last executing test programs:

7.515074706s ago: executing program 3 (id=1536):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000040800000006"], 0x50)
r1 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="be772ccf3b6992c21956bcb99d69e6b71528915e90ae1acc046d789f935fbe", 0x1f}, {&(0x7f00000000c0)="2962a2ea77ac3841a47b3b5a3f3dfa68f27d50d2326eb132fbfce42e01afe0d67b559ba318bf7a5bd25736f9329dc6bdcde1189a0b32ed77a7ad8973cd2673c0d5ad28489a644412c8904057c6899d794cf17d", 0x53}, {&(0x7f0000000300)="6d595c73e3d57b96c5ca74cd5c7140cd6c68f3f9a519cc27da0d4370956819c14f681e4a48b992f1b17277b3ca9254fcb11141dd0a616b13824365ac9212bea5843f1ee30e4ac02ec39a3cdf1f70af95e84ebd2a64576e579962c16c5be4c10acb6c1aafa20365a6049a2da8c0b6f5b26ef9c7efc15e95459dd1d6ff4253f7f7972cfb615f558e230c573b7fce332e6d5ac3ea4266c77dd369de8d3a8d05f70076a71c618af77c4a3838387a1aa20271b2c6a71df5e8a2818033caf03d6ec07074537e734607ec5194b77cfcd412e2072de847bf66154880f2a35746c8dc9e4867f8", 0xe2}, {&(0x7f0000000500)="778678af2abbe79edf4f186f84d6f7e3716f4669d68a20e982362a670c3798971e636e51d23e1a86d4023cabf4a6d6955823d7fda66af119e9e2d802d661bbb56877ce79e483c4b061c6360464804b3a591897316d06d52621d30637fb728e0c6d6d764eff776add7a48b625a8b62493dbf7cb8a1ced609483feb3f5b103f3b34573bb6bd47158e48d150b0f13c432852a9879dbcf99ce650652", 0x9a}], 0x4, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xec, 0x1, 0x6, [{@private=0xa010102, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x13}]}, @lsrr={0x83, 0x13, 0xa6, [@local, @local, @private=0xa010102, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa233}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0xc0}, 0x3404405c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.150941709s ago: executing program 3 (id=1553):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d00"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
socket$kcm(0x2, 0x3, 0x2)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

3.232346169s ago: executing program 1 (id=1552):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000080000000000002503000085000000b200000085000000a7000000851000000400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300000000000085b00000000c000000b7000000ff0700000000"], &(0x7f0000000780)='GPL\x00', 0xbaf4, 0x57, &(0x7f0000000840)=""/87, 0x41100, 0x39d18f35be892f54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x6, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0x1, 0x1], 0x0, 0x10, 0x1}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x2, 0x0, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000a40)=r0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES32=r5], 0x9a)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$kcm(0xa, 0x2, 0x88)
socket$kcm(0x11, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000340)="b9ff03076003008c61da85f086dd3ab80c3de44c688859d9c49ad10a6b827fc08cf7ed742c257091b5985dd280fc05d594d158c239470d3e2bc12a64e0bc159ec471aced8a14", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7490ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x40044004)

3.124051912s ago: executing program 3 (id=1554):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)

2.835708488s ago: executing program 2 (id=1556):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)

2.714229211s ago: executing program 1 (id=1557):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

2.491266186s ago: executing program 1 (id=1558):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41def1868b2ef7fb8d11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000023c0)=ANY=[@ANYBLOB='1-2:'], 0x31)
r5 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000001540)=@in6={0xa, 0x4e20, 0x3, @local, 0x1}, 0x80, 0x0}, 0x800)
close(r5)

2.475342956s ago: executing program 0 (id=1559):
r0 = socket$kcm(0xa, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) (async)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r2 = socket$kcm(0x2c, 0x3, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11b, 0x3, &(0x7f0000000040)=r3, 0x4)
close(0x3) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000140)}, 0x10) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, <r4=>0xffffffffffffffff}, 0x4) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r9) (async)
ioctl$TUNGETVNETLE(r9, 0x8955, &(0x7f0000000040)) (async)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000050000fbf2ede56253ede02718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182b0000", @ANYRES32=r4, @ANYBLOB="0000000006000000906bf8fffcffffff54923000fcffffffc395180000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x88, &(0x7f00000006c0)=""/136, 0x41000, 0x40, '\x00', r8, 0x19, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0xb, 0x400, 0xd76}, 0x10, 0x1d8cd, 0xffffffffffffffff, 0x5, &(0x7f0000000880), &(0x7f00000008c0)=[{0x2, 0x3, 0xa, 0x8}, {0x5, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x2}, {0x1, 0x1, 0xc, 0x5}, {0x4, 0x4, 0x3}], 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
close(0x4)

2.409523167s ago: executing program 2 (id=1560):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x280000, 0x4, 0x10009, 0xf033f71cfcbaa755}], 0x10, 0xfffffff6}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000032a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)
write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="2b68756765746c62203b6e65745f636c73202d667265658b5b2cd0b0608f4173202b726c696d697420bbf425a3c18cb4b1195d83784ead34895116f8912dbe5c75957f3874f3f12b6a0b2596266537bbe0177e57ff3fa6592494d4abf1b46c7c8e6c73b15c801289d3a38448c9ba07fc0181154c845daaceb29ec042cce604f13438b11250d62a63ef1cf0de613b1db0b20b9c710968a3e47fa9e78e4f8c0059763e1a39683f4b084d499178c1926a3cd9f71cb0"], 0x29)

2.154958523s ago: executing program 0 (id=1561):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xca, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

1.939514558s ago: executing program 0 (id=1563):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d00"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
socket$kcm(0x2, 0x3, 0x2)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

1.515513077s ago: executing program 3 (id=1564):
socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x400}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x2, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000080))
recvmsg(r0, &(0x7f0000000780)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, <r2=>0x0}, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2}, 0x40000020)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8080, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)=r4, 0x3b)
syz_clone(0x10000100, &(0x7f0000001cc0)="de2c7a4a02dacf4fd231a0df5ec55d56a7d968532b3cea07c734b7f98a7e5f187e261caf49910c6d22", 0x29, 0x0, &(0x7f0000001d80), 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x1})
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYRES64=r3], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x8, 0xb, 0x2, 0x8, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)

1.428327839s ago: executing program 1 (id=1565):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="000cc8e1725a2f135c76243bf901e06692833f617ae4d86833eab125c93f60e588e6fd10712f37b1283c1e56ece7899cdb5c6abca15f3d7998efb33d54d3bf9e57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a0000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009576a4d01dd14d66f13c06339f314a265d6da6a994699498ec38e090d4fe86f9f49e98961db250fd1f3b5d7737e83c67c507ef921196980d3d802899a98644a61be4e3132c9021687568b87dee9b9dd43564886afc908d3f5573374a5deb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc)
r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0)=0xd, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000002775f4a090000000500000007000000c1", @ANYBLOB="dfd5649c4278aac9eea0f7f428b74cfbe38161a4c671ef59ffa41ce2536026772de37454ff3b84ad8dbec3ccacc0f5ce7ecdd8a7e5ed12345f100b563a56a3ade79b8e854421290aa7e66219aecf224b70a0f9abdaac1481a35f197915dd8deda5202374a07d9c883d04", @ANYRES8=r4, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/14], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000340), 0x0}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12)
mkdirat$cgroup(r0, &(0x7f0000000500)='syz0\x00', 0x1ff)
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2, 0x8000a, 0x1, &(0x7f0000000080))

1.208672023s ago: executing program 0 (id=1566):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x6}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r2, r3, 0x2f, 0x10, r1}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func={0x5, 0x0, 0x0, 0xc, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x4d, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000500)=""/4096, 0x37, 0x1000}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', r2, r4, 0x0, 0x5, 0x2}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xfb, &(0x7f0000003b00)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0xe5, 0x63, &(0x7f0000000040)="63ae0363db1845b16a63c2979dc3c4626a258f9db11772daec4ebe08dc233bda38f41ab664e8a6735b565e80e7e39316eb542f262f4e83c13b71b7426ff754332bedeecd4b66436a698dab0a5995343a4573bb9cce3f0e3ed32678da887953b36e2df9fa9d6bf8f001ebe8a276b02f6c6975718bcb915632618a3a9c4e7758c4ca300b2cccc3b7b78fbe1974e754037e683ac8cd10fdfd40d4689eddc7bb04d8af0e3abc4858a2506bc9e06546307565853fb0e77aef16b0e235232ed70390061e3e2b12762ef1ab069957b1dc3458473a09856ac1062992466338185a327b106c49978a3e", &(0x7f00000001c0)=""/99, 0x7, 0x0, 0xd9, 0x32, &(0x7f0000000340)="f7dafa044fa5a44bdbec772484e9eac2b3cc77234e739b75a60fb3fcdba58eb47ce373ddb83261bd27823c5d7f2fedf8e3d61ea6d3ea3e8fef3337595094391a6842f6a73161e994c0bdf6e23c16f5a5999ba9236cb3c8b3d1c639779fe262d6a6e125964dee72103346411238ad4891c03682eb27da82e4d7fbd0d6ac588e6922491583d04d97310ff0d72ba0b5fc9dac73630b5112a76703a0043d35cb1e3e8e660239a7748b2267fb251bcf1d75cbc4cf27c6240dcf895a7ca7d5380f38e3e340a98ad2e460d03df761df36ac2e5c2fc595e150771d60c5", &(0x7f0000000440)="e9ce0569729c9a9d1551363f07c0cd1e525d7bfae5c7d9bcbbd79ab70027e767a890a849b25e7460f3d0e20429ab52b06280", 0x3, 0x0, 0x6}, 0x50)

1.104471936s ago: executing program 1 (id=1567):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000080000000000002503000085000000b200000085000000a7000000851000000400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300000000000085b00000000c000000b7000000ff0700000000000000"], &(0x7f0000000780)='GPL\x00', 0xbaf4, 0x57, &(0x7f0000000840)=""/87, 0x41100, 0x39d18f35be892f54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x6, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0x1, 0x1], 0x0, 0x10, 0x1}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x2, 0x0, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000a40)=r0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES32=r5], 0x9a)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$kcm(0xa, 0x2, 0x88)
socket$kcm(0x11, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000340)="b9ff03076003008c61da85f086dd3ab80c3de44c688859d9c49ad10a6b827fc08cf7ed742c257091b5985dd280fc05d594d158c239470d3e2bc12a64e0bc159ec471aced8a14", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7490ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x40044004)

1.095194966s ago: executing program 2 (id=1568):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

912.3044ms ago: executing program 0 (id=1569):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)

888.97675ms ago: executing program 2 (id=1570):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)

845.753631ms ago: executing program 3 (id=1571):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)

688.241475ms ago: executing program 1 (id=1572):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)

267.154054ms ago: executing program 0 (id=1573):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405}, {0x4, 0x5, 0x30009, 0x8}], 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40a}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)

266.746844ms ago: executing program 2 (id=1574):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d00"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
socket$kcm(0x2, 0x3, 0x2)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

129.571357ms ago: executing program 3 (id=1575):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="000cc8e1725a2f135c76243bf901e06692833f617ae4d86833eab125c93f60e588e6fd10712f37b1283c1e56ece7899cdb5c6abca15f3d7998efb33d54d3bf9e57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a0000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009576a4d01dd14d66f13c06339f314a265d6da6a994699498ec38e090d4fe86f9f49e98961db250fd1f3b5d7737e83c67c507ef921196980d3d802899a98644a61be4e3132c9021687568b87dee9b9dd43564886afc908d3f5573374a5deb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc)
r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0)=0xd, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000002775f4a090000000500000007000000c1", @ANYBLOB="dfd5649c4278aac9eea0f7f428b74cfbe38161a4c671ef59ffa41ce2536026772de37454ff3b84ad8dbec3ccacc0f5ce7ecdd8a7e5ed12345f100b563a56a3ade79b8e854421290aa7e66219aecf224b70a0f9abdaac1481a35f197915dd8deda5202374a07d9c883d04", @ANYRES8=r4, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000340), 0x0}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12)
mkdirat$cgroup(r0, &(0x7f0000000500)='syz0\x00', 0x1ff)
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2, 0x8000a, 0x1, &(0x7f0000000080))

