last executing test programs:

6.680207121s ago: executing program 3 (id=4068):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x28, 0x5, 0x0)
close(r1)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00')
socketpair(0x3f, 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES64=r0, @ANYBLOB='\x00/\x00\x00\x00\x00\x00\x00\x00F\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f500001000"/16], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001759983f1b958500a7b0f654f9cb0ecdac2246875885671000002a00", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xb7, 0x0, &(0x7f0000000640)="7a7fa22c2af5eae5e6c9a586521b3a42d323e8c897abd13a62510ec4ffe7ff42e1e71418d3cbc707574993a63677809014ba709d36f0020d4fc38086dc08987f70908fcb8dca6cf5996e5cf1126cb3979631bb52d5e4c98a0c7a564479a9cdb8fe68d3ecece90aeb1fee5fad7841349e0cc600f0d1605b1de1e54ac5246961d66c86f96bbf9e89d1220856c1602cff8a8385878765bc252842cfacb6e61404986f3e786b71fa78309352a64f8e6d89509ac5afc3bf9fc2", 0x0, 0x40a06, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100000000340000003400000005000000030000000000001008000000030000000000001103000017010000000000000001000004040000000000000002000000000000000061612e000000000000"], 0x0, 0x51}, 0x28)
r4 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13300, 0x2, 0xffffff81, 0x0, 0x0, 0x7d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, &(0x7f0000000300)}, 0x448c0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

5.758864545s ago: executing program 1 (id=4072):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
close(r5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r7 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000040)=r6, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008971b6d1f0300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x40000040)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d)
r9 = gettid()
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0004000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5055025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efd93452a92954b43370e970100"/216, 0xd8}, {0x0}], 0x2}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017", 0x61}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a1150002", 0x1f}], 0x1}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16=r9, @ANYRESHEX=r3, @ANYRES64=0x0], 0xfe33)
r12 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r12, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x0)

5.67251249s ago: executing program 3 (id=4073):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000000)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f0000000480)="7a873efe7859e55421fa57d28d24f7302860bc06503462a6d25a59e8a63774c156cc03368f17dc3302413cba9f580d75a3f93b3cfb548661b70741787d1534541eb12914351f78b4b87a7199c147812095d527a5ccf4d4f1da4755879e49bee475854689d0a6dc7d6b35155781592bd49ed963eaaf9e3edd05d1ba67123d6c1163057767863b6f8124afb8215a789000850e8c676ae8c11104c23aaaf794ba0cc41477cb52f15dfcf07a9118c9145e5e2493f0135455a62d319b5c2de45b1b0d5893ceaffa19c14e578f0b8a39cbf13571e6f4c15932d470c662b4ea79b0e4872b0e7755", &(0x7f0000000580)=""/102, &(0x7f0000000600)="ee5a5de9201dd5326422831a227743424d595497971536965ba937746bfc7cf395d6eb1e1fcfed90c2cbd2a9bb80e65ceede5d61f6fe86d33041293ab74b6eef665feb40af755b51e0ccf4a9074cc0eedbf2de811498a37ecd826ccf2a611d173c06a23e4b293ecc5adf46c5bdddf6af3a12f82bdc11c012001b90ab8b5a418a207851373641cb7fd4e173ea7c09b8fec67cc45a2afee99d2c88ec5ba556889f2db14b61860fe151c3f1bb124f7e86c640471f7f516c408355afd2af15393b553a016bba2109314b4c44b8a1a6", &(0x7f0000000700)="6a14b0865eb342d2aa1f2e693a8817e26864f088dab959865631e4225d52790057b4da5e2503695bd3afe91644b9aa4eedadbe40c110f886eb4bccae86cc28da056c8376ef4ab715ee97e8366f71e3ed78516846909ffdf43f254df52c0430ea5d240d5dc71c197cbceb7de676a38be0d89d29ccd3ec0af136e6ed666d497968dd7545ec665bbcee95934fed5642e9f1c8f0ae30353f67834efce548efad2a359c39b9f722c5b17dcbd2392b19dfd84d81c837f05b04717d185150f2525db49b72c6b0c5f98d0eceb563f8501e7e", 0x10000, r0, 0x4}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg(r3, &(0x7f0000000900)={&(0x7f0000000800)=@xdp={0x2c, 0x3, r7, 0x31}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000880)="055edc1fc1ab39a5500ac48896305e17a94bcc0990d9bdb3d663fcfcc398917895e7dad3ff7dedc13012a961e13b948b4dcb81a845fcf0280c39e92ff67df4f6858cc8b47b00e4131b19cb81676c51934df57838ad53028dc9fc03dc2e68fac4b588c8b956fd9e2f", 0x68}, {&(0x7f0000000980)="008743b37fbb1c94ba2dfb30de17b8c26ea585546c68dd727d1e88a8eef34597eaec02dc93ff95c6e87c44aea69f3a47380e6acc36da35ac2320a09e1cb6bae225131842f75e7e9dac08b1328b17b83ba88560e3ab4c52fa13bf2a5eaa491e93b3ab99fbfb20e998651ee6ae1379148081871a458f07fe278d85cd7c96fe99bbf99dcb30965da560", 0x88}, {&(0x7f0000000a40)="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", 0xfa}, {&(0x7f0000000b40)="ba4ee0a5792aaa81e9700bdb49c46d9b9b02d240ffb6c2db76129a96f508013d9ddb5df3c3e6397bbea1910323f42b3ce93b5105229a2bac97e3f06247dbed9152f6940814affda03061dc4bd7cbdce68044f84c9232781ac1e6f94380a33058ee1ac0c602ce66a7ed3b30a39433dab8fa2c44113946391030aca001c7353b3f9df07417f4e12526e502b77bff7a0d364fd53bfff76f19f5842e2c359165171de6789ad78a8bd2117a5fea014f9401db282e052ad6cc9b", 0xb7}, {&(0x7f00000001c0)="319bba52f57efa97ae3677f1ba3d847f4ce8a344218ad2d0f243c03a7d2c7a41e8a6050b5cd7d50fa272bae8029b9846f67912f4f70a", 0x36}], 0x5, &(0x7f0000000e80)=[{0xb8, 0x1, 0x3, "8acd7d47a133a47dc132efcca5c00070a3600ad85aecfc5c340dcf9501b2023ac86119a34c355d57b7f26b60d6f645e3480315fcc73a083de179ec27579d8c230c8c905acfe9657f371bad34b129806946037a1620722b07ae6af73efc9173a97c2baa387ad42965134a1f22ed49c49272b52abb7d5b0e3cb5692ce2b15ab82e0d75b4ef0da2fbba15e91346503f73293ea7ed2b19c88e25d15001100e0aa8fb3c1f9e"}, {0x60, 0x0, 0x4, "2e43f321b5574e382aa63c7a88cbfeb5eebfffe8cd81e69417409f5e66176b44541b0af0600c355eb52c5fa213256486e9df1b06957ad710964fb254de6fc42485813b7aacd881848df45c9b6ce590"}], 0x118}, 0x81)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

5.406444565s ago: executing program 2 (id=4074):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x5, 0x0, 0xfd, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc48, 0xc8, 0x0, 0x8, 0x0, 0x80000000, 0xfffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0x5b8}], 0x1}, 0x20044001)

5.009113069s ago: executing program 1 (id=4075):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000240))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e35400800038025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})

4.697363667s ago: executing program 3 (id=4077):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000077a9a7a936e4aa5486a6281500000000000000"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=<r4=>r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='H', 0x1}], 0x1, 0x0, 0x0, 0x104}, 0x8800)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0600000004000000e27f00000100000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000000000000000d1aad209647f38e80c4361d7d53b3f5678fda3b940770e900860dcc1e6b207f92b5a06f6d75dbf733c5017fb239faa2aefe0640020bc495cf32748a7c9374868373890a20d00d87ca0a098a0a36abbd0ac480902da81e651e29699a36ad29ba2fee856b937cb6740be647c4e135d33960580222290d0c6263a327c836273007ef908194769624c6e9d94f27c6957bf7843fd2520cd47b26471a3619d4deeae4736ce7590ee2a71aa487f54b9d4063047bfa755213da7e4", @ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @multicast})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xb, [@ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4}, @enum64={0x5, 0x6, 0x0, 0x13, 0x0, 0x5, [{0x6, 0x9, 0x2}, {0x1, 0x6, 0x5}, {0xe, 0x7fff, 0x2}, {0x5, 0x3, 0x5c6}, {0x4, 0x9, 0x4}, {0x6, 0x874f}]}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x25, 0x3623}, {0xc, 0x6}, {0xe, 0xfffffffe}, {0xd}, {0x7, 0x9}, {0xd, 0x7}, {0x2, 0x1}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30, 0x30, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000d00)=""/4096, 0xf7, 0x1000, 0x0, 0x8}, 0x28)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r11 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$inet(r11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x1, 0x2, 0xfffffffe, 0xb}, {0x2, 0x5, 0xa}, {0x2, 0x4, 0x10008}], 0x10, 0x800}, 0x94)

2.043836101s ago: executing program 3 (id=4079):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.091791117s ago: executing program 0 (id=4081):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000002300001801000025786c2500000000072020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x101}, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a000000009000000060000000000000a03000000030000000000000b030000000d00000007000013170000000400000005000000080000000f000000030000002000000001000000040000000000010181dd3a6f0a00000003000000732100000d000000f9ffffff030000000900000008000000010001000900000007000000000000800000000000000003000000000100000002000000fd930000090000000000000e010000000100000000305f6100"], &(0x7f0000000b00)=""/87, 0xfcce, 0x57, 0x1, 0x5}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x5)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="18000000008000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000021000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x45f, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x10, 0x3ff}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r4, 0x20, &(0x7f00000007c0)={&(0x7f0000000640)=""/216, 0xd8, <r9=>0x0, &(0x7f0000000740)=""/100, 0x64}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="86", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x7e, &(0x7f0000000540)=""/126, 0x40f00, 0x9, '\x00', r8, @fallback=0x30, r4, 0x8, &(0x7f00000005c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x3, 0x5, 0x10000}, 0x10, r9, r2, 0x8, 0x0, &(0x7f0000000840)=[{0x3, 0x3, 0x0, 0x7}, {0x3, 0x1, 0x9, 0x2}, {0x3, 0x4, 0x10, 0xa}, {0x3, 0x3, 0xa, 0x5}, {0x0, 0x1, 0xd, 0xfc3d822546117cd1}, {0x4, 0x2, 0x1, 0x5}, {0x3, 0x3, 0xe, 0x1}, {0x4, 0x1, 0x6, 0xb}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r7}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0x4)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200040c0)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0xc008744c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0xffffffffffffffbb, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r10, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1.091421397s ago: executing program 1 (id=4082):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xe199, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x15, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002}, 0x0, 0xffffffffffffffff, r1, 0xb)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c0c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000400000002002000040a7900", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0xfffffffffffffdd0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0)

1.090741657s ago: executing program 2 (id=4083):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400c015)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000008c0)={&(0x7f0000000340)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="2ef0072b760b29e26ea3069fd74e01698121c06da629f4fb446bb57e2a9579dc0725dc725682123db0bbdd466530eb7810258091f584c2340ae74a3d24fad3d19c32444f7afc8430eec7086b927e4f7b53d28f1a36c405df268f51c763f827286ce7c4ee33f91f075aa12a3e761fed5c169385a109d7398c5f1d1a38dd6f4800f6657a1e2c14ff800ad40fde0e9b55fdcc3d3261", 0x94}, {&(0x7f0000000400)="37b0a14cd185f61e7c6b3e7efa89c8de7d3d4ea57d789b26623b0020ea8f3402ea0f3e24d52c9465adf8064d386cbf6d27a25010cc880c3b314b7d5ffd53ee01b831161ba1ccd11c2fd65de5e22371eff5b24f070ac6e08e633b9ec24eea6125dc5a9a7e5a7fa8e9202a9d9087a9b1", 0x6f}, {&(0x7f0000000580)="61ef5dc1a9a75511f412d20cdf037982267fb758a11840", 0x17}, {&(0x7f0000000700)="3a2a3e6c95e34e4d6127a28a6fc509cae961f45ed771de351b88f47bb653a369de5182fdeaeff3367445686fd5ba4aec75d2f746f048db78184ea8ee5c275249414dbbeb8f1f71c0cf11f4d859a18c348ad022799e8cbb1deecdd518527f2a30d1cb69b5a95dfa3007a5e35da69ff57432884485167b23f81e1f74446722e8685ef8bef9187e66557bec7ddd592e0b8c647a3ff13b7d89ef2c1aec5492b0c0b730ccf30b", 0xa4}], 0x4, &(0x7f00000007c0)}, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000e00)={0x1, 0x0, [0x0]})
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000ec0)=0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000e80)={[{0x2d, 'net_prio'}, {0x2d, 'perf_event'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}]}, 0x24)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r3, 0x0, 0x0)

1.071831318s ago: executing program 3 (id=4084):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x40021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$kcm(0x25, 0x5, 0x0)
recvmsg(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x21)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='sit0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x46, 0x0, 0x4}, 0x28)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e37040001", 0x27}], 0x1}, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502"], 0xfe33)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8941, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

893.836558ms ago: executing program 2 (id=4085):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0xa00, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)="c109000000000000001d", 0xa}, {&(0x7f00000001c0)="c80b", 0x2}], 0x2}, 0x20040000)

885.263189ms ago: executing program 0 (id=4086):
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xff, 0x8, 0x0, 0x0, 0x0, 0x15d31, 0x1c2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xff}, 0x8088, 0x2, 0x1, 0x5, 0x0, 0x800, 0x8400, 0x0, 0xfffffffd, 0x0, 0x1000000000000003}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x8020)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910419875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

682.318891ms ago: executing program 1 (id=4087):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000077a9a7a936e4aa5486a6281500000000000000"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=<r4=>r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='H', 0x1}], 0x1, 0x0, 0x0, 0x104}, 0x8800)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0600000004000000e27f00000100000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000000000000000d1aad209647f38e80c4361d7d53b3f5678fda3b940770e900860dcc1e6b207f92b5a06f6d75dbf733c5017fb239faa2aefe0640020bc495cf32748a7c9374868373890a20d00d87ca0a098a0a36abbd0ac480902da81e651e29699a36ad29ba2fee856b937cb6740be647c4e135d33960580222290d0c6263a327c836273007ef908194769624c6e9d94f27c6957bf7843fd2520cd47b26471a3619d4deeae4736ce7590ee2a71aa487f54b9d4063047bfa755213da7e4", @ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @multicast})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xb, [@ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4}, @enum64={0x5, 0x6, 0x0, 0x13, 0x0, 0x5, [{0x6, 0x9, 0x2}, {0x1, 0x6, 0x5}, {0xe, 0x7fff, 0x2}, {0x5, 0x3, 0x5c6}, {0x4, 0x9, 0x4}, {0x6, 0x874f}]}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x25, 0x3623}, {0xc, 0x6}, {0xe, 0xfffffffe}, {0xd}, {0x7, 0x9}, {0xd, 0x7}, {0x2, 0x1}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30, 0x30, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000d00)=""/4096, 0xf7, 0x1000, 0x0, 0x8}, 0x28)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r11 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$inet(r11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x1, 0x2, 0xfffffffe, 0xb}, {0x2, 0x5, 0xa}, {0x2, 0x4, 0x10008}], 0x10, 0x800}, 0x94)

681.981901ms ago: executing program 2 (id=4088):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r0=>0xffffffffffffffff]}}], 0x18}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r0, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0xc54)

648.440792ms ago: executing program 0 (id=4089):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="9c", 0x1}], 0x1}, 0x20004050)

485.580192ms ago: executing program 2 (id=4090):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c0c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000400000002002000040a7900", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0xfffffffffffffdd0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0)

431.866955ms ago: executing program 1 (id=4091):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x400c0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r4, 0x4)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000180000000000000000000000000000009532c834e56b107a2942c3cffdc335ba2f710f857d9c9aaa07bd01c5a4d05db23ba3a567f05875dc2d62d40bd44c5373"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x75, &(0x7f0000000000), 0x8)
sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, 0x0}, 0x8c0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000070000000000000001000000180100002020782500000000002020207b1af8ff00000000bfa100000000000003010000f8ffffffb7020000080000000048e210b1eb1a9eff950000000000000000000000000000000000000000000073d1a10b493fd4cb86788e1316d0a7c7a52c73a11e661bd081fda38be039af93fafbe4243465453af5dc2600626b067a2c2c9cea3be8a4d12fd2ed75c106d0075742b4624da8490d837637bdf9610497d04ec47631173fe52323be46310514aa5fb641dd5a4cc7d01f31106b947b3ea8c810be1cdb59417fd98de8e87dcf635a62d59b35b52239f2b7b58f93c9bf9113bc8c7828294eae99"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000003, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))

382.527118ms ago: executing program 0 (id=4092):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000015140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

254.462656ms ago: executing program 0 (id=4093):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400c015)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000008c0)={&(0x7f0000000340)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="2ef0072b760b29e26ea3069fd74e01698121c06da629f4fb446bb57e2a9579dc0725dc725682123db0bbdd466530eb7810258091f584c2340ae74a3d24fad3d19c32444f7afc8430eec7086b927e4f7b53d28f1a36c405df268f51c763f827286ce7c4ee33f91f075aa12a3e761fed5c169385a109d7398c5f1d1a38dd6f4800f6657a1e2c14ff800ad40fde0e9b55fdcc3d3261", 0x94}, {&(0x7f0000000400)="37b0a14cd185f61e7c6b3e7efa89c8de7d3d4ea57d789b26623b0020ea8f3402ea0f3e24d52c9465adf8064d386cbf6d27a25010cc880c3b314b7d5ffd53ee01b831161ba1ccd11c2fd65de5e22371eff5b24f070ac6e08e633b9ec24eea6125dc5a9a7e5a7fa8e9202a9d9087a9b1", 0x6f}, {&(0x7f0000000580)="61ef5dc1a9a75511f412d20cdf037982267fb758a11840", 0x17}, {&(0x7f0000000700)="3a2a3e6c95e34e4d6127a28a6fc509cae961f45ed771de351b88f47bb653a369de5182fdeaeff3367445686fd5ba4aec75d2f746f048db78184ea8ee5c275249414dbbeb8f1f71c0cf11f4d859a18c348ad022799e8cbb1deecdd518527f2a30d1cb69b5a95dfa3007a5e35da69ff57432884485167b23f81e1f74446722e8685ef8bef9187e66557bec7ddd592e0b8c647a3ff13b7d89ef2c1aec5492b0c0b730ccf30b", 0xa4}], 0x4, &(0x7f00000007c0)}, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000e00)={0x1, 0x0, [0x0]})
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000ec0)=0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000e80)={[{0x2d, 'net_prio'}, {0x2d, 'perf_event'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}]}, 0x24)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r3, 0x0, 0x0)

205.473779ms ago: executing program 2 (id=4094):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, 0xfee1, 0x0}, 0x2008a0c1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x806, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xfe33) (fail_nth: 13)

