last executing test programs:

25.626165679s ago: executing program 3 (id=9581):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8010, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.484439369s ago: executing program 3 (id=9587):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0x7fffffff}, 0x28)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0xc, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x7}, 0x15076, 0x0, 0x7fff, 0x6, 0x7, 0x10000002, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x800000007, 0x441e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x1489, 0x10000, 0x8, 0x1, 0x9, 0x800, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, r1, 0xa)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000440)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x14008081)
recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000002bc0)=""/4085, 0xff5}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000980)=""/143, 0x8f}], 0x6}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES64=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000108000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="e03f0394f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300db84edff07cb7b3516fb2685f9f7a3ff6a5b7c0e1bad5ab78ed0c8fc05d0e03e232ae64589239e33a8ed67799207d85aeb847d40123f1d26f8b60cf4ea9b5b17a5f3bcbcad7bc445cd26f4f23cde5fea47f7c2b7f10cfe2982d064eb67a5064c61ff57be94b74c4ef2daadcccee8774bdc20b689f21beea1fdffc8ff938ebf40304448864c12b8f86a65193d9f53d532d651395541ccf31f8b6dce340ab3df5b2dbc1b96c8daeb794aaeabf4fa6e6c114b0c868091b1a1a99bb514d562991a458782be556962df6f4643edb7c1e9c4d77c2f232afd85d4ee392004d26237fdfaaf914f089add549a152002bd13f56c26a469090cd49762fd382e8286334b6b2cb7ec286f3d25462dc43eb9b07657f2ffe5c7bf51adcc3790ad8af77af787104700421882e62d3391458735905ceb5dea837ed988c5aa0c8446b943f792d8c6975229e582d6bddbe1615d8d978bb83b8f1b29fc727d3f62e8008605ad2c82142ed8b009b428", 0x188}], 0x1}, 0x4000000)

22.189844573s ago: executing program 3 (id=9591):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000000)
recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000002a40)=""/4042, 0xfca}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000d00)=""/261, 0x105}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f0000000f80)=""/71, 0x47}, {&(0x7f0000000e80)=""/232, 0xe8}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/193, 0xc1}], 0xd}, 0x0)

22.016585243s ago: executing program 3 (id=9597):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8010, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.864888793s ago: executing program 3 (id=9603):
r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff27, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x3f, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
close(r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
close(r5)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))

18.355342578s ago: executing program 3 (id=9611):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4001, 0x400, 0x98, 0x5, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$sock_attach_bpf(r2, 0x110, 0x2, &(0x7f0000000140)=r1, 0x16)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'macvlan0\x00', 0x2000})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180800bc0a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000001800000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100180000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x66)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0x6}, 0x10018c, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x4, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4.587259107s ago: executing program 1 (id=9639):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1b74b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x20c, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r4)

4.571100078s ago: executing program 2 (id=9640):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.310671311s ago: executing program 0 (id=9641):
r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff27, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x3f, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
close(r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

4.268117853s ago: executing program 1 (id=9642):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x2, 0x10, 0x0, 0xa, 0xa848, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x200000000000c8, 0x20802, 0x7, 0xfffffffffffffff7, 0x80008000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfdef)

4.266585234s ago: executing program 2 (id=9643):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

4.074112103s ago: executing program 1 (id=9644):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x7, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100904, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0x4}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f0000000100), 0x3d)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
sendmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)="f5e04d0874d2", 0x6}, {&(0x7f0000000580)="7374bb4770383bf0cad937f2270878e9283aba05a8ba6b9b7131d64a57c00ed5d8404102db64e6d0af57", 0x2a}, {&(0x7f0000000800)}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x40)

3.765279249s ago: executing program 0 (id=9645):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.492452773s ago: executing program 0 (id=9646):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r6 = socket$kcm(0x2c, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x20)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x85, &(0x7f0000000000), 0x90)
r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)}, 0x20)
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x9a)
sendmsg(r4, &(0x7f0000000b40)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x3, 0x1, 0x0, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x101}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="c7d909206c58ec4f977a00317b46a80440b6a1ea8b5efdbe36015e2bab6921f68721b29789c736f661a26084e234c29ae20ac6585b30609ef2181fa7273d485bd25d766d5f952d4427568a8b895eba31b316162c", 0x54}, {&(0x7f0000000680)="2c26b9f4920cae6c8e137fa4b926dfccb441e939d65e7f37577c73c5b15d3e4e5715274b3b6a8dc06809a9103749414c0bb728d39081ffb20d4d1b62df3d0628caedf111d111e24b0022dce05bf3abb63931364e233101ee37a5", 0x5a}, {&(0x7f0000000780)="8df4b3faa64460a6d98c8a0a635e3667dded579c275f90ad225fb7b3ef5d1fa4d1f43f00dd3754ca29c97c4b9456f4598c54cc418c5b3ebc9fc7aa66b3eb7369533dd6b80a8990a700d5d6a826764a68106f6c61348cbb6cf5420daab6bcccdea7cf9def7cb531dcece3e72ade11ba0ca7418eda50df58acd7cd6dbd82c53cabdf3632a8d1f92d25a7c487d1fa494dd04bc6d12b62cd57657fb01e650f14", 0x9e}, {&(0x7f0000000840)="824ee013b383196b9f736ba9eb83fa7d530284bb70424b3f3d17acf9a6b90d6690546765808b1c54a5ca0977843f4815488891769a0978184b01b151be96fb8d71bb76abca98e251ce5b19395633fa45e213f6b22458e3ed61aeab449bd00c3a64fbf72b410792260e5ce43a03c0ab8457d2f88d51a84f87e3164cc1ccc36d276881e27a470b9ef31f245b52f3f65acd8e5ce814348fd18b318ccf901c633c142824b8", 0xa3}, {&(0x7f00000009c0)="876103d90a3e93a3b8a2ac698834cfcb25a37129cbd30f5603a97d68b21fa335f320bfaf142b4f7950cb58a6077bc18d4531e7aca1304c06c95f5438b7e0df3535bcf1faffa7789bcb46bd409da1f934c71f550ce249e56abf13851684f7e5027ea6d405e63e1935158990d2e65b13e4ff6013a3b3214ad60e597b1139851a9cedb460349eceac3e43d49c87b509c5056e501740ad143edd9a7876e77ba9964131b660a7d40fc82cf590bab5e2cd365521410b000f30508202", 0xb9}], 0x5, &(0x7f0000000b00)=[{0x40, 0x112, 0x3, "e955f6eb06183de0651865115e66d857ffb41eead2afe71fd98d13dd474b20f5d2030dae7473380a4dd7"}], 0x40}, 0x8884)

3.331560381s ago: executing program 1 (id=9647):
perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30, 0x2, @perf_bp={0x0, 0x4}, 0x12102, 0x5, 0x43a1bd76, 0x4, 0x14a, 0xa, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, 0x0, 0x275a, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r3], 0xfe33)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x2}, 0x5114, 0x80000001, 0x0, 0x0, 0x0, 0xc26, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)

964.777461ms ago: executing program 2 (id=9648):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1b74b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="1400000029000b92d25a80080000000000000047", 0x14}], 0x1}, 0x4000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6)
r10 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r2, 0x0, 0xb5, 0x12, &(0x7f0000000280)="dfa869ff470650ce572890fc50335fa35ef5b4bb24930106344adece7e27a3d9b7144eb5659062f0dfba835d617aa7f0e890066f759a335bbb5ad6716e83a5e5d4ec268249007f7aedb4120819bee22f3ee27562ac42ab037ef12f9007f3d3e1b98a96ad4717dc52eddc239fd3c9372aa379c39534d2881267e53f3c41a0c7699c3e45294a4a59e17d7db2d54802b1577d9a29d708b5fff89931cdb0e85dd230c1e496664c362218f03086b76bd8050b991b067693", &(0x7f0000000340)=""/18, 0x9, 0x0, 0xd8, 0x1000, &(0x7f0000000380)="9d5c7eb4f7ec4d9ea5345684f2cb6c73d56ed37e9fbb5d33e6b05011be601b1097caaee11b2668169ed294713926e134faf4f12d07f6f0daccc05705f97a6db9d366fdcffba817b3bed71f6184f551cfdac2154baf8548b3dc2445f02ac2e2c4e5d2d4925f9736c20dd77a0c09df0806a805d4439e19a79d1f4011d2873cf6f742a21d84e220c1e90c2474549f29721410874a8fc2662e682024b0f568a23c2214b75702eb68d7306557cda349fbdf5bd0a83e324b6f71a98b24ef5337dcd6ca28641b99162aee7ea4c381a0de5496bac625b8037862f64e", &(0x7f00000006c0)="bc4fc948e34a3786ccd00ad684886dc1420ab083ab09de80d160d5d8f698d8986d9c88271c4084c5b268f39662013ce8ee10ec485eb627386f615053c02b6d9b17534143bc0664ed62ff1ac08930d202619a5c66e512696d215bc6b1b0c28c1c0f77ef6679dbf982d57e7a04812154beb60d714769c0fbbacf3a8863fd500ea01788c4574f54b1517fd25e2db0c1774d9d946e2d36e8725ff09e9764b1b262ee6b26ec261ced47d936d272c133e2255997723d182c6ffebb8d8cdc87a7cf92ae761ffce827f4b8f149d7c9b7fcc048b5ad469b01e0800a6c12277f6ade65af359c21709fb812e5f7f397dbd1618846a74cb5b183c7b3b86b8a0fb15e4939ff9af30e62f97c8fb34c3a4d78e2703bc20429d60dab78222dade87912b6da037a9c5149fd84656493752d1878b22be375fc384166c052c0ba485ae73b7ca8c9e77c2530b1b3b2faf46d62b9aca9343da81f705f55f39a3aa18dc46bb419b922619fb349f82e97a6f6ffd36d91e9caa1f212d47b4ff57213f6fff968c0e21778c293e1527f49e4c53fafb1bc87260931a79292e2f4372dbd2830f03a2f92136112880bfdaf7ec40197547a1707ad028446d3289208202111df75e12cc34d8df33a2a5211e0f7eb926dceb636a38f457eeff4326c71ccc3e90903a0cf1f7d93200538df702860e7b2559dcbaa5e4278b5dfbb3f7b2a7648bee628950d3f79f1a29a182e88aba9c669d03c4eabd09b6b6eae533a1d81770903d9430fa17be10394ecb76dcc1230c02f7930985150431b31d01ee64d2958540da2c6c09c89213d4fd3c833141730e8b6db545f85d5b9206b4b875b7ac66b7ad7b3f7e5c5b0fab7275e656f39a8393ed2c06e5ecf4239a227e3a4a964cca3377527c85fa9458782a23a60ae5ca26c36f6d8a868ecff23e45461b0a4cd9adeff0cfeaf11020f475276ccbee5d426b13d92ab8b2f0afbb8c3e6637323676494912d6eb8b041c9b7708ea1564a17f881fb1a93b4f45c31446ee1b2f038c45949b8e74c3d083e9aa0e0541e067df6c4c021743a89d5fffccf3f0b6da3cd4e9d5e495a11453b620e0ff4daa34be22ba2476490971dfa08ce725b16fc328b6ca1d718c5255ec82a32776afe1c24733705a86bc1f4231ad85878a14b4999fd09cef2b1ca9b8c5818bb2fa8cb676c4057ece16a3905965d9c6eebaa84f61f7ee598dfe3a022666310e31ef31f053f96bd7342fa2e24ed445ea72036792b883c7de5215b6b7fa8e770851c3c1dc335eea6e83208cbeb54e0d75b706bf79e72a1141df42cf03f338fa368a7edcbd087e055814cd9f4796068bdac4485fb963d1e3bc7c0ebdf206ff6e324b5db248517bc1c96fb3b872c4226422a935862a175d19a0d6a95f1198c1db43f49bc31759343b70d3d0ff796fef99065a3d288e6b1e8712df27e4aa42bc405911031519479a17ccd6260e1af8c5d421010943badcbddea4bc35843057949be565b6696414f446b648d6a8693db946cba78f65af34e91e403c99275c595f23955ec99a78429092569b6a406686736b65a33e48886a6e86ace359f51629ba39d155f8e449d25a8298e5e49b3dd701134ab4f8ca172405c17357c45d371338fc040aab5223199544eada650d59c18fa38b4a04e0c3baa8317ff3d3faa91abf16af999bf3ec0d187b94505ab08449eb8645c891338532b01a7c0fb248ceb5f2619b7636be3610577c7740693ab4d7e3e381cc7dcbec92f7b89bfce71634f8cec6bcaac3692c350d2740643616e9a81791cd7239d1ee21961dd960d4a0da6a70109d8b71a9f47cc860e226b8429d5d335bfbe54f695c4b7e105115e8fcf995fcd26fa809f3591f8e3d66c46deecf8f9d57b02c53d188779139db51c74b7c39b192e0d9acd1460704555a5253dcdfe9b94ef0994f8074b5177a784b311b64ca3c945c64f0e88d369d18ab132c5376e5da3710f71768a7729914a01a7236e12a69a44ac164da9c6e67762c0a03e3af78c0be838e1f6ffbc2fa223415e70ec61f431b5675c6bb5797b016ff96a764441ef476055a31db65e3eb71f9928a6cd6ea8ae9c8350a81977eae975e9bb2a487a30becd39eddd976b9d835ce8cf71135434eec45559e4a0f4b7d663bbc8995db7306447dc35a3d4056565ef693234a0a12a25e2c3c4ef6ea5c36fe2296f02c46e0f64ad4d5db2b0dc66074ecf0d4aa499cbb7597499797cac81d478014de6bc11c0a2f7b953e341aa6392f0400138f77915ae14c5bef6b3acca3121dbc4140bb5bc2c7ed1e023b4c649e17248236fe2f8c2a025ff3be58c80ecce4509e594c042a9e6d9565a8abc53b0531d4e0a76cab0b81bf9cd7507b7dabb94f5d86b2db649a61254bda27040f757ca7a2b521604cfe9c561d4d2897b28c5550cd9e665d95397ab8ce94ce5f25c61e5cfa498bbd9e0e48c5dbfe3e8bbdb0767457ee2dc833e7fdc5aeb10f11b59d4011ef12f8f9c7b09f1fe78ef100e30c0eb300239a40e2b4e6da364a366204a77ced5a0fb722b08a99a5de09c7464a68c1faaf4143b793f5a8f826bd6fd439aa76a30de4dfbee2394281c11b84013b6542d7c5462b99822d804d421515742ab270a944673b03649fd2c6ca4efe6a6917cd79934a270d379f231853863ddd8cd0da7c72f25d2bbb2b7c50436ec7f6a804c5804decd4d44b62e825e79f5d0aa4462f2dfa399b42e2010cfe159f5901bb43786bf642cf66ec485341dbe0b8e8e30ed594a124c22f15262d420ef8ab7d1b13cad6f9f6920149f63d8cff6cdd9d4cda06ddabfea9db17c1cdd71dbf7d4b85c2eec97016ad02a3683569bce366e5fe46d5269eda150ee29d8c3887138b9b702d036c2bf3069862887f12ae06feecc3ed2e32d8f732506035d04d400d058df9c4be7c7401740b31a5009f001fe53d3a25dabb8d39ae2a921eef612d214ef752d831c54eb0895751ee262620aee50acb139b0164cc6750ecd119c592d05f14cf9818ac55ce0d06866ad4508a248c4eb0bf66b41cc694311fd9ed5f54a28d1829c3cf0d13731ea40cb17641361e99c5cd0889a27112971e7106e88f7f7f3717c2b18daf32d8956c6eec20889343c373a7f4728c7c19d246f83739af9dcb5be3b58620f340e2658d8ae7ee1a600133e7d1a92aff6930f4c18d73f89d70adc595ac09be576bf53abdf5a63f633cc65b32769af4b3ba1783581e3517d2411d5ed481b79632ad41b5899953c2d812be179b10fcc4b6215d534386feee9c6fc69eb179293dfbc14f44c799eaee9ed20e5c3b541821b8c60fcf02098a6aec9d3e9b92eda0aa3299baf1e2028fe48e122c33048492fa20e837ba4117f0fe0db511afd806c9d6ab350f1d4a15c3ab501fd94263bc3c7572bc1cf0bd911010b26a516ac6a782ba1605507e2836c8c2041cb476b6b29066cce1e321f0ed5f33375cca2fd52b0fe05ef8acbc194bf1442a9484f351da435ac2067ddbf9fc41a2eac791ae3c8b757e05c6a31709d62b4f8d35cb98d8c49ff2a3e5ae1e20a8f748217927f7dbfc972968ec3e05302475a9e03cdda869dbcb27b890f7482cbf02a444f295c81685ff06faf6897e6f906176f3c2fa0641e3574c37577f60caafc695d1d0be2b32aedbd3cebcb35e9d39c48bddf93d63eb8b8ff6d9ea7b1a6c9967b20c4e4f59d1fe32e191cf6302626a3ee417cff41489d9c2c7390cbeb9e48f9ec87b91adb7b32197ff1613eec01cc987139c04a40e73b534fcafa2776f7d7fe600fb5d15573c286ab8e97420182252a1bf10c25f8e94fc823e374fb38b00471629ff255bbbc98ef455a58d6b4a83ef038563e631c4eae8c611551b500d98ea65b6e70af399b2e9e2efb08013845264d0923d1f43e06eebf2398acc6ae436e3c38a942fb2e3c29c839d1616f4422ad22f387e4012fdc4e48649aa8b735c76371cf5196f63f57b1b696a6a812653a708df8b4788c609700af87b8314c8c07696da1114cf1eedbbd8045a9d29ccfceba29de105d304a5fcdbd9db3cffa184ec1132520c8bbed30ff549d762df25291012c8caeec2a981c07cf2e69ba952bb1097821125352ed8a6316ff5647ac23853385276db29b938c8bff64e20636732571bb8138362a365779ce320cdeef74ef9586e84e309a950bb544a137ee9332211bcbd8e4c4f5de27c4596b4d7e241959d902b944c1b6860405c79153ded37ac6284ed113a859619dbb4bf715654289a235c95b5c6b04d5755ff6f65abdd70c1257275830c9e7a1a97e1a6084eeb4a831b0fb5c79758a669a66303507ef948f52f7a155695387fe828c4c4d53257379c98778b4789ae52b5cfbe762b70e86d205fe8bbca52e936f284e5890e42362bd2a6a1e65746d057f7a24bdab8304b37fd95d2eacf5a3ddae092940542b77b04d1b951bb128eda2428bedb2d02686a1741e812c70dcd749ab007cf73eded2527b25b821e75d42f3b60bc0d8da75ce3eb8ce829de24479944ebe7a483b4fad3c2046c1ba7861cc0c68ee10793cd1b390953d8511a6ac332537b5eee45dbe2d1fba59c50a0d55e4063e7cc3f1cdfc196ac26252c58a735f9d31b91d85b9f392cad5475e9988915ee8409cf00a15f13cdb3a61a196d8102ec17897fc0a858d9cbe5a323c72186555c1d1f071a2fed57f2664ada2139a4fce3146ff8aac8b8edda43dce432ff794cc70d5ac0eed629f08264c0770e2e72427d4815afa2ae36bb946ccf85208af8e9a6c9a5ee872f03daad1a62b66a2c8a8709c42a9435d8e0cf348d52cfb51b690f6d2b9fc518ddbfce3ac78b18c646d471e2cfaf44184597939ebdce5ab79e0e96837e0acb003b06f2b5e5ae4925a32344e30ce738c0582ac119d0c73f860ad3f75c3f31c7b18fc0a49c68ae25ae6da401cb93d6843adef6ac30621976a12bf93d6cb423e841c4e185359d1c4d2e61c60a7d190a293c24715a83deff6e77a333c0ef32abcb88167bf2a05f04602e0d1bebc9440ba6b2317f4e0b1cbd0e789e408aac3cc2edc9d417420cfdf76fd1557dd5a34e8964addf07cf999803daf5c575b0555354cc61b006962586a651c1442a0ed2e0d90f70502c7e192c882d0cb3f5229fc49e151f084a043c6582320ab3878763b15187848f6def152035626c21b3e33d636a8d979657da1839bcdcd51ba0918f55445499fe1006f5c75ff2a40dc082d4a89f5dca43c67ff0bf1da70681f0e7dd7602f0441e7d3d2e988c403f8cea039cdabf3313788865f90776aa2a456511d23cc1d5ccf4473bb97e11ffe0c0fc8e35f442a1a13d4750b3824a2c3dbee97dc82ccbe36c2fb206acf7f89e5ba435f535edc517a6d381553610b7293c9beacd05db1a505f3d115fb4a4cb1007b429ecb25825033a8f4cb8476ee51e18e35182ee278ba123a5c6f93da29a5800b6a3be498b0ac8717da09e7bcfbd20339cfb7f9370e52d27f0f923437a0c9ffa4a6a1892dcafe9b0df73fa21cf36919a9dc6d14a29445ebd67e215f9ef8959638108e39482c87bb761d750555ffa569c112ea6f7ad6c05464074222de51defcc5e68779eda16333ab3eea26bc64e6e2116504dcafa58420bf10f5aecb0443e320f6b97b173548a2f47e91a47815ee67cba13f3c7c76ee50bf447ccf35bd73bb58354d23d61f1eaa37cc271f33496d836b542ef5de5386ae738c0e61e71dd01ca3c456cebd2e7cc1e632267ec4b311e318ee929021d26856fc194ab360d504d24109346fc4792dbd02fe1adc862ca798dbbc5f57088dc6fe2312b8d1a60d5963a1210ce37021fdd76152b0c9649efb8b9d6b110c753b446fcf2d", 0x2, 0x0, 0x41}, 0x50)
setsockopt$sock_attach_bpf(r10, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r10)