0s ago: executing program 2 (id=1576):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000032a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)
write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="2b68756765746c62203b6e65745f636c73202d667265658b5b2cd0b0608f4173202b726c696d697420bbf425a3c18cb4b1195d83784ead34895116f8912dbe5c75957f3874f3f12b6a0b2596266537bbe0177e57ff3fa6592494d4abf1b46c7c8e6c73b15c801289d3a38448c9ba07fc0181154c845daaceb29ec042cce604f13438b11250d62a63ef1cf0de613b1db0b20b9c710968a3e47fa9e78e4f8c0059763e1a39683f4b084d499178c1926a3cd9f71cb0"], 0x29)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.0.349'.
[  127.618389][ T6743] batman_adv: batadv0: Adding interface: virt_wifi0
[  127.638316][ T6743] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.668486][ T6743] batman_adv: batadv0: Interface activated: virt_wifi0
[  127.923418][ T6754] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.351'.
[  128.140067][ T6758] netlink: 2 bytes leftover after parsing attributes in process `syz.0.355'.
[  128.161422][ T6758] bond0: entered promiscuous mode
[  128.173866][ T6758] bond_slave_0: entered promiscuous mode
[  128.190814][ T6758] bond_slave_1: entered promiscuous mode
[  128.207065][ T6758] dummy0: entered promiscuous mode
[  128.215359][ T6758] team0: entered promiscuous mode
[  128.233021][ T6758] team_slave_0: entered promiscuous mode
[  128.245834][ T6758] team_slave_1: entered promiscuous mode
[  128.262642][ T6758] bridge0: port 3(bond0) entered blocking state
[  128.281103][ T6758] bridge0: port 3(bond0) entered disabled state
[  128.294411][ T6758] bond0: entered allmulticast mode
[  128.302445][ T6758] bond_slave_0: entered allmulticast mode
[  128.315381][ T6758] bond_slave_1: entered allmulticast mode
[  128.323586][ T6758] dummy0: entered allmulticast mode
[  128.334562][ T6758] team0: entered allmulticast mode
[  128.342623][ T6758] team_slave_0: entered allmulticast mode
[  128.351942][ T6758] team_slave_1: entered allmulticast mode
[  128.365127][ T6758] bridge0: port 3(bond0) entered blocking state
[  128.371897][ T6758] bridge0: port 3(bond0) entered forwarding state
[  129.365017][ T6786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'.
[  129.561338][ T6791] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.365'.
[  129.783503][ T6797] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.369'.
[  129.899854][ T6801] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.372'.
[  130.420346][ T6810] batman_adv: batadv0: Adding interface: virt_wifi0
[  130.432004][ T6810] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.463175][ T6810] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  131.034630][ T6819] validate_nla: 29 callbacks suppressed
[  131.034646][ T6819] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  131.082481][ T6819] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  131.105619][ T6823] netlink: 'syz.3.380': attribute type 1 has an invalid length.
[  131.122252][ T6823] netlink: 'syz.3.380': attribute type 1 has an invalid length.
[  131.132917][ T6822] netlink: 'syz.1.381': attribute type 9 has an invalid length.
[  131.152614][ T6819] netlink: 'syz.0.379': attribute type 29 has an invalid length.
[  131.167206][ T6823] netlink: 'syz.3.380': attribute type 29 has an invalid length.
[  131.176446][ T6819] netlink: 'syz.0.379': attribute type 29 has an invalid length.
[  131.187000][ T6819] netlink: 'syz.0.379': attribute type 29 has an invalid length.
[  131.210111][ T6819] netlink: 'syz.0.379': attribute type 29 has an invalid length.
[  131.885014][ T6845] Q±6ã�`Ò˜: renamed from lo (while UP)
[  132.083666][ T6845] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  132.120977][ T6844] batman_adv: batadv0: Adding interface: virt_wifi0
[  132.138190][ T6844] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.220178][ T6845] syz.1.391 (6845) used greatest stack depth: 19352 bytes left
[  132.231369][ T6844] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  132.315188][ T6857] __nla_validate_parse: 9 callbacks suppressed
[  132.315206][ T6857] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.395'.
[  132.791522][ T6874] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.402'.
[  132.963821][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  132.973042][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  132.993455][ T6878] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.404'.
[  133.586815][ T6887] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.406'.
[  133.891364][ T6891] FAULT_INJECTION: forcing a failure.
[  133.891364][ T6891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.915049][ T6891] CPU: 1 PID: 6891 Comm: syz.0.407 Not tainted syzkaller #0
[  133.922513][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  133.932599][ T6891] Call Trace:
[  133.935895][ T6891]  <TASK>
[  133.938841][ T6891]  dump_stack_lvl+0x18c/0x250
[  133.943542][ T6891]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  133.949723][ T6891]  ? show_regs_print_info+0x20/0x20
[  133.954941][ T6891]  ? load_image+0x420/0x420
[  133.959471][ T6891]  should_fail_ex+0x394/0x4c0
[  133.964180][ T6891]  _copy_from_user+0x2f/0xe0
[  133.968808][ T6891]  bpf_test_init+0xde/0x140
[  133.973367][ T6891]  bpf_prog_test_run_xdp+0x4cd/0x1140
[  133.978764][ T6891]  ? __lock_acquire+0x7d80/0x7d80
[  133.983810][ T6891]  ? dev_put+0x80/0x80
[  133.987910][ T6891]  ? dev_put+0x80/0x80
[  133.992019][ T6891]  bpf_prog_test_run+0x31f/0x390
[  133.996993][ T6891]  __sys_bpf+0x49d/0x890
[  134.001261][ T6891]  ? bpf_link_show_fdinfo+0x390/0x390
[  134.006664][ T6891]  ? lock_chain_count+0x20/0x20
[  134.011556][ T6891]  __x64_sys_bpf+0x7c/0x90
[  134.016018][ T6891]  do_syscall_64+0x55/0xb0
[  134.020470][ T6891]  ? clear_bhb_loop+0x40/0x90
[  134.025169][ T6891]  ? clear_bhb_loop+0x40/0x90
[  134.029868][ T6891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.035817][ T6891] RIP: 0033:0x7f68b7f9de59
[  134.040254][ T6891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.059910][ T6891] RSP: 002b:00007f68b8e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  134.068357][ T6891] RAX: ffffffffffffffda RBX: 00007f68b8225fa0 RCX: 00007f68b7f9de59
[  134.076349][ T6891] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  134.084342][ T6891] RBP: 00007f68b8e32090 R08: 0000000000000000 R09: 0000000000000000
[  134.092337][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.100331][ T6891] R13: 00007f68b8226038 R14: 00007f68b8225fa0 R15: 00007fff1f844878
[  134.108336][ T6891]  </TASK>
[  134.541167][ T6903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.412'.
[  134.611675][ T6905] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.413'.
[  134.732096][ T6909] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.415'.
[  134.835058][ T6912] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.416'.
[  135.197093][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.420'.
[  135.752285][ T6933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.424'.
[  136.100940][ T6940] validate_nla: 43 callbacks suppressed
[  136.100957][ T6940] netlink: 'syz.3.427': attribute type 1 has an invalid length.
[  136.124536][ T6940] netlink: 'syz.3.427': attribute type 1 has an invalid length.
[  136.154918][ T6940] netlink: 'syz.3.427': attribute type 29 has an invalid length.
[  136.174862][ T6940] netlink: 'syz.3.427': attribute type 29 has an invalid length.
[  136.195074][ T6940] netlink: 'syz.3.427': attribute type 29 has an invalid length.
[  136.213269][ T6940] netlink: 'syz.3.427': attribute type 29 has an invalid length.
[  136.262480][ T6950] netlink: 'syz.0.430': attribute type 9 has an invalid length.
[  136.356569][ T6952] netlink: 'syz.0.431': attribute type 10 has an invalid length.
[  136.538990][ T6958] netlink: 'syz.0.434': attribute type 10 has an invalid length.
[  136.610588][ T6961] Q±6ã�`Ò˜: renamed from lo (while UP)
[  136.651904][ T6963] netlink: 'syz.0.436': attribute type 9 has an invalid length.
[  136.761331][ T6961] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  137.307177][ T6983] bond0: entered promiscuous mode
[  137.331217][ T6983] bond_slave_0: entered promiscuous mode
[  137.341502][ T6983] bond_slave_1: entered promiscuous mode
[  137.355443][ T6983] dummy0: entered promiscuous mode
[  137.382697][ T6983] team0: entered promiscuous mode
[  137.389327][ T6983] team_slave_0: entered promiscuous mode
[  137.396228][ T6983] team_slave_1: entered promiscuous mode
[  137.413716][ T6983] bridge0: port 3(bond0) entered blocking state
[  137.422176][ T6983] bridge0: port 3(bond0) entered disabled state
[  137.429053][ T6983] bond0: entered allmulticast mode
[  137.434387][ T6983] bond_slave_0: entered allmulticast mode
[  137.441095][ T6983] bond_slave_1: entered allmulticast mode
[  137.447037][ T6983] dummy0: entered allmulticast mode
[  137.453881][ T6983] team0: entered allmulticast mode
[  137.477369][ T6983] team_slave_0: entered allmulticast mode
[  137.496614][ T6990] __nla_validate_parse: 10 callbacks suppressed
[  137.496629][ T6990] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.447'.
[  137.512497][ T6983] team_slave_1: entered allmulticast mode
[  137.531137][ T6983] bridge0: port 3(bond0) entered blocking state
[  137.538323][ T6983] bridge0: port 3(bond0) entered forwarding state
[  137.558200][ T6985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.445'.
[  137.581250][ T6987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.445'.
[  137.736869][ T6996] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.452'.
[  137.765121][ T6999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.451'.
[  137.819807][ T7003] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.450'.
[  137.833956][ T7003] Q±6ã�`Ò˜: renamed from lo (while UP)
[  137.982787][ T7005] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  138.275219][ T7019] bridge_slave_1: left allmulticast mode
[  138.281378][ T7019] bridge_slave_1: left promiscuous mode
[  138.288347][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.311730][ T7019] bridge_slave_0: left allmulticast mode
[  138.317968][ T7019] bridge_slave_0: left promiscuous mode
[  138.324189][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.493958][ T7024] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.459'.
[  141.381267][ T7033] validate_nla: 21 callbacks suppressed
[  141.381284][ T7033] netlink: 'syz.2.462': attribute type 9 has an invalid length.
[  141.395113][ T7033] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.462'.
[  141.413803][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'.
[  141.724519][ T7036] netlink: 'syz.2.463': attribute type 10 has an invalid length.
[  141.863267][ T7039] netlink: 'syz.0.464': attribute type 9 has an invalid length.
[  141.866692][ T7041] FAULT_INJECTION: forcing a failure.
[  141.866692][ T7041] name failslab, interval 1, probability 0, space 0, times 0
[  141.884372][ T7041] CPU: 0 PID: 7041 Comm: syz.1.465 Not tainted syzkaller #0
[  141.891755][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  141.893092][ T7039] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.464'.
[  141.901836][ T7041] Call Trace:
[  141.901851][ T7041]  <TASK>
[  141.901865][ T7041]  dump_stack_lvl+0x18c/0x250
[  141.901910][ T7041]  ? show_regs_print_info+0x20/0x20
[  141.901940][ T7041]  ? load_image+0x420/0x420
[  141.901977][ T7041]  ? __might_sleep+0xe0/0xe0
[  141.902009][ T7041]  ? __lock_acquire+0x7d80/0x7d80
[  141.902055][ T7041]  should_fail_ex+0x394/0x4c0
[  141.902106][ T7041]  should_failslab+0x9/0x20
[  141.902135][ T7041]  slab_pre_alloc_hook+0x59/0x300
[  141.902166][ T7041]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  141.902213][ T7041]  kmem_cache_alloc_node+0x5e/0x310
[  141.902244][ T7041]  ? __alloc_skb+0x103/0x2c0
[  141.902289][ T7041]  __alloc_skb+0x103/0x2c0
[  141.902330][ T7041]  netlink_ack+0x377/0x1160
[  141.902386][ T7041]  ? inet_diag_unregister+0xb0/0xb0
[  141.902442][ T7041]  ? netlink_dump+0xec0/0xec0
[  141.902488][ T7041]  ? inet_diag_unregister+0xb0/0xb0
[  141.902514][ T7041]  ? sock_diag_rcv_msg+0x3f4/0x5f0
[  141.902559][ T7041]  netlink_rcv_skb+0x2b3/0x4c0
[  141.902591][ T7041]  ? sock_diag_bind+0xb0/0xb0
[  142.011776][ T7041]  ? netlink_ack+0x1160/0x1160
[  142.016689][ T7041]  ? __lock_acquire+0x7d80/0x7d80
[  142.021819][ T7041]  ? netlink_deliver_tap+0x2e/0x1b0
[  142.027101][ T7041]  sock_diag_rcv+0x2a/0x40
[  142.031602][ T7041]  netlink_unicast+0x7b1/0x930
[  142.036474][ T7041]  netlink_sendmsg+0x8d0/0xbf0
[  142.041375][ T7041]  ? netlink_getsockopt+0x590/0x590
[  142.046646][ T7041]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  142.052895][ T7041]  ? aa_sock_msg_perm+0x94/0x150
[  142.057914][ T7041]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  142.063266][ T7041]  ? security_socket_sendmsg+0x80/0xa0
[  142.068794][ T7041]  ? netlink_getsockopt+0x590/0x590
[  142.074067][ T7041]  ____sys_sendmsg+0x61b/0x980
[  142.078932][ T7041]  ? __asan_memset+0x22/0x40
[  142.083588][ T7041]  ? __sys_sendmsg_sock+0x30/0x30
[  142.088672][ T7041]  ? __import_iovec+0x5f2/0x850
[  142.093616][ T7041]  ? import_iovec+0x73/0xa0
[  142.098195][ T7041]  ___sys_sendmsg+0x2a6/0x360
[  142.102943][ T7041]  ? get_pid_task+0x20/0x1e0
[  142.107621][ T7041]  ? __sys_sendmsg+0x2b0/0x2b0
[  142.112532][ T7041]  ? __lock_acquire+0x7d80/0x7d80
[  142.117734][ T7041]  __se_sys_sendmsg+0x1d0/0x2c0
[  142.122693][ T7041]  ? __x64_sys_sendmsg+0x80/0x80
[  142.127780][ T7041]  ? lockdep_hardirqs_on+0x98/0x150
[  142.133087][ T7041]  do_syscall_64+0x55/0xb0
[  142.137578][ T7041]  ? clear_bhb_loop+0x40/0x90
[  142.142317][ T7041]  ? clear_bhb_loop+0x40/0x90
[  142.147073][ T7041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.153038][ T7041] RIP: 0033:0x7f743f19de59
[  142.157514][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.177185][ T7041] RSP: 002b:00007f7440006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.185685][ T7041] RAX: ffffffffffffffda RBX: 00007f743f425fa0 RCX: 00007f743f19de59
[  142.193724][ T7041] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  142.201768][ T7041] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  142.209793][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.217843][ T7041] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  142.225925][ T7041]  </TASK>
[  142.445335][ T7049] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[  142.455054][ T7049] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[  142.476889][ T7047] netlink: 'syz.3.468': attribute type 9 has an invalid length.
[  142.504049][ T7047] __nla_validate_parse: 1 callbacks suppressed
[  142.504063][ T7047] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.468'.
[  142.548305][ T7049] netlink: 'syz.1.469': attribute type 29 has an invalid length.
[  142.562588][ T7054] netlink: 'syz.0.471': attribute type 10 has an invalid length.
[  142.599004][ T7049] netlink: 'syz.1.469': attribute type 29 has an invalid length.
[  142.618133][ T7051] netlink: 'syz.1.469': attribute type 29 has an invalid length.
[  142.738476][ T7052] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  142.753233][ T7052] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  142.773668][ T7052] team0: Port device wlan1 added
[  142.787642][ T7063] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.473'.
[  142.956343][ T7066] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.474'.
[  143.181538][ T7073] netlink: 144 bytes leftover after parsing attributes in process `syz.1.475'.
[  143.286526][ T7073] team0: Port device team_slave_0 removed
[  143.305920][ T7073] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  143.328839][ T7080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.477'.
[  143.635044][ T7084] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.479'.
[  144.027016][ T7086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.480'.
[  144.121293][ T7086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.480'.
[  144.218354][ T7091] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.483'.
[  144.239545][ T7092] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.482'.
[  145.933608][ T7133] bridge_slave_1: left allmulticast mode
[  145.941272][ T7133] bridge_slave_1: left promiscuous mode
[  145.947871][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.964373][ T7133] bridge_slave_0: left allmulticast mode
[  145.970636][ T7133] bridge_slave_0: left promiscuous mode
[  145.976540][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.096195][ T7141] validate_nla: 42 callbacks suppressed
[  149.096212][ T7141] netlink: 'syz.0.504': attribute type 10 has an invalid length.
[  149.137419][ T7145] netlink: 'syz.1.506': attribute type 9 has an invalid length.
[  149.154767][ T7145] __nla_validate_parse: 6 callbacks suppressed
[  149.154782][ T7145] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.506'.
[  149.336464][ T7149] netlink: 'syz.0.507': attribute type 9 has an invalid length.
[  149.374158][ T7149] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.507'.
[  149.507085][ T7156] netlink: 'syz.1.509': attribute type 10 has an invalid length.
[  149.537846][ T7156] netlink: 2 bytes leftover after parsing attributes in process `syz.1.509'.
[  149.570538][ T7156] bond0: entered promiscuous mode
[  149.586741][ T7156] bond_slave_0: entered promiscuous mode
[  149.622614][ T7156] bond_slave_1: entered promiscuous mode
[  149.662037][ T7156] team0: entered promiscuous mode
[  149.688457][ T7156] team_slave_1: entered promiscuous mode
[  149.709267][ T7156] dummy0: entered promiscuous mode
[  149.723453][ T7159] netlink: 'syz.0.510': attribute type 10 has an invalid length.
[  149.805370][ T7164] netlink: 'syz.3.512': attribute type 1 has an invalid length.
[  149.837924][ T7164] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.512'.
[  149.847250][ T7164] netlink: 'syz.3.512': attribute type 1 has an invalid length.
[  149.880757][ T7164] netlink: 'syz.3.512': attribute type 29 has an invalid length.