134.393012ms ago: executing program 1 (id=4095):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@map=0x1, 0x1e, 0x0, 0x8, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000015c0)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@cgroup=r4, r1, 0x4, 0x200c, 0x0, @value=r2, @void, @void, @void, r3}, 0x20)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r8 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x6, 0x13, &(0x7f0000000200), 0x4)
syz_clone(0x10000, &(0x7f0000000480)="da3dc200f8105bf32f21fa55b2adde2f2526bb18355b503a9e74087b21d0860c07b596080e981f62eb46dc22431464a56e4003a71bc165daa8ac16c437ee49f277a2f98d7a03bf4eb8875fd77098ebfd9313528ae6c26896ae99799b3c493eb9bb954f769e6003d6f95416ad6ff093583d82d52780b9d68d803d2c00fb16f51d4fe9aaf2305bac2f6da47bec222b03dcfa38c701f6a972e5c99704bfb46bc9b284a7dfb87503da5de848e4a8046a2a32cbb555122abf557b8c7c54e140fa80523374904447d209c0cb7bbe90c8beee83809a30eb542168c5752b48adfeb8d5b3c69316363564a423bee32e7f106c81a0a36616f8045479abaeb615b3a3edcdca6169cf0282b4d745d54c0bcfa69c176f6b753d906f74879a3371c6c724e7f2e0ad127b22a05292a76a7fc1a8ddf06963d228e7aa349559885472b5e15beed52b90211a167b44c26741d828e3b789b5398b610ef75a80fe33a096abfd3cd18c6b51867275d813e0711603e49b61f35faac6721c54214c5fda80aac917af8d26d7ddd31383a3a1bec6f4277d84bb1cee6197a349b8b8f66430e5cd1c388575d6f7c6d3e9947a0658dbd77f604e91500e23f7a6be92ba0254c85dd72f4e736bffd9c823a845fbb9fa408f930258d480161a44f018f7c013cfe2813784826379cb8a6a6087b21a15e8d3d62d4211a15baf76d81bb32b8f70747e580d82785ab6079033795a8787bc4fb6fa90003a35148796c91299c18aa7eefd05e0b12668c7ba99fea6ab12dcd7c3ba66902d16930fc5a65b222957d64cd204076ea44ae10c1082bedbc3d0ce0f4f4c097131f43119483d1b97a87a02d736347db31574330ca98f764d610708b5742d549aeb5daa1b00b1910c9fa7d1284d7fe61e7f066ce700675f5d7b2bec41ae4a205dcd0d2b14339417e07a2e45097c66730becb472050f66039031c3bb77451cb745a58dd070726a0a195dd057e29c0774511a9d97cf0ac9b8471d5df3bdd84e1d73849e3e06c43c5c9d4a29fed1477b7ebc94fd6ec99d6504efe248526c433c87fd24a6ad6656c6c231627e5c8dfab16bdaedf77c6b0d331eb8d3282e6ace5dc73cb687e284e9d246898c8547dd37dc334f714034b566ba0b5957e1949367ba78c47179e4564b3a342e910034449d38e6af3e2bce68c38c3a71585ebb7b6f91e736eeb4b663acb4e9d4d3c82447bafe031f24d5e2ffe3a9a7ea9a2a2eda1c0b818883bc104b7b1405b4ded17b9050a79f1b6110459dfcaec30d2f3ff963d0b8ffa8c65df6d64bd28f4607b0c046c903bdd63e28fb003fc3b632f6f6730870be3e9beea33d273f9ac712888b44baabe5b26343e25f5cdbc3f17c8e36e33754b30a58ed7c91f77ad03cd59b3faa529759f8e78a332c65dda1107021eecabd983ca2fc404f1a5d2a35094da89b3fb79d290aa335a91c845d1c99acc6dd85b568d230cb297e488b8e04dadd4a8d2b83332b34f68b2af2e15eb1f6eece873e411dc76f35a846c14bd0abab245118f56376e9f1fd46d4f3b0e0b59bbce1ab151c18736529c0df877edf9ba7ed9ce8cf2ffac79f69ae486abef4e02e445c5b8473feb58f03595ae96996adbb41ac24d11dd822ec32afeb84cbe579bbb0c6baa83f4ab638cc32f5200b4357d0ec64058bcb67d726a3f2a86907580aad5317d5bf1093d374efcb7042443e5a5a5facf9cea93ced71540f22b0e7b7b6e8291a9141b8e7ff809ec0eefd600d6dd09023605f30b73bd2895e5963915ed92db7008880589db8b6c6f5b5485ffaf4828a9e66f747230c478fb1b25529c32ec63b11641284d3556eaf31061a8eef6736f77d1dc022bcdc234b69c14e5255474bf83a3d4a04d2519eb894ca31b71eba4f4117cd5985bc9c83033217105eb1d59b8e6ca48438a0fde616a3f43a4a76a3e7fd3a3d380fcd834e53203c4b95b2fd537a16cb539d8dc10455f091cd53913a69bac9a338bc4f310401448e105024a206132240b839d751e75dac9441d00619a74cb0fafe4678306576f8005ee3977ec8294b1f81fb5d4f0e1457a90b16bb42de811b3b1d7a0f96f299c4ae7026eee645f489dbd4ebb4be76f411206e2bfcbc6ac6fa96219160871be2af068bf90ed17bffcf1cc32fe8b6e399e6552faf64ee203467c1cf4a5b5a8ff5eef1b68722b0267981126e680562a73633efda95c38a414fc6561ebd6a86b8b2919063f552e0e3c42d605514d5c63510c7fab8c822911ce737e490e15dcb3829ecc02f0e592e2a702fe28af1c15f99c3534c743b94bb234329ab5b2262aaa01bbfc07998670f50addac0f3a1e2fe4f77d168c8da998dda9e07414f86c9c1b88f80e3732b058729384107e45683bf66ad4705dae0fbcfc6572b17a32e22c94e2d31a0442285a1d689f8c51717badd5926567f7f3d7f3e6c65121b4f7cc3fcb8bc5dc26700f6e9863add9faf1c2f9e994cf3ad1706d3aa27f1195bf8ad0ea0f125df96ec53a5b76c3181a3d56c4899534dd7cf11cf50dfbee0055be82b070f59d641505c88b91241370a26d1621ed04a5a653035f5e27d0fd3724fbbab5577b7b759e3d6914bacb35be0080e06bdea2579a08ef17163237007258c910c4fa750946a2b8c16a14f481d70b83d2d9a13912dde341f2903dbb9c9d6272aaefe09ee4a75a97638695bf635a83b302f77d159d222d94e68009d06cdcb9be2af7d0549b8381fba1d21e58515dc524521d767794d59b19b92e654c841059b8da1f306c299c457648bb6965d33fcb050432b08dff2226ceabac66c9f10c731d5e49a08317a63a114323bd3b9823165b8dc3ec852a94e2a16f83a5fa44fdd155cff4d349fdedb03fe3ca9d9bd4931d195d0fef5fe9db92166f26d4d031d2c80e94d9dad0f4c4e35b3a84d190809008757467a1524b17f4d6717cb98935c7328a0e1f811690e08d65623db277299ae473b7069cc6bc8d8c70fd24eb573adf202996f8ed9ccd47f2b87ff42df234024e9bb7ac3334037e999dbf004c284afde3f0399882908801e95bc42da2a543bdb458f2f11a6402239503e3ac2abaabc8bc6f99bb62f83ea6285cfa148e462342d20afb776b31511b3f1e8ddae3ecdbdfa6d34a3ed1090660d88c0f4c111c4f824908d4e008cc916e63892f847d9da87df57d2b2eecc249fb29b0552ca161a7ad0bad2b7e3ea7f02e32b7caebf1671c1c480ec819ef657d28cc1551b7f6497e557c26cdfbeb4e1e7e3b5e3f90b6f31e861d500b7994c23303efe44eb9343d6fce24397a32bf7d366ccce7332e7b97e1a244f031a4233d28173e64d5d0151d271fc2344cf7f925e5cbc20dd2acd03188cf5a6f449115af24b5ec51bb489bbe6f450c76ee108e226a4a490fbd8df00bf289c0d15c2891c0982874522940245fa8ed5b0a12169d2846eb1548b9fc0e9fdc78b97f0e5a7c85d99050fe189e676068bc599cdb685dba8237954f633c5b9eb87c0bf2dff5fc6477f3d3f08892cf65c3d75379aceb77e3e6f9a2db2c3d07bdb9b1f4e3f8b58efd63fbf5c70fc543d0e82c20f874983479e4678010405efd1e3e515b26950bc2ca3b8229d489d94452b4e130aa2c4e91843b18428543c6f48a59d81e4635fe5814da53f47419a9069a22d98b2192cc0793f459c28b90a5832549d2db82832ab5c713607e100ae05a03caf80dd2c41e294dd20ab89df88bda5a1b086582291041f70395fba5d86038b4d4a5e8a77f23e0ff8ac6dc4b789018dd813743a150b8f172e75da573849f1e80abfaff35390d8adcd88cfee5ded2c96a26eb776919933d2e18c44087766c63382ac0fc6075ab11291366114e22f3f5924f88d5e085b8f52b0284f01533912e8fa10707c39f133a0fd311918300c4cb1a63a7c79d023f7bffe5d0556708cee25b6b7e1af7e51319811108ffe9733a7fefa9949bcaa3d79073201cc48a24ce951051106c56adf03d23e56aa0a7bf7dc620226bb47ad8fd57a7e513a441c154d3440c92e0e3364ebaf9734ded24088746af182856a6407f8e518f1e1a27a832172ac2557ff700b1c2b5f5462838fc0c57761002f6d5fcb383a6769e201a45fec558bf973f337e046e50654ef43b469f63573ae1f5e41103f613f36aab2b04bcdd789bb560bde4003637efa434d8a1f026f032f0fb30e96c3aa2e406f1d4c5f3fff079e91fb46112c912e9ead21324569dfbf7753031019b5a35ef0fb7dc96bea264e75c0fc40113db6f754b84bd93339d110961d853ec30d3c2385763cad325247407beb1d9b3af67b2eb0b190f53176eced424ed194251a8f32171f70877daaae89bf3316733018222bab55c27b6806d5d9c5d033c5caa64b527c96b294a7ee389f775d5616640d13ea187fec07ed9029d05f186d998c53c2ee57914fce94c683ecb4910cb4e84e972c91f2e5a76a550457c2d8c0502d37c0e481f2aa212405f0c5740ad23249e37cebeb92363d13a792f30cddd7521d61948b469b31dd44d299620b61388b028a7ea7dc5f63bc097e2175b7747e3d8a9d759a85db43fc8fc03f1f830c3cf4f02ba0cadaca4fa50a04e1b08ef6b38d4a319dca8e590aa836d0b62a1e02caf64e28ae50cbb5b306caf9c339c2b0d508cf296c2bd1acf194cb1b4490c08970151771dbc5f374d429dac9f5b5f7f17db7ce0cd80873b829f7bc64f898fc08562c4538abc5942b01a0c7d7cfa7171e3c720383c84a7baca9fc8d5000e54a410925f86ba47c6b94c6bfe05994731cf12e790d240c70ef6ff079f61246e0b10e96bfca2465d27e5528837693c01d36703c492ef08199f8d9953291bc5a165d8743a054ff76178e8b6ea2fd86071681bcb76107c361cd262fae4b8b48e75c211a113b3ecdf9c86918dcb952afc31be876c63f84e8a26f887fdae7de7b2a46ccb6e4895ab6fccafc096b03c10721404ff16c072d2b920aaddb6eae926090da24822e94d32f37f1bad10d739e6b4465497c44da36b068e4fa7e66fed3a2827e8fcd8e160b32a7666e1f3710973b1e73a0749706d9c19f1c3510c03369dad19346f3378fe35f3b76b695ea6e619c2470eb00196fe1e9969cc112f46d8bed254568135e4db0b97a1d03c686dc355f619602d080cd32358e29f3a742f9112899105e398c68708952bd22806521efe200892e83a2bbd959577cf2efdda62e251d80504ce36d62511b2ceebb55fd38669520e6914c0d479f51f2ad411f169036267f74d8d21c6f1aae7a4d13379cdbb41847748fb39d8f01bb5159b8e67180d59c77acf42bae8e1b1434626e26443ce3d3ed1e8d0711c11a9a7dbca72b9009b2cd954a2123b5eaa9167e9ce318825525539db7fbd54bf667bb7d8debaf524637ce4fc681084665b55745445e3a6f7cf5183af20e0b18b380cc2d42b21bc7d0d65aa280dc6888327a8c7ae684b6cb384a8b608afa8082c0802ac9cfc13d213f17c64273b5f767988f3962517418bf674e26e8f53e1b2e771ce54bcaf45a51f87af0212073e6983e0efa829dc7d11cc307dd9002dcf15a754892c5754b772286e87afc9285afe8f4841feca7f38fa57efdcc349e8dbfe6f02b9c96d998b7e34d384ce062f0b64579eb1cbd877400006f25a94270a352e0407c8b9eea3d8c2eae2295c9550a4e7ec2f4d339a7823c5d0441f2d2e8e93e599e0fb40d0df8a0b80197f93074612e5b10383129092a49291711c94e5202832a794c773dae4b2fa4ca3d8175b8c9361318ef3024966aa501010a52b6c68cc18c2e0725e0c41e4619eaa73be5f1d69765ceb04ac937adb6ddcef216a993ede396b3c48539555533492bc824", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)="b2f872e59bdc35dc8c837d10bfb7902d18017434e0b773ec62e9cdb6b5835426601e82536a0205f28c16ed9095b87abf59de2b30935efb3bf6949a24833a6bd5bab0be485b60bad8bfab5965fdabf591d28a21e0")

9.18096ms ago: executing program 0 (id=4096):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)="c109000000000000001d", 0xa}, {&(0x7f00000001c0)="c80b", 0x2}], 0x2}, 0x20040000) (fail_nth: 7)

0s ago: executing program 3 (id=4097):
r0 = socket$kcm(0x2, 0x6, 0x0)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2001)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x6, 0xb, 0x2}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

