last executing test programs:

38.099775451s ago: executing program 3 (id=4728):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x9, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0xfffeffff, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0)
socketpair(0x26, 0x5, 0x9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x86, 0x0, &(0x7f0000000a00)=""/134, 0x9, 0x0, 0x21, 0x0, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c4500b5a0bf764aad7d389a82ac1941f3c3e3", 0x0, 0x1, 0x0, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x5, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0xfffffffd, 0x2}]}]}}, &(0x7f0000000340)=""/142, 0x32, 0x8e, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

37.680058354s ago: executing program 3 (id=4730):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='\"pu\t&0&&\t')
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3], 0xfe33)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r4 = socket$kcm(0x11, 0x2, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8)
close(r5)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x7b640c44be8f54ca, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x76, &(0x7f0000000000), 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(r9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

37.420240822s ago: executing program 3 (id=4731):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x4000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
write$cgroup_type(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)

37.056453034s ago: executing program 3 (id=4732):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x88, 0x84, 0x5, "89e6bffdc23fe19304c346a10b6906cc381896bd129b7d7f51d86765e231aa3e4128b0ce570187c2e9a27b6f2e33bf44030a3f5db279b5d657e5b7f455f57659ea196c25ef6cce8ae8132c5f8a17de741ca4dfb388d9db727d103cc113e736c940de25f328065fa9c32c1cc4963122ae719e0349644ad4"}], 0x88}, 0x4000090)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x3}, 0x80, 0x0}, 0x4cc54)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r2})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000760000000000000f73cc9b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xef, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
r7 = socket$kcm(0x15, 0x5, 0x0)
close(r7)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c0000fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7cb333ba4220fcf06c3f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe80, 0x41, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83428137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x20, 0x3ff, 0x3ff, 0x4, 0x40230, r5, 0x7, '\x00', r9, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r9, 0x35, 0x1, 0x1004e, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex=r11, 0xffffffffffffffff, 0x1a, 0x2014, 0x0, @value, @void, @void, @void, r10}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63", 0x8}], 0x1}, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)

34.237792952s ago: executing program 3 (id=4733):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={0x0, 0x4}, 0x4164, 0x0, 0x0, 0x5, 0x1, 0x0, 0x6f8, 0x0, 0x0, 0x0, 0x969}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72", 0x79}], 0x3}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000700)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1f}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x100}, 0x50)

32.579337764s ago: executing program 3 (id=4738):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05bd00a35a584666ee96794babc917b174ad2be8ff00000079116ec3662600000000008510000002000000000000000000954a00008900a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1a9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x70)

21.503200153s ago: executing program 0 (id=4768):
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0xfffffffffffffe89}, 0x42)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x5a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000020850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

20.943613261s ago: executing program 0 (id=4770):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080008"], 0x50)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009100000095000000000000001c539ed473115dab643eccff29f49ee4be6f6ca8d11b7ea4e5ecba0270ac4f777e3ce9aa96323ac693b9c68dfa99e3077f3dc227449536e5cedbbb6e15df137729ad7f043f8ae85b30d2a3144a93e4e56b63a9d335a5c3bb98ee182affc233cfed4e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000f00), 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000005500)={0x0, 0x0, 0x0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

20.268454962s ago: executing program 0 (id=4774):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"/12, @ANYRES32=0x0, @ANYBLOB="6d693c6791"], 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90424fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = getpid()
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x18, 0xb4, 0x8, 0x0, 0x5, 0x8, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0x2}, 0x10000, 0xef64eda, 0xfffffffd, 0x7, 0x4, 0x1, 0x8, 0x0, 0x10001, 0x0, 0x10000}, r1, 0xe, 0xffffffffffffffff, 0x2)

20.078644908s ago: executing program 0 (id=4775):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={0x0, 0x4}, 0x4164, 0x0, 0x0, 0x5, 0x1, 0x0, 0x6f8, 0x0, 0x0, 0x0, 0x969}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef5", 0xb5}], 0x3}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000700)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1f}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x100}, 0x50)

20.01037433s ago: executing program 1 (id=4776):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x9, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0xfffeffff, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0)
socketpair(0x26, 0x5, 0x9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x86, 0x0, &(0x7f0000000a00)=""/134, 0x9, 0x0, 0x21, 0x66, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c4500b5a0bf764aad7d389a82ac1941f3c3e3", &(0x7f0000000800)="f8ee494925c69c3a7da709127ef239c8b3d495a9125958039b8f98cf8c8fdc2868a2b945b5533b780d465a893afce854f54301a5e307f312c0e99eb63476b894672322d02a97fbe2b9f8b0b21e4f09e09d4231c224ff77c61d1a22daffcb808e368ecbdfa4df", 0x1, 0x0, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x5, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0xfffffffd, 0x2}]}]}}, &(0x7f0000000340)=""/142, 0x32, 0x8e, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

19.479555217s ago: executing program 1 (id=4778):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8915, 0x0)

19.252990074s ago: executing program 1 (id=4779):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$kcm(0x2, 0x0, 0x84)
recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x160)
setsockopt$sock_attach_bpf(r6, 0x84, 0x7d, &(0x7f0000000000)=r7, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115d0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)

19.014904872s ago: executing program 0 (id=4781):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080008"], 0x50)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009100000095000000000000001c539ed473115dab643eccff29f49ee4be6f6ca8d11b7ea4e5ecba0270ac4f777e3ce9aa96323ac693b9c68dfa99e3077f3dc227449536e5cedbbb6e15df137729ad7f043f8ae85b30d2a3144a93e4e56b63a9d335a5c3bb98ee182affc233cfed4e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, 0x0, 0x0)
sendmsg(r2, &(0x7f0000005500)={0x0, 0x0, 0x0}, 0x10)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="85000000ae00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd296303406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c126ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f8546290c1a325221f36f8d749d4a9aa1883a41d92228c93b60fe677f4f9d51fadbba6dd46222fd11f678d7e9a307024806cc28cba904f8d12870b4528b8d75fd29adacf0a52cdfaf4e43f00e532cfc15f394db7d521339aa980f81bd78a82d84dba575391bee41c95daf3b576feed54d448d36ad0000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

18.179856498s ago: executing program 1 (id=4783):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000000b7f04bc8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311fe1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc0300ff0000000000000000850000003600"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000002000000010000000700000000100000", @ANYRES32=0x0, @ANYRES32], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="310a10"], 0x31)

18.12137329s ago: executing program 0 (id=4784):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, 0x0, 0x300060c1)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x32, 0x0, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x10c900, 0x0, 0xfffffffc, 0x9, 0xb0, 0x2, 0x8, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50)
ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)

17.622189545s ago: executing program 1 (id=4785):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x9, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0xfffeffff, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0)
socketpair(0x26, 0x5, 0x9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x86, 0x0, &(0x7f0000000a00)=""/134, 0x9, 0x0, 0x21, 0x66, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c4500b5a0bf764aad7d389a82ac1941f3c3e3", &(0x7f0000000800)="f8ee494925c69c3a7da709127ef239c8b3d495a9125958039b8f98cf8c8fdc2868a2b945b5533b780d465a893afce854f54301a5e307f312c0e99eb63476b894672322d02a97fbe2b9f8b0b21e4f09e09d4231c224ff77c61d1a22daffcb808e368ecbdfa4df", 0x1, 0x0, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x5, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0xfffffffd, 0x2}]}]}}, &(0x7f0000000340)=""/142, 0x32, 0x8e, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

17.331822285s ago: executing program 2 (id=4786):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r3, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/134, 0x86, 0x0, &(0x7f00000001c0)=""/117, 0x75}}, 0x10)

16.967191396s ago: executing program 1 (id=4787):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000f00)={[{0x2d, 'devices'}]}, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r5, 0x2, 0x0, 0xc3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r0, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000008c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex=r9, 0xffffffffffffffff, 0x6, 0x8, 0x0, @void, @value=r5, @void, @void, r8}, 0x20)
sendmsg$inet(r6, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xffffffffff7ffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000)
r11 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, 0x0)
recvmsg(r6, 0x0, 0x10002)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000009c0)=@generic={&(0x7f0000000340)='./file0\x00', r5}, 0x18)

16.386440824s ago: executing program 2 (id=4788):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={0x0, 0x4}, 0x4164, 0x0, 0x0, 0x5, 0x1, 0x0, 0x6f8, 0x0, 0x0, 0x0, 0x969}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c", 0xd3}], 0x3}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000700)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1f}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x100}, 0x50)

15.477067443s ago: executing program 2 (id=4789):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x10000000, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

15.359936717s ago: executing program 2 (id=4790):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={&(0x7f00000004c0)="7c4dd7377f889bb78608fd8b3d2bd5253d7292a3224d267466bf25eeda7ea230b3f11a16429600427d4e8f47f0a663aefc6b16be88294d31493e63a550add631b33df1150543811890d155dd8299897fda8c2e347c889e980c07a440c6b388cb806117ab24e7a08025eddf929e4da9ac1c8c0fdf07c2176056107b233e125848d91e1be13cd2393eb6", &(0x7f0000000580)=""/43, &(0x7f00000005c0)="f4f9e550f2562d3694671504e96f2ddeab1b6f09888621359e9671e346d1ca625a0362cc850ee00a08b416f42641acd4d47b9e530365fe9123865e85aea3600f9d7f88b8ae2c9a138fcea897f78c288e5b00ffe5d6c7b25323e28897c8d051587a55bc4fb18d04880f9e873b518f6fb1ce9eeaa554d56d692e7b3d0c7cd5b4979c4f5e53df337bd5700ccda1cfe1096e4b7a30a8ee9f46709d1494479647553e9c4998e3cf38c72446ab639bdce9560e893b7e7b48a60c9354543f1b11f0ba132f597e7d731d08077249a98beb65a31ae6891f7f2f8d8d529db8eb305a76246d50c73f6d039fb9fa97325ed495b881ba647d517a1b", &(0x7f00000006c0)="20b9fa859bdf8a4bd144297da1f9ff6ed3c2a0", 0xffff, r1, 0x42582dc4104e57}, 0x38)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x3, 0x3, 0x8, 0x5, 0xffffffffffffffc0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @jmp={0x5, 0x1, 0xd, 0x8, 0xb, 0xe1}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000280)=""/187, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xb, 0x1000, 0xa}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[0x1], 0x0, 0x10, 0x7f}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000)=r2, 0x4)
close(r0)

15.342532767s ago: executing program 2 (id=4791):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080008"], 0x50)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009100000095000000000000001c539ed473115dab643eccff29f49ee4be6f6ca8d11b7ea4e5ecba0270ac4f777e3ce9aa96323ac693b9c68dfa99e3077f3dc227449536e5cedbbb6e15df137729ad7f043f8ae85b30d2a3144a93e4e56b63a9d335a5c3bb98ee182affc233cfed4e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, 0x0, 0x0)
sendmsg(r2, &(0x7f0000005500)={0x0, 0x0, 0x0}, 0x10)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

15.111786774s ago: executing program 2 (id=4792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000000b7f04bc8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311fe1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc0300ff0000000000000000850000003600"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000002000000010000000700000000100000", @ANYRES32=0x0, @ANYRES32], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="310a10"], 0x31)

3.080218003s ago: executing program 32 (id=4784):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, 0x0, 0x300060c1)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x32, 0x0, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x10c900, 0x0, 0xfffffffc, 0x9, 0xb0, 0x2, 0x8, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50)
ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)

1.040563237s ago: executing program 33 (id=4787):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000f00)={[{0x2d, 'devices'}]}, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r5, 0x2, 0x0, 0xc3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r0, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000008c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex=r9, 0xffffffffffffffff, 0x6, 0x8, 0x0, @void, @value=r5, @void, @void, r8}, 0x20)
sendmsg$inet(r6, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xffffffffff7ffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000)
r11 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, 0x0)
recvmsg(r6, 0x0, 0x10002)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000009c0)=@generic={&(0x7f0000000340)='./file0\x00', r5}, 0x18)

0s ago: executing program 34 (id=4792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000000b7f04bc8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311fe1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc0300ff0000000000000000850000003600"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000002000000010000000700000000100000", @ANYRES32=0x0, @ANYRES32], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="310a10"], 0x31)

kernel console output (not intermixed with test programs):

