a2c174ae51141d36b", 0x54}, {&(0x7f0000000a40)="e0deb944069ddef20658e09c", 0xc}, {&(0x7f0000000a80)="b8bf91f518f754776d50112970f12c9d65a4885bcc987a657d", 0x19}, {&(0x7f0000000ac0)="cfc65174fae801fd07175f5c9bcea0df6c8b7ee60b91a6d66ba33bd445bb0a8b67e3eaa06f012b74e4290179ca9bd369d5bb10a7be2c637c1e9bf8fcbf0bd274e3d7d89b516c1ddea1af057a6fe8a7bfacc04edc8cd326f301b257a24a749a0f6fd74e6157c86b705e6b310f9282456a85a89a877b29948fe6743c402b6ba7d87d45bdf8a0b35b37dc2341ee930603639fafef53a2acf7", 0x97}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14e7e5d47180527908461b14000000000100"/27, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r1], 0x70, 0x880}, 0x4048c25)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
socket$kcm(0x1e, 0x7, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x6000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x2, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000010c0)='%pI4   \x00'}, 0x3c)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x101, '\x00', 0x0, r0, 0x3}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x12, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@generic={0x3, 0x4, 0xa, 0x4, 0xc4f}, @exit, @ldst={0x0, 0x1, 0x6, 0x2, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0x2, 0xa5, &(0x7f0000000e40)=""/165, 0x41000, 0x78, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000f00)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0xffffffffffffffff, r11, 0x1, r12, r13], &(0x7f0000001200)=[{0x1, 0x4, 0xb, 0xa}], 0x10, 0x2}, 0x94)
close(r10)
recvmsg$unix(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

841.045542ms ago: executing program 1 (id=14149):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc02010088a8ffff", 0xe}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x800)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x1, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x4044454)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000041de7d5400000000004fd4b6b074330858e14784178e84dfd621afa209e59bbe3de9607c1c336bc65d43179bb1daf0a80cafde3738f81d1fdeae116c63454e3eb7788fe5e79ffa5aff1acd83720c2d67a62350081d8dcb21e2a552bacc23871eefaf67bd1996b7a23dc276abb007001d0f7b325d0ea18cd2e08aa20ae3ea813066ee6b9b84a047d23d2d1879f6f1ae532cf2105f63a85df776f722d4114ccdbeadc558ead949f9c20d636d2683dea45b8c30ff647eee6cc8a119cce05871fc2bbc049dded7", @ANYRES32, @ANYRES32, @ANYBLOB="030000000500"/27], 0x50)
r4 = socket$kcm(0x22, 0x2, 0x21)
sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000005281000000000000cc0c000018580000090000e4ffffff000000000085000000a00000001839000002000000000000000000000042252dae7c06b3cdf279918cf34de740b22a422e1fa26b458e7be3207f3e659fa2dfe06b2962263ae26fb930810d98954d7d65244ab3a2944917986afb9be3", @ANYRES32=r2, @ANYBLOB="0000000004000000488004001000000018200000", @ANYRES32=r3, @ANYBLOB="0000000003000000185100000c00000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100000008500000006000000183800000100000000000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x8, 0xdb, &(0x7f0000000980)=""/219, 0x40f00, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x5, 0x7, 0x7fff}, 0x10, 0x10442, 0xffffffffffffffff, 0x1, &(0x7f0000000b00)=[r5, r5, 0xffffffffffffffff, r2, r2], &(0x7f0000000b40)=[{0x1, 0x2, 0x83f1}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000c40)=r6, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

790.119283ms ago: executing program 0 (id=14150):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0xe}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x306)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x334)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000480)=r3)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x0, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000500)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB])
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc000000850000972a000000950000000000000014"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe00}]}}, &(0x7f0000001940)=""/208, 0x26, 0xd0, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x1ff)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

771.938043ms ago: executing program 4 (id=14151):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000002980)=""/4101, 0x1005}, {&(0x7f0000001980)=""/4074, 0xfea}, {&(0x7f0000003ac0)=""/202, 0xca}, {&(0x7f0000003bc0)=""/124, 0x7c}, {0x0}], 0x6}, 0x20)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)

703.059415ms ago: executing program 2 (id=14152):
r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0xfdef)

669.657135ms ago: executing program 3 (id=14153):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

581.091377ms ago: executing program 1 (id=14154):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0xe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x334)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r2)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x0, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB])
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc000000850000972a000000950000000000000014"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe00}]}}, &(0x7f0000001940)=""/208, 0x26, 0xd0, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000200)='syz0\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

580.592157ms ago: executing program 4 (id=14155):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x5, 0x1, 0x5}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x3}, @enum64={0xb, 0x2, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x9, 0x7}, {0xb, 0x80000000}]}, @union={0x10, 0x5, 0x0, 0x5, 0x1, 0xe42, [{0x2, 0x3, 0xffff}, {0xa, 0x4}, {0x2, 0x4, 0x100}, {0xc, 0x2, 0xfffff42a}, {0x1, 0x0, 0xe5a}]}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0xbc, 0x0, 0x1, 0x9, 0x10000, @value=r1}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @generic={0x0, 0x6, 0x4, 0x4, 0xe3b}, @map_fd={0x18, 0x4}]}, 0x0, 0x7, 0x24, &(0x7f0000000340)=""/36, 0x40f00, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0xe, 0xa}, {0x1, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x7, 0xfffffffb, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x8}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000001c000080851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r3, r4}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48)
r9 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
socket$kcm(0xa, 0x6, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r9, 0x0, 0x1, 0xfffffffb, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f000000000000000000", 0x2c}], 0x1}, 0x44004)

451.70833ms ago: executing program 2 (id=14156):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0xffffffff, 0x8}, 0xc) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff39, &(0x7f0000000340)}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000300000000000000000000010500000010000001000000000000000d"], 0x0, 0x4e}, 0x28) (async)
r2 = perf_event_open(&(0x7f00000011c0)={0xf30194899d58a2fa, 0x80, 0x3, 0xdf, 0x10, 0xa5, 0x0, 0x4, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000001140), 0x9}, 0x12009, 0x4c3, 0x3, 0x2, 0x8000000000000005, 0x800, 0xffc0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) (rerun: 32)
socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x12) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) (async, rerun: 64)
socket$kcm(0xa, 0x2, 0x73) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

451.25018ms ago: executing program 3 (id=14157):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="1e00000000017600", @ANYRES32, @ANYBLOB, @ANYRES64], 0x20)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r2, r0, 0x16, 0x2, 0xffffffffffffffff, @void, @value=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x113, 0x2, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000040000000400000012000000000000000e7d210d80b62063aee708478b1f716ada8617cf724648e118df122e31f1a0dc06c4614f18c96aa1cc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r9, &(0x7f00000001c0), 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

351.516462ms ago: executing program 4 (id=14158):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000)

0s ago: executing program 4 (id=14159):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108a82, 0xac5d, 0x401, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=<r2=>r1, @ANYBLOB="0f00"/19, @ANYRES32=<r3=>0x0, @ANYRES32, @ANYBLOB="040000000300000000000000100900980000000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r4=>r1}, 0x4)
mkdir(0x0, 0x20)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES8=r6, @ANYRESDEC=r4, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRES16], 0x8b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x8, 0x66, 0xff, 0xff, 0x0, 0x7, 0x1064, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x9}, 0x2, 0x1, 0x9, 0x0, 0xe37, 0x1, 0x78b, 0x0, 0x0, 0x0, 0x3})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
r10 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004850)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9})
sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

x279/0x1770
[ 2234.929161][T13278]  ? br_handle_local_finish+0x20/0x20
[ 2234.934543][T13278]  ? __mutex_trylock_common+0x15c/0x260
[ 2234.940090][T13278]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 2234.946242][T13278]  ? rcu_is_watching+0x11/0xa0
[ 2234.951005][T13278]  ? trace_contention_end+0x5f/0x170
[ 2234.956288][T13278]  ? full_name_hash+0x8e/0xe0
[ 2234.960967][T13278]  dev_ifsioc+0xa4a/0xd50
[ 2234.965298][T13278]  ? dev_ioctl+0xe80/0xe80
[ 2234.969717][T13278]  ? __lock_acquire+0x7c40/0x7c40
[ 2234.974736][T13278]  ? full_name_hash+0x8e/0xe0
[ 2234.979410][T13278]  ? dev_load+0x1d/0x1e0
[ 2234.983671][T13278]  ? dev_load+0x1d/0x1e0
[ 2234.987914][T13278]  dev_ioctl+0x5f8/0xe80
[ 2234.992154][T13278]  ? get_user_ifreq+0xc7/0x170
[ 2234.996915][T13278]  sock_ioctl+0x679/0x700
[ 2235.001243][T13278]  ? sock_poll+0x420/0x420
[ 2235.005661][T13278]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2235.010599][T13278]  ? security_file_ioctl+0x7c/0xa0
[ 2235.015713][T13278]  ? sock_poll+0x420/0x420
[ 2235.020126][T13278]  __se_sys_ioctl+0xfa/0x170
[ 2235.024718][T13278]  do_syscall_64+0x4c/0xa0
[ 2235.029131][T13278]  ? clear_bhb_loop+0x60/0xb0
[ 2235.033803][T13278]  ? clear_bhb_loop+0x60/0xb0
[ 2235.038474][T13278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2235.044363][T13278] RIP: 0033:0x7fc1aff9de99
[ 2235.048770][T13278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2235.068370][T13278] RSP: 002b:00007fc1b0d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2235.076775][T13278] RAX: ffffffffffffffda RBX: 00007fc1b0225fa0 RCX: 00007fc1aff9de99
[ 2235.084737][T13278] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[ 2235.092707][T13278] RBP: 00007fc1b0d8d090 R08: 0000000000000000 R09: 0000000000000000
[ 2235.100669][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2235.108638][T13278] R13: 00007fc1b0226038 R14: 00007fc1b0225fa0 R15: 00007ffd4ad54ca8
[ 2235.116624][T13278]  </TASK>
[ 2235.168217][T13285] sctp: [Deprecated]: syz.0.13403 (pid 13285) Use of int in maxseg socket option.
[ 2235.168217][T13285] Use struct sctp_assoc_value instead
[ 2235.234501][T13280] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13405'.
[ 2235.299243][T13284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13406'.
[ 2235.301570][T13276] delete_channel: no stack
[ 2235.637013][T13298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2235.662567][T13300] FAULT_INJECTION: forcing a failure.
[ 2235.662567][T13300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2235.677814][T13300] CPU: 0 PID: 13300 Comm: syz.0.13413 Not tainted syzkaller #0
[ 2235.685396][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2235.695468][T13300] Call Trace:
[ 2235.698759][T13300]  <TASK>
[ 2235.701699][T13300]  dump_stack_lvl+0x188/0x24e
[ 2235.706401][T13300]  ? show_regs_print_info+0x12/0x12
[ 2235.711629][T13300]  ? load_image+0x410/0x410
[ 2235.716161][T13300]  ? __lock_acquire+0x7c40/0x7c40
[ 2235.721208][T13300]  ? snprintf+0xe5/0x140
[ 2235.725465][T13300]  should_fail_ex+0x390/0x4c0
[ 2235.730166][T13300]  _copy_to_user+0x2c/0x130
[ 2235.734684][T13300]  simple_read_from_buffer+0xe3/0x150
[ 2235.740070][T13300]  proc_fail_nth_read+0x1a6/0x220
[ 2235.745134][T13300]  ? proc_fault_inject_write+0x310/0x310
[ 2235.750788][T13300]  ? fsnotify_perm+0x248/0x550
[ 2235.755564][T13300]  ? proc_fault_inject_write+0x310/0x310
[ 2235.761212][T13300]  vfs_read+0x2db/0x960
[ 2235.765392][T13300]  ? kernel_read+0x1e0/0x1e0
[ 2235.769996][T13300]  ? __fget_files+0x28/0x460
[ 2235.774593][T13300]  ? __fget_files+0x3fc/0x460
[ 2235.779288][T13300]  ? __fdget_pos+0x2ae/0x360
[ 2235.783934][T13300]  ? ksys_read+0x70/0x260
[ 2235.788282][T13300]  ksys_read+0x14d/0x260
[ 2235.792537][T13300]  ? vfs_write+0x9a0/0x9a0
[ 2235.796972][T13300]  ? lockdep_hardirqs_on+0x94/0x140
[ 2235.802183][T13300]  do_syscall_64+0x4c/0xa0
[ 2235.806607][T13300]  ? clear_bhb_loop+0x60/0xb0
[ 2235.811295][T13300]  ? clear_bhb_loop+0x60/0xb0
[ 2235.815986][T13300]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2235.821886][T13300] RIP: 0033:0x7fa4d395e6ce
[ 2235.826311][T13300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2235.845922][T13300] RSP: 002b:00007fa4d48cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2235.854341][T13300] RAX: ffffffffffffffda RBX: 00007fa4d48d06c0 RCX: 00007fa4d395e6ce
[ 2235.862320][T13300] RDX: 000000000000000f RSI: 00007fa4d48d00a0 RDI: 0000000000000006
[ 2235.870299][T13300] RBP: 00007fa4d48d0090 R08: 0000000000000000 R09: 0000000000000000
[ 2235.878278][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2235.886258][T13300] R13: 00007fa4d3c26038 R14: 00007fa4d3c25fa0 R15: 00007ffe591de228
[ 2235.894250][T13300]  </TASK>
[ 2236.075626][T13311] tun0: tun_chr_ioctl cmd 1074025675
[ 2236.082309][T13311] tun0: persist enabled
[ 2236.133972][T13311] tun0: tun_chr_ioctl cmd 1074025675
[ 2236.159806][T13311] tun0: persist enabled
[ 2236.188632][T13314] tun0: tun_chr_ioctl cmd 1074025675
[ 2236.193997][T13314] tun0: persist enabled
[ 2236.218988][T13309] tun0: tun_chr_ioctl cmd 1074025675
[ 2236.221892][T13315] netlink: 'syz.2.13417': attribute type 4 has an invalid length.
[ 2236.225324][T13309] tun0: persist enabled
[ 2236.242274][T13315] netlink: 'syz.2.13417': attribute type 1 has an invalid length.
[ 2236.386711][T13317] netlink: 'syz.4.13418': attribute type 10 has an invalid length.
[ 2236.450561][T13317] team0: Device ipvlan1 failed to register rx_handler
[ 2236.625974][T13323] FAULT_INJECTION: forcing a failure.
[ 2236.625974][T13323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2236.660191][T13315] netlink: 'syz.2.13417': attribute type 21 has an invalid length.
[ 2236.696800][T13323] CPU: 1 PID: 13323 Comm: syz.3.13419 Not tainted syzkaller #0
[ 2236.704405][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2236.714476][T13323] Call Trace:
[ 2236.717761][T13323]  <TASK>
[ 2236.720690][T13323]  dump_stack_lvl+0x188/0x24e
[ 2236.725371][T13323]  ? show_regs_print_info+0x12/0x12
[ 2236.730568][T13323]  ? load_image+0x410/0x410
[ 2236.735072][T13323]  ? __lock_acquire+0x7c40/0x7c40
[ 2236.740101][T13323]  should_fail_ex+0x390/0x4c0
[ 2236.744781][T13323]  _copy_from_user+0x2c/0x170
[ 2236.749456][T13323]  __sys_bpf+0x2ea/0x780
[ 2236.753701][T13323]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2236.759099][T13323]  ? lock_chain_count+0x20/0x20
[ 2236.763975][T13323]  __x64_sys_bpf+0x78/0x90
[ 2236.768389][T13323]  do_syscall_64+0x4c/0xa0
[ 2236.772803][T13323]  ? clear_bhb_loop+0x60/0xb0
[ 2236.777480][T13323]  ? clear_bhb_loop+0x60/0xb0
[ 2236.782156][T13323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2236.788049][T13323] RIP: 0033:0x7f6a6379de99
[ 2236.792461][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2236.812064][T13323] RSP: 002b:00007f6a64614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2236.820491][T13323] RAX: ffffffffffffffda RBX: 00007f6a63a25fa0 RCX: 00007f6a6379de99
[ 2236.828461][T13323] RDX: 0000000000000032 RSI: 0000200000000700 RDI: 000000000000000a
[ 2236.836429][T13323] RBP: 00007f6a64614090 R08: 0000000000000000 R09: 0000000000000000
[ 2236.844396][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2236.852364][T13323] R13: 00007f6a63a26038 R14: 00007f6a63a25fa0 R15: 00007ffd1ccf6f48
[ 2236.860349][T13323]  </TASK>
[ 2236.883266][T13329] __nla_validate_parse: 2 callbacks suppressed
[ 2236.883298][T13329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13421'.
[ 2236.905768][T13327] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13420'.
[ 2237.080971][T13335] sctp: [Deprecated]: syz.4.13422 (pid 13335) Use of int in maxseg socket option.
[ 2237.080971][T13335] Use struct sctp_assoc_value instead
[ 2237.150820][T13332] delete_channel: no stack
[ 2237.313330][T13341] device syzkaller0 entered promiscuous mode
[ 2237.331689][T13345] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13426'.
[ 2237.348319][T13345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2237.350621][T13351] sctp: [Deprecated]: syz.4.13430 (pid 13351) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2237.350621][T13351] Use struct sctp_sack_info instead
[ 2238.129548][T13359] FAULT_INJECTION: forcing a failure.