947.672662ms ago: executing program 1 (id=9649):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000010000009cb1e6000000110200000002000000050000000000000c04000000050000000000000604000000000000000300000d000000000f0000000000000007000000010000001000000002000000002e2e307941c5993d339d911791028ebd395152eaca54f5775fa042"], 0x0, 0x6b, 0x0, 0x1, 0x1}, 0x28)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfb7, 0xfffffffffffffffd}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
close(r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r6 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="3fe7ad", 0x3}], 0x1}, 0x4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x2, 0x574b940b860987d2)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r2], 0x48)
r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101200, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000004c0)={'veth1_to_bridge\x00'})
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r3)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000240))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000280)=""/113}, 0x20)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x20, 0xfffffffd, 0x1, 0x9be1, 0x400, r9, 0x6, '\x00', 0x0, r4, 0x5, 0x4, 0x4}, 0x50)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000006c0)="7bb53cf01ff328cc6866afa8acaa4920942b71efcb9699ba05ad5a2b9824f2abef92ed2a1383b6adbfb99a20c3f36f5bca078245ec1df2612cf6c6688b782a9aed7cc16987d837aa133953c4eab14c99ac35471cc91ef29add93ab5e7d746628766e336987c045913df392c1610b1e4a8e5ce673fb097c32204a44a7b2a02c4029a21e36afa10889b8ed9e8eb248d1b9ae20bd84f1ef98cf8ad77f72c61b9190432d456132086810049c88482550f59342b0682c5ecd0fc0cca463d279ee5ee666", 0xc1}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES8=r6, @ANYRES32=r7, @ANYRES32, @ANYRES16=r7, @ANYRES32, @ANYRES32=r14, @ANYRES32, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r13, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRESOCT, @ANYRES16=r15, @ANYRES32, @ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000028000094aef439b29e849ca233d9e5860068224692e08589cf8839c52d", @ANYRES32=r6, @ANYRES32=r9, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r15, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRESDEC=r3, @ANYBLOB="b52f38bd9be17bcf89bab0ebec8e6aed5900f5d18f76a939fcd9430b615d3c4160d1da3f11783bb719668611f373e83a920ae9a63dc6caa48590258cfbd80c672d200464dd3a6691a9b9c077ac97702fe7eada8a132bedffa910659fbf7b779a084a9b7b5dbf417be000fd6a545b68edcf2a9786e5c9b7462d88def760f23fac0aa674b4dd52923292b7e6ff06ca359cb3452d6cc66040093aa4bd0402b1f63cfc4a35c485f5910000"], 0x158, 0xc881}, 0x40040)

777.937111ms ago: executing program 0 (id=9650):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x11)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000300)=""/173, 0xad}], 0x3}, 0x42)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xa, 0x0, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0xa, 0x3, 0x11) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async)
recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000300)=""/173, 0xad}], 0x3}, 0x42) (async)
socket$kcm(0x11, 0x2, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x107, 0xa, 0x0, 0x4) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (async)

469.210917ms ago: executing program 2 (id=9651):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x2, 0x10, 0x0, 0xa, 0xa848, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x200000000000c8, 0x20802, 0x7, 0xfffffffffffffff7, 0x80008000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfdef)

387.09133ms ago: executing program 2 (id=9652):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8001800100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

308.707025ms ago: executing program 1 (id=9653):
r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff27, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x3f, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
close(r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

245.300528ms ago: executing program 2 (id=9654):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

244.085598ms ago: executing program 0 (id=9661):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 0 (id=9655):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002980)={r1, &(0x7f0000000740)="f213e10a3ce27898f9dc0d1bea4d45a04f23f91c230b964ae7aa96105410016a69dfed5009fa16bcf7f554443f8a1f932f45efafbe5301c9597e094c54eae3ba5584c241e085e307559fa52b931fc9d4757c01fbf9c598212d934c788da8207c901ecd38ae00925fe8574858545cbdac29e4ff48c607a0c5aaf5bc8c5fdc7878c362613e69d5794f982666ad88544dfcb621570e13fd9abf8b164ab83ea4227992fe88bd344e541670ec6e3fe6bf8f7e8245bc860384f850175d033540217683dd11", &(0x7f0000001980)=""/4096}, 0x20)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000900)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)

kernel console output (not intermixed with test programs):