0]  ? show_regs_print_info+0x20/0x20
[  709.855383][T18840]  ? load_image+0x420/0x420
[  709.859918][T18840]  ? __might_sleep+0xe0/0xe0
[  709.864567][T18840]  ? __lock_acquire+0x7d40/0x7d40
[  709.869623][T18840]  should_fail_ex+0x39d/0x4d0
[  709.874347][T18840]  should_failslab+0x9/0x20
[  709.878884][T18840]  slab_pre_alloc_hook+0x59/0x310
[  709.883938][T18840]  ? strlen+0x22/0x70
[  709.887951][T18840]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  709.894396][T18840]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  709.900842][T18840]  __kmem_cache_alloc_node+0x53/0x250
[  709.906255][T18840]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  709.912711][T18840]  __kmalloc+0xa4/0x230
[  709.916916][T18840]  bpf_prog_test_run_flow_dissector+0x259/0x640
[  709.923190][T18840]  ? lock_chain_count+0x20/0x20
[  709.928076][T18840]  ? xdp_convert_buff_to_md+0x200/0x200
[  709.933651][T18840]  ? __fget_files+0x28/0x4b0
[  709.938270][T18840]  ? __fget_files+0x28/0x4b0
[  709.942890][T18840]  ? __fget_files+0x43d/0x4b0
[  709.947606][T18840]  ? xdp_convert_buff_to_md+0x200/0x200
[  709.953183][T18840]  bpf_prog_test_run+0x321/0x390
[  709.958150][T18840]  __sys_bpf+0x49d/0x890
[  709.962437][T18840]  ? bpf_link_show_fdinfo+0x390/0x390
[  709.967851][T18840]  ? lock_chain_count+0x20/0x20
[  709.972746][T18840]  __x64_sys_bpf+0x7c/0x90
[  709.977287][T18840]  do_syscall_64+0x55/0xb0
[  709.981746][T18840]  ? clear_bhb_loop+0x40/0x90
[  709.986519][T18840]  ? clear_bhb_loop+0x40/0x90
[  709.991229][T18840]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  709.997153][T18840] RIP: 0033:0x7f4eb4b9ce59
[  710.001597][T18840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.021239][T18840] RSP: 002b:00007f4eb59e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  710.029680][T18840] RAX: ffffffffffffffda RBX: 00007f4eb4e15fa0 RCX: 00007f4eb4b9ce59
[  710.037680][T18840] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  710.045673][T18840] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  710.053663][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  710.061658][T18840] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  710.069671][T18840]  </TASK>
[  711.956588][T18885] FAULT_INJECTION: forcing a failure.
[  711.956588][T18885] name failslab, interval 1, probability 0, space 0, times 0
[  712.007347][T18885] CPU: 1 PID: 18885 Comm: syz.1.4292 Not tainted syzkaller #0
[  712.014886][T18885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  712.024979][T18885] Call Trace:
[  712.028293][T18885]  <TASK>
[  712.031259][T18885]  dump_stack_lvl+0x18c/0x250
[  712.036001][T18885]  ? show_regs_print_info+0x20/0x20
[  712.041288][T18885]  ? load_image+0x420/0x420
[  712.045850][T18885]  ? __lock_acquire+0x7d40/0x7d40
[  712.050915][T18885]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  712.057129][T18885]  should_fail_ex+0x39d/0x4d0
[  712.061860][T18885]  should_failslab+0x9/0x20
[  712.066418][T18885]  slab_pre_alloc_hook+0x59/0x310
[  712.071509][T18885]  kmem_cache_alloc+0x5a/0x2d0
[  712.076324][T18885]  ? sk_prot_alloc+0x57/0x210
[  712.081048][T18885]  sk_prot_alloc+0x57/0x210
[  712.085599][T18885]  ? sk_alloc+0x24/0x360
[  712.089908][T18885]  sk_alloc+0x3a/0x360
[  712.094036][T18885]  __smc_create+0xf7/0x260
[  712.098573][T18885]  __sock_create+0x4a6/0x940
[  712.103251][T18885]  __sys_socketpair+0x236/0x550
[  712.108133][T18885]  __x64_sys_socketpair+0x9b/0xb0
[  712.113213][T18885]  do_syscall_64+0x55/0xb0
[  712.117651][T18885]  ? clear_bhb_loop+0x40/0x90
[  712.122359][T18885]  ? clear_bhb_loop+0x40/0x90
[  712.127069][T18885]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  712.133087][T18885] RIP: 0033:0x7f5f6a59ce59
[  712.137536][T18885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.157178][T18885] RSP: 002b:00007f5f6b43f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  712.165616][T18885] RAX: ffffffffffffffda RBX: 00007f5f6a815fa0 RCX: 00007f5f6a59ce59
[  712.173617][T18885] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[  712.181623][T18885] RBP: 00007f5f6b43f090 R08: 0000000000000000 R09: 0000000000000000
[  712.189617][T18885] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  712.197618][T18885] R13: 00007f5f6a816038 R14: 00007f5f6a815fa0 R15: 00007ffdbd95dae8
[  712.205626][T18885]  </TASK>
[  712.456708][T18897] FAULT_INJECTION: forcing a failure.
[  712.456708][T18897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  712.501148][T18897] CPU: 1 PID: 18897 Comm: syz.1.4297 Not tainted syzkaller #0
[  712.508695][T18897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  712.518801][T18897] Call Trace:
[  712.522122][T18897]  <TASK>
[  712.525086][T18897]  dump_stack_lvl+0x18c/0x250
[  712.529819][T18897]  ? show_regs_print_info+0x20/0x20
[  712.535068][T18897]  ? load_image+0x420/0x420
[  712.539627][T18897]  ? __might_fault+0xaa/0x120
[  712.544369][T18897]  should_fail_ex+0x39d/0x4d0
[  712.549117][T18897]  copyin+0x1a/0x90
[  712.552995][T18897]  _copy_from_iter+0x404/0x12e0
[  712.557905][T18897]  ? copyin+0x70/0x90
[  712.561947][T18897]  ? copyout_mc+0x70/0x70
[  712.566334][T18897]  ? copyout_mc+0x70/0x70
[  712.570709][T18897]  ? __virt_addr_valid+0x18c/0x540
[  712.575894][T18897]  ? page_copy_sane+0x16a/0x270
[  712.580802][T18897]  copy_page_from_iter+0x7b/0x100
[  712.585899][T18897]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  712.591771][T18897]  packet_sendmsg+0x33ff/0x4c30
[  712.596701][T18897]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  712.602726][T18897]  ? __might_sleep+0xe0/0xe0
[  712.607370][T18897]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  712.613570][T18897]  ? lockdep_hardirqs_on+0x98/0x150
[  712.618840][T18897]  ? aa_sk_perm+0x83c/0x970
[  712.623392][T18897]  ? packet_getsockopt+0xad0/0xad0
[  712.628570][T18897]  ? tomoyo_write_file+0x70/0xc50
[  712.633644][T18897]  ? aa_sock_msg_perm+0x94/0x150
[  712.638638][T18897]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  712.643968][T18897]  ? security_socket_sendmsg+0x80/0xa0
[  712.649477][T18897]  ? packet_getsockopt+0xad0/0xad0
[  712.654654][T18897]  ____sys_sendmsg+0x5ba/0x960
[  712.659475][T18897]  ? __lock_acquire+0x7d40/0x7d40
[  712.664547][T18897]  ? __asan_memset+0x22/0x40
[  712.669181][T18897]  ? __sys_sendmsg_sock+0x30/0x30
[  712.674247][T18897]  ? __import_iovec+0x3fa/0x850
[  712.679150][T18897]  ? import_iovec+0x73/0xa0
[  712.683698][T18897]  ___sys_sendmsg+0x2a6/0x360
[  712.688419][T18897]  ? __sys_sendmsg+0x2a0/0x2a0
[  712.693250][T18897]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  712.699565][T18897]  __se_sys_sendmsg+0x1c2/0x2b0
[  712.704473][T18897]  ? __x64_sys_sendmsg+0x80/0x80
[  712.709495][T18897]  ? lockdep_hardirqs_on+0x98/0x150
[  712.714756][T18897]  do_syscall_64+0x55/0xb0
[  712.719222][T18897]  ? clear_bhb_loop+0x40/0x90
[  712.723957][T18897]  ? clear_bhb_loop+0x40/0x90
[  712.728685][T18897]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  712.734647][T18897] RIP: 0033:0x7f5f6a59ce59
[  712.739105][T18897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.758757][T18897] RSP: 002b:00007f5f6b43f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  712.767224][T18897] RAX: ffffffffffffffda RBX: 00007f5f6a815fa0 RCX: 00007f5f6a59ce59
[  712.775242][T18897] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  712.783251][T18897] RBP: 00007f5f6b43f090 R08: 0000000000000000 R09: 0000000000000000
[  712.791261][T18897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  712.799270][T18897] R13: 00007f5f6a816038 R14: 00007f5f6a815fa0 R15: 00007ffdbd95dae8
[  712.807301][T18897]  </TASK>
[  713.145454][T18906] FAULT_INJECTION: forcing a failure.
[  713.145454][T18906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  713.166198][T18906] CPU: 1 PID: 18906 Comm: syz.1.4301 Not tainted syzkaller #0
[  713.173735][T18906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  713.183856][T18906] Call Trace:
[  713.187177][T18906]  <TASK>
[  713.190157][T18906]  dump_stack_lvl+0x18c/0x250
[  713.194902][T18906]  ? show_regs_print_info+0x20/0x20
[  713.200162][T18906]  ? load_image+0x420/0x420
[  713.204741][T18906]  ? __lock_acquire+0x7d40/0x7d40
[  713.209853][T18906]  ? snprintf+0xe9/0x140
[  713.214172][T18906]  should_fail_ex+0x39d/0x4d0
[  713.218936][T18906]  _copy_to_user+0x2f/0xa0
[  713.223429][T18906]  simple_read_from_buffer+0xe7/0x150
[  713.228881][T18906]  proc_fail_nth_read+0x1e8/0x260
[  713.233985][T18906]  ? proc_fault_inject_write+0x360/0x360
[  713.239703][T18906]  ? fsnotify_perm+0x271/0x5e0
[  713.244526][T18906]  ? proc_fault_inject_write+0x360/0x360
[  713.250234][T18906]  vfs_read+0x28b/0x970
[  713.254467][T18906]  ? kernel_read+0x1e0/0x1e0
[  713.259128][T18906]  ? __fget_files+0x28/0x4b0
[  713.263781][T18906]  ? __fget_files+0x28/0x4b0
[  713.268442][T18906]  ? __fget_files+0x43d/0x4b0
[  713.273219][T18906]  ? __fdget_pos+0x2a3/0x330
[  713.277871][T18906]  ? ksys_read+0x75/0x260
[  713.282271][T18906]  ksys_read+0x150/0x260
[  713.286587][T18906]  ? vfs_write+0x990/0x990
[  713.291078][T18906]  ? lockdep_hardirqs_on+0x98/0x150
[  713.296360][T18906]  do_syscall_64+0x55/0xb0
[  713.300839][T18906]  ? clear_bhb_loop+0x40/0x90
[  713.305576][T18906]  ? clear_bhb_loop+0x40/0x90
[  713.310334][T18906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  713.316298][T18906] RIP: 0033:0x7f5f6a55d68e
[  713.320772][T18906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  713.340438][T18906] RSP: 002b:00007f5f6b43efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  713.348925][T18906] RAX: ffffffffffffffda RBX: 00007f5f6b43f6c0 RCX: 00007f5f6a55d68e
[  713.356959][T18906] RDX: 000000000000000f RSI: 00007f5f6b43f0a0 RDI: 0000000000000005
[  713.364986][T18906] RBP: 00007f5f6b43f090 R08: 0000000000000000 R09: 0000000000000000
[  713.373015][T18906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.381038][T18906] R13: 00007f5f6a816038 R14: 00007f5f6a815fa0 R15: 00007ffdbd95dae8
[  713.389111][T18906]  </TASK>
[  713.938469][T18921] netlink: 'syz.2.4305': attribute type 13 has an invalid length.
[  713.973258][T18921] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4305'.
[  713.999814][T18924] netlink: 'syz.2.4305': attribute type 13 has an invalid length.
[  714.031123][T18924] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4305'.
[  714.794594][T18936] netlink: 'syz.1.4310': attribute type 9 has an invalid length.
[  714.832877][T18936] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4310'.
[  715.813856][T18940] netlink: 'syz.1.4310': attribute type 9 has an invalid length.
[  715.903451][T18940] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4310'.
[  718.221877][T18972] syzkaller0: entered allmulticast mode
[  718.514776][T18977] Ÿë
: port 1(veth0_to_team) entered blocking state
[  718.521696][T18977] Ÿë
: port 1(veth0_to_team) entered disabled state
[  718.530159][T18977] veth0_to_team: entered allmulticast mode
[  718.558364][T18977] veth0_to_team: entered promiscuous mode
[  718.656429][T18981] netlink: 'syz.1.4323': attribute type 21 has an invalid length.
[  718.674794][T18981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4323'.
[  719.120635][T18992] FAULT_INJECTION: forcing a failure.
[  719.120635][T18992] name failslab, interval 1, probability 0, space 0, times 0
[  719.190221][T18993] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4325'.
[  719.194940][T18992] CPU: 0 PID: 18992 Comm: syz.0.4326 Not tainted syzkaller #0
[  719.207052][T18992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  719.217152][T18992] Call Trace:
[  719.220464][T18992]  <TASK>
[  719.223436][T18992]  dump_stack_lvl+0x18c/0x250
[  719.228166][T18992]  ? show_regs_print_info+0x20/0x20
[  719.233409][T18992]  ? load_image+0x420/0x420
[  719.237976][T18992]  ? __lock_acquire+0x7d40/0x7d40
[  719.243049][T18992]  ? nf_nat_ipv4_local_fn+0x1de/0x530
[  719.248482][T18992]  should_fail_ex+0x39d/0x4d0
[  719.253214][T18992]  should_failslab+0x9/0x20
[  719.257766][T18992]  slab_pre_alloc_hook+0x59/0x310
[  719.262839][T18992]  ? nf_hook+0xa2/0x390
[  719.267031][T18992]  kmem_cache_alloc+0x5a/0x2d0
[  719.271857][T18992]  ? skb_clone+0x1eb/0x370
[  719.276323][T18992]  skb_clone+0x1eb/0x370
[  719.280608][T18992]  ? ip_mc_output+0x1de/0x580
[  719.285329][T18992]  ip_mc_output+0x1eb/0x580
[  719.289889][T18992]  ip_send_skb+0x12f/0x1d0
[  719.294360][T18992]  raw_sendmsg+0x163e/0x1c00
[  719.299014][T18992]  ? compat_raw_ioctl+0x70/0x70
[  719.303919][T18992]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  719.303955][T18992]  ? sock_rps_record_flow+0x19/0x3f0
[  719.303989][T18992]  ? inet_sendmsg+0x7c/0x2f0
[  719.304015][T18992]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  719.325914][T18992]  ? security_socket_sendmsg+0x80/0xa0
[  719.331428][T18992]  ? inet_send_prepare+0x260/0x260
[  719.336598][T18992]  ____sys_sendmsg+0x5ba/0x960
[  719.341410][T18992]  ? __lock_acquire+0x7d40/0x7d40
[  719.346502][T18992]  ? __sys_sendmsg_sock+0x30/0x30
[  719.351563][T18992]  ? __import_iovec+0x3fa/0x850
[  719.356462][T18992]  ? import_iovec+0x73/0xa0
[  719.361027][T18992]  ___sys_sendmsg+0x2a6/0x360
[  719.365770][T18992]  ? __sys_sendmsg+0x2a0/0x2a0
[  719.370583][T18992]  ? trace_call_bpf+0xc3/0x6c0
[  719.375417][T18992]  __se_sys_sendmsg+0x1c2/0x2b0
[  719.380310][T18992]  ? __x64_sys_sendmsg+0x80/0x80
[  719.385300][T18992]  ? lockdep_hardirqs_on+0x98/0x150
[  719.390555][T18992]  do_syscall_64+0x55/0xb0
[  719.395004][T18992]  ? clear_bhb_loop+0x40/0x90
[  719.399724][T18992]  ? clear_bhb_loop+0x40/0x90
[  719.404444][T18992]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  719.410388][T18992] RIP: 0033:0x7f415fd9ce59
[  719.414842][T18992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.434507][T18992] RSP: 002b:00007f4160bfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.442958][T18992] RAX: ffffffffffffffda RBX: 00007f4160015fa0 RCX: 00007f415fd9ce59
[  719.450954][T18992] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003
[  719.458951][T18992] RBP: 00007f4160bfe090 R08: 0000000000000000 R09: 0000000000000000
[  719.466951][T18992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.474962][T18992] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  719.482973][T18992]  </TASK>
[  719.518854][T18993] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  719.556526][T18993] CPU: 0 PID: 18993 Comm: syz.2.4325 Not tainted syzkaller #0
[  719.564064][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  719.574156][T18993] Call Trace:
[  719.577469][T18993]  <TASK>
[  719.580433][T18993]  dump_stack_lvl+0x18c/0x250
[  719.585171][T18993]  ? show_regs_print_info+0x20/0x20
[  719.590426][T18993]  ? load_image+0x420/0x420
[  719.594996][T18993]  sysfs_warn_dup+0x8e/0xa0
[  719.599561][T18993]  sysfs_do_create_link_sd+0xc0/0x110
[  719.604983][T18993]  device_add_class_symlinks+0x1cf/0x240
[  719.610675][T18993]  device_add+0x507/0xc50
[  719.615058][T18993]  wiphy_register+0x1dad/0x2ae0
[  719.619992][T18993]  ? cfg80211_event_work+0x40/0x40
[  719.625148][T18993]  ? minstrel_ht_alloc+0x88a/0x990
[  719.630326][T18993]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  719.636448][T18993]  ieee80211_register_hw+0x3464/0x4250
[  719.641974][T18993]  ? ieee80211_tasklet_handler+0x20/0x20
[  719.647658][T18993]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  719.653601][T18993]  ? __debug_object_init+0xec/0x450
[  719.658865][T18993]  ? __asan_memset+0x22/0x40
[  719.663527][T18993]  ? __hrtimer_init+0x186/0x270
[  719.668424][T18993]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  719.674210][T18993]  ? mac80211_hwsim_free+0x220/0x220
[  719.679537][T18993]  ? rcu_is_watching+0x15/0xb0
[  719.684352][T18993]  ? kstrndup+0xbd/0x140
[  719.688667][T18993]  hwsim_new_radio_nl+0xdc9/0x1a90
[  719.693829][T18993]  ? __nla_validate+0x50/0x50
[  719.698562][T18993]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  719.704944][T18993]  ? __nla_parse+0x40/0x50
[  719.709404][T18993]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  719.715789][T18993]  genl_family_rcv_msg_doit+0x211/0x310
[  719.721385][T18993]  ? end_current_label_crit_section+0x170/0x170
[  719.727683][T18993]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  719.733631][T18993]  ? bpf_lsm_capable+0x9/0x10
[  719.738369][T18993]  ? security_capable+0x89/0xb0
[  719.743284][T18993]  genl_rcv_msg+0x619/0x7a0
[  719.747859][T18993]  ? genl_bind+0x360/0x360
[  719.752316][T18993]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  719.758718][T18993]  netlink_rcv_skb+0x241/0x4d0
[  719.763541][T18993]  ? genl_bind+0x360/0x360
[  719.768010][T18993]  ? netlink_ack+0x1180/0x1180
[  719.772849][T18993]  ? __lock_acquire+0x7d40/0x7d40
[  719.777916][T18993]  ? net_generic+0x1e/0x240
[  719.782480][T18993]  ? down_read+0x1ac/0x2e0
[  719.786943][T18993]  genl_rcv+0x28/0x40
[  719.790973][T18993]  netlink_unicast+0x751/0x8d0
[  719.795807][T18993]  netlink_sendmsg+0x8d0/0xbf0
[  719.800635][T18993]  ? netlink_getsockopt+0x590/0x590
[  719.805916][T18993]  ? aa_sock_msg_perm+0x94/0x150
[  719.810902][T18993]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  719.816261][T18993]  ? security_socket_sendmsg+0x80/0xa0
[  719.821781][T18993]  ? netlink_getsockopt+0x590/0x590
[  719.827042][T18993]  ____sys_sendmsg+0x5ba/0x960
[  719.831867][T18993]  ? __asan_memset+0x22/0x40
[  719.836509][T18993]  ? __sys_sendmsg_sock+0x30/0x30
[  719.841579][T18993]  ? __import_iovec+0x5f2/0x850
[  719.846489][T18993]  ? import_iovec+0x73/0xa0
[  719.851055][T18993]  ___sys_sendmsg+0x2a6/0x360
[  719.855791][T18993]  ? __sys_sendmsg+0x2a0/0x2a0
[  719.860621][T18993]  ? trace_call_bpf+0xc3/0x6c0
[  719.865474][T18993]  __se_sys_sendmsg+0x1c2/0x2b0
[  719.870383][T18993]  ? __x64_sys_sendmsg+0x80/0x80
[  719.875398][T18993]  ? lockdep_hardirqs_on+0x98/0x150
[  719.880645][T18993]  do_syscall_64+0x55/0xb0
[  719.885102][T18993]  ? clear_bhb_loop+0x40/0x90
[  719.889827][T18993]  ? clear_bhb_loop+0x40/0x90
[  719.894559][T18993]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  719.900492][T18993] RIP: 0033:0x7f4eb4b9ce59
[  719.904960][T18993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.924632][T18993] RSP: 002b:00007f4eb597e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.933120][T18993] RAX: ffffffffffffffda RBX: 00007f4eb4e16270 RCX: 00007f4eb4b9ce59
[  719.941156][T18993] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  719.949170][T18993] RBP: 00007f4eb4c32d6f R08: 0000000000000000 R09: 0000000000000000
[  719.957191][T18993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.965208][T18993] R13: 00007f4eb4e16308 R14: 00007f4eb4e16270 R15: 00007ffd3370be98
[  719.973257][T18993]  </TASK>
[  720.839161][T19015] netlink: 'syz.1.4333': attribute type 29 has an invalid length.
[  720.873279][T19015] netlink: 'syz.1.4333': attribute type 29 has an invalid length.
[  720.946091][T19015] netlink: 'syz.1.4333': attribute type 29 has an invalid length.
[  721.139817][T19013] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.4331'.
[  722.259648][T19045] netlink: 'syz.0.4342': attribute type 29 has an invalid length.
[  722.285065][T19045] netlink: 'syz.0.4342': attribute type 29 has an invalid length.
[  722.375925][T19045] netlink: 'syz.0.4342': attribute type 29 has an invalid length.
[  722.438853][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4344'.
[  722.454951][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'.
[  722.470492][T19051] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4344'.
[  722.481543][T19051] bridge_slave_0: entered allmulticast mode
[  722.501114][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'.
[  722.527853][T19051] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4344'.
[  722.547611][T19049] netlink: 'syz.0.4342': attribute type 29 has an invalid length.
[  722.980045][T19066] FAULT_INJECTION: forcing a failure.
[  722.980045][T19066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  723.021819][T19066] CPU: 1 PID: 19066 Comm: syz.3.4347 Not tainted syzkaller #0
[  723.029361][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  723.039554][T19066] Call Trace:
[  723.042875][T19066]  <TASK>
[  723.045875][T19066]  dump_stack_lvl+0x18c/0x250
[  723.050628][T19066]  ? show_regs_print_info+0x20/0x20
[  723.055905][T19066]  ? load_image+0x420/0x420
[  723.060465][T19066]  ? __might_fault+0xaa/0x120
[  723.065198][T19066]  ? __lock_acquire+0x7d40/0x7d40
[  723.070271][T19066]  should_fail_ex+0x39d/0x4d0
[  723.075010][T19066]  _copy_from_user+0x2f/0xe0
[  723.079652][T19066]  __sys_bpf+0x23e/0x890
[  723.083944][T19066]  ? bpf_link_show_fdinfo+0x390/0x390
[  723.089382][T19066]  ? lock_chain_count+0x20/0x20
[  723.094292][T19066]  __x64_sys_bpf+0x7c/0x90
[  723.098781][T19066]  do_syscall_64+0x55/0xb0
[  723.103255][T19066]  ? clear_bhb_loop+0x40/0x90
[  723.107974][T19066]  ? clear_bhb_loop+0x40/0x90
[  723.112682][T19066]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  723.118608][T19066] RIP: 0033:0x7f1e29f9ce59
[  723.123043][T19066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  723.142685][T19066] RSP: 002b:00007f1e281f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  723.151139][T19066] RAX: ffffffffffffffda RBX: 00007f1e2a215fa0 RCX: 00007f1e29f9ce59
