last executing test programs:

4m30.495162246s ago: executing program 0 (id=1196):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000002684ee4aecff2d3acb228ef2318c91", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005e9200000000000056080000010000008500000007000000b7000000000000009500000001030000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x8, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x24, 0x0, 0x53)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/82, 0x52}, 0x20000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000", @ANYRES32], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0x0, 0x2d, 0x0, &(0x7f0000000780)=""/45, 0x2, 0x0, 0x0, 0x2e, 0x0, &(0x7f00000009c0)="68784b0df23a07b67b0cd884755dc42b27ba266696f74a08e6fb50fb300cf8b11b38fbdca452891d6755a4d5061b", 0x0, 0x0, 0x1}, 0x50)
r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x888102, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x40047438, 0x42579dda60683578)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)

4m29.661608896s ago: executing program 0 (id=1201):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)="395ca99582df71d3c28dc07ab560d3e5a58f06018ed0c08017157a86a2719cad8b50d0657bff03000037cd1a3fd38be5d0b1502096567e4f5f9eaface61600b0787e90eaa5611d5e4ba98426b54f76391d2dae542662f25691edb73a3564119b6519206b0cc2fb605ef6f247", &(0x7f0000001f80), 0xfffffffe, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2, 0x0, 0x11000000}, 0x38)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4m27.998526195s ago: executing program 0 (id=1215):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="5c00000013006bcd9e3fe3dc4e48aa31086b87123a0000001ffdff0000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)

4m27.746781919s ago: executing program 0 (id=1210):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac141410e0"], 0x50}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r1) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x73)
r3 = socket$kcm(0xa, 0x2, 0x73)
close(r3) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803c9", 0x2f}], 0x1}, 0x40001)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af20fd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b33dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e6d8e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb44b4f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f3167f1595ece2f4b79fcc59c32ec9eb70267848da14dc91f13fdcd07b61b7bd0450e7899efc3d99a1993f78cb650f1eaaee7647be7ec71a75d511b47e1d36ee74bafbb2a8fa8d13b5ba0b93f914f5d0d5d1fb60774816ec207ced0ddfbc784ac8aa06d58b7a05b1d81488c833a1d48e57121175b5290e7f"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)

4m27.302943924s ago: executing program 0 (id=1212):
sendmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r0=>0x0}, 0x8)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x20)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="2a30e79aaf324b7a74ebb92bfa2bcdd21f3424046b44f20fab38bee0c8167a96324e1dd71a717eea2b8a14c0b95d4f5143de9db7efb32408d765124cfff5ada30ecebf9d4f5b5ca3b4e5d88996f4795a12538420ff0a958055fbf71c82498123fe66188977a84cf5900639edc8897becf60494d77c988756551535cef3a28b244294b7b1363ee897d9b1721708e611d3b38d6705b9c1a55171a6dacfcd5516aead0127ece0fc4a7d61b7bc563bace4d7090d4e55fae444444a9124aafc3220b78f61faaa8a9fcff7fce30caccff5f2eab6f760f7", @ANYRES16=r0, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="394362d768b53d10b6169711343d247aad91652e41a4e588ba6504b8a7b5658b3073d5458a84244400beb9aa9df9d0d9afda2a367090f97b875cccf1c1db0052e4694e0f0e394bd86ec2f9b9aa15925fe5f9de2a57bd947f50e0230ec3e962e5897ca30e86082fe00b54fb67"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x3b, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0x7, [@const={0xf, 0x0, 0x0, 0xa, 0x3}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x3}, {0x5, 0x4}, {0x4, 0x20200000}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0xf, 0x2}, {0x9}, {0xb, 0x5}, {0x5, 0x3}, {0xf, 0x1}, {0x2}, {0xa}, {0xb, 0x5}, {0x4, 0x3}]}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x655b, 0x3}], "1f"}]}, {0x0, [0x30, 0x61, 0x5f, 0x1f, 0x61]}}, &(0x7f00000009c0)=""/163, 0xdf, 0xa3, 0x0, 0x7}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1, 0x2, 0xdcad, 0x5, 0x60140, r4, 0x4, '\x00', r5, r6, 0x0, 0x4, 0x1}, 0x50)

4m27.126523616s ago: executing program 0 (id=1213):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, r1}, 0x94)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xc}, 0x18ec2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
socketpair(0x26, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000540), 0x80, r3, 0x0, 0x7}, 0x38)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x2f, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @ldst={0x0, 0x2, 0x1, 0x4, 0x3, 0x1}, @jmp={0x5, 0x1, 0x8, 0x1, 0xb, 0x18, 0x89300804635375c4}, @ringbuf_query, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_query]}, &(0x7f0000000680)='GPL\x00', 0x7, 0x4e, &(0x7f00000006c0)=""/78, 0x41000, 0x74, '\x00', 0x0, @netfilter=0xfc38f3b5bb60dd9e, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x8, 0x7ed0, 0x101}, 0x10, 0x0, r2, 0x4, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, r4, r5, r6], &(0x7f0000000e80)=[{0x0, 0x4, 0xf, 0xc}, {0x5, 0x2, 0xd, 0x3}, {0x3, 0x2, 0x0, 0x4}, {0x0, 0x1, 0x2, 0x8}], 0x10, 0x4a1b}, 0x94)
r7 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

4m11.408318248s ago: executing program 32 (id=1213):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, r1}, 0x94)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xc}, 0x18ec2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
socketpair(0x26, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000540), 0x80, r3, 0x0, 0x7}, 0x38)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x2f, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @ldst={0x0, 0x2, 0x1, 0x4, 0x3, 0x1}, @jmp={0x5, 0x1, 0x8, 0x1, 0xb, 0x18, 0x89300804635375c4}, @ringbuf_query, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_query]}, &(0x7f0000000680)='GPL\x00', 0x7, 0x4e, &(0x7f00000006c0)=""/78, 0x41000, 0x74, '\x00', 0x0, @netfilter=0xfc38f3b5bb60dd9e, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x8, 0x7ed0, 0x101}, 0x10, 0x0, r2, 0x4, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, r4, r5, r6], &(0x7f0000000e80)=[{0x0, 0x4, 0xf, 0xc}, {0x5, 0x2, 0xd, 0x3}, {0x3, 0x2, 0x0, 0x4}, {0x0, 0x1, 0x2, 0x8}], 0x10, 0x4a1b}, 0x94)
r7 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

30.797285284s ago: executing program 1 (id=2391):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00050000fdff"})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000008000"/28], 0x48)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x17, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x20, 0xf2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x1, 0x9, 0x12, 0x1f, 0x0, 0x0, 0x802, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x2, 0x8f9, 0x6, 0x0, 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x100000000})
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e371a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x2, 0x6, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8912, &(0x7f0000000340)='\xce\xcf\xe3x\x13\x825@\xa2V\xd5\x9a\xbf\xbb\xfcX\x86\xb2\xa8\xcd\x12\x93\xabe`\xac\x05*BFg}\xa9\xd0\x06\xd30\xacJ(\x11;\xf3O-\x82x\xb6\x04z-\xd5\x04l\f\"\xde\xd3I=\xe0\xdd\x1c\xee\xbf}\x91n\x81\xdb\xd0f\x17\xc4y}\xb8q\xf2\x11\xe0\xb4S\x9b\xaf\xa9\xfeP\x01\xc6\x90:\xff\x945%Q\xc7\x8eN\xd3O\x7f\xaf=\x8aE\xd3h\xbc\x0f\xe1\".\xe5bX/\x15\xe7_\xf7K\xc8Q\x92\xbd\xbc\xc8\xb8\xf9\xbb\xed~\xdb/\xab\x18\x1a6\xc1\x94\x06y,\xf1N\xea\x8c\x8f\x88\xd4\xc6\xe3{\x9e\x9a!\xf65mH\xf1\'\xc6\xdf~O\f9\xb2_\xa7\xb1\x1ba\xaa\x83Si\xea\xf3(\xe4\x11;\x99\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04tgRX\xf5I\xf9P\xc0d\xcf\xf7\xf0\xd0\x80\x9eq7\xc96\xa5\xd8\x9d')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r2], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

29.503268139s ago: executing program 1 (id=2395):
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x5c, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0xf, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x61, 0x30, 0x61]}}, &(0x7f0000000580)=""/167, 0x2d, 0xa7, 0x0, 0x88, 0x10000, @value=r2}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x30, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4)
write$cgroup_subtree(r4, &(0x7f0000000780)=ANY=[], 0xffffffea)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x56)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1}, 0x120a0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc03fffe017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

27.930298947s ago: executing program 1 (id=2396):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1fd, 0x1fd}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="1c0000001c008104e00f80ecdb4cb9f207ad3f0f46d502dfba255e000000880848aa5a3bbe2c1cdf1937ac2c92bb15ad2945171c3d19704b05198b85e308756acd8763bb592668f5338d090543ffa0f5626c810b3e922a045d73b4d846efdd29a5a86c119fd2beb36720dd927cc9e976", 0x70}, {&(0x7f00000005c0)="5b2464054aafccbfd0c96bf12c4d74b083bcf6f24e05c830c4ecb8a20a573b6badf7fef9faf4a6db4b41991ab93f3ce79994856b8b32d0d9cf3bfb53ed696557265bae373d63486137b6815789de1d4ad5c94de3130b30469bf49d2388d684f72c065b86e0c5a4295847083ab84ec104d5d1a6de07adf5fc2908e4540b8e0fc550fd1f8e0fa097316077ee7e06df46607448dcd3c99eb0b55d76dfb2ee748575446bd7d3c4925828b5fe55f80c40cfb268d059447bbb344896cc438d38967bc0915d", 0xc2}], 0x2, 0x0, 0x0, 0x5865}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8000)
sendmsg(r7, 0x0, 0x40001)
recvmsg$kcm(r7, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x100)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r5, 0xc, 0x0, 0xb6d, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000006c0), <r8=>0x0}, 0x40)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r9)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYBLOB="04007c9ad2098863da12000022f4126294a4c87b683cf728a0629734738fcc201f8dd882406e3d64fe5a423481a602000bf31a8f479f544da66f7ca81b90d61d55c33c2b559f26efcda2254e5402479d13fca6e443d0d9ff5ba68e8dad057b1eb8ab678fb934889e45f781296dcd69ee14ab9bcff1d9c4fb95036d459786b85c0c9f171f3cc30bda508a288f6594a68b00ff878d4d790b654dd44165461e493424e915cce857dbd96af6e29e45160d722ebac29348d0e1355c44e5e94dd2364518300bee136d06b774903cdab04fd8", @ANYRES32=r9, @ANYBLOB, @ANYRES64=r8], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="0e0010000000000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r8], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1d0000000800000000000000", @ANYRES32, @ANYBLOB="62190e4122ad81e63ba1fa80013a2d7eabccd309730f6e049cf25fe8992e5a72f910c01dbf7ad2fb0194c88c9135566f50d8e2ccdc92387e09152eba412618a9a67c4e2e72e4f9dfd99fecd56313", @ANYRES64=r8], 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="181485d7357e4626d7000000ffd56e0001340400040000009500000000000000b310c36b64271a4bbc00eb86c7a983fd633bb3afd860bf7dfa6bd41ccf730e755c916390811c8bc3e7ea25dee610df54aaf65591f5fc7c63ba9a666c3dbe25cc3e086dd626dbdbf9f9f6ae61953cd759216ac5d31ef0c253e89414c5fa3e9bb87ed722783370aed02a9a341d24782b9fdc63a4c338759b11b2585d7452b5b76059e6df777440d6bc98807bd3dae6357292e7a0228a1d3dc5571fae4d16d06042e029c514571c5a0e"], &(0x7f0000000140)='GPL\x00', 0x3, 0x6, &(0x7f0000000180)=""/6, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x5, 0xa, &(0x7f0000000980)=ANY=[@ANYBLOB="f48671fa", @ANYRES32, @ANYBLOB="000000000900000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000"], &(0x7f0000000a00)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x10, r5, 0x8, &(0x7f0000000a40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x4000f, 0x4, 0x82}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[r5], 0x0, 0x10, 0xb3}, 0x94)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

27.254216974s ago: executing program 1 (id=2401):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924", 0x12}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000)

27.024421337s ago: executing program 1 (id=2403):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00050000fdff"})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000008000"/28], 0x48)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x17, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x20, 0xf2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x1, 0x9, 0x12, 0x1f, 0x0, 0x0, 0x802, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x2, 0x8f9, 0x6, 0x0, 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x100000000})
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e371a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x2, 0x6, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8912, &(0x7f0000000340)='\xce\xcf\xe3x\x13\x825@\xa2V\xd5\x9a\xbf\xbb\xfcX\x86\xb2\xa8\xcd\x12\x93\xabe`\xac\x05*BFg}\xa9\xd0\x06\xd30\xacJ(\x11;\xf3O-\x82x\xb6\x04z-\xd5\x04l\f\"\xde\xd3I=\xe0\xdd\x1c\xee\xbf}\x91n\x81\xdb\xd0f\x17\xc4y}\xb8q\xf2\x11\xe0\xb4S\x9b\xaf\xa9\xfeP\x01\xc6\x90:\xff\x945%Q\xc7\x8eN\xd3O\x7f\xaf=\x8aE\xd3h\xbc\x0f\xe1\".\xe5bX/\x15\xe7_\xf7K\xc8Q\x92\xbd\xbc\xc8\xb8\xf9\xbb\xed~\xdb/\xab\x18\x1a6\xc1\x94\x06y,\xf1N\xea\x8c\x8f\x88\xd4\xc6\xe3{\x9e\x9a!\xf65mH\xf1\'\xc6\xdf~O\f9\xb2_\xa7\xb1\x1ba\xaa\x83Si\xea\xf3(\xe4\x11;\x99\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04tgRX\xf5I\xf9P\xc0d\xcf\xf7\xf0\xd0\x80\x9eq7\xc96\xa5\xd8\x9d')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r2], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

26.413818544s ago: executing program 1 (id=2404):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r1}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f00000012c0)=""/54, 0x0, &(0x7f0000000100), 0x3, r1}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000440)='ns/mnt\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000"], 0x48)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x8)
sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000380)}, {0x0}, {&(0x7f00000008c0)="c717531092ad030b3daca4923bf00a62c7e39a7208764e0906aa7ff44ea36d47c6366e71353d7cd84f8fb3e4489b69cd6a279b52758b6004a62ad2efa82060234065d2086fa61d7a553062f2243d71675215d0547749b31708af03ea75645280a86c1ee34a734b", 0x67}], 0x3}, 0x8804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, 0x0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0xe, &(0x7f0000000640)=ANY=[@ANYRES64=r3, @ANYBLOB="eac2da3690fcc1b885bc829580e45e17b83f7f54a6a09e7a914c6ea096d48788ab08a8418a988dc790eabea8552aefa6249d04ac079acb65c491f4ae5eefb085fb354d2f29778fc235cd62a4721da888a934f1daa0b2193ce49639ccdd911823140fb4d96878f3b78867ce8b2793a8ea9ef73a6f891c30561e965fb67e311b0f7e49", @ANYRESOCT=r4, @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0xfffffffe, 0x5}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x46, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfd, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x35, 0x43a1bd76, 0x0, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
r9 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10)
sendmsg$inet(r9, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1, 0x0, 0xfffffffffffffe01}, 0x80d1)

21.852036097s ago: executing program 2 (id=2423):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x891e, &(0x7f0000000900)={'bond0\x00', @remote})
r4 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x3, 0x106)
socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x1, 0x1, 0xdf, 0x7f, 0x0, 0x8000, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x84, 0x4, 0x10000, 0x8, 0x3, 0x2, 0x300, 0x0, 0x4, 0x0, 0x1})
r8 = socket$kcm(0xa, 0x2, 0x73)
close(r8)
socketpair(0x26, 0x5, 0x0, &(0x7f0000000000))
recvmsg$kcm(r4, &(0x7f0000000940)={&(0x7f0000000700)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/9, 0x9}], 0x3}, 0x0)
socket$kcm(0xa, 0x2, 0x73)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffffffc, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2d66720eb9612e65657a6572202b626c6b696f20"], 0x10)
sendmsg$kcm(r8, 0x0, 0x40040)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

20.74157586s ago: executing program 2 (id=2428):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00')
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES16=r4], 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20)

20.522330372s ago: executing program 4 (id=2431):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2940000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9, 0x80000}, 0x80, &(0x7f0000000080)}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001340), 0x4)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4)
socket$kcm(0x29, 0x8, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r2}, &(0x7f0000001040), &(0x7f0000001140)='%-010d \x00'}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014000000001208000400", 0x2c}], 0x1}, 0x20000004)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000033000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000dd0015000000060000003d93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0})
r7 = socket$kcm(0xa, 0x3, 0x73)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="1400000017000b7dd25a80648c25949301a3c92b", 0x14}], 0x1}, 0x0)
sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)

20.072219288s ago: executing program 3 (id=2432):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x3, [@datasec={0xb, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x8, 0x30b}, {0x4, 0x205, 0x6}], "447d82"}]}, {0x0, [0x61]}}, &(0x7f0000000ac0)=""/140, 0x43, 0x8c, 0x1, 0xd}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="8500000082bc3f6d66db093d09e12200000007000002000000089500000000", @ANYBLOB="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", @ANYRES16, @ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, r1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x804)
write$cgroup_int(r2, &(0x7f0000000600)=0xd, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r0, &(0x7f00000001c0)="3fa1028da6241b8cf7a977646f2a3536d7f07692f2ef7619386f08d0c78f07fcfcf0adb707b22d88ddeafed68da00b433bf2ca099aa7c5575504e0d5f6607cedb9d46c8f27c4c111d22d0583606c6ba39f44d9f676dd7c69cba7bdf128bb4f48f9cf5fe57759bfc915d0fe9824228b7da739ed725d26f44825dd529b633c966939e3", &(0x7f0000000280)=""/129}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, 0x0}, 0x0)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xb6, 0x70, &(0x7f0000000400)="960596efaf86a8e5f036057e572c367df79b29a7ba81b9aea7425af76aa63060999921cc7bd076e37b7f06a59f6f3190df430bc38d1f3fd85ae4c5d6089821cc83158908dffd64346b29cc05b6813d85e32073cb771226d8fae35aebe99465d9d0e9a9e1dfa9873989bb6f9efea8f5a8247e2d89d641558fa828c5ec280c0d6408fad5b9a874343749a525ac112e076dc6f3b7981943a77fcc65ea96fd88fc257c01e450829d41b2f3f4b92e1b28e86c1a53b057ce5d", &(0x7f00000004c0)=""/112, 0x7, 0x0, 0x84, 0xc7, &(0x7f0000000680)="45f0caaf62026caac28f4a403e5ce99e0abe39d6e7586cf64df040dff1448a83feabb281e92888f8f26df05c5b58bde8eb6f18d018f500c7f3cca989de14aa3add16df89b3d464dea6ffe26880b6cc31b8cd857a195e56de17cb9ba432884549ffd42ebdde08cc64e02aebe2e75903d7fca225147c5f50737888a10856fa0ca68bc9db92", &(0x7f0000000740)="3c0e9176a7d10543dc631356d447a6254f88a23b763e5cb72aec46bf398973ac956e8112783dfedf5059657781410177551d70165b508bf658bf7af97e3d8c52f714f136a1846d93317be704699c345e7e0683e9155b24da5266c76fad524811cda3a20b333f3976c6f027afcdb87abf9918690f555bd5802ffe9d92525a5c036383fd9507087b326bba7cc8ba25f5f55c21dbc7b9490f2378a506ba2a849f5f1e23d5ce2bddc7d22a8f42e7a54cf3c230bd49c2f53d304e1e64d928ec3da81dc488059ed78e62", 0x1, 0x0, 0x2}, 0x50)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)

19.237416267s ago: executing program 3 (id=2433):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc", 0x13}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000)

19.195487118s ago: executing program 4 (id=2434):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