2480.922156][ T1641]  rtnetlink_rcv_msg+0x869/0xfa0
[ 2480.927161][ T1641]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2480.932426][ T1641]  ? rtnetlink_bind+0x80/0x80
[ 2480.937152][ T1641]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 2480.943084][ T1641]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 2480.948884][ T1641]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 2480.954678][ T1641]  ? perf_trace_lock+0x304/0x3b0
[ 2480.959700][ T1641]  netlink_rcv_skb+0x241/0x4d0
[ 2480.964640][ T1641]  ? rtnetlink_bind+0x80/0x80
[ 2480.969382][ T1641]  ? netlink_ack+0x1180/0x1180
[ 2480.974236][ T1641]  ? __lock_acquire+0x7d40/0x7d40
[ 2480.979427][ T1641]  ? net_generic+0x1e/0x240
[ 2480.984008][ T1641]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2480.989290][ T1641]  netlink_unicast+0x751/0x8d0
[ 2480.994157][ T1641]  netlink_sendmsg+0x8d0/0xbf0
[ 2480.999000][ T1641]  ? perf_trace_lock+0x304/0x3b0
[ 2481.004028][ T1641]  ? netlink_getsockopt+0x590/0x590
[ 2481.009337][ T1641]  ? aa_sock_msg_perm+0x94/0x150
[ 2481.014404][ T1641]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2481.019844][ T1641]  ? security_socket_sendmsg+0x80/0xa0
[ 2481.025379][ T1641]  ? netlink_getsockopt+0x590/0x590
[ 2481.030702][ T1641]  ____sys_sendmsg+0x5ba/0x960
[ 2481.035554][ T1641]  ? __asan_memset+0x22/0x40
[ 2481.040208][ T1641]  ? __sys_sendmsg_sock+0x30/0x30
[ 2481.045510][ T1641]  ? __import_iovec+0x3fa/0x850
[ 2481.050563][ T1641]  ? import_iovec+0x73/0xa0
[ 2481.055154][ T1641]  ___sys_sendmsg+0x2a6/0x360
[ 2481.059929][ T1641]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2481.064805][ T1641]  ? __lock_acquire+0x7d40/0x7d40
[ 2481.069926][ T1641]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2481.074834][ T1641]  ? __x64_sys_sendmsg+0x80/0x80
[ 2481.079854][ T1641]  ? lockdep_hardirqs_on+0x98/0x150
[ 2481.085144][ T1641]  do_syscall_64+0x55/0xa0
[ 2481.089646][ T1641]  ? clear_bhb_loop+0x40/0x90
[ 2481.094403][ T1641]  ? clear_bhb_loop+0x40/0x90
[ 2481.099156][ T1641]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2481.105137][ T1641] RIP: 0033:0x7f103e39c819
[ 2481.109618][ T1641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2481.129493][ T1641] RSP: 002b:00007f103c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2481.137961][ T1641] RAX: ffffffffffffffda RBX: 00007f103e615fa0 RCX: 00007f103e39c819
[ 2481.145979][ T1641] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004
[ 2481.154002][ T1641] RBP: 00007f103c5f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2481.162015][ T1641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2481.170236][ T1641] R13: 00007f103e616038 R14: 00007f103e615fa0 R15: 00007ffe420b27e8
[ 2481.178324][ T1641]  </TASK>
[ 2481.961573][ T1665] netlink: 'syz.2.9009': attribute type 3 has an invalid length.
[ 2482.018351][ T1661] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9007'.
[ 2482.030356][ T1665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9009'.
[ 2482.145601][ T1664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2483.997171][ T1679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9013'.
[ 2486.805608][ T1707] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.9019'.
[ 2486.863947][ T1711] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9021'.
[ 2487.016906][ T1717] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.9024'.
[ 2487.054443][ T1720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9023'.
[ 2487.964649][ T1735] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9030'.
[ 2490.423784][ T1735] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9030'.
[ 2490.434299][ T1737] netlink: 'syz.3.9031': attribute type 10 has an invalid length.
[ 2490.464074][ T1737] bond0: (slave veth0_to_batadv): Enslaving as an active interface with an up link
[ 2490.594313][ T1748] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9034'.
[ 2490.658892][ T1752] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9037'.
[ 2490.668714][ T1752] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9037'.
[ 2490.685674][ T1752] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9037'.
[ 2490.853145][ T1758] netlink: 'syz.2.9039': attribute type 3 has an invalid length.
[ 2493.085170][ T1797] FAULT_INJECTION: forcing a failure.
[ 2493.085170][ T1797] name failslab, interval 1, probability 0, space 0, times 0
[ 2493.098795][ T1797] CPU: 1 PID: 1797 Comm: syz.2.9051 Not tainted syzkaller #0
[ 2493.106302][ T1797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2493.116418][ T1797] Call Trace:
[ 2493.119773][ T1797]  <TASK>
[ 2493.122763][ T1797]  dump_stack_lvl+0x18c/0x250
[ 2493.127515][ T1797]  ? show_regs_print_info+0x20/0x20
[ 2493.132771][ T1797]  ? load_image+0x420/0x420
[ 2493.137387][ T1797]  ? __might_sleep+0xe0/0xe0
[ 2493.142051][ T1797]  ? __lock_acquire+0x7d40/0x7d40
[ 2493.147153][ T1797]  should_fail_ex+0x39d/0x4d0
[ 2493.151928][ T1797]  should_failslab+0x9/0x20
[ 2493.156506][ T1797]  slab_pre_alloc_hook+0x59/0x310
[ 2493.161579][ T1797]  ? kvmalloc_node+0x70/0x180
[ 2493.166298][ T1797]  ? kvmalloc_node+0x70/0x180
[ 2493.171031][ T1797]  __kmem_cache_alloc_node+0x53/0x250
[ 2493.176542][ T1797]  ? kvmalloc_node+0x70/0x180
[ 2493.181276][ T1797]  __kmalloc_node+0xa4/0x230
[ 2493.185929][ T1797]  kvmalloc_node+0x70/0x180
[ 2493.190486][ T1797]  bpf_test_run_xdp_live+0x1e9/0x1b20
[ 2493.195914][ T1797]  ? 0xffffffffa0004740
[ 2493.200110][ T1797]  ? 0xffffffffa0004740
[ 2493.204328][ T1797]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[ 2493.210279][ T1797]  ? 0xffffffffa0004740
[ 2493.214568][ T1797]  ? xdp_convert_md_to_buff+0x330/0x330
[ 2493.220184][ T1797]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 2493.226472][ T1797]  ? _copy_from_user+0xa5/0xe0
[ 2493.231295][ T1797]  ? bpf_test_init+0x119/0x140
[ 2493.236105][ T1797]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 2493.241607][ T1797]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[ 2493.247123][ T1797]  ? dev_put+0x80/0x80
[ 2493.251327][ T1797]  ? dev_put+0x80/0x80
[ 2493.255434][ T1797]  bpf_prog_test_run+0x321/0x390
[ 2493.260496][ T1797]  __sys_bpf+0x49d/0x890
[ 2493.264786][ T1797]  ? bpf_link_show_fdinfo+0x390/0x390
[ 2493.270214][ T1797]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2493.276533][ T1797]  __x64_sys_bpf+0x7c/0x90
[ 2493.281157][ T1797]  do_syscall_64+0x55/0xa0
[ 2493.285603][ T1797]  ? clear_bhb_loop+0x40/0x90
[ 2493.290334][ T1797]  ? clear_bhb_loop+0x40/0x90
[ 2493.295158][ T1797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2493.301466][ T1797] RIP: 0033:0x7fec8bf9c819
[ 2493.305951][ T1797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2493.326390][ T1797] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2493.335040][ T1797] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2493.343047][ T1797] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 2493.351085][ T1797] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2493.359170][ T1797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2493.367190][ T1797] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2493.375236][ T1797]  </TASK>
[ 2494.456761][ T1789] __nla_validate_parse: 7 callbacks suppressed
[ 2494.456783][ T1789] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.9049'.
[ 2494.602249][ T1803] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.9053'.
[ 2497.793604][ T1825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9061'.
[ 2497.803699][ T1825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9061'.
[ 2497.937777][ T1828] sctp: [Deprecated]: syz.0.9061 (pid 1828) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2497.937777][ T1828] Use struct sctp_sack_info instead
[ 2498.084675][ T1836] FAULT_INJECTION: forcing a failure.
[ 2498.084675][ T1836] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2498.108835][ T1836] CPU: 1 PID: 1836 Comm: syz.3.9066 Not tainted syzkaller #0
[ 2498.116322][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2498.126546][ T1836] Call Trace:
[ 2498.129897][ T1836]  <TASK>
[ 2498.132883][ T1836]  dump_stack_lvl+0x18c/0x250
[ 2498.137646][ T1836]  ? show_regs_print_info+0x20/0x20
[ 2498.142980][ T1836]  ? load_image+0x420/0x420
[ 2498.147542][ T1836]  ? __lock_acquire+0x7d40/0x7d40
[ 2498.152612][ T1836]  ? mark_lock+0x94/0x320
[ 2498.156983][ T1836]  should_fail_ex+0x39d/0x4d0
[ 2498.161771][ T1836]  prepare_alloc_pages+0x1e2/0x5f0
[ 2498.166987][ T1836]  __alloc_pages+0x134/0x460
[ 2498.171735][ T1836]  ? zone_statistics+0x170/0x170
[ 2498.176749][ T1836]  ? do_wp_page+0x7ca/0x35f0
[ 2498.181509][ T1836]  ? do_wp_page+0xfc5/0x35f0
[ 2498.186261][ T1836]  __folio_alloc+0x10/0x20
[ 2498.190818][ T1836]  vma_alloc_folio+0x47a/0x8f0
[ 2498.195630][ T1836]  do_wp_page+0x1243/0x35f0
[ 2498.200194][ T1836]  ? folio_put+0xd0/0xd0
[ 2498.204497][ T1836]  ? do_raw_spin_lock+0x11f/0x2c0
[ 2498.209587][ T1836]  ? __rwlock_init+0x150/0x150
[ 2498.214427][ T1836]  handle_mm_fault+0x135d/0x4c00
[ 2498.219408][ T1836]  ? handle_mm_fault+0xe7/0x4c00
[ 2498.224463][ T1836]  ? numa_migrate_prep+0x350/0x350
[ 2498.229646][ T1836]  ? lock_mm_and_find_vma+0x9c/0x2f0
[ 2498.235001][ T1836]  do_user_addr_fault+0x730/0x12c0
[ 2498.240206][ T1836]  exc_page_fault+0x64/0x100
[ 2498.244858][ T1836]  asm_exc_page_fault+0x26/0x30
[ 2498.249748][ T1836] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 2498.255849][ T1836] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 2498.276006][ T1836] RSP: 0018:ffffc900034e7630 EFLAGS: 00050202
[ 2498.282231][ T1836] RAX: ffffffff8427ca01 RBX: 0000000000000e5c RCX: 000000000000099c
[ 2498.290429][ T1836] RDX: 0000000000000000 RSI: ffff88803651c4c0 RDI: 0000200000001000
[ 2498.298464][ T1836] RBP: ffffc900034e77c0 R08: ffff88803651ce5b R09: 1ffff11006ca39cb
[ 2498.306529][ T1836] R10: dffffc0000000000 R11: ffffed1006ca39cc R12: 000020000000199c
[ 2498.314841][ T1836] R13: ffffc900034e7e40 R14: 0000200000000b40 R15: ffff88803651c000
[ 2498.322881][ T1836]  ? copyout+0x1/0x90
[ 2498.326924][ T1836]  copyout+0x70/0x90
[ 2498.330878][ T1836]  _copy_to_iter+0x432/0x1120
[ 2498.335613][ T1836]  ? iov_iter_init+0x1e0/0x1e0
[ 2498.340422][ T1836]  ? __virt_addr_valid+0x18c/0x540
[ 2498.345621][ T1836]  ? __virt_addr_valid+0x469/0x540
[ 2498.350774][ T1836]  ? __phys_addr_symbol+0x2f/0x70
[ 2498.355894][ T1836]  __skb_datagram_iter+0xdb/0x780
[ 2498.360969][ T1836]  ? skb_copy_datagram_iter+0x200/0x200
[ 2498.366580][ T1836]  skb_copy_datagram_iter+0xb1/0x200
[ 2498.371933][ T1836]  netlink_recvmsg+0x2d4/0xe60
[ 2498.376816][ T1836]  ? netlink_sendmsg+0xbf0/0xbf0
[ 2498.381811][ T1836]  ? aa_af_perm+0x330/0x330
[ 2498.386505][ T1836]  ? __lock_acquire+0x1273/0x7d40
[ 2498.391572][ T1836]  ? verify_lock_unused+0x140/0x140
[ 2498.396918][ T1836]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 2498.402255][ T1836]  ? security_socket_recvmsg+0x89/0xb0
[ 2498.407783][ T1836]  ? netlink_sendmsg+0xbf0/0xbf0
[ 2498.412889][ T1836]  ____sys_recvmsg+0x2ce/0x5e0
[ 2498.417714][ T1836]  ? __sys_recvmsg_sock+0x50/0x50
[ 2498.422812][ T1836]  ? import_iovec+0x73/0xa0
[ 2498.427386][ T1836]  ___sys_recvmsg+0x216/0x590
[ 2498.432123][ T1836]  ? __sys_recvmsg+0x2a0/0x2a0
[ 2498.436939][ T1836]  ? ksys_write+0x1c4/0x260
[ 2498.441493][ T1836]  ? __fget_files+0x43d/0x4b0
[ 2498.446852][ T1836]  __x64_sys_recvmsg+0x20c/0x2e0
[ 2498.451851][ T1836]  ? ___sys_recvmsg+0x590/0x590
[ 2498.456853][ T1836]  ? lockdep_hardirqs_on+0x98/0x150
[ 2498.462102][ T1836]  do_syscall_64+0x55/0xa0
[ 2498.466552][ T1836]  ? clear_bhb_loop+0x40/0x90
[ 2498.471270][ T1836]  ? clear_bhb_loop+0x40/0x90
[ 2498.475993][ T1836]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2498.481923][ T1836] RIP: 0033:0x7fd13c59c819
[ 2498.486374][ T1836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2498.506017][ T1836] RSP: 002b:00007fd13d4c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 2498.514474][ T1836] RAX: ffffffffffffffda RBX: 00007fd13c815fa0 RCX: 00007fd13c59c819
[ 2498.522485][ T1836] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[ 2498.530520][ T1836] RBP: 00007fd13d4c6090 R08: 0000000000000000 R09: 0000000000000000
[ 2498.538611][ T1836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2498.546647][ T1836] R13: 00007fd13c816038 R14: 00007fd13c815fa0 R15: 00007fffe4832718
[ 2498.554685][ T1836]  </TASK>
[ 2498.577352][ T1834] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.9065'.
[ 2498.666647][ T1838] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9067'.
[ 2498.956885][ T1843] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9069'.
[ 2499.042201][ T1854] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9071'.
[ 2499.051929][ T1854] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9071'.
[ 2499.072416][ T1850] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9071'.
[ 2499.513117][ T1868] __nla_validate_parse: 2 callbacks suppressed
[ 2499.513161][ T1868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9076'.
[ 2499.591497][ T1867] netlink: 'syz.2.9077': attribute type 2 has an invalid length.
[ 2499.601668][ T1867] netlink: 'syz.2.9077': attribute type 1 has an invalid length.
[ 2499.612141][ T1867] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.9077'.
[ 2500.842925][ T1881] FAULT_INJECTION: forcing a failure.
[ 2500.842925][ T1881] name failslab, interval 1, probability 0, space 0, times 0
[ 2500.865160][ T1881] CPU: 0 PID: 1881 Comm: syz.1.9082 Not tainted syzkaller #0
[ 2500.873103][ T1881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2500.883666][ T1881] Call Trace:
[ 2500.887157][ T1881]  <TASK>
[ 2500.890183][ T1881]  dump_stack_lvl+0x18c/0x250
[ 2500.895023][ T1881]  ? show_regs_print_info+0x20/0x20
[ 2500.900438][ T1881]  ? load_image+0x420/0x420
[ 2500.905056][ T1881]  ? __might_sleep+0xe0/0xe0
[ 2500.909737][ T1881]  ? __lock_acquire+0x7d40/0x7d40
[ 2500.914843][ T1881]  should_fail_ex+0x39d/0x4d0
[ 2500.919619][ T1881]  should_failslab+0x9/0x20
[ 2500.924200][ T1881]  slab_pre_alloc_hook+0x59/0x310
[ 2500.929365][ T1881]  ? subflow_ulp_init+0x95/0x530
[ 2500.934485][ T1881]  __kmem_cache_alloc_node+0x53/0x250
[ 2500.939959][ T1881]  ? tcp_set_ulp+0xb1/0x5f0
[ 2500.944545][ T1881]  ? subflow_ulp_init+0x95/0x530
[ 2500.949630][ T1881]  kmalloc_trace+0x2a/0xe0
[ 2500.954103][ T1881]  subflow_ulp_init+0x95/0x530
[ 2500.958942][ T1881]  ? tcp_set_ulp+0xb1/0x5f0
[ 2500.963509][ T1881]  tcp_set_ulp+0x536/0x5f0
[ 2500.967986][ T1881]  mptcp_subflow_create_socket+0x60e/0xac0
[ 2500.973855][ T1881]  ? __mptcp_subflow_connect+0x1450/0x1450
[ 2500.979708][ T1881]  ? mark_lock+0x94/0x320
[ 2500.984093][ T1881]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2500.990145][ T1881]  __mptcp_nmpc_sk+0x157/0x740
[ 2500.994988][ T1881]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[ 2501.001822][ T1881]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2501.007365][ T1881]  ? lockdep_hardirqs_on+0x98/0x150
[ 2501.012667][ T1881]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2501.018106][ T1881]  mptcp_sendmsg_fastopen+0x7f/0x4d0
[ 2501.023455][ T1881]  mptcp_sendmsg+0x14b2/0x16d0
[ 2501.028278][ T1881]  ? __lock_acquire+0x1273/0x7d40
[ 2501.033368][ T1881]  ? aa_sk_perm+0x83c/0x970
[ 2501.037942][ T1881]  ? aa_af_perm+0x330/0x330
[ 2501.042524][ T1881]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 2501.049052][ T1881]  ? mptcp_shutdown+0x80/0x80
[ 2501.053795][ T1881]  ? sock_rps_record_flow+0x19/0x3f0
[ 2501.059137][ T1881]  ? inet_sendmsg+0xe9/0x2f0
[ 2501.063791][ T1881]  ? inet_send_prepare+0x260/0x260
[ 2501.068973][ T1881]  ____sys_sendmsg+0x5ba/0x960
[ 2501.073793][ T1881]  ? __lock_acquire+0x7d40/0x7d40
[ 2501.078871][ T1881]  ? __asan_memset+0x22/0x40
[ 2501.083533][ T1881]  ? __sys_sendmsg_sock+0x30/0x30
[ 2501.088758][ T1881]  ? __import_iovec+0x3fa/0x850
[ 2501.093681][ T1881]  ? import_iovec+0x73/0xa0
[ 2501.098252][ T1881]  ___sys_sendmsg+0x2a6/0x360
[ 2501.102993][ T1881]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2501.107831][ T1881]  ? __lock_acquire+0x7d40/0x7d40
[ 2501.113373][ T1881]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2501.118290][ T1881]  ? __x64_sys_sendmsg+0x80/0x80
[ 2501.123296][ T1881]  ? lockdep_hardirqs_on+0x98/0x150
[ 2501.128552][ T1881]  do_syscall_64+0x55/0xa0
[ 2501.133006][ T1881]  ? clear_bhb_loop+0x40/0x90
[ 2501.137723][ T1881]  ? clear_bhb_loop+0x40/0x90
[ 2501.142439][ T1881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2501.148410][ T1881] RIP: 0033:0x7f103e39c819
[ 2501.152973][ T1881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2501.172676][ T1881] RSP: 002b:00007f103c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2501.181145][ T1881] RAX: ffffffffffffffda RBX: 00007f103e615fa0 RCX: 00007f103e39c819
[ 2501.189173][ T1881] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003
[ 2501.197214][ T1881] RBP: 00007f103c5f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2501.205233][ T1881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2501.213247][ T1881] R13: 00007f103e616038 R14: 00007f103e615fa0 R15: 00007ffe420b27e8
[ 2501.221277][ T1881]  </TASK>
[ 2503.881328][ T1885] netlink: 'syz.1.9083': attribute type 10 has an invalid length.
[ 2503.889473][ T1886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9083'.
[ 2504.346672][ T1905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9089'.
[ 2505.201501][ T1914] FAULT_INJECTION: forcing a failure.
[ 2505.201501][ T1914] name failslab, interval 1, probability 0, space 0, times 0
[ 2505.230310][ T1914] CPU: 0 PID: 1914 Comm: syz.0.9092 Not tainted syzkaller #0
[ 2505.238091][ T1914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2505.248240][ T1914] Call Trace:
[ 2505.251576][ T1914]  <TASK>
[ 2505.254568][ T1914]  dump_stack_lvl+0x18c/0x250
[ 2505.259343][ T1914]  ? show_regs_print_info+0x20/0x20
[ 2505.264731][ T1914]  ? load_image+0x420/0x420
[ 2505.269326][ T1914]  ? __might_sleep+0xe0/0xe0
[ 2505.274002][ T1914]  ? __lock_acquire+0x7d40/0x7d40
[ 2505.279106][ T1914]  should_fail_ex+0x39d/0x4d0
[ 2505.283878][ T1914]  should_failslab+0x9/0x20
[ 2505.288472][ T1914]  slab_pre_alloc_hook+0x59/0x310
[ 2505.293605][ T1914]  ? __scm_send+0x64c/0x14a0
[ 2505.298270][ T1914]  __kmem_cache_alloc_node+0x53/0x250
[ 2505.303715][ T1914]  ? aa_label_sk_perm+0x463/0x5c0
[ 2505.308919][ T1914]  ? __scm_send+0x64c/0x14a0
[ 2505.313608][ T1914]  kmalloc_trace+0x2a/0xe0
[ 2505.318210][ T1914]  __scm_send+0x64c/0x14a0
[ 2505.324122][ T1914]  ? __scm_destroy+0x160/0x160
[ 2505.329132][ T1914]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10
[ 2505.335703][ T1914]  ? security_socket_getpeersec_dgram+0x83/0xa0
[ 2505.342635][ T1914]  unix_stream_sendmsg+0x152/0xbf0
[ 2505.347815][ T1914]  ? aa_sk_perm+0x83c/0x970
[ 2505.352414][ T1914]  ? unix_show_fdinfo+0x270/0x270
[ 2505.357614][ T1914]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 2505.364116][ T1914]  ? __might_fault+0xaa/0x120
[ 2505.368852][ T1914]  ? aa_sock_msg_perm+0x94/0x150
[ 2505.373869][ T1914]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2505.379211][ T1914]  ? security_socket_sendmsg+0x80/0xa0
[ 2505.387529][ T1914]  ? unix_show_fdinfo+0x270/0x270
[ 2505.392641][ T1914]  ____sys_sendmsg+0x5ba/0x960
[ 2505.397466][ T1914]  ? __sys_sendmsg_sock+0x30/0x30
[ 2505.402721][ T1914]  ? __import_iovec+0x5f2/0x850
[ 2505.407644][ T1914]  ? import_iovec+0x73/0xa0
[ 2505.412190][ T1914]  ___sys_sendmsg+0x2a6/0x360
[ 2505.417139][ T1914]  ? get_pid_task+0x20/0x1e0
[ 2505.421870][ T1914]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2505.426886][ T1914]  ? __lock_acquire+0x7d40/0x7d40
[ 2505.432037][ T1914]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2505.436950][ T1914]  ? __x64_sys_sendmsg+0x80/0x80
[ 2505.442211][ T1914]  ? lockdep_hardirqs_on+0x98/0x150
[ 2505.447463][ T1914]  do_syscall_64+0x55/0xa0
[ 2505.451922][ T1914]  ? clear_bhb_loop+0x40/0x90
[ 2505.456643][ T1914]  ? clear_bhb_loop+0x40/0x90
[ 2505.461370][ T1914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2505.467442][ T1914] RIP: 0033:0x7f182c39c819
[ 2505.471949][ T1914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2505.491717][ T1914] RSP: 002b:00007f182d282028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2505.500347][ T1914] RAX: ffffffffffffffda RBX: 00007f182c616090 RCX: 00007f182c39c819
[ 2505.508391][ T1914] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000004
[ 2505.516927][ T1914] RBP: 00007f182d282090 R08: 0000000000000000 R09: 0000000000000000
[ 2505.525041][ T1914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2505.533244][ T1914] R13: 00007f182c616128 R14: 00007f182c616090 R15: 00007ffce697a318
[ 2505.541283][ T1914]  </TASK>
[ 2510.076275][ T1918] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9093'.
[ 2510.400379][ T1929] netlink: 'syz.1.9100': attribute type 3 has an invalid length.
[ 2510.408225][ T1929] netlink: 'syz.1.9100': attribute type 4 has an invalid length.
[ 2510.450578][ T1927] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.9099'.
[ 2510.461352][ T1929] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.9100'.
[ 2510.602726][ T1932] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9101'.
[ 2510.729112][ T1941] FAULT_INJECTION: forcing a failure.
[ 2510.729112][ T1941] name failslab, interval 1, probability 0, space 0, times 0
[ 2510.764102][ T1941] CPU: 0 PID: 1941 Comm: syz.2.9104 Not tainted syzkaller #0
[ 2510.772114][ T1941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2510.782330][ T1941] Call Trace:
[ 2510.785661][ T1941]  <TASK>
[ 2510.788640][ T1941]  dump_stack_lvl+0x18c/0x250
[ 2510.793401][ T1941]  ? show_regs_print_info+0x20/0x20
[ 2510.798671][ T1941]  ? load_image+0x420/0x420
[ 2510.803252][ T1941]  ? __might_sleep+0xe0/0xe0
[ 2510.807914][ T1941]  ? __lock_acquire+0x7d40/0x7d40
[ 2510.813009][ T1941]  should_fail_ex+0x39d/0x4d0
[ 2510.817755][ T1941]  should_failslab+0x9/0x20
[ 2510.822340][ T1941]  slab_pre_alloc_hook+0x59/0x310
[ 2510.827448][ T1941]  ? subflow_ulp_init+0x95/0x530
[ 2510.832658][ T1941]  __kmem_cache_alloc_node+0x53/0x250
[ 2510.838108][ T1941]  ? tcp_set_ulp+0xb1/0x5f0
[ 2510.842786][ T1941]  ? subflow_ulp_init+0x95/0x530
[ 2510.847799][ T1941]  kmalloc_trace+0x2a/0xe0
[ 2510.852300][ T1941]  subflow_ulp_init+0x95/0x530
[ 2510.857236][ T1941]  ? tcp_set_ulp+0xb1/0x5f0
[ 2510.861809][ T1941]  tcp_set_ulp+0x536/0x5f0
[ 2510.866322][ T1941]  mptcp_subflow_create_socket+0x60e/0xac0
[ 2510.872240][ T1941]  ? __mptcp_subflow_connect+0x1450/0x1450
[ 2510.878383][ T1941]  ? mark_lock+0x94/0x320
[ 2510.882819][ T1941]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2510.888889][ T1941]  __mptcp_nmpc_sk+0x157/0x740
[ 2510.893912][ T1941]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[ 2510.900870][ T1941]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2510.906410][ T1941]  ? lockdep_hardirqs_on+0x98/0x150
[ 2510.911701][ T1941]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2510.917204][ T1941]  mptcp_sendmsg_fastopen+0x7f/0x4d0
[ 2510.922574][ T1941]  mptcp_sendmsg+0x14b2/0x16d0
[ 2510.927430][ T1941]  ? __lock_acquire+0x1273/0x7d40
[ 2510.932542][ T1941]  ? aa_sk_perm+0x83c/0x970
[ 2510.937227][ T1941]  ? aa_af_perm+0x330/0x330
[ 2510.941793][ T1941]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 2510.948322][ T1941]  ? mptcp_shutdown+0x80/0x80
[ 2510.953061][ T1941]  ? sock_rps_record_flow+0x19/0x3f0
[ 2510.958415][ T1941]  ? inet_sendmsg+0xe9/0x2f0
[ 2510.963073][ T1941]  ? inet_send_prepare+0x260/0x260
[ 2510.968256][ T1941]  ____sys_sendmsg+0x5ba/0x960
[ 2510.973081][ T1941]  ? __lock_acquire+0x7d40/0x7d40
[ 2510.978175][ T1941]  ? __asan_memset+0x22/0x40
[ 2510.982916][ T1941]  ? __sys_sendmsg_sock+0x30/0x30
[ 2510.988006][ T1941]  ? __import_iovec+0x3fa/0x850
[ 2510.992933][ T1941]  ? import_iovec+0x73/0xa0
[ 2510.997865][ T1941]  ___sys_sendmsg+0x2a6/0x360
[ 2511.002626][ T1941]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2511.007663][ T1941]  ? __lock_acquire+0x7d40/0x7d40
[ 2511.012786][ T1941]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2511.017715][ T1941]  ? __x64_sys_sendmsg+0x80/0x80
[ 2511.022834][ T1941]  ? lockdep_hardirqs_on+0x98/0x150
[ 2511.028109][ T1941]  do_syscall_64+0x55/0xa0
[ 2511.032581][ T1941]  ? clear_bhb_loop+0x40/0x90
[ 2511.037320][ T1941]  ? clear_bhb_loop+0x40/0x90
[ 2511.042080][ T1941]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2511.048046][ T1941] RIP: 0033:0x7fec8bf9c819
[ 2511.052562][ T1941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2511.072237][ T1941] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2511.080901][ T1941] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2511.088944][ T1941] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003
[ 2511.096988][ T1941] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2511.105196][ T1941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2511.113238][ T1941] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2511.114124][ T1935] syzkaller0: entered promiscuous mode
[ 2511.121275][ T1941]  </TASK>
[ 2511.150788][ T1935] syzkaller0: entered allmulticast mode
[ 2513.956292][ T1955] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9110'.
[ 2516.465467][ T1949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9107'.
[ 2516.475058][ T1955] netlink: 'syz.2.9110': attribute type 3 has an invalid length.
[ 2516.750626][ T1968] netlink: 'syz.0.9113': attribute type 3 has an invalid length.
[ 2516.758971][ T1968] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9113'.
[ 2517.125646][ T1980] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9118'.
[ 2517.301843][ T1983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9119'.
[ 2518.077847][ T2008] netlink: 'syz.2.9126': attribute type 21 has an invalid length.
[ 2518.147000][ T2012] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9128'.
[ 2518.173456][ T2005] netlink: 209796 bytes leftover after parsing attributes in process `syz.2.9126'.
[ 2518.204756][ T2005] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2521.606453][ T2016] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9130'.
[ 2522.118321][ T2025] syzkaller0: entered promiscuous mode
[ 2522.166604][ T2025] syzkaller0: entered allmulticast mode
[ 2525.007948][ T2046] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9138'.
[ 2525.239491][ T2051] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9140'.
[ 2525.266276][ T2051] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9140'.
[ 2525.279575][ T2057] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9140'.
[ 2525.313833][ T2054] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.9141'.
[ 2525.363114][ T2058] netlink: 'syz.0.9142': attribute type 29 has an invalid length.
[ 2525.372790][ T2058] netlink: 'syz.0.9142': attribute type 29 has an invalid length.
[ 2525.388855][ T2058] netlink: 'syz.0.9142': attribute type 29 has an invalid length.
[ 2525.398406][ T2058] netlink: 'syz.0.9142': attribute type 29 has an invalid length.
[ 2525.627467][ T2061] FAULT_INJECTION: forcing a failure.
[ 2525.627467][ T2061] name failslab, interval 1, probability 0, space 0, times 0
[ 2525.660469][ T2061] CPU: 1 PID: 2061 Comm: syz.2.9143 Not tainted syzkaller #0
[ 2525.667960][ T2061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2525.678177][ T2061] Call Trace:
[ 2525.681493][ T2061]  <TASK>
[ 2525.684480][ T2061]  dump_stack_lvl+0x18c/0x250
[ 2525.689224][ T2061]  ? show_regs_print_info+0x20/0x20
[ 2525.694469][ T2061]  ? load_image+0x420/0x420
[ 2525.699012][ T2061]  ? __might_sleep+0xe0/0xe0
[ 2525.703673][ T2061]  ? __lock_acquire+0x7d40/0x7d40
[ 2525.708751][ T2061]  should_fail_ex+0x39d/0x4d0
[ 2525.713470][ T2061]  should_failslab+0x9/0x20
[ 2525.718013][ T2061]  slab_pre_alloc_hook+0x59/0x310
[ 2525.723082][ T2061]  ? __get_vm_area_node+0x125/0x370
[ 2525.728344][ T2061]  __kmem_cache_alloc_node+0x53/0x250
[ 2525.733785][ T2061]  ? __get_vm_area_node+0x125/0x370
[ 2525.739057][ T2061]  kmalloc_node_trace+0x26/0xe0
[ 2525.743962][ T2061]  __get_vm_area_node+0x125/0x370
[ 2525.749034][ T2061]  __vmalloc_node_range+0x36e/0x1330
[ 2525.754374][ T2061]  ? netlink_sendmsg+0x602/0xbf0
[ 2525.759355][ T2061]  ? netlink_insert+0x109f/0x13a0
[ 2525.764430][ T2061]  ? netlink_data_ready+0x10/0x10
[ 2525.769497][ T2061]  ? free_vm_area+0x50/0x50
[ 2525.774134][ T2061]  ? netlink_sendmsg+0x602/0xbf0
[ 2525.779114][ T2061]  vmalloc+0x79/0x90
[ 2525.783045][ T2061]  ? netlink_sendmsg+0x602/0xbf0
[ 2525.788038][ T2061]  netlink_sendmsg+0x602/0xbf0
[ 2525.792854][ T2061]  ? netlink_getsockopt+0x590/0x590
[ 2525.798091][ T2061]  ? aa_sock_msg_perm+0x94/0x150
[ 2525.803237][ T2061]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2525.808567][ T2061]  ? security_socket_sendmsg+0x80/0xa0
[ 2525.814058][ T2061]  ? netlink_getsockopt+0x590/0x590
[ 2525.819308][ T2061]  ____sys_sendmsg+0x5ba/0x960
[ 2525.824154][ T2061]  ? __asan_memset+0x22/0x40
[ 2525.828790][ T2061]  ? __sys_sendmsg_sock+0x30/0x30
[ 2525.833888][ T2061]  ? __import_iovec+0x5f2/0x850
[ 2525.838878][ T2061]  ? import_iovec+0x73/0xa0
[ 2525.843874][ T2061]  ___sys_sendmsg+0x2a6/0x360
[ 2525.848609][ T2061]  ? get_pid_task+0x20/0x1e0
[ 2525.853251][ T2061]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2525.858072][ T2061]  ? __lock_acquire+0x7d40/0x7d40
[ 2525.863154][ T2061]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2525.868057][ T2061]  ? __x64_sys_sendmsg+0x80/0x80
[ 2525.873044][ T2061]  ? lockdep_hardirqs_on+0x98/0x150
[ 2525.878285][ T2061]  do_syscall_64+0x55/0xa0
[ 2525.882734][ T2061]  ? clear_bhb_loop+0x40/0x90
[ 2525.887452][ T2061]  ? clear_bhb_loop+0x40/0x90
[ 2525.892180][ T2061]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2525.898111][ T2061] RIP: 0033:0x7fec8bf9c819
[ 2525.902569][ T2061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2525.922444][ T2061] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2525.930903][ T2061] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2525.938932][ T2061] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[ 2525.946951][ T2061] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2525.954960][ T2061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2525.962965][ T2061] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2525.970987][ T2061]  </TASK>
[ 2526.005868][ T2061] syz.2.9143: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 2526.028439][ T2061] CPU: 1 PID: 2061 Comm: syz.2.9143 Not tainted syzkaller #0
[ 2526.035914][ T2061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2526.046170][ T2061] Call Trace:
[ 2526.049498][ T2061]  <TASK>
[ 2526.052481][ T2061]  dump_stack_lvl+0x18c/0x250
[ 2526.057227][ T2061]  ? show_regs_print_info+0x20/0x20
[ 2526.062476][ T2061]  ? load_image+0x420/0x420
[ 2526.067029][ T2061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 2526.073506][ T2061]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 2526.080110][ T2061]  warn_alloc+0x246/0x340
[ 2526.084874][ T2061]  ? __get_vm_area_node+0x125/0x370
[ 2526.090253][ T2061]  ? zone_watermark_ok_safe+0x230/0x230
[ 2526.095862][ T2061]  ? rcu_is_watching+0x15/0xb0
[ 2526.100677][ T2061]  ? __get_vm_area_node+0x356/0x370
[ 2526.105948][ T2061]  __vmalloc_node_range+0x393/0x1330
[ 2526.111298][ T2061]  ? netlink_insert+0x109f/0x13a0
[ 2526.116392][ T2061]  ? netlink_data_ready+0x10/0x10
[ 2526.121482][ T2061]  ? free_vm_area+0x50/0x50
[ 2526.126049][ T2061]  ? netlink_sendmsg+0x602/0xbf0
[ 2526.131045][ T2061]  vmalloc+0x79/0x90
[ 2526.134991][ T2061]  ? netlink_sendmsg+0x602/0xbf0
[ 2526.139970][ T2061]  netlink_sendmsg+0x602/0xbf0
[ 2526.144787][ T2061]  ? netlink_getsockopt+0x590/0x590
[ 2526.150092][ T2061]  ? aa_sock_msg_perm+0x94/0x150
[ 2526.155082][ T2061]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2526.160414][ T2061]  ? security_socket_sendmsg+0x80/0xa0
[ 2526.166042][ T2061]  ? netlink_getsockopt+0x590/0x590
[ 2526.171313][ T2061]  ____sys_sendmsg+0x5ba/0x960
[ 2526.176308][ T2061]  ? __asan_memset+0x22/0x40
[ 2526.180939][ T2061]  ? __sys_sendmsg_sock+0x30/0x30
[ 2526.186029][ T2061]  ? __import_iovec+0x5f2/0x850
[ 2526.191103][ T2061]  ? import_iovec+0x73/0xa0
[ 2526.195658][ T2061]  ___sys_sendmsg+0x2a6/0x360
[ 2526.200387][ T2061]  ? get_pid_task+0x20/0x1e0
[ 2526.205045][ T2061]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2526.209874][ T2061]  ? __lock_acquire+0x7d40/0x7d40
[ 2526.214975][ T2061]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2526.219965][ T2061]  ? __x64_sys_sendmsg+0x80/0x80
[ 2526.224947][ T2061]  ? lockdep_hardirqs_on+0x98/0x150
[ 2526.230192][ T2061]  do_syscall_64+0x55/0xa0
[ 2526.234775][ T2061]  ? clear_bhb_loop+0x40/0x90
[ 2526.239514][ T2061]  ? clear_bhb_loop+0x40/0x90
[ 2526.244302][ T2061]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2526.250254][ T2061] RIP: 0033:0x7fec8bf9c819
[ 2526.254706][ T2061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2526.274555][ T2061] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2526.283053][ T2061] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2526.291149][ T2061] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[ 2526.299152][ T2061] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2526.307164][ T2061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2526.315252][ T2061] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2526.323287][ T2061]  </TASK>
[ 2526.356033][ T2061] Mem-Info:
[ 2526.359455][ T2061] active_anon:14818 inactive_anon:0 isolated_anon:0
[ 2526.359455][ T2061]  active_file:23161 inactive_file:40778 isolated_file:0
[ 2526.359455][ T2061]  unevictable:768 dirty:195 writeback:0
[ 2526.359455][ T2061]  slab_reclaimable:10836 slab_unreclaimable:98567
[ 2526.359455][ T2061]  mapped:26695 shmem:3626 pagetables:607
[ 2526.359455][ T2061]  sec_pagetables:0 bounce:0
[ 2526.359455][ T2061]  kernel_misc_reclaimable:0
[ 2526.359455][ T2061]  free:1326639 free_pcp:6359 free_cma:0
[ 2526.410372][ T2061] Node 0 active_anon:60272kB inactive_anon:0kB active_file:92644kB inactive_file:162912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107780kB dirty:780kB writeback:0kB shmem:13968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no
[ 2526.451160][ T2061] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2526.572807][ T2061] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2526.650447][ T2061] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 2526.656865][ T2061] Node 0 DMA32 free:1392388kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:65836kB inactive_anon:0kB active_file:92644kB inactive_file:162084kB unevictable:1536kB writepending:780kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:3724kB local_pcp:2024kB free_cma:0kB
[ 2526.730435][ T2061] lowmem_reserve[]: 0 0 0 0 0
[ 2526.735292][ T2061] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 2526.800194][ T2061] lowmem_reserve[]: 0 0 0 0 0
[ 2526.805122][ T2061] Node 1 Normal free:3891096kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21980kB local_pcp:10236kB free_cma:0kB
[ 2526.848229][ T2061] lowmem_reserve[]: 0 0 0 0 0
[ 2526.864586][ T2061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2526.886773][ T2061] Node 0 DMA32: 2783*4kB (UME) 1594*8kB (UE) 1623*16kB (UME) 1690*32kB (UME) 888*64kB (UME) 484*128kB (UME) 227*256kB (UM) 119*512kB (UME) 42*1024kB (UM) 13*2048kB (ME) 237*4096kB (UM) = 1382140kB
[ 2526.917605][ T2068] netlink: 'syz.0.9145': attribute type 1 has an invalid length.
[ 2526.940695][ T2061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2526.974818][ T2061] Node 1 Normal: 94*4kB (UM) 50*8kB (UME) 7*16kB (UME) 77*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3891096kB
[ 2526.985278][ T2068] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.9145'.
[ 2527.020402][ T2061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2527.030041][ T2061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2527.070566][ T2061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2527.090173][ T2061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2527.099571][ T2061] 70515 total pagecache pages
[ 2527.130340][ T2061] 0 pages in swap cache
[ 2527.138878][ T2061] Free swap  = 124996kB
[ 2527.143283][ T2061] Total swap = 124996kB
[ 2527.147484][ T2061] 2097051 pages RAM
[ 2527.160176][ T2061] 0 pages HighMem/MovableOnly
[ 2527.164938][ T2061] 416927 pages reserved
[ 2527.180386][ T2061] 0 pages cma reserved
[ 2529.306676][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.313384][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2532.956927][ T2077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9148'.
[ 2532.998044][ T2085] netlink: 'syz.1.9152': attribute type 21 has an invalid length.
[ 2533.020311][ T2085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9152'.
[ 2533.156330][ T2092] FAULT_INJECTION: forcing a failure.
[ 2533.156330][ T2092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2533.213017][ T2092] CPU: 0 PID: 2092 Comm: syz.0.9153 Not tainted syzkaller #0
[ 2533.220497][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2533.230613][ T2092] Call Trace:
[ 2533.233943][ T2092]  <TASK>
[ 2533.236916][ T2092]  dump_stack_lvl+0x18c/0x250
[ 2533.241711][ T2092]  ? show_regs_print_info+0x20/0x20
[ 2533.247010][ T2092]  ? load_image+0x420/0x420
[ 2533.251616][ T2092]  ? __lock_acquire+0x7d40/0x7d40
[ 2533.256712][ T2092]  ? snprintf+0xe9/0x140
[ 2533.261029][ T2092]  should_fail_ex+0x39d/0x4d0
[ 2533.265961][ T2092]  _copy_to_user+0x2f/0xa0
[ 2533.270439][ T2092]  simple_read_from_buffer+0xe7/0x150
[ 2533.275898][ T2092]  proc_fail_nth_read+0x1e8/0x260
[ 2533.280996][ T2092]  ? proc_fault_inject_write+0x360/0x360
[ 2533.286687][ T2092]  ? fsnotify_perm+0x271/0x5e0
[ 2533.291506][ T2092]  ? proc_fault_inject_write+0x360/0x360
[ 2533.297228][ T2092]  vfs_read+0x28b/0x970
[ 2533.301442][ T2092]  ? kernel_read+0x1e0/0x1e0
[ 2533.306070][ T2092]  ? __fget_files+0x28/0x4b0
[ 2533.310706][ T2092]  ? __fget_files+0x28/0x4b0
[ 2533.315333][ T2092]  ? __fget_files+0x43d/0x4b0
[ 2533.320060][ T2092]  ? __fdget_pos+0x2a3/0x330
[ 2533.324689][ T2092]  ? ksys_read+0x75/0x260
[ 2533.329146][ T2092]  ksys_read+0x150/0x260
[ 2533.333431][ T2092]  ? vfs_write+0x990/0x990
[ 2533.337981][ T2092]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 2533.344188][ T2092]  do_syscall_64+0x55/0xa0
[ 2533.348653][ T2092]  ? clear_bhb_loop+0x40/0x90
[ 2533.353391][ T2092]  ? clear_bhb_loop+0x40/0x90
[ 2533.358134][ T2092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2533.364087][ T2092] RIP: 0033:0x7f182c35d04e
[ 2533.368555][ T2092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2533.388223][ T2092] RSP: 002b:00007f182d2a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2533.396703][ T2092] RAX: ffffffffffffffda RBX: 00007f182d2a36c0 RCX: 00007f182c35d04e
[ 2533.404722][ T2092] RDX: 000000000000000f RSI: 00007f182d2a30a0 RDI: 0000000000000008
[ 2533.412728][ T2092] RBP: 00007f182d2a3090 R08: 0000000000000000 R09: 0000000000000000
[ 2533.420736][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2533.428736][ T2092] R13: 00007f182c616038 R14: 00007f182c615fa0 R15: 00007ffce697a318
[ 2533.436755][ T2092]  </TASK>
[ 2533.484224][ T2097] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.9155'.
[ 2533.635624][ T2107] netlink: 'syz.0.9158': attribute type 39 has an invalid length.
[ 2533.705823][ T2107] FAULT_INJECTION: forcing a failure.
[ 2533.705823][ T2107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2533.722361][ T2107] CPU: 1 PID: 2107 Comm: syz.0.9158 Not tainted syzkaller #0
[ 2533.729830][ T2107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2533.739958][ T2107] Call Trace:
[ 2533.743287][ T2107]  <TASK>
[ 2533.746284][ T2107]  dump_stack_lvl+0x18c/0x250
[ 2533.751034][ T2107]  ? show_regs_print_info+0x20/0x20
[ 2533.756381][ T2107]  ? load_image+0x420/0x420
[ 2533.760966][ T2107]  ? __lock_acquire+0x7d40/0x7d40
[ 2533.766053][ T2107]  ? snprintf+0xe9/0x140
[ 2533.770350][ T2107]  should_fail_ex+0x39d/0x4d0
[ 2533.775109][ T2107]  _copy_to_user+0x2f/0xa0
[ 2533.779856][ T2107]  simple_read_from_buffer+0xe7/0x150
[ 2533.785454][ T2107]  proc_fail_nth_read+0x1e8/0x260
[ 2533.790595][ T2107]  ? proc_fault_inject_write+0x360/0x360
[ 2533.796310][ T2107]  ? fsnotify_perm+0x271/0x5e0
[ 2533.801143][ T2107]  ? proc_fault_inject_write+0x360/0x360
[ 2533.806865][ T2107]  vfs_read+0x28b/0x970
[ 2533.811112][ T2107]  ? kernel_read+0x1e0/0x1e0
[ 2533.815769][ T2107]  ? __fget_files+0x28/0x4b0
[ 2533.820424][ T2107]  ? __fget_files+0x28/0x4b0
[ 2533.825221][ T2107]  ? __fget_files+0x43d/0x4b0
[ 2533.829980][ T2107]  ? __fdget_pos+0x2a3/0x330
[ 2533.834671][ T2107]  ? ksys_read+0x75/0x260
[ 2533.839166][ T2107]  ksys_read+0x150/0x260
[ 2533.843566][ T2107]  ? vfs_write+0x990/0x990
[ 2533.848044][ T2107]  ? lockdep_hardirqs_on+0x98/0x150
[ 2533.853313][ T2107]  do_syscall_64+0x55/0xa0
[ 2533.857908][ T2107]  ? clear_bhb_loop+0x40/0x90
[ 2533.862861][ T2107]  ? clear_bhb_loop+0x40/0x90
[ 2533.867772][ T2107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2533.873709][ T2107] RIP: 0033:0x7f182c35d04e
[ 2533.878429][ T2107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2533.898906][ T2107] RSP: 002b:00007f182d2a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2533.907468][ T2107] RAX: ffffffffffffffda RBX: 00007f182d2a36c0 RCX: 00007f182c35d04e
[ 2533.915486][ T2107] RDX: 000000000000000f RSI: 00007f182d2a30a0 RDI: 000000000000000c
[ 2533.923667][ T2107] RBP: 00007f182d2a3090 R08: 0000000000000000 R09: 0000000000000000
[ 2533.931797][ T2107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2533.939857][ T2107] R13: 00007f182c616038 R14: 00007f182c615fa0 R15: 00007ffce697a318
[ 2533.947909][ T2107]  </TASK>
[ 2534.035730][ T2113] netlink: 'syz.2.9159': attribute type 3 has an invalid length.
[ 2534.050210][ T2113] netlink: 'syz.2.9159': attribute type 275 has an invalid length.
[ 2534.941328][ T2119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9161'.
[ 2541.219637][ T2147] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9171'.
[ 2541.230530][ T2151] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9173'.
[ 2541.251910][ T2154] netlink: 'syz.3.9174': attribute type 10 has an invalid length.
[ 2542.609014][ T2174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 2542.631265][ T2174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 2542.645284][ T2174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 2542.747102][ T2178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2542.758974][ T2178] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2542.928612][ T1318] tipc: Subscription rejected, illegal request
[ 2544.376132][ T2178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2544.400427][ T2178] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2544.408765][ T2178] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 2544.418240][ T2178] batman_adv: batadv0: Removing interface: virt_wifi0
[ 2544.546681][ T2183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9185'.