[  723.159141][T19066] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a
[  723.167144][T19066] RBP: 00007f1e281f6090 R08: 0000000000000000 R09: 0000000000000000
[  723.175148][T19066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.183138][T19066] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  723.191150][T19066]  </TASK>
[  723.331396][T19071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  723.675117][T19081] netlink: 'syz.0.4353': attribute type 29 has an invalid length.
[  723.683785][T19081] netlink: 'syz.0.4353': attribute type 29 has an invalid length.
[  723.695544][T19081] netlink: 'syz.0.4353': attribute type 29 has an invalid length.
[  723.788681][T19083] netlink: set zone limit has 8 unknown bytes
[  723.909781][T19085] FAULT_INJECTION: forcing a failure.
[  723.909781][T19085] name failslab, interval 1, probability 0, space 0, times 0
[  723.924386][T19085] CPU: 1 PID: 19085 Comm: syz.0.4355 Not tainted syzkaller #0
[  723.931903][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  723.941999][T19085] Call Trace:
[  723.945320][T19085]  <TASK>
[  723.948283][T19085]  dump_stack_lvl+0x18c/0x250
[  723.953014][T19085]  ? show_regs_print_info+0x20/0x20
[  723.958257][T19085]  ? load_image+0x420/0x420
[  723.962825][T19085]  ? __might_sleep+0xe0/0xe0
[  723.967466][T19085]  ? __lock_acquire+0x7d40/0x7d40
[  723.972553][T19085]  should_fail_ex+0x39d/0x4d0
[  723.977300][T19085]  should_failslab+0x9/0x20
[  723.981859][T19085]  slab_pre_alloc_hook+0x59/0x310
[  723.986943][T19085]  ? __lock_acquire+0x7d40/0x7d40
[  723.992016][T19085]  kmem_cache_alloc_node+0x60/0x320
[  723.997268][T19085]  ? __alloc_skb+0x103/0x2c0
[  724.001912][T19085]  __alloc_skb+0x103/0x2c0
[  724.006380][T19085]  netlink_sendmsg+0x66a/0xbf0
[  724.011203][T19085]  ? lockdep_hardirqs_on+0x98/0x150
[  724.016438][T19085]  ? netlink_getsockopt+0x590/0x590
[  724.021666][T19085]  ? aa_sock_msg_perm+0x94/0x150
[  724.026636][T19085]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  724.031973][T19085]  ? security_socket_sendmsg+0x80/0xa0
[  724.037460][T19085]  ? netlink_getsockopt+0x590/0x590
[  724.042696][T19085]  ____sys_sendmsg+0x5ba/0x960
[  724.047493][T19085]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  724.053679][T19085]  ? __asan_memset+0x22/0x40
[  724.058295][T19085]  ? __sys_sendmsg_sock+0x30/0x30
[  724.063341][T19085]  ? __import_iovec+0x5f2/0x850
[  724.068396][T19085]  ? import_iovec+0x73/0xa0
[  724.072927][T19085]  ___sys_sendmsg+0x2a6/0x360
[  724.077629][T19085]  ? __sys_sendmsg+0x2a0/0x2a0
[  724.082449][T19085]  __se_sys_sendmsg+0x1c2/0x2b0
[  724.087321][T19085]  ? hrtimer_interrupt+0x7bb/0x9c0
[  724.092458][T19085]  ? __x64_sys_sendmsg+0x80/0x80
[  724.097430][T19085]  ? lockdep_hardirqs_on+0x98/0x150
[  724.102651][T19085]  do_syscall_64+0x55/0xb0
[  724.107080][T19085]  ? clear_bhb_loop+0x40/0x90
[  724.111798][T19085]  ? clear_bhb_loop+0x40/0x90
[  724.116533][T19085]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  724.122446][T19085] RIP: 0033:0x7f415fd9ce59
[  724.126881][T19085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  724.146509][T19085] RSP: 002b:00007f4160bfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  724.154942][T19085] RAX: ffffffffffffffda RBX: 00007f4160015fa0 RCX: 00007f415fd9ce59
[  724.162954][T19085] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b
[  724.170951][T19085] RBP: 00007f4160bfe090 R08: 0000000000000000 R09: 0000000000000000
[  724.178940][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.186933][T19085] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  724.194960][T19085]  </TASK>
[  724.255179][T19085] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4355'.
[  724.806862][T19096] team0: Device hsr_slave_0 failed to register rx_handler
[  724.877418][T19098] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.4358'.
[  725.101183][T19108] team0: Device hsr_slave_0 failed to register rx_handler
[  726.462781][T19150] validate_nla: 9 callbacks suppressed
[  726.466235][T19150] netlink: 'syz.3.4372': attribute type 21 has an invalid length.
[  726.604338][T19157] netlink: 'syz.0.4374': attribute type 2 has an invalid length.
[  726.625180][T19157] netlink: 'syz.0.4374': attribute type 8 has an invalid length.
[  726.636927][T19157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4374'.
[  726.668849][T19157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4374'.
[  728.497158][T19199] netlink: 'syz.3.4387': attribute type 21 has an invalid length.
[  728.894891][T19208] FAULT_INJECTION: forcing a failure.
[  728.894891][T19208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.926585][T19208] CPU: 1 PID: 19208 Comm: syz.2.4392 Not tainted syzkaller #0
[  728.934222][T19208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  728.944330][T19208] Call Trace:
[  728.947653][T19208]  <TASK>
[  728.950623][T19208]  dump_stack_lvl+0x18c/0x250
[  728.955352][T19208]  ? show_regs_print_info+0x20/0x20
[  728.960598][T19208]  ? load_image+0x420/0x420
[  728.965156][T19208]  ? __might_fault+0xaa/0x120
[  728.969881][T19208]  ? __lock_acquire+0x7d40/0x7d40
[  728.974963][T19208]  should_fail_ex+0x39d/0x4d0
[  728.979707][T19208]  _copy_from_user+0x2f/0xe0
[  728.984441][T19208]  __sys_bpf+0x23e/0x890
[  728.988736][T19208]  ? bpf_link_show_fdinfo+0x390/0x390
[  728.994160][T19208]  ? lock_chain_count+0x20/0x20
[  728.999057][T19208]  __x64_sys_bpf+0x7c/0x90
[  729.003500][T19208]  do_syscall_64+0x55/0xb0
[  729.007939][T19208]  ? clear_bhb_loop+0x40/0x90
[  729.012655][T19208]  ? clear_bhb_loop+0x40/0x90
[  729.017364][T19208]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  729.023287][T19208] RIP: 0033:0x7f4eb4b9ce59
[  729.027735][T19208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.047370][T19208] RSP: 002b:00007f4eb59e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  729.055834][T19208] RAX: ffffffffffffffda RBX: 00007f4eb4e15fa0 RCX: 00007f4eb4b9ce59
[  729.063834][T19208] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a
[  729.071831][T19208] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  729.079823][T19208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.087829][T19208] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  729.095842][T19208]  </TASK>
[  730.124495][T19241] netlink: 'syz.0.4402': attribute type 10 has an invalid length.
[  730.286368][T19248] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4405'.
[  730.296861][T19248] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  730.736750][T19255] syzkaller0: entered promiscuous mode
[  730.742379][T19255] syzkaller0: entered allmulticast mode
[  733.271825][T19287] FAULT_INJECTION: forcing a failure.
[  733.271825][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  733.285695][T19287] CPU: 1 PID: 19287 Comm: syz.2.4416 Not tainted syzkaller #0
[  733.293215][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  733.303311][T19287] Call Trace:
[  733.306627][T19287]  <TASK>
[  733.309595][T19287]  dump_stack_lvl+0x18c/0x250
[  733.314331][T19287]  ? show_regs_print_info+0x20/0x20
[  733.319576][T19287]  ? load_image+0x420/0x420
[  733.324145][T19287]  ? __might_fault+0xaa/0x120
[  733.328870][T19287]  ? __lock_acquire+0x7d40/0x7d40
[  733.333947][T19287]  should_fail_ex+0x39d/0x4d0
[  733.338688][T19287]  _copy_from_user+0x2f/0xe0
[  733.343335][T19287]  ___sys_sendmsg+0x1c7/0x360
[  733.348058][T19287]  ? get_pid_task+0x20/0x1e0
[  733.352701][T19287]  ? __sys_sendmsg+0x2a0/0x2a0
[  733.357534][T19287]  ? __lock_acquire+0x7d40/0x7d40
[  733.362639][T19287]  __se_sys_sendmsg+0x1c2/0x2b0
[  733.367626][T19287]  ? __x64_sys_sendmsg+0x80/0x80
[  733.372632][T19287]  ? lockdep_hardirqs_on+0x98/0x150
[  733.377894][T19287]  do_syscall_64+0x55/0xb0
[  733.382361][T19287]  ? clear_bhb_loop+0x40/0x90
[  733.387094][T19287]  ? clear_bhb_loop+0x40/0x90
[  733.391823][T19287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  733.397771][T19287] RIP: 0033:0x7f4eb4b9ce59
[  733.402245][T19287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  733.421905][T19287] RSP: 002b:00007f4eb59e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  733.430375][T19287] RAX: ffffffffffffffda RBX: 00007f4eb4e15fa0 RCX: 00007f4eb4b9ce59
[  733.438405][T19287] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  733.446421][T19287] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  733.454487][T19287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  733.462549][T19287] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  733.470593][T19287]  </TASK>
[  733.970463][T19289] netlink: 'syz.2.4417': attribute type 10 has an invalid length.
[  734.124209][T19289] team0 (unregistering): Port device team_slave_0 removed
[  734.153109][T19289] team0 (unregistering): Port device team_slave_1 removed
[  734.803397][T19311] netlink: 'syz.0.4424': attribute type 10 has an invalid length.
[  735.001036][T19311] team0 (unregistering): Port device team_slave_0 removed
[  735.031540][T19311] team0 (unregistering): Port device team_slave_1 removed
[  735.098507][T19317] netlink: 'syz.1.4425': attribute type 10 has an invalid length.
[  735.112864][T19317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4425'.
[  735.149649][T19317] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  735.356024][T19321] netlink: 'syz.0.4427': attribute type 29 has an invalid length.
[  735.389338][T19321] netlink: 'syz.0.4427': attribute type 29 has an invalid length.
[  735.403859][T19327] netlink: 'syz.0.4427': attribute type 29 has an invalid length.
[  735.421761][T19325] netlink: 'syz.1.4428': attribute type 29 has an invalid length.
[  735.445894][T19321] netlink: 'syz.0.4427': attribute type 29 has an invalid length.
[  735.460166][T19325] netlink: 'syz.1.4428': attribute type 29 has an invalid length.
[  735.519873][T19321] netlink: 'syz.0.4427': attribute type 29 has an invalid length.
[  736.411745][T19357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4435'.
[  736.444131][T19357] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  736.486795][T19354] can: request_module (can-proto-0) failed.
[  736.578861][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'.
[  736.746304][T19372] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4441'.
[  737.789680][T19405] FAULT_INJECTION: forcing a failure.
[  737.789680][T19405] name failslab, interval 1, probability 0, space 0, times 0
[  737.822353][T19405] CPU: 0 PID: 19405 Comm: syz.2.4451 Not tainted syzkaller #0
[  737.829909][T19405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  737.840013][T19405] Call Trace:
[  737.843329][T19405]  <TASK>
[  737.846282][T19405]  dump_stack_lvl+0x18c/0x250
[  737.851002][T19405]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  737.857187][T19405]  ? show_regs_print_info+0x20/0x20
[  737.862412][T19405]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  737.868602][T19405]  ? dump_stack+0x9/0x20
[  737.872879][T19405]  should_fail_ex+0x39d/0x4d0
[  737.877615][T19405]  should_failslab+0x9/0x20
[  737.882154][T19405]  slab_pre_alloc_hook+0x59/0x310
[  737.887211][T19405]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  737.892962][T19405]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  737.898710][T19405]  __kmem_cache_alloc_node+0x53/0x250
[  737.904125][T19405]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  737.909872][T19405]  __kmalloc+0xa4/0x230
[  737.914069][T19405]  tomoyo_realpath_from_path+0xe3/0x5d0
[  737.919652][T19405]  tomoyo_path_number_perm+0x248/0x620
[  737.925145][T19405]  ? tomoyo_path_number_perm+0x217/0x620
[  737.930830][T19405]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  737.936322][T19405]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  737.942082][T19405]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  737.948109][T19405]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  737.954301][T19405]  security_file_ioctl+0x70/0xa0
[  737.959263][T19405]  __se_sys_ioctl+0x48/0x170
[  737.963896][T19405]  do_syscall_64+0x55/0xb0
[  737.968339][T19405]  ? clear_bhb_loop+0x40/0x90
[  737.973044][T19405]  ? clear_bhb_loop+0x40/0x90
[  737.977765][T19405]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.983683][T19405] RIP: 0033:0x7f4eb4b9ce59
[  737.988123][T19405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.007754][T19405] RSP: 002b:00007f4eb59e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  738.016196][T19405] RAX: ffffffffffffffda RBX: 00007f4eb4e15fa0 RCX: 00007f4eb4b9ce59
[  738.024279][T19405] RDX: 0000200000000240 RSI: 00000000400454ca RDI: 0000000000000006
[  738.032359][T19405] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  738.040376][T19405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  738.048549][T19405] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  738.056558][T19405]  </TASK>
[  738.103088][T19405] ERROR: Out of memory at tomoyo_realpath_from_path.
[  738.756779][T19433] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4458'.
[  739.141676][T19448] validate_nla: 7 callbacks suppressed
[  739.141714][T19448] netlink: 'syz.0.4464': attribute type 29 has an invalid length.
[  739.196129][T19448] netlink: 'syz.0.4464': attribute type 29 has an invalid length.
[  739.219770][T19450] netlink: 'syz.0.4464': attribute type 29 has an invalid length.
[  739.287355][T19448] netlink: 'syz.0.4464': attribute type 29 has an invalid length.
[  739.344627][T19455] netlink: 'syz.2.4466': attribute type 21 has an invalid length.
[  739.462430][T19460] netlink: 'syz.2.4467': attribute type 29 has an invalid length.
[  739.473940][T19460] netlink: 'syz.2.4467': attribute type 29 has an invalid length.
[  739.484003][T19460] netlink: 'syz.2.4467': attribute type 29 has an invalid length.
[  739.502634][T19460] netlink: 'syz.2.4467': attribute type 29 has an invalid length.
[  739.519609][T19460] FAULT_INJECTION: forcing a failure.
[  739.519609][T19460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  739.536326][T19460] CPU: 0 PID: 19460 Comm: syz.2.4467 Not tainted syzkaller #0
[  739.539832][T19462] netlink: 'syz.1.4468': attribute type 29 has an invalid length.
[  739.543823][T19460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  739.543840][T19460] Call Trace:
[  739.543849][T19460]  <TASK>
[  739.543859][T19460]  dump_stack_lvl+0x18c/0x250
[  739.543889][T19460]  ? show_regs_print_info+0x20/0x20
[  739.543912][T19460]  ? load_image+0x420/0x420
[  739.543944][T19460]  ? __might_fault+0xaa/0x120
[  739.587223][T19460]  ? __lock_acquire+0x7d40/0x7d40
[  739.592305][T19460]  should_fail_ex+0x39d/0x4d0
[  739.597044][T19460]  _copy_from_user+0x2f/0xe0
[  739.601683][T19460]  ___sys_sendmsg+0x1c7/0x360
[  739.606407][T19460]  ? get_pid_task+0x20/0x1e0
[  739.611049][T19460]  ? __sys_sendmsg+0x2a0/0x2a0
[  739.615881][T19460]  ? __lock_acquire+0x7d40/0x7d40
[  739.620976][T19460]  __se_sys_sendmsg+0x1c2/0x2b0
[  739.625871][T19460]  ? __x64_sys_sendmsg+0x80/0x80
[  739.630869][T19460]  ? lockdep_hardirqs_on+0x98/0x150
[  739.636119][T19460]  do_syscall_64+0x55/0xb0
[  739.640582][T19460]  ? clear_bhb_loop+0x40/0x90
[  739.645310][T19460]  ? clear_bhb_loop+0x40/0x90
[  739.650045][T19460]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  739.655999][T19460] RIP: 0033:0x7f4eb4b9ce59
[  739.660459][T19460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.680126][T19460] RSP: 002b:00007f4eb59e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  739.688586][T19460] RAX: ffffffffffffffda RBX: 00007f4eb4e15fa0 RCX: 00007f4eb4b9ce59
[  739.696580][T19460] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 000000000000000b
[  739.704582][T19460] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  739.712579][T19460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.720566][T19460] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  739.728584][T19460]  </TASK>
[  740.251453][T19475] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4472'.
[  740.273337][T19475] openvswitch: netlink: Key type 4112 is out of range max 32
[  740.492641][T19480] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4473'.
[  740.800093][T19498] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4479'.
[  740.814421][T19498] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4479'.
[  741.661458][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4484'.
[  741.697614][T19513] FAULT_INJECTION: forcing a failure.
[  741.697614][T19513] name failslab, interval 1, probability 0, space 0, times 0
[  741.747454][T19513] CPU: 1 PID: 19513 Comm: syz.3.4484 Not tainted syzkaller #0
[  741.755037][T19513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  741.765135][T19513] Call Trace:
[  741.768459][T19513]  <TASK>
[  741.771428][T19513]  dump_stack_lvl+0x18c/0x250
[  741.776163][T19513]  ? show_regs_print_info+0x20/0x20
[  741.781398][T19513]  ? load_image+0x420/0x420
[  741.785956][T19513]  ? __might_sleep+0xe0/0xe0
[  741.790587][T19513]  ? __lock_acquire+0x7d40/0x7d40
[  741.795658][T19513]  should_fail_ex+0x39d/0x4d0
[  741.800396][T19513]  should_failslab+0x9/0x20
[  741.804956][T19513]  slab_pre_alloc_hook+0x59/0x310
[  741.810034][T19513]  ? lockdep_hardirqs_on+0x98/0x150
[  741.815291][T19513]  kmem_cache_alloc_node+0x60/0x320
[  741.820579][T19513]  ? __alloc_skb+0x103/0x2c0
[  741.825225][T19513]  __alloc_skb+0x103/0x2c0
[  741.829696][T19513]  netlink_ack+0x376/0x1180
[  741.834273][T19513]  ? __dev_queue_xmit+0x265/0x3660
[  741.839535][T19513]  ? netlink_dump+0xe50/0xe50
[  741.844276][T19513]  ? ref_tracker_free+0x690/0x840
[  741.849365][T19513]  netlink_rcv_skb+0x2c5/0x4d0
[  741.854184][T19513]  ? rtnetlink_bind+0x80/0x80
[  741.858908][T19513]  ? netlink_ack+0x1180/0x1180
[  741.863736][T19513]  ? __lock_acquire+0x7d40/0x7d40
[  741.868826][T19513]  ? netlink_deliver_tap+0x2e/0x1b0
[  741.874085][T19513]  netlink_unicast+0x751/0x8d0
[  741.878924][T19513]  netlink_sendmsg+0x8d0/0xbf0
[  741.883759][T19513]  ? netlink_getsockopt+0x590/0x590
[  741.889025][T19513]  ? aa_sock_msg_perm+0x94/0x150
[  741.894023][T19513]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  741.899358][T19513]  ? security_socket_sendmsg+0x80/0xa0
[  741.904867][T19513]  ? netlink_getsockopt+0x590/0x590
[  741.910124][T19513]  ____sys_sendmsg+0x5ba/0x960
[  741.914938][T19513]  ? __asan_memset+0x22/0x40
[  741.919576][T19513]  ? __sys_sendmsg_sock+0x30/0x30
[  741.924645][T19513]  ? __import_iovec+0x5f2/0x850
[  741.929548][T19513]  ? import_iovec+0x73/0xa0
[  741.934099][T19513]  ___sys_sendmsg+0x2a6/0x360
[  741.938837][T19513]  ? get_pid_task+0x20/0x1e0
[  741.943494][T19513]  ? __sys_sendmsg+0x2a0/0x2a0
[  741.948332][T19513]  ? __lock_acquire+0x7d40/0x7d40
[  741.953431][T19513]  __se_sys_sendmsg+0x1c2/0x2b0
[  741.958340][T19513]  ? __x64_sys_sendmsg+0x80/0x80
[  741.963344][T19513]  ? lockdep_hardirqs_on+0x98/0x150
[  741.968607][T19513]  do_syscall_64+0x55/0xb0
[  741.973070][T19513]  ? clear_bhb_loop+0x40/0x90
[  741.977794][T19513]  ? clear_bhb_loop+0x40/0x90
[  741.982524][T19513]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.988479][T19513] RIP: 0033:0x7f1e29f9ce59
[  741.992948][T19513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.012620][T19513] RSP: 002b:00007f1e281f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  742.021092][T19513] RAX: ffffffffffffffda RBX: 00007f1e2a215fa0 RCX: 00007f1e29f9ce59
[  742.029115][T19513] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  742.037133][T19513] RBP: 00007f1e281f6090 R08: 0000000000000000 R09: 0000000000000000
[  742.045149][T19513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.053165][T19513] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  742.061207][T19513]  </TASK>
[  742.740284][T19540] FAULT_INJECTION: forcing a failure.
[  742.740284][T19540] name failslab, interval 1, probability 0, space 0, times 0
[  742.776353][T19540] CPU: 1 PID: 19540 Comm: syz.3.4492 Not tainted syzkaller #0
[  742.783913][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  742.794116][T19540] Call Trace:
[  742.797446][T19540]  <TASK>
[  742.800424][T19540]  dump_stack_lvl+0x18c/0x250
[  742.805172][T19540]  ? show_regs_print_info+0x20/0x20
[  742.810431][T19540]  ? load_image+0x420/0x420
[  742.815005][T19540]  ? __might_sleep+0xe0/0xe0
[  742.819660][T19540]  ? __lock_acquire+0x7d40/0x7d40
[  742.824761][T19540]  should_fail_ex+0x39d/0x4d0
[  742.829524][T19540]  should_failslab+0x9/0x20
[  742.834103][T19540]  slab_pre_alloc_hook+0x59/0x310
[  742.839199][T19540]  ? kvmalloc_node+0x70/0x180
[  742.843950][T19540]  ? kvmalloc_node+0x70/0x180
[  742.848693][T19540]  __kmem_cache_alloc_node+0x53/0x250
[  742.854147][T19540]  ? kvmalloc_node+0x70/0x180
[  742.858896][T19540]  __kmalloc_node+0xa4/0x230
[  742.863606][T19540]  kvmalloc_node+0x70/0x180
[  742.868182][T19540]  page_pool_create+0x1eb/0x5c0
[  742.873113][T19540]  bpf_test_run_xdp_live+0x203/0x1b20
[  742.878557][T19540]  ? 0xffffffffa00044c0
[  742.882754][T19540]  ? 0xffffffffa00044c0
[  742.886946][T19540]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[  742.892883][T19540]  ? 0xffffffffa00044c0