[ 2238.129548][T13359] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2238.155440][T13359] CPU: 1 PID: 13359 Comm: syz.1.13432 Not tainted syzkaller #0
[ 2238.163063][T13359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2238.173136][T13359] Call Trace:
[ 2238.176428][T13359]  <TASK>
[ 2238.179370][T13359]  dump_stack_lvl+0x188/0x24e
[ 2238.184072][T13359]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2238.190254][T13359]  ? show_regs_print_info+0x12/0x12
[ 2238.195474][T13359]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2238.201673][T13359]  should_fail_ex+0x390/0x4c0
[ 2238.206376][T13359]  _copy_from_user+0x2c/0x170
[ 2238.211071][T13359]  sock_do_ioctl+0x18c/0x320
[ 2238.215703][T13359]  ? sock_show_fdinfo+0xb0/0xb0
[ 2238.220572][T13359]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2238.226589][T13359]  sock_ioctl+0x48a/0x700
[ 2238.230942][T13359]  ? sock_poll+0x420/0x420
[ 2238.235389][T13359]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2238.240352][T13359]  ? security_file_ioctl+0x7c/0xa0
[ 2238.245483][T13359]  ? sock_poll+0x420/0x420
[ 2238.249919][T13359]  __se_sys_ioctl+0xfa/0x170
[ 2238.254516][T13359]  do_syscall_64+0x4c/0xa0
[ 2238.258928][T13359]  ? clear_bhb_loop+0x60/0xb0
[ 2238.263601][T13359]  ? clear_bhb_loop+0x60/0xb0
[ 2238.268272][T13359]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2238.274159][T13359] RIP: 0033:0x7f9a8499de99
[ 2238.278566][T13359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2238.298173][T13359] RSP: 002b:00007f9a857d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2238.306587][T13359] RAX: ffffffffffffffda RBX: 00007f9a84c25fa0 RCX: 00007f9a8499de99
[ 2238.314556][T13359] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000b
[ 2238.322528][T13359] RBP: 00007f9a857d7090 R08: 0000000000000000 R09: 0000000000000000
[ 2238.330495][T13359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2238.338460][T13359] R13: 00007f9a84c26038 R14: 00007f9a84c25fa0 R15: 00007ffd77eb0258
[ 2238.346441][T13359]  </TASK>
[ 2239.785146][T13364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13434'.
[ 2239.915735][T13367] FAULT_INJECTION: forcing a failure.
[ 2239.915735][T13367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2239.953812][T13367] CPU: 0 PID: 13367 Comm: syz.2.13435 Not tainted syzkaller #0
[ 2239.961432][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2239.971516][T13367] Call Trace:
[ 2239.974826][T13367]  <TASK>
[ 2239.977775][T13367]  dump_stack_lvl+0x188/0x24e
[ 2239.982492][T13367]  ? show_regs_print_info+0x12/0x12
[ 2239.987718][T13367]  ? load_image+0x410/0x410
[ 2239.992227][T13367]  ? __lock_acquire+0x7c40/0x7c40
[ 2239.992256][T13367]  ? snprintf+0xe5/0x140
[ 2239.992276][T13367]  should_fail_ex+0x390/0x4c0
[ 2239.992303][T13367]  _copy_to_user+0x2c/0x130
[ 2239.992324][T13367]  simple_read_from_buffer+0xe3/0x150
[ 2239.992348][T13367]  proc_fail_nth_read+0x1a6/0x220
[ 2239.992372][T13367]  ? proc_fault_inject_write+0x310/0x310
[ 2239.992396][T13367]  ? fsnotify_perm+0x248/0x550
[ 2239.992416][T13367]  ? proc_fault_inject_write+0x310/0x310
[ 2239.992436][T13367]  vfs_read+0x2db/0x960
[ 2239.992466][T13367]  ? kernel_read+0x1e0/0x1e0
[ 2239.992492][T13367]  ? __fget_files+0x28/0x460
[ 2240.050624][T13367]  ? __fget_files+0x3fc/0x460
[ 2240.055350][T13367]  ? __fdget_pos+0x2ae/0x360
[ 2240.059961][T13367]  ? ksys_read+0x70/0x260
[ 2240.064317][T13367]  ksys_read+0x14d/0x260
[ 2240.068583][T13367]  ? vfs_write+0x9a0/0x9a0
[ 2240.073024][T13367]  ? lockdep_hardirqs_on+0x94/0x140
[ 2240.078241][T13367]  do_syscall_64+0x4c/0xa0
[ 2240.082678][T13367]  ? clear_bhb_loop+0x60/0xb0
[ 2240.087380][T13367]  ? clear_bhb_loop+0x60/0xb0
[ 2240.092089][T13367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2240.098014][T13367] RIP: 0033:0x7f708915e6ce
[ 2240.102450][T13367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2240.122079][T13367] RSP: 002b:00007f7089f9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2240.130522][T13367] RAX: ffffffffffffffda RBX: 00007f7089f9b6c0 RCX: 00007f708915e6ce
[ 2240.138519][T13367] RDX: 000000000000000f RSI: 00007f7089f9b0a0 RDI: 0000000000000004
[ 2240.146512][T13367] RBP: 00007f7089f9b090 R08: 0000000000000000 R09: 0000000000000000
[ 2240.154508][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2240.162497][T13367] R13: 00007f7089426038 R14: 00007f7089425fa0 R15: 00007fffb0e5cf88
[ 2240.170509][T13367]  </TASK>
[ 2240.620393][T13383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13441'.
[ 2240.642618][T13383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2240.767591][T13384] netlink: 'syz.1.13442': attribute type 2 has an invalid length.
[ 2240.790021][T13384] netlink: 'syz.1.13442': attribute type 8 has an invalid length.
[ 2240.810754][T13384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13442'.
[ 2240.934871][T13396] netlink: 'syz.0.13446': attribute type 10 has an invalid length.
[ 2241.164932][T13404] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13449'.
[ 2241.846800][T13411] netlink: 'syz.1.13447': attribute type 29 has an invalid length.
[ 2242.063333][T13411] netlink: 'syz.1.13447': attribute type 29 has an invalid length.
[ 2242.651208][T13421] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13455'.
[ 2242.701437][T13421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2242.831956][T13425] netlink: 'syz.3.13457': attribute type 2 has an invalid length.
[ 2242.856364][T13425] netlink: 'syz.3.13457': attribute type 8 has an invalid length.
[ 2242.874980][T13425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13457'.
[ 2243.700418][T13437] FAULT_INJECTION: forcing a failure.
[ 2243.700418][T13437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2243.774698][T13437] CPU: 0 PID: 13437 Comm: syz.2.13460 Not tainted syzkaller #0
[ 2243.782353][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2243.792424][T13437] Call Trace:
[ 2243.795740][T13437]  <TASK>
[ 2243.798666][T13437]  dump_stack_lvl+0x188/0x24e
[ 2243.803348][T13437]  ? show_regs_print_info+0x12/0x12
[ 2243.808567][T13437]  ? load_image+0x410/0x410
[ 2243.813069][T13437]  ? __lock_acquire+0x7c40/0x7c40
[ 2243.818097][T13437]  should_fail_ex+0x390/0x4c0
[ 2243.822778][T13437]  _copy_from_user+0x2c/0x170
[ 2243.827453][T13437]  __sys_bpf+0x2ea/0x780
[ 2243.831697][T13437]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2243.837080][T13437]  ? lock_chain_count+0x20/0x20
[ 2243.841941][T13437]  __x64_sys_bpf+0x78/0x90
[ 2243.846358][T13437]  do_syscall_64+0x4c/0xa0
[ 2243.850771][T13437]  ? clear_bhb_loop+0x60/0xb0
[ 2243.855443][T13437]  ? clear_bhb_loop+0x60/0xb0
[ 2243.860119][T13437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2243.866015][T13437] RIP: 0033:0x7f708919de99
[ 2243.870426][T13437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2243.890025][T13437] RSP: 002b:00007f7089f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2243.898434][T13437] RAX: ffffffffffffffda RBX: 00007f7089425fa0 RCX: 00007f708919de99
[ 2243.906400][T13437] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 2243.914368][T13437] RBP: 00007f7089f9b090 R08: 0000000000000000 R09: 0000000000000000
[ 2243.922334][T13437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2243.930321][T13437] R13: 00007f7089426038 R14: 00007f7089425fa0 R15: 00007fffb0e5cf88
[ 2243.938328][T13437]  </TASK>
[ 2244.010158][T13446] netlink: 'syz.1.13462': attribute type 10 has an invalid length.
[ 2244.157331][T13441] netlink: 'syz.3.13461': attribute type 10 has an invalid length.
[ 2244.224000][T13441] team0: Device ipvlan1 failed to register rx_handler
[ 2244.551614][T13456] sctp: [Deprecated]: syz.1.13465 (pid 13456) Use of int in maxseg socket option.
[ 2244.551614][T13456] Use struct sctp_assoc_value instead
[ 2244.828670][T13458] netlink: 'syz.2.13464': attribute type 2 has an invalid length.
[ 2244.843632][T13455] delete_channel: no stack
[ 2244.845990][T13458] netlink: 'syz.2.13464': attribute type 8 has an invalid length.
[ 2244.856466][T13458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13464'.
[ 2246.990672][T13470] FAULT_INJECTION: forcing a failure.
[ 2246.990672][T13470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2246.992940][T13469] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13469'.
[ 2247.022252][T13469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2247.034257][T13470] CPU: 0 PID: 13470 Comm: syz.2.13470 Not tainted syzkaller #0
[ 2247.044978][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2247.055049][T13470] Call Trace:
[ 2247.058358][T13470]  <TASK>
[ 2247.061297][T13470]  dump_stack_lvl+0x188/0x24e
[ 2247.065992][T13470]  ? show_regs_print_info+0x12/0x12
[ 2247.071196][T13470]  ? load_image+0x410/0x410
[ 2247.075711][T13470]  ? __lock_acquire+0x7c40/0x7c40
[ 2247.080739][T13470]  ? netdev_refcnt_read+0x50/0x50
[ 2247.085775][T13470]  should_fail_ex+0x390/0x4c0
[ 2247.090476][T13470]  _copy_to_user+0x2c/0x130
[ 2247.094998][T13470]  dev_ethtool+0x1136/0x12f0
[ 2247.099611][T13470]  ? ethtool_get_module_eeprom_call+0x170/0x170
[ 2247.105877][T13470]  ? __lock_acquire+0x7c40/0x7c40
[ 2247.110909][T13470]  ? __kmem_cache_free+0xb6/0x200
[ 2247.115948][T13470]  ? full_name_hash+0x8e/0xe0
[ 2247.120645][T13470]  ? dev_load+0x1d/0x1e0
[ 2247.124906][T13470]  ? dev_load+0x1d/0x1e0
[ 2247.129165][T13470]  dev_ioctl+0x474/0xe80
[ 2247.133426][T13470]  sock_do_ioctl+0x245/0x320
[ 2247.138032][T13470]  ? sock_show_fdinfo+0xb0/0xb0
[ 2247.142907][T13470]  sock_ioctl+0x48a/0x700
[ 2247.147247][T13470]  ? sock_poll+0x420/0x420
[ 2247.151688][T13470]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2247.156630][T13470]  ? security_file_ioctl+0x7c/0xa0
[ 2247.161749][T13470]  ? sock_poll+0x420/0x420
[ 2247.166200][T13470]  __se_sys_ioctl+0xfa/0x170
[ 2247.170804][T13470]  do_syscall_64+0x4c/0xa0
[ 2247.175228][T13470]  ? clear_bhb_loop+0x60/0xb0
[ 2247.179914][T13470]  ? clear_bhb_loop+0x60/0xb0
[ 2247.184606][T13470]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2247.190506][T13470] RIP: 0033:0x7f708919de99
[ 2247.194925][T13470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2247.214570][T13470] RSP: 002b:00007f7089f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2247.223003][T13470] RAX: ffffffffffffffda RBX: 00007f7089425fa0 RCX: 00007f708919de99
[ 2247.230988][T13470] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[ 2247.238971][T13470] RBP: 00007f7089f9b090 R08: 0000000000000000 R09: 0000000000000000
[ 2247.246949][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2247.254924][T13470] R13: 00007f7089426038 R14: 00007f7089425fa0 R15: 00007fffb0e5cf88
[ 2247.262941][T13470]  </TASK>
[ 2249.531205][T13477] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13482'.
[ 2249.542759][T13477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2249.563309][T13480] netlink: 'syz.2.13472': attribute type 2 has an invalid length.
[ 2249.572776][T13480] netlink: 'syz.2.13472': attribute type 8 has an invalid length.
[ 2249.605878][T13480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13472'.
[ 2249.658299][T13493] netlink: 'syz.1.13475': attribute type 39 has an invalid length.
[ 2249.760572][T13498] FAULT_INJECTION: forcing a failure.
[ 2249.760572][T13498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2249.784619][T13498] CPU: 1 PID: 13498 Comm: syz.0.13488 Not tainted syzkaller #0
[ 2249.792235][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2249.802330][T13498] Call Trace:
[ 2249.805640][T13498]  <TASK>
[ 2249.808600][T13498]  dump_stack_lvl+0x188/0x24e
[ 2249.813330][T13498]  ? show_regs_print_info+0x12/0x12
[ 2249.818569][T13498]  ? load_image+0x410/0x410
[ 2249.823105][T13498]  ? __lock_acquire+0x7c40/0x7c40
[ 2249.828177][T13498]  should_fail_ex+0x390/0x4c0
[ 2249.832911][T13498]  _copy_from_user+0x2c/0x170
[ 2249.837633][T13498]  bpf_prog_test_run_skb+0x263/0x18e0
[ 2249.843033][T13498]  ? __fget_files+0x28/0x460
[ 2249.847649][T13498]  ? __fget_files+0x3fc/0x460
[ 2249.852401][T13498]  ? cpu_online+0xa0/0xa0
[ 2249.856774][T13498]  bpf_prog_test_run+0x31c/0x390
[ 2249.861756][T13498]  __sys_bpf+0x62b/0x780
[ 2249.866025][T13498]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2249.871481][T13498]  ? lock_chain_count+0x20/0x20
[ 2249.876419][T13498]  __x64_sys_bpf+0x78/0x90
[ 2249.880878][T13498]  do_syscall_64+0x4c/0xa0
[ 2249.885343][T13498]  ? clear_bhb_loop+0x60/0xb0
[ 2249.890054][T13498]  ? clear_bhb_loop+0x60/0xb0
[ 2249.894771][T13498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2249.900701][T13498] RIP: 0033:0x7fa4d399de99
[ 2249.905156][T13498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2249.924803][T13498] RSP: 002b:00007fa4d48d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2249.933265][T13498] RAX: ffffffffffffffda RBX: 00007fa4d3c25fa0 RCX: 00007fa4d399de99
[ 2249.941270][T13498] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 2249.949272][T13498] RBP: 00007fa4d48d0090 R08: 0000000000000000 R09: 0000000000000000
[ 2249.957276][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2249.965280][T13498] R13: 00007fa4d3c26038 R14: 00007fa4d3c25fa0 R15: 00007ffe591de228
[ 2249.973339][T13498]  </TASK>
[ 2250.010000][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2250.035471][T13494] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2250.083501][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2250.097313][T13494] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2250.163131][T13499] netlink: 'syz.2.13476': attribute type 10 has an invalid length.
[ 2250.203719][T13503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13477'.
[ 2250.737715][T13521] netlink: 'syz.1.13480': attribute type 10 has an invalid length.
[ 2250.811998][T13521] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[ 2250.945599][T13522] netlink: 'syz.3.13481': attribute type 2 has an invalid length.
[ 2250.956403][T13522] netlink: 'syz.3.13481': attribute type 8 has an invalid length.
[ 2250.978124][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13481'.
[ 2250.981154][T13527] sctp: [Deprecated]: syz.4.13484 (pid 13527) Use of int in maxseg socket option.
[ 2250.981154][T13527] Use struct sctp_assoc_value instead
[ 2251.749445][T13523] delete_channel: no stack
[ 2253.149489][T13532] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13487'.
[ 2253.178115][T13532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2253.280759][T13541] netlink: 'syz.0.13486': attribute type 28 has an invalid length.
[ 2254.439640][T13556] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13496'.
[ 2254.504667][T13550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13494'.
[ 2254.608226][T13557] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13495'.
[ 2254.656815][T13564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13497'.
[ 2254.948848][T13576] netlink: 'syz.0.13501': attribute type 2 has an invalid length.
[ 2254.996823][T13576] netlink: 'syz.0.13501': attribute type 8 has an invalid length.
[ 2255.046700][T13576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13501'.
[ 2257.391313][T13594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13506'.
[ 2257.438893][T13596] sctp: [Deprecated]: syz.0.13503 (pid 13596) Use of int in maxseg socket option.
[ 2257.438893][T13596] Use struct sctp_assoc_value instead
[ 2257.595627][T13599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13508'.
[ 2257.644237][T13595] delete_channel: no stack
[ 2257.740472][T13603] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13509'.
[ 2257.756498][T13603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2257.835729][T13606] sctp: [Deprecated]: syz.0.13510 (pid 13606) Use of int in maxseg socket option.
[ 2257.835729][T13606] Use struct sctp_assoc_value instead
[ 2257.915092][T13608] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13511'.
[ 2257.925977][T13605] delete_channel: no stack
[ 2257.990965][T13611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13512'.
[ 2258.049362][T13613] netlink: 'syz.2.13513': attribute type 2 has an invalid length.
[ 2258.062388][T13613] netlink: 'syz.2.13513': attribute type 8 has an invalid length.
[ 2258.070968][T13613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13513'.
[ 2258.153266][T13617] netlink: 'syz.0.13514': attribute type 39 has an invalid length.
[ 2258.303401][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2258.319640][T13621] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2258.344376][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2258.396563][T13621] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2259.169449][T13639] sctp: [Deprecated]: syz.4.13520 (pid 13639) Use of int in maxseg socket option.
[ 2259.169449][T13639] Use struct sctp_assoc_value instead
[ 2259.929213][T13637] delete_channel: no stack
[ 2261.185753][T13634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13519'.
[ 2261.433160][T13642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13522'.
[ 2261.478372][T13649] FAULT_INJECTION: forcing a failure.
[ 2261.478372][T13649] name failslab, interval 1, probability 0, space 0, times 0
[ 2261.525343][T13647] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13525'.