[ 2544.608121][ T2185] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9186'.
[ 2545.429082][ T2206] FAULT_INJECTION: forcing a failure.
[ 2545.429082][ T2206] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.461242][ T2206] CPU: 0 PID: 2206 Comm: syz.2.9192 Not tainted syzkaller #0
[ 2545.468841][ T2206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2545.478958][ T2206] Call Trace:
[ 2545.482302][ T2206]  <TASK>
[ 2545.485279][ T2206]  dump_stack_lvl+0x18c/0x250
[ 2545.490029][ T2206]  ? show_regs_print_info+0x20/0x20
[ 2545.495302][ T2206]  ? load_image+0x420/0x420
[ 2545.499891][ T2206]  ? __might_sleep+0xe0/0xe0
[ 2545.504540][ T2206]  ? __lock_acquire+0x7d40/0x7d40
[ 2545.509623][ T2206]  ? is_dynamic_key+0x260/0x260
[ 2545.514536][ T2206]  should_fail_ex+0x39d/0x4d0
[ 2545.519296][ T2206]  should_failslab+0x9/0x20
[ 2545.523860][ T2206]  slab_pre_alloc_hook+0x59/0x310
[ 2545.528964][ T2206]  kmem_cache_alloc_node+0x60/0x320
[ 2545.534260][ T2206]  ? __alloc_skb+0x103/0x2c0
[ 2545.538917][ T2206]  __alloc_skb+0x103/0x2c0
[ 2545.543600][ T2206]  __ip_append_data+0x2b73/0x3d40
[ 2545.548763][ T2206]  ? ip_route_output_key_hash+0x13d/0x330
[ 2545.554554][ T2206]  ? raw_send_hdrinc+0x1170/0x1170
[ 2545.559728][ T2206]  ? mark_lock+0x94/0x320
[ 2545.564119][ T2206]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2545.570168][ T2206]  ? ip_setup_cork+0x860/0x860
[ 2545.575088][ T2206]  ? ip_setup_cork+0x530/0x860
[ 2545.579917][ T2206]  ip_append_data+0x10d/0x180
[ 2545.584639][ T2206]  ? raw_send_hdrinc+0x1170/0x1170
[ 2545.589797][ T2206]  raw_sendmsg+0x15c1/0x1c00
[ 2545.594442][ T2206]  ? compat_raw_ioctl+0x70/0x70
[ 2545.599370][ T2206]  ? __lock_acquire+0x1273/0x7d40
[ 2545.604465][ T2206]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 2545.610931][ T2206]  ? sock_rps_record_flow+0x19/0x3f0
[ 2545.616277][ T2206]  ? inet_sendmsg+0x7c/0x2f0
[ 2545.620912][ T2206]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2545.626245][ T2206]  ? security_socket_sendmsg+0x80/0xa0
[ 2545.631772][ T2206]  ? inet_send_prepare+0x260/0x260
[ 2545.636928][ T2206]  ____sys_sendmsg+0x5ba/0x960
[ 2545.641728][ T2206]  ? __lock_acquire+0x7d40/0x7d40
[ 2545.646810][ T2206]  ? __asan_memset+0x22/0x40
[ 2545.651455][ T2206]  ? __sys_sendmsg_sock+0x30/0x30
[ 2545.656541][ T2206]  ? __import_iovec+0x3fa/0x850
[ 2545.661443][ T2206]  ? import_iovec+0x73/0xa0
[ 2545.666157][ T2206]  ___sys_sendmsg+0x2a6/0x360
[ 2545.670869][ T2206]  ? get_pid_task+0x20/0x1e0
[ 2545.675509][ T2206]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2545.680367][ T2206]  ? __lock_acquire+0x7d40/0x7d40
[ 2545.685480][ T2206]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2545.690375][ T2206]  ? __x64_sys_sendmsg+0x80/0x80
[ 2545.695377][ T2206]  ? lockdep_hardirqs_on+0x98/0x150
[ 2545.700710][ T2206]  do_syscall_64+0x55/0xa0
[ 2545.705241][ T2206]  ? clear_bhb_loop+0x40/0x90
[ 2545.709953][ T2206]  ? clear_bhb_loop+0x40/0x90
[ 2545.714672][ T2206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2545.720639][ T2206] RIP: 0033:0x7fec8bf9c819
[ 2545.725090][ T2206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2545.745476][ T2206] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2545.753933][ T2206] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2545.761962][ T2206] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[ 2545.770066][ T2206] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2545.778083][ T2206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2545.786088][ T2206] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2545.794394][ T2206]  </TASK>
[ 2546.331683][ T1318] tipc: Subscription rejected, illegal request
[ 2548.338233][ T2215] veth0_vlan: entered allmulticast mode
[ 2548.405563][ T2216] veth0_vlan: left promiscuous mode
[ 2548.419238][ T2216] veth0_vlan: entered promiscuous mode
[ 2548.449794][ T2218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9196'.
[ 2548.653123][ T2230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2548.661693][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2548.811970][ T2231] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.9201'.
[ 2549.407826][ T2251] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9208'.
[ 2549.722148][T20920] tipc: Subscription rejected, illegal request
[ 2549.953076][ T2261] netlink: 'syz.3.9211': attribute type 10 has an invalid length.
[ 2549.970423][ T2261] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.9211'.
[ 2549.985232][ T2261] openvswitch: netlink: Flow key attr not present in new flow.
[ 2550.118298][ T2265] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9213'.
[ 2552.471523][ T2272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2552.479023][ T2272] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2552.519996][ T2272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2552.527905][ T2272] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2552.607769][ T2274] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9216'.
[ 2552.618682][ T2276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2552.626120][ T2276] IPv6: NLM_F_CREATE should be set when creating new route
[ 2552.633521][ T2276] IPv6: NLM_F_CREATE should be set when creating new route
[ 2552.640887][ T2276] IPv6: NLM_F_CREATE should be set when creating new route
[ 2553.178470][ T2281] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9218'.
[ 2553.272538][ T2284] tc_dump_action: action bad kind
[ 2553.303510][ T2286] FAULT_INJECTION: forcing a failure.
[ 2553.303510][ T2286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2553.351673][ T2286] CPU: 1 PID: 2286 Comm: syz.2.9219 Not tainted syzkaller #0
[ 2553.359173][ T2286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2553.369295][ T2286] Call Trace:
[ 2553.372641][ T2286]  <TASK>
[ 2553.375700][ T2286]  dump_stack_lvl+0x18c/0x250
[ 2553.380460][ T2286]  ? show_regs_print_info+0x20/0x20
[ 2553.385820][ T2286]  ? load_image+0x420/0x420
[ 2553.390390][ T2286]  ? __might_fault+0xaa/0x120
[ 2553.395126][ T2286]  ? __lock_acquire+0x7d40/0x7d40
[ 2553.400212][ T2286]  should_fail_ex+0x39d/0x4d0
[ 2553.404976][ T2286]  _copy_from_user+0x2f/0xe0
[ 2553.409647][ T2286]  __sys_bpf+0x23e/0x890
[ 2553.413958][ T2286]  ? bpf_link_show_fdinfo+0x390/0x390
[ 2553.419435][ T2286]  ? lock_chain_count+0x20/0x20
[ 2553.424375][ T2286]  __x64_sys_bpf+0x7c/0x90
[ 2553.428863][ T2286]  do_syscall_64+0x55/0xa0
[ 2553.433426][ T2286]  ? clear_bhb_loop+0x40/0x90
[ 2553.438167][ T2286]  ? clear_bhb_loop+0x40/0x90
[ 2553.442907][ T2286]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2553.448875][ T2286] RIP: 0033:0x7fec8bf9c819
[ 2553.453355][ T2286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2553.473199][ T2286] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2553.481696][ T2286] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2553.489785][ T2286] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[ 2553.497892][ T2286] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2553.505935][ T2286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2553.513981][ T2286] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2553.522057][ T2286]  </TASK>
[ 2553.711638][ T2296] FAULT_INJECTION: forcing a failure.
[ 2553.711638][ T2296] name failslab, interval 1, probability 0, space 0, times 0
[ 2553.759941][ T2296] CPU: 0 PID: 2296 Comm: syz.2.9225 Not tainted syzkaller #0
[ 2553.767430][ T2296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2553.777648][ T2296] Call Trace:
[ 2553.781254][ T2296]  <TASK>
[ 2553.784238][ T2296]  dump_stack_lvl+0x18c/0x250
[ 2553.788999][ T2296]  ? show_regs_print_info+0x20/0x20
[ 2553.794373][ T2296]  ? load_image+0x420/0x420
[ 2553.798946][ T2296]  ? __might_sleep+0xe0/0xe0
[ 2553.803629][ T2296]  ? __lock_acquire+0x7d40/0x7d40
[ 2553.808716][ T2296]  should_fail_ex+0x39d/0x4d0
[ 2553.813461][ T2296]  should_failslab+0x9/0x20
[ 2553.818089][ T2296]  slab_pre_alloc_hook+0x59/0x310
[ 2553.823237][ T2296]  ? tomoyo_encode+0x28b/0x540
[ 2553.828082][ T2296]  ? tomoyo_encode+0x28b/0x540
[ 2553.832918][ T2296]  __kmem_cache_alloc_node+0x53/0x250
[ 2553.838468][ T2296]  ? tomoyo_encode+0x28b/0x540
[ 2553.843307][ T2296]  __kmalloc+0xa4/0x230
[ 2553.847536][ T2296]  tomoyo_encode+0x28b/0x540
[ 2553.852185][ T2296]  tomoyo_realpath_from_path+0x592/0x5d0
[ 2553.857987][ T2296]  tomoyo_path_number_perm+0x248/0x620
[ 2553.863544][ T2296]  ? tomoyo_path_number_perm+0x217/0x620
[ 2553.869336][ T2296]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2553.874868][ T2296]  ? ksys_write+0x1c4/0x260
[ 2553.879494][ T2296]  ? __fget_files+0x28/0x4b0
[ 2553.884256][ T2296]  ? __fget_files+0x28/0x4b0
[ 2553.889020][ T2296]  security_file_ioctl+0x70/0xa0
[ 2553.894022][ T2296]  __se_sys_ioctl+0x48/0x170
[ 2553.898686][ T2296]  do_syscall_64+0x55/0xa0
[ 2553.903168][ T2296]  ? clear_bhb_loop+0x40/0x90
[ 2553.907919][ T2296]  ? clear_bhb_loop+0x40/0x90
[ 2553.912724][ T2296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2553.918677][ T2296] RIP: 0033:0x7fec8bf9c819
[ 2553.923227][ T2296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2553.942972][ T2296] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2553.951459][ T2296] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2553.959711][ T2296] RDX: 0000200000000780 RSI: 0000000000008924 RDI: 0000000000000004
[ 2553.967773][ T2296] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2553.975815][ T2296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2553.983927][ T2296] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2553.991986][ T2296]  </TASK>
[ 2554.220210][ T2296] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2556.675622][ T2308] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9229'.
[ 2556.719027][ T2303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9226'.
[ 2556.768166][ T2305] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9227'.
[ 2556.791928][ T2303] netlink: 'syz.2.9226': attribute type 33 has an invalid length.
[ 2556.810582][ T2303] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9226'.
[ 2556.866524][ T2312] FAULT_INJECTION: forcing a failure.
[ 2556.866524][ T2312] name failslab, interval 1, probability 0, space 0, times 0
[ 2556.879451][ T2312] CPU: 1 PID: 2312 Comm: syz.0.9230 Not tainted syzkaller #0
[ 2556.887156][ T2312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2556.897438][ T2312] Call Trace:
[ 2556.900776][ T2312]  <TASK>
[ 2556.903886][ T2312]  dump_stack_lvl+0x18c/0x250
[ 2556.908660][ T2312]  ? show_regs_print_info+0x20/0x20
[ 2556.914127][ T2312]  ? load_image+0x420/0x420
[ 2556.918715][ T2312]  ? __might_sleep+0xe0/0xe0
[ 2556.923467][ T2312]  ? __lock_acquire+0x7d40/0x7d40
[ 2556.928697][ T2312]  ? is_dynamic_key+0x260/0x260
[ 2556.933720][ T2312]  should_fail_ex+0x39d/0x4d0
[ 2556.938496][ T2312]  should_failslab+0x9/0x20
[ 2556.943092][ T2312]  slab_pre_alloc_hook+0x59/0x310
[ 2556.948447][ T2312]  kmem_cache_alloc_node+0x60/0x320
[ 2556.953745][ T2312]  ? __alloc_skb+0x103/0x2c0
[ 2556.958423][ T2312]  __alloc_skb+0x103/0x2c0
[ 2556.962920][ T2312]  __ip_append_data+0x2b73/0x3d40
[ 2556.968045][ T2312]  ? ip_route_output_key_hash+0x13d/0x330
[ 2556.973941][ T2312]  ? raw_send_hdrinc+0x1170/0x1170
[ 2556.979128][ T2312]  ? mark_lock+0x94/0x320
[ 2556.983634][ T2312]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2556.989685][ T2312]  ? ip_setup_cork+0x860/0x860
[ 2556.994611][ T2312]  ? ip_setup_cork+0x530/0x860
[ 2556.999512][ T2312]  ip_append_data+0x10d/0x180
[ 2557.004381][ T2312]  ? raw_send_hdrinc+0x1170/0x1170
[ 2557.009563][ T2312]  raw_sendmsg+0x15c1/0x1c00
[ 2557.014210][ T2312]  ? compat_raw_ioctl+0x70/0x70
[ 2557.019120][ T2312]  ? __lock_acquire+0x1273/0x7d40
[ 2557.024240][ T2312]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 2557.030809][ T2312]  ? sock_rps_record_flow+0x19/0x3f0
[ 2557.036257][ T2312]  ? inet_sendmsg+0x7c/0x2f0
[ 2557.041015][ T2312]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2557.046350][ T2312]  ? security_socket_sendmsg+0x80/0xa0
[ 2557.052103][ T2312]  ? inet_send_prepare+0x260/0x260
[ 2557.057314][ T2312]  ____sys_sendmsg+0x5ba/0x960
[ 2557.062155][ T2312]  ? __lock_acquire+0x7d40/0x7d40
[ 2557.067326][ T2312]  ? __asan_memset+0x22/0x40
[ 2557.071982][ T2312]  ? __sys_sendmsg_sock+0x30/0x30
[ 2557.077131][ T2312]  ? __import_iovec+0x3fa/0x850
[ 2557.082040][ T2312]  ? import_iovec+0x73/0xa0
[ 2557.086594][ T2312]  ___sys_sendmsg+0x2a6/0x360
[ 2557.091362][ T2312]  ? get_pid_task+0x20/0x1e0
[ 2557.096081][ T2312]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2557.100897][ T2312]  ? __lock_acquire+0x7d40/0x7d40
[ 2557.106111][ T2312]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2557.111642][ T2312]  ? __x64_sys_sendmsg+0x80/0x80
[ 2557.116673][ T2312]  ? lockdep_hardirqs_on+0x98/0x150
[ 2557.121942][ T2312]  do_syscall_64+0x55/0xa0
[ 2557.126438][ T2312]  ? clear_bhb_loop+0x40/0x90
[ 2557.131171][ T2312]  ? clear_bhb_loop+0x40/0x90
[ 2557.136018][ T2312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2557.142005][ T2312] RIP: 0033:0x7f182c39c819
[ 2557.146575][ T2312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2557.166521][ T2312] RSP: 002b:00007f182d2a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2557.175018][ T2312] RAX: ffffffffffffffda RBX: 00007f182c615fa0 RCX: 00007f182c39c819
[ 2557.183027][ T2312] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2557.191317][ T2312] RBP: 00007f182d2a3090 R08: 0000000000000000 R09: 0000000000000000
[ 2557.199339][ T2312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2557.207366][ T2312] R13: 00007f182c616038 R14: 00007f182c615fa0 R15: 00007ffce697a318
[ 2557.215524][ T2312]  </TASK>
[ 2557.436745][ T2324] netlink: 'syz.1.9235': attribute type 10 has an invalid length.
[ 2557.446736][ T2324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9235'.
[ 2557.592048][ T2329] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9238'.
[ 2557.904882][ T2339] syzkaller0: mtu greater than device maximum
[ 2560.827146][ T2356] FAULT_INJECTION: forcing a failure.
[ 2560.827146][ T2356] name failslab, interval 1, probability 0, space 0, times 0
[ 2560.850014][ T2356] CPU: 0 PID: 2356 Comm: syz.0.9245 Not tainted syzkaller #0
[ 2560.857516][ T2356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2560.867626][ T2356] Call Trace:
[ 2560.870976][ T2356]  <TASK>
[ 2560.873997][ T2356]  dump_stack_lvl+0x18c/0x250
[ 2560.878751][ T2356]  ? sctp_sendmsg+0x1575/0x28c0
[ 2560.883684][ T2356]  ? ___sys_sendmsg+0x2a6/0x360
[ 2560.888607][ T2356]  ? show_regs_print_info+0x20/0x20
[ 2560.894068][ T2356]  ? load_image+0x420/0x420
[ 2560.898817][ T2356]  should_fail_ex+0x39d/0x4d0
[ 2560.904698][ T2356]  should_failslab+0x9/0x20
[ 2560.909377][ T2356]  slab_pre_alloc_hook+0x59/0x310
[ 2560.914620][ T2356]  ? sctp_add_bind_addr+0x8c/0x360
[ 2560.919826][ T2356]  __kmem_cache_alloc_node+0x53/0x250
[ 2560.925399][ T2356]  ? sctp_add_bind_addr+0x8c/0x360
[ 2560.930753][ T2356]  kmalloc_trace+0x2a/0xe0
[ 2560.935334][ T2356]  sctp_add_bind_addr+0x8c/0x360
[ 2560.940348][ T2356]  sctp_copy_local_addr_list+0x315/0x4f0
[ 2560.946160][ T2356]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[ 2560.952213][ T2356]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[ 2560.958328][ T2356]  ? sctp_v6_is_any+0x64/0x70
[ 2560.963086][ T2356]  ? sctp_copy_one_addr+0x8c/0x350
[ 2560.968307][ T2356]  sctp_bind_addr_copy+0xb3/0x3c0
[ 2560.973612][ T2356]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 2560.980381][ T2356]  sctp_connect_new_asoc+0x2f9/0x6a0
[ 2560.985825][ T2356]  ? __sctp_connect+0xd80/0xd80
[ 2560.990918][ T2356]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2560.996435][ T2356]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 2561.002131][ T2356]  ? security_sctp_bind_connect+0x89/0xb0
[ 2561.007933][ T2356]  sctp_sendmsg+0x1575/0x28c0
[ 2561.012692][ T2356]  ? sctp_getsockopt+0xb60/0xb60
[ 2561.017688][ T2356]  ? aa_sk_perm+0x83c/0x970
[ 2561.022257][ T2356]  ? aa_af_perm+0x330/0x330
[ 2561.026833][ T2356]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 2561.033357][ T2356]  ? sock_rps_record_flow+0x19/0x3f0
[ 2561.038729][ T2356]  ? inet_sendmsg+0xe9/0x2f0
[ 2561.043379][ T2356]  ? inet_send_prepare+0x260/0x260
[ 2561.048558][ T2356]  ____sys_sendmsg+0x5ba/0x960
[ 2561.053397][ T2356]  ? __lock_acquire+0x7d40/0x7d40
[ 2561.058579][ T2356]  ? __sys_sendmsg_sock+0x30/0x30
[ 2561.063646][ T2356]  ? __import_iovec+0x5f2/0x850
[ 2561.068572][ T2356]  ? import_iovec+0x73/0xa0
[ 2561.073162][ T2356]  ___sys_sendmsg+0x2a6/0x360
[ 2561.077913][ T2356]  ? get_pid_task+0x20/0x1e0
[ 2561.082580][ T2356]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2561.087708][ T2356]  ? __lock_acquire+0x7d40/0x7d40
[ 2561.093605][ T2356]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2561.098504][ T2356]  ? __x64_sys_sendmsg+0x80/0x80
[ 2561.103512][ T2356]  ? lockdep_hardirqs_on+0x98/0x150
[ 2561.108947][ T2356]  do_syscall_64+0x55/0xa0
[ 2561.113430][ T2356]  ? clear_bhb_loop+0x40/0x90
[ 2561.118179][ T2356]  ? clear_bhb_loop+0x40/0x90
[ 2561.122914][ T2356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2561.128880][ T2356] RIP: 0033:0x7f182c39c819
[ 2561.133361][ T2356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2561.153645][ T2356] RSP: 002b:00007f182d2a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2561.162612][ T2356] RAX: ffffffffffffffda RBX: 00007f182c615fa0 RCX: 00007f182c39c819
[ 2561.170799][ T2356] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003
[ 2561.178978][ T2356] RBP: 00007f182d2a3090 R08: 0000000000000000 R09: 0000000000000000
[ 2561.186989][ T2356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2561.195004][ T2356] R13: 00007f182c616038 R14: 00007f182c615fa0 R15: 00007ffce697a318
[ 2561.203126][ T2356]  </TASK>
[ 2563.532058][ T2354] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9244'.
[ 2563.702941][ T2364] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9247'.
[ 2563.822765][ T2370] FAULT_INJECTION: forcing a failure.
[ 2563.822765][ T2370] name failslab, interval 1, probability 0, space 0, times 0
[ 2563.838013][ T2370] CPU: 0 PID: 2370 Comm: syz.1.9250 Not tainted syzkaller #0
[ 2563.845510][ T2370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2563.855666][ T2370] Call Trace:
[ 2563.858991][ T2370]  <TASK>
[ 2563.862062][ T2370]  dump_stack_lvl+0x18c/0x250
[ 2563.866914][ T2370]  ? show_regs_print_info+0x20/0x20
[ 2563.872163][ T2370]  ? load_image+0x420/0x420
[ 2563.876712][ T2370]  ? __might_sleep+0xe0/0xe0
[ 2563.881339][ T2370]  ? __lock_acquire+0x7d40/0x7d40
[ 2563.886493][ T2370]  should_fail_ex+0x39d/0x4d0
[ 2563.891324][ T2370]  should_failslab+0x9/0x20
[ 2563.895880][ T2370]  slab_pre_alloc_hook+0x59/0x310
[ 2563.900959][ T2370]  ? apparmor_sk_alloc_security+0x77/0x100
[ 2563.906838][ T2370]  __kmem_cache_alloc_node+0x53/0x250
[ 2563.912295][ T2370]  ? apparmor_sk_alloc_security+0x77/0x100
[ 2563.918187][ T2370]  kmalloc_trace+0x2a/0xe0
[ 2563.922752][ T2370]  apparmor_sk_alloc_security+0x77/0x100
[ 2563.928457][ T2370]  security_sk_alloc+0x6e/0xa0
[ 2563.933448][ T2370]  sk_prot_alloc+0x101/0x210
[ 2563.938156][ T2370]  ? sk_alloc+0x24/0x360
[ 2563.942455][ T2370]  sk_alloc+0x3a/0x360
[ 2563.946670][ T2370]  ? bpf_ctx_init+0x163/0x1a0
[ 2563.951384][ T2370]  ? bpf_prog_test_run_skb+0x273/0x12b0
[ 2563.956977][ T2370]  bpf_prog_test_run_skb+0x3a5/0x12b0
[ 2563.962403][ T2370]  ? __fget_files+0x28/0x4b0
[ 2563.967031][ T2370]  ? __fget_files+0x28/0x4b0
[ 2563.971686][ T2370]  ? __fget_files+0x43d/0x4b0
[ 2563.976427][ T2370]  ? cpu_online+0x60/0x60
[ 2563.980815][ T2370]  bpf_prog_test_run+0x321/0x390
[ 2563.985828][ T2370]  __sys_bpf+0x49d/0x890
[ 2563.990176][ T2370]  ? bpf_link_show_fdinfo+0x390/0x390
[ 2563.995637][ T2370]  ? lock_chain_count+0x20/0x20
[ 2564.000554][ T2370]  __x64_sys_bpf+0x7c/0x90
[ 2564.005017][ T2370]  do_syscall_64+0x55/0xa0
[ 2564.009590][ T2370]  ? clear_bhb_loop+0x40/0x90
[ 2564.014327][ T2370]  ? clear_bhb_loop+0x40/0x90
[ 2564.019052][ T2370]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2564.024988][ T2370] RIP: 0033:0x7f103e39c819
[ 2564.029440][ T2370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2564.049284][ T2370] RSP: 002b:00007f103c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2564.057919][ T2370] RAX: ffffffffffffffda RBX: 00007f103e615fa0 RCX: 00007f103e39c819
[ 2564.065949][ T2370] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 2564.073989][ T2370] RBP: 00007f103c5f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2564.082005][ T2370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2564.090024][ T2370] R13: 00007f103e616038 R14: 00007f103e615fa0 R15: 00007ffe420b27e8
[ 2564.098075][ T2370]  </TASK>
[ 2564.382314][ T2377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9252'.
[ 2564.436506][ T2377] netlink: 'syz.0.9252': attribute type 33 has an invalid length.
[ 2564.460794][ T2377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9252'.
[ 2564.692591][ T2386] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.9256'.
[ 2567.454616][T31884] bridge0: port 3(dummy0) entered disabled state
[ 2567.488749][ T2396] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9258'.
[ 2568.189891][ T2424] FAULT_INJECTION: forcing a failure.
[ 2568.189891][ T2424] name failslab, interval 1, probability 0, space 0, times 0
[ 2568.227445][ T2424] CPU: 0 PID: 2424 Comm: syz.3.9267 Not tainted syzkaller #0