[  742.897082][T19540]  ? xdp_convert_md_to_buff+0x330/0x330
[  742.902724][T19540]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  742.909011][T19540]  ? _copy_from_user+0xa5/0xe0
[  742.913821][T19540]  ? bpf_test_init+0x119/0x140
[  742.918620][T19540]  ? xdp_convert_md_to_buff+0x5b/0x330
[  742.924120][T19540]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  742.929552][T19540]  ? dev_put+0x80/0x80
[  742.933681][T19540]  ? dev_put+0x80/0x80
[  742.937795][T19540]  bpf_prog_test_run+0x321/0x390
[  742.942784][T19540]  __sys_bpf+0x49d/0x890
[  742.947082][T19540]  ? bpf_link_show_fdinfo+0x390/0x390
[  742.952518][T19540]  ? lock_chain_count+0x20/0x20
[  742.957423][T19540]  __x64_sys_bpf+0x7c/0x90
[  742.961878][T19540]  do_syscall_64+0x55/0xb0
[  742.966415][T19540]  ? clear_bhb_loop+0x40/0x90
[  742.971142][T19540]  ? clear_bhb_loop+0x40/0x90
[  742.975869][T19540]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.981810][T19540] RIP: 0033:0x7f1e29f9ce59
[  742.986264][T19540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.005900][T19540] RSP: 002b:00007f1e281f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  743.014353][T19540] RAX: ffffffffffffffda RBX: 00007f1e2a215fa0 RCX: 00007f1e29f9ce59
[  743.022352][T19540] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a
[  743.030357][T19540] RBP: 00007f1e281f6090 R08: 0000000000000000 R09: 0000000000000000
[  743.038358][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.046363][T19540] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  743.054396][T19540]  </TASK>
[  743.070007][T19540] page_pool_create() gave up with errno -12
[  744.090165][T19577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4505'.
[  744.178554][T19579] FAULT_INJECTION: forcing a failure.
[  744.178554][T19579] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  744.192953][T19579] CPU: 0 PID: 19579 Comm: syz.1.4506 Not tainted syzkaller #0
[  744.200515][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.210647][T19579] Call Trace:
[  744.213996][T19579]  <TASK>
[  744.216974][T19579]  dump_stack_lvl+0x18c/0x250
[  744.221742][T19579]  ? show_regs_print_info+0x20/0x20
[  744.227026][T19579]  ? load_image+0x420/0x420
[  744.231622][T19579]  ? __might_fault+0xaa/0x120
[  744.236366][T19579]  ? __lock_acquire+0x7d40/0x7d40
[  744.241460][T19579]  should_fail_ex+0x39d/0x4d0
[  744.246215][T19579]  _copy_from_user+0x2f/0xe0
[  744.250872][T19579]  ___sys_sendmsg+0x1c7/0x360
[  744.255620][T19579]  ? __sys_sendmsg+0x2a0/0x2a0
[  744.260479][T19579]  ? __lock_acquire+0x7d40/0x7d40
[  744.265612][T19579]  __se_sys_sendmsg+0x1c2/0x2b0
[  744.270511][T19579]  ? __x64_sys_sendmsg+0x80/0x80
[  744.275626][T19579]  ? lockdep_hardirqs_on+0x98/0x150
[  744.280882][T19579]  do_syscall_64+0x55/0xb0
[  744.285338][T19579]  ? clear_bhb_loop+0x40/0x90
[  744.290081][T19579]  ? clear_bhb_loop+0x40/0x90
[  744.294819][T19579]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.300773][T19579] RIP: 0033:0x7f5f6a59ce59
[  744.305235][T19579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.324884][T19579] RSP: 002b:00007f5f6b43f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  744.333361][T19579] RAX: ffffffffffffffda RBX: 00007f5f6a815fa0 RCX: 00007f5f6a59ce59
[  744.341372][T19579] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  744.349382][T19579] RBP: 00007f5f6b43f090 R08: 0000000000000000 R09: 0000000000000000
[  744.357395][T19579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.365406][T19579] R13: 00007f5f6a816038 R14: 00007f5f6a815fa0 R15: 00007ffdbd95dae8
[  744.373462][T19579]  </TASK>
[  744.858428][T19593] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.4510'.
[  746.544192][T19623] validate_nla: 24 callbacks suppressed
[  746.544235][T19623] netlink: 'syz.2.4519': attribute type 10 has an invalid length.
[  746.559226][T19623] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4519'.
[  747.007855][T19635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  747.015488][T19635] IPv6: NLM_F_CREATE should be set when creating new route
[  747.023333][T19635] IPv6: NLM_F_CREATE should be set when creating new route
[  747.031014][T19635] IPv6: NLM_F_CREATE should be set when creating new route
[  747.259297][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  747.266435][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  751.373517][T19680] hsr0: left allmulticast mode
[  751.382942][T19680] hsr_slave_0: left allmulticast mode
[  751.388400][T19680] hsr_slave_1: left allmulticast mode
[  751.404775][T19680] bridge0: port 3(hsr0) entered disabled state
[  751.454336][T19680] bridge_slave_1: left allmulticast mode
[  751.460079][T19680] bridge_slave_1: left promiscuous mode
[  751.475137][T19680] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.515730][T19680] bridge_slave_0: left allmulticast mode
[  751.521559][T19680] bridge_slave_0: left promiscuous mode
[  751.538948][T19680] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.578680][T19689] netlink: 'syz.1.4540': attribute type 10 has an invalid length.
[  751.603080][T19689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4540'.
[  751.779468][T19680] bond0: (slave bridge0): Releasing backup interface
[  751.807982][T19680] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  755.261507][T19715] netlink: 'syz.1.4548': attribute type 10 has an invalid length.
[  755.270087][T19715] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.4548'.
[  755.942545][T19742] FAULT_INJECTION: forcing a failure.
[  755.942545][T19742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  755.955924][T19742] CPU: 0 PID: 19742 Comm: syz.3.4556 Not tainted syzkaller #0
[  755.963432][T19742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  755.973525][T19742] Call Trace:
[  755.976836][T19742]  <TASK>
[  755.979794][T19742]  dump_stack_lvl+0x18c/0x250
[  755.984504][T19742]  ? show_regs_print_info+0x20/0x20
[  755.989738][T19742]  ? load_image+0x420/0x420
[  755.994281][T19742]  ? __lock_acquire+0x7d40/0x7d40
[  755.999334][T19742]  ? snprintf+0xe9/0x140
[  756.003609][T19742]  should_fail_ex+0x39d/0x4d0
[  756.008321][T19742]  _copy_to_user+0x2f/0xa0
[  756.012772][T19742]  simple_read_from_buffer+0xe7/0x150
[  756.018207][T19742]  proc_fail_nth_read+0x1e8/0x260
[  756.023271][T19742]  ? proc_fault_inject_write+0x360/0x360
[  756.028952][T19742]  ? fsnotify_perm+0x271/0x5e0
[  756.033765][T19742]  ? proc_fault_inject_write+0x360/0x360
[  756.039438][T19742]  vfs_read+0x28b/0x970
[  756.043642][T19742]  ? kernel_read+0x1e0/0x1e0
[  756.048286][T19742]  ? __fget_files+0x28/0x4b0
[  756.052928][T19742]  ? __fget_files+0x28/0x4b0
[  756.057564][T19742]  ? __fget_files+0x43d/0x4b0
[  756.062285][T19742]  ? __fdget_pos+0x2a3/0x330
[  756.066912][T19742]  ? ksys_read+0x75/0x260
[  756.071272][T19742]  ksys_read+0x150/0x260
[  756.075546][T19742]  ? vfs_write+0x990/0x990
[  756.079997][T19742]  ? lockdep_hardirqs_on+0x98/0x150
[  756.085236][T19742]  do_syscall_64+0x55/0xb0
[  756.089681][T19742]  ? clear_bhb_loop+0x40/0x90
[  756.094400][T19742]  ? clear_bhb_loop+0x40/0x90
[  756.099114][T19742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.105047][T19742] RIP: 0033:0x7f1e29f5d68e
[  756.109485][T19742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  756.129117][T19742] RSP: 002b:00007f1e281f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  756.137564][T19742] RAX: ffffffffffffffda RBX: 00007f1e281f66c0 RCX: 00007f1e29f5d68e
[  756.145561][T19742] RDX: 000000000000000f RSI: 00007f1e281f60a0 RDI: 0000000000000005
[  756.153557][T19742] RBP: 00007f1e281f6090 R08: 0000000000000000 R09: 0000000000000000
[  756.161552][T19742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.169541][T19742] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  756.177547][T19742]  </TASK>
[  756.544459][T19752] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4561'.
[  756.689578][T19757] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4563'.
[  757.893179][T19782] FAULT_INJECTION: forcing a failure.
[  757.893179][T19782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  757.907306][T19782] CPU: 0 PID: 19782 Comm: syz.2.4570 Not tainted syzkaller #0
[  757.914816][T19782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  757.924915][T19782] Call Trace:
[  757.928240][T19782]  <TASK>
[  757.931205][T19782]  dump_stack_lvl+0x18c/0x250
[  757.935933][T19782]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  757.942155][T19782]  ? show_regs_print_info+0x20/0x20
[  757.947392][T19782]  ? load_image+0x420/0x420
[  757.951955][T19782]  should_fail_ex+0x39d/0x4d0
[  757.956689][T19782]  _copy_from_user+0x2f/0xe0
[  757.961332][T19782]  do_ip_vs_set_ctl+0x346/0xa90
[  757.966326][T19782]  ? ipvs_proc_est_nice+0x350/0x350
[  757.971587][T19782]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  757.977639][T19782]  ? mutex_unlock+0x10/0x10
[  757.982186][T19782]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  757.988404][T19782]  nf_setsockopt+0x263/0x280
[  757.993123][T19782]  ? sock_common_recvmsg+0x190/0x190
[  757.998465][T19782]  smc_setsockopt+0x243/0xac0
[  758.003188][T19782]  ? smc_shutdown+0x9b0/0x9b0
[  758.007903][T19782]  ? __fget_files+0x28/0x4b0
[  758.012546][T19782]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  758.018139][T19782]  ? security_socket_setsockopt+0x7e/0xa0
[  758.023890][T19782]  ? smc_shutdown+0x9b0/0x9b0
[  758.028591][T19782]  do_sock_setsockopt+0x175/0x1a0
[  758.033640][T19782]  ? __fdget+0x180/0x210
[  758.037917][T19782]  __x64_sys_setsockopt+0x182/0x200
[  758.043144][T19782]  do_syscall_64+0x55/0xb0
[  758.047582][T19782]  ? clear_bhb_loop+0x40/0x90
[  758.052287][T19782]  ? clear_bhb_loop+0x40/0x90
[  758.056998][T19782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  758.062926][T19782] RIP: 0033:0x7f4eb4b9ce59
[  758.067361][T19782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.087003][T19782] RSP: 002b:00007f4eb59e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  758.095447][T19782] RAX: ffffffffffffffda RBX: 00007f4eb4e15fa0 RCX: 00007f4eb4b9ce59
[  758.103443][T19782] RDX: 0000000000000480 RSI: 0000000000000000 RDI: 0000000000000007
[  758.111435][T19782] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  758.119430][T19782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.127424][T19782] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  758.135440][T19782]  </TASK>
[  758.871400][T19800] syzkaller0: entered promiscuous mode
[  758.893152][T19800] syzkaller0: entered allmulticast mode
[  759.656239][T19819] netlink: 'syz.1.4580': attribute type 29 has an invalid length.
[  761.281081][T19819] netlink: 'syz.1.4580': attribute type 29 has an invalid length.
[  761.302592][T19834] Ÿë
: port 2(gretap0) entered blocking state
[  761.309642][T19834] Ÿë
: port 2(gretap0) entered disabled state
[  761.318490][T19834] gretap0: entered allmulticast mode
[  761.328095][T19834] gretap0: entered promiscuous mode
[  762.382182][T19864] netlink: 'syz.0.4593': attribute type 29 has an invalid length.
[  762.391425][T19866] FAULT_INJECTION: forcing a failure.
[  762.391425][T19866] name failslab, interval 1, probability 0, space 0, times 0
[  762.392205][T19864] netlink: 'syz.0.4593': attribute type 29 has an invalid length.
[  762.408810][T19866] CPU: 0 PID: 19866 Comm: syz.1.4594 Not tainted syzkaller #0
[  762.419769][T19866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  762.429882][T19866] Call Trace:
[  762.433206][T19866]  <TASK>
[  762.436176][T19866]  dump_stack_lvl+0x18c/0x250
[  762.440890][T19866]  ? __sctp_connect+0x5b7/0xd80
[  762.445795][T19866]  ? sctp_setsockopt+0x6d8/0x11e0
[  762.450858][T19866]  ? show_regs_print_info+0x20/0x20
[  762.456157][T19866]  ? load_image+0x420/0x420
[  762.460729][T19866]  should_fail_ex+0x39d/0x4d0
[  762.465472][T19866]  should_failslab+0x9/0x20
[  762.470023][T19866]  slab_pre_alloc_hook+0x59/0x310
[  762.475105][T19866]  ? sctp_add_bind_addr+0x8c/0x360
[  762.480261][T19866]  __kmem_cache_alloc_node+0x53/0x250
[  762.485791][T19866]  ? sctp_add_bind_addr+0x8c/0x360
[  762.490951][T19866]  kmalloc_trace+0x2a/0xe0
[  762.495427][T19866]  sctp_add_bind_addr+0x8c/0x360
[  762.500428][T19866]  sctp_copy_local_addr_list+0x315/0x4f0
[  762.506111][T19866]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  762.511886][T19866]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  762.518017][T19866]  ? sctp_v4_is_any+0x35/0x60
[  762.522739][T19866]  ? sctp_copy_one_addr+0x8c/0x350
[  762.527900][T19866]  sctp_bind_addr_copy+0xb3/0x3c0
[  762.532972][T19866]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  762.539360][T19866]  sctp_connect_new_asoc+0x2f9/0x6a0
[  762.544707][T19866]  ? __sctp_connect+0xd80/0xd80
[  762.549605][T19866]  ? mark_lock+0x94/0x320
[  762.553968][T19866]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  762.559832][T19866]  __sctp_connect+0x5b7/0xd80
[  762.564580][T19866]  ? sctp_send_asconf+0x170/0x170
[  762.569664][T19866]  ? __local_bh_enable_ip+0x13a/0x1c0
[  762.575097][T19866]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  762.580706][T19866]  ? security_sctp_bind_connect+0x89/0xb0
[  762.586489][T19866]  sctp_setsockopt_connectx+0x104/0x1a0
[  762.592093][T19866]  sctp_setsockopt+0x6d8/0x11e0
[  762.597014][T19866]  ? sock_common_recvmsg+0x190/0x190
[  762.602360][T19866]  do_sock_setsockopt+0x175/0x1a0
[  762.607437][T19866]  ? __fdget+0x180/0x210
[  762.611738][T19866]  __x64_sys_setsockopt+0x182/0x200
[  762.616996][T19866]  do_syscall_64+0x55/0xb0
[  762.621458][T19866]  ? clear_bhb_loop+0x40/0x90
[  762.626183][T19866]  ? clear_bhb_loop+0x40/0x90
[  762.630922][T19866]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  762.636953][T19866] RIP: 0033:0x7f5f6a59ce59
[  762.641423][T19866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  762.661069][T19866] RSP: 002b:00007f5f6b43f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  762.669516][T19866] RAX: ffffffffffffffda RBX: 00007f5f6a815fa0 RCX: 00007f5f6a59ce59
[  762.677512][T19866] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  762.685514][T19866] RBP: 00007f5f6b43f090 R08: 0000000000000010 R09: 0000000000000000
[  762.693509][T19866] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  762.701506][T19866] R13: 00007f5f6a816038 R14: 00007f5f6a815fa0 R15: 00007ffdbd95dae8
[  762.709527][T19866]  </TASK>
[  763.083947][T19879] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4598'.
[  763.891553][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'.
[  764.624254][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4616'.
[  764.831827][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'.
[  765.162615][T19948] FAULT_INJECTION: forcing a failure.
[  765.162615][T19948] name failslab, interval 1, probability 0, space 0, times 0
[  765.193046][T19948] CPU: 0 PID: 19948 Comm: syz.3.4623 Not tainted syzkaller #0
[  765.200592][T19948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  765.210695][T19948] Call Trace:
[  765.214025][T19948]  <TASK>
[  765.216992][T19948]  dump_stack_lvl+0x18c/0x250
[  765.221731][T19948]  ? show_regs_print_info+0x20/0x20
[  765.226998][T19948]  ? load_image+0x420/0x420
[  765.231565][T19948]  ? __might_sleep+0xe0/0xe0
[  765.236211][T19948]  ? __lock_acquire+0x7d40/0x7d40
[  765.241290][T19948]  should_fail_ex+0x39d/0x4d0
[  765.246124][T19948]  should_failslab+0x9/0x20
[  765.250694][T19948]  slab_pre_alloc_hook+0x59/0x310
[  765.255773][T19948]  ? tomoyo_encode+0x28b/0x540
[  765.260579][T19948]  ? tomoyo_encode+0x28b/0x540
[  765.265470][T19948]  __kmem_cache_alloc_node+0x53/0x250
[  765.270904][T19948]  ? tomoyo_encode+0x28b/0x540
[  765.275712][T19948]  __kmalloc+0xa4/0x230
[  765.279927][T19948]  tomoyo_encode+0x28b/0x540
[  765.284570][T19948]  tomoyo_realpath_from_path+0x592/0x5d0
[  765.290279][T19948]  tomoyo_path_number_perm+0x248/0x620
[  765.295800][T19948]  ? tomoyo_path_number_perm+0x217/0x620
[  765.301487][T19948]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  765.307008][T19948]  ? ksys_write+0x1c4/0x260
[  765.311599][T19948]  ? __fget_files+0x28/0x4b0
[  765.316240][T19948]  ? __fget_files+0x28/0x4b0
[  765.320926][T19948]  security_file_ioctl+0x70/0xa0
[  765.325905][T19948]  __se_sys_ioctl+0x48/0x170
[  765.330554][T19948]  do_syscall_64+0x55/0xb0
[  765.335034][T19948]  ? clear_bhb_loop+0x40/0x90
[  765.339770][T19948]  ? clear_bhb_loop+0x40/0x90
[  765.344498][T19948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  765.350440][T19948] RIP: 0033:0x7f1e29f9ce59
[  765.354898][T19948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  765.374554][T19948] RSP: 002b:00007f1e281f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  765.383015][T19948] RAX: ffffffffffffffda RBX: 00007f1e2a215fa0 RCX: 00007f1e29f9ce59
[  765.391028][T19948] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000009
[  765.399040][T19948] RBP: 00007f1e281f6090 R08: 0000000000000000 R09: 0000000000000000
[  765.407058][T19948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  765.415085][T19948] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  765.423122][T19948]  </TASK>
[  765.488539][T19948] ERROR: Out of memory at tomoyo_realpath_from_path.
[  766.149553][T15004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  766.161264][T15004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  766.170404][T15004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  766.182334][T15004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  766.190811][T15004] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  766.199557][T15004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  766.254240][T19958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  766.659178][T19967] chnl_net:caif_netlink_parms(): no params data found
[  766.869236][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.985335][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.181460][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.199144][T19967] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.207684][T19967] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.215077][T19967] bridge_slave_0: entered allmulticast mode
[  767.222083][T19967] bridge_slave_0: entered promiscuous mode
[  767.241371][T19967] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.263796][T19967] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.271271][T19967] bridge_slave_1: entered allmulticast mode
[  767.279783][T19997] FAULT_INJECTION: forcing a failure.
[  767.279783][T19997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.287654][T19967] bridge_slave_1: entered promiscuous mode
[  767.303316][T19997] CPU: 1 PID: 19997 Comm: syz.2.4633 Not tainted syzkaller #0
[  767.310859][T19997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  767.320994][T19997] Call Trace:
[  767.324332][T19997]  <TASK>
[  767.327311][T19997]  dump_stack_lvl+0x18c/0x250
[  767.332022][T19997]  ? show_regs_print_info+0x20/0x20
[  767.337251][T19997]  ? load_image+0x420/0x420
[  767.341788][T19997]  ? __might_fault+0xaa/0x120
[  767.346493][T19997]  ? __lock_acquire+0x7d40/0x7d40
[  767.351566][T19997]  should_fail_ex+0x39d/0x4d0
[  767.356329][T19997]  _copy_from_user+0x2f/0xe0
[  767.361014][T19997]  ___sys_sendmsg+0x1c7/0x360
[  767.365794][T19997]  ? __sys_sendmsg+0x2a0/0x2a0
[  767.370679][T19997]  ? __lock_acquire+0x7d40/0x7d40
[  767.375894][T19997]  __se_sys_sendmsg+0x1c2/0x2b0
[  767.380777][T19997]  ? __x64_sys_sendmsg+0x80/0x80
[  767.385765][T19997]  ? lockdep_hardirqs_on+0x98/0x150
[  767.391025][T19997]  do_syscall_64+0x55/0xb0
[  767.395482][T19997]  ? clear_bhb_loop+0x40/0x90
[  767.400215][T19997]  ? clear_bhb_loop+0x40/0x90
[  767.405056][T19997]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  767.411006][T19997] RIP: 0033:0x7f4eb4b9ce59
[  767.415455][T19997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.435091][T19997] RSP: 002b:00007f4eb59c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  767.443537][T19997] RAX: ffffffffffffffda RBX: 00007f4eb4e16090 RCX: 00007f4eb4b9ce59
[  767.451555][T19997] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d
[  767.459586][T19997] RBP: 00007f4eb59c0090 R08: 0000000000000000 R09: 0000000000000000
[  767.467582][T19997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.475582][T19997] R13: 00007f4eb4e16128 R14: 00007f4eb4e16090 R15: 00007ffd3370be98
[  767.483674][T19997]  </TASK>
[  767.534904][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.576619][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  767.603372][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  767.682771][T19967] team0: Port device team_slave_0 added
[  767.694308][T19967] team0: Port device team_slave_1 added
[  767.740780][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  767.753391][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.780225][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  767.825121][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  767.833419][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.860456][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  767.955487][T19967] hsr_slave_0: entered promiscuous mode