19.131881919s ago: executing program 2 (id=2435):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00050000fdff"})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000008000"/28], 0x48)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x17, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x20, 0xf2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x1, 0x9, 0x12, 0x1f, 0x0, 0x0, 0x802, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x2, 0x8f9, 0x6, 0x0, 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x100000000})
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e371a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x2, 0x6, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8912, &(0x7f0000000340)='\xce\xcf\xe3x\x13\x825@\xa2V\xd5\x9a\xbf\xbb\xfcX\x86\xb2\xa8\xcd\x12\x93\xabe`\xac\x05*BFg}\xa9\xd0\x06\xd30\xacJ(\x11;\xf3O-\x82x\xb6\x04z-\xd5\x04l\f\"\xde\xd3I=\xe0\xdd\x1c\xee\xbf}\x91n\x81\xdb\xd0f\x17\xc4y}\xb8q\xf2\x11\xe0\xb4S\x9b\xaf\xa9\xfeP\x01\xc6\x90:\xff\x945%Q\xc7\x8eN\xd3O\x7f\xaf=\x8aE\xd3h\xbc\x0f\xe1\".\xe5bX/\x15\xe7_\xf7K\xc8Q\x92\xbd\xbc\xc8\xb8\xf9\xbb\xed~\xdb/\xab\x18\x1a6\xc1\x94\x06y,\xf1N\xea\x8c\x8f\x88\xd4\xc6\xe3{\x9e\x9a!\xf65mH\xf1\'\xc6\xdf~O\f9\xb2_\xa7\xb1\x1ba\xaa\x83Si\xea\xf3(\xe4\x11;\x99\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04tgRX\xf5I\xf9P\xc0d\xcf\xf7\xf0\xd0\x80\x9eq7\xc96\xa5\xd8\x9d')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r2], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

18.846062542s ago: executing program 4 (id=2436):
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0xfffd}, 0x8050)

18.830387262s ago: executing program 3 (id=2437):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r1, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000001380), <r3=>0x0, 0x42, &(0x7f0000000200), 0x0, 0x0, 0x0, &(0x7f0000000f80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb0100180000000000000000a527a4000000000000000500000000"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x179, 0x0, 0x0, 0x41000, 0x48, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[{0x1, 0x2, 0x1, 0x9}], 0x10, 0x8}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x0, 0xf, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair(0x1, 0x1, 0xb965, &(0x7f0000000000))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001500)={&(0x7f0000000e80)="56e66a8ddeafc4be94a2a20419c2c48057f585b8af718533a953e085b1bc0932976f732a88e879cf57957a2b67aaffe5d4f78db21a820b87f8184be4a31bdae155afb03d319af839b48ccb594c7900392f7af9a55de3e84369b2389e24faedeb282407f42183431722f545ab0a3a7580988287d4f395750671d8", &(0x7f0000001380)=""/147, &(0x7f0000001440)="d6eddc24818303b008d6f539e4617dc4f2ead02cbc2338a8bde69403c8e410b9ffad0e5f879e66b0f8805f50dd754b6a7fb9aff78456db", &(0x7f0000001480)="69189b811dc3172f04921dd39898f58d12725a916b3d37dc74194da4d6ae92e9feba7af32a1d2ea27fb4224887c5c627509c72c8c960a2c79628c3712648fb7ebdccfa12d0eda19b950bd1afbd745388c4b50fa6fa38d7a5cc3cae7a7324c15e6ee1a0198a4c2519ded5736e57cdacadf77f39f0", 0x6, r6}, 0x38)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000380)=r7)

18.590997475s ago: executing program 4 (id=2438):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140), 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@cgroup, 0x14, 0x1, 0x8001, &(0x7f00000017c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840), 0x0, <r2=>0x0}, 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002540)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000024c0), 0x0}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002480)={@map=r3, 0xffffffffffffffff, 0x12, 0x20, r1, @void, @void, @void, @value, r2}, 0x20)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x3)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc040)
r4 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
close(r4)
sendmsg(r4, &(0x7f0000004600)={&(0x7f0000000180)=@in={0x2, 0x1, @local}, 0x80, 0x0}, 0x90)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)

18.039423032s ago: executing program 2 (id=2439):
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t(|')

17.917965983s ago: executing program 3 (id=2440):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x301}}, &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1a, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
openat$ppp(0xffffffffffffff9c, 0x0, 0x888102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x69)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="4acb0000000000000000000000050000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000050000000100"/28], 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000b80), 0x4)
socket$kcm(0x18, 0x2, 0x0)

17.865759914s ago: executing program 2 (id=2441):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2940000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9, 0x80000}, 0x80, &(0x7f0000000080)}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001340), 0x4)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4)
socket$kcm(0x29, 0x8, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r2}, &(0x7f0000001040), &(0x7f0000001140)='%-010d \x00'}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014000000001208000400", 0x2c}], 0x1}, 0x20000004)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000033000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000dd0015000000060000003d93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0})
r7 = socket$kcm(0xa, 0x3, 0x73)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="1400000017000b7dd25a80648c25949301a3c92b", 0x14}], 0x1}, 0x0)
sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)

17.462642688s ago: executing program 4 (id=2442):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$kcm(0x18, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xb101, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x1, 0x0}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000006, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x3, &(0x7f0000001700)=@framed, &(0x7f0000001740)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000900)=@raw=[@exit], &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22509, r5}, 0x90)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0))
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000040), 0x4)
recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/181, 0xb5}], 0x8, &(0x7f0000001800)=""/148, 0x94}, 0x2)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0)
close(r8)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000040))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

16.049390244s ago: executing program 3 (id=2443):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

15.763994108s ago: executing program 4 (id=2444):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00')
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES16=r4], 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20)

15.762165508s ago: executing program 2 (id=2445):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x130afe8a, 0x538, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0xd7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf8}, 0x14002)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r4 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94)

15.646665449s ago: executing program 3 (id=2446):
syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040), 0x3b)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r0, &(0x7f00000001c0), 0x12)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r0}, 0x8)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="b32015d4b2bc1c558792d204805a", 0xe}], 0x1}, 0x24048090)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000000), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000f9ffffff00000000", @ANYRES32=r2, @ANYBLOB="070068a32bced26a4700000000000000000000028a44b781f895247d35c123f233e8479ae59f27233d45acf8db8079809008f183986fc4174f0cd93c34390899f196f3d6d6f57af90402650acc54d195a231df082bc9880334aa6be95719fe1170f953839d1a4eea2fbc797b0cbcf4751931b386f4108d8979ca8d0841a21272061cd5e6841c3f01e7efdc18c204743477de4693937c59de74f9fa1373a5fb837b9b2298946de7c7822070809b7655f724f536981ab49090eac1416a34af6d8b7a1de78422c0af40c423adc0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x3, 0x3dc, 0x20001, 0x108a0, r2, 0x6ac, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0xa, @void, @value, @value=r5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x1003, r7}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000004000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018160000", @ANYRES32=r2, @ANYBLOB="000000000000000018290000", @ANYRES32=r2, @ANYBLOB="000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000f9ef86a7323cd93f0000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000108500000082000000bf91000000000000b737e8585c98602d90020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x14, &(0x7f0000000580)=""/20, 0x40f00, 0x21, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000740)=[{0x3, 0x4, 0x5, 0x6}, {0x1, 0x5, 0xc}], 0x10, 0x6ae2b1e7}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e00000011008b88040f80ee59ac990413080048250000005e2980421803001825800000000f0000ea7f2e0c0012", 0x2e}], 0x1}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xa, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r11 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r4, &(0x7f0000000dc0)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000880)=""/54, 0x36}, {&(0x7f0000000c00)=""/206, 0xce}], 0x3, &(0x7f0000000d40)=""/102, 0x66}, 0x2020)
sendmsg$inet(r11, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

282.419327ms ago: executing program 33 (id=2444):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00')
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES16=r4], 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20)

141.277279ms ago: executing program 34 (id=2445):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x130afe8a, 0x538, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0xd7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf8}, 0x14002)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r4 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94)

0s ago: executing program 35 (id=2446):
syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040), 0x3b)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r0, &(0x7f00000001c0), 0x12)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r0}, 0x8)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="b32015d4b2bc1c558792d204805a", 0xe}], 0x1}, 0x24048090)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000000), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000f9ffffff00000000", @ANYRES32=r2, @ANYBLOB="070068a32bced26a4700000000000000000000028a44b781f895247d35c123f233e8479ae59f27233d45acf8db8079809008f183986fc4174f0cd93c34390899f196f3d6d6f57af90402650acc54d195a231df082bc9880334aa6be95719fe1170f953839d1a4eea2fbc797b0cbcf4751931b386f4108d8979ca8d0841a21272061cd5e6841c3f01e7efdc18c204743477de4693937c59de74f9fa1373a5fb837b9b2298946de7c7822070809b7655f724f536981ab49090eac1416a34af6d8b7a1de78422c0af40c423adc0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x3, 0x3dc, 0x20001, 0x108a0, r2, 0x6ac, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0xa, @void, @value, @value=r5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x1003, r7}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000004000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018160000", @ANYRES32=r2, @ANYBLOB="000000000000000018290000", @ANYRES32=r2, @ANYBLOB="000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000f9ef86a7323cd93f0000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000108500000082000000bf91000000000000b737e8585c98602d90020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x14, &(0x7f0000000580)=""/20, 0x40f00, 0x21, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000740)=[{0x3, 0x4, 0x5, 0x6}, {0x1, 0x5, 0xc}], 0x10, 0x6ae2b1e7}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e00000011008b88040f80ee59ac990413080048250000005e2980421803001825800000000f0000ea7f2e0c0012", 0x2e}], 0x1}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xa, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r11 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r4, &(0x7f0000000dc0)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000880)=""/54, 0x36}, {&(0x7f0000000c00)=""/206, 0xce}], 0x3, &(0x7f0000000d40)=""/102, 0x66}, 0x2020)
sendmsg$inet(r11, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

kernel console output (not intermixed with test programs):