[ 2568.235190][ T2424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2568.245334][ T2424] Call Trace:
[ 2568.248682][ T2424]  <TASK>
[ 2568.251686][ T2424]  dump_stack_lvl+0x18c/0x250
[ 2568.256720][ T2424]  ? show_regs_print_info+0x20/0x20
[ 2568.262006][ T2424]  ? load_image+0x420/0x420
[ 2568.266586][ T2424]  ? __might_sleep+0xe0/0xe0
[ 2568.271250][ T2424]  ? __lock_acquire+0x7d40/0x7d40
[ 2568.276550][ T2424]  should_fail_ex+0x39d/0x4d0
[ 2568.281326][ T2424]  should_failslab+0x9/0x20
[ 2568.285904][ T2424]  slab_pre_alloc_hook+0x59/0x310
[ 2568.291005][ T2424]  ? tomoyo_encode+0x28b/0x540
[ 2568.295831][ T2424]  ? tomoyo_encode+0x28b/0x540
[ 2568.300649][ T2424]  __kmem_cache_alloc_node+0x53/0x250
[ 2568.306179][ T2424]  ? tomoyo_encode+0x28b/0x540
[ 2568.311001][ T2424]  __kmalloc+0xa4/0x230
[ 2568.315224][ T2424]  tomoyo_encode+0x28b/0x540
[ 2568.319963][ T2424]  tomoyo_realpath_from_path+0x592/0x5d0
[ 2568.325937][ T2424]  tomoyo_path_number_perm+0x248/0x620
[ 2568.331474][ T2424]  ? tomoyo_path_number_perm+0x217/0x620
[ 2568.337281][ T2424]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2568.342822][ T2424]  ? ksys_write+0x1c4/0x260
[ 2568.347452][ T2424]  ? __fget_files+0x28/0x4b0
[ 2568.352122][ T2424]  ? __fget_files+0x28/0x4b0
[ 2568.356795][ T2424]  security_file_ioctl+0x70/0xa0
[ 2568.361794][ T2424]  __se_sys_ioctl+0x48/0x170
[ 2568.366574][ T2424]  do_syscall_64+0x55/0xa0
[ 2568.371059][ T2424]  ? clear_bhb_loop+0x40/0x90
[ 2568.375829][ T2424]  ? clear_bhb_loop+0x40/0x90
[ 2568.380677][ T2424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2568.386650][ T2424] RIP: 0033:0x7fd13c59c819
[ 2568.391195][ T2424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2568.411099][ T2424] RSP: 002b:00007fd13d4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2568.419735][ T2424] RAX: ffffffffffffffda RBX: 00007fd13c815fa0 RCX: 00007fd13c59c819
[ 2568.427755][ T2424] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000015
[ 2568.435796][ T2424] RBP: 00007fd13d4c6090 R08: 0000000000000000 R09: 0000000000000000
[ 2568.443806][ T2424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2568.452265][ T2424] R13: 00007fd13c816038 R14: 00007fd13c815fa0 R15: 00007fffe4832718
[ 2568.460314][ T2424]  </TASK>
[ 2568.480837][ T2424] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2568.493429][ T2419] delete_channel: no stack
[ 2568.541136][ T2433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9269'.
[ 2571.989388][ T2459] FAULT_INJECTION: forcing a failure.
[ 2571.989388][ T2459] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2572.003312][ T2459] CPU: 1 PID: 2459 Comm: syz.1.9276 Not tainted syzkaller #0
[ 2572.011015][ T2459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2572.021227][ T2459] Call Trace:
[ 2572.024624][ T2459]  <TASK>
[ 2572.027613][ T2459]  dump_stack_lvl+0x18c/0x250
[ 2572.032617][ T2459]  ? show_regs_print_info+0x20/0x20
[ 2572.038105][ T2459]  ? load_image+0x420/0x420
[ 2572.042891][ T2459]  ? __lock_acquire+0x7d40/0x7d40
[ 2572.048068][ T2459]  ? mark_lock+0x94/0x320
[ 2572.052511][ T2459]  should_fail_ex+0x39d/0x4d0
[ 2572.057284][ T2459]  prepare_alloc_pages+0x1e2/0x5f0
[ 2572.062670][ T2459]  __alloc_pages+0x134/0x460
[ 2572.067478][ T2459]  ? zone_statistics+0x170/0x170
[ 2572.072586][ T2459]  ? do_wp_page+0x7ca/0x35f0
[ 2572.077303][ T2459]  ? do_wp_page+0xfc5/0x35f0
[ 2572.082288][ T2459]  __folio_alloc+0x10/0x20
[ 2572.086819][ T2459]  vma_alloc_folio+0x47a/0x8f0
[ 2572.091774][ T2459]  do_wp_page+0x1243/0x35f0
[ 2572.096638][ T2459]  ? folio_put+0xd0/0xd0
[ 2572.101033][ T2459]  ? do_raw_spin_lock+0x11f/0x2c0
[ 2572.106500][ T2459]  ? __rwlock_init+0x150/0x150
[ 2572.111645][ T2459]  handle_mm_fault+0x135d/0x4c00
[ 2572.116958][ T2459]  ? handle_mm_fault+0xe7/0x4c00
[ 2572.122089][ T2459]  ? numa_migrate_prep+0x350/0x350
[ 2572.127474][ T2459]  ? lock_mm_and_find_vma+0x9c/0x2f0
[ 2572.132815][ T2459]  do_user_addr_fault+0x730/0x12c0
[ 2572.138157][ T2459]  exc_page_fault+0x64/0x100
[ 2572.142803][ T2459]  asm_exc_page_fault+0x26/0x30
[ 2572.147699][ T2459] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 2572.153742][ T2459] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 2572.175673][ T2459] RSP: 0018:ffffc90010177718 EFLAGS: 00050206
[ 2572.182785][ T2459] RAX: ffffffff8427bb01 RBX: 1ffff9200202efc7 RCX: 000000000000a5d0
[ 2572.190801][ T2459] RDX: 0000000000000000 RSI: ffff888036a65ce8 RDI: 0000200000006000
[ 2572.199100][ T2459] RBP: ffffc90010177878 R08: ffff888036a702b7 R09: 1ffff11006d4e056
[ 2572.207222][ T2459] R10: dffffc0000000000 R11: ffffed1006d4e057 R12: ffff888036a600e8
[ 2572.215554][ T2459] R13: 00000000000101d0 R14: 00000000000101d0 R15: ffffc90010177e48
[ 2572.223885][ T2459]  ? _copy_to_iter+0x221/0x1120
[ 2572.229006][ T2459]  _copy_to_iter+0x24f/0x1120
[ 2572.234048][ T2459]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 2572.240219][ T2459]  ? iov_iter_init+0x1e0/0x1e0
[ 2572.245297][ T2459]  ? __virt_addr_valid+0x18c/0x540
[ 2572.250475][ T2459]  ? __virt_addr_valid+0x469/0x540
[ 2572.255885][ T2459]  ? __phys_addr_symbol+0x2f/0x70
[ 2572.260979][ T2459]  ? __check_object_size+0x506/0xa20
[ 2572.266878][ T2459]  __skb_datagram_iter+0xdb/0x780
[ 2572.272777][ T2459]  ? tsk_importance+0x150/0x150
[ 2572.278056][ T2459]  ? skb_copy_datagram_iter+0x200/0x200
[ 2572.284130][ T2459]  skb_copy_datagram_iter+0xb1/0x200
[ 2572.289933][ T2459]  tipc_recvstream+0x72b/0xe70
[ 2572.294891][ T2459]  ? tipc_sendstream+0x70/0x70
[ 2572.299710][ T2459]  ____sys_recvmsg+0x2ce/0x5e0
[ 2572.305077][ T2459]  ? __sys_recvmsg_sock+0x50/0x50
[ 2572.310994][ T2459]  ? import_iovec+0x73/0xa0
[ 2572.316273][ T2459]  ___sys_recvmsg+0x216/0x590
[ 2572.321707][ T2459]  ? __sys_recvmsg+0x2a0/0x2a0
[ 2572.326709][ T2459]  ? ksys_write+0x1c4/0x260
[ 2572.331454][ T2459]  ? __fget_files+0x43d/0x4b0
[ 2572.336315][ T2459]  __x64_sys_recvmsg+0x20c/0x2e0
[ 2572.341310][ T2459]  ? ___sys_recvmsg+0x590/0x590
[ 2572.346238][ T2459]  ? lockdep_hardirqs_on+0x98/0x150
[ 2572.351578][ T2459]  do_syscall_64+0x55/0xa0
[ 2572.356059][ T2459]  ? clear_bhb_loop+0x40/0x90
[ 2572.360784][ T2459]  ? clear_bhb_loop+0x40/0x90
[ 2572.365525][ T2459]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2572.371572][ T2459] RIP: 0033:0x7f103e39c819
[ 2572.376055][ T2459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2572.395812][ T2459] RSP: 002b:00007f103c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 2572.404307][ T2459] RAX: ffffffffffffffda RBX: 00007f103e615fa0 RCX: 00007f103e39c819
[ 2572.412451][ T2459] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003
[ 2572.420758][ T2459] RBP: 00007f103c5f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2572.428950][ T2459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2572.437149][ T2459] R13: 00007f103e616038 R14: 00007f103e615fa0 R15: 00007ffe420b27e8
[ 2572.445472][ T2459]  </TASK>
[ 2572.547430][ T2474] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9280'.
[ 2573.187684][ T2490] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9286'.
[ 2576.094289][ T2495] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[ 2576.121490][ T2495] netlink: 'syz.3.9287': attribute type 10 has an invalid length.
[ 2576.129773][ T2495] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9287'.
[ 2576.144306][ T2495] bond0: entered promiscuous mode
[ 2576.149477][ T2495] bond_slave_0: entered promiscuous mode
[ 2576.156171][ T2495] bond_slave_1: entered promiscuous mode
[ 2576.164620][ T2495] bridge_slave_1: entered promiscuous mode
[ 2576.178985][ T2495] veth0_to_batadv: entered promiscuous mode
[ 2576.299241][ T2506] netlink: 'syz.1.9291': attribute type 10 has an invalid length.
[ 2576.322766][ T2506] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[ 2576.341085][ T2506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9291'.
[ 2576.463977][ T2507] syzkaller0: entered promiscuous mode
[ 2576.476017][ T2507] syzkaller0: entered allmulticast mode
[ 2576.499330][ T2511] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9293'.
[ 2576.754891][ T2509] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9290'.
[ 2576.805217][ T2509] netlink: set zone limit has 4 unknown bytes
[ 2576.821558][ T2514] netlink: 'syz.0.9290': attribute type 4 has an invalid length.
[ 2576.829481][ T2514] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9290'.
[ 2576.934966][ T2522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9295'.
[ 2576.963022][ T2522] netlink: 'syz.3.9295': attribute type 33 has an invalid length.
[ 2576.972193][ T2522] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9295'.
[ 2582.527108][ T2528] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9298'.
[ 2582.537047][ T2537] netlink: 'syz.3.9300': attribute type 10 has an invalid length.
[ 2582.548201][ T2539] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9300'.
[ 2582.735095][ T2555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9306'.
[ 2582.757455][ T2557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9305'.
[ 2582.777946][ T2555] netlink: 'syz.1.9306': attribute type 33 has an invalid length.
[ 2582.790718][ T2555] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9306'.
[ 2582.811526][ T2557] netlink: 'syz.2.9305': attribute type 33 has an invalid length.
[ 2582.830784][ T2557] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9305'.
[ 2582.983946][ T2564] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9309'.
[ 2583.008937][ T2564] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2583.237159][ T2575] netlink: 'syz.1.9318': attribute type 33 has an invalid length.
[ 2583.250552][ T2575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9318'.
[ 2583.263409][ T2577] netlink: 'syz.0.9312': attribute type 10 has an invalid length.
[ 2583.274730][ T2577] team0: Device ipvlan1 failed to register rx_handler
[ 2583.340909][ T2579] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9312'.
[ 2583.572009][ T2587] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9314'.
[ 2583.806178][ T2594] netlink: 'syz.0.9325': attribute type 10 has an invalid length.
[ 2583.829337][ T2594] team0: Device ipvlan1 failed to register rx_handler
[ 2583.916027][ T2593] syzkaller0: entered promiscuous mode
[ 2583.923361][ T2593] syzkaller0: entered allmulticast mode
[ 2584.074249][ T2596] netlink: set zone limit has 4 unknown bytes
[ 2584.172056][ T2596] netlink: 'syz.1.9316': attribute type 4 has an invalid length.
[ 2584.194202][ T2601] bond_slave_1: entered promiscuous mode
[ 2584.200722][ T2601] bridge0: entered promiscuous mode
[ 2584.929676][ T2618] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2587.074257][ T2606] netlink: 'syz.3.9319': attribute type 33 has an invalid length.
[ 2587.082798][ T2620] netlink: 'syz.2.9324': attribute type 33 has an invalid length.
[ 2587.187008][ T2622] netlink: 'syz.2.9327': attribute type 10 has an invalid length.
[ 2587.203101][ T2622] team0: Device ipvlan1 failed to register rx_handler
[ 2587.327009][ T2627] team0: Device ipvlan1 failed to register rx_handler
[ 2588.505968][ T2653] validate_nla: 1 callbacks suppressed
[ 2588.505991][ T2653] netlink: 'syz.1.9335': attribute type 33 has an invalid length.
[ 2588.532472][ T2653] __nla_validate_parse: 11 callbacks suppressed
[ 2588.532494][ T2653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9335'.
[ 2588.649537][ T2655] syzkaller0: entered promiscuous mode
[ 2588.682753][ T2655] syzkaller0: entered allmulticast mode
[ 2588.726988][ T2664] netlink: 'syz.1.9339': attribute type 10 has an invalid length.
[ 2588.740351][ T2664] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[ 2588.805141][ T2664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9339'.
[ 2589.184018][ T2673] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9342'.
[ 2589.195342][ T2673] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2590.749941][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.757985][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2591.685618][ T2666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9340'.
[ 2591.695210][ T2671] netlink: 'syz.0.9340': attribute type 33 has an invalid length.
[ 2591.703402][ T2671] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9340'.
[ 2591.730293][ T2670] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9341'.
[ 2591.833012][ T2676] FAULT_INJECTION: forcing a failure.
[ 2591.833012][ T2676] name failslab, interval 1, probability 0, space 0, times 0
[ 2591.853409][ T2676] CPU: 0 PID: 2676 Comm: syz.0.9343 Not tainted syzkaller #0
[ 2591.861325][ T2676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2591.871493][ T2676] Call Trace:
[ 2591.874960][ T2676]  <TASK>
[ 2591.877942][ T2676]  dump_stack_lvl+0x18c/0x250
[ 2591.882709][ T2676]  ? show_regs_print_info+0x20/0x20
[ 2591.887977][ T2676]  ? load_image+0x420/0x420
[ 2591.892589][ T2676]  ? __lock_acquire+0x7d40/0x7d40
[ 2591.897686][ T2676]  should_fail_ex+0x39d/0x4d0
[ 2591.902439][ T2676]  should_failslab+0x9/0x20
[ 2591.907102][ T2676]  slab_pre_alloc_hook+0x59/0x310
[ 2591.912379][ T2676]  ? ____sys_sendmsg+0x5ba/0x960
[ 2591.917568][ T2676]  ? ___sys_sendmsg+0x2a6/0x360
[ 2591.922498][ T2676]  ? __se_sys_sendmsg+0x1c2/0x2b0
[ 2591.927693][ T2676]  kmem_cache_alloc_node+0x60/0x320
[ 2591.933107][ T2676]  ? alloc_vmap_area+0x1b4/0x1e30
[ 2591.938326][ T2676]  alloc_vmap_area+0x1b4/0x1e30
[ 2591.943400][ T2676]  ? vm_map_ram+0xcb0/0xcb0
[ 2591.947995][ T2676]  ? rcu_is_watching+0x15/0xb0
[ 2591.952957][ T2676]  __get_vm_area_node+0x162/0x370
[ 2591.958055][ T2676]  __vmalloc_node_range+0x36e/0x1330
[ 2591.963397][ T2676]  ? netlink_sendmsg+0x602/0xbf0
[ 2591.968504][ T2676]  ? netlink_insert+0x109f/0x13a0
[ 2591.973580][ T2676]  ? netlink_data_ready+0x10/0x10
[ 2591.978689][ T2676]  ? free_vm_area+0x50/0x50
[ 2591.983333][ T2676]  ? netlink_sendmsg+0x602/0xbf0
[ 2591.988421][ T2676]  vmalloc+0x79/0x90
[ 2591.992376][ T2676]  ? netlink_sendmsg+0x602/0xbf0
[ 2591.997376][ T2676]  netlink_sendmsg+0x602/0xbf0
[ 2592.002201][ T2676]  ? netlink_getsockopt+0x590/0x590
[ 2592.007569][ T2676]  ? aa_sock_msg_perm+0x94/0x150
[ 2592.012649][ T2676]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2592.018074][ T2676]  ? security_socket_sendmsg+0x80/0xa0
[ 2592.023755][ T2676]  ? netlink_getsockopt+0x590/0x590
[ 2592.029049][ T2676]  ____sys_sendmsg+0x5ba/0x960
[ 2592.034164][ T2676]  ? __asan_memset+0x22/0x40
[ 2592.038831][ T2676]  ? __sys_sendmsg_sock+0x30/0x30
[ 2592.044163][ T2676]  ? __import_iovec+0x5f2/0x850
[ 2592.049190][ T2676]  ? import_iovec+0x73/0xa0
[ 2592.053944][ T2676]  ___sys_sendmsg+0x2a6/0x360
[ 2592.058819][ T2676]  ? get_pid_task+0x20/0x1e0
[ 2592.063679][ T2676]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2592.068620][ T2676]  ? __lock_acquire+0x7d40/0x7d40
[ 2592.073782][ T2676]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2592.078695][ T2676]  ? __x64_sys_sendmsg+0x80/0x80
[ 2592.083717][ T2676]  ? lockdep_hardirqs_on+0x98/0x150
[ 2592.089004][ T2676]  do_syscall_64+0x55/0xa0
[ 2592.093461][ T2676]  ? clear_bhb_loop+0x40/0x90
[ 2592.098179][ T2676]  ? clear_bhb_loop+0x40/0x90
[ 2592.102915][ T2676]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2592.109060][ T2676] RIP: 0033:0x7f182c39c819
[ 2592.113645][ T2676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2592.133689][ T2676] RSP: 002b:00007f182d2a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2592.142334][ T2676] RAX: ffffffffffffffda RBX: 00007f182c615fa0 RCX: 00007f182c39c819
[ 2592.150374][ T2676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2592.158588][ T2676] RBP: 00007f182d2a3090 R08: 0000000000000000 R09: 0000000000000000
[ 2592.167266][ T2676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2592.175602][ T2676] R13: 00007f182c616038 R14: 00007f182c615fa0 R15: 00007ffce697a318
[ 2592.183746][ T2676]  </TASK>
[ 2592.193609][ T2676] syz.0.9343: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 2592.208333][ T2676] CPU: 1 PID: 2676 Comm: syz.0.9343 Not tainted syzkaller #0
[ 2592.216052][ T2676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2592.226252][ T2676] Call Trace:
[ 2592.229577][ T2676]  <TASK>
[ 2592.232552][ T2676]  dump_stack_lvl+0x18c/0x250
[ 2592.237310][ T2676]  ? show_regs_print_info+0x20/0x20
[ 2592.242866][ T2676]  ? load_image+0x420/0x420
[ 2592.247481][ T2676]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 2592.254626][ T2676]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 2592.261359][ T2676]  warn_alloc+0x246/0x340
[ 2592.266099][ T2676]  ? slab_free_freelist_hook+0x130/0x1a0
[ 2592.272514][ T2676]  ? zone_watermark_ok_safe+0x230/0x230
[ 2592.279081][ T2676]  ? __get_vm_area_node+0x17b/0x370
[ 2592.284543][ T2676]  ? __get_vm_area_node+0x17b/0x370
[ 2592.289832][ T2676]  __vmalloc_node_range+0x393/0x1330
[ 2592.295385][ T2676]  ? netlink_insert+0x109f/0x13a0
[ 2592.300727][ T2676]  ? netlink_data_ready+0x10/0x10
[ 2592.305927][ T2676]  ? free_vm_area+0x50/0x50
[ 2592.311900][ T2676]  ? netlink_sendmsg+0x602/0xbf0
[ 2592.316922][ T2676]  vmalloc+0x79/0x90
[ 2592.321118][ T2676]  ? netlink_sendmsg+0x602/0xbf0
[ 2592.326289][ T2676]  netlink_sendmsg+0x602/0xbf0
[ 2592.331388][ T2676]  ? netlink_getsockopt+0x590/0x590
[ 2592.336860][ T2676]  ? aa_sock_msg_perm+0x94/0x150
[ 2592.341971][ T2676]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2592.347319][ T2676]  ? security_socket_sendmsg+0x80/0xa0
[ 2592.353250][ T2676]  ? netlink_getsockopt+0x590/0x590
[ 2592.358534][ T2676]  ____sys_sendmsg+0x5ba/0x960
[ 2592.364056][ T2676]  ? __asan_memset+0x22/0x40
[ 2592.368878][ T2676]  ? __sys_sendmsg_sock+0x30/0x30
[ 2592.374117][ T2676]  ? __import_iovec+0x5f2/0x850
[ 2592.379046][ T2676]  ? import_iovec+0x73/0xa0
[ 2592.383613][ T2676]  ___sys_sendmsg+0x2a6/0x360
[ 2592.388343][ T2676]  ? get_pid_task+0x20/0x1e0
[ 2592.393020][ T2676]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2592.398165][ T2676]  ? __lock_acquire+0x7d40/0x7d40
[ 2592.403280][ T2676]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2592.408315][ T2676]  ? __x64_sys_sendmsg+0x80/0x80
[ 2592.413326][ T2676]  ? lockdep_hardirqs_on+0x98/0x150
[ 2592.418579][ T2676]  do_syscall_64+0x55/0xa0
[ 2592.423241][ T2676]  ? clear_bhb_loop+0x40/0x90
[ 2592.428063][ T2676]  ? clear_bhb_loop+0x40/0x90
[ 2592.432823][ T2676]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2592.438798][ T2676] RIP: 0033:0x7f182c39c819
[ 2592.443265][ T2676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2592.463014][ T2676] RSP: 002b:00007f182d2a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2592.471741][ T2676] RAX: ffffffffffffffda RBX: 00007f182c615fa0 RCX: 00007f182c39c819
[ 2592.479850][ T2676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2592.488220][ T2676] RBP: 00007f182d2a3090 R08: 0000000000000000 R09: 0000000000000000
[ 2592.496332][ T2676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2592.504354][ T2676] R13: 00007f182c616038 R14: 00007f182c615fa0 R15: 00007ffce697a318
[ 2592.512417][ T2676]  </TASK>
[ 2592.520452][ T2676] Mem-Info:
[ 2592.523682][ T2676] active_anon:12397 inactive_anon:0 isolated_anon:0
[ 2592.523682][ T2676]  active_file:23161 inactive_file:40802 isolated_file:0
[ 2592.523682][ T2676]  unevictable:768 dirty:155 writeback:0
[ 2592.523682][ T2676]  slab_reclaimable:10878 slab_unreclaimable:98919
[ 2592.523682][ T2676]  mapped:25258 shmem:1361 pagetables:525
[ 2592.523682][ T2676]  sec_pagetables:0 bounce:0
[ 2592.523682][ T2676]  kernel_misc_reclaimable:0
[ 2592.523682][ T2676]  free:1323866 free_pcp:11791 free_cma:0
[ 2592.569875][ T2676] Node 0 active_anon:49588kB inactive_anon:0kB active_file:92644kB inactive_file:163008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101032kB dirty:620kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10136kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no
[ 2592.608555][ T2676] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2592.667329][ T2676] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2592.695143][ T2676] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 2592.703311][ T2676] Node 0 DMA32 free:1388784kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49552kB inactive_anon:0kB active_file:92644kB inactive_file:162180kB unevictable:1536kB writepending:620kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:26272kB local_pcp:11640kB free_cma:0kB
[ 2592.734743][ T2676] lowmem_reserve[]: 0 0 0 0 0
[ 2592.739727][ T2676] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 2592.775549][ T2676] lowmem_reserve[]: 0 0 0 0 0
[ 2592.781485][ T2676] Node 1 Normal free:3891096kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21980kB local_pcp:10236kB free_cma:0kB
[ 2592.813887][ T2676] lowmem_reserve[]: 0 0 0 0 0
[ 2592.818819][ T2676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2592.833701][ T2676] Node 0 DMA32: 2152*4kB (UM) 1844*8kB (UME) 1937*16kB (UME) 1643*32kB (UME) 839*64kB (UME) 501*128kB (UME) 229*256kB (UM) 121*512kB (UME) 45*1024kB (UM) 13*2048kB (ME) 237*4096kB (UM) = 1388784kB
[ 2592.882812][ T2676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2592.908249][ T2676] Node 1 Normal: 94*4kB (UM) 50*8kB (UME) 7*16kB (UME) 77*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3891096kB
[ 2592.927651][ T2688] netlink: 'syz.3.9348': attribute type 10 has an invalid length.
[ 2592.938654][ T2688] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9348'.