[  767.974764][T19967] hsr_slave_1: entered promiscuous mode
[  767.986890][T19967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  767.995132][T19967] Cannot create hsr debugfs directory
[  768.223189][T15004] Bluetooth: hci4: command tx timeout
[  768.316230][T20014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  768.942236][T20031] FAULT_INJECTION: forcing a failure.
[  768.942236][T20031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  768.961331][T20031] CPU: 0 PID: 20031 Comm: syz.2.4642 Not tainted syzkaller #0
[  768.968864][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  768.978963][T20031] Call Trace:
[  768.982296][T20031]  <TASK>
[  768.985293][T20031]  dump_stack_lvl+0x18c/0x250
[  768.990031][T20031]  ? show_regs_print_info+0x20/0x20
[  768.995290][T20031]  ? load_image+0x420/0x420
[  768.999852][T20031]  ? __lock_acquire+0x7d40/0x7d40
[  769.004930][T20031]  ? snprintf+0xe9/0x140
[  769.009249][T20031]  should_fail_ex+0x39d/0x4d0
[  769.013999][T20031]  _copy_to_user+0x2f/0xa0
[  769.018473][T20031]  simple_read_from_buffer+0xe7/0x150
[  769.023907][T20031]  proc_fail_nth_read+0x1e8/0x260
[  769.028994][T20031]  ? proc_fault_inject_write+0x360/0x360
[  769.034779][T20031]  ? fsnotify_perm+0x271/0x5e0
[  769.039592][T20031]  ? proc_fault_inject_write+0x360/0x360
[  769.045294][T20031]  vfs_read+0x28b/0x970
[  769.049521][T20031]  ? kernel_read+0x1e0/0x1e0
[  769.054168][T20031]  ? __fget_files+0x28/0x4b0
[  769.058815][T20031]  ? __fget_files+0x28/0x4b0
[  769.063474][T20031]  ? __fget_files+0x43d/0x4b0
[  769.068207][T20031]  ? __fdget_pos+0x2a3/0x330
[  769.072849][T20031]  ? ksys_read+0x75/0x260
[  769.077236][T20031]  ksys_read+0x150/0x260
[  769.081548][T20031]  ? vfs_write+0x990/0x990
[  769.086028][T20031]  ? lockdep_hardirqs_on+0x98/0x150
[  769.091290][T20031]  do_syscall_64+0x55/0xb0
[  769.095775][T20031]  ? clear_bhb_loop+0x40/0x90
[  769.100502][T20031]  ? clear_bhb_loop+0x40/0x90
[  769.105242][T20031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  769.105797][T19967] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  769.111176][T20031] RIP: 0033:0x7f4eb4b5d68e
[  769.122349][T20031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  769.142006][T20031] RSP: 002b:00007f4eb59e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  769.150489][T20031] RAX: ffffffffffffffda RBX: 00007f4eb59e16c0 RCX: 00007f4eb4b5d68e
[  769.158527][T20031] RDX: 000000000000000f RSI: 00007f4eb59e10a0 RDI: 0000000000000005
[  769.166547][T20031] RBP: 00007f4eb59e1090 R08: 0000000000000000 R09: 0000000000000000
[  769.174559][T20031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.182571][T20031] R13: 00007f4eb4e16038 R14: 00007f4eb4e15fa0 R15: 00007ffd3370be98
[  769.190605][T20031]  </TASK>
[  769.225014][T19967] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  769.272209][T19967] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  769.375592][T19967] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  769.744470][T20049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  770.280212][T19967] 8021q: adding VLAN 0 to HW filter on device bond0
[  770.303029][T15004] Bluetooth: hci4: command tx timeout
[  770.472102][T19967] 8021q: adding VLAN 0 to HW filter on device team0
[  770.481070][T20062] netlink: 'syz.2.4647': attribute type 2 has an invalid length.
[  770.492490][T20062] netlink: 'syz.2.4647': attribute type 8 has an invalid length.
[  770.516534][T20062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4647'.
[  770.561336][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.568620][ T8513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  770.612299][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.619540][ T8501] bridge0: port 2(bridge_slave_1) entered forwarding state
[  771.050689][T20082] FAULT_INJECTION: forcing a failure.
[  771.050689][T20082] name failslab, interval 1, probability 0, space 0, times 0
[  771.069233][T20082] CPU: 0 PID: 20082 Comm: syz.0.4652 Not tainted syzkaller #0
[  771.076773][T20082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  771.086872][T20082] Call Trace:
[  771.090195][T20082]  <TASK>
[  771.093166][T20082]  dump_stack_lvl+0x18c/0x250
[  771.097883][T20082]  ? show_regs_print_info+0x20/0x20
[  771.103116][T20082]  ? load_image+0x420/0x420
[  771.107677][T20082]  ? __might_sleep+0xe0/0xe0
[  771.112328][T20082]  ? __lock_acquire+0x7d40/0x7d40
[  771.117409][T20082]  should_fail_ex+0x39d/0x4d0
[  771.122150][T20082]  should_failslab+0x9/0x20
[  771.126712][T20082]  slab_pre_alloc_hook+0x59/0x310
[  771.131791][T20082]  ? ioctl_standard_iw_point+0x51a/0xcf0
[  771.137472][T20082]  ? ioctl_standard_iw_point+0x51a/0xcf0
[  771.143146][T20082]  __kmem_cache_alloc_node+0x53/0x250
[  771.148580][T20082]  ? ioctl_standard_iw_point+0x51a/0xcf0
[  771.154279][T20082]  __kmalloc+0xa4/0x230
[  771.158510][T20082]  ioctl_standard_iw_point+0x51a/0xcf0
[  771.164047][T20082]  ? cfg80211_wext_siwessid+0x120/0x120
[  771.169662][T20082]  ? iw_handler_get_iwstats+0x110/0x110
[  771.175264][T20082]  ? wext_ioctl_dispatch+0x115/0x600
[  771.180607][T20082]  ? dev_load+0x21/0x1f0
[  771.184916][T20082]  ? mutex_lock_nested+0x20/0x20
[  771.189926][T20082]  ? cfg80211_wext_siwessid+0x120/0x120
[  771.195540][T20082]  ioctl_standard_call+0xb7/0x2b0
[  771.200629][T20082]  ? cfg80211_wext_siwessid+0x120/0x120
[  771.206242][T20082]  wext_ioctl_dispatch+0x1cb/0x600
[  771.211435][T20082]  ? wext_ioctl_dispatch+0x600/0x600
[  771.216774][T20082]  ? iw_handler_get_private+0x1f0/0x1f0
[  771.222366][T20082]  ? wext_handle_ioctl+0x1d0/0x1d0
[  771.227536][T20082]  ? __might_fault+0xaa/0x120
[  771.232263][T20082]  ? __might_fault+0xc6/0x120
[  771.236985][T20082]  ? __might_fault+0xaa/0x120
[  771.241721][T20082]  wext_handle_ioctl+0x117/0x1d0
[  771.246724][T20082]  ? call_commit_handler+0xf0/0xf0
[  771.251930][T20082]  sock_ioctl+0x15d/0x7e0
[  771.256322][T20082]  ? sock_poll+0x3e0/0x3e0
[  771.260794][T20082]  ? bpf_lsm_file_ioctl+0x9/0x10
[  771.265775][T20082]  ? security_file_ioctl+0x80/0xa0
[  771.270940][T20082]  ? sock_poll+0x3e0/0x3e0
[  771.275410][T20082]  __se_sys_ioctl+0xfd/0x170
[  771.280104][T20082]  do_syscall_64+0x55/0xb0
[  771.284572][T20082]  ? clear_bhb_loop+0x40/0x90
[  771.289304][T20082]  ? clear_bhb_loop+0x40/0x90
[  771.294034][T20082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  771.299972][T20082] RIP: 0033:0x7f415fd9ce59
[  771.304417][T20082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.324039][T20082] RSP: 002b:00007f4160bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  771.332479][T20082] RAX: ffffffffffffffda RBX: 00007f4160015fa0 RCX: 00007f415fd9ce59
[  771.340485][T20082] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003
[  771.348469][T20082] RBP: 00007f4160bfe090 R08: 0000000000000000 R09: 0000000000000000
[  771.356452][T20082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.364439][T20082] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  771.372454][T20082]  </TASK>
[  771.545564][T19967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.706522][ T1005] hsr_slave_0: left promiscuous mode
[  771.769434][ T1005] hsr_slave_1: left promiscuous mode
[  771.874666][ T1005] veth1_vlan: left promiscuous mode
[  771.937395][T20095] netlink: 'syz.0.4656': attribute type 3 has an invalid length.
[  771.947829][T20095] netlink: 'syz.0.4656': attribute type 16 has an invalid length.
[  771.958008][T20095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4656'.
[  772.381290][T15004] Bluetooth: hci4: command tx timeout
[  772.990922][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  773.058896][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  773.250509][T20127] FAULT_INJECTION: forcing a failure.
[  773.250509][T20127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  773.275971][T20127] CPU: 1 PID: 20127 Comm: syz.3.4667 Not tainted syzkaller #0
[  773.283499][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  773.293597][T20127] Call Trace:
[  773.296913][T20127]  <TASK>
[  773.299888][T20127]  dump_stack_lvl+0x18c/0x250
[  773.304648][T20127]  ? show_regs_print_info+0x20/0x20
[  773.309896][T20127]  ? load_image+0x420/0x420
[  773.314473][T20127]  ? __lock_acquire+0x7d40/0x7d40
[  773.319551][T20127]  ? lockdep_hardirqs_on+0x98/0x150
[  773.324810][T20127]  should_fail_ex+0x39d/0x4d0
[  773.329578][T20127]  _copy_to_user+0x2f/0xa0
[  773.334047][T20127]  simple_read_from_buffer+0xe7/0x150
[  773.339486][T20127]  proc_fail_nth_read+0x1e8/0x260
[  773.344574][T20127]  ? proc_fault_inject_write+0x360/0x360
[  773.350255][T20127]  ? fsnotify_perm+0x271/0x5e0
[  773.355052][T20127]  ? proc_fault_inject_write+0x360/0x360
[  773.360735][T20127]  vfs_read+0x28b/0x970
[  773.364930][T20127]  ? kernel_read+0x1e0/0x1e0
[  773.369552][T20127]  ? __fget_files+0x28/0x4b0
[  773.374168][T20127]  ? __fget_files+0x28/0x4b0
[  773.378800][T20127]  ? __fget_files+0x43d/0x4b0
[  773.383608][T20127]  ? __fdget_pos+0x2a3/0x330
[  773.388231][T20127]  ? ksys_read+0x75/0x260
[  773.392594][T20127]  ksys_read+0x150/0x260
[  773.396869][T20127]  ? vfs_write+0x990/0x990
[  773.401327][T20127]  ? syscall_enter_from_user_mode+0x2e/0x80
[  773.407255][T20127]  do_syscall_64+0x55/0xb0
[  773.411700][T20127]  ? clear_bhb_loop+0x40/0x90
[  773.416416][T20127]  ? clear_bhb_loop+0x40/0x90
[  773.421124][T20127]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  773.427063][T20127] RIP: 0033:0x7f1e29f5d68e
[  773.431519][T20127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  773.451174][T20127] RSP: 002b:00007f1e281f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  773.459639][T20127] RAX: ffffffffffffffda RBX: 00007f1e281f66c0 RCX: 00007f1e29f5d68e
[  773.467659][T20127] RDX: 000000000000000f RSI: 00007f1e281f60a0 RDI: 0000000000000008
[  773.475681][T20127] RBP: 00007f1e281f6090 R08: 0000000000000000 R09: 0000000000000000
[  773.483702][T20127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  773.491709][T20127] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  773.499739][T20127]  </TASK>
[  773.576299][T20129] FAULT_INJECTION: forcing a failure.
[  773.576299][T20129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  773.592402][T20129] CPU: 0 PID: 20129 Comm: syz.3.4669 Not tainted syzkaller #0
[  773.599924][T20129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  773.610024][T20129] Call Trace:
[  773.613355][T20129]  <TASK>
[  773.616354][T20129]  dump_stack_lvl+0x18c/0x250
[  773.621089][T20129]  ? show_regs_print_info+0x20/0x20
[  773.626342][T20129]  ? load_image+0x420/0x420
[  773.630897][T20129]  ? __might_fault+0xaa/0x120
[  773.635602][T20129]  ? __lock_acquire+0x7d40/0x7d40
[  773.640748][T20129]  should_fail_ex+0x39d/0x4d0
[  773.645469][T20129]  _copy_from_user+0x2f/0xe0
[  773.650093][T20129]  sctp_setsockopt+0x19e/0x11e0
[  773.654978][T20129]  ? sock_common_recvmsg+0x190/0x190
[  773.660313][T20129]  do_sock_setsockopt+0x175/0x1a0
[  773.665366][T20129]  ? __fdget+0x180/0x210
[  773.669640][T20129]  __x64_sys_setsockopt+0x182/0x200
[  773.674866][T20129]  do_syscall_64+0x55/0xb0
[  773.679306][T20129]  ? clear_bhb_loop+0x40/0x90
[  773.684014][T20129]  ? clear_bhb_loop+0x40/0x90
[  773.688717][T20129]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  773.694655][T20129] RIP: 0033:0x7f1e29f9ce59
[  773.699096][T20129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  773.718740][T20129] RSP: 002b:00007f1e281f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  773.727189][T20129] RAX: ffffffffffffffda RBX: 00007f1e2a215fa0 RCX: 00007f1e29f9ce59
[  773.735190][T20129] RDX: 0000000000000007 RSI: 0000000000000084 RDI: 0000000000000003
[  773.743199][T20129] RBP: 00007f1e281f6090 R08: 0000000000000004 R09: 0000000000000000
[  773.751206][T20129] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001
[  773.759198][T20129] R13: 00007f1e2a216038 R14: 00007f1e2a215fa0 R15: 00007ffeb5d517b8
[  773.767205][T20129]  </TASK>
[  774.388259][T19967] veth0_vlan: entered promiscuous mode
[  774.419467][T19967] veth1_vlan: entered promiscuous mode
[  774.463389][T15004] Bluetooth: hci4: command tx timeout
[  774.633493][T19967] veth0_macvtap: entered promiscuous mode
[  774.661647][T19967] veth1_macvtap: entered promiscuous mode
[  774.745542][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.764775][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.798092][T19967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.825751][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  774.868235][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.881901][T19967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  774.900848][T19967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  774.909955][T19967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.924033][T19967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.934410][T19967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.050229][T20156] syzkaller0: entered promiscuous mode
[  775.056218][T20156] syzkaller0: entered allmulticast mode
[  775.071375][   T11] syzkaller0: tun_net_xmit 48
[  775.090901][T20160] FAULT_INJECTION: forcing a failure.
[  775.090901][T20160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  775.097834][T20156] syzkaller0: tun_chr_ioctl cmd 1074025677
[  775.113743][T20160] CPU: 1 PID: 20160 Comm: syz.0.4678 Not tainted syzkaller #0
[  775.121272][T20160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  775.128046][T20156] syzkaller0: Linktype set failed because interface is up
[  775.131354][T20160] Call Trace:
[  775.131366][T20160]  <TASK>
[  775.131376][T20160]  dump_stack_lvl+0x18c/0x250
[  775.131409][T20160]  ? show_regs_print_info+0x20/0x20
[  775.154733][T20160]  ? load_image+0x420/0x420
[  775.159303][T20160]  ? __lock_acquire+0x7d40/0x7d40
[  775.164384][T20160]  ? snprintf+0xe9/0x140
[  775.168684][T20160]  should_fail_ex+0x39d/0x4d0
[  775.173434][T20160]  _copy_to_user+0x2f/0xa0
[  775.177911][T20160]  simple_read_from_buffer+0xe7/0x150
[  775.183328][T20160]  proc_fail_nth_read+0x1e8/0x260
[  775.183369][T20160]  ? proc_fault_inject_write+0x360/0x360
[  775.194099][T20160]  ? fsnotify_perm+0x271/0x5e0
[  775.198908][T20160]  ? proc_fault_inject_write+0x360/0x360
[  775.204596][T20160]  vfs_read+0x28b/0x970
[  775.205775][T20158] syzkaller0: create flow: hash 1569445926 index 1
[  775.208794][T20160]  ? kernel_read+0x1e0/0x1e0
[  775.208827][T20160]  ? __fget_files+0x28/0x4b0
[  775.224763][T20160]  ? __fget_files+0x28/0x4b0
[  775.229410][T20160]  ? __fget_files+0x43d/0x4b0
[  775.234160][T20160]  ? __fdget_pos+0x2a3/0x330
[  775.238814][T20160]  ? ksys_read+0x75/0x260
[  775.243207][T20160]  ksys_read+0x150/0x260
[  775.247519][T20160]  ? vfs_write+0x990/0x990
[  775.251994][T20160]  ? lockdep_hardirqs_on+0x98/0x150
[  775.257254][T20160]  do_syscall_64+0x55/0xb0
[  775.261717][T20160]  ? clear_bhb_loop+0x40/0x90
[  775.266445][T20160]  ? clear_bhb_loop+0x40/0x90
[  775.271175][T20160]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  775.277143][T20160] RIP: 0033:0x7f415fd5d68e
[  775.281604][T20160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  775.301254][T20160] RSP: 002b:00007f4160bfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  775.309715][T20160] RAX: ffffffffffffffda RBX: 00007f4160bfe6c0 RCX: 00007f415fd5d68e
[  775.317714][T20160] RDX: 000000000000000f RSI: 00007f4160bfe0a0 RDI: 0000000000000005
[  775.325707][T20160] RBP: 00007f4160bfe090 R08: 0000000000000000 R09: 0000000000000000
[  775.333699][T20160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  775.341689][T20160] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  775.349698][T20160]  </TASK>
[  775.387119][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.405283][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.549136][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.557494][T20155] syzkaller0: delete flow: hash 1569445926 index 1
[  775.567001][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.292007][T20196] FAULT_INJECTION: forcing a failure.
[  779.292007][T20196] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  779.320641][T20196] CPU: 0 PID: 20196 Comm: syz.0.4688 Not tainted syzkaller #0
[  779.328205][T20196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  779.338292][T20196] Call Trace:
[  779.341600][T20196]  <TASK>
[  779.344557][T20196]  dump_stack_lvl+0x18c/0x250
[  779.349275][T20196]  ? show_regs_print_info+0x20/0x20
[  779.354506][T20196]  ? load_image+0x420/0x420
[  779.359069][T20196]  ? __might_fault+0xaa/0x120
[  779.363796][T20196]  ? __lock_acquire+0x7d40/0x7d40
[  779.368882][T20196]  should_fail_ex+0x39d/0x4d0
[  779.373619][T20196]  _copy_from_user+0x2f/0xe0
[  779.378260][T20196]  kstrtouint_from_user+0xde/0x170
[  779.383440][T20196]  ? kstrtol_from_user+0x190/0x190
[  779.388638][T20196]  proc_fail_nth_write+0x8f/0x250
[  779.393716][T20196]  ? proc_fail_nth_read+0x260/0x260
[  779.398966][T20196]  ? proc_fail_nth_read+0x260/0x260
[  779.404216][T20196]  vfs_write+0x296/0x990
[  779.408529][T20196]  ? file_end_write+0x250/0x250
[  779.413431][T20196]  ? __fget_files+0x28/0x4b0
[  779.418067][T20196]  ? __fget_files+0x28/0x4b0
[  779.422716][T20196]  ? __fget_files+0x43d/0x4b0
[  779.427459][T20196]  ? __fdget_pos+0x2a3/0x330
[  779.432095][T20196]  ? ksys_write+0x75/0x260
[  779.436562][T20196]  ksys_write+0x150/0x260
[  779.440941][T20196]  ? __ia32_sys_read+0x90/0x90
[  779.445770][T20196]  ? lockdep_hardirqs_on+0x98/0x150
[  779.451018][T20196]  do_syscall_64+0x55/0xb0
[  779.455477][T20196]  ? clear_bhb_loop+0x40/0x90
[  779.460198][T20196]  ? clear_bhb_loop+0x40/0x90
[  779.464924][T20196]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  779.470865][T20196] RIP: 0033:0x7f415fd5d68e
[  779.475315][T20196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  779.494962][T20196] RSP: 002b:00007f4160bfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  779.503420][T20196] RAX: ffffffffffffffda RBX: 00007f4160bfe6c0 RCX: 00007f415fd5d68e
[  779.511443][T20196] RDX: 0000000000000001 RSI: 00007f4160bfe0a0 RDI: 0000000000000004
[  779.519457][T20196] RBP: 00007f4160bfe090 R08: 0000000000000000 R09: 0000000000000000
[  779.527464][T20196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  779.535470][T20196] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  779.543491][T20196]  </TASK>
[  779.785222][T20204] FAULT_INJECTION: forcing a failure.
[  779.785222][T20204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  779.831324][T20204] CPU: 1 PID: 20204 Comm: syz.0.4690 Not tainted syzkaller #0
[  779.838978][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  779.849089][T20204] Call Trace:
[  779.852421][T20204]  <TASK>
[  779.855434][T20204]  dump_stack_lvl+0x18c/0x250
[  779.860175][T20204]  ? show_regs_print_info+0x20/0x20
[  779.865418][T20204]  ? load_image+0x420/0x420
[  779.869987][T20204]  ? __might_fault+0xaa/0x120
[  779.874718][T20204]  ? __lock_acquire+0x7d40/0x7d40
[  779.879817][T20204]  should_fail_ex+0x39d/0x4d0
[  779.884564][T20204]  _copy_from_user+0x2f/0xe0
[  779.889223][T20204]  kstrtouint_from_user+0xde/0x170
[  779.894407][T20204]  ? kstrtol_from_user+0x190/0x190
[  779.899613][T20204]  proc_fail_nth_write+0x8f/0x250
[  779.904733][T20204]  ? proc_fail_nth_read+0x260/0x260
[  779.910006][T20204]  ? proc_fail_nth_read+0x260/0x260
[  779.915268][T20204]  vfs_write+0x296/0x990
[  779.919592][T20204]  ? file_end_write+0x250/0x250
[  779.924508][T20204]  ? __fget_files+0x28/0x4b0
[  779.929173][T20204]  ? __fget_files+0x28/0x4b0
[  779.933831][T20204]  ? __fget_files+0x43d/0x4b0
[  779.938605][T20204]  ? __fdget_pos+0x2a3/0x330
[  779.943257][T20204]  ? ksys_write+0x75/0x260
[  779.947745][T20204]  ksys_write+0x150/0x260
[  779.952138][T20204]  ? __ia32_sys_read+0x90/0x90
[  779.956968][T20204]  ? lockdep_hardirqs_on+0x98/0x150
[  779.962214][T20204]  do_syscall_64+0x55/0xb0
[  779.966679][T20204]  ? clear_bhb_loop+0x40/0x90
[  779.971407][T20204]  ? clear_bhb_loop+0x40/0x90
[  779.976141][T20204]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  779.982079][T20204] RIP: 0033:0x7f415fd5d68e
[  779.986541][T20204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  780.006176][T20204] RSP: 002b:00007f4160bfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  780.014627][T20204] RAX: ffffffffffffffda RBX: 00007f4160bfe6c0 RCX: 00007f415fd5d68e
[  780.022624][T20204] RDX: 0000000000000001 RSI: 00007f4160bfe0a0 RDI: 0000000000000004
[  780.030642][T20204] RBP: 00007f4160bfe090 R08: 0000000000000000 R09: 0000000000000000
[  780.038643][T20204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.046642][T20204] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  780.054746][T20204]  </TASK>
[  780.687323][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  780.703272][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  780.711717][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  780.724097][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  780.741196][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  780.749011][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  781.365978][   T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.405164][T20220] chnl_net:caif_netlink_parms(): no params data found