lid length.
[  485.461713][T12343] bridge0: port 4(hsr0) entered disabled state
[  485.746884][T12351] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1891'.
[  485.879625][T12343] bridge0: port 4(hsr0) entered blocking state
[  485.886162][T12343] bridge0: port 4(hsr0) entered forwarding state
[  485.908356][T12343] team0: Device hsr_slave_0 failed to register rx_handler
[  485.927102][T12343] bridge0: port 4(hsr0) entered disabled state
[  485.946920][T12351] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1891'.
[  485.959532][T12359] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1894'.
[  486.010420][T12359] Ù: renamed from bond_slave_1 (while UP)
[  486.428922][T12371] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1898'.
[  486.766291][ T5786] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  487.103600][T12392] netlink: 'syz.3.1904': attribute type 10 has an invalid length.
[  487.117027][T12392] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1904'.
[  487.131398][T12391] netlink: 'syz.2.1905': attribute type 2 has an invalid length.
[  487.144879][T12391] netlink: 'syz.2.1905': attribute type 8 has an invalid length.
[  487.158167][T12391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1905'.
[  487.523561][T12397] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1906'.
[  487.963858][T12410] __nla_validate_parse: 1 callbacks suppressed
[  487.963878][T12410] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1909'.
[  488.065326][T12410] openvswitch: netlink: Key type 29 is not supported
[  488.384128][T12406] syzkaller0: entered promiscuous mode
[  488.389749][T12406] syzkaller0: entered allmulticast mode
[  489.189527][ T5786] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  492.629129][T12435] netlink: 'syz.1.1914': attribute type 2 has an invalid length.
[  492.637265][T12435] netlink: 'syz.1.1914': attribute type 8 has an invalid length.
[  492.645156][T12435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1914'.
[  492.704262][T12436] syzkaller0: entered promiscuous mode
[  492.709820][T12436] syzkaller0: entered allmulticast mode
[  492.721497][T12443] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1917'.
[  493.147249][T12450] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1919'.
[  493.180964][T12456] netlink: 'syz.1.1921': attribute type 1 has an invalid length.
[  493.203827][T12456] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1921'.
[  495.185943][T12450] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1919'.
[  495.195572][T12459] netlink: 'syz.1.1922': attribute type 9 has an invalid length.
[  495.211256][T12459] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1922'.
[  495.504727][T12468] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.1925'.
[  495.521764][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  495.687216][T12470] netlink: 'syz.1.1926': attribute type 10 has an invalid length.
[  495.734187][T12470] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.746167][T12470] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.760356][T12470] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.777006][T12474] netlink: 'syz.1.1926': attribute type 9 has an invalid length.
[  495.786155][T12470] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.806987][T12474] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1926'.
[  495.827463][T12475] netlink: 'syz.2.1927': attribute type 3 has an invalid length.
[  495.862670][T12475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1927'.
[  496.794842][T12473] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1927'.
[  496.966654][T12485] netlink: 'syz.4.1930': attribute type 1 has an invalid length.
[  496.985939][T12485] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1930'.
[  497.824914][T12499] netlink: 'syz.4.1934': attribute type 1 has an invalid length.
[  497.861208][T12499] netlink: 15870 bytes leftover after parsing attributes in process `syz.4.1934'.
[  497.939699][T12501] netlink: 'syz.2.1935': attribute type 9 has an invalid length.
[  498.082257][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  498.271176][T12513] __nla_validate_parse: 1 callbacks suppressed
[  498.271193][T12513] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1939'.
[  498.375623][T12516] netlink: 'syz.1.1940': attribute type 2 has an invalid length.
[  498.408094][T12516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1940'.
[  498.465554][T12522] netlink: 'syz.2.1942': attribute type 1 has an invalid length.
[  498.473589][T12522] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1942'.
[  498.906835][T12519] netlink: 'syz.4.1941': attribute type 10 has an invalid length.
[  498.922430][T12519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.199069][T12519] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.256788][T12519] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  499.410771][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  500.226266][T12549] netlink: 'syz.2.1950': attribute type 10 has an invalid length.
[  500.229112][T12551] netlink: 'syz.1.1958': attribute type 1 has an invalid length.
[  500.279376][T12549] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.301307][T12551] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1958'.
[  500.313172][T12549] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.349304][T12549] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.371465][T12549] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.423318][T12553] netlink: 'syz.2.1950': attribute type 9 has an invalid length.
[  500.454468][T12553] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1950'.
[  501.283240][T12566] FAULT_INJECTION: forcing a failure.
[  501.283240][T12566] name failslab, interval 1, probability 0, space 0, times 0
[  501.331393][T12566] CPU: 0 PID: 12566 Comm: syz.4.1955 Not tainted syzkaller #0
[  501.338941][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  501.349119][T12566] Call Trace:
[  501.352440][T12566]  <TASK>
[  501.355400][T12566]  dump_stack_lvl+0x18c/0x250
[  501.360128][T12566]  ? sctp_sendmsg+0x1575/0x28c0
[  501.365011][T12566]  ? ___sys_sendmsg+0x2a6/0x360
[  501.369895][T12566]  ? show_regs_print_info+0x20/0x20
[  501.375139][T12566]  ? load_image+0x420/0x420
[  501.379703][T12566]  should_fail_ex+0x39d/0x4d0
[  501.384427][T12566]  should_failslab+0x9/0x20
[  501.388968][T12566]  slab_pre_alloc_hook+0x59/0x310
[  501.394036][T12566]  ? sctp_add_bind_addr+0x8c/0x360
[  501.399184][T12566]  __kmem_cache_alloc_node+0x53/0x250
[  501.404598][T12566]  ? sctp_add_bind_addr+0x8c/0x360
[  501.409750][T12566]  kmalloc_trace+0x2a/0xe0
[  501.414220][T12566]  sctp_add_bind_addr+0x8c/0x360
[  501.419234][T12566]  sctp_copy_local_addr_list+0x315/0x4f0
[  501.424902][T12566]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  501.430653][T12566]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  501.436845][T12566]  ? sctp_v4_is_any+0x35/0x60
[  501.441555][T12566]  ? sctp_copy_one_addr+0x8c/0x350
[  501.446702][T12566]  sctp_bind_addr_copy+0xb3/0x3c0
[  501.451765][T12566]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  501.458135][T12566]  sctp_connect_new_asoc+0x2f9/0x6a0
[  501.463460][T12566]  ? __sctp_connect+0xd80/0xd80
[  501.468345][T12566]  ? __local_bh_enable_ip+0x13a/0x1c0
[  501.473770][T12566]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  501.479350][T12566]  ? security_sctp_bind_connect+0x89/0xb0
[  501.485119][T12566]  sctp_sendmsg+0x1575/0x28c0
[  501.489848][T12566]  ? sctp_getsockopt+0xb60/0xb60
[  501.494825][T12566]  ? aa_sk_perm+0x83c/0x970
[  501.499380][T12566]  ? aa_af_perm+0x330/0x330
[  501.503920][T12566]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  501.510368][T12566]  ? sock_rps_record_flow+0x19/0x3f0
[  501.515803][T12566]  ? inet_sendmsg+0xe9/0x2f0
[  501.520617][T12566]  ? inet_send_prepare+0x260/0x260
[  501.525855][T12566]  ____sys_sendmsg+0x5ba/0x960
[  501.530693][T12566]  ? __lock_acquire+0x7d40/0x7d40
[  501.535781][T12566]  ? __asan_memset+0x22/0x40
[  501.540433][T12566]  ? __sys_sendmsg_sock+0x30/0x30
[  501.545496][T12566]  ? __import_iovec+0x5f2/0x850
[  501.550402][T12566]  ? import_iovec+0x73/0xa0
[  501.554941][T12566]  ___sys_sendmsg+0x2a6/0x360
[  501.559687][T12566]  ? get_pid_task+0x20/0x1e0
[  501.564319][T12566]  ? __sys_sendmsg+0x2a0/0x2a0
[  501.569137][T12566]  ? __lock_acquire+0x7d40/0x7d40
[  501.574226][T12566]  __se_sys_sendmsg+0x1c2/0x2b0
[  501.579207][T12566]  ? __x64_sys_sendmsg+0x80/0x80
[  501.584296][T12566]  ? lockdep_hardirqs_on+0x98/0x150
[  501.589534][T12566]  do_syscall_64+0x55/0xa0
[  501.593977][T12566]  ? clear_bhb_loop+0x40/0x90
[  501.598685][T12566]  ? clear_bhb_loop+0x40/0x90
[  501.603399][T12566]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.609328][T12566] RIP: 0033:0x7f6a8439cdd9
[  501.613777][T12566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.633419][T12566] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.641871][T12566] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  501.649960][T12566] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003
[  501.657960][T12566] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  501.665957][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  501.673966][T12566] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  501.682163][T12566]  </TASK>
[  501.802989][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  501.916556][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.925286][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  502.049918][T12573] netlink: 'syz.1.1959': attribute type 3 has an invalid length.
[  502.058354][T12573] netlink: 'syz.1.1959': attribute type 4 has an invalid length.
[  502.078586][T12573] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.1959'.
[  502.336743][T12578] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1961'.
[  503.339536][T12583] validate_nla: 1 callbacks suppressed
[  503.339558][T12583] netlink: 'syz.1.1962': attribute type 1 has an invalid length.
[  503.392836][T12583] netlink: 15870 bytes leftover after parsing attributes in process `syz.1.1962'.
[  504.044970][T12598] netlink: 'syz.3.1968': attribute type 1 has an invalid length.
[  504.053127][ T5786] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  504.060410][T12598] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1968'.
[  504.815978][T12617] netlink: 'syz.1.1974': attribute type 1 has an invalid length.
[  504.859235][T12617] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1974'.
[  505.102739][T12620] syzkaller0: entered promiscuous mode
[  505.136737][T12620] syzkaller0: entered allmulticast mode
[  505.278541][T12625] syzkaller0: entered promiscuous mode
[  505.284288][T12625] syzkaller0: entered allmulticast mode
[  505.430109][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  507.740773][T12636] netlink: 'syz.2.1978': attribute type 1 has an invalid length.
[  507.748754][T12636] netlink: 15870 bytes leftover after parsing attributes in process `syz.2.1978'.
[  507.762036][T12640] netlink: 'syz.3.1981': attribute type 12 has an invalid length.
[  507.770664][T12640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1981'.
[  507.963239][T12646] FAULT_INJECTION: forcing a failure.
[  507.963239][T12646] name failslab, interval 1, probability 0, space 0, times 0
[  507.976603][T12646] CPU: 0 PID: 12646 Comm: syz.2.1984 Not tainted syzkaller #0
[  507.984108][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  507.994237][T12646] Call Trace:
[  507.997567][T12646]  <TASK>
[  508.000528][T12646]  dump_stack_lvl+0x18c/0x250
[  508.005268][T12646]  ? show_regs_print_info+0x20/0x20
[  508.010515][T12646]  ? load_image+0x420/0x420
[  508.015104][T12646]  should_fail_ex+0x39d/0x4d0
[  508.019847][T12646]  should_failslab+0x9/0x20
[  508.024408][T12646]  slab_pre_alloc_hook+0x59/0x310
[  508.029475][T12646]  ? kmem_cache_alloc_node+0x17b/0x320
[  508.034978][T12646]  kmem_cache_alloc_node+0x60/0x320
[  508.040304][T12646]  ? __alloc_skb+0x103/0x2c0
[  508.044919][T12646]  __alloc_skb+0x103/0x2c0
[  508.049352][T12646]  skb_segment+0xee2/0x3f50
[  508.053915][T12646]  tcp_gso_segment+0x3fd/0x1960
[  508.058816][T12646]  ? sk_setup_caps+0xa10/0xa10
[  508.063731][T12646]  ipv6_gso_segment+0xb8b/0x2140
[  508.068714][T12646]  ? inet6_del_offload+0x50/0x50
[  508.073696][T12646]  ? skb_crc32c_csum_help+0x520/0x520
[  508.079379][T12646]  ? __lock_acquire+0x1273/0x7d40
[  508.084443][T12646]  ? inet6_del_offload+0x50/0x50
[  508.089402][T12646]  skb_mac_gso_segment+0x320/0x640
[  508.094540][T12646]  ? skb_mac_gso_segment+0x185/0x640
[  508.099843][T12646]  ? skb_eth_gso_segment+0x270/0x270
[  508.105153][T12646]  __skb_gso_segment+0x302/0x4a0
[  508.110216][T12646]  validate_xmit_skb+0x565/0xf60
[  508.115189][T12646]  ? validate_xmit_skb_list+0x120/0x120
[  508.120762][T12646]  validate_xmit_skb_list+0x84/0x120
[  508.126161][T12646]  sch_direct_xmit+0xe0/0x4c0
[  508.130859][T12646]  ? read_lock_is_recursive+0x20/0x20
[  508.136249][T12646]  ? rcu_read_lock_bh_held+0x7a/0x100
[  508.141643][T12646]  ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0
[  508.147638][T12646]  ? __lock_acquire+0x7c70/0x7d40
[  508.152690][T12646]  __dev_queue_xmit+0x165d/0x3660
[  508.157755][T12646]  ? __dev_queue_xmit+0x265/0x3660
[  508.162896][T12646]  ? netdev_core_pick_tx+0x340/0x340
[  508.168228][T12646]  ? virtio_net_hdr_to_skb+0xa45/0x1510
[  508.173886][T12646]  ? skb_setup_tx_timestamp+0x1f0/0x1f0
[  508.179447][T12646]  ? packet_extra_vlan_len_allowed+0x200/0x200
[  508.185626][T12646]  ? skb_copy_datagram_from_iter+0x62e/0x6e0
[  508.191631][T12646]  ? packet_xmit+0x66/0x330
[  508.196158][T12646]  ? packet_sendmsg+0x3916/0x4c30
[  508.201222][T12646]  packet_sendmsg+0x3a0e/0x4c30
[  508.206120][T12646]  ? __might_sleep+0xe0/0xe0
[  508.210814][T12646]  ? mark_lock+0x94/0x320
[  508.215170][T12646]  ? __lock_acquire+0x1273/0x7d40
[  508.220220][T12646]  ? verify_lock_unused+0x140/0x140
[  508.225522][T12646]  ? aa_sk_perm+0x83c/0x970
[  508.230051][T12646]  ? packet_getsockopt+0xad0/0xad0
[  508.235194][T12646]  ? tomoyo_gc_thread+0x7d0/0x1410
[  508.240341][T12646]  ? aa_sock_msg_perm+0x94/0x150
[  508.245297][T12646]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  508.250610][T12646]  ? security_socket_sendmsg+0x80/0xa0
[  508.256081][T12646]  ? packet_getsockopt+0xad0/0xad0
[  508.261222][T12646]  ____sys_sendmsg+0x5ba/0x960
[  508.265997][T12646]  ? __lock_acquire+0x7d40/0x7d40
[  508.271042][T12646]  ? __asan_memset+0x22/0x40
[  508.275655][T12646]  ? __sys_sendmsg_sock+0x30/0x30
[  508.280699][T12646]  ? __import_iovec+0x3fa/0x850
[  508.285573][T12646]  ? import_iovec+0x73/0xa0
[  508.290098][T12646]  ___sys_sendmsg+0x2a6/0x360
[  508.294806][T12646]  ? get_pid_task+0x20/0x1e0
[  508.299423][T12646]  ? __sys_sendmsg+0x2a0/0x2a0
[  508.304229][T12646]  ? __lock_acquire+0x7d40/0x7d40
[  508.309293][T12646]  __se_sys_sendmsg+0x1c2/0x2b0
[  508.314347][T12646]  ? __x64_sys_sendmsg+0x80/0x80
[  508.319319][T12646]  ? lockdep_hardirqs_on+0x98/0x150
[  508.324540][T12646]  do_syscall_64+0x55/0xa0
[  508.328979][T12646]  ? clear_bhb_loop+0x40/0x90
[  508.333674][T12646]  ? clear_bhb_loop+0x40/0x90
[  508.338372][T12646]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  508.344285][T12646] RIP: 0033:0x7f01bef9cdd9
[  508.348719][T12646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.368437][T12646] RSP: 002b:00007f01bff09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.376962][T12646] RAX: ffffffffffffffda RBX: 00007f01bf215fa0 RCX: 00007f01bef9cdd9
[  508.384947][T12646] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  508.392933][T12646] RBP: 00007f01bff09090 R08: 0000000000000000 R09: 0000000000000000
[  508.400923][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  508.408907][T12646] R13: 00007f01bf216038 R14: 00007f01bf215fa0 R15: 00007ffdb9401988
[  508.416913][T12646]  </TASK>
[  508.584159][T12649] netlink: 'syz.4.1985': attribute type 1 has an invalid length.
[  508.651172][T12649] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1985'.
[  508.700500][T12651] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  508.717291][T12651] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1986'.
[  508.776880][ T5786] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  510.426111][T12686] netlink: 'syz.3.1997': attribute type 1 has an invalid length.
[  510.438804][T12686] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1997'.
[  510.785611][T12695] netlink: 'syz.1.1998': attribute type 9 has an invalid length.
[  510.794151][T12690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1999'.
[  510.877268][T12695] netlink: 327 bytes leftover after parsing attributes in process `syz.1.1998'.
[  511.176921][ T6972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  511.213019][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  511.794025][T12711] netlink: 'syz.3.2005': attribute type 29 has an invalid length.
[  511.841868][T12711] netlink: 'syz.3.2005': attribute type 29 has an invalid length.
[  511.881632][T12714] netlink: 'syz.3.2005': attribute type 29 has an invalid length.
[  511.892415][T12711] netlink: 'syz.3.2005': attribute type 29 has an invalid length.
[  512.348419][T12719] netlink: 'syz.3.2008': attribute type 1 has an invalid length.
[  512.482390][T12719] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2008'.
[  512.934353][T12722] FAULT_INJECTION: forcing a failure.
[  512.934353][T12722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.981566][T12722] CPU: 1 PID: 12722 Comm: syz.3.2009 Not tainted syzkaller #0
[  512.989244][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  512.999572][T12722] Call Trace:
[  513.003024][T12722]  <TASK>
[  513.006199][T12722]  dump_stack_lvl+0x18c/0x250
[  513.011196][T12722]  ? show_regs_print_info+0x20/0x20
[  513.016642][T12722]  ? load_image+0x420/0x420
[  513.021395][T12722]  ? __lock_acquire+0x7d40/0x7d40
[  513.026635][T12722]  ? snprintf+0xe9/0x140
[  513.031122][T12722]  should_fail_ex+0x39d/0x4d0
[  513.036075][T12722]  _copy_to_user+0x2f/0xa0
[  513.040725][T12722]  simple_read_from_buffer+0xe7/0x150
[  513.046386][T12722]  proc_fail_nth_read+0x1e8/0x260
[  513.051920][T12722]  ? proc_fault_inject_write+0x360/0x360
[  513.057821][T12722]  ? fsnotify_perm+0x271/0x5e0
[  513.062789][T12722]  ? proc_fault_inject_write+0x360/0x360
[  513.068720][T12722]  vfs_read+0x28b/0x970
[  513.073288][T12722]  ? kernel_read+0x1e0/0x1e0
[  513.078104][T12722]  ? __fget_files+0x28/0x4b0
[  513.082969][T12722]  ? __fget_files+0x28/0x4b0
[  513.087763][T12722]  ? __fget_files+0x43d/0x4b0
[  513.092784][T12722]  ? __fdget_pos+0x2a3/0x330
[  513.097543][T12722]  ? ksys_read+0x75/0x260
[  513.102112][T12722]  ksys_read+0x150/0x260
[  513.106600][T12722]  ? vfs_write+0x990/0x990
[  513.111274][T12722]  ? lockdep_hardirqs_on+0x98/0x150
[  513.116985][T12722]  do_syscall_64+0x55/0xa0
[  513.121586][T12722]  ? clear_bhb_loop+0x40/0x90
[  513.126441][T12722]  ? clear_bhb_loop+0x40/0x90
[  513.131337][T12722]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.137406][T12722] RIP: 0033:0x7f5fa715d60e
[  513.142107][T12722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  513.161918][T12722] RSP: 002b:00007f5fa8015fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  513.170722][T12722] RAX: ffffffffffffffda RBX: 00007f5fa80166c0 RCX: 00007f5fa715d60e
[  513.178960][T12722] RDX: 000000000000000f RSI: 00007f5fa80160a0 RDI: 000000000000000a
[  513.187111][T12722] RBP: 00007f5fa8016090 R08: 0000000000000000 R09: 0000000000000000
[  513.195264][T12722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.203410][T12722] R13: 00007f5fa7416038 R14: 00007f5fa7415fa0 R15: 00007ffcd1e48468
[  513.211962][T12722]  </TASK>
[  513.414272][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  514.681473][T12748] netlink: 'syz.2.2017': attribute type 1 has an invalid length.
[  514.777965][T12748] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2017'.
[  515.270356][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  518.947575][T12764] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2022'.
[  518.964574][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'.
[  519.265211][T12793] netlink: 'syz.4.2030': attribute type 1 has an invalid length.
[  519.273431][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  519.281262][T12793] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2030'.
[  519.560751][T12800] syzkaller0: entered promiscuous mode
[  519.563480][T12802] FAULT_INJECTION: forcing a failure.
[  519.563480][T12802] name failslab, interval 1, probability 0, space 0, times 0
[  519.576675][T12800] syzkaller0: entered allmulticast mode
[  519.581781][T12802] CPU: 0 PID: 12802 Comm: syz.4.2035 Not tainted syzkaller #0
[  519.592318][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  519.602538][T12802] Call Trace:
[  519.605849][T12802]  <TASK>
[  519.608812][T12802]  dump_stack_lvl+0x18c/0x250
[  519.613622][T12802]  ? show_regs_print_info+0x20/0x20
[  519.618846][T12802]  ? load_image+0x420/0x420
[  519.623378][T12802]  ? slab_post_alloc_hook+0x8a/0x4b0
[  519.628777][T12802]  should_fail_ex+0x39d/0x4d0
[  519.633500][T12802]  should_failslab+0x9/0x20
[  519.638069][T12802]  slab_pre_alloc_hook+0x59/0x310
[  519.643133][T12802]  ? __build_skb_around+0x255/0x3d0
[  519.648521][T12802]  kmem_cache_alloc+0x5a/0x2d0
[  519.653315][T12802]  ? _sctp_make_chunk+0x14e/0x420
[  519.658376][T12802]  _sctp_make_chunk+0x14e/0x420
[  519.663256][T12802]  sctp_make_init+0x5f3/0xfc0
[  519.667965][T12802]  ? sctp_addto_chunk+0x230/0x230
[  519.673020][T12802]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  519.679202][T12802]  sctp_sf_do_prm_asoc+0xd2/0x3e0
[  519.684283][T12802]  sctp_do_sm+0x23a/0x5a60
[  519.688712][T12802]  ? sctp_cname+0x110/0x110
[  519.693234][T12802]  ? __stack_depot_save+0x1f/0x630
[  519.698378][T12802]  ? kasan_set_track+0x4e/0x70
[  519.703421][T12802]  ? __kasan_kmalloc+0x8f/0xa0
[  519.708201][T12802]  ? sctp_stream_init_ext+0x57/0x170
[  519.713500][T12802]  ? sctp_sendmsg_to_asoc+0x1324/0x1830
[  519.719064][T12802]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  519.724973][T12802]  ? __se_sys_sendmsg+0x1c2/0x2b0
[  519.730009][T12802]  ? do_syscall_64+0x55/0xa0
[  519.734616][T12802]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  519.740733][T12802]  ? __sk_mem_raise_allocated+0xa29/0x1340
[  519.746676][T12802]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  519.752082][T12802]  sctp_sendmsg_to_asoc+0x10a6/0x1830
[  519.757658][T12802]  ? sctp_assoc_add_peer+0xcf3/0x1390
[  519.763152][T12802]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  519.769004][T12802]  ? __sctp_connect+0xd80/0xd80
[  519.773901][T12802]  ? __local_bh_enable_ip+0x13a/0x1c0
[  519.779304][T12802]  ? _local_bh_enable+0xa0/0xa0
[  519.784173][T12802]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  519.790090][T12802]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  519.795920][T12802]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  519.801487][T12802]  ? security_sctp_bind_connect+0x89/0xb0
[  519.807236][T12802]  sctp_sendmsg+0x1b83/0x28c0
[  519.811944][T12802]  ? sctp_getsockopt+0xb60/0xb60
[  519.816904][T12802]  ? aa_sk_perm+0x83c/0x970
[  519.821523][T12802]  ? aa_af_perm+0x330/0x330
[  519.826046][T12802]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  519.832481][T12802]  ? sock_rps_record_flow+0x19/0x3f0
[  519.837912][T12802]  ? inet_sendmsg+0x7c/0x2f0
[  519.842515][T12802]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  519.847840][T12802]  ? security_socket_sendmsg+0x80/0xa0
[  519.853321][T12802]  ? inet_send_prepare+0x260/0x260
[  519.858468][T12802]  ____sys_sendmsg+0x5ba/0x960
[  519.863352][T12802]  ? __lock_acquire+0x7d40/0x7d40
[  519.868400][T12802]  ? __asan_memset+0x22/0x40
[  519.873035][T12802]  ? __sys_sendmsg_sock+0x30/0x30
[  519.878076][T12802]  ? __import_iovec+0x5f2/0x850
[  519.882961][T12802]  ? import_iovec+0x73/0xa0
[  519.887569][T12802]  ___sys_sendmsg+0x2a6/0x360
[  519.892268][T12802]  ? __sys_sendmsg+0x2a0/0x2a0
[  519.897072][T12802]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  519.903361][T12802]  __se_sys_sendmsg+0x1c2/0x2b0
[  519.908230][T12802]  ? __x64_sys_sendmsg+0x80/0x80
[  519.913199][T12802]  ? lockdep_hardirqs_on+0x98/0x150
[  519.918419][T12802]  do_syscall_64+0x55/0xa0
[  519.922852][T12802]  ? clear_bhb_loop+0x40/0x90
[  519.927553][T12802]  ? clear_bhb_loop+0x40/0x90
[  519.932249][T12802]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  519.938185][T12802] RIP: 0033:0x7f6a8439cdd9
[  519.942651][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.962461][T12802] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.970901][T12802] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  519.978934][T12802] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006
[  519.986922][T12802] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  519.994990][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  520.002976][T12802] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  520.010990][T12802]  </TASK>
[  522.271559][T12815] netlink: 'syz.4.2038': attribute type 10 has an invalid length.
[  522.302851][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.319186][T12815] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  522.443107][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  522.514421][T12821] netlink: 'syz.2.2043': attribute type 1 has an invalid length.
[  522.561479][T12821] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2043'.
[  522.693263][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'.
[  522.762395][T12831] FAULT_INJECTION: forcing a failure.
[  522.762395][T12831] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  522.787669][T12831] CPU: 1 PID: 12831 Comm: syz.2.2048 Not tainted syzkaller #0
[  522.795234][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  522.805325][T12831] Call Trace:
[  522.808626][T12831]  <TASK>
[  522.811570][T12831]  dump_stack_lvl+0x18c/0x250
[  522.816280][T12831]  ? show_regs_print_info+0x20/0x20
[  522.821761][T12831]  ? load_image+0x420/0x420
[  522.826294][T12831]  ? __lock_acquire+0x7d40/0x7d40
[  522.831347][T12831]  should_fail_ex+0x39d/0x4d0
[  522.836055][T12831]  prepare_alloc_pages+0x1e2/0x5f0
[  522.841191][T12831]  __alloc_pages+0x134/0x460
[  522.845804][T12831]  ? zone_statistics+0x170/0x170
[  522.850767][T12831]  ? alloc_pages+0x4dc/0x740
[  522.855366][T12831]  ? do_raw_spin_unlock+0x121/0x230
[  522.860584][T12831]  __get_free_pages+0xc/0x30
[  522.865183][T12831]  kasan_populate_vmalloc_pte+0x35/0x100
[  522.870891][T12831]  __apply_to_page_range+0x860/0xdd0
[  522.876220][T12831]  ? kasan_populate_vmalloc+0x70/0x70
[  522.881619][T12831]  ? apply_to_page_range+0x50/0x50
[  522.886753][T12831]  ? do_raw_spin_unlock+0x121/0x230
[  522.892024][T12831]  alloc_vmap_area+0x1d0c/0x1e30
[  522.897097][T12831]  ? vm_map_ram+0xcb0/0xcb0
[  522.901618][T12831]  ? rcu_is_watching+0x15/0xb0
[  522.906402][T12831]  __get_vm_area_node+0x162/0x370
[  522.911543][T12831]  ? bpf_map_area_alloc+0x5e/0x110
[  522.916683][T12831]  __vmalloc_node_range+0x36e/0x1330
[  522.921988][T12831]  ? dev_map_create_hash+0x24/0x1d0
[  522.927235][T12831]  ? free_vm_area+0x50/0x50
[  522.931772][T12831]  ? __kmem_cache_alloc_node+0x13a/0x250
[  522.937515][T12831]  bpf_map_area_alloc+0xf1/0x110
[  522.942478][T12831]  ? dev_map_create_hash+0x24/0x1d0
[  522.947692][T12831]  dev_map_create_hash+0x24/0x1d0
[  522.952731][T12831]  ? bpf_map_init_from_attr+0x14a/0x340
[  522.958482][T12831]  dev_map_alloc+0x277/0x4c0
[  522.963102][T12831]  map_create+0x877/0x12f0
[  522.967538][T12831]  ? bpf_lsm_bpf+0x9/0x10
[  522.971912][T12831]  __sys_bpf+0x651/0x890
[  522.976263][T12831]  ? bpf_link_show_fdinfo+0x390/0x390
[  522.981759][T12831]  ? lock_chain_count+0x20/0x20
[  522.986638][T12831]  __x64_sys_bpf+0x7c/0x90
[  522.991083][T12831]  do_syscall_64+0x55/0xa0
[  522.995512][T12831]  ? clear_bhb_loop+0x40/0x90
[  523.000206][T12831]  ? clear_bhb_loop+0x40/0x90
[  523.004907][T12831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  523.010817][T12831] RIP: 0033:0x7f01bef9cdd9
[  523.015261][T12831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  523.034886][T12831] RSP: 002b:00007f01bff09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  523.043322][T12831] RAX: ffffffffffffffda RBX: 00007f01bf215fa0 RCX: 00007f01bef9cdd9
[  523.051313][T12831] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000
[  523.059298][T12831] RBP: 00007f01bff09090 R08: 0000000000000000 R09: 0000000000000000
[  523.067281][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  523.075348][T12831] R13: 00007f01bf216038 R14: 00007f01bf215fa0 R15: 00007ffdb9401988
[  523.083433][T12831]  </TASK>
[  523.436621][T12843] netlink: 'syz.2.2051': attribute type 153 has an invalid length.
[  523.461043][T12843] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2051'.
[  523.533934][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  523.848946][T12856] netlink: 'syz.1.2056': attribute type 1 has an invalid length.
[  523.866636][T12856] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2056'.
[  524.655802][T12871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.683102][T12871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.712105][T12871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.816127][T12871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.999682][T12880] netlink: 'syz.4.2065': attribute type 8 has an invalid length.
[  525.010044][T12880] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.2065'.
[  525.032557][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  525.205326][T12875] @: port 1(veth1_to_team) entered blocking state
[  525.230184][T12875] @: port 1(veth1_to_team) entered disabled state
[  525.238137][T12875] veth1_to_team: entered allmulticast mode
[  525.267992][T12875] veth1_to_team: entered promiscuous mode
[  525.404355][T12888] netlink: 'syz.3.2067': attribute type 1 has an invalid length.
[  525.429903][T12888] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2067'.
[  525.896049][ T5786] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  526.349771][T12911] netlink: 'syz.4.2076': attribute type 10 has an invalid length.
[  526.507788][T12925] netlink: 'syz.1.2080': attribute type 1 has an invalid length.
[  526.533928][T12925] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2080'.
[  526.986858][T12911] team0: Port device geneve1 added
[  527.001331][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'.
[  527.076786][T12930] netlink: 'syz.1.2082': attribute type 21 has an invalid length.
[  527.161221][T12930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2082'.
[  527.181388][T12930] netlink: 'syz.1.2082': attribute type 5 has an invalid length.
[  527.189227][T12930] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2082'.
[  527.302923][T12930] netlink: 'syz.1.2082': attribute type 33 has an invalid length.
[  527.513086][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  528.028554][T12951] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  528.056211][T12951] __nla_validate_parse: 1 callbacks suppressed
[  528.056229][T12951] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2089'.
[  528.268628][T12953] FAULT_INJECTION: forcing a failure.
[  528.268628][T12953] name failslab, interval 1, probability 0, space 0, times 0
[  528.291738][T12953] CPU: 1 PID: 12953 Comm: syz.4.2090 Not tainted syzkaller #0
[  528.299454][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  528.309643][T12953] Call Trace:
[  528.312971][T12953]  <TASK>
[  528.315945][T12953]  dump_stack_lvl+0x18c/0x250
[  528.320690][T12953]  ? show_regs_print_info+0x20/0x20
[  528.325940][T12953]  ? load_image+0x420/0x420
[  528.330501][T12953]  ? __might_sleep+0xe0/0xe0
[  528.335144][T12953]  ? __lock_acquire+0x7d40/0x7d40
[  528.340214][T12953]  should_fail_ex+0x39d/0x4d0
[  528.344962][T12953]  should_failslab+0x9/0x20
[  528.349490][T12953]  slab_pre_alloc_hook+0x59/0x310
[  528.354548][T12953]  kmem_cache_alloc_node+0x60/0x320
[  528.360033][T12953]  ? __alloc_skb+0x103/0x2c0
[  528.364646][T12953]  __alloc_skb+0x103/0x2c0
[  528.369079][T12953]  __ip6_append_data+0x2abc/0x3c50
[  528.374230][T12953]  ? inet6_sk+0xe0/0xe0
[  528.378415][T12953]  ? ip6_setup_cork+0xfe0/0xfe0
[  528.383312][T12953]  ip6_append_data+0x1b0/0x350
[  528.388115][T12953]  ? inet6_sk+0xe0/0xe0
[  528.392302][T12953]  ping_v6_sendmsg+0xe17/0x11f0
[  528.397190][T12953]  ? ping_v6_pre_connect+0x30/0x30
[  528.402345][T12953]  ? inet_sendmsg+0x14b/0x2f0
[  528.407046][T12953]  ? __local_bh_enable_ip+0x13a/0x1c0
[  528.412693][T12953]  ? lockdep_hardirqs_on+0x98/0x150
[  528.417915][T12953]  ? _local_bh_enable+0xa0/0xa0
[  528.422959][T12953]  ? do_raw_spin_unlock+0x121/0x230
[  528.428196][T12953]  ? inet_sendmsg+0x14b/0x2f0
[  528.432896][T12953]  ? inet_sendmsg+0x14b/0x2f0
[  528.437591][T12953]  ? inet_send_prepare+0x260/0x260
[  528.442720][T12953]  ____sys_sendmsg+0x5ba/0x960
[  528.447516][T12953]  ? __lock_acquire+0x7d40/0x7d40
[  528.452665][T12953]  ? __asan_memset+0x22/0x40
[  528.457276][T12953]  ? __sys_sendmsg_sock+0x30/0x30
[  528.462318][T12953]  ? __import_iovec+0x5f2/0x850
[  528.467278][T12953]  ? import_iovec+0x73/0xa0
[  528.471811][T12953]  ___sys_sendmsg+0x2a6/0x360
[  528.476517][T12953]  ? get_pid_task+0x20/0x1e0
[  528.481129][T12953]  ? __sys_sendmsg+0x2a0/0x2a0
[  528.485949][T12953]  ? __lock_acquire+0x7d40/0x7d40
[  528.491015][T12953]  __se_sys_sendmsg+0x1c2/0x2b0
[  528.495885][T12953]  ? __x64_sys_sendmsg+0x80/0x80
[  528.500858][T12953]  ? lockdep_hardirqs_on+0x98/0x150
[  528.506081][T12953]  do_syscall_64+0x55/0xa0
[  528.510508][T12953]  ? clear_bhb_loop+0x40/0x90
[  528.515205][T12953]  ? clear_bhb_loop+0x40/0x90
[  528.519901][T12953]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.525824][T12953] RIP: 0033:0x7f6a8439cdd9
[  528.530254][T12953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.549895][T12953] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.558427][T12953] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  528.566426][T12953] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[  528.574411][T12953] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  528.582399][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  528.590381][T12953] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  528.598385][T12953]  </TASK>
[  528.676389][T12957] IPv6: Can't replace route, no match found
[  529.009721][T12966] FAULT_INJECTION: forcing a failure.
[  529.009721][T12966] name failslab, interval 1, probability 0, space 0, times 0
[  529.026177][T12966] CPU: 1 PID: 12966 Comm: syz.4.2095 Not tainted syzkaller #0
[  529.033726][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  529.043818][T12966] Call Trace:
[  529.047129][T12966]  <TASK>
[  529.050089][T12966]  dump_stack_lvl+0x18c/0x250
[  529.054812][T12966]  ? show_regs_print_info+0x20/0x20
[  529.060231][T12966]  ? load_image+0x420/0x420
[  529.064890][T12966]  ? slab_post_alloc_hook+0x8a/0x4b0
[  529.070217][T12966]  should_fail_ex+0x39d/0x4d0
[  529.075026][T12966]  should_failslab+0x9/0x20
[  529.079566][T12966]  slab_pre_alloc_hook+0x59/0x310
[  529.084627][T12966]  ? __build_skb_around+0x255/0x3d0
[  529.089864][T12966]  kmem_cache_alloc+0x5a/0x2d0
[  529.094663][T12966]  ? _sctp_make_chunk+0x14e/0x420
[  529.099741][T12966]  _sctp_make_chunk+0x14e/0x420
[  529.104725][T12966]  sctp_make_init+0x5f3/0xfc0
[  529.109458][T12966]  ? sctp_addto_chunk+0x230/0x230
[  529.114631][T12966]  ? kernel_text_address+0xa0/0xd0
[  529.119784][T12966]  ? __kernel_text_address+0xd/0x30
[  529.125014][T12966]  ? stack_trace_save+0x100/0x100
[  529.130073][T12966]  ? arch_stack_walk+0x160/0x190
[  529.135050][T12966]  sctp_sf_do_prm_asoc+0xd2/0x3e0
[  529.140119][T12966]  sctp_do_sm+0x23a/0x5a60
[  529.144565][T12966]  ? sctp_cname+0x110/0x110
[  529.149193][T12966]  ? __stack_depot_save+0x1f/0x630
[  529.154347][T12966]  ? kasan_set_track+0x4e/0x70
[  529.159139][T12966]  ? __kasan_kmalloc+0x8f/0xa0
[  529.163933][T12966]  ? sctp_stream_init_ext+0x57/0x170
[  529.169244][T12966]  ? sctp_sendmsg_to_asoc+0x1324/0x1830
[  529.174823][T12966]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  529.180743][T12966]  ? __se_sys_sendmsg+0x1c2/0x2b0
[  529.185798][T12966]  ? do_syscall_64+0x55/0xa0
[  529.190504][T12966]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.196650][T12966]  ? __sk_mem_raise_allocated+0xa29/0x1340
[  529.202508][T12966]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  529.207917][T12966]  sctp_sendmsg_to_asoc+0x10a6/0x1830
[  529.213409][T12966]  ? __asan_memcpy+0x40/0x70
[  529.218039][T12966]  ? sctp_assoc_add_peer+0xcf3/0x1390
[  529.223453][T12966]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  529.229304][T12966]  ? __sctp_connect+0xd80/0xd80
[  529.234274][T12966]  ? __local_bh_enable_ip+0x13a/0x1c0
[  529.239848][T12966]  ? _local_bh_enable+0xa0/0xa0
[  529.244728][T12966]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  529.250560][T12966]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  529.256400][T12966]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  529.261979][T12966]  ? security_sctp_bind_connect+0x89/0xb0
[  529.267820][T12966]  sctp_sendmsg+0x1b83/0x28c0
[  529.272546][T12966]  ? sctp_getsockopt+0xb60/0xb60
[  529.277515][T12966]  ? aa_sk_perm+0x83c/0x970
[  529.282073][T12966]  ? aa_af_perm+0x330/0x330
[  529.286617][T12966]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  529.293073][T12966]  ? sock_rps_record_flow+0x19/0x3f0
[  529.298406][T12966]  ? inet_sendmsg+0x7c/0x2f0
[  529.303024][T12966]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  529.308353][T12966]  ? security_socket_sendmsg+0x80/0xa0
[  529.313838][T12966]  ? inet_send_prepare+0x260/0x260
[  529.318983][T12966]  ____sys_sendmsg+0x5ba/0x960
[  529.323771][T12966]  ? __lock_acquire+0x7d40/0x7d40
[  529.328830][T12966]  ? __asan_memset+0x22/0x40
[  529.333476][T12966]  ? __sys_sendmsg_sock+0x30/0x30
[  529.338553][T12966]  ? __import_iovec+0x5f2/0x850
[  529.343440][T12966]  ? import_iovec+0x73/0xa0
[  529.347989][T12966]  ___sys_sendmsg+0x2a6/0x360
[  529.352703][T12966]  ? get_pid_task+0x20/0x1e0
[  529.357327][T12966]  ? __sys_sendmsg+0x2a0/0x2a0
[  529.362235][T12966]  ? __lock_acquire+0x7d40/0x7d40
[  529.367318][T12966]  __se_sys_sendmsg+0x1c2/0x2b0
[  529.372199][T12966]  ? __x64_sys_sendmsg+0x80/0x80
[  529.377184][T12966]  ? lockdep_hardirqs_on+0x98/0x150
[  529.382424][T12966]  do_syscall_64+0x55/0xa0
[  529.386873][T12966]  ? clear_bhb_loop+0x40/0x90
[  529.391676][T12966]  ? clear_bhb_loop+0x40/0x90
[  529.396488][T12966]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.402416][T12966] RIP: 0033:0x7f6a8439cdd9
[  529.406925][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.426821][T12966] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.435790][T12966] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  529.443962][T12966] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  529.451980][T12966] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  529.460082][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  529.468073][T12966] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  529.476083][T12966]  </TASK>
[  529.676210][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  529.871521][T12973] netlink: 'syz.1.2097': attribute type 10 has an invalid length.
[  529.894646][T12973] netlink: 'syz.1.2097': attribute type 4 has an invalid length.
[  529.906190][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'.
[  530.300048][T12975] netlink: 'syz.4.2098': attribute type 21 has an invalid length.
[  530.321425][T12975] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2098'.
[  530.402674][T12977] netlink: 'syz.3.2099': attribute type 1 has an invalid length.
[  530.414018][T12975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2098'.
[  530.441649][T12977] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2099'.
[  530.810733][T12982] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2102'.
[  530.844482][T12983] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2102'.
[  531.135141][T12988] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2104'.
[  531.248055][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  531.621556][T13007] netlink: 'syz.1.2110': attribute type 1 has an invalid length.
[  531.637700][T13007] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2110'.
[  531.682011][T13005] FAULT_INJECTION: forcing a failure.
[  531.682011][T13005] name failslab, interval 1, probability 0, space 0, times 0
[  531.702014][T13005] CPU: 1 PID: 13005 Comm: syz.2.2109 Not tainted syzkaller #0
[  531.709549][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.719656][T13005] Call Trace:
[  531.722972][T13005]  <TASK>
[  531.725944][T13005]  dump_stack_lvl+0x18c/0x250
[  531.730684][T13005]  ? show_regs_print_info+0x20/0x20
[  531.735952][T13005]  ? load_image+0x420/0x420
[  531.740524][T13005]  ? __might_sleep+0xe0/0xe0
[  531.745169][T13005]  ? __lock_acquire+0x7d40/0x7d40
[  531.750248][T13005]  should_fail_ex+0x39d/0x4d0
[  531.755020][T13005]  should_failslab+0x9/0x20
[  531.759578][T13005]  slab_pre_alloc_hook+0x59/0x310
[  531.764666][T13005]  kmem_cache_alloc_node+0x60/0x320
[  531.769968][T13005]  ? __alloc_skb+0x103/0x2c0
[  531.774614][T13005]  __alloc_skb+0x103/0x2c0
[  531.779159][T13005]  _sctp_make_chunk+0x5e/0x420
[  531.783964][T13005]  sctp_make_datafrag_empty+0x12b/0x240
[  531.789543][T13005]  ? sctp_make_ecne+0x340/0x340
[  531.794429][T13005]  ? sctp_datamsg_from_user+0x1c0/0xee0