[  149.899349][ T7164] netlink: 'syz.3.512': attribute type 29 has an invalid length.
[  149.918768][ T7164] netlink: 'syz.3.512': attribute type 29 has an invalid length.
[  149.978084][ T7167] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.514'.
[  149.996271][ T7167] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.514'.
[  150.644646][ T7181] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.518'.
[  150.688230][ T7181] bridge_slave_1: default FDB implementation only supports local addresses
[  150.756942][ T7178] bond0: left allmulticast mode
[  150.784783][ T7178] bond_slave_0: left allmulticast mode
[  150.810550][ T7178] bond_slave_1: left allmulticast mode
[  150.816501][ T7178] dummy0: left allmulticast mode
[  150.832880][ T7178] team0: left allmulticast mode
[  150.841702][ T7178] team_slave_0: left allmulticast mode
[  150.853446][ T7178] team_slave_1: left allmulticast mode
[  150.872932][ T7178] bridge0: port 3(bond0) entered disabled state
[  151.808207][ T7178] bridge_slave_1: left allmulticast mode
[  151.829073][ T7178] bridge_slave_1: left promiscuous mode
[  151.843474][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.948918][ T7178] bridge_slave_0: left allmulticast mode
[  151.963147][ T7178] bridge_slave_0: left promiscuous mode
[  151.970592][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.366468][ T7192] netlink: 2 bytes leftover after parsing attributes in process `syz.3.522'.
[  152.375711][ T7192] bond0: entered promiscuous mode
[  152.382604][ T7192] bond_slave_0: entered promiscuous mode
[  152.388666][ T7192] bond_slave_1: entered promiscuous mode
[  152.394636][ T7192] team0: entered promiscuous mode
[  152.400268][ T7192] team_slave_0: entered promiscuous mode
[  152.406294][ T7192] team_slave_1: entered promiscuous mode
[  152.413012][ T7192] dummy0: entered promiscuous mode
[  152.419917][ T7192] veth1_to_bridge: entered promiscuous mode
[  153.075318][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.535'.
[  153.261226][ T7219] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  153.295104][ T7219] team0: Port device wlan1 added
[  153.309817][ T7220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.535'.
[  153.820368][ T7238] bond0: left allmulticast mode
[  153.826774][ T7238] bond_slave_0: left allmulticast mode
[  153.844168][ T7238] bond_slave_1: left allmulticast mode
[  153.870096][ T7238] dummy0: left allmulticast mode
[  153.875924][ T7238] team0: left allmulticast mode
[  153.918576][ T7238] team_slave_0: left allmulticast mode
[  153.924264][ T7238] team_slave_1: left allmulticast mode
[  153.989025][ T7238] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  154.032021][ T7238] bridge0: port 3(bond0) entered disabled state
[  154.759940][ T7238] bridge_slave_1: left allmulticast mode
[  154.766712][ T7238] bridge_slave_1: left promiscuous mode
[  154.786321][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.202345][ T7238] bridge_slave_0: left allmulticast mode
[  155.216144][ T7238] bridge_slave_0: left promiscuous mode
[  155.225031][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.653000][ T7265] validate_nla: 16 callbacks suppressed
[  155.653015][ T7265] netlink: 'syz.3.549': attribute type 10 has an invalid length.
[  155.666779][ T7265] __nla_validate_parse: 3 callbacks suppressed
[  155.666793][ T7265] netlink: 2 bytes leftover after parsing attributes in process `syz.3.549'.
[  155.686908][ T7268] netlink: 'syz.1.551': attribute type 10 has an invalid length.
[  156.459638][ T7299] netlink: 'syz.0.561': attribute type 10 has an invalid length.
[  156.473338][ T7299] netlink: 2 bytes leftover after parsing attributes in process `syz.0.561'.
[  156.550337][ T7302] netlink: 'syz.2.563': attribute type 10 has an invalid length.
[  157.148960][ T7318] FAULT_INJECTION: forcing a failure.
[  157.148960][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.182222][ T7318] CPU: 1 PID: 7318 Comm: syz.2.570 Not tainted syzkaller #0
[  157.189572][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  157.199663][ T7318] Call Trace:
[  157.202978][ T7318]  <TASK>
[  157.205944][ T7318]  dump_stack_lvl+0x18c/0x250
[  157.210690][ T7318]  ? show_regs_print_info+0x20/0x20
[  157.215941][ T7318]  ? _printk+0x11d/0x130
[  157.220230][ T7318]  should_fail_ex+0x394/0x4c0
[  157.224949][ T7318]  _copy_from_user+0x2f/0xe0
[  157.229562][ T7318]  __sys_bpf+0x23e/0x890
[  157.233821][ T7318]  ? bpf_link_show_fdinfo+0x390/0x390
[  157.239223][ T7318]  ? lock_chain_count+0x20/0x20
[  157.244118][ T7318]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  157.250137][ T7318]  __x64_sys_bpf+0x7c/0x90
[  157.254593][ T7318]  do_syscall_64+0x55/0xb0
[  157.259035][ T7318]  ? clear_bhb_loop+0x40/0x90
[  157.263732][ T7318]  ? clear_bhb_loop+0x40/0x90
[  157.268430][ T7318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.274357][ T7318] RIP: 0033:0x7fde13b9de59
[  157.278798][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.298434][ T7318] RSP: 002b:00007fde14a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  157.306880][ T7318] RAX: ffffffffffffffda RBX: 00007fde13e25fa0 RCX: 00007fde13b9de59
[  157.314874][ T7318] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  157.322867][ T7318] RBP: 00007fde14a66090 R08: 0000000000000000 R09: 0000000000000000
[  157.330865][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.338855][ T7318] R13: 00007fde13e26038 R14: 00007fde13e25fa0 R15: 00007fff2f6bf858
[  157.346852][ T7318]  </TASK>
[  157.433972][ T7322] netlink: 'syz.3.572': attribute type 10 has an invalid length.
[  157.442581][ T7322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.572'.
[  157.601850][ T7328] netlink: 'syz.3.574': attribute type 10 has an invalid length.
[  157.845975][   T51] Bluetooth: hci2: ISO packet for unknown connection handle 1854
[  158.868206][ T7353] netlink: 'syz.2.583': attribute type 10 has an invalid length.
[  158.887942][ T7353] netlink: 2 bytes leftover after parsing attributes in process `syz.2.583'.
[  159.024429][ T7360] netlink: 'syz.2.586': attribute type 10 has an invalid length.
[  159.035354][ T7359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.585'.
[  161.150792][ T7392] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[  161.159940][ T7392] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.598'.
[  161.171424][ T7392] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[  161.202723][ T7392] netlink: 'syz.1.598': attribute type 29 has an invalid length.
[  162.195878][ T7385] netlink: 'syz.2.595': attribute type 10 has an invalid length.
[  162.203824][ T7385] netlink: 2 bytes leftover after parsing attributes in process `syz.2.595'.
[  162.213942][ T7390] netlink: 'syz.3.597': attribute type 10 has an invalid length.
[  162.222006][ T7392] netlink: 'syz.1.598': attribute type 29 has an invalid length.
[  162.444129][ T7407] netlink: 'syz.0.602': attribute type 9 has an invalid length.
[  162.462843][ T7407] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.602'.
[  162.629183][ T7414] netlink: 'syz.2.605': attribute type 10 has an invalid length.
[  162.823946][ T7421] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.607'.
[  162.853679][ T7423] netlink: 'syz.0.608': attribute type 10 has an invalid length.
[  162.866469][ T7420] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.607'.
[  162.939220][ T7425] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[  162.955464][ T7425] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.609'.
[  162.977712][ T7428] netlink: 2 bytes leftover after parsing attributes in process `syz.3.610'.
[  163.193523][ T7436] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.614'.
[  163.767131][ T7464] netlink: 2 bytes leftover after parsing attributes in process `syz.0.622'.
[  163.780038][ T7462] netlink: 209024 bytes leftover after parsing attributes in process `syz.1.623'.
[  163.817337][ T7462] openvswitch: netlink: Flow key attr not present in new flow.
[  166.817090][ T7539] validate_nla: 43 callbacks suppressed
[  166.817107][ T7539] netlink: 'syz.2.652': attribute type 9 has an invalid length.
[  166.835051][ T7539] __nla_validate_parse: 9 callbacks suppressed
[  166.835066][ T7539] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.652'.
[  167.014866][ T7545] netlink: 'syz.3.655': attribute type 1 has an invalid length.
[  167.042884][ T7545] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.655'.
[  167.058520][ T7545] netlink: 'syz.3.655': attribute type 1 has an invalid length.
[  167.073893][ T7548] netlink: 'syz.2.656': attribute type 9 has an invalid length.
[  167.083952][ T7548] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.656'.
[  167.109371][ T7545] netlink: 'syz.3.655': attribute type 29 has an invalid length.
[  167.124229][ T7545] netlink: 'syz.3.655': attribute type 29 has an invalid length.
[  167.149075][ T7545] netlink: 'syz.3.655': attribute type 29 has an invalid length.
[  167.166048][ T7545] netlink: 'syz.3.655': attribute type 29 has an invalid length.
[  167.182598][ T7545] netlink: 'syz.3.655': attribute type 29 has an invalid length.
[  167.999130][ T7560] netlink: 'syz.1.660': attribute type 10 has an invalid length.
[  168.189426][ T7571] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.663'.
[  168.208143][ T7571] bridge_slave_1: default FDB implementation only supports local addresses
[  168.228729][ T7572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.664'.
[  171.412565][ T7577] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.666'.
[  171.476085][ T7581] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.668'.
[  171.491851][ T7581] bridge_slave_1: entered promiscuous mode
[  171.624915][ T7581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.668'.
[  171.641721][ T7583] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.669'.
[  172.235341][ T7604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.676'.
[  172.932709][ T7612] validate_nla: 9 callbacks suppressed
[  172.932724][ T7612] netlink: 'syz.1.680': attribute type 10 has an invalid length.
[  172.992232][ T7614] netlink: 'syz.0.681': attribute type 9 has an invalid length.
[  173.007732][ T7614] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.681'.
[  173.128262][ T7618] netlink: 'syz.1.683': attribute type 10 has an invalid length.
[  173.176144][ T7620] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  173.209123][ T7620] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.684'.
[  173.238381][ T7620] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  173.272766][ T7623] netlink: 'syz.2.684': attribute type 29 has an invalid length.
[  173.305603][ T7623] netlink: 'syz.2.684': attribute type 29 has an invalid length.
[  173.349730][ T7620] netlink: 'syz.2.684': attribute type 29 has an invalid length.
[  173.368757][ T7620] netlink: 'syz.2.684': attribute type 29 has an invalid length.
[  173.389155][ T7620] netlink: 'syz.2.684': attribute type 29 has an invalid length.
[  173.804984][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.693'.
[  174.778387][ T7656] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.697'.
[  175.113610][ T7672] netlink: 2 bytes leftover after parsing attributes in process `syz.1.702'.
[  175.278891][ T7678] FAULT_INJECTION: forcing a failure.
[  175.278891][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.295778][ T7678] CPU: 0 PID: 7678 Comm: syz.1.705 Not tainted syzkaller #0
[  175.303212][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  175.313301][ T7678] Call Trace:
[  175.316617][ T7678]  <TASK>
[  175.319585][ T7678]  dump_stack_lvl+0x18c/0x250
[  175.324294][ T7678]  ? show_regs_print_info+0x20/0x20
[  175.329505][ T7678]  ? load_image+0x420/0x420
[  175.334030][ T7678]  ? __lock_acquire+0x7d80/0x7d80
[  175.339081][ T7678]  should_fail_ex+0x394/0x4c0
[  175.343788][ T7678]  _copy_from_user+0x2f/0xe0
[  175.348413][ T7678]  __copy_msghdr+0x388/0x560
[  175.353051][ T7678]  ___sys_sendmsg+0x214/0x360
[  175.357749][ T7678]  ? get_pid_task+0x20/0x1e0
[  175.362367][ T7678]  ? __sys_sendmsg+0x2b0/0x2b0
[  175.367170][ T7678]  ? __lock_acquire+0x7d80/0x7d80
[  175.372232][ T7678]  __se_sys_sendmsg+0x1d0/0x2c0
[  175.377104][ T7678]  ? __x64_sys_sendmsg+0x80/0x80
[  175.382088][ T7678]  ? lockdep_hardirqs_on+0x98/0x150
[  175.387328][ T7678]  do_syscall_64+0x55/0xb0
[  175.391760][ T7678]  ? clear_bhb_loop+0x40/0x90
[  175.396445][ T7678]  ? clear_bhb_loop+0x40/0x90
[  175.401150][ T7678]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.407060][ T7678] RIP: 0033:0x7f743f19de59
[  175.411536][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.431166][ T7678] RSP: 002b:00007f7440006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.439594][ T7678] RAX: ffffffffffffffda RBX: 00007f743f425fa0 RCX: 00007f743f19de59
[  175.447580][ T7678] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  175.455568][ T7678] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  175.463558][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.471546][ T7678] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  175.479550][ T7678]  </TASK>
[  175.935430][ T7692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.708'.
[  176.111127][ T7696] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.711'.
[  176.446701][ T7699] netlink: 2 bytes leftover after parsing attributes in process `syz.3.713'.
[  177.435428][ T7729] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.722'.
[  177.620069][ T7731] FAULT_INJECTION: forcing a failure.
[  177.620069][ T7731] name failslab, interval 1, probability 0, space 0, times 0
[  177.633393][ T7731] CPU: 1 PID: 7731 Comm: syz.3.723 Not tainted syzkaller #0
[  177.640728][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  177.650826][ T7731] Call Trace:
[  177.654147][ T7731]  <TASK>
[  177.657111][ T7731]  dump_stack_lvl+0x18c/0x250
[  177.661866][ T7731]  ? show_regs_print_info+0x20/0x20
[  177.667108][ T7731]  ? load_image+0x420/0x420
[  177.671651][ T7731]  ? __might_sleep+0xe0/0xe0
[  177.676283][ T7731]  ? __lock_acquire+0x7d80/0x7d80
[  177.681366][ T7731]  should_fail_ex+0x394/0x4c0
[  177.686115][ T7731]  should_failslab+0x9/0x20
[  177.690675][ T7731]  slab_pre_alloc_hook+0x59/0x300
[  177.695757][ T7731]  ? __lock_acquire+0x7d80/0x7d80
[  177.700827][ T7731]  kmem_cache_alloc_node+0x5e/0x310
[  177.706100][ T7731]  ? __alloc_skb+0x103/0x2c0
[  177.710743][ T7731]  __alloc_skb+0x103/0x2c0
[  177.715212][ T7731]  netlink_sendmsg+0x66a/0xbf0
[  177.720036][ T7731]  ? netlink_getsockopt+0x590/0x590
[  177.725296][ T7731]  ? netlink_getsockopt+0x590/0x590
[  177.730551][ T7731]  ____sys_sendmsg+0x61b/0x980
[  177.735380][ T7731]  ? __asan_memset+0x22/0x40
[  177.740039][ T7731]  ? __sys_sendmsg_sock+0x30/0x30
[  177.745119][ T7731]  ? __import_iovec+0x5f2/0x850
[  177.750030][ T7731]  ? import_iovec+0x73/0xa0
[  177.754573][ T7731]  ___sys_sendmsg+0x2a6/0x360
[  177.759301][ T7731]  ? __sys_sendmsg+0x2b0/0x2b0
[  177.764154][ T7731]  __se_sys_sendmsg+0x1d0/0x2c0
[  177.769059][ T7731]  ? perf_trace_preemptirq_template+0x269/0x330
[  177.775348][ T7731]  ? __x64_sys_sendmsg+0x80/0x80
[  177.780360][ T7731]  ? lockdep_hardirqs_on+0x98/0x150
[  177.785620][ T7731]  do_syscall_64+0x55/0xb0
[  177.790175][ T7731]  ? clear_bhb_loop+0x40/0x90
[  177.794890][ T7731]  ? clear_bhb_loop+0x40/0x90
[  177.799647][ T7731]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.805603][ T7731] RIP: 0033:0x7fd29779de59
[  177.810111][ T7731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.818480][ T7736] netlink: 2 bytes leftover after parsing attributes in process `syz.0.724'.
[  177.829862][ T7731] RSP: 002b:00007fd298585028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.829889][ T7731] RAX: ffffffffffffffda RBX: 00007fd297a25fa0 RCX: 00007fd29779de59
[  177.829904][ T7731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  177.829917][ T7731] RBP: 00007fd298585090 R08: 0000000000000000 R09: 0000000000000000
[  177.829947][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.829960][ T7731] R13: 00007fd297a26038 R14: 00007fd297a25fa0 R15: 00007ffdc8e73e98
[  177.830023][ T7731]  </TASK>
[  178.159077][ T7741] validate_nla: 28 callbacks suppressed
[  178.159094][ T7741] netlink: 'syz.2.725': attribute type 9 has an invalid length.
[  178.215607][ T7741] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.725'.
[  178.649700][ T7753] netlink: 'syz.3.730': attribute type 10 has an invalid length.
[  178.787604][ T7758] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  178.795564][ T7758] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.731'.
[  178.812217][ T7758] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  178.846523][ T7758] netlink: 'syz.1.731': attribute type 29 has an invalid length.
[  178.879164][ T7758] netlink: 'syz.1.731': attribute type 29 has an invalid length.
[  178.938353][ T7761] netlink: 'syz.1.731': attribute type 29 has an invalid length.
[  178.961686][ T7758] netlink: 'syz.1.731': attribute type 29 has an invalid length.
[  179.012167][ T7761] netlink: 'syz.1.731': attribute type 29 has an invalid length.
[  179.435753][ T7772] netlink: 'syz.1.734': attribute type 10 has an invalid length.
[  179.444390][ T7772] netlink: 2 bytes leftover after parsing attributes in process `syz.1.734'.
[  179.547255][ T7775] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.736'.
[  179.683394][ T7780] netlink: 56 bytes leftover after parsing attributes in process `syz.2.738'.
[  179.851775][ T7788] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.742'.
[  180.026924][ T7792] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  180.054156][ T7792] team0: Port device wlan1 added
[  180.179349][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'.
[  180.390533][ T7805] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.747'.
[  180.807586][ T7818] FAULT_INJECTION: forcing a failure.
[  180.807586][ T7818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.822983][ T7818] CPU: 0 PID: 7818 Comm: syz.0.752 Not tainted syzkaller #0