[  781.528408][   T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.601642][T20241] netlink: 'syz.1.4701': attribute type 21 has an invalid length.
[  781.651468][   T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.768164][   T31] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface
[  781.789027][   T31] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.851981][T20220] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.872958][T20220] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.903985][T20220] bridge_slave_0: entered allmulticast mode
[  781.915109][T20220] bridge_slave_0: entered promiscuous mode
[  781.935931][T20220] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.953753][T20220] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.961034][T20220] bridge_slave_1: entered allmulticast mode
[  781.981109][T20220] bridge_slave_1: entered promiscuous mode
[  782.057106][T20220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  782.073231][T20220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  782.187510][T20220] team0: Port device team_slave_0 added
[  782.218756][T20220] team0: Port device team_slave_1 added
[  782.391760][T20220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.404726][T20220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  782.465435][T20220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.513679][T20220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.520697][T20220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  782.581072][T20220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  782.749484][T20220] hsr_slave_0: entered promiscuous mode
[  782.776085][T20220] hsr_slave_1: entered promiscuous mode
[  782.810158][T20220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  782.819691][T20220] Cannot create hsr debugfs directory
[  782.853100][T15004] Bluetooth: hci0: command tx timeout
[  783.161381][T20276] netlink: 'syz.3.4707': attribute type 29 has an invalid length.
[  783.274610][T20276] netlink: 'syz.3.4707': attribute type 29 has an invalid length.
[  783.286046][T20269] netlink: 'syz.3.4707': attribute type 29 has an invalid length.
[  783.421863][T20275] netlink: 'syz.3.4707': attribute type 29 has an invalid length.
[  783.523476][T20283] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4709'.
[  784.302092][T20304] FAULT_INJECTION: forcing a failure.
[  784.302092][T20304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  784.331108][T20304] CPU: 0 PID: 20304 Comm: syz.1.4713 Not tainted syzkaller #0
[  784.338651][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  784.348773][T20304] Call Trace:
[  784.352086][T20304]  <TASK>
[  784.355049][T20304]  dump_stack_lvl+0x18c/0x250
[  784.359767][T20304]  ? show_regs_print_info+0x20/0x20
[  784.364993][T20304]  ? load_image+0x420/0x420
[  784.369536][T20304]  ? __lock_acquire+0x7d40/0x7d40
[  784.374597][T20304]  ? snprintf+0xe9/0x140
[  784.378876][T20304]  should_fail_ex+0x39d/0x4d0
[  784.383592][T20304]  _copy_to_user+0x2f/0xa0
[  784.388036][T20304]  simple_read_from_buffer+0xe7/0x150
[  784.393451][T20304]  proc_fail_nth_read+0x1e8/0x260
[  784.398509][T20304]  ? proc_fault_inject_write+0x360/0x360
[  784.404176][T20304]  ? fsnotify_perm+0x271/0x5e0
[  784.408969][T20304]  ? proc_fault_inject_write+0x360/0x360
[  784.414650][T20304]  vfs_read+0x28b/0x970
[  784.418848][T20304]  ? kernel_read+0x1e0/0x1e0
[  784.423472][T20304]  ? __fget_files+0x28/0x4b0
[  784.428091][T20304]  ? __fget_files+0x28/0x4b0
[  784.432716][T20304]  ? __fget_files+0x43d/0x4b0
[  784.437437][T20304]  ? __fdget_pos+0x2a3/0x330
[  784.442055][T20304]  ? ksys_read+0x75/0x260
[  784.446419][T20304]  ksys_read+0x150/0x260
[  784.450698][T20304]  ? vfs_write+0x990/0x990
[  784.455154][T20304]  ? lockdep_hardirqs_on+0x98/0x150
[  784.460381][T20304]  do_syscall_64+0x55/0xb0
[  784.464817][T20304]  ? clear_bhb_loop+0x40/0x90
[  784.469534][T20304]  ? clear_bhb_loop+0x40/0x90
[  784.474247][T20304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  784.480174][T20304] RIP: 0033:0x7ff88af5d68e
[  784.484618][T20304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  784.504332][T20304] RSP: 002b:00007ff88be12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  784.512788][T20304] RAX: ffffffffffffffda RBX: 00007ff88be136c0 RCX: 00007ff88af5d68e
[  784.520803][T20304] RDX: 000000000000000f RSI: 00007ff88be130a0 RDI: 0000000000000006
[  784.528797][T20304] RBP: 00007ff88be13090 R08: 0000000000000000 R09: 0000000000000000
[  784.536819][T20304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  784.544812][T20304] R13: 00007ff88b216038 R14: 00007ff88b215fa0 R15: 00007ffce2b780b8
[  784.552824][T20304]  </TASK>
[  784.934325][T15004] Bluetooth: hci0: command tx timeout
[  785.198227][T20220] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  785.277161][T20317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.326210][T20220] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  785.362403][T20220] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  785.412437][T20220] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  785.891150][T20220] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.020439][T20220] 8021q: adding VLAN 0 to HW filter on device team0
[  786.080367][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.087655][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.152698][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.159928][ T8503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.013243][T15004] Bluetooth: hci0: command tx timeout
[  787.341252][T20364] netlink: 'syz.3.4725': attribute type 29 has an invalid length.
[  787.369796][T20364] netlink: 'syz.3.4725': attribute type 29 has an invalid length.
[  787.386156][T20366] netlink: 'syz.3.4725': attribute type 29 has an invalid length.
[  787.401613][T20220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.431055][T20364] netlink: 'syz.3.4725': attribute type 29 has an invalid length.
[  787.499273][T20364] netlink: 'syz.3.4725': attribute type 29 has an invalid length.
[  787.555719][T20220] veth0_vlan: entered promiscuous mode
[  787.618018][T20220] veth1_vlan: entered promiscuous mode
[  787.772094][   T31] hsr_slave_0: left promiscuous mode
[  787.810180][   T31] hsr_slave_1: left promiscuous mode
[  787.827071][   T31] hsr0: left allmulticast mode
[  787.832111][   T31] bridge0: port 3(hsr0) entered disabled state
[  787.870029][   T31] bridge_slave_1: left allmulticast mode
[  787.879669][   T31] bridge_slave_1: left promiscuous mode
[  787.885820][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.908723][   T31] bridge_slave_0: left allmulticast mode
[  787.918883][   T31] bridge_slave_0: left promiscuous mode
[  787.924877][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.959649][   T31] veth1_vlan: left promiscuous mode
[  789.095704][T15004] Bluetooth: hci0: command tx timeout
[  790.173232][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.285306][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  790.922150][   T31] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  790.932298][   T31] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  790.955059][   T31] bond0 (unregistering): Released all slaves
[  791.273299][T20394] netlink: 'syz.3.4732': attribute type 21 has an invalid length.
[  791.281298][T20394] IPv6: NLM_F_CREATE should be specified when creating new route
[  791.338377][T20220] veth0_macvtap: entered promiscuous mode
[  791.501360][T20220] veth1_macvtap: entered promiscuous mode
[  791.705568][T20220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.736824][T20220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.748385][T20220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.759695][T20220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.795842][T20220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.894832][T20220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.919729][T20220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.934885][T20220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.948401][T20220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.964928][T20220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.021910][T20220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.080259][T20220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.119768][T20220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.128966][T20220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.552049][ T8501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.585802][ T8501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.621149][T20406] FAULT_INJECTION: forcing a failure.
[  792.621149][T20406] name failslab, interval 1, probability 0, space 0, times 0
[  792.686145][T20406] CPU: 1 PID: 20406 Comm: syz.1.4735 Not tainted syzkaller #0
[  792.693713][T20406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  792.703840][T20406] Call Trace:
[  792.707180][T20406]  <TASK>
[  792.710175][T20406]  dump_stack_lvl+0x18c/0x250
[  792.714932][T20406]  ? show_regs_print_info+0x20/0x20
[  792.720201][T20406]  ? load_image+0x420/0x420
[  792.724796][T20406]  ? __might_sleep+0xe0/0xe0
[  792.729474][T20406]  ? __lock_acquire+0x7d40/0x7d40
[  792.734600][T20406]  should_fail_ex+0x39d/0x4d0
[  792.739389][T20406]  should_failslab+0x9/0x20
[  792.743977][T20406]  slab_pre_alloc_hook+0x59/0x310
[  792.749096][T20406]  ? __lock_acquire+0x7d40/0x7d40
[  792.754199][T20406]  ? security_prepare_creds+0x4b/0x130
[  792.759734][T20406]  ? security_prepare_creds+0x4b/0x130
[  792.765246][T20406]  __kmem_cache_alloc_node+0x53/0x250
[  792.770678][T20406]  ? security_prepare_creds+0x4b/0x130
[  792.776176][T20406]  __kmalloc+0xa4/0x230
[  792.780390][T20406]  security_prepare_creds+0x4b/0x130
[  792.785736][T20406]  prepare_creds+0x427/0x5d0
[  792.790395][T20406]  copy_creds+0x105/0xa70
[  792.794794][T20406]  copy_process+0x953/0x3dc0
[  792.799509][T20406]  ? get_pid_task+0x20/0x1e0
[  792.804159][T20406]  ? __pidfd_prepare+0x140/0x140
[  792.809184][T20406]  kernel_clone+0x24b/0x8a0
[  792.813744][T20406]  ? create_io_thread+0x190/0x190
[  792.818864][T20406]  __x64_sys_clone+0x1b7/0x230
[  792.823678][T20406]  ? __ia32_sys_vfork+0x140/0x140
[  792.828779][T20406]  ? lock_chain_count+0x20/0x20
[  792.833691][T20406]  ? lockdep_hardirqs_on+0x98/0x150
[  792.838950][T20406]  do_syscall_64+0x55/0xb0
[  792.843415][T20406]  ? clear_bhb_loop+0x40/0x90
[  792.848149][T20406]  ? clear_bhb_loop+0x40/0x90
[  792.852881][T20406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  792.858818][T20406] RIP: 0033:0x7ff88af9ce59
[  792.863270][T20406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  792.883018][T20406] RSP: 002b:00007ff88be12fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  792.891504][T20406] RAX: ffffffffffffffda RBX: 00007ff88b215fa0 RCX: 00007ff88af9ce59
[  792.899541][T20406] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400
[  792.907579][T20406] RBP: 00007ff88be13090 R08: 0000000000000000 R09: 0000000000000000
[  792.915609][T20406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  792.923623][T20406] R13: 00007ff88b216038 R14: 00007ff88b215fa0 R15: 00007ffce2b780b8
[  792.931677][T20406]  </TASK>
[  792.964827][ T8501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.974538][ T8501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  797.424943][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  797.435871][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  797.466800][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  797.490016][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  797.506011][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  797.514786][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  799.474796][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.573191][T15004] Bluetooth: hci3: command tx timeout
[  799.676390][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.888429][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.976621][T20435] chnl_net:caif_netlink_parms(): no params data found
[  800.179651][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.453302][T20435] bridge0: port 1(bridge_slave_0) entered blocking state
[  800.460493][T20435] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.486417][T20435] bridge_slave_0: entered allmulticast mode
[  800.504353][T20435] bridge_slave_0: entered promiscuous mode
[  800.589576][T20435] bridge0: port 2(bridge_slave_1) entered blocking state
[  800.611120][T20435] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.633481][T20435] bridge_slave_1: entered allmulticast mode
[  800.641411][T20435] bridge_slave_1: entered promiscuous mode
[  800.770543][T20435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.815724][T20435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.023797][T20487] netlink: 'syz.1.4756': attribute type 29 has an invalid length.
[  801.135135][T20435] team0: Port device team_slave_0 added
[  801.155096][T20487] netlink: 'syz.1.4756': attribute type 29 has an invalid length.
[  801.248790][T20435] team0: Port device team_slave_1 added
[  801.267998][T20489] netlink: 'syz.1.4756': attribute type 29 has an invalid length.
[  801.291894][T20490] netlink: 'syz.1.4756': attribute type 29 has an invalid length.
[  801.432972][T20487] netlink: 'syz.1.4756': attribute type 29 has an invalid length.
[  801.571227][T20435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.603064][T20435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.669123][T15004] Bluetooth: hci3: command tx timeout
[  801.753146][T20435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  801.785565][T20435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  801.792582][T20435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.880815][T20435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.138729][T20508] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4758'.
[  802.180070][T20508] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.4758'.
[  802.274725][T20435] hsr_slave_0: entered promiscuous mode
[  802.294830][T20435] hsr_slave_1: entered promiscuous mode
[  802.314126][T20435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  802.321763][T20435] Cannot create hsr debugfs directory
[  802.440898][T20518] FAULT_INJECTION: forcing a failure.
[  802.440898][T20518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  802.512192][T20518] CPU: 1 PID: 20518 Comm: syz.1.4761 Not tainted syzkaller #0
[  802.519738][T20518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  802.529821][T20518] Call Trace:
[  802.533129][T20518]  <TASK>
[  802.536095][T20518]  dump_stack_lvl+0x18c/0x250
[  802.540804][T20518]  ? show_regs_print_info+0x20/0x20
[  802.546030][T20518]  ? load_image+0x420/0x420
[  802.550574][T20518]  ? __might_fault+0xaa/0x120
[  802.555288][T20518]  ? __lock_acquire+0x7d40/0x7d40
[  802.560347][T20518]  should_fail_ex+0x39d/0x4d0
[  802.565071][T20518]  _copy_to_user+0x2f/0xa0
[  802.569519][T20518]  bpf_verifier_vlog+0x50f/0x870
[  802.574499][T20518]  __btf_verifier_log+0xe3/0x140
[  802.579479][T20518]  ? btf_check_sec_info+0x350/0x350
[  802.584713][T20518]  ? __lock_acquire+0x7d40/0x7d40
[  802.589770][T20518]  ? btf_parse_hdr+0x1f5/0x710
[  802.594564][T20518]  btf_parse_hdr+0x2fe/0x710
[  802.599186][T20518]  btf_new_fd+0x397/0x9f0
[  802.603560][T20518]  ? bpf_btf_show_fdinfo+0x80/0x80
[  802.608701][T20518]  ? capable+0x88/0xe0
[  802.612819][T20518]  __sys_bpf+0x670/0x890
[  802.617085][T20518]  ? bpf_link_show_fdinfo+0x390/0x390
[  802.622496][T20518]  ? lock_chain_count+0x20/0x20
[  802.627382][T20518]  __x64_sys_bpf+0x7c/0x90
[  802.631829][T20518]  do_syscall_64+0x55/0xb0
[  802.636275][T20518]  ? clear_bhb_loop+0x40/0x90
[  802.640989][T20518]  ? clear_bhb_loop+0x40/0x90
[  802.645747][T20518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.651685][T20518] RIP: 0033:0x7ff88af9ce59
[  802.656131][T20518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.675775][T20518] RSP: 002b:00007ff88be13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  802.684236][T20518] RAX: ffffffffffffffda RBX: 00007ff88b215fa0 RCX: 00007ff88af9ce59
[  802.692228][T20518] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012
[  802.700256][T20518] RBP: 00007ff88be13090 R08: 0000000000000000 R09: 0000000000000000
[  802.708294][T20518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  802.716287][T20518] R13: 00007ff88b216038 R14: 00007ff88b215fa0 R15: 00007ffce2b780b8
[  802.724289][T20518]  </TASK>
[  802.861064][   T11] gretap0 (unregistering): left allmulticast mode
[  802.882973][   T11] gretap0 (unregistering): left promiscuous mode
[  802.889469][   T11] Ÿë
: port 2(gretap0) entered disabled state
[  803.185702][T20531] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4763'.
[  803.743695][T15004] Bluetooth: hci3: command tx timeout
[  803.779129][T20539] FAULT_INJECTION: forcing a failure.
[  803.779129][T20539] name failslab, interval 1, probability 0, space 0, times 0
[  803.792698][T20539] CPU: 0 PID: 20539 Comm: syz.2.4765 Not tainted syzkaller #0
[  803.800309][T20539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  803.810415][T20539] Call Trace:
[  803.813746][T20539]  <TASK>
[  803.816724][T20539]  dump_stack_lvl+0x18c/0x250
[  803.821461][T20539]  ? show_regs_print_info+0x20/0x20
[  803.826714][T20539]  ? load_image+0x420/0x420
[  803.831386][T20539]  ? __might_sleep+0xe0/0xe0
[  803.836032][T20539]  ? __lock_acquire+0x7d40/0x7d40
[  803.841105][T20539]  ? lockdep_hardirqs_on+0x98/0x150
[  803.846363][T20539]  should_fail_ex+0x39d/0x4d0
[  803.851078][T20539]  should_failslab+0x9/0x20
[  803.855614][T20539]  slab_pre_alloc_hook+0x59/0x310
[  803.860684][T20539]  kmem_cache_alloc+0x5a/0x2d0
[  803.865493][T20539]  ? getname_kernel+0x5a/0x2f0
[  803.870319][T20539]  getname_kernel+0x5a/0x2f0
[  803.874962][T20539]  kern_path+0x1d/0x50
[  803.879068][T20539]  create_local_trace_uprobe+0xae/0x6e0
[  803.884651][T20539]  ? __might_fault+0xaa/0x120
[  803.889359][T20539]  ? bpf_get_uprobe_info+0x520/0x520
[  803.894688][T20539]  ? __might_fault+0xaa/0x120
[  803.899393][T20539]  ? _copy_from_user+0xa5/0xe0
[  803.904189][T20539]  perf_uprobe_init+0xf3/0x190
[  803.908984][T20539]  perf_uprobe_event_init+0xe6/0x180
[  803.914305][T20539]  perf_try_init_event+0x12b/0x3c0
[  803.919462][T20539]  perf_event_alloc+0xfa4/0x21b0
[  803.924445][T20539]  ? perf_event_alloc+0xc06/0x21b0
[  803.929590][T20539]  ? find_lively_task_by_vpid+0x19/0x290
[  803.935361][T20539]  __se_sys_perf_event_open+0x740/0x1c50
[  803.941038][T20539]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  803.946717][T20539]  ? syscall_enter_from_user_mode+0x2e/0x80
[  803.952652][T20539]  ? __x64_sys_perf_event_open+0x20/0xc0
[  803.958327][T20539]  do_syscall_64+0x55/0xb0
[  803.962785][T20539]  ? clear_bhb_loop+0x40/0x90
[  803.967502][T20539]  ? clear_bhb_loop+0x40/0x90
[  803.972222][T20539]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  803.978156][T20539] RIP: 0033:0x7fc150f9ce59
[  803.982593][T20539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.002227][T20539] RSP: 002b:00007fc151f2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  804.010751][T20539] RAX: ffffffffffffffda RBX: 00007fc151215fa0 RCX: 00007fc150f9ce59
[  804.018746][T20539] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000200000000000
[  804.026756][T20539] RBP: 00007fc151f2f090 R08: 0000000000000000 R09: 0000000000000000
[  804.034781][T20539] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  804.042781][T20539] R13: 00007fc151216038 R14: 00007fc151215fa0 R15: 00007ffe162dcf98
[  804.050796][T20539]  </TASK>
[  804.970103][T20435] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  805.123270][T20435] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  805.166679][T20435] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  805.227550][T20435] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  805.585610][T20586] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4774'.
[  805.813322][T15004] Bluetooth: hci3: command tx timeout
[  805.913852][T20435] 8021q: adding VLAN 0 to HW filter on device bond0
[  806.109341][T20435] 8021q: adding VLAN 0 to HW filter on device team0
[  806.145854][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.153188][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  806.250122][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.257449][ T8508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.420366][T20435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  806.900837][T20624] FAULT_INJECTION: forcing a failure.
[  806.900837][T20624] name failslab, interval 1, probability 0, space 0, times 0
[  807.018708][T20624] CPU: 0 PID: 20624 Comm: syz.2.4780 Not tainted syzkaller #0
[  807.026267][T20624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  807.036453][T20624] Call Trace:
[  807.039769][T20624]  <TASK>
[  807.042744][T20624]  dump_stack_lvl+0x18c/0x250