[ 2261.544468][T13649] CPU: 0 PID: 13649 Comm: syz.2.13521 Not tainted syzkaller #0
[ 2261.552060][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2261.562122][T13649] Call Trace:
[ 2261.565402][T13649]  <TASK>
[ 2261.568333][T13649]  dump_stack_lvl+0x188/0x24e
[ 2261.573068][T13649]  ? show_regs_print_info+0x12/0x12
[ 2261.578264][T13649]  ? load_image+0x410/0x410
[ 2261.582765][T13649]  ? __might_sleep+0xd0/0xd0
[ 2261.587348][T13649]  ? __lock_acquire+0x7c40/0x7c40
[ 2261.592383][T13649]  should_fail_ex+0x390/0x4c0
[ 2261.597067][T13649]  should_failslab+0x5/0x20
[ 2261.601586][T13649]  slab_pre_alloc_hook+0x59/0x300
[ 2261.606608][T13649]  ? __get_vm_area_node+0x122/0x330
[ 2261.611804][T13649]  __kmem_cache_alloc_node+0x4f/0x270
[ 2261.617175][T13649]  ? __get_vm_area_node+0x122/0x330
[ 2261.622367][T13649]  kmalloc_node_trace+0x22/0xe0
[ 2261.627223][T13649]  __get_vm_area_node+0x122/0x330
[ 2261.632272][T13649]  __vmalloc_node_range+0x357/0x1380
[ 2261.637554][T13649]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2261.643097][T13649]  ? perf_trace_preemptirq_template+0x268/0x320
[ 2261.649369][T13649]  ? rcu_is_watching+0x11/0xa0
[ 2261.654138][T13649]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2261.660294][T13649]  ? lockdep_hardirqs_on+0x94/0x140
[ 2261.665749][T13649]  ? free_vm_area+0x50/0x50
[ 2261.670252][T13649]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2261.676414][T13649]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2261.681958][T13649]  __vmalloc+0x76/0x80
[ 2261.686023][T13649]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2261.691569][T13649]  bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2261.696936][T13649]  ? bpf_prog_alloc+0x13/0x1b0
[ 2261.701701][T13649]  bpf_prog_alloc+0x1c/0x1b0
[ 2261.706294][T13649]  bpf_prog_load+0x7d4/0x1530
[ 2261.710979][T13649]  ? map_freeze+0x390/0x390
[ 2261.715478][T13649]  ? __might_fault+0xa6/0x120
[ 2261.720162][T13649]  ? __might_fault+0xa6/0x120
[ 2261.724833][T13649]  ? __might_fault+0xc2/0x120
[ 2261.729499][T13649]  ? __might_fault+0xa6/0x120
[ 2261.734173][T13649]  ? bpf_lsm_bpf+0x5/0x10
[ 2261.738495][T13649]  ? security_bpf+0x7a/0xa0
[ 2261.743001][T13649]  __sys_bpf+0x5b8/0x780
[ 2261.747243][T13649]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2261.752627][T13649]  ? lock_chain_count+0x20/0x20
[ 2261.757472][T13649]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2261.763460][T13649]  __x64_sys_bpf+0x78/0x90
[ 2261.767874][T13649]  do_syscall_64+0x4c/0xa0
[ 2261.772286][T13649]  ? clear_bhb_loop+0x60/0xb0
[ 2261.776956][T13649]  ? clear_bhb_loop+0x60/0xb0
[ 2261.781631][T13649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2261.787516][T13649] RIP: 0033:0x7f708919de99
[ 2261.791924][T13649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2261.811522][T13649] RSP: 002b:00007f7089f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2261.819954][T13649] RAX: ffffffffffffffda RBX: 00007f7089425fa0 RCX: 00007f708919de99
[ 2261.827918][T13649] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[ 2261.835883][T13649] RBP: 00007f7089f9b090 R08: 0000000000000000 R09: 0000000000000000
[ 2261.843942][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2261.851904][T13649] R13: 00007f7089426038 R14: 00007f7089425fa0 R15: 00007fffb0e5cf88
[ 2261.859895][T13649]  </TASK>
[ 2261.946090][T13650] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13524'.
[ 2261.955397][T13650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2262.019452][T13649] syz.2.13521: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 2262.038594][T13649] CPU: 0 PID: 13649 Comm: syz.2.13521 Not tainted syzkaller #0
[ 2262.046169][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2262.056237][T13649] Call Trace:
[ 2262.059512][T13649]  <TASK>
[ 2262.062431][T13649]  dump_stack_lvl+0x188/0x24e
[ 2262.067125][T13649]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2262.073529][T13649]  ? show_regs_print_info+0x12/0x12
[ 2262.078720][T13649]  ? load_image+0x410/0x410
[ 2262.083210][T13649]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2262.089632][T13649]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 2262.096123][T13649]  warn_alloc+0x242/0x330
[ 2262.100446][T13649]  ? __get_vm_area_node+0x122/0x330
[ 2262.105630][T13649]  ? zone_watermark_ok_safe+0x270/0x270
[ 2262.111172][T13649]  ? rcu_is_watching+0x11/0xa0
[ 2262.115926][T13649]  ? __get_vm_area_node+0x318/0x330
[ 2262.121115][T13649]  __vmalloc_node_range+0x37c/0x1380
[ 2262.126397][T13649]  ? perf_trace_preemptirq_template+0x268/0x320
[ 2262.132653][T13649]  ? rcu_is_watching+0x11/0xa0
[ 2262.137427][T13649]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2262.143568][T13649]  ? lockdep_hardirqs_on+0x94/0x140
[ 2262.148752][T13649]  ? free_vm_area+0x50/0x50
[ 2262.153242][T13649]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2262.159388][T13649]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2262.164943][T13649]  __vmalloc+0x76/0x80
[ 2262.169017][T13649]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2262.174557][T13649]  bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2262.179919][T13649]  ? bpf_prog_alloc+0x13/0x1b0
[ 2262.184672][T13649]  bpf_prog_alloc+0x1c/0x1b0
[ 2262.189254][T13649]  bpf_prog_load+0x7d4/0x1530
[ 2262.193945][T13649]  ? map_freeze+0x390/0x390
[ 2262.198449][T13649]  ? __might_fault+0xa6/0x120
[ 2262.203159][T13649]  ? __might_fault+0xa6/0x120
[ 2262.207839][T13649]  ? __might_fault+0xc2/0x120
[ 2262.212501][T13649]  ? __might_fault+0xa6/0x120
[ 2262.217165][T13649]  ? bpf_lsm_bpf+0x5/0x10
[ 2262.221480][T13649]  ? security_bpf+0x7a/0xa0
[ 2262.225972][T13649]  __sys_bpf+0x5b8/0x780
[ 2262.230204][T13649]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2262.235568][T13649]  ? lock_chain_count+0x20/0x20
[ 2262.240407][T13649]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2262.246377][T13649]  __x64_sys_bpf+0x78/0x90
[ 2262.250801][T13649]  do_syscall_64+0x4c/0xa0
[ 2262.255213][T13649]  ? clear_bhb_loop+0x60/0xb0
[ 2262.259897][T13649]  ? clear_bhb_loop+0x60/0xb0
[ 2262.264570][T13649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2262.270478][T13649] RIP: 0033:0x7f708919de99
[ 2262.274919][T13649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2262.294510][T13649] RSP: 002b:00007f7089f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2262.302928][T13649] RAX: ffffffffffffffda RBX: 00007f7089425fa0 RCX: 00007f708919de99
[ 2262.310892][T13649] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[ 2262.318856][T13649] RBP: 00007f7089f9b090 R08: 0000000000000000 R09: 0000000000000000
[ 2262.326826][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2262.334787][T13649] R13: 00007f7089426038 R14: 00007f7089425fa0 R15: 00007fffb0e5cf88
[ 2262.342759][T13649]  </TASK>
[ 2262.370293][T13649] Mem-Info:
[ 2262.373056][T13653] sctp: [Deprecated]: syz.3.13526 (pid 13653) Use of int in maxseg socket option.
[ 2262.373056][T13653] Use struct sctp_assoc_value instead
[ 2262.373446][T13649] active_anon:6841 inactive_anon:0 isolated_anon:0
[ 2262.373446][T13649]  active_file:21590 inactive_file:40837 isolated_file:0
[ 2262.373446][T13649]  unevictable:768 dirty:135 writeback:0
[ 2262.373446][T13649]  slab_reclaimable:23370 slab_unreclaimable:108904
[ 2262.373446][T13649]  mapped:30250 shmem:1361 pagetables:611
[ 2262.373446][T13649]  sec_pagetables:0 bounce:0
[ 2262.373446][T13649]  kernel_misc_reclaimable:0
[ 2262.373446][T13649]  free:1302537 free_pcp:6799 free_cma:0
[ 2262.443870][T13649] Node 0 active_anon:27364kB inactive_anon:0kB active_file:86360kB inactive_file:163148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121000kB dirty:536kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10004kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no
[ 2262.451328][T13652] delete_channel: no stack
[ 2262.505568][T13649] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2262.521365][T13658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13527'.
[ 2262.555427][T13656] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13537'.
[ 2262.572519][T13649] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2262.650228][T13649] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 2262.657983][T13649] Node 0 DMA32 free:1287868kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27364kB inactive_anon:0kB active_file:86360kB inactive_file:163148kB unevictable:1536kB writepending:536kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:19352kB local_pcp:3380kB free_cma:0kB
[ 2262.723885][T13649] lowmem_reserve[]: 0 0 1 1 1
[ 2262.740958][T13649] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[ 2262.841388][T13649] lowmem_reserve[]: 0 0 0 0 0
[ 2262.934499][T13649] Node 1 Normal free:3907156kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9536kB local_pcp:0kB free_cma:0kB
[ 2263.035959][T13649] lowmem_reserve[]: 0 0 0 0 0
[ 2263.040744][T13649] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2263.057136][T13649] Node 0 DMA32: 3596*4kB (UME) 2678*8kB (UME) 2406*16kB (UME) 4876*32kB (UME) 1094*64kB (UME) 671*128kB (UME) 169*256kB (UM) 164*512kB (UM) 234*1024kB (UME) 3*2048kB (UME) 129*4096kB (UM) = 1287616kB
[ 2263.080679][T13649] Node 0 Normal: 5*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 2263.095137][T13649] Node 1 Normal: 271*4kB (UME) 53*8kB (UE) 35*16kB (UME) 172*32kB (UME) 79*64kB (UME) 30*128kB (UME) 12*256kB (UME) 3*512kB (UM) 1*1024kB (E) 3*2048kB (UE) 947*4096kB (M) = 3907156kB
[ 2263.119238][T13649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2263.136978][T13649] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2263.158819][T13649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2263.173617][T13649] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2263.183219][T13649] 63788 total pagecache pages
[ 2263.201564][T13649] 0 pages in swap cache
[ 2263.219642][T13673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13533'.
[ 2263.235036][T13649] Free swap  = 124996kB
[ 2263.241443][T13649] Total swap = 124996kB
[ 2263.245693][T13649] 2097051 pages RAM
[ 2263.253988][T13649] 0 pages HighMem/MovableOnly
[ 2263.270062][T13649] 415222 pages reserved
[ 2263.291164][T13649] 0 pages cma reserved
[ 2263.476584][T13677] sctp: [Deprecated]: syz.0.13535 (pid 13677) Use of int in maxseg socket option.
[ 2263.476584][T13677] Use struct sctp_assoc_value instead
[ 2263.636923][T13675] delete_channel: no stack
[ 2266.054331][T13690] sctp: [Deprecated]: syz.1.13539 (pid 13690) Use of int in maxseg socket option.
[ 2266.054331][T13690] Use struct sctp_assoc_value instead
[ 2266.184559][T13692] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13538'.
[ 2266.190698][T13689] delete_channel: no stack
[ 2266.216279][T13691] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13541'.
[ 2267.025158][T13707] FAULT_INJECTION: forcing a failure.
[ 2267.025158][T13707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2267.066572][T13707] CPU: 1 PID: 13707 Comm: syz.4.13546 Not tainted syzkaller #0
[ 2267.074172][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2267.084241][T13707] Call Trace:
[ 2267.087537][T13707]  <TASK>
[ 2267.090477][T13707]  dump_stack_lvl+0x188/0x24e
[ 2267.095175][T13707]  ? show_regs_print_info+0x12/0x12
[ 2267.100389][T13707]  ? load_image+0x410/0x410
[ 2267.104909][T13707]  ? __lock_acquire+0x7c40/0x7c40
[ 2267.109962][T13707]  ? snprintf+0xe5/0x140
[ 2267.114224][T13707]  should_fail_ex+0x390/0x4c0
[ 2267.118921][T13707]  _copy_to_user+0x2c/0x130
[ 2267.123441][T13707]  simple_read_from_buffer+0xe3/0x150
[ 2267.128829][T13707]  proc_fail_nth_read+0x1a6/0x220
[ 2267.133879][T13707]  ? proc_fault_inject_write+0x310/0x310
[ 2267.139529][T13707]  ? fsnotify_perm+0x248/0x550
[ 2267.144309][T13707]  ? proc_fault_inject_write+0x310/0x310
[ 2267.149954][T13707]  vfs_read+0x2db/0x960
[ 2267.154131][T13707]  ? kernel_read+0x1e0/0x1e0
[ 2267.158736][T13707]  ? __fget_files+0x28/0x460
[ 2267.163342][T13707]  ? __fget_files+0x3fc/0x460
[ 2267.168042][T13707]  ? __fdget_pos+0x2ae/0x360
[ 2267.172642][T13707]  ? ksys_read+0x70/0x260
[ 2267.176984][T13707]  ksys_read+0x14d/0x260
[ 2267.181245][T13707]  ? vfs_write+0x9a0/0x9a0
[ 2267.185682][T13707]  ? lockdep_hardirqs_on+0x94/0x140
[ 2267.190896][T13707]  do_syscall_64+0x4c/0xa0
[ 2267.195337][T13707]  ? clear_bhb_loop+0x60/0xb0
[ 2267.200026][T13707]  ? clear_bhb_loop+0x60/0xb0
[ 2267.204713][T13707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2267.210614][T13707] RIP: 0033:0x7fc1aff5e6ce
[ 2267.215035][T13707] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2267.234654][T13707] RSP: 002b:00007fc1b0d8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2267.243082][T13707] RAX: ffffffffffffffda RBX: 00007fc1b0d8d6c0 RCX: 00007fc1aff5e6ce
[ 2267.251083][T13707] RDX: 000000000000000f RSI: 00007fc1b0d8d0a0 RDI: 0000000000000004
[ 2267.259069][T13707] RBP: 00007fc1b0d8d090 R08: 0000000000000000 R09: 0000000000000000
[ 2267.267055][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2267.275039][T13707] R13: 00007fc1b0226038 R14: 00007fc1b0225fa0 R15: 00007ffd4ad54ca8
[ 2267.283042][T13707]  </TASK>
[ 2268.191567][T13729] sctp: [Deprecated]: syz.2.13552 (pid 13729) Use of int in maxseg socket option.
[ 2268.191567][T13729] Use struct sctp_assoc_value instead
[ 2268.687219][T13728] delete_channel: no stack
[ 2269.013911][T13730] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13536'.
[ 2269.058693][T13730] netlink: 'syz.3.13536': attribute type 4 has an invalid length.
[ 2269.085157][T13739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13555'.
[ 2269.121693][T13740] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13554'.
[ 2269.369748][T13746] netlink: 'syz.2.13558': attribute type 2 has an invalid length.
[ 2269.382701][T13746] netlink: 'syz.2.13558': attribute type 8 has an invalid length.
[ 2269.396186][T13746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13558'.
[ 2269.554887][T13755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13562'.
[ 2269.725607][T13759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13563'.
[ 2270.606135][T13761] delete_channel: no stack
[ 2271.520124][T13764] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13564'.
[ 2271.530299][T13764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2271.549316][T13768] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13567'.
[ 2271.585825][T13768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2271.735587][T13778] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13569'.
[ 2272.147473][T13790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13575'.
[ 2272.208099][T13793] netlink: 'syz.3.13573': attribute type 2 has an invalid length.
[ 2272.220839][T13793] netlink: 'syz.3.13573': attribute type 8 has an invalid length.
[ 2272.231095][T13793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13573'.
[ 2272.387751][T13795] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13577'.
[ 2272.504333][T13798] delete_channel: no stack
[ 2272.664138][T13808] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13580'.
[ 2272.673757][T13808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2273.019782][T13823] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13586'.
[ 2273.154635][T13826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13587'.
[ 2273.244843][T13828] netlink: 'syz.3.13588': attribute type 2 has an invalid length.
[ 2273.278485][T13828] netlink: 'syz.3.13588': attribute type 8 has an invalid length.
[ 2273.296823][T13828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13588'.
[ 2273.525149][T13837] delete_channel: no stack
[ 2274.065040][T13858] openvswitch: netlink: Flow key attr not present in new flow.
[ 2275.333198][T13848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2275.778426][T13876] netlink: 'syz.0.13604': attribute type 2 has an invalid length.
[ 2275.815870][T13876] netlink: 'syz.0.13604': attribute type 8 has an invalid length.
[ 2278.945116][T13881] __nla_validate_parse: 6 callbacks suppressed
[ 2278.945151][T13881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13605'.
[ 2278.981409][T13884] delete_channel: no stack
[ 2279.020654][T13888] netlink: 'syz.3.13609': attribute type 39 has an invalid length.
[ 2279.162387][T13895] netlink: 'syz.1.13611': attribute type 10 has an invalid length.
[ 2279.372638][T13893] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13612'.
[ 2280.054031][T13917] netlink: 'syz.2.13617': attribute type 2 has an invalid length.
[ 2280.066797][T13917] netlink: 'syz.2.13617': attribute type 8 has an invalid length.
[ 2280.087758][T13917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13617'.
[ 2282.885090][T13927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13623'.
[ 2282.950693][T13929] delete_channel: no stack
[ 2283.079086][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.085506][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.121966][T13939] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13625'.
[ 2283.188993][T13940] netlink: 'syz.0.13624': attribute type 39 has an invalid length.
[ 2285.585347][T13946] netlink: 'syz.4.13628': attribute type 10 has an invalid length.
[ 2285.613431][T13944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13630'.
[ 2285.644907][T13949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13626'.
[ 2285.680391][T13948] netlink: 'syz.1.13629': attribute type 2 has an invalid length.
[ 2285.719400][T13948] netlink: 'syz.1.13629': attribute type 8 has an invalid length.
[ 2285.746062][T13948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13629'.
[ 2285.859104][T13954] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13632'.
[ 2285.970286][T13954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2286.005702][T13954] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 2286.017126][T13954] bond0 (unregistering): Released all slaves
[ 2286.027124][T13955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13631'.
[ 2286.080498][T13967] netlink: 'syz.4.13636': attribute type 13 has an invalid length.
[ 2286.195122][T13967] netlink: 24643 bytes leftover after parsing attributes in process `syz.4.13636'.
[ 2286.815370][T13978] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13638'.
[ 2287.173574][T13983] netlink: 'syz.2.13640': attribute type 39 has an invalid length.
[ 2287.295619][T13979] delete_channel: no stack
[ 2287.313143][T13989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13642'.