[  180.830324][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  180.840422][ T7818] Call Trace:
[  180.843733][ T7818]  <TASK>
[  180.846685][ T7818]  dump_stack_lvl+0x18c/0x250
[  180.851491][ T7818]  ? show_regs_print_info+0x20/0x20
[  180.856738][ T7818]  ? load_image+0x420/0x420
[  180.861282][ T7818]  ? __might_fault+0xaa/0x120
[  180.866014][ T7818]  ? __lock_acquire+0x7d80/0x7d80
[  180.871099][ T7818]  should_fail_ex+0x394/0x4c0
[  180.875876][ T7818]  _copy_from_iter+0x1cd/0x1290
[  180.880768][ T7818]  ? sock_alloc_send_pskb+0x8a1/0x9a0
[  180.886189][ T7818]  ? copyout_mc+0x70/0x70
[  180.890561][ T7818]  ? __virt_addr_valid+0x10c/0x380
[  180.895717][ T7818]  ? __virt_addr_valid+0x10c/0x380
[  180.900865][ T7818]  ? __virt_addr_valid+0x10c/0x380
[  180.906022][ T7818]  ? __check_object_size+0x4fc/0xa40
[  180.911376][ T7818]  skb_copy_datagram_from_iter+0xf2/0x6f0
[  180.917123][ T7818]  ? skb_put+0x112/0x210
[  180.921402][ T7818]  tun_get_user+0xbc2/0x3d40
[  180.926027][ T7818]  ? aa_file_perm+0x11b/0xee0
[  180.930736][ T7818]  ? aa_file_perm+0x3e3/0xee0
[  180.935442][ T7818]  ? rcu_read_unlock+0xa0/0xa0
[  180.940241][ T7818]  ? tun_get+0x1c/0x2e0
[  180.944425][ T7818]  ? __lock_acquire+0x7d80/0x7d80
[  180.949474][ T7818]  ? tun_get+0x1c/0x2e0
[  180.953670][ T7818]  tun_chr_write_iter+0x119/0x200
[  180.958710][ T7818]  vfs_write+0x474/0x9a0
[  180.962980][ T7818]  ? file_end_write+0x250/0x250
[  180.967855][ T7818]  ? __fget_files+0x3fc/0x460
[  180.972553][ T7818]  ? __fdget_pos+0x1d8/0x330
[  180.977154][ T7818]  ? ksys_write+0x74/0x260
[  180.981586][ T7818]  ksys_write+0x151/0x260
[  180.985959][ T7818]  ? __ia32_sys_read+0x90/0x90
[  180.990752][ T7818]  ? lockdep_hardirqs_on+0x98/0x150
[  180.996000][ T7818]  do_syscall_64+0x55/0xb0
[  181.000448][ T7818]  ? clear_bhb_loop+0x40/0x90
[  181.005164][ T7818]  ? clear_bhb_loop+0x40/0x90
[  181.009858][ T7818]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.015807][ T7818] RIP: 0033:0x7f68b7f9de59
[  181.020246][ T7818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.039873][ T7818] RSP: 002b:00007f68b8e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  181.048325][ T7818] RAX: ffffffffffffffda RBX: 00007f68b8225fa0 RCX: 00007f68b7f9de59
[  181.056311][ T7818] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8
[  181.064291][ T7818] RBP: 00007f68b8e32090 R08: 0000000000000000 R09: 0000000000000000
[  181.072272][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.080259][ T7818] R13: 00007f68b8226038 R14: 00007f68b8225fa0 R15: 00007fff1f844878
[  181.088272][ T7818]  </TASK>
[  182.232352][ T7854] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  182.253944][ T7854] team0: Port device wlan1 added
[  182.269554][ T7857] sit0: entered allmulticast mode
[  182.679914][ T7872] __nla_validate_parse: 5 callbacks suppressed
[  182.679932][ T7872] netlink: 2 bytes leftover after parsing attributes in process `syz.0.770'.
[  183.693265][ T7889] validate_nla: 34 callbacks suppressed
[  183.693281][ T7889] netlink: 'syz.0.782': attribute type 9 has an invalid length.
[  183.694583][ T7888] netlink: 'syz.3.775': attribute type 10 has an invalid length.
[  183.707991][ T7889] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.782'.
[  183.843711][ T7892] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[  183.867994][ T7892] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.776'.
[  183.877255][ T7892] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[  183.934248][ T7892] netlink: 'syz.1.776': attribute type 29 has an invalid length.
[  183.962339][ T7892] netlink: 'syz.1.776': attribute type 29 has an invalid length.
[  183.977582][ T7892] netlink: 'syz.1.776': attribute type 29 has an invalid length.
[  183.997634][ T7892] netlink: 'syz.1.776': attribute type 29 has an invalid length.
[  184.042696][ T7892] netlink: 'syz.1.776': attribute type 29 has an invalid length.
[  184.084350][ T7899] netlink: 176 bytes leftover after parsing attributes in process `syz.2.779'.
[  184.186531][ T7903] netlink: 'syz.0.780': attribute type 10 has an invalid length.
[  184.600193][ T7913] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.784'.
[  184.977949][ T7919] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.786'.
[  185.922662][ T7936] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.791'.
[  185.942604][ T7938] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.793'.
[  186.077398][ T7941] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.795'.
[  187.061163][ T7959] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.802'.
[  187.278690][ T7971] sit0: entered allmulticast mode
[  187.810652][ T7979] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.805'.
[  187.886914][ T7981] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.806'.
[  188.385127][ T7992] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.812'.
[  189.473531][ T8004] validate_nla: 27 callbacks suppressed
[  189.473548][ T8004] netlink: 'syz.0.816': attribute type 9 has an invalid length.
[  189.492041][ T8004] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.816'.
[  189.541319][ T8007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'.
[  189.601958][ T8009] sit0: entered allmulticast mode
[  189.954808][ T8014] netlink: 'syz.1.818': attribute type 10 has an invalid length.
[  190.248837][ T8021] netlink: 'syz.3.820': attribute type 4 has an invalid length.
[  190.277207][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'.
[  190.615806][ T8027] netlink: 'syz.2.822': attribute type 9 has an invalid length.
[  190.639303][ T8027] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.822'.
[  191.086852][ T8039] netlink: 'syz.2.834': attribute type 9 has an invalid length.
[  191.094869][ T8039] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.834'.
[  191.651951][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'.
[  191.704956][ T8057] FAULT_INJECTION: forcing a failure.
[  191.704956][ T8057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.719563][ T8057] CPU: 1 PID: 8057 Comm: syz.1.833 Not tainted syzkaller #0
[  191.726945][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  191.737066][ T8057] Call Trace:
[  191.740461][ T8057]  <TASK>
[  191.743456][ T8057]  dump_stack_lvl+0x18c/0x250
[  191.748218][ T8057]  ? show_regs_print_info+0x20/0x20
[  191.753488][ T8057]  ? load_image+0x420/0x420
[  191.758092][ T8057]  ? __lock_acquire+0x7d80/0x7d80
[  191.763195][ T8057]  ? snprintf+0xe9/0x140
[  191.767509][ T8057]  should_fail_ex+0x394/0x4c0
[  191.772319][ T8057]  _copy_to_user+0x2f/0xa0
[  191.776831][ T8057]  simple_read_from_buffer+0xe7/0x150
[  191.782309][ T8057]  proc_fail_nth_read+0x1e8/0x260
[  191.787409][ T8057]  ? proc_fault_inject_write+0x360/0x360
[  191.793115][ T8057]  ? fsnotify_perm+0x271/0x5e0
[  191.797935][ T8057]  ? proc_fault_inject_write+0x360/0x360
[  191.803629][ T8057]  vfs_read+0x298/0x990
[  191.807871][ T8057]  ? kernel_read+0x1e0/0x1e0
[  191.812527][ T8057]  ? __fget_files+0x28/0x460
[  191.817174][ T8057]  ? __fget_files+0x3fc/0x460
[  191.821951][ T8057]  ? __fdget_pos+0x2a3/0x330
[  191.826581][ T8057]  ? ksys_read+0x74/0x260
[  191.830967][ T8057]  ksys_read+0x151/0x260
[  191.835289][ T8057]  ? vfs_write+0x9a0/0x9a0
[  191.839763][ T8057]  ? lockdep_hardirqs_on+0x98/0x150
[  191.845006][ T8057]  do_syscall_64+0x55/0xb0
[  191.849479][ T8057]  ? clear_bhb_loop+0x40/0x90
[  191.854196][ T8057]  ? clear_bhb_loop+0x40/0x90
[  191.858918][ T8057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.864858][ T8057] RIP: 0033:0x7f743f15e68e
[  191.869332][ T8057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  191.888979][ T8057] RSP: 002b:00007f7440005fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  191.897433][ T8057] RAX: ffffffffffffffda RBX: 00007f74400066c0 RCX: 00007f743f15e68e
[  191.905433][ T8057] RDX: 000000000000000f RSI: 00007f74400060a0 RDI: 0000000000000005
[  191.913433][ T8057] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  191.921430][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.929433][ T8057] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  191.937467][ T8057]  </TASK>
[  192.345831][ T8065] netlink: 'syz.1.837': attribute type 9 has an invalid length.
[  192.364343][ T8065] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.837'.
[  193.149699][ T8086] FAULT_INJECTION: forcing a failure.
[  193.149699][ T8086] name failslab, interval 1, probability 0, space 0, times 0
[  193.173021][ T8086] CPU: 0 PID: 8086 Comm: syz.2.843 Not tainted syzkaller #0
[  193.180399][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  193.190531][ T8086] Call Trace:
[  193.193881][ T8086]  <TASK>
[  193.196871][ T8086]  dump_stack_lvl+0x18c/0x250
[  193.201638][ T8086]  ? show_regs_print_info+0x20/0x20
[  193.206922][ T8086]  ? load_image+0x420/0x420
[  193.211524][ T8086]  ? __lock_acquire+0x7d80/0x7d80
[  193.216646][ T8086]  ? trace_event_raw_event_lock+0x240/0x240
[  193.222631][ T8086]  should_fail_ex+0x394/0x4c0
[  193.227402][ T8086]  should_failslab+0x9/0x20
[  193.231974][ T8086]  slab_pre_alloc_hook+0x59/0x300
[  193.237071][ T8086]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  193.242677][ T8086]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  193.248288][ T8086]  __kmem_cache_alloc_node+0x53/0x250
[  193.253761][ T8086]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  193.259377][ T8086]  __kmalloc+0xa7/0x240
[  193.263616][ T8086]  bpf_prog_test_run_skb+0x242/0x18f0
[  193.269088][ T8086]  ? __fget_files+0x28/0x460
[  193.273751][ T8086]  ? __fget_files+0x3fc/0x460
[  193.278532][ T8086]  ? cpu_online+0x60/0x60
[  193.282932][ T8086]  bpf_prog_test_run+0x31f/0x390
[  193.287967][ T8086]  __sys_bpf+0x49d/0x890
[  193.292306][ T8086]  ? bpf_link_show_fdinfo+0x390/0x390
[  193.297798][ T8086]  ? lock_chain_count+0x20/0x20
[  193.302759][ T8086]  __x64_sys_bpf+0x7c/0x90
[  193.307244][ T8086]  do_syscall_64+0x55/0xb0
[  193.311724][ T8086]  ? clear_bhb_loop+0x40/0x90
[  193.316465][ T8086]  ? clear_bhb_loop+0x40/0x90
[  193.321216][ T8086]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.327189][ T8086] RIP: 0033:0x7fde13b9de59
[  193.331665][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.351507][ T8086] RSP: 002b:00007fde14a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  193.360033][ T8086] RAX: ffffffffffffffda RBX: 00007fde13e25fa0 RCX: 00007fde13b9de59
[  193.368070][ T8086] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  193.376102][ T8086] RBP: 00007fde14a66090 R08: 0000000000000000 R09: 0000000000000000
[  193.384132][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.392153][ T8086] R13: 00007fde13e26038 R14: 00007fde13e25fa0 R15: 00007fff2f6bf858
[  193.400253][ T8086]  </TASK>
[  193.553484][ T8092] netlink: 'syz.3.846': attribute type 9 has an invalid length.
[  193.563605][ T8092] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.846'.
[  193.611800][ T8094] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[  193.634109][ T8094] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.845'.
[  193.670335][ T8094] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[  193.721663][ T8097] netlink: 'syz.0.845': attribute type 29 has an invalid length.
[  193.788693][ T8101] syzkaller0: entered promiscuous mode
[  193.794370][ T8101] syzkaller0: entered allmulticast mode
[  193.809256][ T8102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.847'.
[  194.413243][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.427979][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.831649][ T8115] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.852'.
[  195.884361][ T8115] validate_nla: 4 callbacks suppressed
[  195.884375][ T8115] netlink: 'syz.2.852': attribute type 21 has an invalid length.
[  195.897968][ T8115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.852'.
[  195.908089][ T8119] netlink: 'syz.0.851': attribute type 4 has an invalid length.
[  195.915780][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'.
[  195.945806][ T8123] netlink: 'syz.3.853': attribute type 10 has an invalid length.
[  195.961032][ T8123] netlink: 2 bytes leftover after parsing attributes in process `syz.3.853'.
[  196.242966][ T8134] netlink: 'syz.3.857': attribute type 9 has an invalid length.
[  196.272101][ T8134] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.857'.
[  196.861729][ T8148] FAULT_INJECTION: forcing a failure.
[  196.861729][ T8148] name failslab, interval 1, probability 0, space 0, times 0
[  196.888173][ T8148] CPU: 1 PID: 8148 Comm: syz.2.862 Not tainted syzkaller #0
[  196.895557][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  196.905664][ T8148] Call Trace:
[  196.908988][ T8148]  <TASK>
[  196.911961][ T8148]  dump_stack_lvl+0x18c/0x250
[  196.916706][ T8148]  ? show_regs_print_info+0x20/0x20
[  196.921978][ T8148]  ? load_image+0x420/0x420
[  196.926580][ T8148]  ? __lock_acquire+0x7d80/0x7d80
[  196.931657][ T8148]  ? __asan_memset+0x22/0x40
[  196.936393][ T8148]  should_fail_ex+0x394/0x4c0
[  196.941212][ T8148]  should_failslab+0x9/0x20
[  196.945768][ T8148]  slab_pre_alloc_hook+0x59/0x300
[  196.950870][ T8148]  kmem_cache_alloc+0x5a/0x2c0
[  196.955691][ T8148]  ? security_inode_alloc+0x34/0x110
[  196.961026][ T8148]  security_inode_alloc+0x34/0x110
[  196.966190][ T8148]  inode_init_always+0x914/0xc90
[  196.971173][ T8148]  new_inode_pseudo+0x95/0x1d0
[  196.975960][ T8148]  __ns_get_path+0x249/0x5f0
[  196.980587][ T8148]  ns_get_path+0x54/0x90
[  196.984873][ T8148]  proc_ns_get_link+0xf8/0x240
[  196.989749][ T8148]  ? proc_ns_instantiate+0xf0/0xf0
[  196.994892][ T8148]  ? bpf_lsm_inode_follow_link+0x9/0x10
[  197.000468][ T8148]  ? security_inode_follow_link+0xb7/0x100
[  197.006323][ T8148]  ? proc_ns_instantiate+0xf0/0xf0
[  197.011475][ T8148]  pick_link+0x666/0xdd0
[  197.015772][ T8148]  step_into+0xc18/0xee0
[  197.020066][ T8148]  ? rcu_read_lock_any_held+0xb4/0x140
[  197.025562][ T8148]  ? rcu_read_lock_bh_held+0x100/0x100
[  197.031060][ T8148]  ? set_root+0x3a0/0x3a0
[  197.035464][ T8148]  ? d_splice_alias+0x114/0x330
[  197.040359][ T8148]  path_openat+0x1656/0x3270
[  197.045025][ T8148]  ? do_filp_open+0x430/0x430
[  197.049723][ T8148]  ? perf_trace_lock_acquire+0x105/0x400
[  197.055399][ T8148]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  197.062027][ T8148]  do_filp_open+0x1f2/0x430
[  197.066564][ T8148]  ? vfs_tmpfile+0x480/0x480
[  197.071222][ T8148]  ? _raw_spin_unlock+0x28/0x40
[  197.076103][ T8148]  ? alloc_fd+0x590/0x640
[  197.080484][ T8148]  do_sys_openat2+0x134/0x1d0
[  197.085196][ T8148]  ? do_sys_open+0xe0/0xe0
[  197.089641][ T8148]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  197.095695][ T8148]  ? lock_chain_count+0x20/0x20
[  197.100599][ T8148]  __x64_sys_openat+0x139/0x160
[  197.105500][ T8148]  do_syscall_64+0x55/0xb0
[  197.109972][ T8148]  ? clear_bhb_loop+0x40/0x90
[  197.114674][ T8148]  ? clear_bhb_loop+0x40/0x90
[  197.119373][ T8148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.125293][ T8148] RIP: 0033:0x7fde13b5e68e
[  197.129756][ T8148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  197.149385][ T8148] RSP: 002b:00007fde14a65ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  197.157830][ T8148] RAX: ffffffffffffffda RBX: 00007fde14a666c0 RCX: 00007fde13b5e68e
[  197.165823][ T8148] RDX: 0000000000000002 RSI: 00007fde14a65f90 RDI: ffffffffffffff9c
[  197.173809][ T8148] RBP: 00007fde14a66090 R08: 0000000000000000 R09: 0000000000000000
[  197.181825][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.189819][ T8148] R13: 00007fde13e26038 R14: 00007fde13e25fa0 R15: 00007fff2f6bf858
[  197.197869][ T8148]  </TASK>
[  197.350631][ T8157] netlink: 'syz.0.865': attribute type 10 has an invalid length.
[  197.378978][ T8157] netlink: 2 bytes leftover after parsing attributes in process `syz.0.865'.
[  197.414334][ T8156] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[  197.440760][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[  198.184368][ T8164] netlink: 'syz.3.867': attribute type 9 has an invalid length.
[  198.836560][ T8168] netlink: 'syz.0.876': attribute type 10 has an invalid length.
[  198.888172][ T8168] __nla_validate_parse: 2 callbacks suppressed
[  198.888188][ T8168] netlink: 2 bytes leftover after parsing attributes in process `syz.0.876'.
[  199.382244][ T8189] netlink: 'syz.2.873': attribute type 10 has an invalid length.
[  199.640846][ T8197] netlink: 'syz.1.874': attribute type 9 has an invalid length.
[  199.660849][ T8197] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.874'.
[  200.183612][ T8213] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.879'.
[  200.449489][ T8226] netlink: 2 bytes leftover after parsing attributes in process `syz.2.881'.
[  200.493478][ T8229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.882'.
[  200.571114][ T8231] FAULT_INJECTION: forcing a failure.
[  200.571114][ T8231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.586105][ T8231] CPU: 1 PID: 8231 Comm: syz.1.884 Not tainted syzkaller #0
[  200.593479][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  200.603603][ T8231] Call Trace:
[  200.606929][ T8231]  <TASK>
[  200.609937][ T8231]  dump_stack_lvl+0x18c/0x250
[  200.614702][ T8231]  ? show_regs_print_info+0x20/0x20
[  200.620040][ T8231]  ? load_image+0x420/0x420
[  200.624627][ T8231]  ? __might_fault+0xaa/0x120
[  200.629381][ T8231]  ? __lock_acquire+0x7d80/0x7d80
[  200.634501][ T8231]  should_fail_ex+0x394/0x4c0
[  200.639287][ T8231]  _copy_from_iter+0x1cd/0x1290
[  200.644228][ T8231]  ? sock_alloc_send_pskb+0x8a1/0x9a0
[  200.649692][ T8231]  ? copyout_mc+0x70/0x70
[  200.654090][ T8231]  ? __virt_addr_valid+0x10c/0x380
[  200.659276][ T8231]  ? __virt_addr_valid+0x10c/0x380
[  200.664457][ T8231]  ? __virt_addr_valid+0x10c/0x380
[  200.669619][ T8231]  ? __check_object_size+0x4fc/0xa40
[  200.674962][ T8231]  skb_copy_datagram_from_iter+0xf2/0x6f0
[  200.680750][ T8231]  ? skb_put+0x112/0x210
[  200.685046][ T8231]  tun_get_user+0xbc2/0x3d40