[  807.047474][T20624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  807.053665][T20624]  ? show_regs_print_info+0x20/0x20
[  807.058891][T20624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  807.065082][T20624]  should_fail_ex+0x39d/0x4d0
[  807.069804][T20624]  should_failslab+0x9/0x20
[  807.074352][T20624]  slab_pre_alloc_hook+0x59/0x310
[  807.079415][T20624]  ? __lock_acquire+0x7d40/0x7d40
[  807.084471][T20624]  kmem_cache_alloc+0x5a/0x2d0
[  807.089295][T20624]  ? security_file_alloc+0x34/0x120
[  807.094524][T20624]  security_file_alloc+0x34/0x120
[  807.099580][T20624]  init_file+0x94/0x1f0
[  807.103776][T20624]  alloc_empty_file+0xb7/0x1d0
[  807.108583][T20624]  path_openat+0x113/0x3230
[  807.113121][T20624]  ? __kasan_slab_alloc+0x6c/0x80
[  807.118172][T20624]  ? do_sys_openat2+0xda/0x1d0
[  807.122969][T20624]  ? __x64_sys_openat+0x139/0x160
[  807.128042][T20624]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  807.134145][T20624]  ? verify_lock_unused+0x140/0x140
[  807.139376][T20624]  ? do_filp_open+0x430/0x430
[  807.144086][T20624]  ? __virt_addr_valid+0x18c/0x540
[  807.149232][T20624]  do_filp_open+0x1f5/0x430
[  807.153764][T20624]  ? vfs_tmpfile+0x490/0x490
[  807.158397][T20624]  ? _raw_spin_unlock+0x28/0x40
[  807.163272][T20624]  ? alloc_fd+0x58f/0x630
[  807.167640][T20624]  do_sys_openat2+0x134/0x1d0
[  807.172368][T20624]  ? do_sys_open+0xe0/0xe0
[  807.176816][T20624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  807.183015][T20624]  __x64_sys_openat+0x139/0x160
[  807.187901][T20624]  do_syscall_64+0x55/0xb0
[  807.192342][T20624]  ? clear_bhb_loop+0x40/0x90
[  807.197061][T20624]  ? clear_bhb_loop+0x40/0x90
[  807.201771][T20624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  807.207695][T20624] RIP: 0033:0x7fc150f9ce59
[  807.212150][T20624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.231779][T20624] RSP: 002b:00007fc151f0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  807.240221][T20624] RAX: ffffffffffffffda RBX: 00007fc151216090 RCX: 00007fc150f9ce59
[  807.248224][T20624] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  807.256239][T20624] RBP: 00007fc151f0e090 R08: 0000000000000000 R09: 0000000000000000
[  807.264238][T20624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  807.272228][T20624] R13: 00007fc151216128 R14: 00007fc151216090 R15: 00007ffe162dcf98
[  807.280242][T20624]  </TASK>
[  807.507794][T20435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.834249][T20435] veth0_vlan: entered promiscuous mode
[  807.992341][T20435] veth1_vlan: entered promiscuous mode
[  808.561979][T20659] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4786'.
[  808.578977][T20659] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  808.631141][T20657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  808.699108][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  808.705638][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  808.727081][   T11] veth0_to_team: left allmulticast mode
[  808.741823][   T11] veth0_to_team: left promiscuous mode
[  808.759180][   T11] Ÿë
: port 1(veth0_to_team) entered disabled state
[  808.791716][   T11] hsr_slave_0: left promiscuous mode
[  808.807412][   T11] hsr_slave_1: left promiscuous mode
[  808.841099][   T11] veth1_vlan: left promiscuous mode
[  822.952979][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  822.966918][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  822.977426][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  822.986523][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  822.995891][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  823.003704][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  824.969110][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  824.978138][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  824.987568][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  824.996191][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  825.005036][ T5784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  825.013607][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  825.093262][T15004] Bluetooth: hci1: command tx timeout
[  826.013156][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  826.024127][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  826.031937][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  826.043778][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  826.051634][ T5784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  826.061259][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  827.093007][T15004] Bluetooth: hci5: command tx timeout
[  827.180752][T15004] Bluetooth: hci1: command tx timeout
[  828.133483][T15004] Bluetooth: hci6: command tx timeout
[  829.173768][T15004] Bluetooth: hci5: command tx timeout
[  829.253027][T15004] Bluetooth: hci1: command tx timeout
[  830.212830][T15004] Bluetooth: hci6: command tx timeout
[  831.252793][T15004] Bluetooth: hci5: command tx timeout
[  831.333161][T15004] Bluetooth: hci1: command tx timeout
[  832.292944][T15004] Bluetooth: hci6: command tx timeout
[  833.333105][T15004] Bluetooth: hci5: command tx timeout
[  834.373088][T15004] Bluetooth: hci6: command tx timeout
[  855.154683][ T5784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  855.164093][ T5784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  855.180669][ T5784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  855.193527][ T5784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  855.201290][ T5784] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  855.208938][ T5784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  857.253053][ T5784] Bluetooth: hci7: command tx timeout
[  859.332923][ T5784] Bluetooth: hci7: command tx timeout
[  861.413526][ T5784] Bluetooth: hci7: command tx timeout
[  863.492871][ T5784] Bluetooth: hci7: command tx timeout
[  870.137435][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  870.147239][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  883.293838][T15004] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  883.302290][T15004] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  883.311578][T15004] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  883.330160][T15004] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  883.339081][T15004] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  883.346455][T15004] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  885.321089][T15004] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  885.331599][T15004] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  885.341281][T15004] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  885.350751][T15004] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  885.359280][T15004] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  885.367949][T15004] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  885.413159][T15004] Bluetooth: hci8: command tx timeout
[  886.347611][ T5784] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  886.361067][ T5784] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  886.369501][ T5784] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  886.384821][ T5784] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  886.396763][ T5784] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  886.410878][ T5784] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  887.413057][T15004] Bluetooth: hci9: command tx timeout
[  887.493023][T15004] Bluetooth: hci8: command tx timeout
[  888.453026][T15004] Bluetooth: hci10: command tx timeout
[  889.492819][T15004] Bluetooth: hci9: command tx timeout
[  889.572859][T15004] Bluetooth: hci8: command tx timeout
[  890.532947][T15004] Bluetooth: hci10: command tx timeout
[  891.572919][ T5784] Bluetooth: hci9: command tx timeout
[  891.653022][ T5784] Bluetooth: hci8: command tx timeout
[  892.612939][ T5784] Bluetooth: hci10: command tx timeout
[  892.693037][ T5784] Bluetooth: hci4: command 0x0406 tx timeout
[  893.652813][T15004] Bluetooth: hci9: command tx timeout
[  894.692748][T15004] Bluetooth: hci10: command tx timeout
[  902.932866][ T5784] Bluetooth: hci0: command 0x0406 tx timeout
[  915.425327][ T5784] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  915.440186][ T5784] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  915.448892][ T5784] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  915.459313][ T5784] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  915.467558][ T5784] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  915.475301][ T5784] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  917.573076][T15004] Bluetooth: hci11: command tx timeout
[  919.652795][T15004] Bluetooth: hci11: command tx timeout
[  921.732851][ T5784] Bluetooth: hci11: command tx timeout
[  923.412853][ T5784] Bluetooth: hci3: command 0x0406 tx timeout
[  923.812865][T15004] Bluetooth: hci11: command tx timeout
[  931.577836][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  931.586471][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  943.532876][ T5784] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  943.542959][ T5784] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  943.551020][ T5784] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  943.560597][ T5784] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  943.579896][ T5784] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  943.590355][ T5784] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  945.581856][ T5784] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  945.592465][ T5784] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  945.600519][ T5784] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  945.609916][ T5784] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  945.619040][ T5784] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  945.628156][ T5784] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  945.653365][ T5784] Bluetooth: hci12: command tx timeout
[  946.598617][T15004] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  946.608135][T15004] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  946.617856][T15004] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  946.628342][T15004] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  946.637172][T15004] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  946.645285][T15004] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  947.652830][T20749] Bluetooth: hci13: command tx timeout
[  947.732959][T20749] Bluetooth: hci12: command tx timeout
[  948.692854][T20749] Bluetooth: hci14: command tx timeout
[  949.013015][T20749] Bluetooth: hci5: command 0x0406 tx timeout
[  949.021206][T20748] Bluetooth: hci1: command 0x0406 tx timeout
[  949.028342][ T5784] Bluetooth: hci6: command 0x0406 tx timeout
[  949.742698][T15004] Bluetooth: hci13: command tx timeout
[  949.812919][T15004] Bluetooth: hci12: command tx timeout
[  950.772702][T15004] Bluetooth: hci14: command tx timeout
[  951.826387][T15004] Bluetooth: hci13: command tx timeout
[  951.902828][T15004] Bluetooth: hci12: command tx timeout
[  952.852798][T15004] Bluetooth: hci14: command tx timeout
[  953.892794][T15004] Bluetooth: hci13: command tx timeout
[  954.932744][T15004] Bluetooth: hci14: command tx timeout
[  961.012867][   T29] INFO: task kworker/0:2:787 blocked for more than 143 seconds.
[  961.020569][   T29]       Not tainted syzkaller #0
[  961.025628][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  961.046921][   T29] task:kworker/0:2     state:D stack:22928 pid:787   ppid:2      flags:0x00004000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  961.056663][   T29] Workqueue: events switchdev_deferred_process_work
[  961.072777][   T29] Call Trace:
[  961.076112][   T29]  <TASK>
[  961.079183][   T29]  __schedule+0x1553/0x45a0
[  961.102739][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[  961.107854][   T29]  ? mark_lock+0x94/0x320
[  961.112228][   T29]  ? asan.module_dtor+0x20/0x20
[  961.132519][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  961.175933][   T29]  schedule+0xbd/0x170
[  961.180086][   T29]  schedule_preempt_disabled+0x13/0x20
[  961.188685][   T29]  __mutex_lock+0x6a9/0xcc0
[  961.203956][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  961.208711][   T29]  ? switchdev_deferred_process_work+0xe/0x20
[  961.215020][   T29]  ? mutex_lock_nested+0x20/0x20
[  961.220199][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  961.230936][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  961.236916][   T29]  switchdev_deferred_process_work+0xe/0x20
[  961.247073][   T29]  process_scheduled_works+0xa5d/0x15d0
[  961.258638][   T29]  ? worker_attach_to_pool+0x380/0x380
[  961.264561][   T29]  ? assign_work+0x3d2/0x5d0
[  961.269214][   T29]  worker_thread+0xa55/0xfc0
[  961.273943][   T29]  kthread+0x2fa/0x390
[  961.278056][   T29]  ? pr_cont_work+0x560/0x560
[  961.283481][   T29]  ? kthread_blkcg+0xd0/0xd0
[  961.288122][   T29]  ret_from_fork+0x48/0x80
[  961.292577][   T29]  ? kthread_blkcg+0xd0/0xd0
[  961.297594][   T29]  ret_from_fork_asm+0x11/0x20
[  961.302462][   T29]  </TASK>
[  961.305762][   T29] INFO: task kworker/u4:6:1005 blocked for more than 143 seconds.
[  961.314679][   T29]       Not tainted syzkaller #0
[  961.319655][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  961.328532][   T29] task:kworker/u4:6    state:D stack:23288 pid:1005  ppid:2      flags:0x00004000
[  961.345593][   T29] Workqueue: ipv6_addrconf addrconf_dad_work
[  961.351649][   T29] Call Trace:
[  961.357697][   T29]  <TASK>
[  961.360681][   T29]  __schedule+0x1553/0x45a0
[  961.365359][   T29]  ? asan.module_dtor+0x20/0x20
[  961.370260][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  961.375145][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  961.380657][   T29]  ? kthread_data+0x4f/0xc0
[  961.386013][   T29]  ? wq_worker_sleeping+0x63/0x240
[  961.391203][   T29]  schedule+0xbd/0x170
[  961.395443][   T29]  schedule_preempt_disabled+0x13/0x20
[  961.400940][   T29]  __mutex_lock+0x6a9/0xcc0
[  961.406191][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  961.410951][   T29]  ? addrconf_dad_work+0xd4/0x1530
[  961.416655][   T29]  ? mutex_lock_nested+0x20/0x20
[  961.421660][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  961.428992][   T29]  addrconf_dad_work+0xd4/0x1530
[  961.434317][   T29]  ? ipv6_get_saddr_eval+0xee0/0xee0
[  961.439660][   T29]  ? read_lock_is_recursive+0x20/0x20
[  961.445401][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  961.450654][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  961.456537][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  961.463103][   T29]  process_scheduled_works+0xa5d/0x15d0
[  961.468744][   T29]  ? worker_attach_to_pool+0x380/0x380
[  961.474654][   T29]  ? assign_work+0x3d2/0x5d0
[  961.479341][   T29]  worker_thread+0xa55/0xfc0
[  961.484349][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  961.490306][   T29]  ? _raw_spin_unlock+0x40/0x40
[  961.495736][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  961.501710][   T29]  kthread+0x2fa/0x390
[  961.506241][   T29]  ? pr_cont_work+0x560/0x560
[  961.510987][   T29]  ? kthread_blkcg+0xd0/0xd0
[  961.516142][   T29]  ret_from_fork+0x48/0x80
[  961.520627][   T29]  ? kthread_blkcg+0xd0/0xd0
[  961.525624][   T29]  ret_from_fork_asm+0x11/0x20
[  961.530469][   T29]  </TASK>
[  961.534077][   T29] INFO: task kworker/u4:1:20382 blocked for more than 143 seconds.
[  961.542008][   T29]       Not tainted syzkaller #0
[  961.547385][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  961.556406][   T29] task:kworker/u4:1    state:D stack:25032 pid:20382 ppid:2      flags:0x00004000
[  961.568573][   T29] Workqueue: events_unbound linkwatch_event
[  961.575406][   T29] Call Trace:
[  961.578723][   T29]  <TASK>
[  961.581697][   T29]  __schedule+0x1553/0x45a0
[  961.589984][   T29]  ? asan.module_dtor+0x20/0x20
[  961.594951][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  961.599675][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  961.606157][   T29]  ? kthread_data+0x4f/0xc0
[  961.610724][   T29]  ? wq_worker_sleeping+0x63/0x240
[  961.615953][   T29]  schedule+0xbd/0x170
[  961.620082][   T29]  schedule_preempt_disabled+0x13/0x20
[  961.625941][   T29]  __mutex_lock+0x6a9/0xcc0
[  961.630504][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  961.635297][   T29]  ? linkwatch_event+0xe/0x60
[  961.640062][   T29]  ? mutex_lock_nested+0x20/0x20
[  961.646108][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  961.651368][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  961.657292][   T29]  linkwatch_event+0xe/0x60
[  961.662026][   T29]  process_scheduled_works+0xa5d/0x15d0
[  961.668502][   T29]  ? worker_attach_to_pool+0x380/0x380
[  961.674303][   T29]  ? assign_work+0x3d2/0x5d0
[  961.678967][   T29]  worker_thread+0xa55/0xfc0
[  961.684898][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  961.690856][   T29]  ? _raw_spin_unlock+0x40/0x40
[  961.696248][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  961.702229][   T29]  kthread+0x2fa/0x390
[  961.706841][   T29]  ? pr_cont_work+0x560/0x560
[  961.711589][   T29]  ? kthread_blkcg+0xd0/0xd0
[  961.716695][   T29]  ret_from_fork+0x48/0x80
[  961.721184][   T29]  ? kthread_blkcg+0xd0/0xd0
[  961.726262][   T29]  ret_from_fork_asm+0x11/0x20
[  961.731098][   T29]  </TASK>
[  961.735174][   T29] INFO: task syz-executor:20435 blocked for more than 144 seconds.
[  961.745884][   T29]       Not tainted syzkaller #0
[  961.750871][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  961.759702][   T29] task:syz-executor    state:D stack:21736 pid:20435 ppid:1      flags:0x00004004
[  961.773201][   T29] Call Trace:
[  961.776527][   T29]  <TASK>
[  961.779490][   T29]  __schedule+0x1553/0x45a0
[  961.785134][   T29]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  961.791335][   T29]  ? asan.module_dtor+0x20/0x20
[  961.796306][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  961.801035][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  961.806615][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  961.812875][   T29]  schedule+0xbd/0x170
[  961.816999][   T29]  schedule_preempt_disabled+0x13/0x20
[  961.822489][   T29]  __mutex_lock+0x6a9/0xcc0
[  961.827106][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  961.831851][   T29]  ? rtnetlink_rcv_msg+0x811/0xfa0
[  961.838186][   T29]  ? mutex_lock_nested+0x20/0x20
[  961.845901][   T29]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  961.851073][   T29]  rtnetlink_rcv_msg+0x811/0xfa0
[  961.857102][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  961.862358][   T29]  ? rtnetlink_bind+0x80/0x80
[  961.870430][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  961.877608][   T29]  ? lock_chain_count+0x20/0x20
[  961.882539][   T29]  ? __local_bh_enable_ip+0x13a/0x1c0
[  961.888133][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  961.894675][   T29]  ? __local_bh_enable_ip+0x13a/0x1c0
[  961.900108][   T29]  ? _local_bh_enable+0xa0/0xa0
[  961.906199][   T29]  ? __dev_queue_xmit+0x265/0x3660
[  961.911372][   T29]  ? __dev_queue_xmit+0x265/0x3660
[  961.916607][   T29]  ? __dev_queue_xmit+0x1b2c/0x3660
[  961.921888][   T29]  ? __dev_queue_xmit+0x265/0x3660
[  961.927173][   T29]  ? ref_tracker_free+0x690/0x840
[  961.932267][   T29]  netlink_rcv_skb+0x241/0x4d0
[  961.937123][   T29]  ? rtnetlink_bind+0x80/0x80
[  961.941937][   T29]  ? netlink_ack+0x1180/0x1180
[  961.947639][   T29]  ? __lock_acquire+0x7d40/0x7d40
[  961.954989][   T29]  ? netlink_deliver_tap+0x2e/0x1b0
[  961.960248][   T29]  netlink_unicast+0x751/0x8d0
[  961.965407][   T29]  netlink_sendmsg+0x8d0/0xbf0
[  961.970600][   T29]  ? netlink_getsockopt+0x590/0x590
[  961.976042][   T29]  ? aa_sock_msg_perm+0x94/0x150
[  961.981103][   T29]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  961.986617][   T29]  ? security_socket_sendmsg+0x80/0xa0
[  961.992176][   T29]  __sys_sendto+0x4a9/0x6b0
[  961.996787][   T29]  ? __ia32_sys_getpeername+0x90/0x90
[  962.002321][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  962.008657][   T29]  ? lock_chain_count+0x20/0x20
[  962.015805][   T29]  __x64_sys_sendto+0xde/0xf0
[  962.020543][   T29]  do_syscall_64+0x55/0xb0
[  962.025413][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.030144][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.035448][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.041412][   T29] RIP: 0033:0x7fcef455d68e
[  962.046324][   T29] RSP: 002b:00007ffd61cd3708 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  962.055107][   T29] RAX: ffffffffffffffda RBX: 0000555569f98500 RCX: 00007fcef455d68e
[  962.063379][   T29] RDX: 0000000000000028 RSI: 00007fcef5344670 RDI: 0000000000000003
[  962.071398][   T29] RBP: 0000000000000001 R08: 00007ffd61cd3784 R09: 000000000000000c
[  962.080204][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  962.088488][   T29] R13: 0000000000000000 R14: 00007fcef5344670 R15: 0000000000000000
[  962.096815][   T29]  </TASK>
[  962.099941][   T29] INFO: task syz.0.4784:20639 blocked for more than 144 seconds.