21][T16136] RBP: 00007fd3c0783090 R08: 0000000000000000 R09: 0000000000000000
[  828.824512][T16136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  828.832497][T16136] R13: 00007fd3bfc16038 R14: 00007fd3bfc15fa0 R15: 00007ffd65b1a6b8
[  828.840587][T16136]  </TASK>
[  829.671717][T16157] netlink: 'syz.2.3098': attribute type 10 has an invalid length.
[  831.013785][T16178] netlink: 'syz.1.3103': attribute type 9 has an invalid length.
[  831.060412][T16178] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3103'.
[  831.734788][T16189] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3106'.
[  831.761371][T16162] netlink: 'syz.0.3099': attribute type 4 has an invalid length.
[  831.785404][T16162] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3099'.
[  831.864307][T16162] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  832.958718][T16211] validate_nla: 2 callbacks suppressed
[  832.958756][T16211] netlink: 'syz.2.3114': attribute type 2 has an invalid length.
[  833.000973][T16211] netlink: 'syz.2.3114': attribute type 1 has an invalid length.
[  833.030868][T16211] netlink: 'syz.2.3114': attribute type 2 has an invalid length.
[  833.051322][T16211] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3114'.
[  836.642709][T16241] netlink: 'syz.3.3121': attribute type 4 has an invalid length.
[  836.879376][T16241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3121'.
[  837.081374][T16241] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  840.995011][T16257] netlink: 'syz.0.3128': attribute type 21 has an invalid length.
[  841.037021][T16257] netlink: 'syz.0.3128': attribute type 1 has an invalid length.
[  841.058232][T16255] tun0: tun_chr_ioctl cmd 1074025677
[  841.075311][T16255] tun0: linktype set to 776
[  841.494317][T16262] netlink: 'syz.1.3129': attribute type 2 has an invalid length.
[  841.508697][T16262] netlink: 'syz.1.3129': attribute type 1 has an invalid length.
[  841.526672][T16262] netlink: 'syz.1.3129': attribute type 2 has an invalid length.
[  841.542578][T16262] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3129'.
[  842.069237][T16271] netlink: 'syz.0.3132': attribute type 2 has an invalid length.
[  842.097954][T16271] netlink: 'syz.0.3132': attribute type 1 has an invalid length.
[  842.126255][T16271] netlink: 'syz.0.3132': attribute type 2 has an invalid length.
[  842.134942][T16271] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.3132'.
[  842.152761][T16272] netlink: 'syz.2.3133': attribute type 2 has an invalid length.
[  842.162753][T16272] netlink: 'syz.2.3133': attribute type 1 has an invalid length.
[  842.171840][T16272] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3133'.
[  843.923449][T16308] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3144'.
[  844.500455][T16282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3137'.
[  844.646489][T16282] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  844.728960][T16313] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3145'.
[  844.823741][T16318] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3147'.
[  846.973680][T16352] validate_nla: 15 callbacks suppressed
[  846.973719][T16352] netlink: 'syz.2.3157': attribute type 2 has an invalid length.
[  847.010658][T16352] netlink: 'syz.2.3157': attribute type 1 has an invalid length.
[  847.024636][T16352] netlink: 'syz.2.3157': attribute type 2 has an invalid length.
[  847.035705][T16352] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3157'.
[  847.127526][T16357] netlink: 'syz.1.3158': attribute type 39 has an invalid length.
[  847.206316][T16358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  847.963689][T16372] netlink: 'syz.3.3165': attribute type 21 has an invalid length.
[  847.971733][T16372] netlink: 'syz.3.3165': attribute type 1 has an invalid length.
[  848.178582][T16377] netlink: 'syz.0.3174': attribute type 10 has an invalid length.
[  848.203205][T16377] macvlan1: entered allmulticast mode
[  848.259554][T13214] Bluetooth: hci4: ISO packet for unknown connection handle 1854
[  848.766772][T16379] netlink: 'syz.0.3174': attribute type 21 has an invalid length.
[  849.442748][T16375] delete_channel: no stack
[  849.662355][T16383] netlink: 'syz.0.3174': attribute type 10 has an invalid length.
[  849.954628][T16395] netlink: 'syz.3.3169': attribute type 10 has an invalid length.
[  849.981376][T16396] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3167'.
[  850.028938][T16396] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  850.254648][T16389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3166'.
[  850.593174][T16389] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  851.903836][T16434] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3185'.
[  852.262732][T16440] validate_nla: 6 callbacks suppressed
[  852.262779][T16440] netlink: 'syz.2.3186': attribute type 10 has an invalid length.
[  852.616506][T16456] netlink: 'syz.2.3192': attribute type 10 has an invalid length.
[  853.009236][T16465] FAULT_INJECTION: forcing a failure.
[  853.009236][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  853.073828][T16465] CPU: 0 PID: 16465 Comm: syz.2.3195 Not tainted syzkaller #0
[  853.081377][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  853.091470][T16465] Call Trace:
[  853.094775][T16465]  <TASK>
[  853.097735][T16465]  dump_stack_lvl+0x18c/0x250
[  853.102472][T16465]  ? show_regs_print_info+0x20/0x20
[  853.107720][T16465]  ? load_image+0x400/0x400
[  853.112273][T16465]  ? __lock_acquire+0x7d40/0x7d40
[  853.117331][T16465]  ? snprintf+0xe9/0x140
[  853.121610][T16465]  should_fail_ex+0x39d/0x4d0
[  853.126392][T16465]  _copy_to_user+0x2f/0xa0
[  853.130931][T16465]  simple_read_from_buffer+0xe7/0x150
[  853.136348][T16465]  proc_fail_nth_read+0x1e8/0x260
[  853.141432][T16465]  ? proc_fault_inject_write+0x360/0x360
[  853.147137][T16465]  ? fsnotify_perm+0x271/0x5e0
[  853.151970][T16465]  ? proc_fault_inject_write+0x360/0x360
[  853.157654][T16465]  vfs_read+0x28b/0x970
[  853.161903][T16465]  ? kernel_read+0x1e0/0x1e0
[  853.166533][T16465]  ? __fget_files+0x28/0x4b0
[  853.171154][T16465]  ? __fget_files+0x28/0x4b0
[  853.175789][T16465]  ? __fget_files+0x43d/0x4b0
[  853.180515][T16465]  ? __fdget_pos+0x2a3/0x330
[  853.185170][T16465]  ? ksys_read+0x75/0x260
[  853.189548][T16465]  ksys_read+0x150/0x260
[  853.193928][T16465]  ? vfs_write+0x990/0x990
[  853.198395][T16465]  ? lockdep_hardirqs_on+0x98/0x150
[  853.203654][T16465]  do_syscall_64+0x55/0xa0
[  853.208300][T16465]  ? clear_bhb_loop+0x40/0x90
[  853.213019][T16465]  ? clear_bhb_loop+0x40/0x90
[  853.217731][T16465]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  853.223656][T16465] RIP: 0033:0x7fb4f095b78e
[  853.228109][T16465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  853.248271][T16465] RSP: 002b:00007fb4f18c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  853.256726][T16465] RAX: ffffffffffffffda RBX: 00007fb4f18c16c0 RCX: 00007fb4f095b78e
[  853.264820][T16465] RDX: 000000000000000f RSI: 00007fb4f18c10a0 RDI: 0000000000000004
[  853.272825][T16465] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[  853.280827][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.288829][T16465] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[  853.296855][T16465]  </TASK>
[  853.865846][T16457] netlink: 'syz.1.3191': attribute type 4 has an invalid length.
[  853.936557][T16457] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3191'.
[  853.968501][T16457] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  854.152135][T16484] netlink: 'syz.0.3201': attribute type 10 has an invalid length.
[  855.003377][T16498] netlink: 'syz.0.3204': attribute type 10 has an invalid length.
[  855.706240][T16514] netlink: 'syz.2.3212': attribute type 2 has an invalid length.
[  855.729398][T16514] netlink: 'syz.2.3212': attribute type 11 has an invalid length.
[  855.753309][T16514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3212'.
[  856.081502][T16528] netlink: 'syz.0.3216': attribute type 10 has an invalid length.
[  856.190273][T16532] netlink: 'syz.3.3218': attribute type 10 has an invalid length.
[  856.499155][T16541] netlink: 63719 bytes leftover after parsing attributes in process `syz.3.3222'.
[  857.084033][T16547] netlink: 'syz.3.3225': attribute type 10 has an invalid length.
[  857.594401][T16557] netlink: 'syz.2.3228': attribute type 10 has an invalid length.
[  858.432119][T16575] netlink: 'syz.1.3234': attribute type 10 has an invalid length.
[  859.174878][T16594] netlink: 'syz.1.3239': attribute type 10 has an invalid length.
[  859.543827][T16601] netlink: 'syz.2.3244': attribute type 10 has an invalid length.
[  860.010217][T16619] netlink: 'syz.2.3251': attribute type 10 has an invalid length.
[  860.796760][T16633] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3256'.
[  860.806702][T16633] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.3256'.
[  860.824745][T16633] tc_dump_action: action bad kind
[  860.832918][T16633] netlink: 'syz.2.3256': attribute type 29 has an invalid length.
[  860.846607][T16633] netlink: 'syz.2.3256': attribute type 29 has an invalid length.
[  860.867963][T16633] netlink: 'syz.2.3256': attribute type 29 has an invalid length.
[  860.896893][T16633] netlink: 'syz.2.3256': attribute type 29 has an invalid length.
[  860.944102][T16636] netlink: 'syz.1.3257': attribute type 10 has an invalid length.
[  861.183415][T16649] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3264'.
[  861.194109][T16649] FAULT_INJECTION: forcing a failure.
[  861.194109][T16649] name failslab, interval 1, probability 0, space 0, times 0
[  861.225721][T16649] CPU: 1 PID: 16649 Comm: syz.0.3264 Not tainted syzkaller #0
[  861.233287][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  861.243390][T16649] Call Trace:
[  861.246704][T16649]  <TASK>
[  861.249663][T16649]  dump_stack_lvl+0x18c/0x250
[  861.254380][T16649]  ? show_regs_print_info+0x20/0x20
[  861.259613][T16649]  ? load_image+0x400/0x400
[  861.264146][T16649]  ? __might_sleep+0xe0/0xe0
[  861.268772][T16649]  ? __lock_acquire+0x7d40/0x7d40
[  861.273911][T16649]  ? lock_chain_count+0x20/0x20
[  861.278797][T16649]  should_fail_ex+0x39d/0x4d0
[  861.283516][T16649]  should_failslab+0x9/0x20
[  861.288049][T16649]  slab_pre_alloc_hook+0x59/0x310
[  861.293126][T16649]  ? _raw_spin_unlock+0x40/0x40
[  861.298006][T16649]  ? string+0x26d/0x2b0
[  861.302187][T16649]  ? __request_module+0x2d1/0x600
[  861.307249][T16649]  __kmem_cache_alloc_node+0x53/0x250
[  861.312653][T16649]  ? __request_module+0x2d1/0x600
[  861.317702][T16649]  kmalloc_trace+0x2a/0xe0
[  861.322154][T16649]  __request_module+0x2d1/0x600
[  861.327039][T16649]  ? module_enforce_rwx_sections+0x150/0x150
[  861.333038][T16649]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  861.338708][T16649]  ? mutex_unlock+0x10/0x10
[  861.343261][T16649]  ? nla_strscpy+0x109/0x160
[  861.347886][T16649]  rtnl_newlink+0xadb/0x20a0
[  861.352608][T16649]  ? rtnl_newlink+0x4d1/0x20a0
[  861.357407][T16649]  ? rtnl_newlink+0x4d1/0x20a0
[  861.362220][T16649]  ? rtnl_setlink+0x4e0/0x4e0
[  861.366932][T16649]  ? trace_raw_output_contention_end+0xd0/0xd0
[  861.373124][T16649]  ? rcu_is_watching+0x15/0xb0
[  861.377931][T16649]  ? trace_contention_end+0x39/0xe0
[  861.383161][T16649]  ? __mutex_lock+0x315/0xcc0
[  861.387909][T16649]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  861.393044][T16649]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  861.398198][T16649]  ? rtnl_setlink+0x4e0/0x4e0
[  861.402904][T16649]  rtnetlink_rcv_msg+0x869/0xfa0
[  861.407879][T16649]  ? rtnetlink_bind+0x80/0x80
[  861.412603][T16649]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  861.418610][T16649]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  861.424665][T16649]  ? __dev_queue_xmit+0x26b/0x36b0
[  861.429836][T16649]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  861.435594][T16649]  ? perf_trace_lock+0x304/0x3b0
[  861.440581][T16649]  netlink_rcv_skb+0x241/0x4d0
[  861.445380][T16649]  ? rtnetlink_bind+0x80/0x80
[  861.450086][T16649]  ? netlink_ack+0x1180/0x1180
[  861.454934][T16649]  ? __lock_acquire+0x7d40/0x7d40
[  861.460034][T16649]  ? netlink_deliver_tap+0x2e/0x1b0
[  861.465281][T16649]  netlink_unicast+0x751/0x8d0
[  861.470137][T16649]  netlink_sendmsg+0x8d0/0xbf0
[  861.474935][T16649]  ? perf_trace_lock+0x304/0x3b0
[  861.479922][T16649]  ? netlink_getsockopt+0x590/0x590
[  861.485156][T16649]  ? aa_sock_msg_perm+0x94/0x150
[  861.490123][T16649]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  861.495439][T16649]  ? security_socket_sendmsg+0x80/0xa0
[  861.500922][T16649]  ? netlink_getsockopt+0x590/0x590
[  861.506152][T16649]  ____sys_sendmsg+0x5ba/0x960
[  861.510962][T16649]  ? __asan_memset+0x22/0x40
[  861.515608][T16649]  ? __sys_sendmsg_sock+0x30/0x30
[  861.520662][T16649]  ? __import_iovec+0x5f2/0x850
[  861.525561][T16649]  ? import_iovec+0x73/0xa0
[  861.530105][T16649]  ___sys_sendmsg+0x2a6/0x360
[  861.534812][T16649]  ? __sys_sendmsg+0x2a0/0x2a0
[  861.539636][T16649]  ? __lock_acquire+0x7d40/0x7d40
[  861.544731][T16649]  __se_sys_sendmsg+0x1c2/0x2b0
[  861.549613][T16649]  ? __x64_sys_sendmsg+0x80/0x80
[  861.554601][T16649]  ? lockdep_hardirqs_on+0x98/0x150
[  861.559830][T16649]  do_syscall_64+0x55/0xa0
[  861.564272][T16649]  ? clear_bhb_loop+0x40/0x90
[  861.568973][T16649]  ? clear_bhb_loop+0x40/0x90
[  861.573675][T16649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  861.579593][T16649] RIP: 0033:0x7f34d5d9aeb9
[  861.584036][T16649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  861.603671][T16649] RSP: 002b:00007f34d3ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  861.612115][T16649] RAX: ffffffffffffffda RBX: 00007f34d6015fa0 RCX: 00007f34d5d9aeb9
[  861.620107][T16649] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004
[  861.628103][T16649] RBP: 00007f34d3ff6090 R08: 0000000000000000 R09: 0000000000000000
[  861.636093][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  861.644085][T16649] R13: 00007f34d6016038 R14: 00007f34d6015fa0 R15: 00007fffb6832688
[  861.652234][T16649]  </TASK>
[  862.974678][T16687] validate_nla: 2 callbacks suppressed
[  862.974724][T16687] netlink: 'syz.3.3276': attribute type 2 has an invalid length.
[  863.018046][T16687] netlink: 'syz.3.3276': attribute type 1 has an invalid length.
[  863.056060][T16687] netlink: 'syz.3.3276': attribute type 2 has an invalid length.
[  863.090945][T16687] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3276'.
[  863.291364][T16685] netlink: 'syz.2.3275': attribute type 10 has an invalid length.
[  863.763689][T16679] netlink: 'syz.0.3273': attribute type 4 has an invalid length.
[  863.801160][T16679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3273'.
[  863.864097][T16679] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  864.766632][T16709] netlink: 'syz.3.3282': attribute type 10 has an invalid length.
[  865.244501][T16722] netlink: 'syz.3.3285': attribute type 21 has an invalid length.
[  865.280246][T16722] netlink: 'syz.3.3285': attribute type 1 has an invalid length.
[  865.398258][T16705] netlink: 'syz.2.3281': attribute type 4 has an invalid length.
[  865.438999][T16705] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3281'.
[  865.474920][T16705] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  865.534084][T16726] netlink: 'syz.1.3287': attribute type 2 has an invalid length.
[  865.552157][T16726] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3287'.
[  866.822002][T16749] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3296'.
[  867.021040][T16757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3294'.
[  867.045921][T16757] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  868.418221][T16783] validate_nla: 12 callbacks suppressed
[  868.418243][T16783] netlink: 'syz.1.3304': attribute type 10 has an invalid length.
[  868.501713][T16786] netlink: 'syz.2.3307': attribute type 2 has an invalid length.
[  868.512156][T16786] netlink: 'syz.2.3307': attribute type 1 has an invalid length.
[  868.553589][T16768] netlink: 'syz.3.3299': attribute type 4 has an invalid length.
[  868.561904][T16786] netlink: 'syz.2.3307': attribute type 2 has an invalid length.
[  868.572508][T16786] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3307'.
[  868.603805][T16768] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3299'.
[  868.670904][T16768] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  868.937395][T16792] netlink: 'syz.1.3309': attribute type 10 has an invalid length.
[  869.046252][T16796] netlink: 'syz.2.3311': attribute type 10 has an invalid length.
[  870.053648][T16818] netlink: 'syz.3.3319': attribute type 2 has an invalid length.
[  870.102948][T16818] netlink: 'syz.3.3319': attribute type 1 has an invalid length.
[  870.117598][T16818] netlink: 'syz.3.3319': attribute type 2 has an invalid length.
[  870.128914][T16818] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3319'.
[  870.643575][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  870.651701][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  871.134552][T16821] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3315'.
[  871.165022][T16821] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  871.528850][T16841] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3328'.
[  872.035275][T16849] FAULT_INJECTION: forcing a failure.
[  872.035275][T16849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  872.082376][T16849] CPU: 0 PID: 16849 Comm: syz.3.3331 Not tainted syzkaller #0
[  872.089930][T16849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  872.100024][T16849] Call Trace:
[  872.103340][T16849]  <TASK>
[  872.106318][T16849]  dump_stack_lvl+0x18c/0x250
[  872.111046][T16849]  ? show_regs_print_info+0x20/0x20
[  872.116287][T16849]  ? load_image+0x400/0x400
[  872.120835][T16849]  ? __might_fault+0xaa/0x120
[  872.125557][T16849]  ? __lock_acquire+0x7d40/0x7d40
[  872.130635][T16849]  should_fail_ex+0x39d/0x4d0
[  872.135367][T16849]  _copy_to_user+0x2f/0xa0
[  872.139826][T16849]  bpf_prog_test_run_raw_tp+0x4ca/0x660
[  872.145412][T16849]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  872.150948][T16849]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  872.156459][T16849]  bpf_prog_test_run+0x321/0x390
[  872.161441][T16849]  __sys_bpf+0x49d/0x890
[  872.165722][T16849]  ? bpf_link_show_fdinfo+0x390/0x390
[  872.171147][T16849]  ? lock_chain_count+0x20/0x20
[  872.176041][T16849]  __x64_sys_bpf+0x7c/0x90
[  872.180489][T16849]  do_syscall_64+0x55/0xa0
[  872.184943][T16849]  ? clear_bhb_loop+0x40/0x90
[  872.189651][T16849]  ? clear_bhb_loop+0x40/0x90
[  872.194364][T16849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  872.200288][T16849] RIP: 0033:0x7fd3bf99aeb9
[  872.204742][T16849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  872.224392][T16849] RSP: 002b:00007fd3c0783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  872.232848][T16849] RAX: ffffffffffffffda RBX: 00007fd3bfc15fa0 RCX: 00007fd3bf99aeb9
[  872.240855][T16849] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a
[  872.248860][T16849] RBP: 00007fd3c0783090 R08: 0000000000000000 R09: 0000000000000000
[  872.256965][T16849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  872.264973][T16849] R13: 00007fd3bfc16038 R14: 00007fd3bfc15fa0 R15: 00007ffd65b1a6b8
[  872.273003][T16849]  </TASK>
[  873.478426][T16870] validate_nla: 12 callbacks suppressed
[  873.478465][T16870] netlink: 'syz.2.3338': attribute type 2 has an invalid length.
[  873.507433][T16870] netlink: 'syz.2.3338': attribute type 1 has an invalid length.
[  873.532675][T16870] netlink: 'syz.2.3338': attribute type 2 has an invalid length.
[  873.551552][T16870] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3338'.
[  875.167272][T16886] netlink: 'syz.2.3345': attribute type 10 has an invalid length.
[  875.217884][T16898] netlink: 'syz.0.3348': attribute type 21 has an invalid length.
[  875.280984][T16898] netlink: 'syz.0.3348': attribute type 1 has an invalid length.
[  875.407448][T16901] netlink: 'syz.2.3349': attribute type 10 has an invalid length.
[  875.577939][T16889] netlink: 'syz.1.3344': attribute type 4 has an invalid length.
[  875.586029][T16889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3344'.
[  875.595236][T16889] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  876.253545][T16906] netlink: 'syz.3.3351': attribute type 2 has an invalid length.
[  876.269861][T16906] netlink: 'syz.3.3351': attribute type 1 has an invalid length.
[  876.282310][T16906] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3351'.
[  877.563545][T16939] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3363'.
[  878.503815][T16952] validate_nla: 8 callbacks suppressed
[  878.503838][T16952] netlink: 'syz.0.3368': attribute type 10 has an invalid length.
[  878.709368][T16962] netlink: 'syz.2.3371': attribute type 10 has an invalid length.
[  878.935845][T16942] netlink: 'syz.3.3365': attribute type 4 has an invalid length.
[  878.953139][T16942] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3365'.
[  878.965406][T16942] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  879.083158][T16971] netlink: 'syz.2.3374': attribute type 21 has an invalid length.
[  879.160267][T16971] netlink: 'syz.2.3374': attribute type 1 has an invalid length.
[  879.341429][T16974] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  880.185493][T16986] netlink: 'syz.0.3379': attribute type 2 has an invalid length.