[  200.689707][ T8231]  ? aa_file_perm+0x11b/0xee0
[  200.694463][ T8231]  ? aa_file_perm+0x3e3/0xee0
[  200.699196][ T8231]  ? rcu_read_unlock+0xa0/0xa0
[  200.704033][ T8231]  ? tun_get+0x1c/0x2e0
[  200.708251][ T8231]  ? __lock_acquire+0x7d80/0x7d80
[  200.713385][ T8231]  ? tun_get+0x1c/0x2e0
[  200.717617][ T8231]  tun_chr_write_iter+0x119/0x200
[  200.722701][ T8231]  vfs_write+0x474/0x9a0
[  200.727001][ T8231]  ? file_end_write+0x250/0x250
[  200.731916][ T8231]  ? __fget_files+0x3fc/0x460
[  200.736647][ T8231]  ? __fdget_pos+0x1d8/0x330
[  200.741270][ T8231]  ? ksys_write+0x74/0x260
[  200.745736][ T8231]  ksys_write+0x151/0x260
[  200.750143][ T8231]  ? __ia32_sys_read+0x90/0x90
[  200.754980][ T8231]  ? lockdep_hardirqs_on+0x98/0x150
[  200.760268][ T8231]  do_syscall_64+0x55/0xb0
[  200.764747][ T8231]  ? clear_bhb_loop+0x40/0x90
[  200.769461][ T8231]  ? clear_bhb_loop+0x40/0x90
[  200.774181][ T8231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.780138][ T8231] RIP: 0033:0x7f743f19de59
[  200.784600][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.804260][ T8231] RSP: 002b:00007f7440006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  200.812839][ T8231] RAX: ffffffffffffffda RBX: 00007f743f425fa0 RCX: 00007f743f19de59
[  200.820849][ T8231] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8
[  200.828857][ T8231] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  200.836862][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.844866][ T8231] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  200.852997][ T8231]  </TASK>
[  200.943725][ T8233] validate_nla: 5 callbacks suppressed
[  200.943740][ T8233] netlink: 'syz.2.885': attribute type 9 has an invalid length.
[  200.985478][ T8233] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.885'.
[  201.365061][ T8243] netlink: 'syz.2.889': attribute type 9 has an invalid length.
[  201.403286][ T8243] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.889'.
[  201.508972][ T8245] netlink: 'syz.0.888': attribute type 10 has an invalid length.
[  201.735618][ T8251] netlink: 'syz.2.891': attribute type 10 has an invalid length.
[  201.837981][ T8259] netlink: 'syz.1.893': attribute type 10 has an invalid length.
[  201.859173][ T8259] netlink: 2 bytes leftover after parsing attributes in process `syz.1.893'.
[  202.365343][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.898'.
[  202.433042][ T8277] netlink: 'syz.1.899': attribute type 9 has an invalid length.
[  202.463155][ T8277] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.899'.
[  202.952070][ T8287] netlink: 'syz.2.902': attribute type 40 has an invalid length.
[  203.000429][ T8287] netlink: 'syz.2.902': attribute type 3 has an invalid length.
[  203.100939][ T8290] netlink: 'syz.3.903': attribute type 10 has an invalid length.
[  203.297694][ T8298] netlink: 'syz.2.905': attribute type 10 has an invalid length.
[  204.584606][ T8344] __nla_validate_parse: 4 callbacks suppressed
[  204.584624][ T8344] netlink: 2 bytes leftover after parsing attributes in process `syz.0.918'.
[  204.787600][ T8347] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.919'.
[  204.951373][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.922'.
[  205.144661][ T8366] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.924'.
[  206.038241][ T8385] validate_nla: 11 callbacks suppressed
[  206.038260][ T8385] netlink: 'syz.0.930': attribute type 10 has an invalid length.
[  206.078227][ T8385] netlink: 2 bytes leftover after parsing attributes in process `syz.0.930'.
[  206.147601][ T8387] netlink: 'syz.3.931': attribute type 9 has an invalid length.
[  206.155721][ T8387] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.931'.
[  206.339868][ T8390] netlink: 'syz.1.932': attribute type 10 has an invalid length.
[  206.478276][ T8396] netlink: 'syz.0.935': attribute type 10 has an invalid length.
[  206.698327][ T8404] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  206.711044][ T8406] netlink: 'syz.2.938': attribute type 10 has an invalid length.
[  206.719089][ T5085] Bluetooth: hci0: command 0x0406 tx timeout
[  206.724530][ T5085] Bluetooth: hci2: command 0x0406 tx timeout
[  206.734592][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  206.740701][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  207.000732][ T8414] netlink: 'syz.1.942': attribute type 9 has an invalid length.
[  207.018805][ T8414] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.942'.
[  207.228078][ T8423] netlink: 'syz.0.944': attribute type 10 has an invalid length.
[  207.261485][ T8423] netlink: 2 bytes leftover after parsing attributes in process `syz.0.944'.
[  207.586033][ T8432] netlink: 'syz.0.948': attribute type 10 has an invalid length.
[  207.609539][ T8434] netlink: 'syz.3.949': attribute type 10 has an invalid length.
[  207.799534][ T8440] netlink: 'syz.1.958': attribute type 10 has an invalid length.
[  208.097022][ T8450] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.954'.
[  208.222720][ T8454] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  210.994543][ T8467] netlink: 2 bytes leftover after parsing attributes in process `syz.3.959'.
[  211.081731][ T8471] validate_nla: 3 callbacks suppressed
[  211.081757][ T8471] netlink: 'syz.2.961': attribute type 1 has an invalid length.
[  211.106405][ T8471] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.961'.
[  211.138073][ T8471] netlink: 'syz.2.961': attribute type 1 has an invalid length.
[  211.152536][ T8473] netlink: 'syz.1.962': attribute type 1 has an invalid length.
[  211.173242][ T8471] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  211.188122][ T8473] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.962'.
[  211.199231][ T8471] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  211.211182][ T8479] netlink: 'syz.3.963': attribute type 10 has an invalid length.
[  211.221208][ T8473] netlink: 'syz.1.962': attribute type 1 has an invalid length.
[  211.231863][ T8471] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  211.273368][ T8471] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  211.281984][ T8473] netlink: 'syz.1.962': attribute type 29 has an invalid length.
[  211.413827][ T8481] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.964'.
[  211.563070][ T8485] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.973'.
[  211.576189][ T8486] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.966'.
[  211.964375][ T8499] netlink: 2 bytes leftover after parsing attributes in process `syz.1.971'.
[  212.023256][ T8501] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.972'.
[  212.481184][ T8514] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.978'.
[  212.511382][ T8516] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.977'.
[  214.410909][ T8568] FAULT_INJECTION: forcing a failure.
[  214.410909][ T8568] name failslab, interval 1, probability 0, space 0, times 0
[  214.488087][ T8568] CPU: 0 PID: 8568 Comm: syz.0.997 Not tainted syzkaller #0
[  214.495441][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  214.505525][ T8568] Call Trace:
[  214.508844][ T8568]  <TASK>
[  214.511805][ T8568]  dump_stack_lvl+0x18c/0x250
[  214.516540][ T8568]  ? show_regs_print_info+0x20/0x20
[  214.521787][ T8568]  ? load_image+0x420/0x420
[  214.526327][ T8568]  ? __might_sleep+0xe0/0xe0
[  214.530963][ T8568]  ? __lock_acquire+0x7d80/0x7d80
[  214.536038][ T8568]  should_fail_ex+0x394/0x4c0
[  214.540778][ T8568]  should_failslab+0x9/0x20
[  214.545336][ T8568]  slab_pre_alloc_hook+0x59/0x300
[  214.550416][ T8568]  ? tomoyo_encode+0x2ad/0x570
[  214.555209][ T8568]  ? tomoyo_encode+0x2ad/0x570
[  214.560016][ T8568]  __kmem_cache_alloc_node+0x53/0x250
[  214.565425][ T8568]  ? tomoyo_encode+0x2ad/0x570
[  214.570194][ T8568]  __kmalloc+0xa7/0x240
[  214.574362][ T8568]  tomoyo_encode+0x2ad/0x570
[  214.578956][ T8568]  tomoyo_realpath_from_path+0x57c/0x5c0
[  214.584616][ T8568]  ? tomoyo_domain+0xd6/0x120
[  214.589319][ T8568]  tomoyo_path_number_perm+0x248/0x5e0
[  214.594801][ T8568]  ? tomoyo_path_number_perm+0x217/0x5e0
[  214.600451][ T8568]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  214.605950][ T8568]  ? ksys_write+0x1d2/0x260
[  214.610531][ T8568]  ? __fget_files+0x28/0x460
[  214.615184][ T8568]  security_file_ioctl+0x70/0xa0
[  214.620173][ T8568]  __se_sys_ioctl+0x48/0x170
[  214.624814][ T8568]  do_syscall_64+0x55/0xb0
[  214.629263][ T8568]  ? clear_bhb_loop+0x40/0x90
[  214.633970][ T8568]  ? clear_bhb_loop+0x40/0x90
[  214.638674][ T8568]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.644617][ T8568] RIP: 0033:0x7f68b7f9de59
[  214.649066][ T8568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.668700][ T8568] RSP: 002b:00007f68b8df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.677147][ T8568] RAX: ffffffffffffffda RBX: 00007f68b8226180 RCX: 00007f68b7f9de59
[  214.685134][ T8568] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000008
[  214.693121][ T8568] RBP: 00007f68b8df0090 R08: 0000000000000000 R09: 0000000000000000
[  214.701146][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.709142][ T8568] R13: 00007f68b8226218 R14: 00007f68b8226180 R15: 00007fff1f844878
[  214.717164][ T8568]  </TASK>
[  214.748249][ T8568] ERROR: Out of memory at tomoyo_realpath_from_path.
[  216.252868][ T8589] validate_nla: 37 callbacks suppressed
[  216.252884][ T8589] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  216.270489][ T8589] __nla_validate_parse: 9 callbacks suppressed
[  216.270504][ T8589] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1006'.
[  216.286406][ T8589] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  216.304088][ T8588] netlink: 'syz.3.1003': attribute type 9 has an invalid length.
[  216.327910][ T8589] netlink: 'syz.2.1006': attribute type 29 has an invalid length.
[  216.333056][ T8588] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1003'.
[  216.366201][ T8589] netlink: 'syz.2.1006': attribute type 29 has an invalid length.
[  216.386882][ T8590] netlink: 'syz.2.1006': attribute type 29 has an invalid length.
[  216.410259][ T8592] netlink: 'syz.0.1007': attribute type 10 has an invalid length.
[  216.439628][ T8589] netlink: 'syz.2.1006': attribute type 29 has an invalid length.
[  216.457051][ T8589] netlink: 'syz.2.1006': attribute type 29 has an invalid length.
[  216.556520][ T8600] netlink: 'syz.3.1009': attribute type 10 has an invalid length.
[  216.741554][ T8601] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1010'.
[  216.866645][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'.
[  216.897842][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'.
[  216.971755][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'.
[  217.132563][ T8618] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1017'.
[  217.243711][ T8624] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1020'.
[  217.448906][ T8630] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1022'.
[  218.084699][ T8643] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1026'.
[  219.025700][ T8668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.103746][ T8669] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  219.158947][ T8669] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  219.167682][ T8669] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  220.548291][ T8717] tap0: tun_chr_ioctl cmd 1074025676
[  220.558039][ T8717] tap0: owner set to 776
[  221.459823][ T8722] validate_nla: 15 callbacks suppressed
[  221.459839][ T8722] netlink: 'syz.3.1057': attribute type 9 has an invalid length.
[  221.482182][ T8722] __nla_validate_parse: 11 callbacks suppressed
[  221.482197][ T8722] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1057'.
[  221.519516][ T8727] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  221.935681][ T8742] FAULT_INJECTION: forcing a failure.
[  221.935681][ T8742] name failslab, interval 1, probability 0, space 0, times 0
[  221.949454][ T8743] netlink: 'syz.1.1062': attribute type 9 has an invalid length.
[  221.957346][ T8743] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1062'.
[  221.973481][ T8742] CPU: 0 PID: 8742 Comm: syz.2.1064 Not tainted syzkaller #0
[  221.980909][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  221.991007][ T8742] Call Trace:
[  221.994333][ T8742]  <TASK>
[  221.997323][ T8742]  dump_stack_lvl+0x18c/0x250
[  222.002046][ T8742]  ? show_regs_print_info+0x20/0x20
[  222.007294][ T8742]  ? load_image+0x420/0x420
[  222.011833][ T8742]  ? __might_sleep+0xe0/0xe0
[  222.016461][ T8742]  ? __lock_acquire+0x7d80/0x7d80
[  222.021538][ T8742]  should_fail_ex+0x394/0x4c0
[  222.026271][ T8742]  should_failslab+0x9/0x20
[  222.030823][ T8742]  slab_pre_alloc_hook+0x59/0x300
[  222.035891][ T8742]  ? __lock_acquire+0x7d80/0x7d80
[  222.040963][ T8742]  kmem_cache_alloc_node+0x5e/0x310
[  222.046225][ T8742]  ? __alloc_skb+0x103/0x2c0
[  222.050863][ T8742]  __alloc_skb+0x103/0x2c0
[  222.055326][ T8742]  netlink_sendmsg+0x66a/0xbf0
[  222.060141][ T8742]  ? netlink_getsockopt+0x590/0x590
[  222.065389][ T8742]  ? aa_sock_msg_perm+0x94/0x150
[  222.070379][ T8742]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  222.075714][ T8742]  ? security_socket_sendmsg+0x80/0xa0
[  222.081205][ T8742]  ? netlink_getsockopt+0x590/0x590
[  222.086451][ T8742]  ____sys_sendmsg+0x61b/0x980
[  222.091258][ T8742]  ? __asan_memset+0x22/0x40
[  222.095896][ T8742]  ? __sys_sendmsg_sock+0x30/0x30
[  222.100973][ T8742]  ? __import_iovec+0x5f2/0x850
[  222.105897][ T8742]  ? import_iovec+0x73/0xa0
[  222.110442][ T8742]  ___sys_sendmsg+0x2a6/0x360
[  222.115165][ T8742]  ? get_pid_task+0x20/0x1e0
[  222.119797][ T8742]  ? __sys_sendmsg+0x2b0/0x2b0
[  222.124623][ T8742]  ? __lock_acquire+0x7d80/0x7d80
[  222.129725][ T8742]  __se_sys_sendmsg+0x1d0/0x2c0
[  222.134639][ T8742]  ? __x64_sys_sendmsg+0x80/0x80
[  222.139640][ T8742]  ? lockdep_hardirqs_on+0x98/0x150
[  222.144887][ T8742]  do_syscall_64+0x55/0xb0
[  222.149341][ T8742]  ? clear_bhb_loop+0x40/0x90
[  222.154056][ T8742]  ? clear_bhb_loop+0x40/0x90
[  222.158782][ T8742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.164728][ T8742] RIP: 0033:0x7fde13b9de59
[  222.169182][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.188819][ T8742] RSP: 002b:00007fde14a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.197260][ T8742] RAX: ffffffffffffffda RBX: 00007fde13e25fa0 RCX: 00007fde13b9de59
[  222.205269][ T8742] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  222.213274][ T8742] RBP: 00007fde14a66090 R08: 0000000000000000 R09: 0000000000000000
[  222.221286][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.229292][ T8742] R13: 00007fde13e26038 R14: 00007fde13e25fa0 R15: 00007fff2f6bf858
[  222.237313][ T8742]  </TASK>
[  222.460305][ T8752] netlink: 'syz.3.1069': attribute type 9 has an invalid length.
[  222.484370][ T8752] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1069'.
[  222.845047][ T8771] netlink: 'syz.0.1075': attribute type 9 has an invalid length.
[  222.853127][ T8771] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1075'.
[  226.860106][ T8805] FAULT_INJECTION: forcing a failure.
[  226.860106][ T8805] name failslab, interval 1, probability 0, space 0, times 0
[  226.887432][ T8802] netlink: 'syz.2.1087': attribute type 9 has an invalid length.
[  226.903077][ T8806] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1089'.
[  226.927256][ T8805] CPU: 0 PID: 8805 Comm: syz.1.1088 Not tainted syzkaller #0
[  226.934679][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  226.944777][ T8805] Call Trace:
[  226.948102][ T8805]  <TASK>
[  226.951065][ T8805]  dump_stack_lvl+0x18c/0x250
[  226.955789][ T8805]  ? show_regs_print_info+0x20/0x20
[  226.960995][ T8805]  ? load_image+0x420/0x420
[  226.965513][ T8805]  ? __might_sleep+0xe0/0xe0
[  226.970147][ T8805]  ? __lock_acquire+0x7d80/0x7d80
[  226.975208][ T8805]  should_fail_ex+0x394/0x4c0
[  226.978105][ T8802] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1087'.
[  226.979900][ T8805]  should_failslab+0x9/0x20
[  226.993751][ T8805]  slab_pre_alloc_hook+0x59/0x300
[  226.998813][ T8805]  ? exc_page_fault+0x8c/0x100
[  227.003609][ T8805]  ? sk_prot_alloc+0xe7/0x210
[  227.008320][ T8805]  ? sk_prot_alloc+0xe7/0x210
[  227.013011][ T8805]  __kmem_cache_alloc_node+0x53/0x250
[  227.018407][ T8805]  ? exc_page_fault+0x8c/0x100
[  227.023192][ T8805]  ? sk_prot_alloc+0xe7/0x210
[  227.027894][ T8805]  __kmalloc+0xa7/0x240
[  227.032077][ T8805]  sk_prot_alloc+0xe7/0x210
[  227.036590][ T8805]  ? sk_alloc+0x24/0x350
[  227.040860][ T8805]  sk_alloc+0x3a/0x350
[  227.044969][ T8805]  ? bpf_ctx_init+0x154/0x190
[  227.049680][ T8805]  bpf_prog_test_run_skb+0x371/0x18f0
[  227.055084][ T8805]  ? __fget_files+0x28/0x460
[  227.059707][ T8805]  ? __fget_files+0x3fc/0x460
[  227.064426][ T8805]  ? cpu_online+0x60/0x60
[  227.068788][ T8805]  bpf_prog_test_run+0x31f/0x390
[  227.073758][ T8805]  __sys_bpf+0x49d/0x890
[  227.078050][ T8805]  ? bpf_link_show_fdinfo+0x390/0x390
[  227.083474][ T8805]  ? lock_chain_count+0x20/0x20
[  227.088361][ T8805]  __x64_sys_bpf+0x7c/0x90
[  227.092815][ T8805]  do_syscall_64+0x55/0xb0
[  227.097258][ T8805]  ? clear_bhb_loop+0x40/0x90
[  227.101966][ T8805]  ? clear_bhb_loop+0x40/0x90
[  227.106667][ T8805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.112577][ T8805] RIP: 0033:0x7f743f19de59
[  227.117000][ T8805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.136645][ T8805] RSP: 002b:00007f7440006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  227.145073][ T8805] RAX: ffffffffffffffda RBX: 00007f743f425fa0 RCX: 00007f743f19de59
[  227.153062][ T8805] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[  227.161072][ T8805] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  227.169071][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.177063][ T8805] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  227.185075][ T8805]  </TASK>
[  227.208260][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.285440][ T8811] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1089'.