[ 2289.018438][T14004] netlink: 'syz.2.13645': attribute type 10 has an invalid length.
[ 2289.098786][T14005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13655'.
[ 2289.275876][T14011] netlink: 'syz.4.13646': attribute type 2 has an invalid length.
[ 2289.283739][T14011] netlink: 'syz.4.13646': attribute type 8 has an invalid length.
[ 2289.305852][T14011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13646'.
[ 2290.438830][T14030] netlink: 'syz.2.13652': attribute type 13 has an invalid length.
[ 2293.605666][T14039] netlink: 'syz.4.13659': attribute type 39 has an invalid length.
[ 2293.795305][T14049] __nla_validate_parse: 4 callbacks suppressed
[ 2293.795341][T14049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13660'.
[ 2294.388578][T14062] netlink: 'syz.4.13663': attribute type 2 has an invalid length.
[ 2294.396889][T14062] netlink: 'syz.4.13663': attribute type 8 has an invalid length.
[ 2294.404899][T14062] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13663'.
[ 2294.548589][T14064] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13664'.
[ 2294.589802][T14066] FAULT_INJECTION: forcing a failure.
[ 2294.589802][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2294.660672][T14066] CPU: 0 PID: 14066 Comm: syz.3.13665 Not tainted syzkaller #0
[ 2294.668310][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2294.678397][T14066] Call Trace:
[ 2294.681715][T14066]  <TASK>
[ 2294.684682][T14066]  dump_stack_lvl+0x188/0x24e
[ 2294.689420][T14066]  ? show_regs_print_info+0x12/0x12
[ 2294.694666][T14066]  ? load_image+0x410/0x410
[ 2294.699216][T14066]  ? __lock_acquire+0x7c40/0x7c40
[ 2294.704344][T14066]  should_fail_ex+0x390/0x4c0
[ 2294.709083][T14066]  _copy_from_user+0x2c/0x170
[ 2294.713809][T14066]  __sys_bpf+0x2ea/0x780
[ 2294.718109][T14066]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2294.723666][T14066]  ? lock_chain_count+0x20/0x20
[ 2294.728591][T14066]  __x64_sys_bpf+0x78/0x90
[ 2294.733055][T14066]  do_syscall_64+0x4c/0xa0
[ 2294.737513][T14066]  ? clear_bhb_loop+0x60/0xb0
[ 2294.742225][T14066]  ? clear_bhb_loop+0x60/0xb0
[ 2294.746941][T14066]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2294.752866][T14066] RIP: 0033:0x7f6a6379de99
[ 2294.757316][T14066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2294.776959][T14066] RSP: 002b:00007f6a64614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2294.785505][T14066] RAX: ffffffffffffffda RBX: 00007f6a63a25fa0 RCX: 00007f6a6379de99
[ 2294.793509][T14066] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[ 2294.801512][T14066] RBP: 00007f6a64614090 R08: 0000000000000000 R09: 0000000000000000
[ 2294.809517][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2294.817525][T14066] R13: 00007f6a63a26038 R14: 00007f6a63a25fa0 R15: 00007ffd1ccf6f48
[ 2294.825582][T14066]  </TASK>
[ 2294.919973][T14070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13666'.
[ 2294.980253][T14073] netlink: 'syz.0.13668': attribute type 13 has an invalid length.
[ 2295.005874][T14073] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.13668'.
[ 2295.940718][T14085] netlink: 'syz.1.13674': attribute type 39 has an invalid length.
[ 2296.338701][T14093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13675'.
[ 2297.728922][T14105] netlink: 'syz.1.13678': attribute type 2 has an invalid length.
[ 2297.743645][T14105] netlink: 'syz.1.13678': attribute type 8 has an invalid length.
[ 2297.762468][T14105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13678'.
[ 2299.210038][T14111] sctp: [Deprecated]: syz.3.13680 (pid 14111) Use of int in maxseg socket option.
[ 2299.210038][T14111] Use struct sctp_assoc_value instead
[ 2299.319744][T14110] delete_channel: no stack
[ 2299.585287][T14124] netlink: 'syz.0.13685': attribute type 39 has an invalid length.
[ 2300.190402][T14130] FAULT_INJECTION: forcing a failure.
[ 2300.190402][T14130] name failslab, interval 1, probability 0, space 0, times 0
[ 2300.232916][T14130] CPU: 1 PID: 14130 Comm: syz.4.13687 Not tainted syzkaller #0
[ 2300.240532][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2300.250609][T14130] Call Trace:
[ 2300.253913][T14130]  <TASK>
[ 2300.256868][T14130]  dump_stack_lvl+0x188/0x24e
[ 2300.261573][T14130]  ? show_regs_print_info+0x12/0x12
[ 2300.266799][T14130]  ? load_image+0x410/0x410
[ 2300.271323][T14130]  ? __might_sleep+0xd0/0xd0
[ 2300.275936][T14130]  ? __lock_acquire+0x7c40/0x7c40
[ 2300.280986][T14130]  should_fail_ex+0x390/0x4c0
[ 2300.285686][T14130]  should_failslab+0x5/0x20
[ 2300.290201][T14130]  slab_pre_alloc_hook+0x59/0x300
[ 2300.295273][T14130]  kmem_cache_alloc_node+0x5a/0x310
[ 2300.300507][T14130]  ? __alloc_skb+0xf9/0x7d0
[ 2300.305043][T14130]  __alloc_skb+0xf9/0x7d0
[ 2300.309401][T14130]  alloc_skb_with_frags+0xa7/0x710
[ 2300.314544][T14130]  sock_alloc_send_pskb+0x87f/0x9a0
[ 2300.319782][T14130]  ? sock_kzfree_s+0x50/0x50
[ 2300.324392][T14130]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 2300.330310][T14130]  ? lockdep_hardirqs_on+0x94/0x140
[ 2300.335538][T14130]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2300.341449][T14130]  ? _raw_spin_unlock+0x40/0x40
[ 2300.346324][T14130]  __ip_append_data+0x2603/0x38d0
[ 2300.351377][T14130]  ? lock_chain_count+0x20/0x20
[ 2300.356259][T14130]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[ 2300.361127][T14130]  ? ip_route_output_key_hash+0x139/0x330
[ 2300.366867][T14130]  ? ip_setup_cork+0x850/0x850
[ 2300.371658][T14130]  ? ip_setup_cork+0x528/0x850
[ 2300.376432][T14130]  ip_make_skb+0x227/0x440
[ 2300.380860][T14130]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[ 2300.385717][T14130]  ? ip_flush_pending_frames+0x250/0x250
[ 2300.391376][T14130]  udp_sendmsg+0x1b04/0x23d0
[ 2300.395982][T14130]  ? release_sock+0x2b/0x1b0
[ 2300.400588][T14130]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[ 2300.405452][T14130]  ? udp_cmsg_send+0x350/0x350
[ 2300.410665][T14130]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2300.416656][T14130]  ? lock_chain_count+0x20/0x20
[ 2300.421526][T14130]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2300.426912][T14130]  ? _local_bh_enable+0xa0/0xa0
[ 2300.431769][T14130]  ? inet_sendmsg+0x109/0x2a0
[ 2300.436454][T14130]  ? inet_sendmsg+0x109/0x2a0
[ 2300.441141][T14130]  ? inet_send_prepare+0x250/0x250
[ 2300.446260][T14130]  ____sys_sendmsg+0x5ed/0x9a0
[ 2300.451031][T14130]  ? __lock_acquire+0x7c40/0x7c40
[ 2300.456077][T14130]  ? __sys_sendmsg_sock+0x30/0x30
[ 2300.461108][T14130]  ? __import_iovec+0x306/0x510
[ 2300.465977][T14130]  ? import_iovec+0x6f/0xa0
[ 2300.470488][T14130]  ___sys_sendmsg+0x2a2/0x360
[ 2300.475207][T14130]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2300.480004][T14130]  ? __lock_acquire+0x7c40/0x7c40
[ 2300.485055][T14130]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2300.489914][T14130]  ? __x64_sys_sendmsg+0x80/0x80
[ 2300.494872][T14130]  ? lockdep_hardirqs_on+0x94/0x140
[ 2300.500074][T14130]  do_syscall_64+0x4c/0xa0
[ 2300.504496][T14130]  ? clear_bhb_loop+0x60/0xb0
[ 2300.509178][T14130]  ? clear_bhb_loop+0x60/0xb0
[ 2300.513860][T14130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2300.519770][T14130] RIP: 0033:0x7fc1aff9de99
[ 2300.524190][T14130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2300.543805][T14130] RSP: 002b:00007fc1b0d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2300.552223][T14130] RAX: ffffffffffffffda RBX: 00007fc1b0225fa0 RCX: 00007fc1aff9de99
[ 2300.560198][T14130] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003
[ 2300.568176][T14130] RBP: 00007fc1b0d8d090 R08: 0000000000000000 R09: 0000000000000000
[ 2300.576149][T14130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2300.584137][T14130] R13: 00007fc1b0226038 R14: 00007fc1b0225fa0 R15: 00007ffd4ad54ca8
[ 2300.592123][T14130]  </TASK>
[ 2300.617186][T14138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13691'.
[ 2304.018499][T14154] netlink: 'syz.2.13694': attribute type 2 has an invalid length.
[ 2304.042267][T14154] netlink: 'syz.2.13694': attribute type 8 has an invalid length.
[ 2304.097356][T14154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13694'.
[ 2304.333655][T14165] sctp: [Deprecated]: syz.3.13698 (pid 14165) Use of int in maxseg socket option.
[ 2304.333655][T14165] Use struct sctp_assoc_value instead
[ 2304.417148][T14164] delete_channel: no stack
[ 2304.446410][T14167] netlink: 'syz.1.13699': attribute type 10 has an invalid length.
[ 2304.454359][T14167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13699'.
[ 2304.511325][T14167] device team0 entered promiscuous mode
[ 2304.525339][T14167] device team_slave_1 entered promiscuous mode
[ 2304.544910][T14167] bridge0: port 3(team0) entered blocking state
[ 2304.552411][T14167] bridge0: port 3(team0) entered disabled state
[ 2304.572216][T14170] netlink: 'syz.2.13710': attribute type 2 has an invalid length.
[ 2304.585709][T14170] netlink: 'syz.2.13710': attribute type 8 has an invalid length.
[ 2304.606177][T14170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13710'.
[ 2304.649350][T14172] netlink: 'syz.4.13700': attribute type 39 has an invalid length.
[ 2305.347720][T14187] sctp: [Deprecated]: syz.1.13714 (pid 14187) Use of int in maxseg socket option.
[ 2305.347720][T14187] Use struct sctp_assoc_value instead
[ 2306.116134][T14178] delete_channel: no stack
[ 2308.554233][T14223] netlink: 'syz.1.13716': attribute type 39 has an invalid length.
[ 2308.631957][T14232] netlink: 'syz.2.13717': attribute type 2 has an invalid length.
[ 2308.640048][T14232] netlink: 'syz.2.13717': attribute type 8 has an invalid length.
[ 2308.648064][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13717'.
[ 2309.576546][T14244] sctp: [Deprecated]: syz.3.13720 (pid 14244) Use of int in maxseg socket option.
[ 2309.576546][T14244] Use struct sctp_assoc_value instead
[ 2309.640628][T14242] delete_channel: no stack
[ 2310.056314][T14258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13727'.
[ 2310.274025][T14260] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13728'.
[ 2310.594799][T14269] netlink: 'syz.4.13732': attribute type 10 has an invalid length.
[ 2310.602993][T14269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13732'.
[ 2310.764959][T14275] netlink: 'syz.4.13733': attribute type 2 has an invalid length.
[ 2310.774912][T14277] sctp: [Deprecated]: syz.2.13734 (pid 14277) Use of int in maxseg socket option.
[ 2310.774912][T14277] Use struct sctp_assoc_value instead
[ 2310.793733][T14275] netlink: 'syz.4.13733': attribute type 8 has an invalid length.
[ 2310.806091][T14275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13733'.
[ 2310.922607][T14276] delete_channel: no stack
[ 2313.461034][T14290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13739'.
[ 2313.645571][T14298] netlink: 'syz.0.13740': attribute type 3 has an invalid length.
[ 2313.693729][T14298] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13740'.
[ 2313.857757][T14296] can: request_module (can-proto-0) failed.
[ 2315.953553][T14307] netlink: 'syz.2.13743': attribute type 2 has an invalid length.
[ 2315.965835][T14307] netlink: 'syz.2.13743': attribute type 8 has an invalid length.
[ 2315.973927][T14307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13743'.
[ 2317.848298][T14315] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13745'.
[ 2317.857541][T14315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2317.872805][T14318] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13746'.
[ 2317.882708][T14318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2317.909715][T14319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13744'.
[ 2318.051261][T14328] sctp: [Deprecated]: syz.3.13749 (pid 14328) Use of int in maxseg socket option.
[ 2318.051261][T14328] Use struct sctp_assoc_value instead
[ 2318.862959][T14327] delete_channel: no stack
[ 2318.897009][T14324] netlink: 'syz.2.13747': attribute type 2 has an invalid length.
[ 2318.904986][T14324] netlink: 'syz.2.13747': attribute type 8 has an invalid length.
[ 2318.941959][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13747'.
[ 2319.142351][T14339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13753'.
[ 2321.811866][T14354] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13757'.
[ 2321.828768][T14354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2322.038677][T14365] sctp: [Deprecated]: syz.2.13763 (pid 14365) Use of int in maxseg socket option.
[ 2322.038677][T14365] Use struct sctp_assoc_value instead
[ 2322.868551][T14364] delete_channel: no stack
[ 2325.269540][T14374] FAULT_INJECTION: forcing a failure.
[ 2325.269540][T14374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2325.297401][T14374] CPU: 0 PID: 14374 Comm: syz.1.13764 Not tainted syzkaller #0
[ 2325.304998][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2325.315059][T14374] Call Trace:
[ 2325.318341][T14374]  <TASK>
[ 2325.321278][T14374]  dump_stack_lvl+0x188/0x24e
[ 2325.325985][T14374]  ? show_regs_print_info+0x12/0x12
[ 2325.331200][T14374]  ? load_image+0x410/0x410
[ 2325.335719][T14374]  ? __lock_acquire+0x7c40/0x7c40
[ 2325.340759][T14374]  ? snprintf+0xe5/0x140
[ 2325.345010][T14374]  should_fail_ex+0x390/0x4c0
[ 2325.349702][T14374]  _copy_to_user+0x2c/0x130
[ 2325.354251][T14374]  simple_read_from_buffer+0xe3/0x150
[ 2325.359644][T14374]  proc_fail_nth_read+0x1a6/0x220
[ 2325.364685][T14374]  ? proc_fault_inject_write+0x310/0x310
[ 2325.370332][T14374]  ? fsnotify_perm+0x248/0x550
[ 2325.375121][T14374]  ? proc_fault_inject_write+0x310/0x310
[ 2325.380766][T14374]  vfs_read+0x2db/0x960
[ 2325.384943][T14374]  ? kernel_read+0x1e0/0x1e0
[ 2325.389550][T14374]  ? __fget_files+0x28/0x460
[ 2325.394162][T14374]  ? __fget_files+0x3fc/0x460
[ 2325.398862][T14374]  ? __fdget_pos+0x2ae/0x360
[ 2325.403467][T14374]  ? ksys_read+0x70/0x260
[ 2325.407812][T14374]  ksys_read+0x14d/0x260
[ 2325.412805][T14374]  ? vfs_write+0x9a0/0x9a0
[ 2325.417247][T14374]  ? lockdep_hardirqs_on+0x94/0x140
[ 2325.422465][T14374]  do_syscall_64+0x4c/0xa0
[ 2325.426895][T14374]  ? clear_bhb_loop+0x60/0xb0
[ 2325.431585][T14374]  ? clear_bhb_loop+0x60/0xb0
[ 2325.436280][T14374]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2325.442190][T14374] RIP: 0033:0x7f9a8495e6ce
[ 2325.446615][T14374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2325.466278][T14374] RSP: 002b:00007f9a857d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2325.474708][T14374] RAX: ffffffffffffffda RBX: 00007f9a857d76c0 RCX: 00007f9a8495e6ce
[ 2325.482694][T14374] RDX: 000000000000000f RSI: 00007f9a857d70a0 RDI: 0000000000000004
[ 2325.490682][T14374] RBP: 00007f9a857d7090 R08: 0000000000000000 R09: 0000000000000000
[ 2325.498663][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2325.506643][T14374] R13: 00007f9a84c26038 R14: 00007f9a84c25fa0 R15: 00007ffd77eb0258
[ 2325.514644][T14374]  </TASK>
[ 2327.006361][T14367] netlink: 'syz.4.13762': attribute type 2 has an invalid length.
[ 2327.014478][T14367] netlink: 'syz.4.13762': attribute type 8 has an invalid length.
[ 2327.022883][T14367] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13762'.
[ 2327.148830][T14383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13768'.
[ 2327.323962][T14392] netlink: 'syz.3.13770': attribute type 10 has an invalid length.
[ 2330.582531][T14398] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13773'.
[ 2330.603133][T14398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2330.920184][T14416] sctp: [Deprecated]: syz.0.13779 (pid 14416) Use of int in maxseg socket option.
[ 2330.920184][T14416] Use struct sctp_assoc_value instead
[ 2331.163372][T14414] delete_channel: no stack
[ 2331.745119][T14440] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13786'.
[ 2331.757905][T14440] openvswitch: netlink: Message has 6 unknown bytes.
[ 2333.025807][T14434] netlink: 'syz.2.13782': attribute type 2 has an invalid length.
[ 2333.033838][T14434] netlink: 'syz.2.13782': attribute type 8 has an invalid length.
[ 2333.052699][T14434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13782'.
[ 2333.095375][T14440] netlink: 'syz.0.13786': attribute type 3 has an invalid length.
[ 2336.748499][T14469] FAULT_INJECTION: forcing a failure.