[  531.800016][T13005]  ? sctp_auth_send_cid+0x69/0x250
[  531.805149][T13005]  sctp_datamsg_from_user+0x722/0xee0
[  531.810995][T13005]  sctp_sendmsg_to_asoc+0x107f/0x1830
[  531.816402][T13005]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  531.822404][T13005]  ? sctp_assoc_add_peer+0xcf3/0x1390
[  531.827805][T13005]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  531.833631][T13005]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  531.839830][T13005]  sctp_sendmsg+0x1b83/0x28c0
[  531.844609][T13005]  ? sctp_getsockopt+0xb60/0xb60
[  531.849586][T13005]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  531.855758][T13005]  ? lockdep_hardirqs_on+0x98/0x150
[  531.861173][T13005]  ? sock_rps_record_flow+0x19/0x3f0
[  531.866580][T13005]  ? inet_sendmsg+0x7c/0x2f0
[  531.871183][T13005]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  531.876498][T13005]  ? security_socket_sendmsg+0x80/0xa0
[  531.881971][T13005]  ? inet_send_prepare+0x260/0x260
[  531.887101][T13005]  ____sys_sendmsg+0x5ba/0x960
[  531.891888][T13005]  ? __asan_memset+0x22/0x40
[  531.896496][T13005]  ? __sys_sendmsg_sock+0x30/0x30
[  531.901535][T13005]  ? __import_iovec+0x5f2/0x850
[  531.906409][T13005]  ? import_iovec+0x73/0xa0
[  531.910928][T13005]  ___sys_sendmsg+0x2a6/0x360
[  531.915698][T13005]  ? __sys_sendmsg+0x2a0/0x2a0
[  531.920589][T13005]  ? perf_trace_preemptirq_template+0x269/0x330
[  531.926903][T13005]  __se_sys_sendmsg+0x1c2/0x2b0
[  531.931772][T13005]  ? __x64_sys_sendmsg+0x80/0x80
[  531.936752][T13005]  do_syscall_64+0x55/0xa0
[  531.941266][T13005]  ? clear_bhb_loop+0x40/0x90
[  531.945967][T13005]  ? clear_bhb_loop+0x40/0x90
[  531.950662][T13005]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  531.956576][T13005] RIP: 0033:0x7f01bef9cdd9
[  531.961007][T13005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.980746][T13005] RSP: 002b:00007f01bff09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  531.989179][T13005] RAX: ffffffffffffffda RBX: 00007f01bf215fa0 RCX: 00007f01bef9cdd9
[  531.997168][T13005] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000007
[  532.005236][T13005] RBP: 00007f01bff09090 R08: 0000000000000000 R09: 0000000000000000
[  532.013223][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  532.021221][T13005] R13: 00007f01bf216038 R14: 00007f01bf215fa0 R15: 00007ffdb9401988
[  532.029245][T13005]  </TASK>
[  532.506050][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  532.982881][T13034] netlink: 'syz.1.2119': attribute type 1 has an invalid length.
[  533.033724][T13034] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2119'.
[  533.415575][T13038] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2120'.
[  533.654357][T13048] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2122'.
[  534.212818][ T5786] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  534.388551][T13073] netlink: 'syz.4.2128': attribute type 1 has an invalid length.
[  534.421174][T13073] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2128'.
[  534.459905][T13069] FAULT_INJECTION: forcing a failure.
[  534.459905][T13069] name failslab, interval 1, probability 0, space 0, times 0
[  534.667262][T13069] CPU: 0 PID: 13069 Comm: syz.3.2126 Not tainted syzkaller #0
[  534.674817][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  534.684913][T13069] Call Trace:
[  534.688235][T13069]  <TASK>
[  534.691195][T13069]  dump_stack_lvl+0x18c/0x250
[  534.695939][T13069]  ? show_regs_print_info+0x20/0x20
[  534.701200][T13069]  ? load_image+0x420/0x420
[  534.705757][T13069]  ? __might_sleep+0xe0/0xe0
[  534.710394][T13069]  ? __lock_acquire+0x7d40/0x7d40
[  534.715467][T13069]  should_fail_ex+0x39d/0x4d0
[  534.720164][T13069]  should_failslab+0x9/0x20
[  534.724697][T13069]  slab_pre_alloc_hook+0x59/0x310
[  534.729787][T13069]  kmem_cache_alloc_node+0x60/0x320
[  534.735044][T13069]  ? __alloc_skb+0x103/0x2c0
[  534.739862][T13069]  __alloc_skb+0x103/0x2c0
[  534.744327][T13069]  _sctp_make_chunk+0x5e/0x420
[  534.749150][T13069]  sctp_make_datafrag_empty+0x12b/0x240
[  534.754749][T13069]  ? sctp_make_ecne+0x340/0x340
[  534.759762][T13069]  ? sctp_datamsg_from_user+0x35d/0xee0
[  534.765365][T13069]  sctp_datamsg_from_user+0x722/0xee0
[  534.770806][T13069]  sctp_sendmsg_to_asoc+0x107f/0x1830
[  534.776232][T13069]  ? __asan_memcpy+0x40/0x70
[  534.780879][T13069]  ? sctp_assoc_add_peer+0xcf3/0x1390
[  534.786315][T13069]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  534.792180][T13069]  ? __sctp_connect+0xd80/0xd80
[  534.797087][T13069]  ? _local_bh_enable+0xa0/0xa0
[  534.801983][T13069]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  534.807841][T13069]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  534.813714][T13069]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  534.819313][T13069]  ? security_sctp_bind_connect+0x89/0xb0
[  534.825087][T13069]  sctp_sendmsg+0x1b83/0x28c0
[  534.829825][T13069]  ? sctp_getsockopt+0xb60/0xb60
[  534.834802][T13069]  ? lockdep_hardirqs_on+0x98/0x150
[  534.840047][T13069]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  534.846275][T13069]  ? sock_rps_record_flow+0x19/0x3f0
[  534.851211][T13080] netlink: 'syz.4.2131': attribute type 21 has an invalid length.
[  534.851599][T13069]  ? inet_sendmsg+0x7c/0x2f0
[  534.864060][T13069]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  534.869417][T13069]  ? security_socket_sendmsg+0x80/0xa0
[  534.874930][T13069]  ? inet_send_prepare+0x260/0x260
[  534.880112][T13069]  ____sys_sendmsg+0x5ba/0x960
[  534.884921][T13069]  ? __lock_acquire+0x7d40/0x7d40
[  534.889996][T13069]  ? __asan_memset+0x22/0x40
[  534.894646][T13069]  ? __sys_sendmsg_sock+0x30/0x30
[  534.899725][T13069]  ? __import_iovec+0x5f2/0x850
[  534.904630][T13069]  ? import_iovec+0x73/0xa0
[  534.909186][T13069]  ___sys_sendmsg+0x2a6/0x360
[  534.914088][T13069]  ? __sys_sendmsg+0x2a0/0x2a0
[  534.918954][T13069]  __se_sys_sendmsg+0x1c2/0x2b0
[  534.923852][T13069]  ? __x64_sys_sendmsg+0x80/0x80
[  534.928857][T13069]  ? syscall_enter_from_user_mode+0x2e/0x80
[  534.934804][T13069]  do_syscall_64+0x55/0xa0
[  534.939265][T13069]  ? clear_bhb_loop+0x40/0x90
[  534.943988][T13069]  ? clear_bhb_loop+0x40/0x90
[  534.948860][T13069]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  534.954974][T13069] RIP: 0033:0x7f5fa719cdd9
[  534.959429][T13069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.979094][T13069] RSP: 002b:00007f5fa8016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.987751][T13069] RAX: ffffffffffffffda RBX: 00007f5fa7415fa0 RCX: 00007f5fa719cdd9
[  534.995765][T13069] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006
[  535.003781][T13069] RBP: 00007f5fa8016090 R08: 0000000000000000 R09: 0000000000000000
[  535.011794][T13069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  535.019811][T13069] R13: 00007f5fa7416038 R14: 00007f5fa7415fa0 R15: 00007ffcd1e48468
[  535.027929][T13069]  </TASK>
[  535.293644][T13083] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2132'.
[  535.346516][T13083] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2132'.
[  535.364939][T13083] openvswitch: netlink: Key type 4112 is out of range max 32
[  535.381866][T13088] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2135'.
[  535.392220][T13088] openvswitch: netlink: IP tunnel dst address not specified
[  535.634399][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  535.781679][T13097] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  535.801563][T13097] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2139'.
[  536.752798][T13107] netlink: 'syz.1.2142': attribute type 4 has an invalid length.
[  536.774366][T13107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2142'.
[  536.801453][T13107] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  537.597688][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  538.116486][T13133] netlink: 'syz.3.2150': attribute type 1 has an invalid length.
[  538.269461][T13133] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2150'.
[  539.174206][T13145] netlink: 'syz.4.2156': attribute type 21 has an invalid length.
[  539.214464][T13145] netlink: 'syz.4.2156': attribute type 4 has an invalid length.
[  539.251460][T13145] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2156'.
[  539.848053][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  540.322665][T13166] netlink: 'syz.1.2163': attribute type 1 has an invalid length.
[  540.351334][T13166] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2163'.
[  541.614533][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  542.032123][T13196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2174'.
[  542.262704][  T647] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  542.288109][T13204] FAULT_INJECTION: forcing a failure.
[  542.288109][T13204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.331790][T13204] CPU: 0 PID: 13204 Comm: syz.1.2177 Not tainted syzkaller #0
[  542.339341][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  542.349437][T13204] Call Trace:
[  542.352795][T13204]  <TASK>
[  542.355789][T13204]  dump_stack_lvl+0x18c/0x250
[  542.360610][T13204]  ? show_regs_print_info+0x20/0x20
[  542.365857][T13204]  ? load_image+0x420/0x420
[  542.370421][T13204]  ? __might_fault+0xaa/0x120
[  542.375227][T13204]  ? __lock_acquire+0x7d40/0x7d40
[  542.380299][T13204]  should_fail_ex+0x39d/0x4d0
[  542.385042][T13204]  _copy_to_user+0x2f/0xa0
[  542.389518][T13204]  generic_map_lookup_batch+0x8bd/0xc60
[  542.395131][T13204]  ? bpf_map_update_value+0x720/0x720
[  542.400646][T13204]  ? __fdget+0x180/0x210
[  542.404951][T13204]  ? bpf_map_update_value+0x720/0x720
[  542.410377][T13204]  bpf_map_do_batch+0x2cb/0x610
[  542.415270][T13204]  ? security_bpf+0x7e/0xa0
[  542.419801][T13204]  __sys_bpf+0x7d7/0x890
[  542.424068][T13204]  ? bpf_link_show_fdinfo+0x390/0x390
[  542.429471][T13204]  ? lock_chain_count+0x20/0x20
[  542.434351][T13204]  __x64_sys_bpf+0x7c/0x90
[  542.438784][T13204]  do_syscall_64+0x55/0xa0
[  542.443212][T13204]  ? clear_bhb_loop+0x40/0x90
[  542.447912][T13204]  ? clear_bhb_loop+0x40/0x90
[  542.452612][T13204]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.458529][T13204] RIP: 0033:0x7fe70e79cdd9
[  542.462964][T13204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.482677][T13204] RSP: 002b:00007fe70f666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  542.491142][T13204] RAX: ffffffffffffffda RBX: 00007fe70ea16090 RCX: 00007fe70e79cdd9
[  542.499162][T13204] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  542.507158][T13204] RBP: 00007fe70f666090 R08: 0000000000000000 R09: 0000000000000000
[  542.515166][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.523238][T13204] R13: 00007fe70ea16128 R14: 00007fe70ea16090 R15: 00007ffe5fe7f628
[  542.531280][T13204]  </TASK>
[  542.691728][T13203] netlink: 'syz.3.2175': attribute type 1 has an invalid length.
[  542.771321][T13203] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2175'.
[  542.962727][T13209] netlink: 'syz.2.2179': attribute type 21 has an invalid length.
[  542.986037][T13209] netlink: 'syz.2.2179': attribute type 7 has an invalid length.
[  543.208995][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  543.396651][T13219] netlink: 'syz.3.2182': attribute type 10 has an invalid length.
[  543.490144][T13219] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2182'.
[  543.989279][T13238] netlink: 'syz.3.2190': attribute type 1 has an invalid length.
[  544.032148][T13238] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2190'.
[  544.353813][ T5786] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  544.606673][T13252] netlink: zone id is out of range
[  544.648124][T13252] netlink: set zone limit has 8 unknown bytes
[  544.658299][T13253] FAULT_INJECTION: forcing a failure.
[  544.658299][T13253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.687054][T13252] netlink: 'syz.3.2196': attribute type 10 has an invalid length.
[  544.708821][T13252] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2196'.
[  544.729751][T13253] CPU: 1 PID: 13253 Comm: syz.2.2197 Not tainted syzkaller #0
[  544.737270][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.747353][T13253] Call Trace:
[  544.750657][T13253]  <TASK>
[  544.753599][T13253]  dump_stack_lvl+0x18c/0x250
[  544.758299][T13253]  ? show_regs_print_info+0x20/0x20
[  544.763509][T13253]  ? load_image+0x420/0x420
[  544.768033][T13253]  ? __might_fault+0xaa/0x120
[  544.772772][T13253]  ? __lock_acquire+0x7d40/0x7d40
[  544.778063][T13253]  should_fail_ex+0x39d/0x4d0
[  544.783102][T13253]  _copy_from_user+0x2f/0xe0
[  544.787811][T13253]  kstrtouint_from_user+0xde/0x170
[  544.793009][T13253]  ? kstrtol_from_user+0x190/0x190
[  544.798253][T13253]  proc_fail_nth_write+0x8f/0x250
[  544.803336][T13253]  ? proc_fail_nth_read+0x260/0x260
[  544.808604][T13253]  ? proc_fail_nth_read+0x260/0x260
[  544.813852][T13253]  vfs_write+0x296/0x990
[  544.818154][T13253]  ? file_end_write+0x250/0x250
[  544.823054][T13253]  ? __fget_files+0x28/0x4b0
[  544.827817][T13253]  ? __fget_files+0x28/0x4b0
[  544.832450][T13253]  ? __fget_files+0x43d/0x4b0
[  544.837206][T13253]  ? __fdget_pos+0x2a3/0x330
[  544.841835][T13253]  ? ksys_write+0x75/0x260
[  544.846305][T13253]  ksys_write+0x150/0x260
[  544.850685][T13253]  ? __ia32_sys_read+0x90/0x90
[  544.855680][T13253]  ? lockdep_hardirqs_on+0x98/0x150
[  544.860946][T13253]  do_syscall_64+0x55/0xa0
[  544.865393][T13253]  ? clear_bhb_loop+0x40/0x90
[  544.870106][T13253]  ? clear_bhb_loop+0x40/0x90
[  544.875091][T13253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.881629][T13253] RIP: 0033:0x7f01bef5d60e
[  544.886086][T13253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  544.905760][T13253] RSP: 002b:00007f01bff08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  544.914219][T13253] RAX: ffffffffffffffda RBX: 00007f01bff096c0 RCX: 00007f01bef5d60e
[  544.922238][T13253] RDX: 0000000000000001 RSI: 00007f01bff090a0 RDI: 0000000000000004
[  544.930254][T13253] RBP: 00007f01bff09090 R08: 0000000000000000 R09: 0000000000000000
[  544.938258][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  544.946271][T13253] R13: 00007f01bf216038 R14: 00007f01bf215fa0 R15: 00007ffdb9401988
[  544.954342][T13253]  </TASK>
[  545.029767][T13257] FAULT_INJECTION: forcing a failure.
[  545.029767][T13257] name failslab, interval 1, probability 0, space 0, times 0
[  545.043842][T13257] CPU: 1 PID: 13257 Comm: syz.4.2199 Not tainted syzkaller #0
[  545.051576][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  545.061687][T13257] Call Trace:
[  545.065009][T13257]  <TASK>
[  545.067981][T13257]  dump_stack_lvl+0x18c/0x250
[  545.072856][T13257]  ? show_regs_print_info+0x20/0x20
[  545.078297][T13257]  ? load_image+0x420/0x420
[  545.082856][T13257]  ? __might_sleep+0xe0/0xe0
[  545.087500][T13257]  ? __lock_acquire+0x7d40/0x7d40
[  545.092592][T13257]  ? perf_trace_lock_acquire+0x104/0x410
[  545.098455][T13257]  should_fail_ex+0x39d/0x4d0
[  545.103191][T13257]  should_failslab+0x9/0x20
[  545.107740][T13257]  slab_pre_alloc_hook+0x59/0x310
[  545.112824][T13257]  kmem_cache_alloc+0x5a/0x2d0
[  545.117644][T13257]  ? sk_prot_alloc+0x57/0x210
[  545.122380][T13257]  sk_prot_alloc+0x57/0x210
[  545.126946][T13257]  ? sk_alloc+0x24/0x360
[  545.131243][T13257]  sk_alloc+0x3a/0x360
[  545.135373][T13257]  inet6_create+0x7f0/0x11d0
[  545.139994][T13257]  ? inet6_create+0x83/0x11d0
[  545.144681][T13257]  __sock_create+0x4a6/0x940
[  545.149370][T13257]  mptcp_subflow_create_socket+0x10b/0xac0
[  545.155284][T13257]  ? __mptcp_subflow_connect+0x1450/0x1450
[  545.161114][T13257]  ? mark_lock+0x94/0x320
[  545.165574][T13257]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  545.171578][T13257]  __mptcp_nmpc_sk+0x157/0x740
[  545.176361][T13257]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  545.183148][T13257]  ? __local_bh_enable_ip+0x13a/0x1c0
[  545.188623][T13257]  ? lockdep_hardirqs_on+0x98/0x150
[  545.193926][T13257]  ? __local_bh_enable_ip+0x13a/0x1c0
[  545.199319][T13257]  mptcp_sendmsg_fastopen+0x7f/0x4d0
[  545.204629][T13257]  mptcp_sendmsg+0x14b2/0x16d0
[  545.209421][T13257]  ? aa_sk_perm+0x83c/0x970
[  545.213955][T13257]  ? aa_af_perm+0x330/0x330
[  545.218478][T13257]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  545.224909][T13257]  ? mptcp_shutdown+0x80/0x80
[  545.229773][T13257]  ? inet6_sendmsg+0x5f/0xd0
[  545.234464][T13257]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  545.239857][T13257]  ____sys_sendmsg+0x5ba/0x960
[  545.244634][T13257]  ? __lock_acquire+0x7d40/0x7d40
[  545.249772][T13257]  ? __asan_memset+0x22/0x40
[  545.254389][T13257]  ? __sys_sendmsg_sock+0x30/0x30
[  545.259427][T13257]  ? __import_iovec+0x3fa/0x850
[  545.264305][T13257]  ? import_iovec+0x73/0xa0
[  545.268837][T13257]  ___sys_sendmsg+0x2a6/0x360
[  545.273534][T13257]  ? get_pid_task+0x20/0x1e0
[  545.278324][T13257]  ? __sys_sendmsg+0x2a0/0x2a0
[  545.283123][T13257]  ? __lock_acquire+0x7d40/0x7d40
[  545.288193][T13257]  __se_sys_sendmsg+0x1c2/0x2b0
[  545.293154][T13257]  ? __x64_sys_sendmsg+0x80/0x80
[  545.298124][T13257]  ? lockdep_hardirqs_on+0x98/0x150
[  545.303343][T13257]  do_syscall_64+0x55/0xa0
[  545.307776][T13257]  ? clear_bhb_loop+0x40/0x90
[  545.312469][T13257]  ? clear_bhb_loop+0x40/0x90
[  545.317163][T13257]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  545.323185][T13257] RIP: 0033:0x7f6a8439cdd9
[  545.327621][T13257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  545.347416][T13257] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  545.355854][T13257] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  545.363930][T13257] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004
[  545.371918][T13257] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  545.379900][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.387895][T13257] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  545.395898][T13257]  </TASK>
[  545.485307][T13261] netlink: 'syz.2.2201': attribute type 1 has an invalid length.
[  545.496157][T13261] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2201'.
[  545.668556][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  547.182524][T13299] netlink: 'syz.3.2212': attribute type 4 has an invalid length.
[  547.405420][T13307] netlink: 'syz.1.2214': attribute type 1 has an invalid length.
[  547.441193][T13307] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2214'.
[  547.562198][ T5786] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  547.730322][T13319] FAULT_INJECTION: forcing a failure.
[  547.730322][T13319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  547.745127][T13319] CPU: 0 PID: 13319 Comm: syz.1.2219 Not tainted syzkaller #0
[  547.753246][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  547.763326][T13319] Call Trace:
[  547.766642][T13319]  <TASK>
[  547.769588][T13319]  dump_stack_lvl+0x18c/0x250
[  547.774301][T13319]  ? show_regs_print_info+0x20/0x20
[  547.779528][T13319]  ? load_image+0x420/0x420
[  547.784186][T13319]  ? __might_fault+0xaa/0x120
[  547.788883][T13319]  ? __lock_acquire+0x7d40/0x7d40
[  547.793931][T13319]  should_fail_ex+0x39d/0x4d0
[  547.798654][T13319]  _copy_from_user+0x2f/0xe0
[  547.803271][T13319]  kstrtouint_from_user+0xde/0x170
[  547.808405][T13319]  ? kstrtol_from_user+0x190/0x190
[  547.813565][T13319]  proc_fail_nth_write+0x8f/0x250
[  547.818793][T13319]  ? proc_fail_nth_read+0x260/0x260
[  547.824119][T13319]  ? proc_fail_nth_read+0x260/0x260
[  547.829425][T13319]  vfs_write+0x296/0x990
[  547.833869][T13319]  ? file_end_write+0x250/0x250
[  547.838740][T13319]  ? __fget_files+0x28/0x4b0
[  547.843352][T13319]  ? __fget_files+0x28/0x4b0
[  547.847965][T13319]  ? __fget_files+0x43d/0x4b0
[  547.852680][T13319]  ? __fdget_pos+0x2a3/0x330
[  547.857283][T13319]  ? ksys_write+0x75/0x260
[  547.861734][T13319]  ksys_write+0x150/0x260
[  547.866183][T13319]  ? __ia32_sys_read+0x90/0x90
[  547.870981][T13319]  ? lockdep_hardirqs_on+0x98/0x150
[  547.876203][T13319]  do_syscall_64+0x55/0xa0
[  547.880722][T13319]  ? clear_bhb_loop+0x40/0x90
[  547.885413][T13319]  ? clear_bhb_loop+0x40/0x90
[  547.890107][T13319]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  547.896020][T13319] RIP: 0033:0x7fe70e75d60e
[  547.900652][T13319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  547.920711][T13319] RSP: 002b:00007fe70f686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  547.929326][T13319] RAX: ffffffffffffffda RBX: 00007fe70f6876c0 RCX: 00007fe70e75d60e
[  547.937314][T13319] RDX: 0000000000000001 RSI: 00007fe70f6870a0 RDI: 0000000000000007
[  547.945509][T13319] RBP: 00007fe70f687090 R08: 0000000000000000 R09: 0000000000000000