[  880.198032][T16986] netlink: 'syz.0.3379': attribute type 1 has an invalid length.
[  880.208514][T16986] netlink: 'syz.0.3379': attribute type 2 has an invalid length.
[  880.262036][T16986] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.3379'.
[  880.454706][T16996] netlink: 'syz.3.3381': attribute type 10 has an invalid length.
[  880.787833][T17004] netlink: 'syz.0.3383': attribute type 10 has an invalid length.
[  882.891121][T17034] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3393'.
[  883.593163][T17038] validate_nla: 5 callbacks suppressed
[  883.593185][T17038] netlink: 'syz.2.3392': attribute type 10 has an invalid length.
[  883.845202][T17053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  883.871811][T17052] netlink: 'syz.1.3398': attribute type 21 has an invalid length.
[  883.901570][T17052] netlink: 'syz.1.3398': attribute type 1 has an invalid length.
[  884.232586][T17060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  884.910374][T17072] netlink: 'syz.3.3406': attribute type 2 has an invalid length.
[  884.935922][T17072] netlink: 'syz.3.3406': attribute type 1 has an invalid length.
[  884.944415][T17072] netlink: 'syz.3.3406': attribute type 2 has an invalid length.
[  884.968781][T17072] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3406'.
[  885.150478][T17079] netlink: 'syz.0.3407': attribute type 10 has an invalid length.
[  885.477773][T17086] netlink: 'syz.0.3411': attribute type 21 has an invalid length.
[  885.522527][T17086] netlink: 'syz.0.3411': attribute type 1 has an invalid length.
[  888.096312][T17115] netlink: 'syz.1.3419': attribute type 10 has an invalid length.
[  892.440384][T17145] validate_nla: 2 callbacks suppressed
[  892.440404][T17145] netlink: 'syz.0.3428': attribute type 21 has an invalid length.
[  892.487039][T17145] netlink: 'syz.0.3428': attribute type 1 has an invalid length.
[  893.003002][T17158] netlink: 'syz.1.3431': attribute type 10 has an invalid length.
[  893.769873][T17178] netlink: 'syz.2.3435': attribute type 4 has an invalid length.
[  893.853106][T17178] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3435'.
[  893.905512][T17178] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  894.118764][T17187] netlink: 'syz.3.3441': attribute type 10 has an invalid length.
[  894.215502][T17189] netlink: 'syz.1.3442': attribute type 21 has an invalid length.
[  894.228270][T17189] netlink: 'syz.1.3442': attribute type 1 has an invalid length.
[  896.133979][T17200] netlink: 'syz.2.3445': attribute type 4 has an invalid length.
[  896.144875][T17200] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3445'.
[  896.260154][T17200] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  896.289081][T17222] netlink: 'syz.3.3451': attribute type 10 has an invalid length.
[  896.813500][T17232] FAULT_INJECTION: forcing a failure.
[  896.813500][T17232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  896.903607][T17232] CPU: 0 PID: 17232 Comm: syz.1.3455 Not tainted syzkaller #0
[  896.911162][T17232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  896.921253][T17232] Call Trace:
[  896.924572][T17232]  <TASK>
[  896.927541][T17232]  dump_stack_lvl+0x18c/0x250
[  896.932269][T17232]  ? show_regs_print_info+0x20/0x20
[  896.937531][T17232]  ? load_image+0x400/0x400
[  896.942080][T17232]  ? __might_fault+0xaa/0x120
[  896.946788][T17232]  ? __lock_acquire+0x7d40/0x7d40
[  896.951849][T17232]  should_fail_ex+0x39d/0x4d0
[  896.956568][T17232]  _copy_from_user+0x2f/0xe0
[  896.961197][T17232]  generic_map_update_batch+0x59a/0x810
[  896.966793][T17232]  ? rcu_read_unlock+0xa0/0xa0
[  896.971604][T17232]  ? __fdget+0x180/0x210
[  896.975888][T17232]  ? rcu_read_unlock+0xa0/0xa0
[  896.980662][T17232]  bpf_map_do_batch+0x3d7/0x610
[  896.985531][T17232]  __sys_bpf+0x381/0x890
[  896.989788][T17232]  ? bpf_link_show_fdinfo+0x390/0x390
[  896.995185][T17232]  ? lock_chain_count+0x20/0x20
[  897.000061][T17232]  __x64_sys_bpf+0x7c/0x90
[  897.004495][T17232]  do_syscall_64+0x55/0xa0
[  897.008932][T17232]  ? clear_bhb_loop+0x40/0x90
[  897.013625][T17232]  ? clear_bhb_loop+0x40/0x90
[  897.018323][T17232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  897.024228][T17232] RIP: 0033:0x7f4d6259aeb9
[  897.028656][T17232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.048276][T17232] RSP: 002b:00007f4d633df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  897.056712][T17232] RAX: ffffffffffffffda RBX: 00007f4d62815fa0 RCX: 00007f4d6259aeb9
[  897.064712][T17232] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  897.072693][T17232] RBP: 00007f4d633df090 R08: 0000000000000000 R09: 0000000000000000
[  897.080720][T17232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  897.088705][T17232] R13: 00007f4d62816038 R14: 00007f4d62815fa0 R15: 00007ffdca533228
[  897.096705][T17232]  </TASK>
[  897.661038][T17240] netlink: 'syz.3.3458': attribute type 21 has an invalid length.
[  897.695979][T17240] netlink: 'syz.3.3458': attribute type 1 has an invalid length.
[  898.832805][T17244] netlink: 'syz.0.3452': attribute type 4 has an invalid length.
[  898.872961][T17244] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3452'.
[  898.928178][T17244] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  899.400862][T17265] netlink: 'syz.1.3462': attribute type 10 has an invalid length.
[  901.130907][T17303] netlink: 'syz.1.3475': attribute type 10 has an invalid length.
[  901.329816][T17310] netlink: 'syz.0.3477': attribute type 4 has an invalid length.
[  901.353968][T17310] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3477'.
[  901.369056][T17310] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  901.560978][T17316] netlink: 'syz.3.3481': attribute type 3 has an invalid length.
[  901.581689][T17316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3481'.
[  903.484831][T17338] netlink: 'syz.3.3487': attribute type 10 has an invalid length.
[  905.145284][T17373] FAULT_INJECTION: forcing a failure.
[  905.145284][T17373] name failslab, interval 1, probability 0, space 0, times 0
[  905.183459][T17373] CPU: 0 PID: 17373 Comm: syz.1.3496 Not tainted syzkaller #0
[  905.191009][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  905.201100][T17373] Call Trace:
[  905.204417][T17373]  <TASK>
[  905.207377][T17373]  dump_stack_lvl+0x18c/0x250
[  905.212157][T17373]  ? show_regs_print_info+0x20/0x20
[  905.217401][T17373]  ? load_image+0x400/0x400
[  905.221951][T17373]  ? __might_sleep+0xe0/0xe0
[  905.226586][T17373]  ? __lock_acquire+0x7d40/0x7d40
[  905.231649][T17373]  should_fail_ex+0x39d/0x4d0
[  905.236476][T17373]  should_failslab+0x9/0x20
[  905.241021][T17373]  slab_pre_alloc_hook+0x59/0x310
[  905.246086][T17373]  ? __kernfs_new_node+0xaa/0x810
[  905.251155][T17373]  ? rcu_is_watching+0x15/0xb0
[  905.255973][T17373]  kmem_cache_alloc+0x5a/0x2d0
[  905.260771][T17373]  ? __kernfs_new_node+0xe5/0x810
[  905.265843][T17373]  __kernfs_new_node+0xe5/0x810
[  905.270737][T17373]  ? verify_lock_unused+0x140/0x140
[  905.275982][T17373]  ? kernfs_new_node+0x260/0x260
[  905.280984][T17373]  ? make_kgid+0x1c8/0x660
[  905.285439][T17373]  ? from_kuid_munged+0x6b0/0x6b0
[  905.290506][T17373]  kernfs_new_node+0x14c/0x260
[  905.295316][T17373]  kernfs_create_dir_ns+0x44/0x120
[  905.300472][T17373]  sysfs_create_dir_ns+0x130/0x2a0
[  905.305628][T17373]  ? sysfs_warn_dup+0xa0/0xa0
[  905.310345][T17373]  ? do_raw_spin_unlock+0x121/0x230
[  905.315587][T17373]  kobject_add_internal+0x61c/0xcc0
[  905.320835][T17373]  kobject_add+0x164/0x240
[  905.325299][T17373]  ? kobject_init+0x1e0/0x1e0
[  905.330021][T17373]  ? get_device_parent+0x366/0x390
[  905.335174][T17373]  device_add+0x408/0xc20
[  905.339540][T17373]  ? device_initialize+0x24b/0x440
[  905.344694][T17373]  netdev_register_kobject+0x188/0x320
[  905.350198][T17373]  register_netdevice+0x12ee/0x1bb0
[  905.355477][T17373]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  905.361151][T17373]  ? netif_stacked_transfer_operstate+0x210/0x210
[  905.367604][T17373]  ? idr_alloc+0x20e/0x2f0
[  905.372055][T17373]  ? mutex_unlock+0x10/0x10
[  905.376620][T17373]  ? vscnprintf+0x80/0x80
[  905.381011][T17373]  ? net_generic+0x1e/0x240
[  905.385574][T17373]  ? net_generic+0x1e/0x240
[  905.390135][T17373]  ? radix_tree_lookup+0x267/0x280
[  905.395389][T17373]  ppp_dev_configure+0x84b/0xad0
[  905.400406][T17373]  ppp_ioctl+0x6e2/0x1a90
[  905.404787][T17373]  ? ppp_poll+0x250/0x250
[  905.409152][T17373]  ? __fget_files+0x28/0x4b0
[  905.413806][T17373]  ? bpf_lsm_file_ioctl+0x9/0x10
[  905.418773][T17373]  ? security_file_ioctl+0x80/0xa0
[  905.423937][T17373]  ? ppp_poll+0x250/0x250
[  905.428309][T17373]  __se_sys_ioctl+0xfd/0x170
[  905.432946][T17373]  do_syscall_64+0x55/0xa0
[  905.437404][T17373]  ? clear_bhb_loop+0x40/0x90
[  905.442117][T17373]  ? clear_bhb_loop+0x40/0x90
[  905.446830][T17373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  905.452757][T17373] RIP: 0033:0x7f4d6259aeb9
[  905.457208][T17373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  905.476845][T17373] RSP: 002b:00007f4d633be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  905.485302][T17373] RAX: ffffffffffffffda RBX: 00007f4d62816090 RCX: 00007f4d6259aeb9
[  905.493337][T17373] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000006
[  905.501353][T17373] RBP: 00007f4d633be090 R08: 0000000000000000 R09: 0000000000000000
[  905.509371][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  905.517378][T17373] R13: 00007f4d62816128 R14: 00007f4d62816090 R15: 00007ffdca533228
[  905.525402][T17373]  </TASK>
[  905.573364][T17373] kobject: kobject_add_internal failed for ppp0 (error: -12 parent: net)
[  905.759383][T17375] netlink: 'syz.3.3497': attribute type 10 has an invalid length.
[  906.462191][T17396] netlink: 'syz.3.3503': attribute type 10 has an invalid length.
[  907.940244][T17428] netlink: 'syz.0.3511': attribute type 10 has an invalid length.
[  908.266544][T17421] netlink: 'syz.3.3509': attribute type 4 has an invalid length.
[  908.315720][T17421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3509'.
[  908.340283][T17421] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  909.423828][T17450] netlink: 'syz.0.3519': attribute type 29 has an invalid length.
[  909.536423][T17450] netlink: 'syz.0.3519': attribute type 29 has an invalid length.
[  909.551128][T17450] netlink: 'syz.0.3519': attribute type 29 has an invalid length.
[  909.906974][T17459] netlink: 'syz.2.3520': attribute type 2 has an invalid length.
[  909.965976][T17459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3520'.
[  910.071564][T17462] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[  910.238929][T17462] netlink: 'syz.3.3522': attribute type 39 has an invalid length.
[  910.374206][T17467] netlink: 'syz.1.3524': attribute type 10 has an invalid length.
[  910.714488][T17476] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3528'.
[  911.594005][T17491] netlink: 'syz.0.3539': attribute type 10 has an invalid length.
[  912.954200][T17472] netlink: 'syz.3.3526': attribute type 4 has an invalid length.
[  912.967150][T17472] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3526'.
[  912.976835][T17472] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  913.984289][T17494] netlink: 'syz.2.3531': attribute type 4 has an invalid length.
[  914.006030][T17494] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3531'.
[  914.110668][T17494] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  914.713163][T17513] netlink: 'syz.3.3535': attribute type 10 has an invalid length.
[  916.231979][T17530] netlink: 'syz.1.3542': attribute type 10 has an invalid length.
[  916.627717][T17539] netlink: 'syz.2.3547': attribute type 10 has an invalid length.
[  916.823300][T17550] netlink: 'syz.2.3549': attribute type 29 has an invalid length.
[  916.837123][T17550] netlink: 'syz.2.3549': attribute type 29 has an invalid length.
[  916.920974][T17550] netlink: 'syz.2.3549': attribute type 29 has an invalid length.
[  917.069240][T17558] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3552'.
[  917.095903][T17558] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  917.173576][T17558] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.3552'.
[  918.147913][T17561] netlink: 'syz.2.3553': attribute type 10 has an invalid length.
[  918.166560][T17567] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode
[  918.191548][T17565] netlink: 'syz.1.3554': attribute type 39 has an invalid length.
[  918.610208][T17577] netlink: 'syz.0.3564': attribute type 10 has an invalid length.
[  918.772747][T17581] netlink: 'syz.2.3558': attribute type 10 has an invalid length.
[  919.855565][T17597] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  919.929237][T17607] FAULT_INJECTION: forcing a failure.
[  919.929237][T17607] name failslab, interval 1, probability 0, space 0, times 0
[  919.970230][T17607] CPU: 1 PID: 17607 Comm: syz.1.3566 Not tainted syzkaller #0
[  919.977778][T17607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  919.987877][T17607] Call Trace:
[  919.991200][T17607]  <TASK>
[  919.994169][T17607]  dump_stack_lvl+0x18c/0x250
[  919.998908][T17607]  ? show_regs_print_info+0x20/0x20
[  920.004159][T17607]  ? load_image+0x400/0x400
[  920.008710][T17607]  ? __might_sleep+0xe0/0xe0
[  920.013353][T17607]  ? __lock_acquire+0x7d40/0x7d40
[  920.018430][T17607]  should_fail_ex+0x39d/0x4d0
[  920.023167][T17607]  should_failslab+0x9/0x20
[  920.027731][T17607]  slab_pre_alloc_hook+0x59/0x310
[  920.032828][T17607]  ? sk_prot_alloc+0xe7/0x210
[  920.037579][T17607]  ? sk_prot_alloc+0xe7/0x210
[  920.042267][T17607]  __kmem_cache_alloc_node+0x53/0x250
[  920.047743][T17607]  ? sk_prot_alloc+0xe7/0x210
[  920.052429][T17607]  __kmalloc+0xa4/0x230
[  920.056600][T17607]  sk_prot_alloc+0xe7/0x210
[  920.061130][T17607]  ? sk_alloc+0x24/0x360
[  920.065390][T17607]  sk_alloc+0x3a/0x360
[  920.069554][T17607]  mISDN_sock_create+0x329/0x640
[  920.074519][T17607]  __sock_create+0x4a6/0x940
[  920.079149][T17607]  __sys_socketpair+0x236/0x550
[  920.084090][T17607]  __x64_sys_socketpair+0x9b/0xb0
[  920.089138][T17607]  do_syscall_64+0x55/0xa0
[  920.093592][T17607]  ? clear_bhb_loop+0x40/0x90
[  920.098288][T17607]  ? clear_bhb_loop+0x40/0x90
[  920.103012][T17607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  920.109022][T17607] RIP: 0033:0x7f4d6259aeb9
[  920.113636][T17607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  920.133437][T17607] RSP: 002b:00007f4d633df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  920.141881][T17607] RAX: ffffffffffffffda RBX: 00007f4d62815fa0 RCX: 00007f4d6259aeb9
[  920.149878][T17607] RDX: 0000000000000025 RSI: 0000000000000002 RDI: 0000000000000022
[  920.157874][T17607] RBP: 00007f4d633df090 R08: 0000000000000000 R09: 0000000000000000
[  920.165870][T17607] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  920.173855][T17607] R13: 00007f4d62816038 R14: 00007f4d62815fa0 R15: 00007ffdca533228
[  920.181882][T17607]  </TASK>
[  920.208989][T17604] validate_nla: 2 callbacks suppressed
[  920.209010][T17604] netlink: 'syz.3.3563': attribute type 29 has an invalid length.
[  920.216316][T17607] delete_channel: no stack
[  920.232038][T17601] netlink: 'syz.2.3565': attribute type 39 has an invalid length.
[  921.214971][T17619] netlink: 'syz.2.3570': attribute type 10 has an invalid length.
[  923.870113][T17626] netlink: 'syz.3.3571': attribute type 10 has an invalid length.
[  924.161353][T17644] netlink: 'syz.1.3578': attribute type 29 has an invalid length.
[  924.181603][T17644] netlink: 'syz.1.3578': attribute type 29 has an invalid length.
[  924.346504][T17644] netlink: 'syz.1.3578': attribute type 29 has an invalid length.
[  924.746288][T17657] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  924.866522][T17654] netlink: 'syz.1.3581': attribute type 10 has an invalid length.
[  925.006328][T17662] netlink: 'syz.2.3583': attribute type 10 has an invalid length.
[  925.142631][T17652] netlink: 'syz.0.3580': attribute type 39 has an invalid length.
[  925.872424][T17681] netlink: 'syz.1.3589': attribute type 29 has an invalid length.
[  925.930171][T17681] netlink: 'syz.1.3589': attribute type 29 has an invalid length.
[  926.013317][T17685] netlink: 'syz.3.3590': attribute type 29 has an invalid length.
[  926.097709][T17685] netlink: 'syz.3.3590': attribute type 29 has an invalid length.
[  928.322395][T17716] netlink: 'syz.1.3598': attribute type 9 has an invalid length.
[  928.376111][T17716] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3598'.
[  929.090705][T17727] netlink: 'syz.1.3603': attribute type 29 has an invalid length.
[  929.137832][T17727] netlink: 'syz.1.3603': attribute type 29 has an invalid length.
[  930.893072][T17752] netlink: 'syz.1.3614': attribute type 2 has an invalid length.
[  930.984965][T17752] netlink: 'syz.1.3614': attribute type 1 has an invalid length.
[  930.994304][T17752] netlink: 'syz.1.3614': attribute type 2 has an invalid length.
[  931.006878][T17752] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3614'.
[  931.089750][T17760] netlink: 'syz.3.3616': attribute type 21 has an invalid length.
[  931.105983][T17760] netlink: 'syz.3.3616': attribute type 1 has an invalid length.
[  932.276901][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  932.283408][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  932.587082][T17782] netlink: 'syz.2.3623': attribute type 10 has an invalid length.
[  932.660977][T17769] netlink: 'syz.1.3618': attribute type 4 has an invalid length.
[  932.724929][T17769] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3618'.
[  932.746150][T17769] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  933.220111][T17796] netlink: 'syz.1.3629': attribute type 21 has an invalid length.
[  933.268860][T17796] netlink: 'syz.1.3629': attribute type 1 has an invalid length.
[  933.395487][T17794] netlink: 'syz.3.3627': attribute type 2 has an invalid length.
[  933.424811][T17794] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3627'.
[  934.558984][T17818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3637'.
[  934.596282][T17818] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  936.100715][T17849] validate_nla: 16 callbacks suppressed
[  936.100738][T17849] netlink: 'syz.0.3644': attribute type 2 has an invalid length.
[  936.216198][T17849] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3644'.
[  936.877578][T17852] syzkaller0: entered promiscuous mode
[  936.883713][T17852] syzkaller0: entered allmulticast mode
[  940.108774][T17862] netlink: 'syz.2.3650': attribute type 10 has an invalid length.
[  940.125495][T17867] netlink: 'syz.0.3651': attribute type 4 has an invalid length.
[  940.156164][T17867] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3651'.
[  940.165289][T17867] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  940.237448][T17873] netlink: 'syz.3.3652': attribute type 21 has an invalid length.
[  940.243969][T17875] netlink: 'syz.2.3653': attribute type 29 has an invalid length.
[  940.259638][T17873] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  940.270620][T17875] netlink: 'syz.2.3653': attribute type 29 has an invalid length.
[  940.276970][T17878] netlink: 'syz.1.3654': attribute type 29 has an invalid length.
[  940.326923][T17878] netlink: 'syz.1.3654': attribute type 29 has an invalid length.
[  940.563460][T17888] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3656'.
[  940.679767][T17890] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3658'.
[  940.710153][T17890] netlink: 'syz.2.3658': attribute type 10 has an invalid length.
[  940.737189][T17890] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode
[  940.771087][T17890] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  940.793895][T17892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3659'.
[  940.816147][T17892] ipvlan1: entered promiscuous mode
[  940.821546][T17892] ipvlan1: entered allmulticast mode
[  940.835928][T17892] veth0_vlan: entered allmulticast mode
[  940.844153][T17892] bridge0: port 3(ipvlan1) entered blocking state
[  940.866016][T17892] bridge0: port 3(ipvlan1) entered disabled state
[  940.888704][T17892] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  940.919891][T17900] FAULT_INJECTION: forcing a failure.
[  940.919891][T17900] name failslab, interval 1, probability 0, space 0, times 0
[  940.938578][T17900] CPU: 0 PID: 17900 Comm: syz.2.3662 Not tainted syzkaller #0
[  940.946115][T17900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  940.956215][T17900] Call Trace:
[  940.959531][T17900]  <TASK>
[  940.962508][T17900]  dump_stack_lvl+0x18c/0x250
[  940.967242][T17900]  ? sctp_sendmsg+0x1575/0x28c0
[  940.972130][T17900]  ? ___sys_sendmsg+0x2a6/0x360
[  940.977023][T17900]  ? show_regs_print_info+0x20/0x20
[  940.982276][T17900]  ? load_image+0x400/0x400
[  940.986854][T17900]  should_fail_ex+0x39d/0x4d0
[  940.991597][T17900]  should_failslab+0x9/0x20
[  940.996151][T17900]  slab_pre_alloc_hook+0x59/0x310
[  941.001233][T17900]  ? sctp_add_bind_addr+0x8c/0x360
[  941.006415][T17900]  __kmem_cache_alloc_node+0x53/0x250
[  941.011953][T17900]  ? sctp_add_bind_addr+0x8c/0x360
[  941.017138][T17900]  kmalloc_trace+0x2a/0xe0
[  941.021611][T17900]  sctp_add_bind_addr+0x8c/0x360
[  941.026688][T17900]  sctp_copy_local_addr_list+0x315/0x4f0