[ 2336.748499][T14469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2336.882009][T14469] CPU: 1 PID: 14469 Comm: syz.0.13797 Not tainted syzkaller #0
[ 2336.889612][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2336.899667][T14469] Call Trace:
[ 2336.902941][T14469]  <TASK>
[ 2336.905886][T14469]  dump_stack_lvl+0x188/0x24e
[ 2336.910566][T14469]  ? show_regs_print_info+0x12/0x12
[ 2336.915764][T14469]  ? load_image+0x410/0x410
[ 2336.920262][T14469]  ? __lock_acquire+0x7c40/0x7c40
[ 2336.925288][T14469]  ? snprintf+0xe5/0x140
[ 2336.929529][T14469]  should_fail_ex+0x390/0x4c0
[ 2336.934212][T14469]  _copy_to_user+0x2c/0x130
[ 2336.938712][T14469]  simple_read_from_buffer+0xe3/0x150
[ 2336.944079][T14469]  proc_fail_nth_read+0x1a6/0x220
[ 2336.949098][T14469]  ? proc_fault_inject_write+0x310/0x310
[ 2336.954728][T14469]  ? fsnotify_perm+0x248/0x550
[ 2336.959490][T14469]  ? proc_fault_inject_write+0x310/0x310
[ 2336.965114][T14469]  vfs_read+0x2db/0x960
[ 2336.969272][T14469]  ? kernel_read+0x1e0/0x1e0
[ 2336.973857][T14469]  ? __fget_files+0x28/0x460
[ 2336.978441][T14469]  ? __fget_files+0x3fc/0x460
[ 2336.983120][T14469]  ? __fdget_pos+0x2ae/0x360
[ 2336.987725][T14469]  ? ksys_read+0x70/0x260
[ 2336.992053][T14469]  ksys_read+0x14d/0x260
[ 2336.996299][T14469]  ? vfs_write+0x9a0/0x9a0
[ 2337.000713][T14469]  ? lockdep_hardirqs_on+0x94/0x140
[ 2337.005907][T14469]  do_syscall_64+0x4c/0xa0
[ 2337.010317][T14469]  ? clear_bhb_loop+0x60/0xb0
[ 2337.014986][T14469]  ? clear_bhb_loop+0x60/0xb0
[ 2337.019658][T14469]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2337.025547][T14469] RIP: 0033:0x7fa4d395e6ce
[ 2337.029954][T14469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2337.049555][T14469] RSP: 002b:00007fa4d48cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2337.057961][T14469] RAX: ffffffffffffffda RBX: 00007fa4d48d06c0 RCX: 00007fa4d395e6ce
[ 2337.065925][T14469] RDX: 000000000000000f RSI: 00007fa4d48d00a0 RDI: 0000000000000009
[ 2337.073887][T14469] RBP: 00007fa4d48d0090 R08: 0000000000000000 R09: 0000000000000000
[ 2337.081850][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2337.089812][T14469] R13: 00007fa4d3c26038 R14: 00007fa4d3c25fa0 R15: 00007ffe591de228
[ 2337.097791][T14469]  </TASK>
[ 2339.222627][T14481] netlink: 'syz.3.13800': attribute type 2 has an invalid length.
[ 2339.230741][T14481] netlink: 'syz.3.13800': attribute type 8 has an invalid length.
[ 2339.238720][T14481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13800'.
[ 2339.250847][T14491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13804'.
[ 2339.606935][T14499] netlink: 'syz.0.13806': attribute type 39 has an invalid length.
[ 2340.430076][T14510] netlink: 'syz.0.13810': attribute type 39 has an invalid length.
[ 2340.648496][T14518] netlink: 'syz.3.13813': attribute type 10 has an invalid length.
[ 2340.694955][T14518] team0: Port device netdevsim0 added
[ 2340.964780][T14523] netlink: 'syz.1.13815': attribute type 2 has an invalid length.
[ 2340.996849][T14523] netlink: 'syz.1.13815': attribute type 8 has an invalid length.
[ 2341.004888][T14523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13815'.
[ 2341.212531][T14534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13819'.
[ 2341.419799][T14540] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13821'.
[ 2344.519748][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.526184][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.962612][T14562] FAULT_INJECTION: forcing a failure.
[ 2344.962612][T14562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2345.032628][T14562] CPU: 1 PID: 14562 Comm: syz.0.13829 Not tainted syzkaller #0
[ 2345.040246][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2345.050339][T14562] Call Trace:
[ 2345.053632][T14562]  <TASK>
[ 2345.056567][T14562]  dump_stack_lvl+0x188/0x24e
[ 2345.061261][T14562]  ? show_regs_print_info+0x12/0x12
[ 2345.066470][T14562]  ? load_image+0x410/0x410
[ 2345.070984][T14562]  ? __might_fault+0xa6/0x120
[ 2345.075669][T14562]  should_fail_ex+0x390/0x4c0
[ 2345.080355][T14562]  copyin+0x1b/0x120
[ 2345.084254][T14562]  _copy_from_iter+0x447/0x1130
[ 2345.089115][T14562]  ? copyout_mc+0x110/0x110
[ 2345.093617][T14562]  ? __virt_addr_valid+0x188/0x540
[ 2345.098734][T14562]  ? __virt_addr_valid+0x188/0x540
[ 2345.103847][T14562]  ? __virt_addr_valid+0x467/0x540
[ 2345.108967][T14562]  ? __phys_addr_symbol+0x2b/0x70
[ 2345.114014][T14562]  ? __check_object_size+0x4f6/0xa70
[ 2345.119301][T14562]  netlink_sendmsg+0x755/0xbd0
[ 2345.124081][T14562]  ? netlink_getsockopt+0x550/0x550
[ 2345.129304][T14562]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2345.134855][T14562]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2345.140135][T14562]  ? security_socket_sendmsg+0x7c/0xa0
[ 2345.145591][T14562]  ? netlink_getsockopt+0x550/0x550
[ 2345.150794][T14562]  ____sys_sendmsg+0x5ed/0x9a0
[ 2345.155576][T14562]  ? __sys_sendmsg_sock+0x30/0x30
[ 2345.160599][T14562]  ? __import_iovec+0x306/0x510
[ 2345.165461][T14562]  ? import_iovec+0x6f/0xa0
[ 2345.169968][T14562]  ___sys_sendmsg+0x2a2/0x360
[ 2345.174654][T14562]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2345.179444][T14562]  ? __lock_acquire+0x7c40/0x7c40
[ 2345.184506][T14562]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2345.189361][T14562]  ? __x64_sys_sendmsg+0x80/0x80
[ 2345.194348][T14562]  ? lockdep_hardirqs_on+0x94/0x140
[ 2345.199572][T14562]  do_syscall_64+0x4c/0xa0
[ 2345.204003][T14562]  ? clear_bhb_loop+0x60/0xb0
[ 2345.208686][T14562]  ? clear_bhb_loop+0x60/0xb0
[ 2345.213374][T14562]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2345.219272][T14562] RIP: 0033:0x7fa4d399de99
[ 2345.223687][T14562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2345.243299][T14562] RSP: 002b:00007fa4d48d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2345.251738][T14562] RAX: ffffffffffffffda RBX: 00007fa4d3c25fa0 RCX: 00007fa4d399de99
[ 2345.259715][T14562] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[ 2345.267683][T14562] RBP: 00007fa4d48d0090 R08: 0000000000000000 R09: 0000000000000000
[ 2345.275653][T14562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2345.283620][T14562] R13: 00007fa4d3c26038 R14: 00007fa4d3c25fa0 R15: 00007ffe591de228
[ 2345.291609][T14562]  </TASK>
[ 2346.873814][T14566] netlink: 'syz.4.13830': attribute type 2 has an invalid length.
[ 2346.883406][T14566] netlink: 'syz.4.13830': attribute type 8 has an invalid length.
[ 2346.891581][T14566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13830'.
[ 2347.078658][T14578] sctp: [Deprecated]: syz.0.13834 (pid 14578) Use of int in maxseg socket option.
[ 2347.078658][T14578] Use struct sctp_assoc_value instead
[ 2347.094104][T14576] netlink: 'syz.2.13833': attribute type 39 has an invalid length.
[ 2347.156697][T14577] delete_channel: no stack
[ 2347.189465][T14581] netlink: 'syz.4.13836': attribute type 10 has an invalid length.
[ 2350.194833][T14593] netlink: 'syz.3.13837': attribute type 21 has an invalid length.
[ 2350.215172][T14593] netlink: 'syz.3.13837': attribute type 6 has an invalid length.
[ 2350.223631][T14593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13837'.
[ 2350.236060][T14602] netlink: 'syz.0.13841': attribute type 39 has an invalid length.
[ 2351.464630][T14630] sctp: [Deprecated]: syz.3.13849 (pid 14630) Use of int in maxseg socket option.
[ 2351.464630][T14630] Use struct sctp_assoc_value instead
[ 2352.293671][T14629] delete_channel: no stack
[ 2352.397200][T14620] netlink: 'syz.4.13846': attribute type 2 has an invalid length.
[ 2352.407147][T14620] netlink: 'syz.4.13846': attribute type 8 has an invalid length.
[ 2352.414977][T14620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13846'.
[ 2352.609385][T14638] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.13853'.
[ 2353.344935][T14646] netlink: 'syz.2.13855': attribute type 39 has an invalid length.
[ 2353.656813][T14638] netlink: 'syz.3.13853': attribute type 10 has an invalid length.
[ 2353.746085][T14638] netlink: 'syz.3.13853': attribute type 25 has an invalid length.
[ 2355.891886][T14672] sctp: [Deprecated]: syz.3.13863 (pid 14672) Use of int in maxseg socket option.
[ 2355.891886][T14672] Use struct sctp_assoc_value instead
[ 2355.938051][T14670] delete_channel: no stack
[ 2355.978957][T14671] netlink: 'syz.0.13861': attribute type 2 has an invalid length.
[ 2355.993063][T14671] netlink: 'syz.0.13861': attribute type 8 has an invalid length.
[ 2356.002416][T14671] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13861'.
[ 2357.243669][T14700] netlink: 'syz.4.13870': attribute type 39 has an invalid length.
[ 2357.579124][T14713] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.13875'.
[ 2357.816181][T14714] netlink: 'syz.1.13873': attribute type 3 has an invalid length.
[ 2357.824209][T14714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13873'.
[ 2358.205970][T14713] netlink: 'syz.4.13875': attribute type 10 has an invalid length.
[ 2358.215468][T14723] sctp: [Deprecated]: syz.0.13876 (pid 14723) Use of int in maxseg socket option.
[ 2358.215468][T14723] Use struct sctp_assoc_value instead
[ 2358.235582][T14713] netlink: 'syz.4.13875': attribute type 25 has an invalid length.
[ 2358.990957][T14720] delete_channel: no stack
[ 2360.702306][T14731] netlink: 'syz.1.13877': attribute type 2 has an invalid length.
[ 2360.710718][T14731] netlink: 'syz.1.13877': attribute type 8 has an invalid length.
[ 2360.725925][T14731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13877'.
[ 2363.984649][T14760] netlink: 'syz.0.13885': attribute type 39 has an invalid length.
[ 2364.301742][T14769] sctp: [Deprecated]: syz.0.13890 (pid 14769) Use of int in maxseg socket option.
[ 2364.301742][T14769] Use struct sctp_assoc_value instead
[ 2365.116321][T14768] delete_channel: no stack
[ 2366.395821][T14756] netlink: 'syz.2.13887': attribute type 39 has an invalid length.
[ 2366.852895][T14783] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.13894'.
[ 2366.874563][T14781] netlink: 'syz.3.13893': attribute type 2 has an invalid length.
[ 2366.900132][T14781] netlink: 'syz.3.13893': attribute type 8 has an invalid length.
[ 2366.964767][T14781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13893'.
[ 2367.467035][T14797] netlink: 'syz.2.13900': attribute type 39 has an invalid length.
[ 2367.527894][T14783] netlink: 'syz.1.13894': attribute type 10 has an invalid length.
[ 2367.568138][T14783] netlink: 'syz.1.13894': attribute type 25 has an invalid length.
[ 2368.284834][T14816] sctp: [Deprecated]: syz.1.13906 (pid 14816) Use of int in maxseg socket option.
[ 2368.284834][T14816] Use struct sctp_assoc_value instead
[ 2368.527374][ T7997] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7
[ 2369.099314][T14815] delete_channel: no stack
[ 2371.024029][T14827] netlink: 'syz.0.13909': attribute type 2 has an invalid length.
[ 2371.045928][T14827] netlink: 'syz.0.13909': attribute type 8 has an invalid length.
[ 2371.073738][T14827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13909'.
[ 2371.099980][T14832] netlink: 'syz.1.13910': attribute type 39 has an invalid length.
[ 2371.438702][T14835] netlink: 'syz.4.13913': attribute type 39 has an invalid length.
[ 2371.624101][T14850] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.13917'.
[ 2371.774901][T14854] sctp: [Deprecated]: syz.4.13920 (pid 14854) Use of int in maxseg socket option.
[ 2371.774901][T14854] Use struct sctp_assoc_value instead
[ 2372.543182][T14852] delete_channel: no stack
[ 2374.208805][T14856] netlink: 'syz.0.13917': attribute type 10 has an invalid length.
[ 2374.228952][T14856] netlink: 'syz.0.13917': attribute type 25 has an invalid length.
[ 2374.289741][T14850] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2374.340228][T14850] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2374.385951][T14850] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2374.575100][T14863] netlink: 'syz.4.13923': attribute type 1 has an invalid length.
[ 2374.619235][T14863] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.13923'.
[ 2374.704079][T14863] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.13923'.
[ 2374.752494][T14863] netlink: zone id is out of range
[ 2374.762544][T14863] netlink: zone id is out of range
[ 2374.786405][T14870] netlink: 'syz.2.13926': attribute type 2 has an invalid length.
[ 2374.809889][T14870] netlink: 'syz.2.13926': attribute type 8 has an invalid length.
[ 2374.874432][T14870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13926'.
[ 2374.890335][T14863] netlink: del zone limit has 4 unknown bytes
[ 2375.307335][T14882] netlink: 'syz.3.13930': attribute type 39 has an invalid length.
[ 2375.396781][T14886] sctp: [Deprecated]: syz.4.13933 (pid 14886) Use of int in maxseg socket option.
[ 2375.396781][T14886] Use struct sctp_assoc_value instead
[ 2375.478210][T14885] delete_channel: no stack
[ 2378.252920][T14912] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.13939'.
[ 2378.402897][T14917] validate_nla: 1 callbacks suppressed
[ 2378.402932][T14917] netlink: 'syz.3.13941': attribute type 2 has an invalid length.
[ 2378.443232][T14920] FAULT_INJECTION: forcing a failure.
[ 2378.443232][T14920] name failslab, interval 1, probability 0, space 0, times 0
[ 2378.457099][T14917] netlink: 'syz.3.13941': attribute type 8 has an invalid length.
[ 2378.482970][T14917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13941'.
[ 2378.526403][T14920] CPU: 0 PID: 14920 Comm: syz.4.13943 Not tainted syzkaller #0
[ 2378.534007][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2378.544066][T14920] Call Trace:
[ 2378.547345][T14920]  <TASK>
[ 2378.550277][T14920]  dump_stack_lvl+0x188/0x24e
[ 2378.554971][T14920]  ? show_regs_print_info+0x12/0x12
[ 2378.560172][T14920]  ? load_image+0x410/0x410
[ 2378.564678][T14920]  ? __lock_acquire+0x7c40/0x7c40
[ 2378.569706][T14920]  ? __mutex_trylock_common+0x15c/0x260
[ 2378.575258][T14920]  should_fail_ex+0x390/0x4c0
[ 2378.579948][T14920]  should_failslab+0x5/0x20
[ 2378.584446][T14920]  slab_pre_alloc_hook+0x59/0x300
[ 2378.589477][T14920]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[ 2378.595729][T14920]  __kmem_cache_alloc_node+0x4f/0x270
[ 2378.601111][T14920]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[ 2378.607355][T14920]  __kmalloc+0xa3/0x240
[ 2378.611523][T14920]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[ 2378.617604][T14920]  genl_start+0x2a6/0x490
[ 2378.621953][T14920]  __netlink_dump_start+0x3f0/0x6f0
[ 2378.627171][T14920]  genl_family_rcv_msg_dumpit+0x228/0x3c0
[ 2378.632897][T14920]  ? genl_rcv_msg+0x790/0x790
[ 2378.637578][T14920]  ? aa_get_newest_label+0xf9/0x5b0
[ 2378.642784][T14920]  ? end_current_label_crit_section+0x170/0x170
[ 2378.649028][T14920]  ? genl_family_rcv_msg_doit+0x350/0x350
[ 2378.654751][T14920]  ? genl_start+0x490/0x490
[ 2378.659256][T14920]  ? genl_lock_dumpit+0x90/0x90
[ 2378.664118][T14920]  ? apparmor_capable+0x12c/0x190
[ 2378.669145][T14920]  ? bpf_lsm_capable+0x5/0x10
[ 2378.673818][T14920]  ? security_capable+0x85/0xb0
[ 2378.678682][T14920]  genl_rcv_msg+0x5c8/0x790
[ 2378.683204][T14920]  ? genl_bind+0x360/0x360
[ 2378.687623][T14920]  ? nl802154_set_llsec_params+0x4d0/0x4d0
[ 2378.693527][T14920]  netlink_rcv_skb+0x1ef/0x440
[ 2378.698297][T14920]  ? genl_bind+0x360/0x360
[ 2378.702720][T14920]  ? netlink_ack+0x1160/0x1160
[ 2378.707501][T14920]  ? down_read+0x1a8/0x2d0
[ 2378.711919][T14920]  genl_rcv+0x24/0x40
[ 2378.715914][T14920]  netlink_unicast+0x7ad/0x920
[ 2378.720704][T14920]  netlink_sendmsg+0x8ad/0xbd0
[ 2378.725482][T14920]  ? netlink_getsockopt+0x550/0x550
[ 2378.730689][T14920]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2378.736240][T14920]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2378.741525][T14920]  ? security_socket_sendmsg+0x7c/0xa0
[ 2378.746983][T14920]  ? netlink_getsockopt+0x550/0x550
[ 2378.752190][T14920]  ____sys_sendmsg+0x5ed/0x9a0
[ 2378.756978][T14920]  ? __sys_sendmsg_sock+0x30/0x30
[ 2378.762001][T14920]  ? __import_iovec+0x306/0x510
[ 2378.766869][T14920]  ? import_iovec+0x6f/0xa0
[ 2378.771380][T14920]  ___sys_sendmsg+0x2a2/0x360
[ 2378.776066][T14920]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2378.780862][T14920]  ? trace_call_bpf+0xbf/0x6b0
[ 2378.785670][T14920]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2378.790523][T14920]  ? perf_trace_preemptirq_template+0x268/0x320
[ 2378.796795][T14920]  ? __x64_sys_sendmsg+0x80/0x80
[ 2378.801760][T14920]  ? lockdep_hardirqs_on+0x94/0x140
[ 2378.806962][T14920]  do_syscall_64+0x4c/0xa0
[ 2378.811379][T14920]  ? clear_bhb_loop+0x60/0xb0
[ 2378.816066][T14920]  ? clear_bhb_loop+0x60/0xb0
[ 2378.820745][T14920]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2378.826639][T14920] RIP: 0033:0x7fc1aff9de99
[ 2378.831067][T14920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2378.850694][T14920] RSP: 002b:00007fc1b0d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2378.859110][T14920] RAX: ffffffffffffffda RBX: 00007fc1b0225fa0 RCX: 00007fc1aff9de99
[ 2378.867084][T14920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2378.875050][T14920] RBP: 00007fc1b0d8d090 R08: 0000000000000000 R09: 0000000000000000
[ 2378.883022][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2378.890990][T14920] R13: 00007fc1b0226038 R14: 00007fc1b0225fa0 R15: 00007ffd4ad54ca8
[ 2378.899009][T14920]  </TASK>
[ 2379.141501][T14912] netlink: 'syz.0.13939': attribute type 10 has an invalid length.