[  227.318896][ T8806] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1089'.
[  227.550987][ T8816] sit0: entered promiscuous mode
[  227.936650][ T8818] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  227.960069][ T8818] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  227.987611][ T8818] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  228.304292][ T8826] netlink: 'syz.0.1095': attribute type 10 has an invalid length.
[  228.498335][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.161856][ T8836] tap0: tun_chr_ioctl cmd 35108
[  229.178592][ T8838] netlink: 'syz.0.1099': attribute type 10 has an invalid length.
[  229.766967][ T8831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.786017][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.962218][ T8845] netlink: 'syz.2.1102': attribute type 9 has an invalid length.
[  229.999930][ T8845] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1102'.
[  230.053117][ T8851] netlink: 'syz.3.1104': attribute type 10 has an invalid length.
[  230.061187][ T8851] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1104'.
[  230.166270][ T8855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1108'.
[  230.271761][ T8858] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1106'.
[  230.318216][ T8864] netlink: 'syz.0.1109': attribute type 10 has an invalid length.
[  230.869581][ T8883] netlink: 'syz.1.1116': attribute type 9 has an invalid length.
[  230.877585][ T8883] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1116'.
[  231.067495][ T8893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1117'.
[  231.828255][ T8899] netlink: 'syz.3.1120': attribute type 10 has an invalid length.
[  232.431851][ T8917] netlink: 'syz.1.1127': attribute type 10 has an invalid length.
[  232.476207][ T8923] netlink: 'syz.3.1130': attribute type 10 has an invalid length.
[  232.615306][ T8932] netlink: 'syz.3.1132': attribute type 9 has an invalid length.
[  232.628195][ T8932] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1132'.
[  232.878527][ T8940] netlink: 'syz.0.1135': attribute type 10 has an invalid length.
[  232.895242][ T8940] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1135'.
[  232.940719][ T8942] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1137'.
[  232.967456][ T8942] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  232.984141][ T8942] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.1137'.
[  233.136328][ T8947] sit0: entered allmulticast mode
[  233.196874][ T8949] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  233.258368][ T8949] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1139'.
[  233.272502][ T8950] netlink: 'syz.1.1141': attribute type 10 has an invalid length.
[  233.428774][ T8954] netlink: 'syz.3.1143': attribute type 9 has an invalid length.
[  233.436692][ T8954] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1143'.
[  233.647027][ T8961] FAULT_INJECTION: forcing a failure.
[  233.647027][ T8961] name failslab, interval 1, probability 0, space 0, times 0
[  233.671806][ T8961] CPU: 1 PID: 8961 Comm: syz.3.1145 Not tainted syzkaller #0
[  233.679258][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  233.689353][ T8961] Call Trace:
[  233.692696][ T8961]  <TASK>
[  233.695669][ T8961]  dump_stack_lvl+0x18c/0x250
[  233.700463][ T8961]  ? sctp_sendmsg+0x1519/0x27b0
[  233.705368][ T8961]  ? ___sys_sendmsg+0x2a6/0x360
[  233.710280][ T8961]  ? show_regs_print_info+0x20/0x20
[  233.715533][ T8961]  ? load_image+0x420/0x420
[  233.720096][ T8961]  should_fail_ex+0x394/0x4c0
[  233.724834][ T8961]  should_failslab+0x9/0x20
[  233.729384][ T8961]  slab_pre_alloc_hook+0x59/0x300
[  233.734467][ T8961]  ? sctp_add_bind_addr+0x8c/0x360
[  233.739624][ T8961]  __kmem_cache_alloc_node+0x53/0x250
[  233.745046][ T8961]  ? sctp_add_bind_addr+0x8c/0x360
[  233.750203][ T8961]  kmalloc_trace+0x2a/0xe0
[  233.754677][ T8961]  sctp_add_bind_addr+0x8c/0x360
[  233.759678][ T8961]  sctp_copy_local_addr_list+0x31b/0x4e0
[  233.765356][ T8961]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  233.771140][ T8961]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  233.777276][ T8961]  ? sctp_v6_is_any+0x64/0x70
[  233.782000][ T8961]  ? sctp_copy_one_addr+0x8c/0x350
[  233.787159][ T8961]  sctp_bind_addr_copy+0xb3/0x3c0
[  233.792230][ T8961]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  233.798600][ T8961]  sctp_connect_new_asoc+0x2f9/0x6a0
[  233.803918][ T8961]  ? __sctp_connect+0xd80/0xd80
[  233.808797][ T8961]  ? bpf_lsm_sctp_assoc_request+0x10/0x10
[  233.814583][ T8961]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  233.820158][ T8961]  ? security_sctp_bind_connect+0x89/0xb0
[  233.825993][ T8961]  sctp_sendmsg+0x1519/0x27b0
[  233.830710][ T8961]  ? sctp_getsockopt+0xb60/0xb60
[  233.835678][ T8961]  ? aa_sk_perm+0x83c/0x970
[  233.840207][ T8961]  ? aa_af_perm+0x330/0x330
[  233.844726][ T8961]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  233.851177][ T8961]  ? sock_rps_record_flow+0x19/0x3f0
[  233.856490][ T8961]  ? inet_sendmsg+0xce/0x2a0
[  233.861110][ T8961]  ? inet_send_prepare+0x250/0x250
[  233.866256][ T8961]  ____sys_sendmsg+0x61b/0x980
[  233.871048][ T8961]  ? __asan_memset+0x22/0x40
[  233.875669][ T8961]  ? __sys_sendmsg_sock+0x30/0x30
[  233.880810][ T8961]  ? __import_iovec+0x5f2/0x850
[  233.885687][ T8961]  ? import_iovec+0x73/0xa0
[  233.890209][ T8961]  ___sys_sendmsg+0x2a6/0x360
[  233.894917][ T8961]  ? __sys_sendmsg+0x2b0/0x2b0
[  233.899740][ T8961]  __se_sys_sendmsg+0x1d0/0x2c0
[  233.904619][ T8961]  ? __x64_sys_sendmsg+0x80/0x80
[  233.909616][ T8961]  ? syscall_enter_from_user_mode+0x2e/0x80
[  233.915541][ T8961]  do_syscall_64+0x55/0xb0
[  233.919983][ T8961]  ? clear_bhb_loop+0x40/0x90
[  233.924694][ T8961]  ? clear_bhb_loop+0x40/0x90
[  233.929408][ T8961]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.935334][ T8961] RIP: 0033:0x7fd29779de59
[  233.939773][ T8961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.959413][ T8961] RSP: 002b:00007fd298585028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.967853][ T8961] RAX: ffffffffffffffda RBX: 00007fd297a25fa0 RCX: 00007fd29779de59
[  233.975836][ T8961] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000008
[  233.983830][ T8961] RBP: 00007fd298585090 R08: 0000000000000000 R09: 0000000000000000
[  233.991825][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  233.999810][ T8961] R13: 00007fd297a26038 R14: 00007fd297a25fa0 R15: 00007ffdc8e73e98
[  234.007827][ T8961]  </TASK>
[  234.039895][ T8963] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1146'.
[  234.068695][ T8967] netlink: 'syz.2.1147': attribute type 10 has an invalid length.
[  234.080726][ T8967] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1147'.
[  234.351439][ T8977] netlink: 'syz.2.1151': attribute type 10 has an invalid length.
[  234.544345][ T8983] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1153'.
[  234.602833][ T8986] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1154'.
[  236.400161][ T9055] FAULT_INJECTION: forcing a failure.
[  236.400161][ T9055] name failslab, interval 1, probability 0, space 0, times 0
[  236.415714][ T9055] CPU: 0 PID: 9055 Comm: syz.1.1182 Not tainted syzkaller #0
[  236.423137][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  236.433218][ T9055] Call Trace:
[  236.436523][ T9055]  <TASK>
[  236.439480][ T9055]  dump_stack_lvl+0x18c/0x250
[  236.444190][ T9055]  ? tipc_sendstream+0x55/0x70
[  236.448983][ T9055]  ? ___sys_sendmsg+0x2a6/0x360
[  236.453848][ T9055]  ? show_regs_print_info+0x20/0x20
[  236.459075][ T9055]  ? load_image+0x420/0x420
[  236.463600][ T9055]  should_fail_ex+0x394/0x4c0
[  236.468305][ T9055]  should_failslab+0x9/0x20
[  236.472825][ T9055]  slab_pre_alloc_hook+0x59/0x300
[  236.477898][ T9055]  kmem_cache_alloc_node+0x5e/0x310
[  236.483118][ T9055]  ? __alloc_skb+0x103/0x2c0
[  236.487725][ T9055]  __alloc_skb+0x103/0x2c0
[  236.492164][ T9055]  __pskb_copy_fclone+0xac/0x1000
[  236.497223][ T9055]  ? tipc_dest_pop+0x19c/0x230
[  236.502012][ T9055]  tipc_sk_mcast_rcv+0x5ca/0xf10
[  236.506966][ T9055]  ? kmem_cache_alloc_node+0x1d7/0x310
[  236.512451][ T9055]  ? tipc_sk_bind+0x300/0x300
[  236.517195][ T9055]  tipc_mcast_xmit+0x122e/0x1890
[  236.522160][ T9055]  ? tipc_bcbase_xmit+0x9b0/0x9b0
[  236.527200][ T9055]  ? __might_fault+0xc6/0x120
[  236.531888][ T9055]  ? __might_fault+0xaa/0x120
[  236.536576][ T9055]  ? _copy_from_iter+0x2ef/0x1290
[  236.541618][ T9055]  ? rcu_is_watching+0x15/0xb0
[  236.546421][ T9055]  ? kmem_cache_alloc_node+0x1d7/0x310
[  236.551910][ T9055]  ? copyout_mc+0x70/0x70
[  236.556264][ T9055]  ? __build_skb_around+0x245/0x3c0
[  236.561482][ T9055]  ? tipc_msg_build+0x421/0xe60
[  236.566352][ T9055]  ? __check_object_size+0x94/0xa40
[  236.571564][ T9055]  ? tipc_msg_build+0x4ae/0xe60
[  236.576453][ T9055]  ? tipc_sk_filtering+0x13c/0x510
[  236.581582][ T9055]  ? rcu_is_watching+0x15/0xb0
[  236.586372][ T9055]  __tipc_sendmsg+0x2061/0x2b20
[  236.591269][ T9055]  ? rht_unlock+0x1d0/0x1d0
[  236.595816][ T9055]  ? register_lock_class+0xc4/0x8a0
[  236.601043][ T9055]  ? wait_woken+0x180/0x180
[  236.605592][ T9055]  ? is_dynamic_key+0x260/0x260
[  236.610484][ T9055]  ? mark_lock+0x94/0x320
[  236.614853][ T9055]  ? __lock_acquire+0x1336/0x7d80
[  236.619935][ T9055]  ? verify_lock_unused+0x140/0x140
[  236.625184][ T9055]  ? verify_lock_unused+0x140/0x140
[  236.630426][ T9055]  __tipc_sendstream+0x104d/0x1290
[  236.635572][ T9055]  ? __might_sleep+0xe0/0xe0
[  236.640191][ T9055]  ? mark_lock+0x94/0x320
[  236.644548][ T9055]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  236.650555][ T9055]  ? lock_chain_count+0x20/0x20
[  236.655431][ T9055]  ? tsk_advance_rx_queue+0x310/0x310
[  236.660833][ T9055]  ? __local_bh_enable_ip+0x13a/0x1c0
[  236.666234][ T9055]  ? _local_bh_enable+0xa0/0xa0
[  236.671111][ T9055]  tipc_sendstream+0x55/0x70
[  236.675757][ T9055]  ? tipc_getsockopt+0x5a0/0x5a0
[  236.680728][ T9055]  ____sys_sendmsg+0x61b/0x980
[  236.685531][ T9055]  ? __asan_memset+0x22/0x40
[  236.690148][ T9055]  ? __sys_sendmsg_sock+0x30/0x30
[  236.695203][ T9055]  ? __import_iovec+0x3fa/0x850
[  236.700079][ T9055]  ? import_iovec+0x73/0xa0
[  236.704603][ T9055]  ___sys_sendmsg+0x2a6/0x360
[  236.709304][ T9055]  ? get_pid_task+0x20/0x1e0
[  236.713913][ T9055]  ? __sys_sendmsg+0x2b0/0x2b0
[  236.718733][ T9055]  ? __lock_acquire+0x7d80/0x7d80
[  236.723804][ T9055]  __se_sys_sendmsg+0x1d0/0x2c0
[  236.728676][ T9055]  ? __x64_sys_sendmsg+0x80/0x80
[  236.733653][ T9055]  ? lockdep_hardirqs_on+0x98/0x150
[  236.738878][ T9055]  do_syscall_64+0x55/0xb0
[  236.743331][ T9055]  ? clear_bhb_loop+0x40/0x90
[  236.748033][ T9055]  ? clear_bhb_loop+0x40/0x90
[  236.752736][ T9055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.758650][ T9055] RIP: 0033:0x7f743f19de59
[  236.763083][ T9055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.782715][ T9055] RSP: 002b:00007f7440006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.791152][ T9055] RAX: ffffffffffffffda RBX: 00007f743f425fa0 RCX: 00007f743f19de59
[  236.799146][ T9055] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  236.807132][ T9055] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  236.815124][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.823114][ T9055] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  236.831143][ T9055]  </TASK>
[  236.876440][ T9055] tipc: Failed to clone mcast rcv buffer
[  237.464891][ T9073] validate_nla: 12 callbacks suppressed
[  237.464908][ T9073] netlink: 'syz.1.1189': attribute type 9 has an invalid length.
[  237.708929][ T9081] __nla_validate_parse: 8 callbacks suppressed
[  237.708965][ T9081] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.1193'.
[  237.740274][ T9081] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  237.847246][ T9086] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1194'.
[  237.898405][ T9086] netlink: 'syz.0.1194': attribute type 2 has an invalid length.
[  237.926915][ T9088] netlink: 'syz.2.1195': attribute type 10 has an invalid length.
[  238.003710][ T9093] netlink: 'syz.3.1197': attribute type 9 has an invalid length.
[  238.011789][ T9093] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1197'.
[  238.142014][ T9095] netlink: 'syz.1.1198': attribute type 10 has an invalid length.
[  238.152266][ T9095] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1198'.
[  238.165387][ T9086] netlink: 'syz.0.1194': attribute type 10 has an invalid length.
[  238.194915][ T9086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.298846][ T9086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.374148][ T9102] netlink: 'syz.2.1201': attribute type 9 has an invalid length.
[  238.391787][ T9086] batadv_slave_0: entered promiscuous mode
[  238.399262][ T9102] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1201'.
[  238.415880][ T9086] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  238.445164][ T9099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1200'.
[  238.487869][ T9100] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1200'.
[  238.497044][ T9105] netlink: 'syz.3.1200': attribute type 10 has an invalid length.
[  238.525372][ T9105] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1200'.
[  238.550481][ T9100] netlink: 'syz.3.1200': attribute type 10 has an invalid length.
[  238.570356][ T9100] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1200'.
[  238.815938][ T9113] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1204'.
[  238.832155][ T9113] netlink: 'syz.1.1204': attribute type 2 has an invalid length.
[  242.433606][ T9195] sit0: left promiscuous mode
[  242.567353][ T9203] validate_nla: 9 callbacks suppressed
[  242.567370][ T9203] netlink: 'syz.2.1231': attribute type 1 has an invalid length.
[  242.868153][ T9202] netlink: 'syz.0.1233': attribute type 10 has an invalid length.
[  243.453696][ T9223] __nla_validate_parse: 12 callbacks suppressed
[  243.453716][ T9223] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1238'.
[  243.474386][ T9225] netlink: 'syz.1.1241': attribute type 1 has an invalid length.
[  243.497909][ T9225] netlink: 'syz.1.1241': attribute type 4 has an invalid length.
[  243.508293][ T9225] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1241'.
[  243.526167][ T9223] netlink: 'syz.2.1238': attribute type 2 has an invalid length.
[  243.704465][ T9233] netlink: 'syz.1.1243': attribute type 9 has an invalid length.
[  243.713630][ T9233] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1243'.
[  243.800133][ T9235] netlink: 'syz.3.1244': attribute type 10 has an invalid length.
[  243.817165][ T9235] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1244'.
[  244.095946][ T9246] netlink: 'syz.0.1249': attribute type 10 has an invalid length.
[  244.786481][ T9267] netlink: 'syz.3.1255': attribute type 9 has an invalid length.
[  244.817972][ T9267] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1255'.
[  244.972832][ T9274] netlink: 'syz.1.1256': attribute type 10 has an invalid length.
[  244.992568][ T9274] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1256'.
[  245.330632][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1261'.
[  245.687248][ T9299] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1265'.
[  246.199584][ T9318] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1270'.
[  246.285301][ T9321] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1272'.
[  246.952125][ T9334] syzkaller0: entered promiscuous mode
[  246.962029][ T9334] syzkaller0: entered allmulticast mode
[  249.216775][ T9334] validate_nla: 10 callbacks suppressed
[  249.216795][ T9334] netlink: 'syz.3.1277': attribute type 21 has an invalid length.
[  249.248834][ T9334] __nla_validate_parse: 2 callbacks suppressed
[  249.248848][ T9334] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1277'.
[  249.309839][ T9334] netlink: 'syz.3.1277': attribute type 4 has an invalid length.
[  249.553247][ T9354] netlink: 'syz.2.1281': attribute type 9 has an invalid length.
[  249.565278][ T9354] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1281'.
[  250.925518][ T9341] netlink: 'syz.0.1278': attribute type 10 has an invalid length.
[  250.968750][ T9361] netlink: 'syz.2.1282': attribute type 2 has an invalid length.
[  250.976531][ T9361] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1282'.
[  251.069529][ T9365] netlink: 'syz.3.1283': attribute type 10 has an invalid length.
[  251.082335][ T9365] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1283'.
[  251.219493][ T9369] netlink: 'syz.3.1285': attribute type 9 has an invalid length.
[  251.227302][ T9369] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1285'.
[  251.296768][ T9371] netlink: 'syz.1.1286': attribute type 10 has an invalid length.
[  251.436806][ T9375] FAULT_INJECTION: forcing a failure.
[  251.436806][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.457034][ T9375] CPU: 0 PID: 9375 Comm: syz.0.1288 Not tainted syzkaller #0
[  251.464454][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  251.474527][ T9375] Call Trace:
[  251.477825][ T9375]  <TASK>
[  251.480772][ T9375]  dump_stack_lvl+0x18c/0x250
[  251.485475][ T9375]  ? show_regs_print_info+0x20/0x20
[  251.490698][ T9375]  ? load_image+0x420/0x420
[  251.495219][ T9375]  ? __might_fault+0xaa/0x120
[  251.499911][ T9375]  ? __lock_acquire+0x7d80/0x7d80
[  251.504996][ T9375]  should_fail_ex+0x394/0x4c0
[  251.509700][ T9375]  _copy_from_user+0x2f/0xe0
[  251.514313][ T9375]  kstrtouint_from_user+0xde/0x170
[  251.519453][ T9375]  ? kstrtol_from_user+0x190/0x190
[  251.524602][ T9375]  proc_fail_nth_write+0x8f/0x250
[  251.529675][ T9375]  ? proc_fail_nth_read+0x260/0x260
[  251.534907][ T9375]  ? proc_fail_nth_read+0x260/0x260
[  251.540128][ T9375]  vfs_write+0x299/0x9a0
[  251.544409][ T9375]  ? file_end_write+0x250/0x250
[  251.549281][ T9375]  ? __fget_files+0x28/0x460
[  251.553894][ T9375]  ? __fget_files+0x3fc/0x460