[  941.032364][T17900]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  941.038120][T17900]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  941.044229][T17900]  ? sctp_v4_is_any+0x35/0x60
[  941.048930][T17900]  ? sctp_copy_one_addr+0x8c/0x350
[  941.054088][T17900]  sctp_bind_addr_copy+0xb3/0x3c0
[  941.059151][T17900]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  941.065513][T17900]  sctp_connect_new_asoc+0x2f9/0x6a0
[  941.070835][T17900]  ? __sctp_connect+0xd80/0xd80
[  941.075722][T17900]  ? __local_bh_enable_ip+0x13a/0x1c0
[  941.081135][T17900]  ? _local_bh_enable+0xa0/0xa0
[  941.086100][T17900]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  941.092027][T17900]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  941.097871][T17900]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  941.103453][T17900]  ? security_sctp_bind_connect+0x89/0xb0
[  941.109212][T17900]  sctp_sendmsg+0x1575/0x28c0
[  941.113942][T17900]  ? sctp_getsockopt+0xb60/0xb60
[  941.119032][T17900]  ? aa_sk_perm+0x83c/0x970
[  941.123579][T17900]  ? aa_af_perm+0x330/0x330
[  941.128118][T17900]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  941.134569][T17900]  ? sock_rps_record_flow+0x19/0x3f0
[  941.139893][T17900]  ? inet_sendmsg+0x7c/0x2f0
[  941.144686][T17900]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  941.150099][T17900]  ? security_socket_sendmsg+0x80/0xa0
[  941.155587][T17900]  ? inet_send_prepare+0x260/0x260
[  941.160730][T17900]  ____sys_sendmsg+0x5ba/0x960
[  941.165547][T17900]  ? __lock_acquire+0x7d40/0x7d40
[  941.170612][T17900]  ? __asan_memset+0x22/0x40
[  941.175244][T17900]  ? __sys_sendmsg_sock+0x30/0x30
[  941.180303][T17900]  ? __import_iovec+0x5f2/0x850
[  941.185199][T17900]  ? import_iovec+0x73/0xa0
[  941.189747][T17900]  ___sys_sendmsg+0x2a6/0x360
[  941.194452][T17900]  ? get_pid_task+0x20/0x1e0
[  941.199079][T17900]  ? __sys_sendmsg+0x2a0/0x2a0
[  941.203900][T17900]  ? __lock_acquire+0x7d40/0x7d40
[  941.208991][T17900]  __se_sys_sendmsg+0x1c2/0x2b0
[  941.213886][T17900]  ? __x64_sys_sendmsg+0x80/0x80
[  941.218878][T17900]  ? lockdep_hardirqs_on+0x98/0x150
[  941.224111][T17900]  do_syscall_64+0x55/0xa0
[  941.228566][T17900]  ? clear_bhb_loop+0x40/0x90
[  941.233269][T17900]  ? clear_bhb_loop+0x40/0x90
[  941.237975][T17900]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  941.244030][T17900] RIP: 0033:0x7fb4f099aeb9
[  941.248489][T17900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  941.268127][T17900] RSP: 002b:00007fb4f18c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  941.276581][T17900] RAX: ffffffffffffffda RBX: 00007fb4f0c15fa0 RCX: 00007fb4f099aeb9
[  941.284669][T17900] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  941.292665][T17900] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[  941.300661][T17900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  941.308658][T17900] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[  941.316678][T17900]  </TASK>
[  941.407721][T17908] validate_nla: 4 callbacks suppressed
[  941.407741][T17908] netlink: 'syz.2.3665': attribute type 29 has an invalid length.
[  941.825641][T17913] netlink: 'syz.1.3666': attribute type 29 has an invalid length.
[  942.209335][T17908] netlink: 'syz.2.3665': attribute type 29 has an invalid length.
[  942.267762][T17913] netlink: 'syz.1.3666': attribute type 29 has an invalid length.
[  942.534552][T17923] FAULT_INJECTION: forcing a failure.
[  942.534552][T17923] name failslab, interval 1, probability 0, space 0, times 0
[  942.547688][T17923] CPU: 1 PID: 17923 Comm: syz.2.3668 Not tainted syzkaller #0
[  942.555188][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  942.565292][T17923] Call Trace:
[  942.568670][T17923]  <TASK>
[  942.571637][T17923]  dump_stack_lvl+0x18c/0x250
[  942.576374][T17923]  ? atomic_notifier_call_chain+0xda/0x180
[  942.582241][T17923]  ? fib6_add+0x1b18/0x46b0
[  942.586812][T17923]  ? show_regs_print_info+0x20/0x20
[  942.592105][T17923]  ? load_image+0x400/0x400
[  942.596658][T17923]  ? ____sys_sendmsg+0x5ba/0x960
[  942.601734][T17923]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  942.607861][T17923]  should_fail_ex+0x39d/0x4d0
[  942.612596][T17923]  should_failslab+0x9/0x20
[  942.617155][T17923]  slab_pre_alloc_hook+0x59/0x310
[  942.622326][T17923]  ? nsim_fib_event_nb+0x295/0x1080
[  942.627582][T17923]  ? nsim_fib_event_nb+0x295/0x1080
[  942.632818][T17923]  __kmem_cache_alloc_node+0x53/0x250
[  942.638241][T17923]  ? nsim_fib_event_nb+0x295/0x1080
[  942.643485][T17923]  __kmalloc+0xa4/0x230
[  942.647703][T17923]  nsim_fib_event_nb+0x295/0x1080
[  942.652775][T17923]  ? read_lock_is_recursive+0x20/0x20
[  942.658228][T17923]  notifier_call_chain+0x197/0x380
[  942.663371][T17923]  ? atomic_notifier_call_chain+0x26/0x180
[  942.669243][T17923]  atomic_notifier_call_chain+0xda/0x180
[  942.675018][T17923]  call_fib_notifiers+0x31/0x60
[  942.680022][T17923]  fib6_add+0x1b18/0x46b0
[  942.684404][T17923]  ? fib6_update_sernum_stub+0x1e0/0x1e0
[  942.690069][T17923]  ? do_raw_spin_lock+0x11f/0x2c0
[  942.695116][T17923]  ? __rwlock_init+0x150/0x150
[  942.699903][T17923]  ? ip6_route_add+0x75/0x160
[  942.704599][T17923]  ip6_route_add+0x8a/0x160
[  942.709158][T17923]  addrconf_prefix_route+0x24d/0x330
[  942.714584][T17923]  ? fib6_add_gc_list+0x200/0x200
[  942.719636][T17923]  ? atomic_notifier_call_chain+0x26/0x180
[  942.725486][T17923]  ? ipv6_count_addresses+0x190/0x190
[  942.731003][T17923]  inet6_addr_add+0x64a/0xb60
[  942.735737][T17923]  inet6_rtm_newaddr+0x76f/0x9d0
[  942.740738][T17923]  ? inet6_dump_ifinfo+0x940/0x940
[  942.745909][T17923]  ? mutex_lock_nested+0x20/0x20
[  942.750876][T17923]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  942.756014][T17923]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  942.761149][T17923]  ? inet6_dump_ifinfo+0x940/0x940
[  942.766281][T17923]  rtnetlink_rcv_msg+0x869/0xfa0
[  942.771239][T17923]  ? lockdep_hardirqs_on+0x98/0x150
[  942.776453][T17923]  ? rtnetlink_bind+0x80/0x80
[  942.781148][T17923]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  942.787144][T17923]  ? __dev_queue_xmit+0x26b/0x36b0
[  942.792271][T17923]  ? lock_chain_count+0x20/0x20
[  942.797144][T17923]  ? __local_bh_enable_ip+0x13a/0x1c0
[  942.802532][T17923]  ? lockdep_hardirqs_on+0x98/0x150
[  942.807743][T17923]  ? __local_bh_enable_ip+0x13a/0x1c0
[  942.813132][T17923]  ? _local_bh_enable+0xa0/0xa0
[  942.818001][T17923]  ? __dev_queue_xmit+0x26b/0x36b0
[  942.823133][T17923]  ? __dev_queue_xmit+0x26b/0x36b0
[  942.828259][T17923]  ? __dev_queue_xmit+0x124f/0x36b0
[  942.833474][T17923]  ? __dev_queue_xmit+0x26b/0x36b0
[  942.838620][T17923]  ? ref_tracker_free+0x690/0x840
[  942.843672][T17923]  netlink_rcv_skb+0x241/0x4d0
[  942.848460][T17923]  ? rtnetlink_bind+0x80/0x80
[  942.853154][T17923]  ? netlink_ack+0x1180/0x1180
[  942.857951][T17923]  ? __lock_acquire+0x7d40/0x7d40
[  942.863174][T17923]  ? netlink_deliver_tap+0x2e/0x1b0
[  942.868393][T17923]  netlink_unicast+0x751/0x8d0
[  942.873185][T17923]  netlink_sendmsg+0x8d0/0xbf0
[  942.878068][T17923]  ? netlink_getsockopt+0x590/0x590
[  942.883289][T17923]  ? aa_sock_msg_perm+0x94/0x150
[  942.888422][T17923]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  942.893725][T17923]  ? security_socket_sendmsg+0x80/0xa0
[  942.899209][T17923]  ? netlink_getsockopt+0x590/0x590
[  942.904459][T17923]  ____sys_sendmsg+0x5ba/0x960
[  942.909263][T17923]  ? __asan_memset+0x22/0x40
[  942.913873][T17923]  ? __sys_sendmsg_sock+0x30/0x30
[  942.918917][T17923]  ? __import_iovec+0x5f2/0x850
[  942.923880][T17923]  ? import_iovec+0x73/0xa0
[  942.928411][T17923]  ___sys_sendmsg+0x2a6/0x360
[  942.933101][T17923]  ? get_pid_task+0x20/0x1e0
[  942.937714][T17923]  ? __sys_sendmsg+0x2a0/0x2a0
[  942.942507][T17923]  ? __lock_acquire+0x7d40/0x7d40
[  942.947569][T17923]  __se_sys_sendmsg+0x1c2/0x2b0
[  942.952447][T17923]  ? __x64_sys_sendmsg+0x80/0x80
[  942.957415][T17923]  ? lockdep_hardirqs_on+0x98/0x150
[  942.962641][T17923]  do_syscall_64+0x55/0xa0
[  942.967165][T17923]  ? clear_bhb_loop+0x40/0x90
[  942.971859][T17923]  ? clear_bhb_loop+0x40/0x90
[  942.976563][T17923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  942.982478][T17923] RIP: 0033:0x7fb4f099aeb9
[  942.986909][T17923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  943.006534][T17923] RSP: 002b:00007fb4f18c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  943.014969][T17923] RAX: ffffffffffffffda RBX: 00007fb4f0c15fa0 RCX: 00007fb4f099aeb9
[  943.022968][T17923] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  943.031043][T17923] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[  943.039028][T17923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  943.047120][T17923] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[  943.055213][T17923]  </TASK>
[  943.138586][T17911] netlink: 'syz.0.3663': attribute type 4 has an invalid length.
[  943.147932][T17911] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3663'.
[  943.157208][T17911] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  943.258888][T17934] delete_channel: no stack
[  943.733153][T17940] netlink: 'syz.3.3675': attribute type 21 has an invalid length.
[  943.741436][T17940] netlink: 'syz.3.3675': attribute type 1 has an invalid length.
[  943.811259][T17942] netlink: 'syz.2.3676': attribute type 29 has an invalid length.
[  943.823510][T17944] netlink: 'syz.0.3677': attribute type 29 has an invalid length.
[  943.839674][T17942] netlink: 'syz.2.3676': attribute type 29 has an invalid length.
[  944.259377][T17957] FAULT_INJECTION: forcing a failure.
[  944.259377][T17957] name failslab, interval 1, probability 0, space 0, times 0
[  944.305839][T17957] CPU: 1 PID: 17957 Comm: syz.2.3683 Not tainted syzkaller #0
[  944.313400][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  944.323612][T17957] Call Trace:
[  944.326938][T17957]  <TASK>
[  944.329904][T17957]  dump_stack_lvl+0x18c/0x250
[  944.334640][T17957]  ? sctp_sendmsg+0x1575/0x28c0
[  944.339532][T17957]  ? ___sys_sendmsg+0x2a6/0x360
[  944.344427][T17957]  ? show_regs_print_info+0x20/0x20
[  944.349688][T17957]  ? load_image+0x400/0x400
[  944.354232][T17957]  should_fail_ex+0x39d/0x4d0
[  944.358948][T17957]  should_failslab+0x9/0x20
[  944.363483][T17957]  slab_pre_alloc_hook+0x59/0x310
[  944.368542][T17957]  ? sctp_add_bind_addr+0x8c/0x360
[  944.373681][T17957]  __kmem_cache_alloc_node+0x53/0x250
[  944.379078][T17957]  ? sctp_add_bind_addr+0x8c/0x360
[  944.384325][T17957]  kmalloc_trace+0x2a/0xe0
[  944.388788][T17957]  sctp_add_bind_addr+0x8c/0x360
[  944.393859][T17957]  sctp_copy_local_addr_list+0x315/0x4f0
[  944.399520][T17957]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  944.405360][T17957]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  944.411469][T17957]  ? sctp_v4_is_any+0x35/0x60
[  944.416185][T17957]  ? sctp_copy_one_addr+0x8c/0x350
[  944.421374][T17957]  sctp_bind_addr_copy+0xb3/0x3c0
[  944.426513][T17957]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  944.433119][T17957]  sctp_connect_new_asoc+0x2f9/0x6a0
[  944.438420][T17957]  ? __sctp_connect+0xd80/0xd80
[  944.443282][T17957]  ? __local_bh_enable_ip+0x13a/0x1c0
[  944.448671][T17957]  ? _local_bh_enable+0xa0/0xa0
[  944.453536][T17957]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  944.459357][T17957]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  944.465176][T17957]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  944.470753][T17957]  ? security_sctp_bind_connect+0x89/0xb0
[  944.476495][T17957]  sctp_sendmsg+0x1575/0x28c0
[  944.481196][T17957]  ? sctp_getsockopt+0xb60/0xb60
[  944.486152][T17957]  ? aa_sk_perm+0x83c/0x970
[  944.490684][T17957]  ? aa_af_perm+0x330/0x330
[  944.495204][T17957]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  944.501634][T17957]  ? sock_rps_record_flow+0x19/0x3f0
[  944.506938][T17957]  ? inet_sendmsg+0x7c/0x2f0
[  944.511547][T17957]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  944.516854][T17957]  ? security_socket_sendmsg+0x80/0xa0
[  944.522355][T17957]  ? inet_send_prepare+0x260/0x260
[  944.527522][T17957]  ____sys_sendmsg+0x5ba/0x960
[  944.532402][T17957]  ? __lock_acquire+0x7d40/0x7d40
[  944.537457][T17957]  ? __asan_memset+0x22/0x40
[  944.542063][T17957]  ? __sys_sendmsg_sock+0x30/0x30
[  944.547111][T17957]  ? __import_iovec+0x5f2/0x850
[  944.551990][T17957]  ? import_iovec+0x73/0xa0
[  944.556516][T17957]  ___sys_sendmsg+0x2a6/0x360
[  944.561223][T17957]  ? get_pid_task+0x20/0x1e0
[  944.565847][T17957]  ? __sys_sendmsg+0x2a0/0x2a0
[  944.570676][T17957]  ? __lock_acquire+0x7d40/0x7d40
[  944.575747][T17957]  __se_sys_sendmsg+0x1c2/0x2b0
[  944.580638][T17957]  ? __x64_sys_sendmsg+0x80/0x80
[  944.585613][T17957]  ? lockdep_hardirqs_on+0x98/0x150
[  944.590830][T17957]  do_syscall_64+0x55/0xa0
[  944.595268][T17957]  ? clear_bhb_loop+0x40/0x90
[  944.599956][T17957]  ? clear_bhb_loop+0x40/0x90
[  944.604649][T17957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  944.610566][T17957] RIP: 0033:0x7fb4f099aeb9
[  944.614999][T17957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  944.634627][T17957] RSP: 002b:00007fb4f18c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  944.643058][T17957] RAX: ffffffffffffffda RBX: 00007fb4f0c15fa0 RCX: 00007fb4f099aeb9
[  944.651042][T17957] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  944.659029][T17957] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[  944.667102][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  944.675102][T17957] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[  944.683431][T17957]  </TASK>
[  946.263987][T17989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3693'.
[  946.548194][T17994] validate_nla: 11 callbacks suppressed
[  946.548217][T17994] netlink: 'syz.3.3685': attribute type 4 has an invalid length.
[  946.708631][T17996] netlink: 'syz.0.3696': attribute type 29 has an invalid length.
[  946.720185][T17994] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3685'.
[  946.751275][T17994] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  946.848833][T17996] netlink: 'syz.0.3696': attribute type 29 has an invalid length.
[  946.983799][T18002] netlink: 'syz.1.3698': attribute type 10 has an invalid length.
[  947.153846][T18005] netlink: 'syz.0.3699': attribute type 29 has an invalid length.
[  947.186779][T18007] netlink: 'syz.2.3700': attribute type 21 has an invalid length.
[  947.235135][T18007] netlink: 'syz.2.3700': attribute type 1 has an invalid length.
[  947.294369][T18005] netlink: 'syz.0.3699': attribute type 29 has an invalid length.
[  949.635345][T18030] netlink: 'syz.2.3705': attribute type 10 has an invalid length.
[  949.755846][T18025] netlink: 'syz.3.3704': attribute type 4 has an invalid length.
[  949.793310][T18025] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3704'.
[  949.825044][T18025] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  951.745162][T18075] validate_nla: 10 callbacks suppressed
[  951.745187][T18075] netlink: 'syz.2.3722': attribute type 21 has an invalid length.
[  951.822833][T18075] netlink: 'syz.2.3722': attribute type 1 has an invalid length.
[  952.281394][T18084] netlink: 'syz.0.3724': attribute type 29 has an invalid length.
[  952.846036][T18050] netlink: 'syz.3.3712': attribute type 4 has an invalid length.
[  952.896194][T18050] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3712'.
[  952.905770][T18050] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  953.067231][T18084] netlink: 'syz.0.3724': attribute type 29 has an invalid length.
[  953.249084][T18080] netlink: 'syz.1.3723': attribute type 4 has an invalid length.
[  953.378487][T18080] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3723'.
[  953.463074][T18080] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  953.871574][T18098] netlink: 'syz.0.3735': attribute type 29 has an invalid length.
[  953.878970][T18100] netlink: 'syz.1.3728': attribute type 29 has an invalid length.
[  953.891792][T18098] netlink: 'syz.0.3735': attribute type 29 has an invalid length.
[  953.912365][T18100] netlink: 'syz.1.3728': attribute type 29 has an invalid length.
[  956.326441][T18130] À: port 1(vlan0) entered blocking state
[  956.344902][T18130] À: port 1(vlan0) entered disabled state
[  956.373806][T18130] vlan0: entered allmulticast mode
[  956.394334][T18130] veth0_vlan: entered allmulticast mode
[  956.411792][T18130] vlan0: entered promiscuous mode
[  956.422921][T18130] À: port 1(vlan0) entered blocking state
[  956.429180][T18130] À: port 1(vlan0) entered forwarding state
[  956.442790][T18125] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3738'.
[  956.454392][T18125] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  956.899684][T18153] validate_nla: 10 callbacks suppressed
[  956.899700][T18153] netlink: 'syz.2.3747': attribute type 10 has an invalid length.
[  957.923927][T18168] netlink: 'syz.3.3751': attribute type 29 has an invalid length.
[  957.948846][T18168] netlink: 'syz.3.3751': attribute type 29 has an invalid length.
[  958.142353][T18171] netlink: 'syz.2.3752': attribute type 10 has an invalid length.
[  958.172100][T18174] netlink: 'syz.0.3753': attribute type 21 has an invalid length.
[  958.262522][T18174] netlink: 'syz.0.3753': attribute type 1 has an invalid length.
[  959.733627][T18187] netlink: 'syz.1.3757': attribute type 10 has an invalid length.
[  959.902920][T18190] netlink: 'syz.0.3758': attribute type 29 has an invalid length.
[  959.938433][T18190] netlink: 'syz.0.3758': attribute type 29 has an invalid length.
[  960.423560][T18203] netlink: 'syz.2.3762': attribute type 29 has an invalid length.
[  961.523455][T18223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3768'.
[  961.534459][T18223] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  961.985029][T18235] validate_nla: 8 callbacks suppressed
[  961.985050][T18235] netlink: 'syz.0.3773': attribute type 29 has an invalid length.
[  962.046208][T18235] netlink: 'syz.0.3773': attribute type 29 has an invalid length.
[  962.401861][T18240] netlink: 'syz.1.3774': attribute type 10 has an invalid length.
[  963.044320][T18229] netlink: 'syz.3.3770': attribute type 4 has an invalid length.
[  963.090013][T18229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3770'.
[  963.141975][T18229] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  963.164288][T18252] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3777'.
[  963.216089][T18251] netlink: 'syz.0.3778': attribute type 10 has an invalid length.
[  963.230426][T18252] openvswitch: netlink: Key type 4112 is out of range max 32
[  963.819550][T18258] netlink: 'syz.0.3779': attribute type 29 has an invalid length.
[  963.876515][T18258] netlink: 'syz.0.3779': attribute type 29 has an invalid length.
[  964.164473][T18263] netlink: 'syz.1.3781': attribute type 21 has an invalid length.
[  964.175885][T18263] netlink: 'syz.1.3781': attribute type 1 has an invalid length.
[  964.861517][T18274] netlink: 'syz.0.3785': attribute type 10 has an invalid length.
[  966.363564][T18306] FAULT_INJECTION: forcing a failure.
[  966.363564][T18306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  966.535976][T18306] CPU: 0 PID: 18306 Comm: syz.3.3795 Not tainted syzkaller #0
[  966.543611][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  966.553800][T18306] Call Trace:
[  966.557126][T18306]  <TASK>
[  966.560097][T18306]  dump_stack_lvl+0x18c/0x250
[  966.564914][T18306]  ? show_regs_print_info+0x20/0x20
[  966.570173][T18306]  ? load_image+0x400/0x400
[  966.574719][T18306]  ? __might_fault+0xaa/0x120
[  966.579436][T18306]  ? __lock_acquire+0x7d40/0x7d40
[  966.584511][T18306]  should_fail_ex+0x39d/0x4d0
[  966.589239][T18306]  _copy_from_user+0x2f/0xe0
[  966.593873][T18306]  csum_and_copy_from_iter+0x476/0x14a0
[  966.599488][T18306]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  966.605261][T18306]  ? __kasan_slab_alloc+0x6c/0x80
[  966.610507][T18306]  ? slab_post_alloc_hook+0x8a/0x4b0
[  966.615937][T18306]  ? rcu_is_watching+0x15/0xb0
[  966.620764][T18306]  ip_generic_getfrag+0x163/0x2f0
[  966.625910][T18306]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  966.630867][T18306]  ? skb_put+0x11b/0x210
[  966.635157][T18306]  __ip_append_data+0x2f11/0x3d40
[  966.640268][T18306]  ? raw_send_hdrinc+0x1170/0x1170
[  966.645428][T18306]  ? mark_lock+0x94/0x320
[  966.649804][T18306]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  966.655855][T18306]  ? ip_setup_cork+0x860/0x860
[  966.660689][T18306]  ? ip_setup_cork+0x530/0x860
[  966.665508][T18306]  ip_append_data+0x10d/0x180
[  966.670601][T18306]  ? raw_send_hdrinc+0x1170/0x1170
[  966.675790][T18306]  raw_sendmsg+0x15c1/0x1c00
[  966.680459][T18306]  ? compat_raw_ioctl+0x70/0x70
[  966.685374][T18306]  ? __lock_acquire+0x1273/0x7d40
[  966.690471][T18306]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  966.696936][T18306]  ? sock_rps_record_flow+0x19/0x3f0
[  966.702279][T18306]  ? inet_sendmsg+0x7c/0x2f0
[  966.706903][T18306]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  966.712239][T18306]  ? security_socket_sendmsg+0x80/0xa0
[  966.717745][T18306]  ? inet_send_prepare+0x260/0x260
[  966.722995][T18306]  ____sys_sendmsg+0x5ba/0x960
[  966.727814][T18306]  ? __lock_acquire+0x7d40/0x7d40
[  966.732979][T18306]  ? __asan_memset+0x22/0x40
[  966.737619][T18306]  ? __sys_sendmsg_sock+0x30/0x30
[  966.742683][T18306]  ? __import_iovec+0x3fa/0x850