[ 2379.165566][T14912] netlink: 'syz.0.13939': attribute type 25 has an invalid length.
[ 2379.285513][T14926] netlink: 'syz.1.13944': attribute type 1 has an invalid length.
[ 2379.295993][T14926] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.13944'.
[ 2379.376635][T14926] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.13944'.
[ 2379.412994][T14932] netlink: 'syz.0.13945': attribute type 39 has an invalid length.
[ 2379.428551][T14926] netlink: zone id is out of range
[ 2379.438420][T14926] netlink: zone id is out of range
[ 2379.454043][T14934] sctp: [Deprecated]: syz.4.13946 (pid 14934) Use of int in maxseg socket option.
[ 2379.454043][T14934] Use struct sctp_assoc_value instead
[ 2379.526539][T14926] netlink: del zone limit has 4 unknown bytes
[ 2379.662706][T14931] delete_channel: no stack
[ 2383.426135][T14961] netlink: 'syz.4.13952': attribute type 39 has an invalid length.
[ 2385.878330][T14967] netlink: 'syz.2.13956': attribute type 10 has an invalid length.
[ 2385.897122][T14970] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13957'.
[ 2385.907146][T14970] openvswitch: netlink: Flow key attr not present in new flow.
[ 2385.915010][T14967] netlink: 'syz.2.13956': attribute type 25 has an invalid length.
[ 2386.058113][T14972] netlink: 'syz.3.13958': attribute type 2 has an invalid length.
[ 2386.073389][T14974] sctp: [Deprecated]: syz.4.13959 (pid 14974) Use of int in maxseg socket option.
[ 2386.073389][T14974] Use struct sctp_assoc_value instead
[ 2386.088983][T14972] netlink: 'syz.3.13958': attribute type 8 has an invalid length.
[ 2386.111912][T14972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13958'.
[ 2386.129341][T14976] netlink: 'syz.2.13960': attribute type 39 has an invalid length.
[ 2386.153508][T14973] delete_channel: no stack
[ 2386.306437][T14981] netlink: 'syz.0.13964': attribute type 1 has an invalid length.
[ 2386.346342][T14981] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.13964'.
[ 2386.421754][T14991] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.13964'.
[ 2386.461069][T14991] netlink: zone id is out of range
[ 2386.486030][T14991] netlink: zone id is out of range
[ 2386.590923][T14996] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13968'.
[ 2386.652444][T14996] openvswitch: netlink: Flow key attr not present in new flow.
[ 2386.706880][T14991] netlink: del zone limit has 4 unknown bytes
[ 2387.030043][T15015] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.13973'.
[ 2387.439125][T15015] netlink: 'syz.4.13973': attribute type 10 has an invalid length.
[ 2387.451330][T15015] netlink: 'syz.4.13973': attribute type 25 has an invalid length.
[ 2389.321296][T15026] sctp: [Deprecated]: syz.3.13977 (pid 15026) Use of int in maxseg socket option.
[ 2389.321296][T15026] Use struct sctp_assoc_value instead
[ 2389.341631][T15029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13975'.
[ 2389.344989][T15027] netlink: 'syz.0.13978': attribute type 39 has an invalid length.
[ 2389.378404][T15029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13975'.
[ 2389.397161][T15031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13975'.
[ 2389.419737][T15022] netlink: 'syz.2.13976': attribute type 2 has an invalid length.
[ 2389.446278][T15022] netlink: 'syz.2.13976': attribute type 8 has an invalid length.
[ 2389.460212][T15022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13976'.
[ 2389.511531][T15024] delete_channel: no stack
[ 2389.701664][T15041] netlink: 'syz.3.13982': attribute type 11 has an invalid length.
[ 2389.754667][T15041] netlink: 'syz.3.13982': attribute type 10 has an invalid length.
[ 2389.830843][T15041] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2389.859017][T15047] netlink: 'syz.2.13985': attribute type 1 has an invalid length.
[ 2389.861241][T15049] FAULT_INJECTION: forcing a failure.
[ 2389.861241][T15049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2389.883788][T15049] CPU: 1 PID: 15049 Comm: syz.4.13995 Not tainted syzkaller #0
[ 2389.891377][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2389.901452][T15049] Call Trace:
[ 2389.904746][T15049]  <TASK>
[ 2389.907693][T15049]  dump_stack_lvl+0x188/0x24e
[ 2389.912398][T15049]  ? show_regs_print_info+0x12/0x12
[ 2389.917625][T15049]  ? load_image+0x410/0x410
[ 2389.922150][T15049]  ? __lock_acquire+0x7c40/0x7c40
[ 2389.927202][T15049]  ? snprintf+0xe5/0x140
[ 2389.931465][T15049]  should_fail_ex+0x390/0x4c0
[ 2389.936165][T15049]  _copy_to_user+0x2c/0x130
[ 2389.940686][T15049]  simple_read_from_buffer+0xe3/0x150
[ 2389.946084][T15049]  proc_fail_nth_read+0x1a6/0x220
[ 2389.951131][T15049]  ? proc_fault_inject_write+0x310/0x310
[ 2389.956785][T15049]  ? fsnotify_perm+0x248/0x550
[ 2389.961570][T15049]  ? proc_fault_inject_write+0x310/0x310
[ 2389.967222][T15049]  vfs_read+0x2db/0x960
[ 2389.971408][T15049]  ? kernel_read+0x1e0/0x1e0
[ 2389.976021][T15049]  ? __fget_files+0x28/0x460
[ 2389.980630][T15049]  ? __fget_files+0x3fc/0x460
[ 2389.985336][T15049]  ? __fdget_pos+0x2ae/0x360
[ 2389.989961][T15049]  ? ksys_read+0x70/0x260
[ 2389.994310][T15049]  ksys_read+0x14d/0x260
[ 2389.998584][T15049]  ? vfs_write+0x9a0/0x9a0
[ 2390.003011][T15047] netlink: zone id is out of range
[ 2390.003027][T15049]  ? lockdep_hardirqs_on+0x94/0x140
[ 2390.008138][T15049]  do_syscall_64+0x4c/0xa0
[ 2390.008164][T15049]  ? clear_bhb_loop+0x60/0xb0
[ 2390.008184][T15049]  ? clear_bhb_loop+0x60/0xb0
[ 2390.008205][T15049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2390.008226][T15049] RIP: 0033:0x7fc1aff5e6ce
[ 2390.008243][T15049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2390.008260][T15049] RSP: 002b:00007fc1b0d8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2390.008282][T15049] RAX: ffffffffffffffda RBX: 00007fc1b0d8d6c0 RCX: 00007fc1aff5e6ce
[ 2390.008294][T15049] RDX: 000000000000000f RSI: 00007fc1b0d8d0a0 RDI: 0000000000000004
[ 2390.008306][T15049] RBP: 00007fc1b0d8d090 R08: 0000000000000000 R09: 0000000000000000
[ 2390.008318][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2390.008330][T15049] R13: 00007fc1b0226038 R14: 00007fc1b0225fa0 R15: 00007ffd4ad54ca8
[ 2390.008367][T15049]  </TASK>
[ 2390.017294][T15040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2390.140385][T15047] netlink: zone id is out of range
[ 2390.165664][T15047] netlink: zone id is out of range
[ 2390.206332][T15047] netlink: zone id is out of range
[ 2390.212552][T15047] netlink: zone id is out of range
[ 2392.398513][T15061] netlink: 'syz.1.13990': attribute type 39 has an invalid length.
[ 2392.411943][T15062] __nla_validate_parse: 7 callbacks suppressed
[ 2392.411978][T15062] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.13987'.
[ 2392.956897][T15077] sctp: [Deprecated]: syz.1.13993 (pid 15077) Use of int in maxseg socket option.
[ 2392.956897][T15077] Use struct sctp_assoc_value instead
[ 2393.148877][T15078] netlink: 'syz.0.13992': attribute type 2 has an invalid length.
[ 2393.157425][T15078] netlink: 'syz.0.13992': attribute type 8 has an invalid length.
[ 2393.172614][T15078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13992'.
[ 2393.221368][T15062] netlink: 'syz.3.13987': attribute type 10 has an invalid length.
[ 2393.246590][T15062] netlink: 'syz.3.13987': attribute type 25 has an invalid length.
[ 2393.708444][T15074] delete_channel: no stack
[ 2395.565945][T15083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13997'.
[ 2395.595654][T15083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13997'.
[ 2395.695032][T15093] FAULT_INJECTION: forcing a failure.
[ 2395.695032][T15093] name failslab, interval 1, probability 0, space 0, times 0
[ 2395.775916][T15093] CPU: 1 PID: 15093 Comm: syz.0.13999 Not tainted syzkaller #0
[ 2395.783523][T15093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2395.793590][T15093] Call Trace:
[ 2395.796878][T15093]  <TASK>
[ 2395.799816][T15093]  dump_stack_lvl+0x188/0x24e
[ 2395.804520][T15093]  ? show_regs_print_info+0x12/0x12
[ 2395.809741][T15093]  ? load_image+0x410/0x410
[ 2395.814266][T15093]  ? __might_sleep+0xd0/0xd0
[ 2395.818880][T15093]  ? __lock_acquire+0x7c40/0x7c40
[ 2395.823922][T15093]  ? mark_lock+0x94/0x320
[ 2395.828274][T15093]  ? verify_lock_unused+0x140/0x140
[ 2395.833493][T15093]  should_fail_ex+0x390/0x4c0
[ 2395.838196][T15093]  should_failslab+0x5/0x20
[ 2395.842712][T15093]  slab_pre_alloc_hook+0x59/0x300
[ 2395.847753][T15093]  ? sock_kmalloc+0x92/0xf0
[ 2395.852271][T15093]  __kmem_cache_alloc_node+0x4f/0x270
[ 2395.857658][T15093]  ? sock_kmalloc+0x92/0xf0
[ 2395.862175][T15093]  __kmalloc+0xa3/0x240
[ 2395.866353][T15093]  sock_kmalloc+0x92/0xf0
[ 2395.870695][T15093]  ____sys_sendmsg+0x1bf/0x9a0
[ 2395.875475][T15093]  ? __lock_acquire+0x7c40/0x7c40
[ 2395.880520][T15093]  ? __sys_sendmsg_sock+0x30/0x30
[ 2395.885559][T15093]  ? __import_iovec+0x306/0x510
[ 2395.890432][T15093]  ? import_iovec+0x6f/0xa0
[ 2395.894953][T15093]  ___sys_sendmsg+0x2a2/0x360
[ 2395.899650][T15093]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2395.904449][T15093]  ? __lock_acquire+0x7c40/0x7c40
[ 2395.909558][T15093]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2395.914426][T15093]  ? ct_nmi_exit+0x145/0x1c0
[ 2395.919031][T15093]  ? __x64_sys_sendmsg+0x80/0x80
[ 2395.923996][T15093]  ? lockdep_hardirqs_on+0x94/0x140
[ 2395.929117][T15101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14000'.
[ 2395.929195][T15093]  do_syscall_64+0x4c/0xa0
[ 2395.942712][T15093]  ? clear_bhb_loop+0x60/0xb0
[ 2395.947403][T15093]  ? clear_bhb_loop+0x60/0xb0
[ 2395.952108][T15093]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2395.958020][T15093] RIP: 0033:0x7fa4d399de99
[ 2395.962451][T15093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2395.982072][T15093] RSP: 002b:00007fa4d48d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2395.990507][T15093] RAX: ffffffffffffffda RBX: 00007fa4d3c25fa0 RCX: 00007fa4d399de99
[ 2395.998498][T15093] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 2396.006487][T15093] RBP: 00007fa4d48d0090 R08: 0000000000000000 R09: 0000000000000000
[ 2396.014476][T15093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2396.022460][T15093] R13: 00007fa4d3c26038 R14: 00007fa4d3c25fa0 R15: 00007ffe591de228
[ 2396.030467][T15093]  </TASK>
[ 2396.810370][T15114] netlink: 'syz.3.14004': attribute type 39 has an invalid length.
[ 2396.910043][T15120] sctp: [Deprecated]: syz.4.14007 (pid 15120) Use of int in maxseg socket option.
[ 2396.910043][T15120] Use struct sctp_assoc_value instead
[ 2397.006118][T15119] delete_channel: no stack
[ 2397.145487][T15125] netlink: 'syz.3.14009': attribute type 2 has an invalid length.
[ 2397.180083][T15125] netlink: 'syz.3.14009': attribute type 8 has an invalid length.
[ 2397.195538][T15125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14009'.
[ 2397.213196][T15131] FAULT_INJECTION: forcing a failure.
[ 2397.213196][T15131] name failslab, interval 1, probability 0, space 0, times 0
[ 2397.236007][T15131] CPU: 0 PID: 15131 Comm: syz.1.14012 Not tainted syzkaller #0
[ 2397.243600][T15131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2397.253673][T15131] Call Trace:
[ 2397.256974][T15131]  <TASK>
[ 2397.259917][T15131]  dump_stack_lvl+0x188/0x24e
[ 2397.264620][T15131]  ? show_regs_print_info+0x12/0x12
[ 2397.269842][T15131]  ? load_image+0x410/0x410
[ 2397.274366][T15131]  ? __might_sleep+0xd0/0xd0
[ 2397.278974][T15131]  ? __lock_acquire+0x7c40/0x7c40
[ 2397.284001][T15131]  should_fail_ex+0x390/0x4c0
[ 2397.288712][T15131]  should_failslab+0x5/0x20
[ 2397.293230][T15131]  slab_pre_alloc_hook+0x59/0x300
[ 2397.298258][T15131]  ? sctp_auth_shkey_create+0x77/0x190
[ 2397.303714][T15131]  __kmem_cache_alloc_node+0x4f/0x270
[ 2397.309086][T15131]  ? sctp_auth_shkey_create+0x77/0x190
[ 2397.314540][T15131]  kmalloc_trace+0x26/0xe0
[ 2397.318957][T15131]  sctp_auth_shkey_create+0x77/0x190
[ 2397.324269][T15131]  sctp_endpoint_new+0x43c/0xa00
[ 2397.329209][T15131]  sctp_init_sock+0x95b/0x11c0
[ 2397.333973][T15131]  inet_create+0xc25/0xf60
[ 2397.338395][T15131]  __sock_create+0x49a/0x940
[ 2397.342995][T15131]  __sys_socket+0xc4/0x190
[ 2397.347413][T15131]  __x64_sys_socket+0x76/0x80
[ 2397.352086][T15131]  do_syscall_64+0x4c/0xa0
[ 2397.356499][T15131]  ? clear_bhb_loop+0x60/0xb0
[ 2397.361171][T15131]  ? clear_bhb_loop+0x60/0xb0
[ 2397.365845][T15131]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2397.371740][T15131] RIP: 0033:0x7f9a8499de99
[ 2397.376151][T15131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2397.395754][T15131] RSP: 002b:00007f9a857d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 2397.404174][T15131] RAX: ffffffffffffffda RBX: 00007f9a84c25fa0 RCX: 00007f9a8499de99
[ 2397.412138][T15131] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002
[ 2397.420106][T15131] RBP: 00007f9a857d7090 R08: 0000000000000000 R09: 0000000000000000
[ 2397.428070][T15131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2397.436033][T15131] R13: 00007f9a84c26038 R14: 00007f9a84c25fa0 R15: 00007ffd77eb0258
[ 2397.444013][T15131]  </TASK>
[ 2397.707900][T15144] netlink: 'syz.4.14014': attribute type 10 has an invalid length.
[ 2397.758233][T15144] netlink: 55 bytes leftover after parsing attributes in process `syz.4.14014'.
[ 2398.282069][T15154] sctp: [Deprecated]: syz.2.14021 (pid 15154) Use of int in maxseg socket option.
[ 2398.282069][T15154] Use struct sctp_assoc_value instead
[ 2398.322261][T15153] delete_channel: no stack
[ 2398.644036][T15158] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2398.725881][T15158] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14023'.
[ 2398.831106][T15164] FAULT_INJECTION: forcing a failure.