[  251.558599][ T9375]  ? __fdget_pos+0x2a3/0x330
[  251.563231][ T9375]  ? ksys_write+0x74/0x260
[  251.567690][ T9375]  ksys_write+0x151/0x260
[  251.572067][ T9375]  ? __ia32_sys_read+0x90/0x90
[  251.576878][ T9375]  ? lockdep_hardirqs_on+0x98/0x150
[  251.582118][ T9375]  do_syscall_64+0x55/0xb0
[  251.586565][ T9375]  ? clear_bhb_loop+0x40/0x90
[  251.591270][ T9375]  ? clear_bhb_loop+0x40/0x90
[  251.595976][ T9375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  251.601909][ T9375] RIP: 0033:0x7f68b7f5e68e
[  251.606341][ T9375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  251.625964][ T9375] RSP: 002b:00007f68b8e31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  251.634392][ T9375] RAX: ffffffffffffffda RBX: 00007f68b8e326c0 RCX: 00007f68b7f5e68e
[  251.642379][ T9375] RDX: 0000000000000001 RSI: 00007f68b8e320a0 RDI: 0000000000000006
[  251.650367][ T9375] RBP: 00007f68b8e32090 R08: 0000000000000000 R09: 0000000000000000
[  251.658362][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  251.666368][ T9375] R13: 00007f68b8226038 R14: 00007f68b8225fa0 R15: 00007fff1f844878
[  251.674366][ T9375]  </TASK>
[  251.923046][ T9389] netlink: 'syz.3.1293': attribute type 10 has an invalid length.
[  251.931242][ T9389] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1293'.
[  252.110779][ T9391] netlink: 'syz.2.1294': attribute type 10 has an invalid length.
[  252.343560][ T9404] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1298'.
[  252.827328][ T9419] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1304'.
[  253.228633][ T9431] veth0_vlan: left promiscuous mode
[  253.247677][ T9434] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1308'.
[  253.258137][ T9431] veth0_vlan: entered promiscuous mode
[  253.284049][ T9431] team0: Device veth0_vlan failed to register rx_handler
[  253.419429][ T9437] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1309'.
[  254.505081][ T9462] validate_nla: 5 callbacks suppressed
[  254.505097][ T9462] netlink: 'syz.2.1315': attribute type 10 has an invalid length.
[  254.528080][ T9462] __nla_validate_parse: 1 callbacks suppressed
[  254.528095][ T9462] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1315'.
[  254.607881][ T9468] netlink: 'syz.1.1318': attribute type 9 has an invalid length.
[  254.634214][ T9468] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1318'.
[  254.760562][ T9471] netlink: 'syz.2.1320': attribute type 10 has an invalid length.
[  254.874438][ T9471] veth0_vlan: left promiscuous mode
[  254.915006][ T9471] veth0_vlan: entered promiscuous mode
[  254.952562][ T9471] team0: Device veth0_vlan failed to register rx_handler
[  255.022237][ T9477] netlink: 'syz.1.1321': attribute type 13 has an invalid length.
[  255.037296][ T9477] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1321'.
[  255.196048][ T9486] netlink: 'syz.0.1324': attribute type 9 has an invalid length.
[  255.215000][ T9486] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1324'.
[  255.316298][ T9490] netlink: 'syz.3.1326': attribute type 8 has an invalid length.
[  255.331876][ T9490] netlink: 'syz.3.1326': attribute type 3 has an invalid length.
[  255.343601][ T9490] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1326'.
[  255.381875][ T9491] netlink: 'syz.3.1326': attribute type 29 has an invalid length.
[  255.413354][ T9491] netlink: 'syz.3.1326': attribute type 29 has an invalid length.
[  255.469554][ T9490] netlink: 'syz.3.1326': attribute type 29 has an invalid length.
[  255.640997][ T9500] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1329'.
[  255.701450][ T9503] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1330'.
[  255.846627][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.857288][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.349981][ T9507] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1339'.
[  256.553165][ T9511] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.1332'.
[  256.790298][ T9527] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1336'.
[  259.565730][ T9575] validate_nla: 9 callbacks suppressed
[  259.565749][ T9575] netlink: 'syz.3.1352': attribute type 10 has an invalid length.
[  259.606836][ T9575] __nla_validate_parse: 3 callbacks suppressed
[  259.606854][ T9575] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1352'.
[  260.036580][ T9581] netlink: 'syz.3.1353': attribute type 10 has an invalid length.
[  260.385569][ T9594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1357'.
[  260.414310][ T9597] netlink: 'syz.2.1358': attribute type 9 has an invalid length.
[  260.449688][ T9597] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1358'.
[  260.982667][ T9604] netlink: 'syz.3.1362': attribute type 10 has an invalid length.
[  261.018103][ T9604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1362'.
[  261.272373][ T9611] netlink: 'syz.3.1365': attribute type 2 has an invalid length.
[  261.350679][ T9611] netlink: 'syz.3.1365': attribute type 2 has an invalid length.
[  261.685001][ T9622] netlink: 'syz.0.1369': attribute type 9 has an invalid length.
[  261.692993][ T9622] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1369'.
[  261.870680][ T9626] netlink: 'syz.0.1378': attribute type 9 has an invalid length.
[  261.881770][ T9626] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1378'.
[  261.963363][ T9630] netlink: 'syz.2.1370': attribute type 10 has an invalid length.
[  262.043498][ T9632] netlink: 'syz.0.1372': attribute type 10 has an invalid length.
[  262.470392][ T9646] sctp: [Deprecated]: syz.1.1373 (pid 9646) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.470392][ T9646] Use struct sctp_sack_info instead
[  262.593865][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1374'.
[  263.439078][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  263.914274][ T9668] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1381'.
[  264.292627][ T9677] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1392'.
[  264.801085][ T9690] validate_nla: 5 callbacks suppressed
[  264.801103][ T9690] netlink: 'syz.2.1398': attribute type 1 has an invalid length.
[  264.828376][ T9690] netlink: 'syz.2.1398': attribute type 2 has an invalid length.
[  264.836165][ T9690] netlink: 'syz.2.1398': attribute type 2 has an invalid length.
[  264.872873][ T9693] netlink: 'syz.3.1389': attribute type 10 has an invalid length.
[  264.900115][ T9693] veth0_vlan: left promiscuous mode
[  264.905540][ T9690] netlink: 'syz.2.1398': attribute type 3 has an invalid length.
[  264.929477][ T9693] veth0_vlan: entered promiscuous mode
[  264.943878][ T9690] netlink: 'syz.2.1398': attribute type 4 has an invalid length.
[  264.953093][ T9690] netlink: 'syz.2.1398': attribute type 5 has an invalid length.
[  264.966863][ T9690] netlink: 'syz.2.1398': attribute type 6 has an invalid length.
[  264.976792][ T9690] netlink: 'syz.2.1398': attribute type 7 has an invalid length.
[  264.986374][ T9693] team0: Device veth0_vlan failed to register rx_handler
[  265.005320][ T9690] netlink: 'syz.2.1398': attribute type 9 has an invalid length.
[  265.017333][ T9690] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1398'.
[  265.471863][ T9690] syzkaller0: entered promiscuous mode
[  265.481011][ T9690] syzkaller0: entered allmulticast mode
[  267.263766][ T9722] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1395'.
[  267.825718][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  267.903568][ T9742] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1404'.
[  268.555295][ T9764] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1409'.
[  269.751952][ T9797] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1423'.
[  269.785700][ T9795] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1421'.
[  269.888857][ T9803] validate_nla: 13 callbacks suppressed
[  269.888875][ T9803] netlink: 'syz.1.1422': attribute type 10 has an invalid length.
[  270.160658][ T9809] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1425'.
[  270.173852][ T9809] bond0: left promiscuous mode
[  270.179113][ T9809] bond_slave_0: left promiscuous mode
[  270.184977][ T9809] bond_slave_1: left promiscuous mode
[  270.192599][ T9809] team0: left promiscuous mode
[  270.197644][ T9809] team_slave_0: left promiscuous mode
[  270.204839][ T9809] team_slave_1: left promiscuous mode
[  270.212259][ T9809] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  270.220742][ T9809] dummy0: left promiscuous mode
[  270.229479][ T9809] veth1_to_bridge: left promiscuous mode
[  270.270648][ T9809] bond0: entered allmulticast mode
[  270.275833][ T9809] bond_slave_0: entered allmulticast mode
[  270.292176][ T9809] bond_slave_1: entered allmulticast mode
[  270.312400][ T9809] team0: entered allmulticast mode
[  270.317591][ T9809] team_slave_0: entered allmulticast mode
[  270.344092][ T9809] team_slave_1: entered allmulticast mode
[  270.354206][ T9809] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  270.363938][ T9809] dummy0: entered allmulticast mode
[  270.380103][ T9809] veth1_to_bridge: entered allmulticast mode
[  270.726683][ T9831] netlink: 'syz.2.1432': attribute type 9 has an invalid length.
[  270.763685][ T9831] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1432'.
[  270.936356][ T9834] netlink: 'syz.0.1433': attribute type 10 has an invalid length.
[  271.078911][ T9838] netlink: 'syz.2.1435': attribute type 13 has an invalid length.
[  271.638005][ T9847] netlink: 'syz.1.1439': attribute type 10 has an invalid length.
[  272.008980][ T9859] FAULT_INJECTION: forcing a failure.
[  272.008980][ T9859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.024203][ T9859] CPU: 1 PID: 9859 Comm: syz.0.1442 Not tainted syzkaller #0
[  272.031611][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  272.041700][ T9859] Call Trace:
[  272.044991][ T9859]  <TASK>
[  272.047941][ T9859]  dump_stack_lvl+0x18c/0x250
[  272.052638][ T9859]  ? show_regs_print_info+0x20/0x20
[  272.057852][ T9859]  ? load_image+0x420/0x420
[  272.062379][ T9859]  ? __might_fault+0xaa/0x120
[  272.067063][ T9859]  ? __lock_acquire+0x7d80/0x7d80
[  272.072112][ T9859]  should_fail_ex+0x394/0x4c0
[  272.076808][ T9859]  _copy_from_user+0x2f/0xe0
[  272.081427][ T9859]  kstrtouint_from_user+0xde/0x170
[  272.086565][ T9859]  ? kstrtol_from_user+0x190/0x190
[  272.091703][ T9859]  proc_fail_nth_write+0x8f/0x250
[  272.096742][ T9859]  ? proc_fail_nth_read+0x260/0x260
[  272.101958][ T9859]  ? proc_fail_nth_read+0x260/0x260
[  272.107181][ T9859]  vfs_write+0x299/0x9a0
[  272.111445][ T9859]  ? file_end_write+0x250/0x250
[  272.116334][ T9859]  ? __fget_files+0x28/0x460
[  272.120953][ T9859]  ? __fget_files+0x3fc/0x460
[  272.125659][ T9859]  ? __fdget_pos+0x2a3/0x330
[  272.130275][ T9859]  ? ksys_write+0x74/0x260
[  272.134720][ T9859]  ksys_write+0x151/0x260
[  272.139062][ T9859]  ? __ia32_sys_read+0x90/0x90
[  272.143850][ T9859]  ? lockdep_hardirqs_on+0x98/0x150
[  272.149069][ T9859]  do_syscall_64+0x55/0xb0
[  272.153508][ T9859]  ? clear_bhb_loop+0x40/0x90
[  272.158197][ T9859]  ? clear_bhb_loop+0x40/0x90
[  272.162884][ T9859]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.168814][ T9859] RIP: 0033:0x7f68b7f5e68e
[  272.173243][ T9859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  272.192873][ T9859] RSP: 002b:00007f68b8e10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  272.201304][ T9859] RAX: ffffffffffffffda RBX: 00007f68b8e116c0 RCX: 00007f68b7f5e68e
[  272.209286][ T9859] RDX: 0000000000000001 RSI: 00007f68b8e110a0 RDI: 0000000000000006
[  272.217299][ T9859] RBP: 00007f68b8e11090 R08: 0000000000000000 R09: 0000000000000000
[  272.225294][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.233285][ T9859] R13: 00007f68b8226128 R14: 00007f68b8226090 R15: 00007fff1f844878
[  272.241280][ T9859]  </TASK>
[  272.473187][ T9862] netlink: 'syz.0.1444': attribute type 9 has an invalid length.
[  272.494312][ T9862] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1444'.
[  272.537883][ T9863] netlink: 'syz.3.1443': attribute type 9 has an invalid length.
[  272.558199][ T9863] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1443'.
[  272.694170][ T9868] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1446'.
[  272.728068][ T9865] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1445'.
[  272.935613][ T9876] netlink: 'syz.0.1450': attribute type 10 has an invalid length.
[  273.851442][ T9896] netlink: 'syz.3.1455': attribute type 9 has an invalid length.
[  273.862458][ T9896] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1455'.
[  273.876435][ T9893] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1453'.
[  274.055249][ T9904] netlink: 'syz.2.1456': attribute type 10 has an invalid length.
[  274.078532][ T9904] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1456'.
[  274.362352][ T9911] FAULT_INJECTION: forcing a failure.
[  274.362352][ T9911] name failslab, interval 1, probability 0, space 0, times 0
[  274.393507][ T9911] CPU: 1 PID: 9911 Comm: syz.2.1460 Not tainted syzkaller #0
[  274.400940][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  274.411035][ T9911] Call Trace:
[  274.414360][ T9911]  <TASK>
[  274.417319][ T9911]  dump_stack_lvl+0x18c/0x250
[  274.422039][ T9911]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  274.428228][ T9911]  ? show_regs_print_info+0x20/0x20
[  274.433501][ T9911]  ? load_image+0x420/0x420
[  274.438052][ T9911]  should_fail_ex+0x394/0x4c0
[  274.442775][ T9911]  should_failslab+0x9/0x20
[  274.447332][ T9911]  slab_pre_alloc_hook+0x59/0x300
[  274.452401][ T9911]  ? sctp_get_port_local+0xd26/0x15d0
[  274.457821][ T9911]  ? sctp_add_bind_addr+0x8c/0x360
[  274.462986][ T9911]  __kmem_cache_alloc_node+0x53/0x250
[  274.468432][ T9911]  ? sctp_add_bind_addr+0x8c/0x360
[  274.473610][ T9911]  kmalloc_trace+0x2a/0xe0
[  274.478085][ T9911]  sctp_add_bind_addr+0x8c/0x360
[  274.483066][ T9911]  ? sctp_auto_asconf_init+0x14d/0x1d0
[  274.488575][ T9911]  sctp_do_bind+0x57e/0x8f0
[  274.493135][ T9911]  sctp_connect_new_asoc+0x26a/0x6a0
[  274.498462][ T9911]  ? __sctp_connect+0xd80/0xd80
[  274.503332][ T9911]  ? __local_bh_enable_ip+0x13a/0x1c0
[  274.508743][ T9911]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  274.514321][ T9911]  ? security_sctp_bind_connect+0x89/0xb0
[  274.520064][ T9911]  sctp_sendmsg+0x1519/0x27b0
[  274.524772][ T9911]  ? perf_trace_preemptirq_template+0x269/0x330
[  274.531053][ T9911]  ? sctp_getsockopt+0xb60/0xb60
[  274.536023][ T9911]  ? lock_chain_count+0x20/0x20
[  274.540912][ T9911]  ? inet_send_prepare+0x250/0x250
[  274.546050][ T9911]  ? sctp_getsockopt+0xb60/0xb60
[  274.551010][ T9911]  ? inet_send_prepare+0x250/0x250
[  274.556171][ T9911]  ____sys_sendmsg+0x61b/0x980
[  274.560963][ T9911]  ? __asan_memset+0x22/0x40
[  274.565583][ T9911]  ? __sys_sendmsg_sock+0x30/0x30
[  274.570633][ T9911]  ? __import_iovec+0x5f2/0x850
[  274.575508][ T9911]  ? import_iovec+0x73/0xa0
[  274.580039][ T9911]  ___sys_sendmsg+0x2a6/0x360
[  274.584740][ T9911]  ? __sys_sendmsg+0x2b0/0x2b0
[  274.589565][ T9911]  __se_sys_sendmsg+0x1d0/0x2c0
[  274.594438][ T9911]  ? __x64_sys_sendmsg+0x80/0x80
[  274.599408][ T9911]  ? syscall_enter_from_user_mode+0x2e/0x80
[  274.605328][ T9911]  do_syscall_64+0x55/0xb0
[  274.609769][ T9911]  ? clear_bhb_loop+0x40/0x90
[  274.614464][ T9911]  ? clear_bhb_loop+0x40/0x90
[  274.619155][ T9911]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.625067][ T9911] RIP: 0033:0x7fde13b9de59
[  274.629496][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.649122][ T9911] RSP: 002b:00007fde14a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.657551][ T9911] RAX: ffffffffffffffda RBX: 00007fde13e25fa0 RCX: 00007fde13b9de59
[  274.665532][ T9911] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000008
[  274.673507][ T9911] RBP: 00007fde14a66090 R08: 0000000000000000 R09: 0000000000000000
[  274.681484][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.689468][ T9911] R13: 00007fde13e26038 R14: 00007fde13e25fa0 R15: 00007fff2f6bf858
[  274.697458][ T9911]  </TASK>
[  275.087239][ T9925] netlink: 'syz.3.1466': attribute type 9 has an invalid length.
[  275.099630][ T9925] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1466'.
[  275.109683][ T9922] netlink: 'syz.2.1465': attribute type 9 has an invalid length.
[  278.205294][ T9949] netlink: 'syz.0.1472': attribute type 8 has an invalid length.
[  278.243685][ T9949] netlink: 'syz.0.1472': attribute type 3 has an invalid length.
[  278.266876][ T9949] __nla_validate_parse: 1 callbacks suppressed
[  278.266892][ T9949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1472'.
[  278.315326][ T9946] netlink: 'syz.0.1472': attribute type 29 has an invalid length.
[  278.340357][ T9946] netlink: 'syz.0.1472': attribute type 29 has an invalid length.
[  278.373203][ T9946] netlink: 'syz.0.1472': attribute type 29 has an invalid length.
[  278.410196][ T9946] netlink: 'syz.0.1472': attribute type 29 has an invalid length.
[  278.557675][ T9956] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1477'.
[  279.186394][ T9962] netlink: 'syz.2.1479': attribute type 1 has an invalid length.
[  279.419840][ T9966] Dead loop on virtual device ip6_vti0, fix it urgently!
[  279.650006][ T9973] FAULT_INJECTION: forcing a failure.
[  279.650006][ T9973] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.683187][ T9973] CPU: 0 PID: 9973 Comm: syz.1.1484 Not tainted syzkaller #0
[  279.690631][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  279.700737][ T9973] Call Trace:
[  279.704052][ T9973]  <TASK>
[  279.707008][ T9973]  dump_stack_lvl+0x18c/0x250
[  279.711719][ T9973]  ? show_regs_print_info+0x20/0x20
[  279.716957][ T9973]  ? load_image+0x420/0x420
[  279.721491][ T9973]  ? __might_fault+0xaa/0x120
[  279.726194][ T9973]  ? __lock_acquire+0x7d80/0x7d80
[  279.731242][ T9973]  should_fail_ex+0x394/0x4c0
[  279.735958][ T9973]  _copy_from_user+0x2f/0xe0
[  279.740585][ T9973]  sock_do_ioctl+0x190/0x310
[  279.745330][ T9973]  ? sock_show_fdinfo+0xb0/0xb0