[  966.747595][T18306]  ? import_iovec+0x73/0xa0
[  966.752149][T18306]  ___sys_sendmsg+0x2a6/0x360
[  966.756884][T18306]  ? __sys_sendmsg+0x2a0/0x2a0
[  966.761798][T18306]  ? __lock_acquire+0x7d40/0x7d40
[  966.766917][T18306]  __se_sys_sendmsg+0x1c2/0x2b0
[  966.771815][T18306]  ? __x64_sys_sendmsg+0x80/0x80
[  966.776832][T18306]  ? lockdep_hardirqs_on+0x98/0x150
[  966.782166][T18306]  do_syscall_64+0x55/0xa0
[  966.786634][T18306]  ? clear_bhb_loop+0x40/0x90
[  966.791351][T18306]  ? clear_bhb_loop+0x40/0x90
[  966.796078][T18306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.802105][T18306] RIP: 0033:0x7fd3bf99aeb9
[  966.806559][T18306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.826299][T18306] RSP: 002b:00007fd3c0783028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  966.834885][T18306] RAX: ffffffffffffffda RBX: 00007fd3bfc15fa0 RCX: 00007fd3bf99aeb9
[  966.843027][T18306] RDX: 0000000020040000 RSI: 0000200000000a00 RDI: 0000000000000003
[  966.851056][T18306] RBP: 00007fd3c0783090 R08: 0000000000000000 R09: 0000000000000000
[  966.859066][T18306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  966.867161][T18306] R13: 00007fd3bfc16038 R14: 00007fd3bfc15fa0 R15: 00007ffd65b1a6b8
[  966.875373][T18306]  </TASK>
[  967.471824][T18285] validate_nla: 8 callbacks suppressed
[  967.471847][T18285] netlink: 'syz.2.3791': attribute type 4 has an invalid length.
[  967.602769][T18285] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3791'.
[  967.634279][T18285] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  967.683385][T18301] netlink: 'syz.1.3794': attribute type 4 has an invalid length.
[  967.728838][T18301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3794'.
[  967.767002][T18301] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  967.802249][T18315] netlink: 'syz.3.3798': attribute type 10 has an invalid length.
[  967.959504][T18320] netlink: 'syz.3.3800': attribute type 29 has an invalid length.
[  968.024071][T18317] netlink: 'syz.0.3799': attribute type 10 has an invalid length.
[  968.036986][T18320] netlink: 'syz.3.3800': attribute type 29 has an invalid length.
[  968.167287][T18327] netlink: 'syz.2.3802': attribute type 21 has an invalid length.
[  968.175215][T18327] netlink: 'syz.2.3802': attribute type 1 has an invalid length.
[  968.243672][T18332] netlink: 'syz.0.3804': attribute type 29 has an invalid length.
[  968.272950][T18332] netlink: 'syz.0.3804': attribute type 29 has an invalid length.
[  968.414175][T18338] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3807'.
[  968.832581][T18349] netlink: 287 bytes leftover after parsing attributes in process `syz.2.3810'.
[  968.837848][T18351] netlink: 287 bytes leftover after parsing attributes in process `syz.2.3810'.
[  969.104782][T18346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3809'.
[  969.169427][T18346] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  969.507606][T18364] FAULT_INJECTION: forcing a failure.
[  969.507606][T18364] name failslab, interval 1, probability 0, space 0, times 0
[  969.548390][T18364] CPU: 0 PID: 18364 Comm: syz.2.3816 Not tainted syzkaller #0
[  969.555938][T18364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  969.566042][T18364] Call Trace:
[  969.569359][T18364]  <TASK>
[  969.572355][T18364]  dump_stack_lvl+0x18c/0x250
[  969.577084][T18364]  ? show_regs_print_info+0x20/0x20
[  969.582328][T18364]  ? load_image+0x400/0x400
[  969.586876][T18364]  ? __might_sleep+0xe0/0xe0
[  969.591591][T18364]  ? __lock_acquire+0x7d40/0x7d40
[  969.596665][T18364]  ? __lock_acquire+0x1273/0x7d40
[  969.601742][T18364]  should_fail_ex+0x39d/0x4d0
[  969.606464][T18364]  should_failslab+0x9/0x20
[  969.611005][T18364]  slab_pre_alloc_hook+0x59/0x310
[  969.616158][T18364]  ? __lock_acquire+0x1347/0x7d40
[  969.621222][T18364]  ? tcp_sendmsg_fastopen+0x1de/0x5d0
[  969.626731][T18364]  __kmem_cache_alloc_node+0x53/0x250
[  969.632153][T18364]  ? tcp_sendmsg_fastopen+0x1de/0x5d0
[  969.637571][T18364]  kmalloc_trace+0x2a/0xe0
[  969.642046][T18364]  tcp_sendmsg_fastopen+0x1de/0x5d0
[  969.647290][T18364]  tcp_sendmsg_locked+0x4610/0x4ba0
[  969.652534][T18364]  ? verify_lock_unused+0x140/0x140
[  969.657776][T18364]  ? verify_lock_unused+0x140/0x140
[  969.663028][T18364]  ? __might_sleep+0xe0/0xe0
[  969.667675][T18364]  ? mark_lock+0x94/0x320
[  969.672045][T18364]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  969.678076][T18364]  ? lock_chain_count+0x20/0x20
[  969.682994][T18364]  ? tcp_set_state+0x680/0x680
[  969.687828][T18364]  tcp_sendmsg+0x2f/0x50
[  969.692108][T18364]  ? inet_send_prepare+0x260/0x260
[  969.697259][T18364]  ____sys_sendmsg+0x5ba/0x960
[  969.702068][T18364]  ? __lock_acquire+0x7d40/0x7d40
[  969.707156][T18364]  ? __asan_memset+0x22/0x40
[  969.711798][T18364]  ? __sys_sendmsg_sock+0x30/0x30
[  969.716898][T18364]  ? __import_iovec+0x3fa/0x850
[  969.721820][T18364]  ? import_iovec+0x73/0xa0
[  969.726376][T18364]  ___sys_sendmsg+0x2a6/0x360
[  969.729774][T18370] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3817'.
[  969.731070][T18364]  ? get_pid_task+0x20/0x1e0
[  969.731146][T18364]  ? __sys_sendmsg+0x2a0/0x2a0
[  969.749854][T18364]  ? __lock_acquire+0x7d40/0x7d40
[  969.754965][T18364]  __se_sys_sendmsg+0x1c2/0x2b0
[  969.759853][T18364]  ? __x64_sys_sendmsg+0x80/0x80
[  969.764842][T18364]  ? lockdep_hardirqs_on+0x98/0x150
[  969.770080][T18364]  do_syscall_64+0x55/0xa0
[  969.774540][T18364]  ? clear_bhb_loop+0x40/0x90
[  969.779258][T18364]  ? clear_bhb_loop+0x40/0x90
[  969.783970][T18364]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  969.789895][T18364] RIP: 0033:0x7fb4f099aeb9
[  969.794439][T18364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  969.814091][T18364] RSP: 002b:00007fb4f18c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  969.822556][T18364] RAX: ffffffffffffffda RBX: 00007fb4f0c15fa0 RCX: 00007fb4f099aeb9
[  969.830572][T18364] RDX: 0000000030004081 RSI: 0000200000000080 RDI: 0000000000000003
[  969.838581][T18364] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[  969.846595][T18364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  969.854609][T18364] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[  969.862642][T18364]  </TASK>
[  970.776658][T18380] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3819'.
[  973.067542][T18367] validate_nla: 24 callbacks suppressed
[  973.067582][T18367] netlink: 'syz.1.3815': attribute type 4 has an invalid length.
[  973.166735][T18367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3815'.
[  973.266172][T18367] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  973.505453][T18391] netlink: 'syz.3.3824': attribute type 10 has an invalid length.
[  973.899966][T18404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3827'.
[  974.041597][T18384] netlink: 'syz.2.3821': attribute type 4 has an invalid length.
[  974.049541][T18384] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3821'.
[  974.058791][T18384] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  974.081810][T18404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3827'.
[  974.112480][T18405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3827'.
[  974.350996][T18409] netlink: 'syz.3.3828': attribute type 2 has an invalid length.
[  974.377420][T18409] netlink: 'syz.3.3828': attribute type 1 has an invalid length.
[  974.399445][T18409] netlink: 'syz.3.3828': attribute type 2 has an invalid length.
[  974.416913][T18409] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3828'.
[  974.455576][T18413] netlink: 'syz.1.3829': attribute type 21 has an invalid length.
[  974.505669][T18413] netlink: 'syz.1.3829': attribute type 1 has an invalid length.
[  974.581680][T18402] netlink: 'syz.0.3826': attribute type 4 has an invalid length.
[  974.659652][T18402] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3826'.
[  974.738140][T18420] netlink: 'syz.3.3831': attribute type 29 has an invalid length.
[  974.754169][T18402] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  976.876567][T18440] FAULT_INJECTION: forcing a failure.
[  976.876567][T18440] name failslab, interval 1, probability 0, space 0, times 0
[  976.905792][T18440] CPU: 1 PID: 18440 Comm: syz.0.3837 Not tainted syzkaller #0
[  976.913428][T18440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  976.923605][T18440] Call Trace:
[  976.926919][T18440]  <TASK>
[  976.929887][T18440]  dump_stack_lvl+0x18c/0x250
[  976.934608][T18440]  ? sctp_sendmsg+0x1575/0x28c0
[  976.939496][T18440]  ? ___sys_sendmsg+0x2a6/0x360
[  976.944465][T18440]  ? show_regs_print_info+0x20/0x20
[  976.949709][T18440]  ? load_image+0x400/0x400
[  976.954256][T18440]  should_fail_ex+0x39d/0x4d0
[  976.959079][T18440]  should_failslab+0x9/0x20
[  976.963619][T18440]  slab_pre_alloc_hook+0x59/0x310
[  976.968687][T18440]  ? sctp_add_bind_addr+0x8c/0x360
[  976.973840][T18440]  __kmem_cache_alloc_node+0x53/0x250
[  976.979259][T18440]  ? sctp_add_bind_addr+0x8c/0x360
[  976.984407][T18440]  kmalloc_trace+0x2a/0xe0
[  976.988865][T18440]  sctp_add_bind_addr+0x8c/0x360
[  976.993850][T18440]  sctp_copy_local_addr_list+0x315/0x4f0
[  976.999535][T18440]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  977.005295][T18440]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  977.011406][T18440]  ? sctp_v4_is_any+0x35/0x60
[  977.016123][T18440]  ? sctp_copy_one_addr+0x8c/0x350
[  977.021282][T18440]  sctp_bind_addr_copy+0xb3/0x3c0
[  977.026346][T18440]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  977.032709][T18440]  sctp_connect_new_asoc+0x2f9/0x6a0
[  977.038025][T18440]  ? __sctp_connect+0xd80/0xd80
[  977.043337][T18440]  ? __local_bh_enable_ip+0x13a/0x1c0
[  977.048743][T18440]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  977.054327][T18440]  ? security_sctp_bind_connect+0x89/0xb0
[  977.060091][T18440]  sctp_sendmsg+0x1575/0x28c0
[  977.064894][T18440]  ? sctp_getsockopt+0xb60/0xb60
[  977.069865][T18440]  ? aa_sk_perm+0x83c/0x970
[  977.074424][T18440]  ? aa_af_perm+0x330/0x330
[  977.079402][T18440]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  977.085855][T18440]  ? sock_rps_record_flow+0x19/0x3f0
[  977.091191][T18440]  ? inet_sendmsg+0xe9/0x2f0
[  977.095833][T18440]  ? inet_send_prepare+0x260/0x260
[  977.100987][T18440]  ____sys_sendmsg+0x5ba/0x960
[  977.105812][T18440]  ? __lock_acquire+0x7d40/0x7d40
[  977.110891][T18440]  ? __asan_memset+0x22/0x40
[  977.115520][T18440]  ? __sys_sendmsg_sock+0x30/0x30
[  977.120580][T18440]  ? __import_iovec+0x5f2/0x850
[  977.125495][T18440]  ? import_iovec+0x73/0xa0
[  977.130133][T18440]  ___sys_sendmsg+0x2a6/0x360
[  977.134834][T18440]  ? get_pid_task+0x20/0x1e0
[  977.139463][T18440]  ? __sys_sendmsg+0x2a0/0x2a0
[  977.144282][T18440]  ? __lock_acquire+0x7d40/0x7d40
[  977.149365][T18440]  __se_sys_sendmsg+0x1c2/0x2b0
[  977.154256][T18440]  ? __x64_sys_sendmsg+0x80/0x80
[  977.159253][T18440]  ? lockdep_hardirqs_on+0x98/0x150
[  977.164483][T18440]  do_syscall_64+0x55/0xa0
[  977.168937][T18440]  ? clear_bhb_loop+0x40/0x90
[  977.173641][T18440]  ? clear_bhb_loop+0x40/0x90
[  977.178352][T18440]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  977.184278][T18440] RIP: 0033:0x7f34d5d9aeb9
[  977.188734][T18440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.208376][T18440] RSP: 002b:00007f34d3ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  977.216842][T18440] RAX: ffffffffffffffda RBX: 00007f34d6015fa0 RCX: 00007f34d5d9aeb9
[  977.224855][T18440] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003
[  977.232909][T18440] RBP: 00007f34d3ff6090 R08: 0000000000000000 R09: 0000000000000000
[  977.240996][T18440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  977.249003][T18440] R13: 00007f34d6016038 R14: 00007f34d6015fa0 R15: 00007fffb6832688
[  977.257032][T18440]  </TASK>
[  977.560808][T18447] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3839'.
[  978.365336][T18450] validate_nla: 8 callbacks suppressed
[  978.365361][T18450] netlink: 'syz.2.3840': attribute type 10 has an invalid length.
[  978.384255][T18444] netlink: 'syz.0.3846': attribute type 4 has an invalid length.
[  978.416006][T18444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3846'.
[  978.446167][T18444] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  978.491941][T18461] netlink: 'syz.1.3841': attribute type 29 has an invalid length.
[  978.562370][T18461] netlink: 'syz.1.3841': attribute type 29 has an invalid length.
[  978.928704][T18452] netlink: 'syz.3.3838': attribute type 4 has an invalid length.
[  978.955748][T18452] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3838'.
[  979.035876][T18452] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  979.291245][T18468] netlink: 'syz.0.3843': attribute type 29 has an invalid length.
[  979.349602][T18468] netlink: 'syz.0.3843': attribute type 29 has an invalid length.
[  979.505639][T18472] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3844'.
[  979.579640][T18474] FAULT_INJECTION: forcing a failure.
[  979.579640][T18474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  979.607748][T18474] CPU: 1 PID: 18474 Comm: syz.0.3845 Not tainted syzkaller #0
[  979.615315][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  979.626090][T18474] Call Trace:
[  979.629484][T18474]  <TASK>
[  979.632447][T18474]  dump_stack_lvl+0x18c/0x250
[  979.637184][T18474]  ? show_regs_print_info+0x20/0x20
[  979.642395][T18474]  ? load_image+0x400/0x400
[  979.646916][T18474]  ? __might_fault+0xaa/0x120
[  979.651606][T18474]  ? __lock_acquire+0x7d40/0x7d40
[  979.656705][T18474]  should_fail_ex+0x39d/0x4d0
[  979.661471][T18474]  _copy_to_user+0x2f/0xa0
[  979.665972][T18474]  bpf_obj_get_info_by_fd+0x192e/0x3080
[  979.671584][T18474]  ? bpf_map_get_fd_by_id+0x310/0x310
[  979.676999][T18474]  ? perf_trace_lock+0xfc/0x3b0
[  979.681893][T18474]  ? trace_event_raw_event_lock+0x250/0x250
[  979.687884][T18474]  ? file_end_write+0x159/0x250
[  979.692773][T18474]  ? __might_fault+0xaa/0x120
[  979.697476][T18474]  ? __might_fault+0xc6/0x120
[  979.702176][T18474]  ? __might_fault+0xaa/0x120
[  979.706877][T18474]  ? bpf_lsm_bpf+0x9/0x10
[  979.711231][T18474]  ? security_bpf+0x7e/0xa0
[  979.715769][T18474]  __sys_bpf+0x7eb/0x890
[  979.720041][T18474]  ? bpf_link_show_fdinfo+0x390/0x390
[  979.725467][T18474]  ? lock_chain_count+0x20/0x20
[  979.730397][T18474]  __x64_sys_bpf+0x7c/0x90
[  979.734869][T18474]  do_syscall_64+0x55/0xa0
[  979.739322][T18474]  ? clear_bhb_loop+0x40/0x90
[  979.744024][T18474]  ? clear_bhb_loop+0x40/0x90
[  979.748727][T18474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  979.754644][T18474] RIP: 0033:0x7f34d5d9aeb9
[  979.759085][T18474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  979.778714][T18474] RSP: 002b:00007f34d3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  979.787159][T18474] RAX: ffffffffffffffda RBX: 00007f34d6015fa0 RCX: 00007f34d5d9aeb9
[  979.795183][T18474] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f
[  979.803212][T18474] RBP: 00007f34d3ff6090 R08: 0000000000000000 R09: 0000000000000000
[  979.811233][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  979.819228][T18474] R13: 00007f34d6016038 R14: 00007f34d6015fa0 R15: 00007fffb6832688
[  979.827252][T18474]  </TASK>
[  980.071142][T18476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.493064][T18485] netlink: 'syz.0.3850': attribute type 2 has an invalid length.
[  980.548929][T18485] netlink: 'syz.0.3850': attribute type 1 has an invalid length.
[  980.586380][T18485] netlink: 'syz.0.3850': attribute type 2 has an invalid length.
[  980.623413][T18485] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.3850'.
[  980.913062][T18490] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3852'.
[  981.018780][T18490] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  982.681013][T18515] FAULT_INJECTION: forcing a failure.
[  982.681013][T18515] name failslab, interval 1, probability 0, space 0, times 0
[  982.751171][T18515] CPU: 0 PID: 18515 Comm: syz.0.3859 Not tainted syzkaller #0
[  982.758711][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  982.768884][T18515] Call Trace:
[  982.772202][T18515]  <TASK>
[  982.775179][T18515]  dump_stack_lvl+0x18c/0x250
[  982.779923][T18515]  ? show_regs_print_info+0x20/0x20
[  982.785179][T18515]  ? load_image+0x400/0x400
[  982.789759][T18515]  ? _printk+0xe/0x130
[  982.793890][T18515]  should_fail_ex+0x39d/0x4d0
[  982.798635][T18515]  should_failslab+0x9/0x20
[  982.803181][T18515]  slab_pre_alloc_hook+0x59/0x310
[  982.808253][T18515]  ? sctp_add_bind_addr+0x8c/0x360
[  982.813412][T18515]  __kmem_cache_alloc_node+0x53/0x250
[  982.818830][T18515]  ? sctp_add_bind_addr+0x8c/0x360
[  982.823993][T18515]  kmalloc_trace+0x2a/0xe0
[  982.828464][T18515]  sctp_add_bind_addr+0x8c/0x360
[  982.833452][T18515]  sctp_copy_local_addr_list+0x315/0x4f0
[  982.839132][T18515]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  982.844897][T18515]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  982.851017][T18515]  ? sctp_v4_is_any+0x35/0x60
[  982.855733][T18515]  ? sctp_copy_one_addr+0x8c/0x350
[  982.860894][T18515]  sctp_bind_addr_copy+0xb3/0x3c0
[  982.865968][T18515]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  982.872350][T18515]  sctp_connect_new_asoc+0x2f9/0x6a0
[  982.877706][T18515]  ? __sctp_connect+0xd80/0xd80
[  982.882603][T18515]  ? security_sctp_bind_connect+0x3c/0xb0
[  982.888456][T18515]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  982.894057][T18515]  ? security_sctp_bind_connect+0x89/0xb0
[  982.899827][T18515]  sctp_sendmsg+0x1575/0x28c0
[  982.904566][T18515]  ? sctp_getsockopt+0xb60/0xb60
[  982.909551][T18515]  ? lock_chain_count+0x20/0x20
[  982.914463][T18515]  ? inet_send_prepare+0x260/0x260
[  982.919627][T18515]  ? sock_rps_record_flow+0x19/0x3f0
[  982.925159][T18515]  ? inet_sendmsg+0xe9/0x2f0
[  982.929801][T18515]  ? inet_send_prepare+0x260/0x260
[  982.934974][T18515]  ____sys_sendmsg+0x5ba/0x960
[  982.939792][T18515]  ? __lock_acquire+0x7d40/0x7d40
[  982.944876][T18515]  ? __asan_memset+0x22/0x40
[  982.949509][T18515]  ? __sys_sendmsg_sock+0x30/0x30
[  982.954570][T18515]  ? __import_iovec+0x5f2/0x850
[  982.959474][T18515]  ? import_iovec+0x73/0xa0
[  982.964023][T18515]  ___sys_sendmsg+0x2a6/0x360
[  982.968744][T18515]  ? __sys_sendmsg+0x2a0/0x2a0
[  982.973648][T18515]  __se_sys_sendmsg+0x1c2/0x2b0
[  982.978548][T18515]  ? __x64_sys_sendmsg+0x80/0x80
[  982.983718][T18515]  ? syscall_enter_from_user_mode+0x2e/0x80
[  982.989664][T18515]  do_syscall_64+0x55/0xa0
[  982.994118][T18515]  ? clear_bhb_loop+0x40/0x90
[  982.998830][T18515]  ? clear_bhb_loop+0x40/0x90
[  983.003551][T18515]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  983.009485][T18515] RIP: 0033:0x7f34d5d9aeb9
[  983.013943][T18515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  983.033695][T18515] RSP: 002b:00007f34d3ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  983.042168][T18515] RAX: ffffffffffffffda RBX: 00007f34d6015fa0 RCX: 00007f34d5d9aeb9
[  983.050179][T18515] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e
[  983.058183][T18515] RBP: 00007f34d3ff6090 R08: 0000000000000000 R09: 0000000000000000
[  983.066186][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  983.074199][T18515] R13: 00007f34d6016038 R14: 00007f34d6015fa0 R15: 00007fffb6832688
[  983.082221][T18515]  </TASK>
[  983.850070][T18505] validate_nla: 6 callbacks suppressed
[  983.850108][T18505] netlink: 'syz.1.3856': attribute type 4 has an invalid length.
[  983.977851][T18505] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3856'.
[  984.051157][T18505] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  984.096626][T18527] netlink: 'syz.2.3862': attribute type 2 has an invalid length.
[  984.175824][T18527] netlink: 'syz.2.3862': attribute type 1 has an invalid length.
[  984.184380][T18527] netlink: 'syz.2.3862': attribute type 2 has an invalid length.
[  984.238707][T18529] netlink: 'syz.3.3861': attribute type 10 has an invalid length.
[  984.266148][T18527] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3862'.
[  984.353923][T18534] netlink: 'syz.0.3863': attribute type 29 has an invalid length.
[  984.407698][T18534] netlink: 'syz.0.3863': attribute type 29 has an invalid length.
[  984.860650][T18543] netlink: 'syz.2.3866': attribute type 29 has an invalid length.
[  984.951851][T18543] netlink: 'syz.2.3866': attribute type 29 has an invalid length.
[  985.104691][T18545] netlink: 'syz.0.3865': attribute type 10 has an invalid length.
[  985.124425][T18537] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3864'.
[  985.141211][T18537] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  985.336328][T18555] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3870'.
[  985.347512][T18555] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  985.408189][T18555] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3870'.
[  987.191636][T18561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3871'.
[  987.261927][T18561] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  988.046985][T18593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3880'.
[  988.062991][T18593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3880'.
[  988.083237][T18593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3880'.
[  988.220222][T18598] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3881'.
[  988.229991][T18598] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  989.654971][T18611] validate_nla: 23 callbacks suppressed