[  547.953754][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  547.961744][T13319] R13: 00007fe70ea16038 R14: 00007fe70ea15fa0 R15: 00007ffe5fe7f628
[  547.969838][T13319]  </TASK>
[  548.282512][T13328] netlink: 'syz.1.2224': attribute type 12 has an invalid length.
[  548.293860][T13328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2224'.
[  548.703359][T13341] netlink: 'syz.2.2227': attribute type 1 has an invalid length.
[  548.731215][T13341] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2227'.
[  548.777678][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  549.062867][T13351] FAULT_INJECTION: forcing a failure.
[  549.062867][T13351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.091865][T13351] CPU: 1 PID: 13351 Comm: syz.2.2231 Not tainted syzkaller #0
[  549.099407][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  549.109503][T13351] Call Trace:
[  549.112917][T13351]  <TASK>
[  549.115879][T13351]  dump_stack_lvl+0x18c/0x250
[  549.120614][T13351]  ? show_regs_print_info+0x20/0x20
[  549.125854][T13351]  ? load_image+0x420/0x420
[  549.130401][T13351]  ? __lock_acquire+0x7d40/0x7d40
[  549.135466][T13351]  ? snprintf+0xe9/0x140
[  549.139781][T13351]  should_fail_ex+0x39d/0x4d0
[  549.144515][T13351]  _copy_to_user+0x2f/0xa0
[  549.148985][T13351]  simple_read_from_buffer+0xe7/0x150
[  549.154418][T13351]  proc_fail_nth_read+0x1e8/0x260
[  549.159597][T13351]  ? proc_fault_inject_write+0x360/0x360
[  549.165367][T13351]  ? fsnotify_perm+0x271/0x5e0
[  549.170185][T13351]  ? proc_fault_inject_write+0x360/0x360
[  549.175883][T13351]  vfs_read+0x28b/0x970
[  549.180100][T13351]  ? kernel_read+0x1e0/0x1e0
[  549.184745][T13351]  ? __fget_files+0x28/0x4b0
[  549.189387][T13351]  ? __fget_files+0x28/0x4b0
[  549.194043][T13351]  ? __fget_files+0x43d/0x4b0
[  549.198779][T13351]  ? __fdget_pos+0x2a3/0x330
[  549.203414][T13351]  ? ksys_read+0x75/0x260
[  549.208128][T13351]  ksys_read+0x150/0x260
[  549.212463][T13351]  ? vfs_write+0x990/0x990
[  549.216917][T13351]  ? syscall_enter_from_user_mode+0x2e/0x80
[  549.222835][T13351]  do_syscall_64+0x55/0xa0
[  549.227334][T13351]  ? clear_bhb_loop+0x40/0x90
[  549.232119][T13351]  ? clear_bhb_loop+0x40/0x90
[  549.236820][T13351]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.242829][T13351] RIP: 0033:0x7f01bef5d60e
[  549.247277][T13351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  549.266987][T13351] RSP: 002b:00007f01bff08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  549.275503][T13351] RAX: ffffffffffffffda RBX: 00007f01bff096c0 RCX: 00007f01bef5d60e
[  549.283591][T13351] RDX: 000000000000000f RSI: 00007f01bff090a0 RDI: 0000000000000007
[  549.291584][T13351] RBP: 00007f01bff09090 R08: 0000000000000000 R09: 0000000000000000
[  549.299655][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.307642][T13351] R13: 00007f01bf216038 R14: 00007f01bf215fa0 R15: 00007ffdb9401988
[  549.315643][T13351]  </TASK>
[  549.342737][T13357] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2234'.
[  549.547962][T13360] netlink: 'syz.2.2236': attribute type 4 has an invalid length.
[  549.778632][T13367] FAULT_INJECTION: forcing a failure.
[  549.778632][T13367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.820744][T13367] CPU: 1 PID: 13367 Comm: syz.2.2238 Not tainted syzkaller #0
[  549.828297][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  549.838658][T13367] Call Trace:
[  549.841964][T13367]  <TASK>
[  549.844916][T13367]  dump_stack_lvl+0x18c/0x250
[  549.849660][T13367]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  549.855841][T13367]  ? show_regs_print_info+0x20/0x20
[  549.861067][T13367]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  549.867263][T13367]  should_fail_ex+0x39d/0x4d0
[  549.871990][T13367]  _copy_from_iter+0x1d9/0x12e0
[  549.876860][T13367]  ? __virt_addr_valid+0x18c/0x540
[  549.881996][T13367]  ? __lock_acquire+0x7d40/0x7d40
[  549.887043][T13367]  ? copyout_mc+0x70/0x70
[  549.891485][T13367]  ? __virt_addr_valid+0x18c/0x540
[  549.896614][T13367]  ? __virt_addr_valid+0x18c/0x540
[  549.901750][T13367]  ? __virt_addr_valid+0x469/0x540
[  549.906880][T13367]  ? __check_object_size+0x506/0xa20
[  549.912182][T13367]  kernfs_fop_write_iter+0x1a4/0x520
[  549.917499][T13367]  vfs_write+0x46c/0x990
[  549.921765][T13367]  ? file_end_write+0x250/0x250
[  549.926637][T13367]  ? __fget_files+0x43d/0x4b0
[  549.931431][T13367]  ? __fdget_pos+0x2a3/0x330
[  549.936040][T13367]  ? ksys_write+0x75/0x260
[  549.940490][T13367]  ksys_write+0x150/0x260
[  549.944841][T13367]  ? __ia32_sys_read+0x90/0x90
[  549.949639][T13367]  ? syscall_enter_from_user_mode+0x2e/0x80
[  549.955554][T13367]  do_syscall_64+0x55/0xa0
[  549.959984][T13367]  ? clear_bhb_loop+0x40/0x90
[  549.964677][T13367]  ? clear_bhb_loop+0x40/0x90
[  549.969373][T13367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.975280][T13367] RIP: 0033:0x7f01bef9cdd9
[  549.979732][T13367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.999528][T13367] RSP: 002b:00007f01bff09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  550.008136][T13367] RAX: ffffffffffffffda RBX: 00007f01bf215fa0 RCX: 00007f01bef9cdd9
[  550.016122][T13367] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000008
[  550.024113][T13367] RBP: 00007f01bff09090 R08: 0000000000000000 R09: 0000000000000000
[  550.032097][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.040078][T13367] R13: 00007f01bf216038 R14: 00007f01bf215fa0 R15: 00007ffdb9401988
[  550.048079][T13367]  </TASK>
[  550.105027][T13371] netlink: 'syz.3.2239': attribute type 1 has an invalid length.
[  550.122742][T13371] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2239'.
[  550.377752][ T5786] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  551.337770][T13399] netlink: 'syz.2.2249': attribute type 4 has an invalid length.
[  551.482303][T13397] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  551.490223][T13397] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2250'.
[  551.935772][T13419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'.
[  552.008817][T13406] veth1_to_hsr: left allmulticast mode
[  552.111554][T13406] veth1_to_hsr: left promiscuous mode
[  552.195541][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  552.196736][T13406] bridge0: port 5(veth1_to_hsr) entered disabled state
[  552.322029][T13429] FAULT_INJECTION: forcing a failure.
[  552.322029][T13429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.341254][T13429] CPU: 1 PID: 13429 Comm: syz.4.2258 Not tainted syzkaller #0
[  552.348796][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  552.358926][T13429] Call Trace:
[  552.362250][T13429]  <TASK>
[  552.365208][T13429]  dump_stack_lvl+0x18c/0x250
[  552.369899][T13429]  ? show_regs_print_info+0x20/0x20
[  552.375113][T13429]  ? load_image+0x420/0x420
[  552.379622][T13429]  ? __might_fault+0xaa/0x120
[  552.384305][T13429]  ? __lock_acquire+0x7d40/0x7d40
[  552.389388][T13429]  should_fail_ex+0x39d/0x4d0
[  552.394074][T13429]  _copy_from_iter+0x1d9/0x12e0
[  552.399021][T13429]  ? slab_post_alloc_hook+0x8a/0x4b0
[  552.404409][T13429]  ? __virt_addr_valid+0x18c/0x540
[  552.409561][T13429]  ? __lock_acquire+0x7d40/0x7d40
[  552.414605][T13429]  ? rcu_is_watching+0x15/0xb0
[  552.419413][T13429]  ? copyout_mc+0x70/0x70
[  552.423940][T13429]  ? __virt_addr_valid+0x18c/0x540
[  552.429161][T13429]  ? __virt_addr_valid+0x18c/0x540
[  552.434381][T13429]  ? __virt_addr_valid+0x469/0x540
[  552.439611][T13429]  ? __check_object_size+0x506/0xa20
[  552.444921][T13429]  netlink_sendmsg+0x76b/0xbf0
[  552.449725][T13429]  ? netlink_getsockopt+0x590/0x590
[  552.454954][T13429]  ? aa_sock_msg_perm+0x94/0x150
[  552.460179][T13429]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  552.465550][T13429]  ? security_socket_sendmsg+0x80/0xa0
[  552.471051][T13429]  ? netlink_getsockopt+0x590/0x590
[  552.476504][T13429]  ____sys_sendmsg+0x5ba/0x960
[  552.481412][T13429]  ? __asan_memset+0x22/0x40
[  552.486033][T13429]  ? __sys_sendmsg_sock+0x30/0x30
[  552.491079][T13429]  ? __import_iovec+0x5f2/0x850
[  552.495957][T13429]  ? import_iovec+0x73/0xa0
[  552.500483][T13429]  ___sys_sendmsg+0x2a6/0x360
[  552.505172][T13429]  ? get_pid_task+0x20/0x1e0
[  552.509980][T13429]  ? __sys_sendmsg+0x2a0/0x2a0
[  552.514869][T13429]  ? __lock_acquire+0x7d40/0x7d40
[  552.520146][T13429]  __se_sys_sendmsg+0x1c2/0x2b0
[  552.525023][T13429]  ? __x64_sys_sendmsg+0x80/0x80
[  552.529997][T13429]  ? lockdep_hardirqs_on+0x98/0x150
[  552.535239][T13429]  do_syscall_64+0x55/0xa0
[  552.539691][T13429]  ? clear_bhb_loop+0x40/0x90
[  552.544540][T13429]  ? clear_bhb_loop+0x40/0x90
[  552.549340][T13429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  552.555352][T13429] RIP: 0033:0x7f6a8439cdd9
[  552.559793][T13429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.579505][T13429] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  552.587944][T13429] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  552.595953][T13429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  552.603962][T13429] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  552.611964][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.620073][T13429] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  552.628098][T13429]  </TASK>
[  552.694117][T13406] hsr0: left allmulticast mode
[  552.698995][T13406] hsr_slave_0: left allmulticast mode
[  552.705951][T13406] hsr_slave_1: left allmulticast mode
[  552.712330][T13406] bridge0: port 4(hsr0) entered disabled state
[  552.722259][T13406] bridge0: port 3(team0) entered disabled state
[  552.742777][T13406] bridge_slave_1: left allmulticast mode
[  552.755589][T13406] bridge_slave_1: left promiscuous mode
[  552.762633][T13406] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.777006][T13406] bridge_slave_0: left allmulticast mode
[  552.784837][T13406] bridge_slave_0: left promiscuous mode
[  552.790668][T13406] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.969849][T13433] netlink: 'syz.4.2260': attribute type 4 has an invalid length.
[  552.979381][T13433] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2260'.
[  553.021262][T13433] .`: renamed from bond0 (while UP)
[  553.048849][T13436] netlink: 'syz.3.2262': attribute type 1 has an invalid length.
[  553.076419][T13437] netlink: 'syz.1.2261': attribute type 4 has an invalid length.
[  553.087914][T13436] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2262'.
[  553.104870][T13437] FAULT_INJECTION: forcing a failure.
[  553.104870][T13437] name failslab, interval 1, probability 0, space 0, times 0
[  553.120086][T13437] CPU: 0 PID: 13437 Comm: syz.1.2261 Not tainted syzkaller #0
[  553.127704][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  553.137940][T13437] Call Trace:
[  553.141339][T13437]  <TASK>
[  553.144288][T13437]  dump_stack_lvl+0x18c/0x250
[  553.148998][T13437]  ? show_regs_print_info+0x20/0x20
[  553.154231][T13437]  ? load_image+0x420/0x420
[  553.158761][T13437]  ? __might_sleep+0xe0/0xe0
[  553.163394][T13437]  ? __lock_acquire+0x7d40/0x7d40
[  553.168443][T13437]  should_fail_ex+0x39d/0x4d0
[  553.173149][T13437]  should_failslab+0x9/0x20
[  553.177683][T13437]  slab_pre_alloc_hook+0x59/0x310
[  553.182740][T13437]  kmem_cache_alloc_node+0x60/0x320
[  553.187966][T13437]  ? __alloc_skb+0x103/0x2c0
[  553.192593][T13437]  __alloc_skb+0x103/0x2c0
[  553.197032][T13437]  rtmsg_fib+0xeb/0x4c0
[  553.201225][T13437]  fib_table_insert+0xd7f/0x1b20
[  553.206200][T13437]  ? rtm_to_fib_config+0x1074/0x13b0
[  553.211514][T13437]  ? fib_new_table+0x10a/0x2d0
[  553.216487][T13437]  inet_rtm_newroute+0x14b/0x240
[  553.221459][T13437]  ? __mutex_lock+0x4f9/0xcc0
[  553.226242][T13437]  ? rcu_read_unlock+0xa0/0xa0
[  553.231038][T13437]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  553.236175][T13437]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  553.241308][T13437]  ? rcu_read_unlock+0xa0/0xa0
[  553.246091][T13437]  rtnetlink_rcv_msg+0x869/0xfa0
[  553.251064][T13437]  ? lockdep_hardirqs_on+0x98/0x150
[  553.256285][T13437]  ? rtnetlink_bind+0x80/0x80
[  553.260988][T13437]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  553.266996][T13437]  ? lock_chain_count+0x20/0x20
[  553.272044][T13437]  ? __local_bh_enable_ip+0x13a/0x1c0
[  553.277439][T13437]  ? lockdep_hardirqs_on+0x98/0x150
[  553.282667][T13437]  ? __local_bh_enable_ip+0x13a/0x1c0
[  553.288144][T13437]  ? _local_bh_enable+0xa0/0xa0
[  553.293017][T13437]  ? __dev_queue_xmit+0x265/0x3660
[  553.298165][T13437]  ? __dev_queue_xmit+0x265/0x3660
[  553.303388][T13437]  ? __dev_queue_xmit+0x1b2c/0x3660
[  553.308616][T13437]  ? __dev_queue_xmit+0x265/0x3660
[  553.313761][T13437]  ? ref_tracker_free+0x690/0x840
[  553.318863][T13437]  netlink_rcv_skb+0x241/0x4d0
[  553.323828][T13437]  ? rtnetlink_bind+0x80/0x80
[  553.328666][T13437]  ? netlink_ack+0x1180/0x1180
[  553.333566][T13437]  ? __lock_acquire+0x7d40/0x7d40
[  553.338710][T13437]  ? netlink_deliver_tap+0x2e/0x1b0
[  553.343946][T13437]  netlink_unicast+0x751/0x8d0
[  553.348745][T13437]  netlink_sendmsg+0x8d0/0xbf0
[  553.353545][T13437]  ? netlink_getsockopt+0x590/0x590
[  553.358769][T13437]  ? aa_sock_msg_perm+0x94/0x150
[  553.363741][T13437]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  553.369052][T13437]  ? security_socket_sendmsg+0x80/0xa0
[  553.374529][T13437]  ? netlink_getsockopt+0x590/0x590
[  553.379754][T13437]  ____sys_sendmsg+0x5ba/0x960
[  553.384551][T13437]  ? __asan_memset+0x22/0x40
[  553.389202][T13437]  ? __sys_sendmsg_sock+0x30/0x30
[  553.394262][T13437]  ? __import_iovec+0x5f2/0x850
[  553.399140][T13437]  ? import_iovec+0x73/0xa0
[  553.403662][T13437]  ___sys_sendmsg+0x2a6/0x360
[  553.408361][T13437]  ? get_pid_task+0x20/0x1e0
[  553.412976][T13437]  ? __sys_sendmsg+0x2a0/0x2a0
[  553.417927][T13437]  ? __lock_acquire+0x7d40/0x7d40
[  553.423217][T13437]  __se_sys_sendmsg+0x1c2/0x2b0
[  553.428178][T13437]  ? __x64_sys_sendmsg+0x80/0x80
[  553.433148][T13437]  ? lockdep_hardirqs_on+0x98/0x150
[  553.438370][T13437]  do_syscall_64+0x55/0xa0
[  553.442907][T13437]  ? clear_bhb_loop+0x40/0x90
[  553.447612][T13437]  ? clear_bhb_loop+0x40/0x90
[  553.452361][T13437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  553.458281][T13437] RIP: 0033:0x7fe70e79cdd9
[  553.462717][T13437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.482695][T13437] RSP: 002b:00007fe70f687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  553.491134][T13437] RAX: ffffffffffffffda RBX: 00007fe70ea15fa0 RCX: 00007fe70e79cdd9
[  553.499126][T13437] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003
[  553.507118][T13437] RBP: 00007fe70f687090 R08: 0000000000000000 R09: 0000000000000000
[  553.515118][T13437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  553.523112][T13437] R13: 00007fe70ea16038 R14: 00007fe70ea15fa0 R15: 00007ffe5fe7f628
[  553.531203][T13437]  </TASK>
[  553.744011][T13444] netlink: 'syz.1.2265': attribute type 10 has an invalid length.
[  553.843550][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  553.969273][T13449] FAULT_INJECTION: forcing a failure.
[  553.969273][T13449] name failslab, interval 1, probability 0, space 0, times 0
[  553.996502][T13449] CPU: 1 PID: 13449 Comm: syz.3.2267 Not tainted syzkaller #0
[  554.004129][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  554.014331][T13449] Call Trace:
[  554.017655][T13449]  <TASK>
[  554.020658][T13449]  dump_stack_lvl+0x18c/0x250
[  554.025404][T13449]  ? verify_lock_unused+0x140/0x140
[  554.030690][T13449]  ? show_regs_print_info+0x20/0x20
[  554.035952][T13449]  ? load_image+0x420/0x420
[  554.040519][T13449]  ? perf_trace_lock+0xfc/0x3b0
[  554.045428][T13449]  should_fail_ex+0x39d/0x4d0
[  554.050180][T13449]  should_failslab+0x9/0x20
[  554.054822][T13449]  slab_pre_alloc_hook+0x59/0x310
[  554.060001][T13449]  kmem_cache_alloc_node+0x60/0x320
[  554.065252][T13449]  ? __alloc_skb+0x103/0x2c0
[  554.069991][T13449]  __alloc_skb+0x103/0x2c0
[  554.074474][T13449]  tipc_msg_create+0x4f/0x4d0
[  554.079210][T13449]  ? tipc_own_addr+0x45/0x2a0
[  554.083946][T13449]  tipc_group_proto_xmit+0xce/0x790
[  554.089223][T13449]  tipc_group_proto_rcv+0x1698/0x1cf0
[  554.094766][T13449]  tipc_sk_proto_rcv+0x25c/0x1790
[  554.099960][T13449]  ? trace_tipc_sk_dump+0x200/0x200
[  554.105211][T13449]  ? net_generic+0x1e/0x240
[  554.109802][T13449]  ? tipc_sk_filtering+0x13c/0x510
[  554.115079][T13449]  tipc_sk_filter_rcv+0x2f5a/0x3190
[  554.120424][T13449]  ? __lock_acquire+0x1347/0x7d40
[  554.125499][T13449]  ? mark_lock+0x94/0x320
[  554.130074][T13449]  ? tipc_node_distr_xmit+0x3a6/0x400
[  554.135580][T13449]  ? tipc_sk_publish+0x450/0x450
[  554.140572][T13449]  ? tipc_node_xmit_skb+0x190/0x190
[  554.145831][T13449]  ? mark_lock+0x94/0x320
[  554.150239][T13449]  tipc_sk_backlog_rcv+0x147/0x270
[  554.155679][T13449]  ? tipc_sk_timeout+0xad0/0xad0
[  554.160760][T13449]  ? __local_bh_enable_ip+0x13a/0x1c0
[  554.166284][T13449]  ? do_raw_spin_unlock+0x121/0x230
[  554.171543][T13449]  __release_sock+0x1e5/0x460
[  554.176281][T13449]  release_sock+0x5f/0x1c0
[  554.180928][T13449]  tipc_send_group_bcast+0x406/0xad0
[  554.186368][T13449]  ? tipc_wait_for_connect+0x650/0x650
[  554.191938][T13449]  ? wait_woken+0x180/0x180
[  554.196500][T13449]  __tipc_sendmsg+0x33c/0x2bb0
[  554.201505][T13449]  ? rht_unlock+0x1d0/0x1d0
[  554.206078][T13449]  ? verify_lock_unused+0x140/0x140
[  554.211423][T13449]  ? verify_lock_unused+0x140/0x140
[  554.216679][T13449]  ? perf_trace_lock+0xfc/0x3b0
[  554.221574][T13449]  ? trace_event_raw_event_lock+0x250/0x250
[  554.227524][T13449]  ? mark_lock+0x94/0x320
[  554.231901][T13449]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  554.238101][T13449]  ? __local_bh_enable_ip+0x13a/0x1c0
[  554.243509][T13449]  ? lockdep_hardirqs_on+0x98/0x150
[  554.248755][T13449]  ? __local_bh_enable_ip+0x13a/0x1c0
[  554.254340][T13449]  ? _local_bh_enable+0xa0/0xa0
[  554.259330][T13449]  tipc_sendmsg+0x55/0x70
[  554.263793][T13449]  sock_write_iter+0x2df/0x420
[  554.268610][T13449]  ? sock_read_iter+0x3e0/0x3e0
[  554.273601][T13449]  ? common_file_perm+0x198/0x1f0
[  554.278690][T13449]  vfs_write+0x46c/0x990
[  554.282988][T13449]  ? file_end_write+0x250/0x250
[  554.287986][T13449]  ? __fget_files+0x43d/0x4b0
[  554.292807][T13449]  ? __fdget_pos+0x1d8/0x330
[  554.297441][T13449]  ? ksys_write+0x75/0x260
[  554.301908][T13449]  ksys_write+0x150/0x260
[  554.306378][T13449]  ? __ia32_sys_read+0x90/0x90
[  554.311211][T13449]  ? lockdep_hardirqs_on+0x98/0x150
[  554.316637][T13449]  do_syscall_64+0x55/0xa0
[  554.321085][T13449]  ? clear_bhb_loop+0x40/0x90
[  554.325967][T13449]  ? clear_bhb_loop+0x40/0x90
[  554.330682][T13449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  554.336611][T13449] RIP: 0033:0x7f5fa719cdd9
[  554.341062][T13449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.360995][T13449] RSP: 002b:00007f5fa8016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  554.369466][T13449] RAX: ffffffffffffffda RBX: 00007f5fa7415fa0 RCX: 00007f5fa719cdd9
[  554.377480][T13449] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 000000000000000a
[  554.385490][T13449] RBP: 00007f5fa8016090 R08: 0000000000000000 R09: 0000000000000000
[  554.393497][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  554.401503][T13449] R13: 00007f5fa7416038 R14: 00007f5fa7415fa0 R15: 00007ffcd1e48468
[  554.409531][T13449]  </TASK>
[  554.460830][T13457] FAULT_INJECTION: forcing a failure.
[  554.460830][T13457] name failslab, interval 1, probability 0, space 0, times 0
[  554.491237][T13457] CPU: 1 PID: 13457 Comm: syz.4.2269 Not tainted syzkaller #0
[  554.498876][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  554.508963][T13457] Call Trace:
[  554.512263][T13457]  <TASK>
[  554.515226][T13457]  dump_stack_lvl+0x18c/0x250
[  554.519994][T13457]  ? show_regs_print_info+0x20/0x20
[  554.525224][T13457]  ? load_image+0x420/0x420
[  554.529750][T13457]  ? __might_sleep+0xe0/0xe0
[  554.534357][T13457]  ? __lock_acquire+0x7d40/0x7d40
[  554.539412][T13457]  should_fail_ex+0x39d/0x4d0
[  554.544109][T13457]  should_failslab+0x9/0x20
[  554.548665][T13457]  slab_pre_alloc_hook+0x59/0x310
[  554.553723][T13457]  ? page_pool_create+0x71/0x5c0
[  554.558709][T13457]  __kmem_cache_alloc_node+0x53/0x250
[  554.564125][T13457]  ? page_pool_create+0x71/0x5c0
[  554.569085][T13457]  kmalloc_node_trace+0x26/0xe0
[  554.573967][T13457]  page_pool_create+0x71/0x5c0
[  554.578762][T13457]  bpf_test_run_xdp_live+0x203/0x1b20
[  554.584162][T13457]  ? verify_lock_unused+0x140/0x140
[  554.589471][T13457]  ? kasan_set_track+0x4e/0x70
[  554.594262][T13457]  ? __kasan_kmalloc+0x8f/0xa0
[  554.599131][T13457]  ? __kmalloc+0xb4/0x230
[  554.603514][T13457]  ? bpf_test_init+0x9f/0x140
[  554.608209][T13457]  ? bpf_prog_test_run+0x321/0x390
[  554.613429][T13457]  ? __sys_bpf+0x49d/0x890