[ 2398.831106][T15164] name failslab, interval 1, probability 0, space 0, times 0
[ 2398.947500][T15164] CPU: 0 PID: 15164 Comm: syz.3.14026 Not tainted syzkaller #0
[ 2398.955112][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2398.965193][T15164] Call Trace:
[ 2398.968485][T15164]  <TASK>
[ 2398.971428][T15164]  dump_stack_lvl+0x188/0x24e
[ 2398.976130][T15164]  ? show_regs_print_info+0x12/0x12
[ 2398.981356][T15164]  ? load_image+0x410/0x410
[ 2398.985880][T15164]  ? __might_sleep+0xd0/0xd0
[ 2398.990485][T15164]  ? __lock_acquire+0x7c40/0x7c40
[ 2398.995532][T15164]  should_fail_ex+0x390/0x4c0
[ 2399.000236][T15164]  should_failslab+0x5/0x20
[ 2399.004789][T15164]  slab_pre_alloc_hook+0x59/0x300
[ 2399.009829][T15164]  ? perf_tp_event+0xc10/0xc10
[ 2399.014614][T15164]  ? __get_vm_area_node+0x122/0x330
[ 2399.019835][T15164]  __kmem_cache_alloc_node+0x4f/0x270
[ 2399.025228][T15164]  ? __get_vm_area_node+0x122/0x330
[ 2399.030447][T15164]  kmalloc_node_trace+0x22/0xe0
[ 2399.035324][T15164]  __get_vm_area_node+0x122/0x330
[ 2399.040370][T15164]  ? perf_trace_buf_update+0xa8/0x230
[ 2399.045857][T15164]  __vmalloc_node_range+0x357/0x1380
[ 2399.051169][T15164]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.056759][T15164]  ? aa_get_newest_label+0xf9/0x5b0
[ 2399.061968][T15164]  ? free_vm_area+0x50/0x50
[ 2399.066471][T15164]  ? end_current_label_crit_section+0x170/0x170
[ 2399.072712][T15164]  ? __lock_acquire+0x7c40/0x7c40
[ 2399.077736][T15164]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.083281][T15164]  __vmalloc+0x76/0x80
[ 2399.087347][T15164]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.092889][T15164]  bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.098279][T15164]  ? bpf_prog_alloc+0x13/0x1b0
[ 2399.103043][T15164]  bpf_prog_alloc+0x1c/0x1b0
[ 2399.107634][T15164]  bpf_prog_load+0x7d4/0x1530
[ 2399.112317][T15164]  ? map_freeze+0x390/0x390
[ 2399.116817][T15164]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2399.122976][T15164]  ? lockdep_hardirqs_on+0x94/0x140
[ 2399.128178][T15164]  ? bpf_lsm_audit_rule_free+0x10/0x10
[ 2399.133630][T15164]  ? bpf_lsm_bpf+0x5/0x10
[ 2399.137951][T15164]  ? security_bpf+0x7a/0xa0
[ 2399.142468][T15164]  __sys_bpf+0x5b8/0x780
[ 2399.146719][T15164]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2399.152103][T15164]  ? lock_chain_count+0x20/0x20
[ 2399.157004][T15164]  __x64_sys_bpf+0x78/0x90
[ 2399.161428][T15164]  do_syscall_64+0x4c/0xa0
[ 2399.165846][T15164]  ? clear_bhb_loop+0x60/0xb0
[ 2399.170524][T15164]  ? clear_bhb_loop+0x60/0xb0
[ 2399.175199][T15164]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2399.181088][T15164] RIP: 0033:0x7f6a6379de99
[ 2399.185499][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2399.205132][T15164] RSP: 002b:00007f6a64614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2399.213547][T15164] RAX: ffffffffffffffda RBX: 00007f6a63a25fa0 RCX: 00007f6a6379de99
[ 2399.221510][T15164] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[ 2399.229498][T15164] RBP: 00007f6a64614090 R08: 0000000000000000 R09: 0000000000000000
[ 2399.237462][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2399.245424][T15164] R13: 00007f6a63a26038 R14: 00007f6a63a25fa0 R15: 00007ffd1ccf6f48
[ 2399.253400][T15164]  </TASK>
[ 2399.523727][T15171] netlink: 'syz.0.14027': attribute type 2 has an invalid length.
[ 2399.543562][T15171] netlink: 'syz.0.14027': attribute type 8 has an invalid length.
[ 2399.552246][T15164] syz.3.14026: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 2399.573166][T15171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14027'.
[ 2399.578155][T15164] CPU: 0 PID: 15164 Comm: syz.3.14026 Not tainted syzkaller #0
[ 2399.589880][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2399.599953][T15164] Call Trace:
[ 2399.603244][T15164]  <TASK>
[ 2399.606191][T15164]  dump_stack_lvl+0x188/0x24e
[ 2399.610896][T15164]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2399.617333][T15164]  ? show_regs_print_info+0x12/0x12
[ 2399.622552][T15164]  ? load_image+0x410/0x410
[ 2399.627067][T15164]  ? __rcu_read_unlock+0x78/0xd0
[ 2399.631998][T15164]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2399.638405][T15164]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 2399.644903][T15164]  warn_alloc+0x242/0x330
[ 2399.649231][T15164]  ? __get_vm_area_node+0x122/0x330
[ 2399.654433][T15164]  ? zone_watermark_ok_safe+0x270/0x270
[ 2399.659975][T15164]  ? rcu_is_watching+0x11/0xa0
[ 2399.664739][T15164]  ? __get_vm_area_node+0x318/0x330
[ 2399.669931][T15164]  ? perf_trace_buf_update+0xa8/0x230
[ 2399.675301][T15164]  __vmalloc_node_range+0x37c/0x1380
[ 2399.680600][T15164]  ? aa_get_newest_label+0xf9/0x5b0
[ 2399.685795][T15164]  ? free_vm_area+0x50/0x50
[ 2399.690309][T15164]  ? end_current_label_crit_section+0x170/0x170
[ 2399.696556][T15164]  ? __lock_acquire+0x7c40/0x7c40
[ 2399.701589][T15164]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.707143][T15164]  __vmalloc+0x76/0x80
[ 2399.711218][T15164]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.716768][T15164]  bpf_prog_alloc_no_stats+0x37/0x3a0
[ 2399.722142][T15164]  ? bpf_prog_alloc+0x13/0x1b0
[ 2399.726907][T15164]  bpf_prog_alloc+0x1c/0x1b0
[ 2399.731506][T15164]  bpf_prog_load+0x7d4/0x1530
[ 2399.736202][T15164]  ? map_freeze+0x390/0x390
[ 2399.740705][T15164]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2399.746874][T15164]  ? lockdep_hardirqs_on+0x94/0x140
[ 2399.752087][T15164]  ? bpf_lsm_audit_rule_free+0x10/0x10
[ 2399.757548][T15164]  ? bpf_lsm_bpf+0x5/0x10
[ 2399.761893][T15164]  ? security_bpf+0x7a/0xa0
[ 2399.766411][T15164]  __sys_bpf+0x5b8/0x780
[ 2399.770663][T15164]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2399.776051][T15164]  ? lock_chain_count+0x20/0x20
[ 2399.780915][T15164]  __x64_sys_bpf+0x78/0x90
[ 2399.785330][T15164]  do_syscall_64+0x4c/0xa0
[ 2399.789775][T15164]  ? clear_bhb_loop+0x60/0xb0
[ 2399.794449][T15164]  ? clear_bhb_loop+0x60/0xb0
[ 2399.799132][T15164]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2399.805021][T15164] RIP: 0033:0x7f6a6379de99
[ 2399.809429][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2399.829031][T15164] RSP: 002b:00007f6a64614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2399.837443][T15164] RAX: ffffffffffffffda RBX: 00007f6a63a25fa0 RCX: 00007f6a6379de99
[ 2399.845408][T15164] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[ 2399.853370][T15164] RBP: 00007f6a64614090 R08: 0000000000000000 R09: 0000000000000000
[ 2399.861335][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2399.869301][T15164] R13: 00007f6a63a26038 R14: 00007f6a63a25fa0 R15: 00007ffd1ccf6f48
[ 2399.877281][T15164]  </TASK>
[ 2399.891557][T15164] Mem-Info:
[ 2399.895307][T15164] active_anon:6874 inactive_anon:0 isolated_anon:0
[ 2399.895307][T15164]  active_file:21590 inactive_file:40885 isolated_file:0
[ 2399.895307][T15164]  unevictable:768 dirty:213 writeback:0
[ 2399.895307][T15164]  slab_reclaimable:23690 slab_unreclaimable:104736
[ 2399.895307][T15164]  mapped:30268 shmem:1361 pagetables:613
[ 2399.895307][T15164]  sec_pagetables:0 bounce:0
[ 2399.895307][T15164]  kernel_misc_reclaimable:0
[ 2399.895307][T15164]  free:1302007 free_pcp:10073 free_cma:0
[ 2399.954858][T15164] Node 0 active_anon:27444kB inactive_anon:0kB active_file:86360kB inactive_file:163340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121060kB dirty:856kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10000kB pagetables:2460kB sec_pagetables:0kB all_unreclaimable? no
[ 2400.014233][T15174] netlink: 'syz.2.14030': attribute type 39 has an invalid length.
[ 2400.038012][T15176] netlink: 'syz.1.14031': attribute type 2 has an invalid length.
[ 2400.056151][T15176] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14031'.
[ 2400.079191][T15176] netlink: 'syz.1.14031': attribute type 17 has an invalid length.
[ 2400.085837][T15164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2400.116051][T15176] netlink: 'syz.1.14031': attribute type 16 has an invalid length.
[ 2400.125459][T15176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14031'.
[ 2400.150342][T15164] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2400.178370][T15164] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 2400.185170][T15164] Node 0 DMA32 free:1285496kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27444kB inactive_anon:0kB active_file:86360kB inactive_file:163340kB unevictable:1536kB writepending:856kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:30008kB local_pcp:19120kB free_cma:0kB
[ 2400.221860][T15182] sctp: [Deprecated]: syz.0.14032 (pid 15182) Use of int in maxseg socket option.
[ 2400.221860][T15182] Use struct sctp_assoc_value instead
[ 2400.226882][T15183] sctp: [Deprecated]: syz.2.14033 (pid 15183) Use of int in maxseg socket option.
[ 2400.226882][T15183] Use struct sctp_assoc_value instead
[ 2400.236506][T15164] lowmem_reserve[]: 0 0 1 1 1
[ 2400.286814][T15164] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 2400.313922][T15177] delete_channel: no stack
[ 2400.314244][T15178] delete_channel: no stack
[ 2400.395065][T15164] lowmem_reserve[]: 0 0 0 0 0
[ 2400.410729][T15164] Node 1 Normal free:3907156kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9536kB local_pcp:0kB free_cma:0kB
[ 2400.473852][T15164] lowmem_reserve[]: 0 0 0 0 0
[ 2400.482825][T15164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2400.500231][T15164] Node 0 DMA32: 1912*4kB (UME) 1683*8kB (UME) 2240*16kB (UME) 2250*32kB (UME) 1925*64kB (UME) 811*128kB (UME) 323*256kB (UM) 152*512kB (UM) 237*1024kB (UME) 5*2048kB (UME) 126*4096kB (UM) = 1285496kB
[ 2400.582106][T15164] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 2400.595242][T15164] Node 1 Normal: 271*4kB (UME) 53*8kB (UE) 35*16kB (UME) 172*32kB (UME) 79*64kB (UME) 30*128kB (UME) 12*256kB (UME) 3*512kB (UM) 1*1024kB (E) 3*2048kB (UE) 947*4096kB (M) = 3907156kB
[ 2400.613832][T15164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2400.628525][T15164] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2400.654625][T15164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2400.667331][T15164] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2400.678365][T15164] 63836 total pagecache pages
[ 2400.687007][T15164] 0 pages in swap cache
[ 2400.691339][T15164] Free swap  = 124996kB
[ 2400.695688][T15164] Total swap = 124996kB
[ 2400.700611][T15164] 2097051 pages RAM
[ 2400.704549][T15164] 0 pages HighMem/MovableOnly
[ 2400.709895][T15164] 415222 pages reserved
[ 2400.714280][T15164] 0 pages cma reserved
[ 2401.121620][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14042'.
[ 2403.545155][T15218] sctp: [Deprecated]: syz.3.14048 (pid 15218) Use of int in maxseg socket option.
[ 2403.545155][T15218] Use struct sctp_assoc_value instead
[ 2403.550556][T15217] validate_nla: 3 callbacks suppressed
[ 2403.550574][T15217] netlink: 'syz.0.14047': attribute type 29 has an invalid length.
[ 2403.574799][T15216] sctp: [Deprecated]: syz.2.14046 (pid 15216) Use of int in maxseg socket option.
[ 2403.574799][T15216] Use struct sctp_assoc_value instead
[ 2403.656500][T15217] netlink: 'syz.0.14047': attribute type 3 has an invalid length.
[ 2403.757985][T15217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14047'.
[ 2403.897444][T15213] delete_channel: no stack
[ 2403.908317][T15211] delete_channel: no stack
[ 2404.558102][T15248] netlink: 'syz.2.14057': attribute type 2 has an invalid length.
[ 2404.571426][T15248] netlink: 'syz.2.14057': attribute type 8 has an invalid length.
[ 2404.582467][T15248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14057'.
[ 2404.646121][T15250] netlink: 'syz.4.14058': attribute type 39 has an invalid length.
[ 2405.969415][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2405.975774][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2407.128605][T15260] sctp: [Deprecated]: syz.2.14061 (pid 15260) Use of int in maxseg socket option.
[ 2407.128605][T15260] Use struct sctp_assoc_value instead
[ 2407.153418][T15259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14063'.
[ 2407.184116][T15258] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14062'.
[ 2407.228438][T15258] net_ratelimit: 1 callbacks suppressed
[ 2407.228478][T15258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2407.326870][T15257] delete_channel: no stack
[ 2407.468018][T15272] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14065'.
[ 2407.854070][T15285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14070'.
[ 2407.922299][T15285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14070'.
[ 2408.024034][T15289] netlink: 'syz.4.14071': attribute type 2 has an invalid length.
[ 2408.039965][T15289] netlink: 'syz.4.14071': attribute type 8 has an invalid length.
[ 2408.060058][T15289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14071'.
[ 2411.213717][T15297] sctp: [Deprecated]: syz.1.14076 (pid 15297) Use of int in maxseg socket option.
[ 2411.213717][T15297] Use struct sctp_assoc_value instead
[ 2411.273025][T15303] netlink: 'syz.3.14075': attribute type 29 has an invalid length.
[ 2411.282823][T15303] netlink: 'syz.3.14075': attribute type 3 has an invalid length.
[ 2411.291632][T15303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14075'.
[ 2411.344764][T15306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14078'.
[ 2411.357244][T15306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14078'.
[ 2411.383063][T15296] delete_channel: no stack
[ 2411.394033][T15306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14078'.
[ 2411.413871][T15301] netlink: 'syz.2.14073': attribute type 39 has an invalid length.
[ 2411.454082][T15306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14078'.
[ 2412.123286][T15318] netlink: 'syz.0.14084': attribute type 2 has an invalid length.
[ 2412.142381][T15318] netlink: 'syz.0.14084': attribute type 8 has an invalid length.
[ 2412.166489][T15318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14084'.
[ 2415.105039][T15329] FAULT_INJECTION: forcing a failure.
[ 2415.105039][T15329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2415.130723][T15328] sctp: [Deprecated]: syz.2.14090 (pid 15328) Use of int in maxseg socket option.
[ 2415.130723][T15328] Use struct sctp_assoc_value instead
[ 2415.155020][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14091'.
[ 2415.164768][T15329] CPU: 0 PID: 15329 Comm: syz.3.14087 Not tainted syzkaller #0
[ 2415.172352][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2415.175331][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14091'.
[ 2415.182403][T15329] Call Trace:
[ 2415.182415][T15329]  <TASK>
[ 2415.182422][T15329]  dump_stack_lvl+0x188/0x24e
[ 2415.182452][T15329]  ? show_regs_print_info+0x12/0x12
[ 2415.207553][T15329]  ? load_image+0x410/0x410
[ 2415.212078][T15329]  ? __lock_acquire+0x7c40/0x7c40
[ 2415.217127][T15329]  ? snprintf+0xe5/0x140
[ 2415.221382][T15329]  should_fail_ex+0x390/0x4c0
[ 2415.222568][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14091'.
[ 2415.226064][T15329]  _copy_to_user+0x2c/0x130
[ 2415.226091][T15329]  simple_read_from_buffer+0xe3/0x150
[ 2415.226113][T15329]  proc_fail_nth_read+0x1a6/0x220
[ 2415.250005][T15329]  ? proc_fault_inject_write+0x310/0x310
[ 2415.255654][T15329]  ? fsnotify_perm+0x248/0x550
[ 2415.260421][T15329]  ? proc_fault_inject_write+0x310/0x310
[ 2415.266057][T15329]  vfs_read+0x2db/0x960
[ 2415.270230][T15329]  ? kernel_read+0x1e0/0x1e0
[ 2415.274824][T15329]  ? __fget_files+0x28/0x460
[ 2415.279411][T15329]  ? __fget_files+0x3fc/0x460
[ 2415.284095][T15329]  ? __fdget_pos+0x2ae/0x360
[ 2415.288682][T15329]  ? ksys_read+0x70/0x260
[ 2415.293015][T15329]  ksys_read+0x14d/0x260
[ 2415.297263][T15329]  ? vfs_write+0x9a0/0x9a0
[ 2415.301684][T15329]  ? lockdep_hardirqs_on+0x94/0x140
[ 2415.306885][T15329]  do_syscall_64+0x4c/0xa0
[ 2415.311302][T15329]  ? clear_bhb_loop+0x60/0xb0
[ 2415.315975][T15329]  ? clear_bhb_loop+0x60/0xb0
[ 2415.320645][T15329]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2415.326531][T15329] RIP: 0033:0x7f6a6375e6ce
[ 2415.330937][T15329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2415.350532][T15329] RSP: 002b:00007f6a64613fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2415.358938][T15329] RAX: ffffffffffffffda RBX: 00007f6a646146c0 RCX: 00007f6a6375e6ce
[ 2415.366903][T15329] RDX: 000000000000000f RSI: 00007f6a646140a0 RDI: 0000000000000004
[ 2415.374860][T15329] RBP: 00007f6a64614090 R08: 0000000000000000 R09: 0000000000000000
[ 2415.382820][T15329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2415.390780][T15329] R13: 00007f6a63a26038 R14: 00007f6a63a25fa0 R15: 00007ffd1ccf6f48
[ 2415.398753][T15329]  </TASK>
[ 2415.483768][T15327] delete_channel: no stack
[ 2415.495940][T15337] netlink: 'syz.4.14092': attribute type 39 has an invalid length.
[ 2415.524005][T15341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14093'.
[ 2415.844808][T15353] netlink: 'syz.0.14098': attribute type 2 has an invalid length.
[ 2415.857312][T15353] netlink: 'syz.0.14098': attribute type 8 has an invalid length.
[ 2416.490081][T15371] netlink: 'syz.1.14104': attribute type 29 has an invalid length.
[ 2416.520668][T15371] netlink: 'syz.1.14104': attribute type 3 has an invalid length.