[  989.654992][T18611] netlink: 'syz.0.3889': attribute type 10 has an invalid length.
[  989.808872][T18612] netlink: 'syz.2.3888': attribute type 4 has an invalid length.
[  989.828278][T18612] __nla_validate_parse: 1 callbacks suppressed
[  989.848831][T18612] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3888'.
[  989.877615][T18612] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  990.626475][T18631] netlink: 'syz.3.3895': attribute type 2 has an invalid length.
[  990.668481][T18631] netlink: 'syz.3.3895': attribute type 1 has an invalid length.
[  990.699893][T18631] netlink: 'syz.3.3895': attribute type 2 has an invalid length.
[  990.710569][T18631] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3895'.
[  991.013589][T18628] netlink: 'syz.0.3894': attribute type 10 has an invalid length.
[  991.126491][T18640] netlink: 'syz.3.3896': attribute type 21 has an invalid length.
[  991.135577][T18640] netlink: 'syz.3.3896': attribute type 1 has an invalid length.
[  991.236248][T18642] netlink: 'syz.0.3897': attribute type 29 has an invalid length.
[  991.236304][T18639] netlink: 'syz.2.3904': attribute type 2 has an invalid length.
[  991.288143][T18639] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3904'.
[  991.622611][T18629] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3892'.
[  991.646157][T18629] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  992.865971][T13214] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  993.071294][T18648] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3899'.
[  993.159653][T18648] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  993.885678][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  993.894049][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  994.377118][T18661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3910'.
[  994.402368][T18661] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  995.397776][T18681] validate_nla: 7 callbacks suppressed
[  995.397799][T18681] netlink: 'syz.0.3907': attribute type 29 has an invalid length.
[  996.676640][T18688] netlink: 'syz.3.3909': attribute type 2 has an invalid length.
[  996.691542][T18688] netlink: 'syz.3.3909': attribute type 1 has an invalid length.
[  996.702234][T18688] netlink: 'syz.3.3909': attribute type 2 has an invalid length.
[  996.718663][T18688] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3909'.
[  996.869740][T18678] netlink: 'syz.2.3906': attribute type 10 has an invalid length.
[  996.881783][T18681] netlink: 'syz.0.3907': attribute type 29 has an invalid length.
[  997.056226][T18682] netlink: 'syz.1.3905': attribute type 4 has an invalid length.
[  997.064037][T18682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3905'.
[  997.074264][T18682] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  997.681031][T18708] netlink: 'syz.0.3917': attribute type 2 has an invalid length.
[  997.693632][T18708] netlink: 'syz.0.3917': attribute type 8 has an invalid length.
[  997.704097][T18708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3917'.
[  997.720397][T18707] netlink: 'syz.1.3916': attribute type 21 has an invalid length.
[  997.733121][T18708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3917'.
[  998.013705][T18721] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.3921'.
[  998.382674][T18731] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.3927'.
[  998.497274][T18740] FAULT_INJECTION: forcing a failure.
[  998.497274][T18740] name failslab, interval 1, probability 0, space 0, times 0
[  998.564308][T18740] CPU: 0 PID: 18740 Comm: syz.0.3928 Not tainted syzkaller #0
[  998.571866][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  998.582063][T18740] Call Trace:
[  998.585472][T18740]  <TASK>
[  998.588464][T18740]  dump_stack_lvl+0x18c/0x250
[  998.593185][T18740]  ? verify_lock_unused+0x140/0x140
[  998.598429][T18740]  ? show_regs_print_info+0x20/0x20
[  998.603769][T18740]  ? load_image+0x400/0x400
[  998.608316][T18740]  ? perf_trace_lock+0xfc/0x3b0
[  998.613209][T18740]  should_fail_ex+0x39d/0x4d0
[  998.617926][T18740]  should_failslab+0x9/0x20
[  998.622452][T18740]  slab_pre_alloc_hook+0x59/0x310
[  998.627511][T18740]  kmem_cache_alloc_node+0x60/0x320
[  998.632736][T18740]  ? __alloc_skb+0x103/0x2c0
[  998.637613][T18740]  __alloc_skb+0x103/0x2c0
[  998.642057][T18740]  tipc_msg_reverse+0x21c/0x8f0
[  998.646970][T18740]  tipc_sk_rcv+0x2859/0x2af0
[  998.651605][T18740]  ? __tipc_sendstream+0x1039/0x1270
[  998.656911][T18740]  ? __se_sys_sendmsg+0x1c2/0x2b0
[  998.662045][T18740]  ? verify_lock_unused+0x140/0x140
[  998.667270][T18740]  ? perf_trace_lock+0xfc/0x3b0
[  998.672177][T18740]  ? trace_event_raw_event_lock+0x250/0x250
[  998.678140][T18740]  ? __skb_queue_purge+0x170/0x170
[  998.683282][T18740]  ? __asan_memset+0x22/0x40
[  998.687894][T18740]  ? lockdep_init_map_type+0x9c/0x8e0
[  998.693297][T18740]  ? net_generic+0x1e/0x240
[  998.697821][T18740]  ? __raw_spin_lock_init+0x45/0x100
[  998.703129][T18740]  tipc_node_xmit+0x223/0xfe0
[  998.707832][T18740]  ? __check_object_size+0x97/0xa20
[  998.713053][T18740]  ? __copy_skb_header+0xa3/0x4a0
[  998.718095][T18740]  ? tipc_node_get_linkname+0x1a0/0x1a0
[  998.723662][T18740]  ? __asan_memcpy+0x40/0x70
[  998.728271][T18740]  ? __skb_clone+0x63/0x790
[  998.732793][T18740]  ? __skb_clone+0x480/0x790
[  998.737533][T18740]  ? tipc_sk_filtering+0x13c/0x510
[  998.742691][T18740]  __tipc_sendmsg+0x1e6e/0x2bb0
[  998.747598][T18740]  ? rht_unlock+0x1d0/0x1d0
[  998.752122][T18740]  ? mark_lock+0x94/0x320
[  998.756499][T18740]  ? __lock_acquire+0x1273/0x7d40
[  998.761755][T18740]  ? look_up_lock_class+0x75/0x140
[  998.766895][T18740]  ? register_lock_class+0xc4/0x8a0
[  998.772110][T18740]  ? register_lock_class+0xc4/0x8a0
[  998.777332][T18740]  ? is_dynamic_key+0x260/0x260
[  998.782205][T18740]  ? mark_lock+0x94/0x320
[  998.786557][T18740]  ? __lock_acquire+0x1347/0x7d40
[  998.791627][T18740]  ? wait_woken+0x180/0x180
[  998.796160][T18740]  ? verify_lock_unused+0x140/0x140
[  998.801410][T18740]  ? verify_lock_unused+0x140/0x140
[  998.806648][T18740]  __tipc_sendstream+0x1039/0x1270
[  998.811805][T18740]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  998.817809][T18740]  ? lock_chain_count+0x20/0x20
[  998.822682][T18740]  ? tsk_advance_rx_queue+0x310/0x310
[  998.828068][T18740]  ? __local_bh_enable_ip+0x13a/0x1c0
[  998.833457][T18740]  ? _local_bh_enable+0xa0/0xa0
[  998.838339][T18740]  tipc_send_packet+0x7c/0x90
[  998.843035][T18740]  ? tipc_sk_send_ack+0x580/0x580
[  998.848079][T18740]  ____sys_sendmsg+0x5ba/0x960
[  998.852869][T18740]  ? __lock_acquire+0x7d40/0x7d40
[  998.857922][T18740]  ? __asan_memset+0x22/0x40
[  998.862535][T18740]  ? __sys_sendmsg_sock+0x30/0x30
[  998.867583][T18740]  ? __import_iovec+0x3fa/0x850
[  998.872467][T18740]  ? import_iovec+0x73/0xa0
[  998.877011][T18740]  ___sys_sendmsg+0x2a6/0x360
[  998.881722][T18740]  ? __sys_sendmsg+0x2a0/0x2a0
[  998.886531][T18740]  ? __lock_acquire+0x7d40/0x7d40
[  998.891601][T18740]  __se_sys_sendmsg+0x1c2/0x2b0
[  998.896477][T18740]  ? __x64_sys_sendmsg+0x80/0x80
[  998.901453][T18740]  ? lockdep_hardirqs_on+0x98/0x150
[  998.906678][T18740]  do_syscall_64+0x55/0xa0
[  998.911111][T18740]  ? clear_bhb_loop+0x40/0x90
[  998.915805][T18740]  ? clear_bhb_loop+0x40/0x90
[  998.920518][T18740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  998.926426][T18740] RIP: 0033:0x7f34d5d9aeb9
[  998.930861][T18740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  998.950485][T18740] RSP: 002b:00007f34d3fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  998.959043][T18740] RAX: ffffffffffffffda RBX: 00007f34d6016090 RCX: 00007f34d5d9aeb9
[  998.967034][T18740] RDX: 0000000020008044 RSI: 0000200000000100 RDI: 0000000000000007
[  998.975192][T18740] RBP: 00007f34d3fd5090 R08: 0000000000000000 R09: 0000000000000000
[  998.983177][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  998.991164][T18740] R13: 00007f34d6016128 R14: 00007f34d6016090 R15: 00007fffb6832688
[  998.999448][T18740]  </TASK>
[  999.149773][T18742] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3929'.
[  999.815995][T18755] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3933'.
[ 1001.075496][T18780] validate_nla: 21 callbacks suppressed
[ 1001.075519][T18780] netlink: 'syz.1.3941': attribute type 10 has an invalid length.
[ 1001.200954][T18783] netlink: 'syz.0.3942': attribute type 21 has an invalid length.
[ 1001.230184][T18783] netlink: 'syz.0.3942': attribute type 1 has an invalid length.
[ 1001.878048][T18791] netlink: 'syz.0.3944': attribute type 29 has an invalid length.
[ 1001.916373][T18791] netlink: 'syz.0.3944': attribute type 29 has an invalid length.
[ 1004.124899][T18796] netlink: 'syz.3.3946': attribute type 30 has an invalid length.
[ 1004.191631][T18794] netlink: 'syz.2.3945': attribute type 2 has an invalid length.
[ 1004.215014][T18794] netlink: 'syz.2.3945': attribute type 1 has an invalid length.
[ 1004.224243][T18794] netlink: 'syz.2.3945': attribute type 2 has an invalid length.
[ 1004.235088][T18794] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3945'.
[ 1004.285659][T18799] netlink: 'syz.0.3947': attribute type 29 has an invalid length.
[ 1004.627141][T18809] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3950'.
[ 1004.786290][T18810] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3950'.
[ 1004.873868][T18810] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô'
[ 1004.892024][T18810] CPU: 0 PID: 18810 Comm: syz.0.3950 Not tainted syzkaller #0
[ 1004.899590][T18810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1004.909723][T18810] Call Trace:
[ 1004.913054][T18810]  <TASK>
[ 1004.916023][T18810]  dump_stack_lvl+0x18c/0x250
[ 1004.920774][T18810]  ? show_regs_print_info+0x20/0x20
[ 1004.926031][T18810]  ? load_image+0x400/0x400
[ 1004.930595][T18810]  sysfs_warn_dup+0x8e/0xa0
[ 1004.935221][T18810]  sysfs_do_create_link_sd+0xc0/0x110
[ 1004.940717][T18810]  device_add_class_symlinks+0x1cf/0x240
[ 1004.946403][T18810]  device_add+0x507/0xc20
[ 1004.950785][T18810]  wiphy_register+0x1dad/0x2ae0
[ 1004.955727][T18810]  ? cfg80211_event_work+0x40/0x40
[ 1004.960871][T18810]  ? minstrel_ht_alloc+0x88a/0x990
[ 1004.966032][T18810]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1004.972230][T18810]  ieee80211_register_hw+0x3464/0x4250
[ 1004.977772][T18810]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1004.983444][T18810]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1004.989401][T18810]  ? __debug_object_init+0xec/0x450
[ 1004.994645][T18810]  ? __asan_memset+0x22/0x40
[ 1004.999272][T18810]  ? __hrtimer_init+0x186/0x270
[ 1005.004168][T18810]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1005.010079][T18810]  ? mac80211_hwsim_free+0x220/0x220
[ 1005.015431][T18810]  ? rcu_is_watching+0x15/0xb0
[ 1005.020360][T18810]  ? kstrndup+0xbd/0x140
[ 1005.024658][T18810]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1005.029824][T18810]  ? __nla_validate+0x50/0x50
[ 1005.034558][T18810]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1005.040948][T18810]  ? __nla_parse+0x40/0x50
[ 1005.045415][T18810]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1005.051799][T18810]  genl_family_rcv_msg_doit+0x211/0x310
[ 1005.057388][T18810]  ? end_current_label_crit_section+0x170/0x170
[ 1005.063932][T18810]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1005.069881][T18810]  ? bpf_lsm_capable+0x9/0x10
[ 1005.074607][T18810]  ? security_capable+0x89/0xb0
[ 1005.079514][T18810]  genl_rcv_msg+0x619/0x7a0
[ 1005.084067][T18810]  ? genl_bind+0x360/0x360
[ 1005.088785][T18810]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1005.095156][T18810]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1005.101785][T18810]  ? ref_tracker_free+0x690/0x840
[ 1005.106954][T18810]  netlink_rcv_skb+0x241/0x4d0
[ 1005.111766][T18810]  ? genl_bind+0x360/0x360
[ 1005.116225][T18810]  ? netlink_ack+0x1180/0x1180
[ 1005.121045][T18810]  ? __lock_acquire+0x7d40/0x7d40
[ 1005.126116][T18810]  ? down_read+0x1ac/0x2e0
[ 1005.130578][T18810]  genl_rcv+0x28/0x40
[ 1005.134599][T18810]  netlink_unicast+0x751/0x8d0
[ 1005.139415][T18810]  netlink_sendmsg+0x8d0/0xbf0
[ 1005.144243][T18810]  ? netlink_getsockopt+0x590/0x590
[ 1005.149662][T18810]  ? aa_sock_msg_perm+0x94/0x150
[ 1005.154642][T18810]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1005.160000][T18810]  ? security_socket_sendmsg+0x80/0xa0
[ 1005.165493][T18810]  ? netlink_getsockopt+0x590/0x590
[ 1005.170737][T18810]  ____sys_sendmsg+0x5ba/0x960
[ 1005.175558][T18810]  ? __asan_memset+0x22/0x40
[ 1005.180534][T18810]  ? __sys_sendmsg_sock+0x30/0x30
[ 1005.185591][T18810]  ? __import_iovec+0x5f2/0x850
[ 1005.190503][T18810]  ? import_iovec+0x73/0xa0
[ 1005.195050][T18810]  ___sys_sendmsg+0x2a6/0x360
[ 1005.199764][T18810]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1005.204628][T18810]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1005.209516][T18810]  ? __x64_sys_sendmsg+0x80/0x80
[ 1005.214510][T18810]  ? lockdep_hardirqs_on+0x98/0x150
[ 1005.219746][T18810]  do_syscall_64+0x55/0xa0
[ 1005.224197][T18810]  ? clear_bhb_loop+0x40/0x90
[ 1005.228908][T18810]  ? clear_bhb_loop+0x40/0x90
[ 1005.233624][T18810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1005.239544][T18810] RIP: 0033:0x7f34d5d9aeb9
[ 1005.243990][T18810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1005.263630][T18810] RSP: 002b:00007f34d3fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1005.272167][T18810] RAX: ffffffffffffffda RBX: 00007f34d6016180 RCX: 00007f34d5d9aeb9
[ 1005.280173][T18810] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000013
[ 1005.288174][T18810] RBP: 00007f34d5e08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1005.296173][T18810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1005.304174][T18810] R13: 00007f34d6016218 R14: 00007f34d6016180 R15: 00007fffb6832688
[ 1005.312198][T18810]  </TASK>
[ 1006.247436][T18836] validate_nla: 6 callbacks suppressed
[ 1006.247476][T18836] netlink: 'syz.2.3958': attribute type 2 has an invalid length.
[ 1006.267966][T18836] netlink: 'syz.2.3958': attribute type 1 has an invalid length.
[ 1006.279439][T18836] netlink: 'syz.2.3958': attribute type 2 has an invalid length.
[ 1006.291000][T18836] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3958'.
[ 1008.282237][T18826] netlink: 'syz.1.3955': attribute type 29 has an invalid length.
[ 1008.433807][T18840] netlink: 'syz.1.3959': attribute type 29 has an invalid length.
[ 1008.442275][T18840] netlink: 'syz.1.3959': attribute type 29 has an invalid length.
[ 1008.618468][T18848] netlink: 'syz.0.3962': attribute type 10 has an invalid length.
[ 1008.703957][T18852] netlink: 'syz.1.3964': attribute type 21 has an invalid length.
[ 1008.725932][T18852] netlink: 'syz.1.3964': attribute type 1 has an invalid length.
[ 1009.295172][T18862] netlink: 'syz.0.3967': attribute type 10 has an invalid length.
[ 1010.747617][T18879] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3975'.
[ 1010.761095][T18879] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.3975'.
[ 1012.470135][T18880] validate_nla: 4 callbacks suppressed
[ 1012.470157][T18880] netlink: 'syz.2.3974': attribute type 10 has an invalid length.
[ 1012.484353][T18884] netlink: 'syz.3.3976': attribute type 21 has an invalid length.
[ 1012.498961][T18884] netlink: 'syz.3.3976': attribute type 1 has an invalid length.
[ 1012.624544][T18892] netlink: 'syz.3.3977': attribute type 10 has an invalid length.
[ 1013.636151][T18912] netlink: 'syz.1.3984': attribute type 29 has an invalid length.
[ 1013.646574][T18912] netlink: 'syz.1.3984': attribute type 29 has an invalid length.
[ 1013.659310][T18910] netlink: 'syz.2.3983': attribute type 29 has an invalid length.
[ 1013.687599][T18910] netlink: 'syz.2.3983': attribute type 29 has an invalid length.
[ 1013.796049][T18915] netlink: 'syz.3.3985': attribute type 21 has an invalid length.
[ 1013.805965][T18915] netlink: 'syz.3.3985': attribute type 1 has an invalid length.
[ 1015.204862][T18933] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3990'.
[ 1015.338783][T13214] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[ 1015.461325][T18940] FAULT_INJECTION: forcing a failure.
[ 1015.461325][T18940] name failslab, interval 1, probability 0, space 0, times 0
[ 1015.486169][T18940] CPU: 0 PID: 18940 Comm: syz.1.3992 Not tainted syzkaller #0
[ 1015.493786][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1015.503896][T18940] Call Trace:
[ 1015.507238][T18940]  <TASK>
[ 1015.510217][T18940]  dump_stack_lvl+0x18c/0x250
[ 1015.514956][T18940]  ? show_regs_print_info+0x20/0x20
[ 1015.520215][T18940]  ? load_image+0x400/0x400
[ 1015.524790][T18940]  ? __might_sleep+0xe0/0xe0
[ 1015.529428][T18940]  ? __lock_acquire+0x7d40/0x7d40
[ 1015.534567][T18940]  should_fail_ex+0x39d/0x4d0
[ 1015.539310][T18940]  should_failslab+0x9/0x20
[ 1015.543863][T18940]  slab_pre_alloc_hook+0x59/0x310
[ 1015.548945][T18940]  ? __lock_acquire+0x7d40/0x7d40
[ 1015.554022][T18940]  kmem_cache_alloc_node+0x60/0x320
[ 1015.559282][T18940]  ? __alloc_skb+0x103/0x2c0
[ 1015.563938][T18940]  __alloc_skb+0x103/0x2c0
[ 1015.568414][T18940]  netlink_sendmsg+0x66a/0xbf0
[ 1015.573243][T18940]  ? netlink_getsockopt+0x590/0x590
[ 1015.578512][T18940]  ? aa_sock_msg_perm+0x94/0x150
[ 1015.583523][T18940]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1015.588863][T18940]  ? security_socket_sendmsg+0x80/0xa0
[ 1015.594368][T18940]  ? netlink_getsockopt+0x590/0x590
[ 1015.599648][T18940]  ____sys_sendmsg+0x5ba/0x960
[ 1015.604483][T18940]  ? __asan_memset+0x22/0x40
[ 1015.609123][T18940]  ? __sys_sendmsg_sock+0x30/0x30
[ 1015.610357][T18943] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.3993'.
[ 1015.614181][T18940]  ? __import_iovec+0x5f2/0x850
[ 1015.614226][T18940]  ? import_iovec+0x73/0xa0
[ 1015.614258][T18940]  ___sys_sendmsg+0x2a6/0x360
[ 1015.614277][T18940]  ? get_pid_task+0x20/0x1e0
[ 1015.614308][T18940]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1015.614349][T18940]  ? __lock_acquire+0x7d40/0x7d40
[ 1015.652707][T18940]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1015.657619][T18940]  ? __x64_sys_sendmsg+0x80/0x80
[ 1015.657661][T18940]  ? lockdep_hardirqs_on+0x98/0x150
[ 1015.657689][T18940]  do_syscall_64+0x55/0xa0
[ 1015.657714][T18940]  ? clear_bhb_loop+0x40/0x90
[ 1015.657735][T18940]  ? clear_bhb_loop+0x40/0x90
[ 1015.657759][T18940]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1015.657781][T18940] RIP: 0033:0x7f4d6259aeb9
[ 1015.657802][T18940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1015.711819][T18940] RSP: 002b:00007f4d633df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1015.720306][T18940] RAX: ffffffffffffffda RBX: 00007f4d62815fa0 RCX: 00007f4d6259aeb9
[ 1015.728327][T18940] RDX: 0000000000000300 RSI: 0000200000000600 RDI: 0000000000000003
[ 1015.736347][T18940] RBP: 00007f4d633df090 R08: 0000000000000000 R09: 0000000000000000
[ 1015.744451][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1015.752475][T18940] R13: 00007f4d62816038 R14: 00007f4d62815fa0 R15: 00007ffdca533228
[ 1015.760510][T18940]  </TASK>
[ 1016.093860][T18951] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4002'.
[ 1016.109407][T18951] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1017.133569][T18969] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.4003'.
[ 1017.914995][T18985] validate_nla: 14 callbacks suppressed
[ 1017.915019][T18985] netlink: 'syz.2.4010': attribute type 21 has an invalid length.
[ 1017.976255][T18985] netlink: 'syz.2.4010': attribute type 1 has an invalid length.
[ 1018.335110][T18992] netlink: 'syz.0.4012': attribute type 21 has an invalid length.
[ 1018.345492][T18992] netlink: 'syz.0.4012': attribute type 4 has an invalid length.
[ 1018.627435][T18995] netlink: 'syz.0.4013': attribute type 21 has an invalid length.
[ 1018.646221][T18995] netlink: 'syz.0.4013': attribute type 1 has an invalid length.
[ 1018.783087][T18996] netlink: 'syz.1.4009': attribute type 4 has an invalid length.
[ 1018.835881][T18996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4009'.
[ 1018.845046][T18996] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1019.622401][T19002] netlink: 'syz.2.4014': attribute type 10 has an invalid length.
[ 1019.807169][T19008] netlink: 'syz.0.4016': attribute type 2 has an invalid length.
[ 1019.826359][T19008] netlink: 'syz.0.4016': attribute type 1 has an invalid length.
[ 1019.853478][T19008] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.4016'.
[ 1019.889793][T19015] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4019'.
[ 1020.845135][T19032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4025'.
[ 1020.854463][T19032] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1021.360542][T19045] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.4030'.
[ 1021.477757][T19049] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.4032'.
[ 1021.784782][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4034'.
[ 1021.916992][T19058] bridge0: port 3(ipvlan1) entered blocking state
[ 1021.938153][T19058] bridge0: port 3(ipvlan1) entered disabled state
[ 1022.002799][T19058] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1022.194574][T19068] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.4038'.
[ 1022.863680][T19079] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4041'.