[  554.617861][T13457]  ? __x64_sys_bpf+0x7c/0x90
[  554.622464][T13457]  ? do_syscall_64+0x55/0xa0
[  554.627080][T13457]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  554.633613][T13457]  ? xdp_convert_md_to_buff+0x330/0x330
[  554.639217][T13457]  ? __lock_acquire+0x7d40/0x7d40
[  554.644361][T13457]  ? __virt_addr_valid+0x18c/0x540
[  554.649500][T13457]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  554.655864][T13457]  ? _copy_from_user+0xa5/0xe0
[  554.660652][T13457]  ? bpf_test_init+0x119/0x140
[  554.665436][T13457]  ? xdp_convert_md_to_buff+0x5b/0x330
[  554.671006][T13457]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  554.676416][T13457]  ? dev_put+0x80/0x80
[  554.680524][T13457]  ? dev_put+0x80/0x80
[  554.684723][T13457]  bpf_prog_test_run+0x321/0x390
[  554.689685][T13457]  __sys_bpf+0x49d/0x890
[  554.693951][T13457]  ? bpf_link_show_fdinfo+0x390/0x390
[  554.699438][T13457]  ? lock_chain_count+0x20/0x20
[  554.704416][T13457]  __x64_sys_bpf+0x7c/0x90
[  554.708852][T13457]  do_syscall_64+0x55/0xa0
[  554.713307][T13457]  ? clear_bhb_loop+0x40/0x90
[  554.718039][T13457]  ? clear_bhb_loop+0x40/0x90
[  554.722755][T13457]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  554.728894][T13457] RIP: 0033:0x7f6a8439cdd9
[  554.733336][T13457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.753140][T13457] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  554.762013][T13457] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  554.770026][T13457] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  554.778322][T13457] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  554.786330][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.794329][T13457] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  554.802427][T13457]  </TASK>
[  554.840012][T13449] netlink: 'syz.3.2267': attribute type 10 has an invalid length.
[  554.864581][T13449] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2267'.
[  555.165783][T13468] netlink: 'syz.3.2272': attribute type 1 has an invalid length.
[  555.226148][T13468] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2272'.
[  555.721208][T13475] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2275'.
[  555.948805][T13485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2280'.
[  555.972193][T13485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2280'.
[  555.988540][T13486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2280'.
[  556.011932][T13484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2280'.
[  556.142321][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  556.408295][T13500] netlink: 'syz.3.2283': attribute type 1 has an invalid length.
[  556.444931][T13500] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2283'.
[  556.984374][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  557.415056][ T5786] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  557.655183][T13534] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  557.760326][T13534] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2295'.
[  557.852516][T13536] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  558.645637][T13539] netlink: 'syz.1.2297': attribute type 29 has an invalid length.
[  558.654423][T13539] netlink: 'syz.1.2297': attribute type 29 has an invalid length.
[  558.674660][T13538] netlink: 'syz.1.2297': attribute type 29 has an invalid length.
[  559.188943][T13548] team0: Port device team_slave_0 removed
[  559.231534][T13548] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  559.661721][ T5786] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  559.716232][T13565] netlink: 'syz.4.2306': attribute type 1 has an invalid length.
[  559.750994][T13565] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2306'.
[  559.925144][T13571] FAULT_INJECTION: forcing a failure.
[  559.925144][T13571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.940992][T13571] CPU: 1 PID: 13571 Comm: syz.4.2309 Not tainted syzkaller #0
[  559.948550][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  559.958845][T13571] Call Trace:
[  559.962190][T13571]  <TASK>
[  559.965200][T13571]  dump_stack_lvl+0x18c/0x250
[  559.970139][T13571]  ? show_regs_print_info+0x20/0x20
[  559.975420][T13571]  ? load_image+0x420/0x420
[  559.979999][T13571]  ? __might_fault+0xaa/0x120
[  559.984740][T13571]  ? __lock_acquire+0x7d40/0x7d40
[  559.989844][T13571]  should_fail_ex+0x39d/0x4d0
[  559.994785][T13571]  _copy_from_iter+0x1d9/0x12e0
[  559.999790][T13571]  ? __might_fault+0xaa/0x120
[  560.004545][T13571]  ? _copy_from_iter+0x24e/0x12e0
[  560.009725][T13571]  ? __virt_addr_valid+0x18c/0x540
[  560.014921][T13571]  ? __lock_acquire+0x7d40/0x7d40
[  560.020112][T13571]  ? copyout_mc+0x70/0x70
[  560.024535][T13571]  ? copyout_mc+0x70/0x70
[  560.028935][T13571]  ? __virt_addr_valid+0x18c/0x540
[  560.034126][T13571]  ? page_copy_sane+0x16a/0x270
[  560.039123][T13571]  copy_page_from_iter+0x7b/0x100
[  560.044205][T13571]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  560.050166][T13571]  tun_get_user+0x15db/0x3ca0
[  560.054903][T13571]  ? aa_file_perm+0x11b/0xee0
[  560.059639][T13571]  ? rcu_read_unlock+0xa0/0xa0
[  560.064471][T13571]  ? tun_get+0x1c/0x2e0
[  560.068665][T13571]  ? __lock_acquire+0x7d40/0x7d40
[  560.073778][T13571]  ? tun_get+0x1c/0x2e0
[  560.077989][T13571]  tun_chr_write_iter+0x119/0x200
[  560.083058][T13571]  vfs_write+0x46c/0x990
[  560.087348][T13571]  ? file_end_write+0x250/0x250
[  560.092247][T13571]  ? __fget_files+0x43d/0x4b0
[  560.096975][T13571]  ? __fdget_pos+0x1d8/0x330
[  560.101604][T13571]  ? ksys_write+0x75/0x260
[  560.106061][T13571]  ksys_write+0x150/0x260
[  560.110559][T13571]  ? __ia32_sys_read+0x90/0x90
[  560.115459][T13571]  ? lockdep_hardirqs_on+0x98/0x150
[  560.120877][T13571]  do_syscall_64+0x55/0xa0
[  560.125529][T13571]  ? clear_bhb_loop+0x40/0x90
[  560.130355][T13571]  ? clear_bhb_loop+0x40/0x90
[  560.135069][T13571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.141088][T13571] RIP: 0033:0x7f6a8439cdd9
[  560.145636][T13571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.165914][T13571] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  560.174538][T13571] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  560.182628][T13571] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  560.190864][T13571] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  560.198888][T13571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  560.207064][T13571] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  560.215098][T13571]  </TASK>
[  560.537221][T13582] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2311'.
[  560.547596][T13582] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  561.155782][T13600] netlink: 'syz.2.2317': attribute type 1 has an invalid length.
[  561.156900][ T5786] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  561.167627][T13600] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2317'.
[  561.428739][T13606] netlink: 'syz.4.2319': attribute type 10 has an invalid length.
[  561.458576][T13606] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.475387][T13606] bridge_slave_1: left allmulticast mode
[  561.485527][T13606] bridge_slave_1: left promiscuous mode
[  561.494893][T13606] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.530256][T13606] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  561.664358][T13614] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  561.673006][T13614] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  561.681980][T13613] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  561.692726][T13613] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  561.701805][T13613] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  561.710184][T13613] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  561.718944][T13613] netlink: 'syz.3.2321': attribute type 29 has an invalid length.
[  562.058763][T13631] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2328'.
[  562.107486][ T5786] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  562.783091][T13652] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2337'.
[  562.935403][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  563.275987][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  563.289475][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  563.821456][T13659] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2340'.
[  563.942597][T13668] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2342'.
[  566.416315][T13678] validate_nla: 20 callbacks suppressed
[  566.416335][T13678] netlink: 'syz.2.2345': attribute type 29 has an invalid length.
[  566.473036][T13678] netlink: 'syz.2.2345': attribute type 29 has an invalid length.
[  566.527270][T13682] netlink: 'syz.2.2345': attribute type 29 has an invalid length.
[  566.631470][T13683] netlink: 'syz.2.2345': attribute type 29 has an invalid length.
[  567.382290][T13692] netlink: 'syz.4.2348': attribute type 1 has an invalid length.
[  567.400830][T13692] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2348'.
[  567.561335][ T5786] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  567.929689][T13701] 
€Â: renamed from lo (while UP)
[  568.571977][T13714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.739571][T13703] netlink: 'syz.2.2353': attribute type 10 has an invalid length.
[  568.755440][T13703] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2353'.
[  568.972572][T13721] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2356'.
[  569.103586][T13721] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2356'.
[  570.011388][ T5786] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  570.045618][T13739] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2361'.
[  570.202440][T13739] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2361'.
[  570.235155][T13752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  570.249962][T13752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  570.258911][T13752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  570.283091][T13753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  570.294751][T13753] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  570.304309][T13753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  570.557854][T13765] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2365'.
[  570.576089][T13750] chnl_net:caif_netlink_parms(): no params data found
[  570.735571][T13750] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.750324][T13750] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.760792][T13750] bridge_slave_0: entered allmulticast mode
[  570.768885][T13750] bridge_slave_0: entered promiscuous mode
[  570.777754][T13750] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.785017][T13750] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.795233][T13750] bridge_slave_1: entered allmulticast mode
[  570.810128][T13750] bridge_slave_1: entered promiscuous mode
[  570.891117][T13750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.907003][T13750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.002918][T13750] team0: Port device team_slave_0 added
[  571.032880][T13750] team0: Port device team_slave_1 added
[  571.110080][T13750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.132848][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.249094][T13750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.326500][T13750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.346800][T13777] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2368'.
[  571.370467][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.415906][T13750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.449893][  T762] tipc: Left network mode
[  571.494554][T13777] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2368'.
[  571.602635][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  571.774315][T13750] hsr_slave_0: entered promiscuous mode
[  571.833567][T13750] hsr_slave_1: entered promiscuous mode
[  571.846771][T13750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  571.878184][T13750] Cannot create hsr debugfs directory
[  571.903278][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'.
[  572.232769][T13804] FAULT_INJECTION: forcing a failure.
[  572.232769][T13804] name failslab, interval 1, probability 0, space 0, times 0
[  572.245915][T13804] CPU: 1 PID: 13804 Comm: syz.3.2374 Not tainted syzkaller #0
[  572.253469][T13804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  572.263591][T13804] Call Trace:
[  572.266953][T13804]  <TASK>
[  572.269964][T13804]  dump_stack_lvl+0x18c/0x250
[  572.274732][T13804]  ? show_regs_print_info+0x20/0x20
[  572.280100][T13804]  ? load_image+0x420/0x420
[  572.284699][T13804]  ? verify_lock_unused+0x140/0x140
[  572.290072][T13804]  ? perf_trace_lock_acquire+0x34f/0x410
[  572.295796][T13804]  should_fail_ex+0x39d/0x4d0
[  572.300573][T13804]  should_failslab+0x9/0x20
[  572.305186][T13804]  slab_pre_alloc_hook+0x59/0x310
[  572.310300][T13804]  kmem_cache_alloc+0x5a/0x2d0
[  572.315112][T13804]  ? skb_clone+0x1eb/0x370
[  572.319596][T13804]  skb_clone+0x1eb/0x370
[  572.323890][T13804]  __netlink_deliver_tap+0x41c/0x830
[  572.329336][T13804]  ? netlink_deliver_tap+0x2e/0x1b0
[  572.334585][T13804]  netlink_deliver_tap+0x19c/0x1b0
[  572.339748][T13804]  netlink_unicast+0x72c/0x8d0
[  572.344785][T13804]  netlink_sendmsg+0x8d0/0xbf0
[  572.349615][T13804]  ? netlink_getsockopt+0x590/0x590
[  572.354862][T13804]  ? aa_sock_msg_perm+0x94/0x150
[  572.359849][T13804]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  572.365166][T13804]  ? security_socket_sendmsg+0x80/0xa0
[  572.370694][T13804]  ? netlink_getsockopt+0x590/0x590
[  572.375973][T13804]  ____sys_sendmsg+0x5ba/0x960
[  572.380899][T13804]  ? __asan_memset+0x22/0x40
[  572.385539][T13804]  ? __sys_sendmsg_sock+0x30/0x30
[  572.390600][T13804]  ? __import_iovec+0x3fa/0x850
[  572.395641][T13804]  ? import_iovec+0x73/0xa0
[  572.400238][T13804]  ___sys_sendmsg+0x2a6/0x360
[  572.404981][T13804]  ? get_pid_task+0x20/0x1e0
[  572.409644][T13804]  ? __sys_sendmsg+0x2a0/0x2a0
[  572.414516][T13804]  ? __lock_acquire+0x7d40/0x7d40
[  572.419669][T13804]  __se_sys_sendmsg+0x1c2/0x2b0
[  572.424570][T13804]  ? __x64_sys_sendmsg+0x80/0x80
[  572.429595][T13804]  ? lockdep_hardirqs_on+0x98/0x150
[  572.434846][T13804]  do_syscall_64+0x55/0xa0
[  572.439291][T13804]  ? clear_bhb_loop+0x40/0x90
[  572.444005][T13804]  ? clear_bhb_loop+0x40/0x90
[  572.448726][T13804]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  572.454656][T13804] RIP: 0033:0x7f5fa719cdd9
[  572.459106][T13804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.478838][T13804] RSP: 002b:00007f5fa8016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.487485][T13804] RAX: ffffffffffffffda RBX: 00007f5fa7415fa0 RCX: 00007f5fa719cdd9
[  572.495493][T13804] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[  572.503531][T13804] RBP: 00007f5fa8016090 R08: 0000000000000000 R09: 0000000000000000
[  572.511562][T13804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.519668][T13804] R13: 00007f5fa7416038 R14: 00007f5fa7415fa0 R15: 00007ffcd1e48468
[  572.527725][T13804]  </TASK>
[  572.541573][ T5786] Bluetooth: hci1: command tx timeout
[  572.612436][T13794] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2373'.
[  572.633658][T13800] netlink: 'syz.1.2372': attribute type 10 has an invalid length.
[  572.671953][T13800] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.701917][T13800] bridge_slave_1: left allmulticast mode
[  572.728848][T13800] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.760559][T13804] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2374'.
[  573.035007][T13794] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.2373'.
[  573.424175][ T1079] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  573.440111][T13820] netlink: 'syz.1.2377': attribute type 4 has an invalid length.
[  573.458684][T13820] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2377'.
[  573.934278][T13817] netlink: 'syz.4.2376': attribute type 29 has an invalid length.
[  574.503870][T13831] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2379'.
[  574.571757][ T5786] Bluetooth: hci1: command tx timeout
[  574.579638][T13817] netlink: 'syz.4.2376': attribute type 29 has an invalid length.
[  574.638923][ T5786] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  574.704649][T13831] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2379'.
[  575.788915][T13750] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  575.837975][T13750] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  575.996705][T13750] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  576.048509][T13750] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  576.259592][  T762] veth1_to_team: left allmulticast mode
[  576.288666][  T762] veth1_to_team: left promiscuous mode
[  576.310496][  T762] @: port 1(veth1_to_team) entered disabled state
[  576.350284][  T762] hsr_slave_0: left promiscuous mode
[  576.372473][  T762] hsr_slave_1: left promiscuous mode
[  576.398487][  T762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  576.418016][  T762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  576.435064][  T762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  576.453072][  T762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  576.471626][  T762] batman_adv: batadv0: Removing interface: macvlan1
[  576.497377][  T762] veth1_macvtap: left promiscuous mode
[  576.503258][  T762] veth0_macvtap: left promiscuous mode
[  576.509059][  T762] veth1_vlan: left allmulticast mode
[  576.519988][  T762] veth1_vlan: left promiscuous mode
[  576.525985][  T762] veth0_vlan: left promiscuous mode
[  576.576535][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  576.651286][ T5786] Bluetooth: hci1: command tx timeout
[  576.844895][  T762] geneve1 (unregistering): left promiscuous mode
[  576.851684][  T762] geneve1 (unregistering): left allmulticast mode
[  576.867055][  T762] team0 (unregistering): Port device geneve1 removed
[  577.149829][  T762] macvlan0 (unregistering): left promiscuous mode
[  577.156836][  T762] macvlan0 (unregistering): left allmulticast mode
[  577.169169][  T762] team0 (unregistering): Port device macvlan0 removed
[  577.427847][T13887] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2391'.
[  577.634676][  T762] team_slave_1 (unregistering): left promiscuous mode
[  577.643288][  T762] team_slave_1 (unregistering): left allmulticast mode
[  577.651132][  T762] team0 (unregistering): Port device team_slave_1 removed
[  578.290906][T13870] netlink: 'syz.3.2388': attribute type 4 has an invalid length.
[  578.302294][T13870] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2388'.
[  578.325390][T13887] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2391'.
[  578.351396][T13894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.393725][T13894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.433368][T13894] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  578.461332][T13894] batman_adv: batadv0: Removing interface: virt_wifi0
[  578.781361][ T5786] Bluetooth: hci1: command tx timeout
[  579.213102][T13894] .`: (slave batadv0): Releasing backup interface
[  579.601131][T13750] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.708932][T13750] 8021q: adding VLAN 0 to HW filter on device team0
[  579.812732][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.819989][ T6972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.887321][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.894582][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.108879][T13750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  580.458547][ T5786] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  580.894682][T13750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.026611][T13750] veth0_vlan: entered promiscuous mode
[  581.094536][T13750] veth1_vlan: entered promiscuous mode
[  581.228465][T13947] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2403'.
[  581.291895][T13941] netlink: 'syz.4.2402': attribute type 153 has an invalid length.
[  581.338616][T13750] veth0_macvtap: entered promiscuous mode
[  581.348958][T13941] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2402'.
[  581.382015][T13947] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2403'.
[  581.478961][T13750] veth1_macvtap: entered promiscuous mode
[  581.537071][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.550335][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.562856][T13750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.579949][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.591432][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.608636][T13750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.636704][T13750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.647479][T13750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.659128][T13750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.675968][T13750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.716264][T13953] netlink: 'syz.3.2405': attribute type 21 has an invalid length.