[ 2416.533050][T15371] __nla_validate_parse: 4 callbacks suppressed
[ 2416.533066][T15371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14104'.
[ 2416.952681][T15380] sctp: [Deprecated]: syz.1.14107 (pid 15380) Use of int in maxseg socket option.
[ 2416.952681][T15380] Use struct sctp_assoc_value instead
[ 2417.770480][T15379] delete_channel: no stack
[ 2418.636777][T15384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14108'.
[ 2418.674014][T15384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14108'.
[ 2418.699958][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14111'.
[ 2418.711547][T15388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14108'.
[ 2418.724344][T15384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14108'.
[ 2418.747394][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14111'.
[ 2418.777449][T15393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14111'.
[ 2418.816468][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14111'.
[ 2419.154470][T15411] sctp: [Deprecated]: syz.0.14120 (pid 15411) Use of int in maxseg socket option.
[ 2419.154470][T15411] Use struct sctp_assoc_value instead
[ 2419.181240][T15409] netlink: 'syz.3.14118': attribute type 39 has an invalid length.
[ 2419.220399][T15410] delete_channel: no stack
[ 2419.402205][T15420] sctp: [Deprecated]: syz.0.14133 (pid 15420) Use of int in maxseg socket option.
[ 2419.402205][T15420] Use struct sctp_assoc_value instead
[ 2419.575925][T15427] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.14122'.
[ 2420.198045][T15417] delete_channel: no stack
[ 2421.073099][T15427] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 2421.184973][T15438] FAULT_INJECTION: forcing a failure.
[ 2421.184973][T15438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2421.230801][T15438] CPU: 1 PID: 15438 Comm: syz.0.14125 Not tainted syzkaller #0
[ 2421.238413][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2421.248485][T15438] Call Trace:
[ 2421.251771][T15438]  <TASK>
[ 2421.254801][T15438]  dump_stack_lvl+0x188/0x24e
[ 2421.259498][T15438]  ? show_regs_print_info+0x12/0x12
[ 2421.264718][T15438]  ? load_image+0x410/0x410
[ 2421.269239][T15438]  ? __lock_acquire+0x7c40/0x7c40
[ 2421.274287][T15438]  should_fail_ex+0x390/0x4c0
[ 2421.278979][T15438]  _copy_from_user+0x2c/0x170
[ 2421.283656][T15438]  bpf_test_init+0xde/0x140
[ 2421.288165][T15438]  bpf_prog_test_run_xdp+0x488/0xf80
[ 2421.293451][T15438]  ? __lock_acquire+0x7c40/0x7c40
[ 2421.298483][T15438]  ? dev_put+0x80/0x80
[ 2421.302550][T15438]  ? dev_put+0x80/0x80
[ 2421.306613][T15438]  bpf_prog_test_run+0x31c/0x390
[ 2421.311549][T15438]  __sys_bpf+0x62b/0x780
[ 2421.315785][T15438]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2421.321158][T15438]  ? lock_chain_count+0x20/0x20
[ 2421.326010][T15438]  __x64_sys_bpf+0x78/0x90
[ 2421.330418][T15438]  do_syscall_64+0x4c/0xa0
[ 2421.334827][T15438]  ? clear_bhb_loop+0x60/0xb0
[ 2421.339493][T15438]  ? clear_bhb_loop+0x60/0xb0
[ 2421.344160][T15438]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2421.350049][T15438] RIP: 0033:0x7fa4d399de99
[ 2421.354469][T15438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2421.374076][T15438] RSP: 002b:00007fa4d48d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2421.382477][T15438] RAX: ffffffffffffffda RBX: 00007fa4d3c25fa0 RCX: 00007fa4d399de99
[ 2421.390436][T15438] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 2421.398398][T15438] RBP: 00007fa4d48d0090 R08: 0000000000000000 R09: 0000000000000000
[ 2421.406356][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2421.414319][T15438] R13: 00007fa4d3c26038 R14: 00007fa4d3c25fa0 R15: 00007ffe591de228
[ 2421.422293][T15438]  </TASK>
[ 2421.562836][T15451] __nla_validate_parse: 4 callbacks suppressed
[ 2421.562852][T15451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14130'.
[ 2421.607436][T15451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14130'.
[ 2421.626296][T15455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14130'.
[ 2421.659470][T15457] FAULT_INJECTION: forcing a failure.
[ 2421.659470][T15457] name failslab, interval 1, probability 0, space 0, times 0
[ 2421.687433][T15451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14130'.
[ 2421.709126][T15457] CPU: 1 PID: 15457 Comm: syz.3.14132 Not tainted syzkaller #0
[ 2421.716724][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2421.726791][T15457] Call Trace:
[ 2421.730076][T15457]  <TASK>
[ 2421.733015][T15457]  dump_stack_lvl+0x188/0x24e
[ 2421.737718][T15457]  ? show_regs_print_info+0x12/0x12
[ 2421.742940][T15457]  ? load_image+0x410/0x410
[ 2421.747469][T15457]  should_fail_ex+0x390/0x4c0
[ 2421.752170][T15457]  should_failslab+0x5/0x20
[ 2421.756683][T15457]  slab_pre_alloc_hook+0x59/0x300
[ 2421.761726][T15457]  kmem_cache_alloc+0x56/0x2f0
[ 2421.766504][T15457]  ? dst_alloc+0x101/0x160
[ 2421.770944][T15457]  dst_alloc+0x101/0x160
[ 2421.775203][T15457]  ip_route_output_key_hash_rcu+0x14e4/0x23f0
[ 2421.781265][T15457]  ? ip_route_output_key_hash_rcu+0x1241/0x23f0
[ 2421.787515][T15457]  ? ip_route_output_key_hash+0x139/0x330
[ 2421.793243][T15457]  ip_route_output_key_hash+0x1ef/0x330
[ 2421.798797][T15457]  ? ip_route_input_rcu+0x30a0/0x30a0
[ 2421.804193][T15457]  ? __lock_acquire+0x7c40/0x7c40
[ 2421.809234][T15457]  ? tomoyo_check_acl+0x378/0x3f0
[ 2421.814264][T15457]  ip_route_output_flow+0x26/0x150
[ 2421.819377][T15457]  ? security_sk_classify_flow+0x77/0x90
[ 2421.825030][T15457]  raw_sendmsg+0xf7c/0x1940
[ 2421.829575][T15457]  ? compat_raw_ioctl+0x60/0x60
[ 2421.834452][T15457]  ? aa_sk_perm+0x81f/0x950
[ 2421.836427][T15459] netlink: 'syz.2.14134': attribute type 39 has an invalid length.
[ 2421.838965][T15457]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 2421.838993][T15457]  ? aa_sock_msg_perm+0x94/0x150
[ 2421.858224][T15457]  ? sock_rps_record_flow+0x19/0x3f0
[ 2421.863532][T15457]  ? inet_sendmsg+0x7a/0x2a0
[ 2421.868145][T15457]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2421.873444][T15457]  ? inet_send_prepare+0x250/0x250
[ 2421.878576][T15457]  ____sys_sendmsg+0x5ed/0x9a0
[ 2421.881492][T15468] sctp: [Deprecated]: syz.0.14136 (pid 15468) Use of int in maxseg socket option.
[ 2421.881492][T15468] Use struct sctp_assoc_value instead
[ 2421.883346][T15457]  ? __sys_sendmsg_sock+0x30/0x30
[ 2421.902784][T15457]  ? __import_iovec+0x306/0x510
[ 2421.907661][T15457]  ? import_iovec+0x6f/0xa0
[ 2421.912185][T15457]  ___sys_sendmsg+0x2a2/0x360
[ 2421.916887][T15457]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2421.921687][T15457]  ? __lock_acquire+0x7c40/0x7c40
[ 2421.926738][T15457]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2421.931580][T15457]  ? __x64_sys_sendmsg+0x80/0x80
[ 2421.936531][T15457]  ? lockdep_hardirqs_on+0x94/0x140
[ 2421.941737][T15457]  do_syscall_64+0x4c/0xa0
[ 2421.946170][T15457]  ? clear_bhb_loop+0x60/0xb0
[ 2421.950857][T15457]  ? clear_bhb_loop+0x60/0xb0
[ 2421.955541][T15457]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2421.961427][T15457] RIP: 0033:0x7f6a6379de99
[ 2421.965829][T15457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2421.985423][T15457] RSP: 002b:00007f6a64614028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2421.993834][T15457] RAX: ffffffffffffffda RBX: 00007f6a63a25fa0 RCX: 00007f6a6379de99
[ 2422.001797][T15457] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[ 2422.009782][T15457] RBP: 00007f6a64614090 R08: 0000000000000000 R09: 0000000000000000
[ 2422.017751][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2422.025730][T15457] R13: 00007f6a63a26038 R14: 00007f6a63a25fa0 R15: 00007ffd1ccf6f48
[ 2422.033728][T15457]  </TASK>
[ 2422.044270][T15462] delete_channel: no stack
[ 2422.150631][T15472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14138'.
[ 2422.175193][T15472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14138'.
[ 2422.186110][T15472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14138'.
[ 2422.221310][T15472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14138'.
[ 2424.379406][T15489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14145'.
[ 2424.410873][T15498] netlink: 'syz.4.14148': attribute type 2 has an invalid length.
[ 2424.421247][T15498] netlink: 'syz.4.14148': attribute type 8 has an invalid length.
[ 2424.435131][T15498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14148'.
[ 2424.527457][T15503] sctp: [Deprecated]: syz.1.14149 (pid 15503) Use of int in maxseg socket option.
[ 2424.527457][T15503] Use struct sctp_assoc_value instead
[ 2424.590303][T15502] delete_channel: no stack
[ 2424.654929][T15507] netlink: 'syz.0.14150': attribute type 39 has an invalid length.
[ 2452.036504][T16685] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2630 jiffies s: 319365 root: 0x1/.
[ 2452.058332][T16685] rcu: blocking rcu_node structures (internal RCU debug):
[ 2452.065496][T16685] Sending NMI from CPU 1 to CPUs 0:
[ 2452.070765][    C0] NMI backtrace for cpu 0
[ 2452.070775][    C0] CPU: 0 PID: 15520 Comm: syz.2.14156 Not tainted syzkaller #0
[ 2452.070790][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2452.070798][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x60
[ 2452.070825][    C0] Code: 48 8b 04 24 65 48 8b 0d 94 4d 80 7e 65 8b 15 95 4d 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b
[ 2452.070838][    C0] RSP: 0018:ffffc90000007250 EFLAGS: 00000046
[ 2452.070851][    C0] RAX: ffffffff8101179f RBX: ffff8880b8e35558 RCX: ffff88802c62da00
[ 2452.070862][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 2452.070871][    C0] RBP: 0000000000000000 R08: ffffc900000073f7 R09: ffffc900000073c0
[ 2452.070881][    C0] R10: dffffc0000000000 R11: fffff52000000e7f R12: dffffc0000000000
[ 2452.070893][    C0] R13: ffff88805d86f800 R14: 1ffff92000000e84 R15: dffffc0000000000
[ 2452.070904][    C0] FS:  00007f7089f9b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 2452.070917][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2452.070928][    C0] CR2: 0000555577bb94e8 CR3: 0000000070538000 CR4: 00000000003506f0
[ 2452.070941][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[ 2452.070950][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 2452.070960][    C0] Call Trace:
[ 2452.070966][    C0]  <IRQ>
[ 2452.070971][    C0]  perf_misc_flags+0x4f/0xc0
[ 2452.071080][    C0]  perf_prepare_sample+0x12f/0x2020
[ 2452.071105][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 2452.071126][    C0]  ? perf_callchain+0x190/0x190
[ 2452.071146][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[ 2452.071170][    C0]  perf_event_output_forward+0x197/0x2f0
[ 2452.071191][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[ 2452.071210][    C0]  ? perf_get_page_size+0x430/0x430
[ 2452.071232][    C0]  ? perf_event_output_forward+0x282/0x2f0
[ 2452.071253][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[ 2452.071272][    C0]  ? perf_get_page_size+0x430/0x430
[ 2452.071293][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 2452.071316][    C0]  __perf_event_overflow+0x457/0x630
[ 2452.071341][    C0]  perf_swevent_overflow+0x19b/0x230
[ 2452.071362][    C0]  perf_swevent_event+0x458/0x570
[ 2452.071384][    C0]  ? perf_tp_event+0xc10/0xc10
[ 2452.071404][    C0]  ? perf_trace_buf_alloc+0x300/0x300
[ 2452.071421][    C0]  ? perf_swevent_event+0x4ba/0x570
[ 2452.071445][    C0]  perf_tp_event+0x36b/0xc10
[ 2452.071465][    C0]  ? perf_swevent_event+0x4ba/0x570
[ 2452.071487][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 2452.071508][    C0]  ? perf_tp_event+0xa8e/0xc10
[ 2452.071556][    C0]  ? kvm_sched_clock_read+0x14/0x40
[ 2452.071571][    C0]  ? sched_clock_cpu+0x6e/0x260
[ 2452.071591][    C0]  perf_trace_run_bpf_submit+0xf3/0x1c0
[ 2452.071615][    C0]  perf_trace_preemptirq_template+0x268/0x320
[ 2452.071637][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[ 2452.071656][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[ 2452.071678][    C0]  ? __irq_exit_rcu+0x147/0x230
[ 2452.071692][    C0]  ? irq_exit_rcu+0x20/0x20
[ 2452.071708][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[ 2452.071726][    C0]  trace_irq_enable_rcuidle+0xd3/0x140
[ 2452.071747][    C0]  trace_hardirqs_on+0x24/0x40
[ 2452.071764][    C0]  asm_sysvec_irq_work+0x16/0x20
[ 2452.071783][    C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[ 2452.071799][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[ 2452.071811][    C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206
[ 2452.071823][    C0] RAX: 6a739fb73c923c00 RBX: 1ffff92000000f64 RCX: 6a739fb73c923c00
[ 2452.071834][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[ 2452.071844][    C0] RBP: ffffc90000007bd0 R08: ffffffff90b1027f R09: 1ffffffff216204f
[ 2452.071855][    C0] R10: dffffc0000000000 R11: fffffbfff2162050 R12: 0000000000000246
[ 2452.071865][    C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001
[ 2452.071886][    C0]  ? asm_sysvec_error_interrupt+0x10/0x20
[ 2452.071904][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 2452.071921][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[ 2452.071938][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0xf9/0x170
[ 2452.072015][    C0]  __rcu_read_unlock+0x78/0xd0
[ 2452.072028][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[ 2452.072048][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[ 2452.072069][    C0]  ieee80211_iterate_active_interfaces_atomic+0x156/0x170
[ 2452.072091][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[ 2452.072112][    C0]  __hrtimer_run_queues+0x522/0xc90
[ 2452.072133][    C0]  ? hw_scan_work+0xf00/0xf00
[ 2452.072157][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 2452.072178][    C0]  hrtimer_run_softirq+0x173/0x290
[ 2452.072198][    C0]  handle_softirqs+0x291/0x910
[ 2452.072215][    C0]  ? __irq_exit_rcu+0x13b/0x230
[ 2452.072231][    C0]  ? do_softirq+0x210/0x210
[ 2452.072243][    C0]  ? hrtimer_interrupt+0x775/0x980
[ 2452.072264][    C0]  __irq_exit_rcu+0x13b/0x230
[ 2452.072278][    C0]  ? irq_exit_rcu+0x20/0x20
[ 2452.072298][    C0]  irq_exit_rcu+0x5/0x20
[ 2452.072311][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 2452.072326][    C0]  </IRQ>
[ 2452.072330][    C0]  <TASK>
[ 2452.072335][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2452.072353][    C0] RIP: 0010:perf_trace_init+0x92/0x2d0
[ 2452.072369][    C0] Code: 49 00 48 8b 1d 4f 0e 2e 0b 48 81 fb e0 2c b8 8c 0f 84 75 01 00 00 4c 89 24 24 4c 8d 63 40 4c 89 e0 48 c1 e8 03 42 0f b6 04 30 <84> c0 0f 85 17 01 00 00 4d 63 24 24 4c 89 ff 4c 89 e6 e8 b7 04 f8
[ 2452.072381][    C0] RSP: 0018:ffffc90003f17c38 EFLAGS: 00000a02
[ 2452.072393][    C0] RAX: 0000000000000000 RBX: ffffffff8df13ba0 RCX: ffff88802c62da00
[ 2452.072403][    C0] RDX: 0000000000000000 RSI: 0000000000000c7b RDI: 000000000000011d
[ 2452.072411][    C0] RBP: 0000000000000002 R08: ffffffff8cb82c2b R09: 1ffffffff1970585
[ 2452.072421][    C0] R10: dffffc0000000000 R11: fffffbfff1970586 R12: ffffffff8df13be0
[ 2452.072432][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000011d
[ 2452.072451][    C0]  ? perf_trace_init+0x1ac/0x2d0
[ 2452.072468][    C0]  perf_tp_event_init+0x89/0x110
[ 2452.072485][    C0]  perf_try_init_event+0x12b/0x3d0
[ 2452.072503][    C0]  ? perf_event_alloc+0xb28/0x21e0
[ 2452.072516][    C0]  perf_event_alloc+0xea0/0x21e0
[ 2452.072531][    C0]  ? _raw_spin_unlock+0x24/0x40
[ 2452.072553][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[ 2452.072569][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[ 2452.072589][    C0]  __se_sys_perf_event_open+0x701/0x1ec0
[ 2452.072617][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 2452.072648][    C0]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 2452.072662][    C0]  ? __x64_sys_perf_event_open+0x1c/0xc0
[ 2452.072684][    C0]  do_syscall_64+0x4c/0xa0
[ 2452.072702][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 2452.072720][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 2452.072738][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2452.072756][    C0] RIP: 0033:0x7f708919de99
[ 2452.072770][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2452.072782][    C0] RSP: 002b:00007f7089f9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 2452.072795][    C0] RAX: ffffffffffffffda RBX: 00007f7089425fa0 RCX: 00007f708919de99
[ 2452.072806][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[ 2452.072815][    C0] RBP: 00007f7089233eaf R08: 0000000000000000 R09: 0000000000000000
[ 2452.072825][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 2452.072834][    C0] R13: 00007f7089426038 R14: 00007f7089425fa0 R15: 00007fffb0e5cf88
[ 2452.072854][    C0]  </TASK>