[ 2592.948404][ T2676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2592.969262][ T2676] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2592.992921][ T2676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2593.008376][ T2676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2593.022428][ T2676] 65324 total pagecache pages
[ 2593.031006][ T2676] 0 pages in swap cache
[ 2593.038808][ T2676] Free swap  = 124996kB
[ 2593.044862][ T2676] Total swap = 124996kB
[ 2593.049445][ T2676] 2097051 pages RAM
[ 2593.055983][ T2676] 0 pages HighMem/MovableOnly
[ 2593.062288][ T2676] 416927 pages reserved
[ 2593.072440][ T2676] 0 pages cma reserved
[ 2593.357803][ T2698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9349'.
[ 2593.503211][ T2705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9351'.
[ 2593.610358][ T2705] netlink: 'syz.0.9351': attribute type 33 has an invalid length.
[ 2593.632071][ T2705] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9351'.
[ 2598.310512][ T2712] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9353'.
[ 2598.343506][ T2731] netlink: 'syz.3.9358': attribute type 10 has an invalid length.
[ 2598.360422][ T2731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9358'.
[ 2598.370291][ T2731] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2598.537426][ T2735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9360'.
[ 2598.827948][ T2746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9364'.
[ 2598.861378][ T2746] netlink: 'syz.1.9364': attribute type 33 has an invalid length.
[ 2598.881613][ T2746] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9364'.
[ 2599.045336][ T2752] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9367'.
[ 2600.028888][ T2767] netlink: 'syz.3.9371': attribute type 10 has an invalid length.
[ 2600.080795][ T2767] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9371'.
[ 2600.091204][ T2767] batadv_slave_1: entered promiscuous mode
[ 2600.100886][T28221] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[ 2603.784132][ T2774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9373'.
[ 2604.005459][ T2802] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9380'.
[ 2607.160379][ T2823] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9384'.
[ 2607.189260][ T2833] team0: entered promiscuous mode
[ 2607.201047][ T2833] C: entered promiscuous mode
[ 2607.211991][ T2833] team_slave_1: entered promiscuous mode
[ 2607.228692][ T2833] geneve1: entered promiscuous mode
[ 2607.235970][ T2833] team0: entered allmulticast mode
[ 2607.250591][ T2833] C: entered allmulticast mode
[ 2607.264506][ T2833] team_slave_1: entered allmulticast mode
[ 2607.280660][ T2833] geneve1: entered allmulticast mode
[ 2607.785799][ T2851] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9391'.
[ 2607.891039][ T2852] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9392'.
[ 2607.939936][ T2852] openvswitch: netlink: Key type 29 is not supported
[ 2608.040698][ T2852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9392'.
[ 2611.898161][ T2870] syz.2.9397[2870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2611.898354][ T2870] syz.2.9397[2870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2614.330042][ T2861] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9394'.
[ 2614.448505][ T2873] netlink: 'syz.0.9401': attribute type 11 has an invalid length.
[ 2614.456723][ T2873] netlink: 126332 bytes leftover after parsing attributes in process `syz.0.9401'.
[ 2614.664128][ T2881] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9404'.
[ 2614.943754][ T2886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9405'.
[ 2614.991471][ T2886] netlink: 'syz.1.9405': attribute type 33 has an invalid length.
[ 2614.999753][ T2886] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9405'.
[ 2615.278634][ T2894] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.9409'.
[ 2617.951885][ T2898] netlink: 'syz.2.9411': attribute type 33 has an invalid length.
[ 2617.960754][ T2898] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9411'.
[ 2618.024602][ T2902] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9419'.
[ 2618.189097][ T2904] netlink: 'syz.0.9412': attribute type 33 has an invalid length.
[ 2618.220406][ T2904] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9412'.
[ 2618.383113][ T2915] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9416'.
[ 2618.468020][ T2919] netlink: 'syz.2.9420': attribute type 33 has an invalid length.
[ 2621.558035][ T2931] netlink: 'syz.2.9423': attribute type 33 has an invalid length.
[ 2621.567243][ T2931] __nla_validate_parse: 2 callbacks suppressed
[ 2621.567298][ T2931] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9423'.
[ 2621.617382][ T2933] netlink: 'syz.0.9424': attribute type 29 has an invalid length.
[ 2621.648419][ T2933] netlink: 'syz.0.9424': attribute type 29 has an invalid length.
[ 2621.671881][ T2933] netlink: 'syz.0.9424': attribute type 29 has an invalid length.
[ 2621.746555][ T2937] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.9426'.
[ 2621.904777][ T2945] netlink: 'syz.0.9437': attribute type 33 has an invalid length.
[ 2621.916941][ T2945] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9437'.
[ 2622.011216][ T2946] netlink: 'syz.1.9429': attribute type 33 has an invalid length.
[ 2622.019565][ T2946] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9429'.
[ 2622.252134][ T2952] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9431'.
[ 2622.317580][ T2954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9432'.
[ 2622.329803][ T2957] netlink: 'syz.1.9433': attribute type 39 has an invalid length.
[ 2622.358006][ T2954] netlink: 'syz.3.9432': attribute type 33 has an invalid length.
[ 2622.368160][ T2954] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9432'.
[ 2622.591516][ T2965] netlink: 'syz.0.9436': attribute type 25 has an invalid length.
[ 2622.611643][ T2965] netlink: 'syz.0.9436': attribute type 3 has an invalid length.
[ 2622.630373][ T2965] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9436'.
[ 2627.908172][ T2971] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.9439'.
[ 2627.917682][ T2973] validate_nla: 1 callbacks suppressed
[ 2627.917693][ T2973] netlink: 'syz.0.9440': attribute type 33 has an invalid length.
[ 2627.932298][ T2973] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9440'.
[ 2627.946195][ T2981] netlink: 'syz.3.9443': attribute type 33 has an invalid length.
[ 2627.970235][ T2981] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9443'.
[ 2628.139715][ T2984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9444'.
[ 2628.153605][ T2985] netlink: 'syz.3.9452': attribute type 33 has an invalid length.
[ 2628.167322][ T2985] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9452'.
[ 2628.178126][ T2984] netlink: 'syz.0.9444': attribute type 33 has an invalid length.
[ 2628.187261][ T2984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9444'.
[ 2628.274949][ T2989] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.9446'.
[ 2628.367891][ T2991] syzkaller0: entered promiscuous mode
[ 2628.384661][ T2991] syzkaller0: entered allmulticast mode
[ 2628.633949][ T3007] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.9454'.
[ 2628.645437][ T3007] netlink: 'syz.1.9454': attribute type 2 has an invalid length.
[ 2633.723029][ T3006] netlink: 'syz.0.9453': attribute type 33 has an invalid length.
[ 2633.731115][ T3006] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9453'.
[ 2633.856345][ T3020] netlink: 'syz.0.9458': attribute type 33 has an invalid length.
[ 2633.865679][ T3020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9458'.
[ 2633.994456][ T3024] bridge0: port 2(team0) entered disabled state
[ 2634.038990][ T3024] hsr0: left allmulticast mode
[ 2634.047235][ T3024] hsr_slave_0: left allmulticast mode
[ 2634.067625][ T3024] hsr_slave_1: left allmulticast mode
[ 2634.093965][ T3024] bridge0: port 5(hsr0) entered disabled state
[ 2634.129994][ T3024] bridge0: port 4(dummy0) entered disabled state
[ 2634.201564][ T3024] .`: left allmulticast mode
[ 2634.207168][ T3024] bond_slave_1: left allmulticast mode
[ 2634.220431][ T3024] bridge_slave_1: left allmulticast mode
[ 2634.233927][ T3024] bridge0: port 3(.`) entered disabled state
[ 2634.297312][ T3024] bridge_slave_0: left allmulticast mode
[ 2634.307909][ T3024] bridge_slave_0: left promiscuous mode
[ 2634.316686][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2634.898868][ T3032] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9461'.
[ 2635.065613][T31876] tipc: Subscription rejected, illegal request
[ 2635.481274][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9467'.
[ 2638.256443][ T3045] netlink: 'syz.1.9467': attribute type 33 has an invalid length.
[ 2638.272354][ T3045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9467'.
[ 2638.397925][ T3050] syzkaller0: entered promiscuous mode
[ 2638.421348][ T3050] syzkaller0: entered allmulticast mode
[ 2638.474640][ T3059] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.9470'.
[ 2643.376422][T31884] tipc: Subscription rejected, illegal request
[ 2644.252667][ T3077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9479'.
[ 2644.261857][ T3078] netlink: 'syz.0.9479': attribute type 33 has an invalid length.
[ 2644.269746][ T3078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9479'.
[ 2644.483156][ T3089] netlink: 'syz.2.9485': attribute type 10 has an invalid length.
[ 2644.506350][ T3089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9485'.
[ 2644.541789][ T3089] ipvlan1: entered promiscuous mode
[ 2644.548295][ T3089] ipvlan1: entered allmulticast mode
[ 2644.555975][ T3089] veth0_vlan: entered allmulticast mode
[ 2645.102842][ T3089] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 2645.815945][ T3112] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.9488'.
[ 2650.994866][ T3118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9490'.
[ 2651.004946][ T3119] netlink: 'syz.0.9490': attribute type 33 has an invalid length.
[ 2651.013059][ T3119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9490'.
[ 2651.146389][T31876] tipc: Subscription rejected, illegal request
[ 2652.187127][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.195040][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2656.990203][ T3158] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.9501'.
[ 2656.999835][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9503'.
[ 2657.011161][ T3163] netlink: 'syz.2.9503': attribute type 33 has an invalid length.
[ 2657.019102][ T3163] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9503'.
[ 2657.281406][ T3170] syzkaller0: entered promiscuous mode
[ 2657.287072][ T3170] syzkaller0: entered allmulticast mode
[ 2665.701945][ T3191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2665.709500][ T3191] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2665.718509][ T3191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2665.726979][ T3191] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2665.736348][ T3191] batman_adv: batadv0: Interface deactivated: macvlan1
[ 2665.743363][ T3191] batman_adv: batadv0: Removing interface: macvlan1
[ 2665.833262][ T3201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9515'.
[ 2665.844869][ T3202] netlink: 'syz.0.9515': attribute type 33 has an invalid length.
[ 2665.859383][ T3202] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9515'.
[ 2666.321438][ T3222] netlink: 'syz.2.9522': attribute type 10 has an invalid length.
[ 2666.390859][ T3222] macvlan1: entered allmulticast mode
[ 2666.478202][ T3222] macvlan1: entered promiscuous mode
[ 2666.521114][ T3222] team0: Port device macvlan1 added
[ 2667.718834][ T3238] netlink: 'syz.3.9534': attribute type 10 has an invalid length.
[ 2667.744814][ T3234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9525'.
[ 2667.795030][ T3234] netlink: 'syz.2.9525': attribute type 33 has an invalid length.
[ 2667.832554][ T3234] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9525'.
[ 2668.137512][ T3240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9528'.
[ 2668.174567][ T3240] netlink: 'syz.1.9528': attribute type 33 has an invalid length.
[ 2668.200010][ T3240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9528'.
[ 2668.321818][ T3245] FAULT_INJECTION: forcing a failure.
[ 2668.321818][ T3245] name failslab, interval 1, probability 0, space 0, times 0
[ 2668.335145][ T3245] CPU: 0 PID: 3245 Comm: syz.2.9529 Not tainted syzkaller #0
[ 2668.342573][ T3245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2668.352737][ T3245] Call Trace:
[ 2668.356064][ T3245]  <TASK>
[ 2668.359036][ T3245]  dump_stack_lvl+0x18c/0x250
[ 2668.363790][ T3245]  ? lock_chain_count+0x20/0x20
[ 2668.368716][ T3245]  ? show_regs_print_info+0x20/0x20
[ 2668.373990][ T3245]  ? load_image+0x420/0x420
[ 2668.378603][ T3245]  ? get_random_u32+0x4d1/0x910
[ 2668.383536][ T3245]  ? get_random_u32+0x16f/0x910
[ 2668.388501][ T3245]  ? get_random_u32+0x538/0x910
[ 2668.393605][ T3245]  should_fail_ex+0x39d/0x4d0
[ 2668.398558][ T3245]  should_failslab+0x9/0x20
[ 2668.403197][ T3245]  slab_pre_alloc_hook+0x59/0x310
[ 2668.408270][ T3245]  kmem_cache_alloc+0x5a/0x2d0
[ 2668.413078][ T3245]  ? inet_bind_bucket_create+0x2f/0x230
[ 2668.418667][ T3245]  inet_bind_bucket_create+0x2f/0x230
[ 2668.424189][ T3245]  inet_csk_get_port+0x3b8/0x1840
[ 2668.429303][ T3245]  inet_sendmsg+0x1ec/0x2f0
[ 2668.433880][ T3245]  ? inet_send_prepare+0x260/0x260
[ 2668.439055][ T3245]  ____sys_sendmsg+0x5ba/0x960
[ 2668.443913][ T3245]  ? __asan_memset+0x22/0x40
[ 2668.448553][ T3245]  ? __sys_sendmsg_sock+0x30/0x30
[ 2668.453613][ T3245]  ? __import_iovec+0x3fa/0x850
[ 2668.458504][ T3245]  ? import_iovec+0x73/0xa0
[ 2668.463073][ T3245]  ___sys_sendmsg+0x2a6/0x360
[ 2668.467874][ T3245]  ? get_pid_task+0x20/0x1e0
[ 2668.472508][ T3245]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2668.477335][ T3245]  ? __lock_acquire+0x7d40/0x7d40
[ 2668.482425][ T3245]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2668.487324][ T3245]  ? __x64_sys_sendmsg+0x80/0x80
[ 2668.492309][ T3245]  ? lockdep_hardirqs_on+0x98/0x150
[ 2668.497548][ T3245]  do_syscall_64+0x55/0xa0
[ 2668.501995][ T3245]  ? clear_bhb_loop+0x40/0x90
[ 2668.506730][ T3245]  ? clear_bhb_loop+0x40/0x90
[ 2668.511479][ T3245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2668.517961][ T3245] RIP: 0033:0x7fec8bf9c819
[ 2668.522508][ T3245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2668.542255][ T3245] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2668.550822][ T3245] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2668.558863][ T3245] RDX: 0000000024000001 RSI: 0000200000000400 RDI: 0000000000000003
[ 2668.566881][ T3245] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2668.574984][ T3245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2668.582994][ T3245] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2668.591110][ T3245]  </TASK>
[ 2672.055068][ T3256] tap1: tun_chr_ioctl cmd 1074025680
[ 2672.178512][ T3270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9539'.
[ 2672.217071][ T3270] netlink: 'syz.1.9539': attribute type 33 has an invalid length.
[ 2672.227150][ T3270] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9539'.
[ 2672.259983][ T3274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9540'.
[ 2672.330595][ T3274] netlink: 'syz.0.9540': attribute type 33 has an invalid length.
[ 2672.340927][ T3279] netlink: 'syz.3.9541': attribute type 29 has an invalid length.
[ 2672.350660][ T3274] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9540'.
[ 2672.440249][ T3279] netlink: 'syz.3.9541': attribute type 29 has an invalid length.
[ 2672.453039][ T3281] netlink: 'syz.3.9541': attribute type 29 has an invalid length.
[ 2672.476491][ T3283] netlink: 'syz.1.9542': attribute type 10 has an invalid length.
[ 2672.485814][ T3283] macvlan1: left promiscuous mode
[ 2672.491052][ T3283] macvlan1: entered allmulticast mode
[ 2672.511233][ T3283] veth1_vlan: entered allmulticast mode
[ 2672.545249][ T3283] macvlan1: entered promiscuous mode
[ 2672.580251][ T3283] team0: Port device macvlan1 added
[ 2672.854357][ T3295] mac80211_hwsim hwsim492 wlan1: entered promiscuous mode
[ 2673.866793][ T3309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9551'.
[ 2673.887668][ T3309] netlink: 'syz.2.9551': attribute type 33 has an invalid length.
[ 2673.896828][ T3309] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9551'.
[ 2673.923241][ T3311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9550'.
[ 2673.960875][ T3311] netlink: 'syz.0.9550': attribute type 33 has an invalid length.
[ 2673.969287][ T3311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9550'.
[ 2674.076889][ T3315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9553'.
[ 2674.098607][ T3315] netlink: 'syz.1.9553': attribute type 33 has an invalid length.
[ 2674.109551][ T3315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9553'.
[ 2674.333073][ T3330] netlink: 'syz.0.9560': attribute type 10 has an invalid length.
[ 2674.342558][ T3330] macvlan1: entered allmulticast mode
[ 2674.361885][ T3330] veth1_vlan: entered allmulticast mode
[ 2674.379693][ T3330] macvlan1: entered promiscuous mode
[ 2674.397592][ T3330] team0: Port device macvlan1 added
[ 2674.422062][ T3328] mac80211_hwsim hwsim490 wlan1: entered promiscuous mode
[ 2674.515901][ T3333] veth0_macvtap: left promiscuous mode
[ 2675.837475][ T3361] mac80211_hwsim hwsim488 wlan1: entered promiscuous mode
[ 2679.427264][ T3404] __nla_validate_parse: 14 callbacks suppressed
[ 2679.427299][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9596'.
[ 2679.449525][ T3404] validate_nla: 7 callbacks suppressed
[ 2679.449566][ T3404] netlink: 'syz.0.9596': attribute type 33 has an invalid length.
[ 2679.465328][ T3404] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9596'.
[ 2679.492169][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9589'.
[ 2679.508088][ T3408] netlink: 'syz.2.9589': attribute type 33 has an invalid length.
[ 2679.517265][ T3408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9589'.
[ 2679.668938][ T3413] netlink: 'syz.3.9591': attribute type 29 has an invalid length.
[ 2679.685295][ T3413] netlink: 'syz.3.9591': attribute type 29 has an invalid length.
[ 2679.698912][ T3413] netlink: 'syz.3.9591': attribute type 29 has an invalid length.
[ 2680.054403][ T3428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9599'.
[ 2680.075875][ T3428] netlink: 'syz.2.9599': attribute type 33 has an invalid length.
[ 2680.086748][ T3428] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9599'.
[ 2683.011189][ T3434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9601'.
[ 2683.046192][ T3434] netlink: 'syz.2.9601': attribute type 33 has an invalid length.
[ 2683.070898][ T3434] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9601'.
[ 2683.217998][ T3445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9606'.
[ 2683.243086][ T3443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9604'.
[ 2683.269038][ T3443] netlink: 'syz.0.9604': attribute type 33 has an invalid length.
[ 2684.109063][ T3472] netlink: 'syz.0.9616': attribute type 33 has an invalid length.
[ 2684.204473][ T3471] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 2684.247158][ T3471] CPU: 0 PID: 3471 Comm: syz.2.9617 Not tainted syzkaller #0
[ 2684.254840][ T3471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2684.265418][ T3471] Call Trace:
[ 2684.268792][ T3471]  <TASK>
[ 2684.271818][ T3471]  dump_stack_lvl+0x18c/0x250
[ 2684.276586][ T3471]  ? show_regs_print_info+0x20/0x20
[ 2684.282217][ T3471]  ? load_image+0x420/0x420
[ 2684.286827][ T3471]  sysfs_warn_dup+0x8e/0xa0
[ 2684.291399][ T3471]  sysfs_do_create_link_sd+0xc0/0x110
[ 2684.296832][ T3471]  device_add_class_symlinks+0x1cf/0x240
[ 2684.302638][ T3471]  device_add+0x507/0xc20
[ 2684.307126][ T3471]  wiphy_register+0x1dad/0x2ae0
[ 2684.312061][ T3471]  ? cfg80211_event_work+0x40/0x40
[ 2684.317220][ T3471]  ? minstrel_ht_alloc+0x88a/0x990
[ 2684.322386][ T3471]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 2684.328594][ T3471]  ieee80211_register_hw+0x3464/0x4250
[ 2684.334122][ T3471]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2684.340247][ T3471]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 2684.346196][ T3471]  ? __debug_object_init+0xec/0x450
[ 2684.351458][ T3471]  ? __asan_memset+0x22/0x40
[ 2684.356116][ T3471]  ? __hrtimer_init+0x186/0x270
[ 2684.361020][ T3471]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 2684.366834][ T3471]  ? mac80211_hwsim_free+0x220/0x220
[ 2684.372282][ T3471]  ? rcu_is_watching+0x15/0xb0
[ 2684.377140][ T3471]  ? kstrndup+0xbd/0x140
[ 2684.381450][ T3471]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 2684.386642][ T3471]  ? __nla_validate+0x50/0x50
[ 2684.391432][ T3471]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 2684.397879][ T3471]  ? __nla_parse+0x40/0x50
[ 2684.402976][ T3471]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 2684.409392][ T3471]  genl_family_rcv_msg_doit+0x211/0x310
[ 2684.415115][ T3471]  ? end_current_label_crit_section+0x170/0x170
[ 2684.421538][ T3471]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 2684.427503][ T3471]  ? bpf_lsm_capable+0x9/0x10
[ 2684.432437][ T3471]  ? security_capable+0x89/0xb0
[ 2684.437377][ T3471]  genl_rcv_msg+0x619/0x7a0
[ 2684.441951][ T3471]  ? genl_bind+0x360/0x360