[ 1022.873389][T19079] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1022.952928][T19081] validate_nla: 23 callbacks suppressed
[ 1022.952969][T19081] netlink: 'syz.3.4042': attribute type 2 has an invalid length.
[ 1022.968214][T19081] netlink: 'syz.3.4042': attribute type 1 has an invalid length.
[ 1022.978652][T19081] netlink: 'syz.3.4042': attribute type 2 has an invalid length.
[ 1022.988521][T19081] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.4042'.
[ 1023.004341][T19084] netlink: 'syz.2.4043': attribute type 21 has an invalid length.
[ 1023.012784][T19084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4043'.
[ 1023.049377][T19083] netlink: 'syz.2.4043': attribute type 1 has an invalid length.
[ 1023.065876][T19083] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4043'.
[ 1023.221695][T19089] netlink: 'syz.3.4045': attribute type 13 has an invalid length.
[ 1023.232831][T19089] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4045'.
[ 1023.327383][T19089] erspan0: refused to change device tx_queue_len
[ 1023.334998][T19089] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1023.365151][T19092] netlink: 'syz.2.4047': attribute type 10 has an invalid length.
[ 1023.379702][T19092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4047'.
[ 1023.391935][T19092] bridge0: port 3(ipvlan1) entered blocking state
[ 1023.398858][T19092] bridge0: port 3(ipvlan1) entered disabled state
[ 1023.405593][T19092] ipvlan1: entered allmulticast mode
[ 1023.424832][T19092] ipvlan1: left allmulticast mode
[ 1023.436294][T19092] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1023.507630][T19099] syzkaller0: refused to change device tx_queue_len
[ 1023.596412][T19102] netlink: 'syz.3.4049': attribute type 21 has an invalid length.
[ 1023.604459][T19102] netlink: 'syz.3.4049': attribute type 1 has an invalid length.
[ 1023.908704][T19104] netlink: 'syz.2.4050': attribute type 2 has an invalid length.
[ 1024.595053][T19117] ipvlan1: entered promiscuous mode
[ 1024.647571][T19117] ipvlan1: entered allmulticast mode
[ 1024.660015][T19117] bridge0: port 3(ipvlan1) entered blocking state
[ 1024.673720][T19117] bridge0: port 3(ipvlan1) entered disabled state
[ 1024.684303][T19117] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1024.863539][T19130] FAULT_INJECTION: forcing a failure.
[ 1024.863539][T19130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1024.877061][T19130] CPU: 1 PID: 19130 Comm: syz.2.4058 Not tainted syzkaller #0
[ 1024.884574][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1024.894680][T19130] Call Trace:
[ 1024.898096][T19130]  <TASK>
[ 1024.901062][T19130]  dump_stack_lvl+0x18c/0x250
[ 1024.905808][T19130]  ? show_regs_print_info+0x20/0x20
[ 1024.911072][T19130]  ? load_image+0x400/0x400
[ 1024.915751][T19130]  ? __might_fault+0xaa/0x120
[ 1024.920509][T19130]  ? __lock_acquire+0x7d40/0x7d40
[ 1024.925602][T19130]  should_fail_ex+0x39d/0x4d0
[ 1024.930336][T19130]  _copy_from_iter+0x1d9/0x12e0
[ 1024.935214][T19130]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1024.940519][T19130]  ? __virt_addr_valid+0x18c/0x540
[ 1024.945738][T19130]  ? __lock_acquire+0x7d40/0x7d40
[ 1024.950861][T19130]  ? rcu_is_watching+0x15/0xb0
[ 1024.955669][T19130]  ? copyout_mc+0x70/0x70
[ 1024.960021][T19130]  ? __virt_addr_valid+0x18c/0x540
[ 1024.965153][T19130]  ? __virt_addr_valid+0x18c/0x540
[ 1024.970287][T19130]  ? __virt_addr_valid+0x469/0x540
[ 1024.975525][T19130]  ? __check_object_size+0x506/0xa20
[ 1024.980834][T19130]  netlink_sendmsg+0x76b/0xbf0
[ 1024.985625][T19130]  ? netlink_getsockopt+0x590/0x590
[ 1024.990855][T19130]  ? aa_sock_msg_perm+0x94/0x150
[ 1024.995815][T19130]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1025.001898][T19130]  ? security_socket_sendmsg+0x80/0xa0
[ 1025.007372][T19130]  ? netlink_getsockopt+0x590/0x590
[ 1025.012593][T19130]  ____sys_sendmsg+0x5ba/0x960
[ 1025.017389][T19130]  ? __asan_memset+0x22/0x40
[ 1025.021998][T19130]  ? __sys_sendmsg_sock+0x30/0x30
[ 1025.027042][T19130]  ? __import_iovec+0x5f2/0x850
[ 1025.031919][T19130]  ? import_iovec+0x73/0xa0
[ 1025.036469][T19130]  ___sys_sendmsg+0x2a6/0x360
[ 1025.041157][T19130]  ? get_pid_task+0x20/0x1e0
[ 1025.045775][T19130]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1025.050571][T19130]  ? __lock_acquire+0x7d40/0x7d40
[ 1025.055657][T19130]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1025.061051][T19130]  ? __x64_sys_sendmsg+0x80/0x80
[ 1025.066022][T19130]  ? lockdep_hardirqs_on+0x98/0x150
[ 1025.071240][T19130]  do_syscall_64+0x55/0xa0
[ 1025.075678][T19130]  ? clear_bhb_loop+0x40/0x90
[ 1025.080387][T19130]  ? clear_bhb_loop+0x40/0x90
[ 1025.085084][T19130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1025.090996][T19130] RIP: 0033:0x7fb4f099aeb9
[ 1025.095432][T19130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.115116][T19130] RSP: 002b:00007fb4f18c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1025.123549][T19130] RAX: ffffffffffffffda RBX: 00007fb4f0c15fa0 RCX: 00007fb4f099aeb9
[ 1025.131595][T19130] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1025.139586][T19130] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.147574][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.155559][T19130] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[ 1025.163607][T19130]  </TASK>
[ 1027.156309][T19177] __nla_validate_parse: 7 callbacks suppressed
[ 1027.156334][T19177] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.4071'.
[ 1027.185447][T19177] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4071'.
[ 1027.405282][T19179] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4072'.
[ 1027.574879][T19179] erspan0: refused to change device tx_queue_len
[ 1027.595197][T19179] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1027.920918][T19193] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4075'.
[ 1028.321179][T19196] validate_nla: 20 callbacks suppressed
[ 1028.321216][T19196] netlink: 'syz.3.4077': attribute type 2 has an invalid length.
[ 1028.339095][T19196] netlink: 'syz.3.4077': attribute type 1 has an invalid length.
[ 1028.389032][T19196] netlink: 'syz.3.4077': attribute type 2 has an invalid length.
[ 1028.417179][T19196] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.4077'.
[ 1030.767759][T19194] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[ 1031.988392][T19221] sit0: entered allmulticast mode
[ 1032.048526][T19221] netlink: 'syz.3.4084': attribute type 21 has an invalid length.
[ 1032.281238][T19227] netlink: 'syz.1.4087': attribute type 2 has an invalid length.
[ 1032.294819][T19227] netlink: 'syz.1.4087': attribute type 1 has an invalid length.
[ 1032.305585][T19227] netlink: 'syz.1.4087': attribute type 2 has an invalid length.
[ 1032.314053][T19231] netlink: 'syz.0.4089': attribute type 29 has an invalid length.
[ 1032.317795][T19231] netlink: 'syz.0.4089': attribute type 29 has an invalid length.
[ 1032.344094][T19227] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.4087'.
[ 1032.818212][T19242] FAULT_INJECTION: forcing a failure.
[ 1032.818212][T19242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1032.856028][T19242] CPU: 0 PID: 19242 Comm: syz.2.4094 Not tainted syzkaller #0
[ 1032.863573][T19242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1032.873677][T19242] Call Trace:
[ 1032.877003][T19242]  <TASK>
[ 1032.879971][T19242]  dump_stack_lvl+0x18c/0x250
[ 1032.884710][T19242]  ? show_regs_print_info+0x20/0x20
[ 1032.889966][T19242]  ? load_image+0x400/0x400
[ 1032.894525][T19242]  ? __might_fault+0xaa/0x120
[ 1032.899417][T19242]  ? __lock_acquire+0x7d40/0x7d40
[ 1032.904486][T19242]  should_fail_ex+0x39d/0x4d0
[ 1032.909218][T19242]  _copy_from_iter+0x1d9/0x12e0
[ 1032.914114][T19242]  ? __virt_addr_valid+0x18c/0x540
[ 1032.919371][T19242]  ? __lock_acquire+0x7d40/0x7d40
[ 1032.924442][T19242]  ? __alloc_skb+0x138/0x2c0
[ 1032.929097][T19242]  ? copyout_mc+0x70/0x70
[ 1032.933476][T19242]  ? __virt_addr_valid+0x18c/0x540
[ 1032.938640][T19242]  ? __virt_addr_valid+0x18c/0x540
[ 1032.943811][T19242]  ? __virt_addr_valid+0x469/0x540
[ 1032.948967][T19242]  ? __phys_addr_symbol+0x2f/0x70
[ 1032.954042][T19242]  ? __check_object_size+0x506/0xa20
[ 1032.959394][T19242]  udplite_getfrag+0x4d/0xa0
[ 1032.964031][T19242]  __ip6_append_data+0x2f1b/0x3c50
[ 1032.969237][T19242]  ? udpv6_sendmsg+0x2390/0x2390
[ 1032.974227][T19242]  ? mark_lock+0x94/0x320
[ 1032.978703][T19242]  ? ip6_setup_cork+0xfe0/0xfe0
[ 1032.983616][T19242]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1032.989055][T19242]  ip6_append_data+0x1b0/0x350
[ 1032.989720][T19250] FAULT_INJECTION: forcing a failure.
[ 1032.989720][T19250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1032.993860][T19242]  ? udpv6_sendmsg+0x2390/0x2390
[ 1033.012250][T19242]  udpv6_sendmsg+0xc37/0x2390
[ 1033.016999][T19242]  ? udpv6_sendmsg+0x2390/0x2390
[ 1033.021986][T19242]  ? udp_v6_early_demux+0xf80/0xf80
[ 1033.027230][T19242]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1033.033262][T19242]  ? inet_send_prepare+0x5c/0x260
[ 1033.038414][T19242]  ? inet6_sendmsg+0x5f/0xd0
[ 1033.043146][T19242]  sock_write_iter+0x2df/0x420
[ 1033.047968][T19242]  ? sock_read_iter+0x3e0/0x3e0
[ 1033.052960][T19242]  ? common_file_perm+0x198/0x1f0
[ 1033.058110][T19242]  vfs_write+0x46c/0x990
[ 1033.062397][T19242]  ? file_end_write+0x250/0x250
[ 1033.067292][T19242]  ? __fget_files+0x43d/0x4b0
[ 1033.072041][T19242]  ? __fdget_pos+0x1d8/0x330
[ 1033.076683][T19242]  ? ksys_write+0x75/0x260
[ 1033.081156][T19242]  ksys_write+0x150/0x260
[ 1033.085625][T19242]  ? __ia32_sys_read+0x90/0x90
[ 1033.090457][T19242]  ? lockdep_hardirqs_on+0x98/0x150
[ 1033.090528][    C1] 
[ 1033.090534][    C1] ================================
[ 1033.090540][    C1] WARNING: inconsistent lock state
[ 1033.090545][    C1] syzkaller #0 Not tainted
[ 1033.090554][    C1] --------------------------------
[ 1033.090558][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1033.090566][    C1] syz.3.4097/19251 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1033.090584][    C1] ffff8880601468f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[ 1033.090633][    C1] {INITIAL USE} state was registered at:
[ 1033.090640][    C1]   lock_acquire+0x19e/0x420
[ 1033.090657][    C1]   _raw_spin_lock+0x2e/0x40
[ 1033.090671][    C1]   htab_lock_bucket+0x17d/0x300
[ 1033.090685][    C1]   htab_map_delete_elem+0x1a4/0x650
[ 1033.090699][    C1]   bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 1033.090714][    C1]   bpf_overflow_handler+0x1fc/0x510
[ 1033.090733][    C1]   __perf_event_overflow+0x447/0x630
[ 1033.090747][    C1]   perf_swevent_event+0x542/0x630
[ 1033.090762][    C1]   perf_bp_event+0x2a7/0x380
[ 1033.090776][    C1]   hw_breakpoint_exceptions_notify+0x23e/0x670
[ 1033.090794][    C1]   notifier_call_chain+0x197/0x380
[ 1033.090810][    C1]   atomic_notifier_call_chain+0xda/0x180
[ 1033.090827][    C1]   notify_die+0x145/0x1a0
[ 1033.090842][    C1]   notify_debug+0x2e/0x50
[ 1033.090855][    C1]   noist_exc_debug+0x77/0x120
[ 1033.090873][    C1]   asm_exc_debug+0x33/0x40
[ 1033.090887][    C1] irq event stamp: 1094
[ 1033.090893][    C1] hardirqs last  enabled at (1093): [<ffffffff8a840a75>] exc_debug+0xf5/0x140
[ 1033.090917][    C1] hardirqs last disabled at (1094): [<ffffffff8a8409f3>] exc_debug+0x73/0x140
[ 1033.090940][    C1] softirqs last  enabled at (596): [<ffffffff81965046>] bpf_prog_load+0x1266/0x1670
[ 1033.090959][    C1] softirqs last disabled at (594): [<ffffffff819459ed>] bpf_ksym_add+0x2d/0x340
[ 1033.090980][    C1] 
[ 1033.090980][    C1] other info that might help us debug this:
[ 1033.090985][    C1]  Possible unsafe locking scenario:
[ 1033.090985][    C1] 
[ 1033.090989][    C1]        CPU0
[ 1033.090992][    C1]        ----
[ 1033.090995][    C1]   lock(&htab->lockdep_key);
[ 1033.091005][    C1]   <Interrupt>
[ 1033.091009][    C1]     lock(&htab->lockdep_key);
[ 1033.091018][    C1] 
[ 1033.091018][    C1]  *** DEADLOCK ***
[ 1033.091018][    C1] 
[ 1033.091022][    C1] no locks held by syz.3.4097/19251.
[ 1033.091029][    C1] 
[ 1033.091029][    C1] stack backtrace:
[ 1033.321454][T19242]  do_syscall_64+0x55/0xa0
[ 1033.325904][T19242]  ? clear_bhb_loop+0x40/0x90
[ 1033.330592][T19242]  ? clear_bhb_loop+0x40/0x90
[ 1033.335279][T19242]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1033.341184][T19242] RIP: 0033:0x7fb4f099aeb9
[ 1033.345607][T19242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1033.365310][T19242] RSP: 002b:00007fb4f18c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1033.373748][T19242] RAX: ffffffffffffffda RBX: 00007fb4f0c15fa0 RCX: 00007fb4f099aeb9
[ 1033.381819][T19242] RDX: 000000000000fe33 RSI: 0000200000000280 RDI: 0000000000000003
[ 1033.389798][T19242] RBP: 00007fb4f18c1090 R08: 0000000000000000 R09: 0000000000000000
[ 1033.397782][T19242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1033.405762][T19242] R13: 00007fb4f0c16038 R14: 00007fb4f0c15fa0 R15: 00007ffd82aea528
[ 1033.413835][T19242]  </TASK>
[ 1033.416862][    C1] CPU: 1 PID: 19251 Comm: syz.3.4097 Not tainted syzkaller #0
[ 1033.416882][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1033.416892][    C1] Call Trace:
[ 1033.416900][    C1]  <#DB>
[ 1033.416906][    C1]  dump_stack_lvl+0x18c/0x250
[ 1033.416932][    C1]  ? show_regs_print_info+0x20/0x20
[ 1033.416956][    C1]  ? print_usage_bug+0x475/0x690
[ 1033.416976][    C1]  ? verify_lock_unused+0x18/0x140
[ 1033.416995][    C1]  lock_acquire+0x2c2/0x420
[ 1033.417014][    C1]  ? htab_lock_bucket+0x17d/0x300
[ 1033.417033][    C1]  ? read_lock_is_recursive+0x20/0x20
[ 1033.417057][    C1]  _raw_spin_lock+0x2e/0x40
[ 1033.417073][    C1]  ? htab_lock_bucket+0x17d/0x300
[ 1033.417089][    C1]  htab_lock_bucket+0x17d/0x300
[ 1033.417108][    C1]  ? htab_lru_map_delete_node+0x760/0x760
[ 1033.417126][    C1]  ? look_up_lock_class+0x75/0x140
[ 1033.417145][    C1]  ? verify_lock_unused+0x18/0x140
[ 1033.417163][    C1]  ? jhash+0x2e8/0x740
[ 1033.417182][    C1]  htab_map_delete_elem+0x1a4/0x650
[ 1033.417201][    C1]  ? htab_map_update_elem+0x1040/0x1040
[ 1033.417220][    C1]  ? perf_callchain+0x1f0/0x1f0
[ 1033.417242][    C1]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 1033.417263][    C1]  bpf_overflow_handler+0x1fc/0x510
[ 1033.417287][    C1]  ? bpf_overflow_handler+0xde/0x510
[ 1033.417308][    C1]  ? tp_perf_event_destroy+0x20/0x20
[ 1033.417333][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[ 1033.417377][    C1]  __perf_event_overflow+0x447/0x630
[ 1033.417401][    C1]  perf_swevent_event+0x542/0x630
[ 1033.417422][    C1]  ? perf_tp_event+0x1450/0x1450
[ 1033.417444][    C1]  perf_bp_event+0x2a7/0x380
[ 1033.417461][    C1]  ? look_up_lock_class+0x75/0x140
[ 1033.417480][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[ 1033.417498][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1033.417518][    C1]  ? lock_release+0xb5/0x8c0
[ 1033.417546][    C1]  ? lock_acquire+0x2c2/0x420
[ 1033.417568][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[ 1033.417592][    C1]  notifier_call_chain+0x197/0x380
[ 1033.417614][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[ 1033.417634][    C1]  atomic_notifier_call_chain+0xda/0x180
[ 1033.417656][    C1]  notify_die+0x145/0x1a0
[ 1033.417686][    C1]  ? srcu_init_notifier_head+0x90/0x90
[ 1033.417711][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1033.417734][    C1]  notify_debug+0x2e/0x50
[ 1033.417751][    C1]  exc_debug+0xde/0x140
[ 1033.417775][    C1]  asm_exc_debug+0x1e/0x40
[ 1033.417792][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1033.417817][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1033.417833][    C1] RSP: 0018:ffffc90004e2fb48 EFLAGS: 00050206
[ 1033.417850][    C1] RAX: ffffffff84295701 RBX: 00000000000000a0 RCX: 000000000000001c
[ 1033.417863][    C1] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc900050b50cc
[ 1033.417876][    C1] RBP: 0000000000000000 R08: ffffc900050b50e7 R09: 1ffff92000a16a1c
[ 1033.417887][    C1] R10: dffffc0000000000 R11: fffff52000a16a1d R12: 0000200000000320
[ 1033.417900][    C1] R13: 0000000000000000 R14: ffffc900050b5048 R15: 0000200000000280
[ 1033.417914][    C1]  ? _copy_from_user+0x1/0xe0
[ 1033.417938][    C1]  </#DB>
[ 1033.417943][    C1]  <TASK>
[ 1033.417948][    C1]  _copy_from_user+0x8b/0xe0
[ 1033.417967][    C1]  copy_from_bpfptr+0x67/0x80
[ 1033.417984][    C1]  bpf_prog_load+0xa80/0x1670
[ 1033.418007][    C1]  ? map_freeze+0x420/0x420
[ 1033.418029][    C1]  ? __might_fault+0xaa/0x120
[ 1033.418046][    C1]  ? __might_fault+0xc6/0x120
[ 1033.418060][    C1]  ? __might_fault+0xaa/0x120
[ 1033.418075][    C1]  ? bpf_lsm_bpf+0x9/0x10
[ 1033.418095][    C1]  ? security_bpf+0x7e/0xa0
[ 1033.418114][    C1]  __sys_bpf+0x5ba/0x890
[ 1033.418132][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1033.418155][    C1]  ? lock_chain_count+0x20/0x20
[ 1033.418176][    C1]  __x64_sys_bpf+0x7c/0x90
[ 1033.418193][    C1]  do_syscall_64+0x55/0xa0
[ 1033.418214][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1033.418230][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1033.418248][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1033.418265][    C1] RIP: 0033:0x7fd3bf99aeb9
[ 1033.418279][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1033.418292][    C1] RSP: 002b:00007fd3c0783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1033.418310][    C1] RAX: ffffffffffffffda RBX: 00007fd3bfc15fa0 RCX: 00007fd3bf99aeb9
[ 1033.418323][    C1] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1033.418334][    C1] RBP: 00007fd3bfa08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1033.418345][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1033.418355][    C1] R13: 00007fd3bfc16038 R14: 00007fd3bfc15fa0 R15: 00007ffd65b1a6b8
[ 1033.418373][    C1]  </TASK>
[ 1033.887050][T19250] CPU: 0 PID: 19250 Comm: syz.0.4096 Not tainted syzkaller #0
[ 1033.894571][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1033.904669][T19250] Call Trace:
[ 1033.907980][T19250]  <TASK>
[ 1033.910937][T19250]  dump_stack_lvl+0x18c/0x250
[ 1033.915665][T19250]  ? show_regs_print_info+0x20/0x20
[ 1033.920905][T19250]  ? load_image+0x400/0x400
[ 1033.925447][T19250]  ? __might_fault+0xaa/0x120
[ 1033.930156][T19250]  ? __lock_acquire+0x7d40/0x7d40
[ 1033.935209][T19250]  should_fail_ex+0x39d/0x4d0
[ 1033.939907][T19250]  _copy_from_user+0x2f/0xe0
[ 1033.944512][T19250]  csum_and_copy_from_iter+0x476/0x14a0
[ 1033.950078][T19250]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[ 1033.955724][T19250]  ? __kasan_slab_alloc+0x6c/0x80
[ 1033.960763][T19250]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1033.966066][T19250]  ? rcu_is_watching+0x15/0xb0
[ 1033.970847][T19250]  ip_generic_getfrag+0x163/0x2f0
[ 1033.975897][T19250]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1033.980759][T19250]  ? skb_put+0x11b/0x210
[ 1033.985012][T19250]  __ip_append_data+0x2f11/0x3d40
[ 1033.990044][T19250]  ? trace_call_bpf+0xc3/0x6c0
[ 1033.994826][T19250]  ? raw_send_hdrinc+0x1170/0x1170
[ 1033.999978][T19250]  ? mark_lock+0x94/0x320
[ 1034.004317][T19250]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1034.010312][T19250]  ? ip_setup_cork+0x860/0x860
[ 1034.015095][T19250]  ? ip_setup_cork+0x530/0x860
[ 1034.019875][T19250]  ip_append_data+0x10d/0x180
[ 1034.024565][T19250]  ? raw_send_hdrinc+0x1170/0x1170
[ 1034.029699][T19250]  raw_sendmsg+0x15c1/0x1c00
[ 1034.034312][T19250]  ? compat_raw_ioctl+0x70/0x70
[ 1034.039181][T19250]  ? __lock_acquire+0x1273/0x7d40
[ 1034.044313][T19250]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 1034.050739][T19250]  ? sock_rps_record_flow+0x19/0x3f0
[ 1034.056036][T19250]  ? inet_sendmsg+0x7c/0x2f0
[ 1034.060644][T19250]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1034.065941][T19250]  ? security_socket_sendmsg+0x80/0xa0
[ 1034.071407][T19250]  ? inet_send_prepare+0x260/0x260
[ 1034.076528][T19250]  ____sys_sendmsg+0x5ba/0x960
[ 1034.081397][T19250]  ? __lock_acquire+0x7d40/0x7d40
[ 1034.086445][T19250]  ? __asan_memset+0x22/0x40
[ 1034.091048][T19250]  ? __sys_sendmsg_sock+0x30/0x30
[ 1034.096108][T19250]  ? __import_iovec+0x3fa/0x850
[ 1034.100980][T19250]  ? import_iovec+0x73/0xa0
[ 1034.105498][T19250]  ___sys_sendmsg+0x2a6/0x360
[ 1034.110188][T19250]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1034.114968][T19250]  ? trace_call_bpf+0xc3/0x6c0
[ 1034.119758][T19250]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1034.124622][T19250]  ? __x64_sys_sendmsg+0x80/0x80
[ 1034.129571][T19250]  ? lockdep_hardirqs_on+0x98/0x150
[ 1034.134790][T19250]  do_syscall_64+0x55/0xa0
[ 1034.139219][T19250]  ? clear_bhb_loop+0x40/0x90
[ 1034.143911][T19250]  ? clear_bhb_loop+0x40/0x90
[ 1034.148601][T19250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1034.154504][T19250] RIP: 0033:0x7f34d5d9aeb9
[ 1034.158926][T19250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1034.178545][T19250] RSP: 002b:00007f34d3ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1034.186975][T19250] RAX: ffffffffffffffda RBX: 00007f34d6015fa0 RCX: 00007f34d5d9aeb9
[ 1034.194969][T19250] RDX: 0000000020040000 RSI: 0000200000000a00 RDI: 0000000000000003
[ 1034.203126][T19250] RBP: 00007f34d3ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1034.211275][T19250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1034.219254][T19250] R13: 00007f34d6016038 R14: 00007f34d6015fa0 R15: 00007fffb6832688
[ 1034.227238][T19250]  </TASK>
[ 1034.246479][T19251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.