[  581.735748][T13953] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2405'.
[  581.754230][T13953] netlink: 'syz.3.2405': attribute type 5 has an invalid length.
[  581.796016][T13953] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2405'.
[  581.811013][T13954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.837158][T13954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.871970][T13954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.879507][T13954] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.090624][T13953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2405'.
[  582.150610][T13955] netlink: 'syz.3.2405': attribute type 33 has an invalid length.
[  582.324481][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.347219][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.409508][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.419565][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.434630][T13964] FAULT_INJECTION: forcing a failure.
[  582.434630][T13964] name failslab, interval 1, probability 0, space 0, times 0
[  582.500367][T13964] CPU: 1 PID: 13964 Comm: syz.4.2413 Not tainted syzkaller #0
[  582.507955][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  582.518135][T13964] Call Trace:
[  582.521463][T13964]  <TASK>
[  582.524489][T13964]  dump_stack_lvl+0x18c/0x250
[  582.529325][T13964]  ? show_regs_print_info+0x20/0x20
[  582.534700][T13964]  ? load_image+0x420/0x420
[  582.539277][T13964]  ? verify_lock_unused+0x140/0x140
[  582.544532][T13964]  ? perf_trace_lock_acquire+0x34f/0x410
[  582.550275][T13964]  should_fail_ex+0x39d/0x4d0
[  582.555055][T13964]  should_failslab+0x9/0x20
[  582.559702][T13964]  slab_pre_alloc_hook+0x59/0x310
[  582.564824][T13964]  kmem_cache_alloc+0x5a/0x2d0
[  582.569646][T13964]  ? skb_clone+0x1eb/0x370
[  582.574154][T13964]  skb_clone+0x1eb/0x370
[  582.578564][T13964]  __netlink_deliver_tap+0x41c/0x830
[  582.583980][T13964]  ? netlink_deliver_tap+0x2e/0x1b0
[  582.589254][T13964]  netlink_deliver_tap+0x19c/0x1b0
[  582.594473][T13964]  netlink_unicast+0x72c/0x8d0
[  582.599357][T13964]  netlink_sendmsg+0x8d0/0xbf0
[  582.604259][T13964]  ? netlink_getsockopt+0x590/0x590
[  582.609540][T13964]  ? aa_sock_msg_perm+0x94/0x150
[  582.614556][T13964]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  582.619984][T13964]  ? security_socket_sendmsg+0x80/0xa0
[  582.625530][T13964]  ? netlink_getsockopt+0x590/0x590
[  582.630911][T13964]  ____sys_sendmsg+0x5ba/0x960
[  582.635799][T13964]  ? __asan_memset+0x22/0x40
[  582.640504][T13964]  ? __sys_sendmsg_sock+0x30/0x30
[  582.645621][T13964]  ? __import_iovec+0x5f2/0x850
[  582.650600][T13964]  ? import_iovec+0x73/0xa0
[  582.655254][T13964]  ___sys_sendmsg+0x2a6/0x360
[  582.660191][T13964]  ? get_pid_task+0x20/0x1e0
[  582.664886][T13964]  ? __sys_sendmsg+0x2a0/0x2a0
[  582.669833][T13964]  ? __lock_acquire+0x7d40/0x7d40
[  582.675051][T13964]  __se_sys_sendmsg+0x1c2/0x2b0
[  582.679981][T13964]  ? __x64_sys_sendmsg+0x80/0x80
[  582.685066][T13964]  ? lockdep_hardirqs_on+0x98/0x150
[  582.690346][T13964]  do_syscall_64+0x55/0xa0
[  582.694824][T13964]  ? clear_bhb_loop+0x40/0x90
[  582.699563][T13964]  ? clear_bhb_loop+0x40/0x90
[  582.704314][T13964]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  582.710271][T13964] RIP: 0033:0x7f6a8439cdd9
[  582.714753][T13964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.734503][T13964] RSP: 002b:00007f6a85205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.742994][T13964] RAX: ffffffffffffffda RBX: 00007f6a84615fa0 RCX: 00007f6a8439cdd9
[  582.751058][T13964] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  582.759090][T13964] RBP: 00007f6a85205090 R08: 0000000000000000 R09: 0000000000000000
[  582.767117][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.775228][T13964] R13: 00007f6a84616038 R14: 00007f6a84615fa0 R15: 00007ffd4590f0b8
[  582.783333][T13964]  </TASK>
[  582.978363][T13968] netlink: 'syz.2.2359': attribute type 1 has an invalid length.
[  582.999633][T13968] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2359'.
[  583.301367][T13972] macvlan1: entered promiscuous mode
[  583.462838][T13972] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2407'.
[  583.489270][T13972] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2407'.
[  583.631177][T13972] tipc: Started in network mode
[  583.651100][T13972] tipc: Node identity d, cluster identity 56
[  583.698830][T13972] tipc: Node number set to 13
[  583.915591][T13753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  583.926688][T13753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  583.938157][T13753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  583.959078][T13753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  583.972797][T13753] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  583.985735][T13753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  584.602242][T13988] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2412'.
[  584.713933][T13988] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.2412'.
[  584.844158][T14001] netlink: 'syz.3.2416': attribute type 21 has an invalid length.
[  584.901472][T14001] netlink: 'syz.3.2416': attribute type 19 has an invalid length.
[  584.919844][T14001] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.2416'.
[  584.929619][T13982] chnl_net:caif_netlink_parms(): no params data found
[  584.956429][T14004] netlink: 'syz.4.2417': attribute type 1 has an invalid length.
[  584.981275][T14004] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2417'.
[  585.918576][T13982] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.954197][T13982] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.974847][T13982] bridge_slave_0: entered allmulticast mode
[  585.990732][T13982] bridge_slave_0: entered promiscuous mode
[  586.012560][T13982] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.025199][T13982] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.033639][T13982] bridge_slave_1: entered allmulticast mode
[  586.044095][T13982] bridge_slave_1: entered promiscuous mode
[  586.091844][ T5786] Bluetooth: hci3: command tx timeout
[  586.255674][T13982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  586.295132][T13982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.477224][T14036] netlink: 'syz.4.2425': attribute type 1 has an invalid length.
[  586.647967][T14036] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2425'.
[  586.671547][T13982] team0: Port device team_slave_0 added
[  586.712097][   T34] tipc: Left network mode
[  586.738426][T14034] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2424'.
[  586.808998][T13982] team0: Port device team_slave_1 added
[  586.861727][T14034] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2424'.
[  587.205888][T13982] batman_adv: batadv0: Adding interface: batadv_slave_0
[  587.213187][T13982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.241702][T13982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.255265][T13982] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.262874][T13982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.298591][T13982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.706314][T13982] hsr_slave_0: entered promiscuous mode
[  587.986815][T13982] hsr_slave_1: entered promiscuous mode
[  588.128397][T13982] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  588.173123][ T5786] Bluetooth: hci3: command tx timeout
[  588.204959][T13982] Cannot create hsr debugfs directory
[  588.479002][T14055] netlink: 'syz.4.2431': attribute type 21 has an invalid length.
[  588.541225][T14055] netlink: 'syz.4.2431': attribute type 19 has an invalid length.
[  588.587671][T14055] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.2431'.
[  588.898559][T14077] netlink: 'syz.4.2434': attribute type 1 has an invalid length.
[  588.926627][T14077] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2434'.
[  589.257987][T14087] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2435'.
[  589.419126][T14087] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2435'.
[  590.252617][ T5786] Bluetooth: hci3: command tx timeout
[  590.519778][T14106] netlink: 'syz.2.2441': attribute type 21 has an invalid length.
[  590.596506][T14106] netlink: 'syz.2.2441': attribute type 19 has an invalid length.
[  590.644993][T14106] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.2441'.
[  591.602292][T14114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.107602][T14121] netlink: 'syz.3.2443': attribute type 1 has an invalid length.
[  592.155238][T14121] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2443'.
[  592.451675][ T5786] Bluetooth: hci3: command tx timeout
[  604.645537][ T3455] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  608.955121][T13753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  608.965227][T13753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  608.979857][T13753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  608.989360][T13753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  609.002562][T13753] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  609.019742][T13753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  609.210153][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  609.230177][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  609.239219][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  609.250439][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  609.259230][ T5786] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  609.270915][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  609.356076][T13753] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  609.369120][T13753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  609.379010][T13753] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  609.390377][T13753] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  609.399349][T13753] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  609.409674][T13753] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  611.051285][T13753] Bluetooth: hci0: command tx timeout
[  611.371614][T13753] Bluetooth: hci5: command tx timeout
[  611.451408][T13753] Bluetooth: hci6: command tx timeout
[  613.135918][T13753] Bluetooth: hci0: command tx timeout
[  613.451847][T13753] Bluetooth: hci5: command tx timeout
[  613.531226][T13753] Bluetooth: hci6: command tx timeout
[  615.211165][T13753] Bluetooth: hci0: command tx timeout
[  615.531604][T13753] Bluetooth: hci5: command tx timeout
[  615.611265][T13753] Bluetooth: hci6: command tx timeout
[  617.291207][T13753] Bluetooth: hci0: command tx timeout
[  617.611657][T13753] Bluetooth: hci5: command tx timeout
[  617.691243][T13753] Bluetooth: hci6: command tx timeout
[  624.656276][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.668573][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  643.750422][ T5786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  643.760249][ T5786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  643.768932][ T5786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  643.782389][ T5786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  643.790183][ T5786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  643.797888][ T5786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  645.851361][T13753] Bluetooth: hci7: command tx timeout
[  647.931359][T13753] Bluetooth: hci7: command tx timeout
[  650.011315][T13753] Bluetooth: hci7: command tx timeout
[  652.091249][T13753] Bluetooth: hci7: command tx timeout
[  671.310202][ T5786] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  671.321365][ T5786] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  671.339770][ T5786] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  671.348105][ T5786] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  671.357204][ T5786] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  671.364688][ T5786] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  671.544006][T13753] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  671.554270][T13753] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  671.562559][T13753] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  671.570843][T13753] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  671.579458][T13753] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  671.587041][T13753] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  671.720532][T13753] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  671.741442][T13753] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  671.750181][T13753] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  671.772834][T13753] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  671.780941][T13753] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  671.789945][T13753] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  673.460941][T13753] Bluetooth: hci8: command tx timeout
[  673.695954][T13753] Bluetooth: hci9: command tx timeout
[  673.861236][T13753] Bluetooth: hci10: command tx timeout
[  675.531250][T13753] Bluetooth: hci8: command tx timeout
[  675.771503][T13753] Bluetooth: hci9: command tx timeout
[  675.931238][T13753] Bluetooth: hci10: command tx timeout
[  677.620623][T13753] Bluetooth: hci8: command tx timeout
[  677.852011][T13753] Bluetooth: hci9: command tx timeout
[  678.014607][T13753] Bluetooth: hci10: command tx timeout
[  679.691249][T13753] Bluetooth: hci8: command tx timeout
[  679.931134][T13753] Bluetooth: hci9: command tx timeout
[  680.091353][T13753] Bluetooth: hci10: command tx timeout
[  686.095175][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  686.101746][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  697.451005][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  697.457693][    C0] rcu: 	0-....: (10243 ticks this GP) idle=7334/1/0x4000000000000000 softirq=52412/52422 fqs=5002
[  697.469605][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  697.476028][    C0] rcu: 	 number:  1220205         54            0
[  697.482435][    C0] rcu: 	cputime:    21946      30542           38   ==> 52500(ms)
[  697.490255][    C0] rcu: 	(t=10501 jiffies g=67345 q=2212 ncpus=2)
[  697.496616][    C0] CPU: 0 PID: 14124 Comm: syz.2.2445 Not tainted syzkaller #0
[  697.504101][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  697.514173][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120
[  697.520786][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 0b 74 cc f6 65 8b 05 4c a1 73 75 85 c0 74 3c 48 c7 04 24 0e 36
[  697.540498][    C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000206
[  697.547361][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 15c6dea947c15800
[  697.555438][    C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001
[  697.563424][    C0] RBP: ffffc90000007460 R08: ffffffff911c65f7 R09: 1ffffffff2238cbe
[  697.571417][    C0] R10: dffffc0000000000 R11: fffffbfff2238cbf R12: dffffc0000000000
[  697.579443][    C0] R13: 1ffff11008ca98aa R14: ffff88802f8f9868 R15: 1ffff92000000e7c
[  697.587429][    C0] FS:  00007fb52ddb26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  697.596369][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  697.602965][    C0] CR2: 0000000100000000 CR3: 000000005be27000 CR4: 00000000003506f0
[  697.610955][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  697.618948][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  697.627108][    C0] Call Trace:
[  697.630398][    C0]  <IRQ>
[  697.633261][    C0]  ? _raw_spin_unlock+0x40/0x40
[  697.638143][    C0]  ieee80211_rx_h_mgmt+0x4ae/0x6f0
[  697.643276][    C0]  ieee80211_rx_handlers+0x65f9/0xb4a0
[  697.648954][    C0]  ? drv_event_callback+0x250/0x250
[  697.654175][    C0]  ? __lock_acquire+0x1273/0x7d40
[  697.659238][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  697.664450][    C0]  ? sched_clock_cpu+0x75/0x430
[  697.669328][    C0]  ? verify_lock_unused+0x140/0x140
[  697.674539][    C0]  ? clockevents_program_event+0x230/0x310
[  697.680545][    C0]  ieee80211_prepare_and_rx_handle+0x29ab/0x62c0
[  697.686910][    C0]  ? ieee80211_rx_8023+0x1280/0x1280
[  697.692302][    C0]  ? sta_info_get_bss+0x54/0x320
[  697.697267][    C0]  ? sta_info_get_bss+0x54/0x320
[  697.702219][    C0]  ? sta_info_get_bss+0x54/0x320
[  697.707183][    C0]  ? ieee80211_rx_data_set_sta+0x20f/0x410
[  697.713011][    C0]  ieee80211_rx_list+0x295e/0x32d0
[  697.718237][    C0]  ? ieee80211_check_fast_rx_iface+0x210/0x210
[  697.724499][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  697.730508][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  697.736681][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  697.742850][    C0]  ? read_lock_is_recursive+0x20/0x20
[  697.748362][    C0]  ? ieee80211_rx_napi+0xd4/0x3d0
[  697.753437][    C0]  ieee80211_rx_napi+0x1b2/0x3d0
[  697.758493][    C0]  ? ieee80211_rx_list+0x32d0/0x32d0
[  697.763802][    C0]  ? skb_dequeue+0x124/0x160
[  697.768413][    C0]  ieee80211_handle_queued_frames+0x106/0x1a0
[  697.774498][    C0]  tasklet_action_common+0x302/0x4d0
[  697.779802][    C0]  ? detach_timer+0x2b0/0x2b0
[  697.784506][    C0]  ? trace_raw_output_tasklet+0xc0/0xc0
[  697.790082][    C0]  handle_softirqs+0x280/0x820
[  697.794863][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  697.799647][    C0]  ? do_softirq+0x1a0/0x1a0
[  697.804167][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  697.809384][    C0]  __irq_exit_rcu+0xd3/0x190
[  697.813985][    C0]  ? irq_exit_rcu+0x20/0x20
[  697.818505][    C0]  irq_exit_rcu+0x9/0x20
[  697.822754][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  697.828403][    C0]  </IRQ>
[  697.831347][    C0]  <TASK>
[  697.834289][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  697.840282][    C0] RIP: 0010:generic_exec_single+0x481/0x4f0
[  697.846214][    C0] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 4e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
[  697.865966][    C0] RSP: 0018:ffffc9000462fa00 EFLAGS: 00000246
[  697.872064][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  697.880043][    C0] RDX: ffffc9000f864000 RSI: 00000000000032d7 RDI: 00000000000032d8
[  697.888029][    C0] RBP: ffffc9000462fad0 R08: ffffffff911c65ff R09: 1ffffffff2238cbf
[  697.896016][    C0] R10: dffffc0000000000 R11: fffffbfff2238cc0 R12: 1ffff920008c5f44
[  697.903995][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920008c5f65
[  697.912021][    C0]  ? event_function+0x300/0x300
[  697.916891][    C0]  ? smp_call_function_single+0x5a0/0x5a0
[  697.922636][    C0]  ? percpu_counter_add_batch+0x1f1/0x2a0
[  697.928459][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  697.933675][    C0]  ? smp_call_function_single+0xb0/0x5a0
[  697.939330][    C0]  smp_call_function_single+0x36d/0x5a0
[  697.944973][    C0]  ? event_function+0x300/0x300
[  697.949841][    C0]  ? flush_smp_call_function_queue+0x250/0x250
[  697.956011][    C0]  ? event_function+0x300/0x300
[  697.960994][    C0]  perf_install_in_context+0x5be/0x920
[  697.966484][    C0]  ? exclusive_event_installable+0x2c0/0x2c0
[  697.972483][    C0]  ? add_event_to_ctx+0x1180/0x1180
[  697.977718][    C0]  ? anon_inode_getfile+0x109/0x1a0
[  697.982967][    C0]  ? perf_event__header_size+0x165/0x220
[  697.988706][    C0]  __se_sys_perf_event_open+0x1836/0x1c50
[  697.994455][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  698.000128][    C0]  ? lock_chain_count+0x20/0x20
[  698.005006][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  698.010247][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  698.016184][    C0]  do_syscall_64+0x55/0xa0
[  698.020625][    C0]  ? clear_bhb_loop+0x40/0x90
[  698.025326][    C0]  ? clear_bhb_loop+0x40/0x90
[  698.030031][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  698.035983][    C0] RIP: 0033:0x7fb52cf9cdd9
[  698.040416][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.060033][    C0] RSP: 002b:00007fb52ddb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  698.068467][    C0] RAX: ffffffffffffffda RBX: 00007fb52d215fa0 RCX: 00007fb52cf9cdd9
[  698.076450][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480
[  698.084544][    C0] RBP: 00007fb52d032d69 R08: 0000000000000000 R09: 0000000000000000
[  698.092540][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  698.100523][    C0] R13: 00007fb52d216038 R14: 00007fb52d215fa0 R15: 00007ffd341c9938
[  698.108524][    C0]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)