[ 2684.446414][ T3471]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 2684.452817][ T3471]  netlink_rcv_skb+0x241/0x4d0
[ 2684.457692][ T3471]  ? genl_bind+0x360/0x360
[ 2684.462161][ T3471]  ? netlink_ack+0x1180/0x1180
[ 2684.467000][ T3471]  ? __lock_acquire+0x7d40/0x7d40
[ 2684.472106][ T3471]  ? net_generic+0x1e/0x240
[ 2684.476664][ T3471]  ? down_read+0x1ac/0x2e0
[ 2684.481334][ T3471]  genl_rcv+0x28/0x40
[ 2684.485352][ T3471]  netlink_unicast+0x751/0x8d0
[ 2684.490206][ T3471]  netlink_sendmsg+0x8d0/0xbf0
[ 2684.495026][ T3471]  ? netlink_getsockopt+0x590/0x590
[ 2684.500373][ T3471]  ? aa_sock_msg_perm+0x94/0x150
[ 2684.505553][ T3471]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2684.510980][ T3471]  ? security_socket_sendmsg+0x80/0xa0
[ 2684.516507][ T3471]  ? netlink_getsockopt+0x590/0x590
[ 2684.521772][ T3471]  ____sys_sendmsg+0x5ba/0x960
[ 2684.526705][ T3471]  ? __asan_memset+0x22/0x40
[ 2684.531388][ T3471]  ? __sys_sendmsg_sock+0x30/0x30
[ 2684.536509][ T3471]  ? __import_iovec+0x5f2/0x850
[ 2684.541437][ T3471]  ? import_iovec+0x73/0xa0
[ 2684.546113][ T3471]  ___sys_sendmsg+0x2a6/0x360
[ 2684.550863][ T3471]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2684.555746][ T3471]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2684.560748][ T3471]  ? __x64_sys_sendmsg+0x80/0x80
[ 2684.565756][ T3471]  ? lockdep_hardirqs_on+0x98/0x150
[ 2684.571087][ T3471]  do_syscall_64+0x55/0xa0
[ 2684.575662][ T3471]  ? clear_bhb_loop+0x40/0x90
[ 2684.580422][ T3471]  ? clear_bhb_loop+0x40/0x90
[ 2684.585188][ T3471]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2684.591148][ T3471] RIP: 0033:0x7fec8bf9c819
[ 2684.595660][ T3471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2684.615765][ T3471] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2684.624340][ T3471] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2684.632356][ T3471] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 2684.640554][ T3471] RBP: 00007fec8c032c91 R08: 0000000000000000 R09: 0000000000000000
[ 2684.648593][ T3471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2684.656664][ T3471] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2684.664719][ T3471]  </TASK>
[ 2688.719743][ T3477] C: renamed from team_slave_0
[ 2688.726946][ T3477] netlink: 'syz.2.9618': attribute type 4 has an invalid length.
[ 2688.734990][ T3477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 2688.872473][ T3488] netlink: 'syz.0.9627': attribute type 10 has an invalid length.
[ 2688.897503][ T3488] team0: Device ipvlan1 failed to register rx_handler
[ 2688.944484][ T3488] netlink: 'syz.0.9627': attribute type 13 has an invalid length.
[ 2688.970735][ T3488] __nla_validate_parse: 5 callbacks suppressed
[ 2688.970757][ T3488] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9627'.
[ 2689.014904][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9619'.
[ 2689.056211][ T3485] netlink: 'syz.2.9619': attribute type 33 has an invalid length.
[ 2689.094930][ T3485] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9619'.
[ 2689.495541][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2689.506496][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2689.528513][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2689.543321][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2689.551870][ T5819] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2689.561377][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2689.576583][ T3500] FAULT_INJECTION: forcing a failure.
[ 2689.576583][ T3500] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2689.620397][ T3500] CPU: 1 PID: 3500 Comm: syz.2.9623 Not tainted syzkaller #0
[ 2689.627895][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2689.638050][ T3500] Call Trace:
[ 2689.641440][ T3500]  <TASK>
[ 2689.644443][ T3500]  dump_stack_lvl+0x18c/0x250
[ 2689.649231][ T3500]  ? show_regs_print_info+0x20/0x20
[ 2689.654551][ T3500]  ? load_image+0x420/0x420
[ 2689.659209][ T3500]  ? __lock_acquire+0x7d40/0x7d40
[ 2689.664354][ T3500]  should_fail_ex+0x39d/0x4d0
[ 2689.669190][ T3500]  prepare_alloc_pages+0x1e2/0x5f0
[ 2689.674417][ T3500]  __alloc_pages+0x134/0x460
[ 2689.679105][ T3500]  ? zone_statistics+0x170/0x170
[ 2689.684269][ T3500]  ? alloc_pages+0x4dc/0x740
[ 2689.688955][ T3500]  ? do_raw_spin_unlock+0x121/0x230
[ 2689.694397][ T3500]  __get_free_pages+0xc/0x30
[ 2689.699087][ T3500]  kasan_populate_vmalloc_pte+0x35/0x100
[ 2689.704828][ T3500]  __apply_to_page_range+0x860/0xdd0
[ 2689.710331][ T3500]  ? kasan_populate_vmalloc+0x70/0x70
[ 2689.715811][ T3500]  ? apply_to_page_range+0x50/0x50
[ 2689.721020][ T3500]  ? do_raw_spin_unlock+0x121/0x230
[ 2689.726296][ T3500]  alloc_vmap_area+0x1d0c/0x1e30
[ 2689.731363][ T3500]  ? vm_map_ram+0xcb0/0xcb0
[ 2689.735936][ T3500]  ? rcu_is_watching+0x15/0xb0
[ 2689.740790][ T3500]  __get_vm_area_node+0x162/0x370
[ 2689.745896][ T3500]  ? bpf_map_area_alloc+0x5e/0x110
[ 2689.751118][ T3500]  __vmalloc_node_range+0x36e/0x1330
[ 2689.756475][ T3500]  ? dev_map_create_hash+0x24/0x1d0
[ 2689.761811][ T3500]  ? free_vm_area+0x50/0x50
[ 2689.766422][ T3500]  ? __kmem_cache_alloc_node+0x13a/0x250
[ 2689.772214][ T3500]  bpf_map_area_alloc+0xf1/0x110
[ 2689.777215][ T3500]  ? dev_map_create_hash+0x24/0x1d0
[ 2689.782471][ T3500]  dev_map_create_hash+0x24/0x1d0
[ 2689.787648][ T3500]  ? bpf_map_init_from_attr+0x14a/0x340
[ 2689.793265][ T3500]  dev_map_alloc+0x277/0x4c0
[ 2689.797917][ T3500]  map_create+0x877/0x12f0
[ 2689.802400][ T3500]  ? bpf_lsm_bpf+0x9/0x10
[ 2689.806802][ T3500]  __sys_bpf+0x651/0x890
[ 2689.811105][ T3500]  ? bpf_link_show_fdinfo+0x390/0x390
[ 2689.816600][ T3500]  ? lock_chain_count+0x20/0x20
[ 2689.821547][ T3500]  __x64_sys_bpf+0x7c/0x90
[ 2689.826038][ T3500]  do_syscall_64+0x55/0xa0
[ 2689.830615][ T3500]  ? clear_bhb_loop+0x40/0x90
[ 2689.835393][ T3500]  ? clear_bhb_loop+0x40/0x90
[ 2689.840615][ T3500]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2689.846619][ T3500] RIP: 0033:0x7fec8bf9c819
[ 2689.851229][ T3500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2689.870923][ T3500] RSP: 002b:00007fec8ceda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2689.879799][ T3500] RAX: ffffffffffffffda RBX: 00007fec8c215fa0 RCX: 00007fec8bf9c819
[ 2689.887873][ T3500] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000
[ 2689.896371][ T3500] RBP: 00007fec8ceda090 R08: 0000000000000000 R09: 0000000000000000
[ 2689.904515][ T3500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2689.912546][ T3500] R13: 00007fec8c216038 R14: 00007fec8c215fa0 R15: 00007ffe3d1c8e28
[ 2689.920617][ T3500]  </TASK>
[ 2690.049123][T31884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2690.110792][ T3510] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.9624'.
[ 2690.156063][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9626'.
[ 2690.175910][ T3509] netlink: 'syz.1.9626': attribute type 33 has an invalid length.
[ 2690.194612][ T3509] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9626'.
[ 2690.244016][T31884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2690.384027][T31884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2690.567673][T31884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2690.620007][ T3518] delete_channel: no stack
[ 2690.658901][ T3519] syzkaller0: entered promiscuous mode
[ 2690.665277][ T3519] syzkaller0: entered allmulticast mode
[ 2691.638041][ T2771] Bluetooth: hci1: command tx timeout
[ 2693.710518][ T2771] Bluetooth: hci1: command tx timeout
[ 2695.781741][ T2771] Bluetooth: hci1: command tx timeout
[ 2697.078838][ T3535] netlink: 'syz.0.9633': attribute type 10 has an invalid length.
[ 2697.092755][ T3498] chnl_net:caif_netlink_parms(): no params data found
[ 2697.104617][ T3551] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.9637'.
[ 2697.414079][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2697.430320][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2697.449645][ T3498] bridge_slave_0: entered allmulticast mode
[ 2697.485780][ T3498] bridge_slave_0: entered promiscuous mode
[ 2697.573119][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2697.583325][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2697.612221][ T3498] bridge_slave_1: entered allmulticast mode
[ 2697.619502][ T3498] bridge_slave_1: entered promiscuous mode
[ 2697.828478][ T3571] syzkaller0: entered promiscuous mode
[ 2697.853489][ T3571] syzkaller0: entered allmulticast mode
[ 2697.860381][ T2771] Bluetooth: hci1: command tx timeout
[ 2698.033075][ T3498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2698.082411][ T3498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2698.473165][ T3594] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9646'.
[ 2698.505770][ T2771] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10
[ 2700.586340][ T2771] Bluetooth: hci2: command 0x0406 tx timeout
[ 2700.699144][ T3498] team0: Port device team_slave_0 added
[ 2700.733676][ T3600] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.9647'.
[ 2700.765207][ T3498] team0: Port device team_slave_1 added
[ 2700.791625][ T3594] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 2700.882497][T31884] gretap0 (unregistering): left allmulticast mode
[ 2700.889129][T31884] gretap0 (unregistering): left promiscuous mode
[ 2700.896636][T31884] Ÿë
: port 1(gretap0) entered disabled state
[ 2701.058672][ T3498] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2701.071970][ T3498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2701.108067][ T3498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2701.136115][ T3498] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2701.157563][ T3498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2701.204972][ T3498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2701.592448][ T3498] hsr_slave_0: entered promiscuous mode
[ 2701.608345][ T3498] hsr_slave_1: entered promiscuous mode
[ 2701.626180][ T3498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2701.635140][ T3498] Cannot create hsr debugfs directory
[ 2701.892241][T31884] 
[ 2701.894716][T31884] ======================================================
[ 2701.901801][T31884] WARNING: possible circular locking dependency detected
[ 2701.908883][T31884] syzkaller #0 Not tainted
[ 2701.913414][T31884] ------------------------------------------------------
[ 2701.920480][T31884] kworker/u4:4/31884 is trying to acquire lock:
[ 2701.926855][T31884] ffff888020938d00 (team->team_lock_key#13){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0
[ 2701.936670][T31884] 
[ 2701.936670][T31884] but task is already holding lock:
[ 2701.944176][T31884] ffff8880681d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690
[ 2701.954601][T31884] 
[ 2701.954601][T31884] which lock already depends on the new lock.
[ 2701.954601][T31884] 
[ 2701.965058][T31884] 
[ 2701.965058][T31884] the existing dependency chain (in reverse order) is:
[ 2701.974106][T31884] 
[ 2701.974106][T31884] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[ 2701.981881][T31884]        __mutex_lock+0x136/0xcc0
[ 2701.986938][T31884]        ieee80211_open+0x144/0x200
[ 2701.992176][T31884]        __dev_open+0x2cb/0x430
[ 2701.997052][T31884]        dev_open+0xab/0x190
[ 2702.001760][T31884]        team_add_slave+0x75f/0x29a0
[ 2702.007075][T31884]        do_setlink+0xdfe/0x4130
[ 2702.012048][T31884]        rtnl_newlink+0x17da/0x20a0
[ 2702.017274][T31884]        rtnetlink_rcv_msg+0x869/0xfa0
[ 2702.022758][T31884]        netlink_rcv_skb+0x241/0x4d0
[ 2702.028079][T31884]        netlink_unicast+0x751/0x8d0
[ 2702.033392][T31884]        netlink_sendmsg+0x8d0/0xbf0
[ 2702.038714][T31884]        ____sys_sendmsg+0x5ba/0x960
[ 2702.044024][T31884]        ___sys_sendmsg+0x2a6/0x360
[ 2702.049348][T31884]        __se_sys_sendmsg+0x1c2/0x2b0
[ 2702.054848][T31884]        do_syscall_64+0x55/0xa0
[ 2702.059856][T31884]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2702.066311][T31884] 
[ 2702.066311][T31884] -> #0 (team->team_lock_key#13){+.+.}-{3:3}:
[ 2702.074627][T31884]        __lock_acquire+0x2df1/0x7d40
[ 2702.080035][T31884]        lock_acquire+0x19e/0x420
[ 2702.085187][T31884]        __mutex_lock+0x136/0xcc0
[ 2702.090238][T31884]        team_del_slave+0x32/0x1c0
[ 2702.095368][T31884]        team_device_event+0x28d/0xa20
[ 2702.100957][T31884]        notifier_call_chain+0x197/0x380
[ 2702.106625][T31884]        unregister_netdevice_many_notify+0x100d/0x1900
[ 2702.113599][T31884]        unregister_netdevice_queue+0x32c/0x370
[ 2702.119954][T31884]        _cfg80211_unregister_wdev+0x16b/0x580
[ 2702.126144][T31884]        ieee80211_remove_interfaces+0x49e/0x690
[ 2702.132606][T31884]        ieee80211_unregister_hw+0x5d/0x2a0
[ 2702.138567][T31884]        mac80211_hwsim_del_radio+0x289/0x480
[ 2702.144670][T31884]        hwsim_exit_net+0x58d/0x650
[ 2702.149899][T31884]        cleanup_net+0x70a/0xbb0
[ 2702.154904][T31884]        process_scheduled_works+0xa5d/0x15d0
[ 2702.161098][T31884]        worker_thread+0xa55/0xfc0
[ 2702.166240][T31884]        kthread+0x2fa/0x390
[ 2702.170861][T31884]        ret_from_fork+0x48/0x80
[ 2702.175836][T31884]        ret_from_fork_asm+0x11/0x20
[ 2702.181154][T31884] 
[ 2702.181154][T31884] other info that might help us debug this:
[ 2702.181154][T31884] 
[ 2702.191404][T31884]  Possible unsafe locking scenario:
[ 2702.191404][T31884] 
[ 2702.198878][T31884]        CPU0                    CPU1
[ 2702.204275][T31884]        ----                    ----
[ 2702.209691][T31884]   lock(&rdev->wiphy.mtx);
[ 2702.214233][T31884]                                lock(team->team_lock_key#13);
[ 2702.221817][T31884]                                lock(&rdev->wiphy.mtx);
[ 2702.229009][T31884]   lock(team->team_lock_key#13);
[ 2702.234080][T31884] 
[ 2702.234080][T31884]  *** DEADLOCK ***
[ 2702.234080][T31884] 
[ 2702.242363][T31884] 5 locks held by kworker/u4:4/31884:
[ 2702.247845][T31884]  #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 2702.258793][T31884]  #1: ffffc9000d817d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 2702.269453][T31884]  #2: ffffffff8e3b57d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[ 2702.278901][T31884]  #3: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[ 2702.288837][T31884]  #4: ffff8880681d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690
[ 2702.299714][T31884] 
[ 2702.299714][T31884] stack backtrace:
[ 2702.305632][T31884] CPU: 1 PID: 31884 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 2702.313318][T31884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2702.323486][T31884] Workqueue: netns cleanup_net
[ 2702.328323][T31884] Call Trace:
[ 2702.331644][T31884]  <TASK>
[ 2702.334629][T31884]  dump_stack_lvl+0x18c/0x250
[ 2702.339414][T31884]  ? load_image+0x420/0x420
[ 2702.344053][T31884]  ? show_regs_print_info+0x20/0x20
[ 2702.349301][T31884]  ? print_circular_bug+0x12b/0x1a0
[ 2702.354534][T31884]  check_noncircular+0x2fc/0x400
[ 2702.359516][T31884]  ? print_deadlock_bug+0x5d0/0x5d0
[ 2702.364771][T31884]  ? lockdep_lock+0xf5/0x230
[ 2702.369395][T31884]  ? __lock_acquire+0x1273/0x7d40
[ 2702.374448][T31884]  ? _find_first_zero_bit+0xd3/0x100
[ 2702.379767][T31884]  __lock_acquire+0x2df1/0x7d40
[ 2702.384667][T31884]  ? verify_lock_unused+0x140/0x140
[ 2702.389907][T31884]  ? verify_lock_unused+0x140/0x140
[ 2702.395140][T31884]  lock_acquire+0x19e/0x420
[ 2702.399674][T31884]  ? team_del_slave+0x32/0x1c0
[ 2702.404466][T31884]  ? __might_sleep+0xe0/0xe0
[ 2702.409088][T31884]  ? read_lock_is_recursive+0x20/0x20
[ 2702.414524][T31884]  __mutex_lock+0x136/0xcc0
[ 2702.419057][T31884]  ? team_del_slave+0x32/0x1c0
[ 2702.423849][T31884]  ? __lock_acquire+0x7d40/0x7d40
[ 2702.428899][T31884]  ? rcu_is_watching+0x15/0xb0
[ 2702.433697][T31884]  ? trace_contention_end+0x39/0xe0
[ 2702.438939][T31884]  ? __mutex_lock+0x315/0xcc0
[ 2702.443664][T31884]  ? team_del_slave+0x32/0x1c0
[ 2702.448497][T31884]  ? mutex_lock_nested+0x20/0x20
[ 2702.453458][T31884]  ? bond_netdev_event+0xeb/0xf20
[ 2702.459153][T31884]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 2702.464816][T31884]  team_del_slave+0x32/0x1c0
[ 2702.469517][T31884]  team_device_event+0x28d/0xa20
[ 2702.474485][T31884]  notifier_call_chain+0x197/0x380
[ 2702.479638][T31884]  unregister_netdevice_many_notify+0x100d/0x1900
[ 2702.486092][T31884]  ? lock_chain_count+0x20/0x20
[ 2702.490975][T31884]  ? unregister_netdevice_many+0x20/0x20
[ 2702.496647][T31884]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 2702.502408][T31884]  ? __lock_acquire+0x7d40/0x7d40
[ 2702.507465][T31884]  unregister_netdevice_queue+0x32c/0x370
[ 2702.513239][T31884]  ? list_netdevice+0x730/0x730
[ 2702.518137][T31884]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 2702.523911][T31884]  _cfg80211_unregister_wdev+0x16b/0x580
[ 2702.529599][T31884]  ieee80211_remove_interfaces+0x49e/0x690
[ 2702.535448][T31884]  ? ieee80211_do_stop+0x1e20/0x1e20
[ 2702.540769][T31884]  ? rcu_is_watching+0x15/0xb0
[ 2702.545592][T31884]  ieee80211_unregister_hw+0x5d/0x2a0
[ 2702.551012][T31884]  mac80211_hwsim_del_radio+0x289/0x480
[ 2702.556613][T31884]  ? rhashtable_remove_fast+0xc00/0xc00
[ 2702.562203][T31884]  hwsim_exit_net+0x58d/0x650
[ 2702.566939][T31884]  ? hwsim_init_net+0x90/0x90
[ 2702.571674][T31884]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[ 2702.577524][T31884]  cleanup_net+0x70a/0xbb0
[ 2702.581986][T31884]  ? ops_free_list+0x3b0/0x3b0
[ 2702.586788][T31884]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2702.592014][T31884]  ? process_scheduled_works+0x96f/0x15d0
[ 2702.597771][T31884]  ? process_scheduled_works+0x96f/0x15d0
[ 2702.603526][T31884]  process_scheduled_works+0xa5d/0x15d0
[ 2702.609125][T31884]  ? worker_attach_to_pool+0x380/0x380
[ 2702.614714][T31884]  ? assign_work+0x3d2/0x5d0
[ 2702.619430][T31884]  worker_thread+0xa55/0xfc0
[ 2702.624069][T31884]  kthread+0x2fa/0x390
[ 2702.628168][T31884]  ? pr_cont_work+0x560/0x560
[ 2702.633103][T31884]  ? kthread_blkcg+0xd0/0xd0
[ 2702.637725][T31884]  ret_from_fork+0x48/0x80
[ 2702.642169][T31884]  ? kthread_blkcg+0xd0/0xd0
[ 2702.646818][T31884]  ret_from_fork_asm+0x11/0x20
[ 2702.651768][T31884]  </TASK>
[ 2702.663046][T31884] team0: Port device wlan1 removed
[ 2702.708396][ T3636] netlink: 'syz.0.9655': attribute type 10 has an invalid length.
[ 2702.743095][ T3636] macvlan0: entered promiscuous mode
[ 2702.748813][ T3636] macvlan0: entered allmulticast mode
[ 2702.764277][ T3636] team0: Port device macvlan0 added
[ 2702.879436][T31884] veth0_to_team: left allmulticast mode
[ 2702.888627][T31884] veth0_to_team: left promiscuous mode
[ 2702.894654][T31884] Ÿë
: port 2(veth0_to_team) entered disabled state
[ 2702.907837][T31884] hsr_slave_0: left promiscuous mode
[ 2703.138346][T31884] bond0 (unregistering): (slave veth0_to_batadv): Releasing backup interface
[ 2703.167022][T31884] team_slave_1 (unregistering): left promiscuous mode
[ 2703.173910][T31884] team_slave_1 (unregistering): left allmulticast mode
[ 2703.183735][T31884] team0 (unregistering): Port device team_slave_1 removed
[ 2703.215653][T31884] C (unregistering): left promiscuous mode
[ 2703.221779][T31884] C (unregistering): left allmulticast mode
[ 2703.228519][T31884] team0 (unregistering): Port device C removed
[ 2703.277440][T31884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2703.313083][T31884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2703.347664][T31884] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2703.483583][T31884] bond0 (unregistering): Released all slaves
[ 2703.835699][ T3498] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2703.846110][ T3498] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2703.858117][ T3498] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2703.873175][ T3498] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2703.958273][ T3498] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2703.982057][ T3498] 8021q: adding VLAN 0 to HW filter on device team0
[ 2703.995366][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2704.002585][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2704.028029][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2704.035295][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2704.249222][ T3498] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2704.303074][ T3498] veth0_vlan: entered promiscuous mode
[ 2704.316901][ T3498] veth1_vlan: entered promiscuous mode
[ 2704.358535][ T3498] veth0_macvtap: entered promiscuous mode
[ 2704.369471][ T3498] veth1_macvtap: entered promiscuous mode
[ 2704.393470][ T3498] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2704.409636][ T3498] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2704.426071][ T3498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2704.437829][ T3498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2704.447004][ T3498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2704.457876][ T3498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2704.507515][ T3498] ieee80211 phy503: Selected rate control algorithm 'minstrel_ht'
[ 2704.543695][T20920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2704.553832][ T3498] ieee80211 phy504: Selected rate control algorithm 'minstrel_ht'
[ 2704.562080][T20920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2704.603631][T20920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2704.612756][T20920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50