[  279.750234][ T9973]  sock_ioctl+0x5be/0x7e0
[  279.754604][ T9973]  ? sock_poll+0x3e0/0x3e0
[  279.759057][ T9973]  ? bpf_lsm_file_ioctl+0x9/0x10
[  279.764018][ T9973]  ? security_file_ioctl+0x80/0xa0
[  279.769155][ T9973]  ? sock_poll+0x3e0/0x3e0
[  279.773604][ T9973]  __se_sys_ioctl+0xfd/0x170
[  279.778233][ T9973]  do_syscall_64+0x55/0xb0
[  279.782680][ T9973]  ? clear_bhb_loop+0x40/0x90
[  279.787382][ T9973]  ? clear_bhb_loop+0x40/0x90
[  279.792090][ T9973]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  279.798020][ T9973] RIP: 0033:0x7f743f19de59
[  279.802460][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.822090][ T9973] RSP: 002b:00007f7440006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  279.830536][ T9973] RAX: ffffffffffffffda RBX: 00007f743f425fa0 RCX: 00007f743f19de59
[  279.838537][ T9973] RDX: 0000200000000340 RSI: 00000000000089e0 RDI: 000000000000000a
[  279.846538][ T9973] RBP: 00007f7440006090 R08: 0000000000000000 R09: 0000000000000000
[  279.854520][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.862508][ T9973] R13: 00007f743f426038 R14: 00007f743f425fa0 R15: 00007fffca72aa78
[  279.870513][ T9973]  </TASK>
[  279.965489][ T9982] netlink: 'syz.2.1486': attribute type 153 has an invalid length.
[  279.973697][ T9982] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1486'.
[  280.070143][ T9983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1486'.
[  280.473333][ T9990] netlink: 'syz.1.1490': attribute type 8 has an invalid length.
[  280.482300][ T9990] netlink: 'syz.1.1490': attribute type 3 has an invalid length.
[  280.497906][ T9990] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1490'.
[  280.531914][ T9990] netlink: 'syz.1.1490': attribute type 29 has an invalid length.
[  280.543559][ T9990] netlink: 'syz.1.1490': attribute type 29 has an invalid length.
[  280.572609][ T9993] netlink: 'syz.0.1489': attribute type 10 has an invalid length.
[  280.616938][ T9993] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1489'.
[  280.653915][ T9992] netlink: 'syz.1.1490': attribute type 29 has an invalid length.
[  280.750395][ T9990] netlink: 'syz.1.1490': attribute type 29 has an invalid length.
[  282.637230][T10021] netlink: 'syz.1.1500': attribute type 9 has an invalid length.
[  282.661410][T10021] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1500'.
Stopping sshd: [  283.275964][T10030] netlink: 'syz.2.1501': attribute type 10 has an invalid length.
stopped /usr/sbin/sshd (pid 5530)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5515)
OK
[  284.261489][T10052] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1508'.
[  284.317042][T10052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.350364][T10058] netlink: 'syz.1.1510': attribute type 9 has an invalid length.
[  284.376771][T10058] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1510'.
[  284.449389][T10061] team0: Device veth1_vlan failed to register rx_handler
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5435)
Stopping network: [  285.425340][T10091] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1517'.
[  285.511511][T10098] validate_nla: 3 callbacks suppressed
[  285.511599][T10098] netlink: 'syz.0.1519': attribute type 10 has an invalid length.
[  285.675299][T10095] netlink: 'syz.1.1518': attribute type 9 has an invalid length.
[  285.698855][T10095] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1518'.
[  286.571123][T10111] FAULT_INJECTION: forcing a failure.
[  286.571123][T10111] name failslab, interval 1, probability 0, space 0, times 0
[  286.585290][T10111] CPU: 1 PID: 10111 Comm: syz.3.1523 Not tainted syzkaller #0
[  286.592810][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  286.602889][T10111] Call Trace:
[  286.606173][T10111]  <TASK>
[  286.609116][T10111]  dump_stack_lvl+0x18c/0x250
[  286.613829][T10111]  ? show_regs_print_info+0x20/0x20
[  286.619040][T10111]  ? load_image+0x420/0x420
[  286.623553][T10111]  ? __might_sleep+0xe0/0xe0
[  286.628153][T10111]  ? __lock_acquire+0x7d80/0x7d80
[  286.633374][T10111]  should_fail_ex+0x394/0x4c0
[  286.638089][T10111]  should_failslab+0x9/0x20
[  286.642648][T10111]  slab_pre_alloc_hook+0x59/0x300
[  286.647737][T10111]  ? kvmalloc_node+0x70/0x180
[  286.652462][T10111]  ? kvmalloc_node+0x70/0x180
[  286.657181][T10111]  __kmem_cache_alloc_node+0x53/0x250
[  286.662595][T10111]  ? kvmalloc_node+0x70/0x180
[  286.667284][T10111]  __kmalloc_node+0xa6/0x240
[  286.671891][T10111]  kvmalloc_node+0x70/0x180
[  286.676403][T10111]  bpf_test_run_xdp_live+0x1e9/0x1b30
[  286.681782][T10111]  ? 0xffffffffa0004740
[  286.685945][T10111]  ? 0xffffffffa0004740
[  286.690137][T10111]  ? bpf_dispatcher_change_prog+0xc94/0xf10
[  286.696084][T10111]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  286.702284][T10111]  ? xdp_convert_md_to_buff+0x330/0x330
[  286.707875][T10111]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  286.714138][T10111]  ? _copy_from_user+0xa5/0xe0
[  286.718922][T10111]  ? bpf_test_init+0x119/0x140
[  286.723697][T10111]  ? xdp_convert_md_to_buff+0x5b/0x330
[  286.729169][T10111]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  286.734566][T10111]  ? __lock_acquire+0x7d80/0x7d80
[  286.739642][T10111]  ? dev_put+0x80/0x80
[  286.743783][T10111]  ? dev_put+0x80/0x80
[  286.747906][T10111]  bpf_prog_test_run+0x31f/0x390
[  286.752908][T10111]  __sys_bpf+0x49d/0x890
[  286.757293][T10111]  ? bpf_link_show_fdinfo+0x390/0x390
[  286.762722][T10111]  ? lock_chain_count+0x20/0x20
[  286.767609][T10111]  __x64_sys_bpf+0x7c/0x90
[  286.772057][T10111]  do_syscall_64+0x55/0xb0
[  286.776502][T10111]  ? clear_bhb_loop+0x40/0x90
[  286.781197][T10111]  ? clear_bhb_loop+0x40/0x90
[  286.785883][T10111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  286.791807][T10111] RIP: 0033:0x7fd29779de59
[  286.796262][T10111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.815902][T10111] RSP: 002b:00007fd298585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  286.824329][T10111] RAX: ffffffffffffffda RBX: 00007fd297a25fa0 RCX: 00007fd29779de59
[  286.832309][T10111] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  286.840296][T10111] RBP: 00007fd298585090 R08: 0000000000000000 R09: 0000000000000000
[  286.848293][T10111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.856269][T10111] R13: 00007fd297a26038 R14: 00007fd297a25fa0 R15: 00007ffdc8e73e98
[  286.864351][T10111]  </TASK>
[  287.043879][T10130] netlink: 'syz.1.1528': attribute type 10 has an invalid length.
OK
[  287.416813][T10141] netlink: 'syz.2.1531': attribute type 8 has an invalid length.
[  287.435232][T10144] netlink: 'syz.2.1531': attribute type 29 has an invalid length.
[  287.463459][T10141] netlink: 'syz.2.1531': attribute type 3 has an invalid length.
Stopping iptables: [  287.491797][T10144] netlink: 'syz.2.1531': attribute type 29 has an invalid length.
[  287.525336][T10141] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1531'.
[  287.586863][T10146] netlink: 'syz.2.1531': attribute type 29 has an invalid length.
[  287.599693][T10148] netlink: 'syz.0.1532': attribute type 8 has an invalid length.
OK
[  287.632076][T10144] netlink: 'syz.2.1531': attribute type 29 has an invalid length.
[  287.640857][T10148] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1532'.
Stopping system message bus: [  288.001585][T10156] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1533'.
[  288.260226][T10162] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1535'.
[  288.694583][T10166] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1536'.
done
[  289.112727][T10180] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1539'.
Stopping klogd: OK
Stopping acpid: OK
Stopping syslogd: stopped /sbin/syslogd (pid 5122)
OK
[  291.857050][T10196] validate_nla: 11 callbacks suppressed
[  291.857126][T10196] netlink: 'syz.1.1542': attribute type 10 has an invalid length.
[  291.902252][T10203] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1544'.
[  292.115483][T10211] netlink: 'syz.2.1546': attribute type 9 has an invalid length.
[  292.134090][T10211] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1546'.
umount: can't remount debugfs read-only
[  292.604849][T10223] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1551'.
[  292.865080][T10233] netlink: 'syz.1.1552': attribute type 10 has an invalid length.
[  292.882638][T10233] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1552'.
[  292.951333][T10235] netlink: 'syz.3.1554': attribute type 8 has an invalid length.
[  292.969155][T10235] netlink: 'syz.3.1554': attribute type 3 has an invalid length.
[  292.987216][T10235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1554'.
[  293.093289][T10235] netlink: 'syz.3.1554': attribute type 29 has an invalid length.
[  293.128793][T10235] netlink: 'syz.3.1554': attribute type 29 has an invalid length.
[  293.146512][T10239] netlink: 'syz.0.1555': attribute type 8 has an invalid length.
[  293.169403][T10237] netlink: 'syz.3.1554': attribute type 29 has an invalid length.
[  293.184582][T10239] netlink: 'syz.0.1555': attribute type 3 has an invalid length.
[  293.210468][T10239] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1555'.
[  293.261288][T10241] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1556'.
[  294.963333][T10281] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1567'.
[  295.140841][T10284] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1569'.
[  295.205915][T10286] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1570'.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.1.16 closed by remote host.
[  297.734913][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
Requesting system poweroff
[  297.816287][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.891413][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.940086][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.749707][   T11] 
[  298.752098][   T11] ======================================================
[  298.759108][   T11] WARNING: possible circular locking dependency detected
[  298.766121][   T11] syzkaller #0 Not tainted
[  298.770539][   T11] ------------------------------------------------------
[  298.777566][   T11] kworker/u4:0/11 is trying to acquire lock:
[  298.783547][   T11] ffff88802b198d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0
[  298.793151][   T11] 
[  298.793151][   T11] but task is already holding lock:
[  298.800523][   T11] ffff88805afb0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  298.810904][   T11] 
[  298.810904][   T11] which lock already depends on the new lock.
[  298.810904][   T11] 
[  298.821317][   T11] 
[  298.821317][   T11] the existing dependency chain (in reverse order) is:
[  298.830336][   T11] 
[  298.830336][   T11] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  298.838079][   T11]        __mutex_lock+0x135/0xc80
[  298.843115][   T11]        ieee80211_open+0x144/0x200
[  298.848323][   T11]        __dev_open+0x2cb/0x430
[  298.853186][   T11]        dev_open+0xab/0x190
[  298.857800][   T11]        team_add_slave+0x709/0x2880
[  298.863099][   T11]        do_setlink+0xcde/0x3f40
[  298.868052][   T11]        rtnl_newlink+0x1848/0x2170
[  298.873277][   T11]        rtnetlink_rcv_msg+0x843/0xf90
[  298.878775][   T11]        netlink_rcv_skb+0x235/0x4c0
[  298.884070][   T11]        netlink_unicast+0x7b1/0x930
[  298.889365][   T11]        netlink_sendmsg+0x8d0/0xbf0
[  298.894659][   T11]        ____sys_sendmsg+0x61b/0x980
[  298.900047][   T11]        ___sys_sendmsg+0x2a6/0x360
[  298.905261][   T11]        __se_sys_sendmsg+0x1d0/0x2c0
[  298.910642][   T11]        do_syscall_64+0x55/0xb0
[  298.915596][   T11]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.922023][   T11] 
[  298.922023][   T11] -> #0 (team->team_lock_key#2){+.+.}-{3:3}:
[  298.930209][   T11]        __lock_acquire+0x37ef/0x7d80
[  298.935608][   T11]        lock_acquire+0x19e/0x420
[  298.940650][   T11]        __mutex_lock+0x135/0xc80
[  298.945713][   T11]        team_del_slave+0x31/0x1b0
[  298.950850][   T11]        team_device_event+0x297/0xa30
[  298.956325][   T11]        notifier_call_chain+0x18f/0x380
[  298.961970][   T11]        unregister_netdevice_many_notify+0x1037/0x1910
[  298.968920][   T11]        unregister_netdevice_queue+0x2e9/0x330
[  298.975181][   T11]        _cfg80211_unregister_wdev+0x16d/0x580
[  298.981360][   T11]        ieee80211_remove_interfaces+0x4b3/0x690
[  298.987708][   T11]        ieee80211_unregister_hw+0x5d/0x2a0
[  298.993740][   T11]        mac80211_hwsim_del_radio+0x289/0x480
[  298.999830][   T11]        hwsim_exit_net+0x58d/0x650
[  299.005051][   T11]        cleanup_net+0x707/0xbb0
[  299.010023][   T11]        process_scheduled_works+0xa60/0x1600
[  299.016118][   T11]        worker_thread+0xa5e/0xfe0
[  299.021277][   T11]        kthread+0x2fa/0x390
[  299.025872][   T11]        ret_from_fork+0x48/0x80
[  299.030836][   T11]        ret_from_fork_asm+0x11/0x20
[  299.036173][   T11] 
[  299.036173][   T11] other info that might help us debug this:
[  299.036173][   T11] 
[  299.046432][   T11]  Possible unsafe locking scenario:
[  299.046432][   T11] 
[  299.053893][   T11]        CPU0                    CPU1
[  299.059273][   T11]        ----                    ----
[  299.064647][   T11]   lock(&rdev->wiphy.mtx);
[  299.069165][   T11]                                lock(team->team_lock_key#2);
[  299.076633][   T11]                                lock(&rdev->wiphy.mtx);
[  299.083666][   T11]   lock(team->team_lock_key#2);
[  299.088621][   T11] 
[  299.088621][   T11]  *** DEADLOCK ***
[  299.088621][   T11] 
[  299.096772][   T11] 5 locks held by kworker/u4:0/11:
[  299.101899][   T11]  #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  299.112789][   T11]  #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  299.123334][   T11]  #2: ffffffff8e3b2e50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  299.132746][   T11]  #3: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  299.142607][   T11]  #4: ffff88805afb0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  299.153430][   T11] 
[  299.153430][   T11] stack backtrace:
[  299.159329][   T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[  299.166724][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  299.176788][   T11] Workqueue: netns cleanup_net
[  299.181572][   T11] Call Trace:
[  299.184868][   T11]  <TASK>
[  299.187809][   T11]  dump_stack_lvl+0x18c/0x250
[  299.192507][   T11]  ? load_image+0x420/0x420
[  299.197025][   T11]  ? show_regs_print_info+0x20/0x20
[  299.202256][   T11]  ? print_circular_bug+0x12b/0x1a0
[  299.207469][   T11]  check_noncircular+0x2fc/0x400
[  299.212420][   T11]  ? print_deadlock_bug+0x5d0/0x5d0
[  299.217632][   T11]  ? lockdep_lock+0xf5/0x230
[  299.222240][   T11]  ? _find_first_zero_bit+0xd6/0x100
[  299.227537][   T11]  __lock_acquire+0x37ef/0x7d80
[  299.232410][   T11]  ? verify_lock_unused+0x140/0x140
[  299.237627][   T11]  ? verify_lock_unused+0x140/0x140
[  299.242858][   T11]  ? __up_read+0x2b8/0x6b0
[  299.247295][   T11]  lock_acquire+0x19e/0x420
[  299.251809][   T11]  ? team_del_slave+0x31/0x1b0
[  299.256591][   T11]  ? __might_sleep+0xe0/0xe0
[  299.261191][   T11]  ? read_lock_is_recursive+0x20/0x20
[  299.266598][   T11]  __mutex_lock+0x135/0xc80
[  299.271131][   T11]  ? team_del_slave+0x31/0x1b0
[  299.275918][   T11]  ? __mutex_lock+0x30d/0xc80
[  299.280615][   T11]  ? team_del_slave+0x31/0x1b0
[  299.285393][   T11]  ? mutex_lock_nested+0x20/0x20
[  299.290349][   T11]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  299.296013][   T11]  team_del_slave+0x31/0x1b0
[  299.300616][   T11]  team_device_event+0x297/0xa30
[  299.305597][   T11]  notifier_call_chain+0x18f/0x380
[  299.310751][   T11]  unregister_netdevice_many_notify+0x1037/0x1910
[  299.317199][   T11]  ? unregister_netdevice_many+0x20/0x20
[  299.322856][   T11]  ? kernfs_remove_by_name_ns+0x117/0x150
[  299.328602][   T11]  ? __lock_acquire+0x7d80/0x7d80
[  299.333636][   T11]  unregister_netdevice_queue+0x2e9/0x330
[  299.339368][   T11]  ? list_netdevice+0x730/0x730
[  299.344231][   T11]  ? kernfs_remove_by_name_ns+0x117/0x150
[  299.350004][   T11]  _cfg80211_unregister_wdev+0x16d/0x580
[  299.355661][   T11]  ieee80211_remove_interfaces+0x4b3/0x690
[  299.361481][   T11]  ? ieee80211_do_stop+0x1df0/0x1df0
[  299.366774][   T11]  ? rcu_is_watching+0x15/0xb0
[  299.371560][   T11]  ieee80211_unregister_hw+0x5d/0x2a0
[  299.376975][   T11]  mac80211_hwsim_del_radio+0x289/0x480
[  299.382534][   T11]  ? rhashtable_remove_fast+0xc00/0xc00
[  299.388094][   T11]  hwsim_exit_net+0x58d/0x650
[  299.392789][   T11]  ? hwsim_init_net+0x90/0x90
[  299.397491][   T11]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  299.403320][   T11]  cleanup_net+0x707/0xbb0
[  299.407756][   T11]  ? ops_free_list+0x3b0/0x3b0
[  299.412532][   T11]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.417751][   T11]  ? process_scheduled_works+0x975/0x1600
[  299.423480][   T11]  ? process_scheduled_works+0x975/0x1600
[  299.429219][   T11]  process_scheduled_works+0xa60/0x1600
[  299.434791][   T11]  ? worker_attach_to_pool+0x370/0x370
[  299.440272][   T11]  ? assign_work+0x3cc/0x5d0
[  299.444889][   T11]  worker_thread+0xa5e/0xfe0
[  299.449504][   T11]  kthread+0x2fa/0x390
[  299.453588][   T11]  ? pr_cont_work+0x550/0x550
[  299.458278][   T11]  ? kthread_blkcg+0xd0/0xd0
[  299.462881][   T11]  ret_from_fork+0x48/0x80
[  299.467318][   T11]  ? kthread_blkcg+0xd0/0xd0
[  299.471918][   T11]  ret_from_fork_asm+0x11/0x20
[  299.476718][   T11]  </TASK>
[  299.481588][   T11] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode
[  299.493715][   T11] team0: Port device wlan1 removed
[  299.506770][T10307] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  299.514857][T10307] ACPI: PM: Preparing to enter system sleep state S5
[  299.522066][T10307] kvm: exiting hardware virtualization
[  299.527547][T10307] reboot: Power down
serialport: VM disconnected.