[  962.108106][   T29]       Not tainted syzkaller #0
[  962.113341][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  962.122052][   T29] task:syz.0.4784      state:D stack:24840 pid:20639 ppid:13799  flags:0x00004006
[  962.131715][   T29] Call Trace:
[  962.135309][   T29]  <TASK>
[  962.138374][   T29]  __schedule+0x1553/0x45a0
[  962.143373][   T29]  ? asan.module_dtor+0x20/0x20
[  962.148291][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  962.153404][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  962.158929][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  962.165569][   T29]  schedule+0xbd/0x170
[  962.169706][   T29]  schedule_preempt_disabled+0x13/0x20
[  962.175950][   T29]  __mutex_lock+0x6a9/0xcc0
[  962.180520][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  962.185845][   T29]  ? wg_netns_pre_exit+0x1c/0x1c0
[  962.191020][   T29]  ? mutex_lock_nested+0x20/0x20
[  962.196361][   T29]  ? __kmem_cache_free+0xba/0x1e0
[  962.201483][   T29]  ? net_generic+0x1e/0x240
[  962.207450][   T29]  ? net_generic+0x1e/0x240
[  962.212017][   T29]  wg_netns_pre_exit+0x1c/0x1c0
[  962.217896][   T29]  setup_net+0x648/0xa30
[  962.222211][   T29]  ? copy_net_ns+0x5e0/0x5e0
[  962.229126][   T29]  ? copy_net_ns+0x351/0x5e0
[  962.235932][   T29]  ? down_read_killable+0x1d0/0x340
[  962.241220][   T29]  copy_net_ns+0x36d/0x5e0
[  962.247673][   T29]  create_new_namespaces+0x3d3/0x6f0
[  962.253138][   T29]  ? copy_namespaces+0x5c/0x4a0
[  962.258049][   T29]  copy_namespaces+0x430/0x4a0
[  962.266495][   T29]  copy_process+0x1724/0x3dc0
[  962.271261][   T29]  ? copy_process+0x96e/0x3dc0
[  962.276878][   T29]  ? try_to_wake_up+0x781/0x1190
[  962.282859][   T29]  ? __pidfd_prepare+0x140/0x140
[  962.287847][   T29]  ? wake_up_q+0xca/0x100
[  962.292235][   T29]  kernel_clone+0x24b/0x8a0
[  962.297891][   T29]  ? futex_wake_mark+0x150/0x150
[  962.302947][   T29]  ? create_io_thread+0x190/0x190
[  962.308017][   T29]  ? do_ip_setsockopt+0x1db9/0x2df0
[  962.314396][   T29]  ? do_futex+0x35d/0x3e0
[  962.318790][   T29]  __x64_sys_clone+0x1b7/0x230
[  962.324000][   T29]  ? __ia32_sys_vfork+0x140/0x140
[  962.329092][   T29]  ? lock_chain_count+0x20/0x20
[  962.335400][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  962.340662][   T29]  do_syscall_64+0x55/0xb0
[  962.346272][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.351052][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.358681][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.365735][   T29] RIP: 0033:0x7f415fd9ce59
[  962.370189][   T29] RSP: 002b:00007f4160bfdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  962.379829][   T29] RAX: ffffffffffffffda RBX: 00007f4160015fa0 RCX: 00007f415fd9ce59
[  962.388218][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040042600
[  962.396489][   T29] RBP: 00007f415fe32d6f R08: 0000000000000000 R09: 0000000000000000
[  962.404790][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  962.413162][   T29] R13: 00007f4160016038 R14: 00007f4160015fa0 R15: 00007ffe9f815918
[  962.421317][   T29]  </TASK>
[  962.424906][   T29] INFO: task syz.1.4787:20671 blocked for more than 144 seconds.
[  962.432922][   T29]       Not tainted syzkaller #0
[  962.437897][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  962.447005][   T29] task:syz.1.4787      state:D stack:29000 pid:20671 ppid:19967  flags:0x00004004
[  962.456638][   T29] Call Trace:
[  962.459962][   T29]  <TASK>
[  962.463348][   T29]  __schedule+0x1553/0x45a0
[  962.467940][   T29]  ? asan.module_dtor+0x20/0x20
[  962.473252][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  962.477984][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  962.484531][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  962.490870][   T29]  schedule+0xbd/0x170
[  962.495342][   T29]  schedule_preempt_disabled+0x13/0x20
[  962.500839][   T29]  __mutex_lock+0x6a9/0xcc0
[  962.506606][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  962.511352][   T29]  ? wext_ioctl_dispatch+0x115/0x600
[  962.517033][   T29]  ? mutex_lock_nested+0x20/0x20
[  962.522034][   T29]  ? dev_load+0x21/0x1f0
[  962.526771][   T29]  ? dev_load+0x21/0x1f0
[  962.531090][   T29]  wext_ioctl_dispatch+0x115/0x600
[  962.536621][   T29]  ? wext_ioctl_dispatch+0x600/0x600
[  962.541964][   T29]  ? iw_handler_get_private+0x1f0/0x1f0
[  962.547969][   T29]  ? wext_handle_ioctl+0x1d0/0x1d0
[  962.553383][   T29]  ? __might_fault+0xaa/0x120
[  962.558110][   T29]  ? __might_fault+0xc6/0x120
[  962.564090][   T29]  ? __might_fault+0xaa/0x120
[  962.568821][   T29]  wext_handle_ioctl+0x117/0x1d0
[  962.574323][   T29]  ? call_commit_handler+0xf0/0xf0
[  962.579523][   T29]  sock_ioctl+0x15d/0x7e0
[  962.584707][   T29]  ? sock_poll+0x3e0/0x3e0
[  962.589200][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  962.594550][   T29]  ? security_file_ioctl+0x80/0xa0
[  962.599726][   T29]  ? sock_poll+0x3e0/0x3e0
[  962.604604][   T29]  __se_sys_ioctl+0xfd/0x170
[  962.609276][   T29]  do_syscall_64+0x55/0xb0
[  962.614113][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.618849][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.623964][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.629920][   T29] RIP: 0033:0x7ff88af9ce59
[  962.634793][   T29] RSP: 002b:00007ff88bdd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  962.643544][   T29] RAX: ffffffffffffffda RBX: 00007ff88b216180 RCX: 00007ff88af9ce59
[  962.651564][   T29] RDX: 0000200000001200 RSI: 0000000000008b26 RDI: 000000000000000b
[  962.659973][   T29] RBP: 00007ff88b032d6f R08: 0000000000000000 R09: 0000000000000000
[  962.668266][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  962.676531][   T29] R13: 00007ff88b216218 R14: 00007ff88b216180 R15: 00007ffce2b780b8
[  962.684848][   T29]  </TASK>
[  962.688219][   T29] INFO: task syz.2.4792:20683 blocked for more than 145 seconds.
[  962.696343][   T29]       Not tainted syzkaller #0
[  962.701334][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  962.710277][   T29] task:syz.2.4792      state:D stack:24232 pid:20683 ppid:20220  flags:0x00004004
[  962.719735][   T29] Call Trace:
[  962.723246][   T29]  <TASK>
[  962.726226][   T29]  __schedule+0x1553/0x45a0
[  962.730797][   T29]  ? asan.module_dtor+0x20/0x20
[  962.736999][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  962.741726][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  962.747296][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  962.753904][   T29]  schedule+0xbd/0x170
[  962.758092][   T29]  schedule_preempt_disabled+0x13/0x20
[  962.763999][   T29]  __mutex_lock+0x6a9/0xcc0
[  962.768622][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  962.774125][   T29]  ? tun_chr_close+0x41/0x1c0
[  962.778968][   T29]  ? mutex_lock_nested+0x20/0x20
[  962.784322][   T29]  ? __fput+0x61c/0x970
[  962.788555][   T29]  ? tun_chr_open+0x510/0x510
[  962.793909][   T29]  tun_chr_close+0x41/0x1c0
[  962.798557][   T29]  __fput+0x234/0x970
[  962.802840][   T29]  task_work_run+0x1d4/0x260
[  962.807485][   T29]  ? task_work_cancel+0x220/0x220
[  962.812814][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  962.818364][   T29]  exit_to_user_mode_loop+0xe6/0x110
[  962.823963][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  962.829566][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  962.835313][   T29]  do_syscall_64+0x61/0xb0
[  962.839780][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.844895][   T29]  ? clear_bhb_loop+0x40/0x90
[  962.849630][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.855837][   T29] RIP: 0033:0x7fc150f9ce59
[  962.860293][   T29] RSP: 002b:00007ffe162dd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  962.869008][   T29] RAX: 0000000000000000 RBX: 00007fc151217da0 RCX: 00007fc150f9ce59
[  962.877221][   T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  962.885427][   T29] RBP: 00007fc151217da0 R08: 0000000000000006 R09: 0000000000000000
[  962.893950][   T29] R10: 00007fc151217cb0 R11: 0000000000000246 R12: 00000000000c61ae
[  962.901989][   T29] R13: 00007fc15121627c R14: 00000000000c5f52 R15: 00007fc151216270
[  962.911383][   T29]  </TASK>
[  962.914678][   T29] INFO: task syz.2.4792:20684 blocked for more than 145 seconds.
[  962.922435][   T29]       Not tainted syzkaller #0
[  962.927670][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  962.937209][   T29] task:syz.2.4792      state:D stack:27880 pid:20684 ppid:20220  flags:0x00004004
[  962.947456][   T29] Call Trace:
[  962.950785][   T29]  <TASK>
[  962.954016][   T29]  __schedule+0x1553/0x45a0
[  962.958593][   T29]  ? asan.module_dtor+0x20/0x20
[  962.963780][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  962.968514][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  962.975313][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  962.981532][   T29]  schedule+0xbd/0x170
[  962.985960][   T29]  schedule_preempt_disabled+0x13/0x20
[  962.991487][   T29]  __mutex_lock+0x6a9/0xcc0
[  962.997708][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  963.002449][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  963.007820][   T29]  ? mutex_lock_nested+0x20/0x20
[  963.015199][   T29]  __tun_chr_ioctl+0x400/0x2000
[  963.020139][   T29]  ? tun_flow_create+0x310/0x310
[  963.025468][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  963.030464][   T29]  ? security_file_ioctl+0x80/0xa0
[  963.036076][   T29]  ? tun_chr_poll+0x630/0x630
[  963.040810][   T29]  __se_sys_ioctl+0xfd/0x170
[  963.045797][   T29]  do_syscall_64+0x55/0xb0
[  963.050264][   T29]  ? clear_bhb_loop+0x40/0x90
[  963.056106][   T29]  ? clear_bhb_loop+0x40/0x90
[  963.060858][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  963.067143][   T29] RIP: 0033:0x7fc150f9ce59
[  963.071620][   T29] RSP: 002b:00007fc151f2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  963.080339][   T29] RAX: ffffffffffffffda RBX: 00007fc151215fa0 RCX: 00007fc150f9ce59
[  963.090689][   T29] RDX: 0000200000000200 RSI: 00000000400454de RDI: 0000000000000005
[  963.099720][   T29] RBP: 00007fc151032d6f R08: 0000000000000000 R09: 0000000000000000
[  963.109912][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  963.120076][   T29] R13: 00007fc151216038 R14: 00007fc151215fa0 R15: 00007ffe162dcf98
[  963.130342][   T29]  </TASK>
[  963.133748][   T29] INFO: task syz.2.4792:20685 blocked for more than 145 seconds.
[  963.141698][   T29]       Not tainted syzkaller #0
[  963.149693][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  963.160267][   T29] task:syz.2.4792      state:D stack:26504 pid:20685 ppid:20220  flags:0x00004004
[  963.171603][   T29] Call Trace:
[  963.176890][   T29]  <TASK>
[  963.179875][   T29]  __schedule+0x1553/0x45a0
[  963.186333][   T29]  ? asan.module_dtor+0x20/0x20
[  963.191241][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  963.198056][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  963.205989][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  963.212228][   T29]  schedule+0xbd/0x170
[  963.217461][   T29]  schedule_preempt_disabled+0x13/0x20
[  963.223072][   T29]  __mutex_lock+0x6a9/0xcc0
[  963.227715][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  963.232436][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  963.238618][   T29]  ? mutex_lock_nested+0x20/0x20
[  963.245480][   T29]  ? __might_fault+0xaa/0x120
[  963.250281][   T29]  ? __might_fault+0xc6/0x120
[  963.256955][   T29]  ? __might_fault+0xaa/0x120
[  963.261665][   T29]  __tun_chr_ioctl+0x400/0x2000
[  963.268644][   T29]  ? tun_flow_create+0x310/0x310
[  963.274623][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  963.279620][   T29]  ? security_file_ioctl+0x80/0xa0
[  963.284989][   T29]  ? tun_chr_poll+0x630/0x630
[  963.289733][   T29]  __se_sys_ioctl+0xfd/0x170
[  963.294432][   T29]  do_syscall_64+0x55/0xb0
[  963.298905][   T29]  ? clear_bhb_loop+0x40/0x90
[  963.305457][   T29]  ? clear_bhb_loop+0x40/0x90
[  963.310214][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  963.316212][   T29] RIP: 0033:0x7fc150f9ce59
[  963.320671][   T29] RSP: 002b:00007fc151f0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  963.329254][   T29] RAX: ffffffffffffffda RBX: 00007fc151216090 RCX: 00007fc150f9ce59
[  963.341469][   T29] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003
[  963.350787][   T29] RBP: 00007fc151032d6f R08: 0000000000000000 R09: 0000000000000000
[  963.358992][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  963.370111][   T29] R13: 00007fc151216128 R14: 00007fc151216090 R15: 00007ffe162dcf98
[  963.379179][   T29]  </TASK>
[  963.382252][   T29] INFO: task syz.2.4792:20686 blocked for more than 145 seconds.
[  963.394023][   T29]       Not tainted syzkaller #0
[  963.398990][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  963.408676][   T29] task:syz.2.4792      state:D stack:29128 pid:20686 ppid:20220  flags:0x00004004
[  963.419309][   T29] Call Trace:
[  963.422692][   T29]  <TASK>
[  963.425664][   T29]  __schedule+0x1553/0x45a0
[  963.430242][   T29]  ? asan.module_dtor+0x20/0x20
[  963.435202][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  963.439925][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  963.445506][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  963.451711][   T29]  schedule+0xbd/0x170
[  963.457873][   T29]  schedule_preempt_disabled+0x13/0x20
[  963.464507][   T29]  __mutex_lock+0x6a9/0xcc0
[  963.469070][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  963.474077][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  963.479155][   T29]  ? mutex_lock_nested+0x20/0x20
[  963.484448][   T29]  __tun_chr_ioctl+0x400/0x2000
[  963.489378][   T29]  ? tun_flow_create+0x310/0x310
[  963.495172][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  963.500177][   T29]  ? security_file_ioctl+0x80/0xa0
[  963.505420][   T29]  ? tun_chr_poll+0x630/0x630
[  963.514315][   T29]  __se_sys_ioctl+0xfd/0x170
[  963.518950][   T29]  do_syscall_64+0x55/0xb0
[  963.525435][   T29]  ? clear_bhb_loop+0x40/0x90
[  963.530175][   T29]  ? clear_bhb_loop+0x40/0x90
[  963.536853][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  963.544804][   T29] RIP: 0033:0x7fc150f9ce59
[  963.549274][   T29] RSP: 002b:00007fc151eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  963.559770][   T29] RAX: ffffffffffffffda RBX: 00007fc151216180 RCX: 00007fc150f9ce59
[  963.568968][   T29] RDX: 0000000000000000 RSI: 00000000400454cb RDI: 0000000000000003
[  963.578450][   T29] RBP: 00007fc151032d6f R08: 0000000000000000 R09: 0000000000000000
[  963.586544][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  963.594816][   T29] R13: 00007fc151216218 R14: 00007fc151216180 R15: 00007ffe162dcf98
[  963.603853][   T29]  </TASK>
[  963.606915][   T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  963.616568][   T29] 
[  963.616568][   T29] Showing all locks held in the system:
[  963.624416][   T29] 4 locks held by kworker/u4:0/11:
[  963.629572][   T29] 1 lock held by khungtaskd/29:
[  963.635592][   T29]  #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  963.645740][   T29] 3 locks held by kworker/0:2/787:
[  963.650890][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.662015][   T29]  #1: ffffc90003b57d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.674267][   T29]  #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  963.685892][   T29] 3 locks held by kworker/u4:6/1005:
[  963.691274][   T29]  #0: ffff88814cc05138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.703001][   T29]  #1: ffffc9000440fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.718758][   T29]  #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530
[  963.729285][   T29] 2 locks held by getty/5524:
[  963.736773][   T29]  #0: ffff88814ce860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  963.748633][   T29]  #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  963.761584][   T29] 3 locks held by kworker/u4:1/20382:
[  963.768122][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.782577][   T29]  #1: ffffc90003517d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.794962][   T29]  #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  963.804204][   T29] 1 lock held by syz-executor/20435:
[  963.809544][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  963.819733][   T29] 2 locks held by syz.0.4784/20639:
[  963.825213][   T29]  #0: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0
[  963.834904][   T29]  #1: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1c/0x1c0
[  963.844480][   T29] 1 lock held by syz.1.4787/20671:
[  963.849636][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x115/0x600
[  963.859378][   T29] 1 lock held by syz.2.4792/20683:
[  963.864860][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  963.874203][   T29] 1 lock held by syz.2.4792/20684:
[  963.879359][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  963.889055][   T29] 1 lock held by syz.2.4792/20685:
[  963.894530][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  963.904189][   T29] 1 lock held by syz.2.4792/20686:
[  963.909335][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  963.919348][   T29] 1 lock held by syz-executor/20692:
[  963.924902][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  963.934571][   T29] 1 lock held by syz-executor/20699:
[  963.939908][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  963.949464][   T29] 1 lock held by syz-executor/20703:
[  963.954822][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  963.964356][   T29] 3 locks held by kworker/0:4/20705:
[  963.969672][   T29]  #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.983300][   T29]  #1: ffffc900043efd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  963.994631][   T29]  #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90
[  964.004565][   T29] 1 lock held by syz-executor/20707:
[  964.009885][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.020037][   T29] 1 lock held by syz-executor/20712:
[  964.025607][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.035507][   T29] 1 lock held by syz-executor/20717:
[  964.040868][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.050705][   T29] 1 lock held by syz-executor/20720:
[  964.056242][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.065938][   T29] 1 lock held by syz-executor/20732:
[  964.071300][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.081047][   T29] 1 lock held by syz-executor/20737:
[  964.086621][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.096285][   T29] 1 lock held by syz-executor/20742:
[  964.101607][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.112345][   T29] 1 lock held by syz-executor/20745:
[  964.119883][   T29]  #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  964.132080][   T29] 
[  964.136291][   T29] =============================================
[  964.136291][   T29] 
[  964.146628][   T29] NMI backtrace for cpu 0
[  964.151017][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  964.158245][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  964.168331][   T29] Call Trace:
[  964.171639][   T29]  <TASK>
[  964.174593][   T29]  dump_stack_lvl+0x18c/0x250
[  964.179307][   T29]  ? nmi_cpu_backtrace+0x1b6/0x3e0
[  964.184457][   T29]  ? show_regs_print_info+0x20/0x20
[  964.189676][   T29]  ? load_image+0x420/0x420
[  964.194233][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  964.199237][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  964.205441][   T29]  ? _printk+0xde/0x130
[  964.209634][   T29]  ? load_image+0x420/0x420
[  964.214198][   T29]  ? load_image+0x420/0x420
[  964.218762][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  964.224875][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  964.230926][   T29]  watchdog+0xf3d/0xf80
[  964.235104][   T29]  ? watchdog+0x1e1/0xf80
[  964.239478][   T29]  kthread+0x2fa/0x390
[  964.243605][   T29]  ? hungtask_pm_notify+0x90/0x90
[  964.248665][   T29]  ? kthread_blkcg+0xd0/0xd0
[  964.253272][   T29]  ret_from_fork+0x48/0x80
[  964.257735][   T29]  ? kthread_blkcg+0xd0/0xd0
[  964.262355][   T29]  ret_from_fork_asm+0x11/0x20
[  964.267163][   T29]  </TASK>
[  964.270835][   T29] Sending NMI from CPU 0 to CPUs 1:
[  964.276182][    C1] NMI backtrace for cpu 1
[  964.276193][    C1] CPU: 1 PID: 5119 Comm: syslogd Not tainted syzkaller #0
[  964.276210][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  964.276220][    C1] RIP: 0010:unwind_next_frame+0x751/0x2970
[  964.276242][    C1] Code: 24 08 88 18 45 0f b7 37 41 83 e6 0f 4c 89 f7 48 c7 c6 e0 07 fa 8c e8 5e ed 4b 00 41 83 fe 05 7f 7b 41 83 fe 03 48 8b 5c 24 30 <0f> 8f e3 00 00 00 41 83 fe 02 0f 84 a3 01 00 00 41 83 fe 03 0f 85
[  964.276257][    C1] RSP: 0018:ffffc900032974b0 EFLAGS: 00000202
[  964.276272][    C1] RAX: 0000000000000008 RBX: ffffffff8f0dc2b8 RCX: 0000000000000003
[  964.276296][    C1] RDX: ffffffff813b3f02 RSI: ffffffff8cfa07e0 RDI: 0000000000000005
[  964.276308][    C1] RBP: ffffc90003297638 R08: ffff88807e6abc00 R09: 0000000000000008
[  964.276319][    C1] R10: 0000000000000009 R11: 0000000000000000 R12: ffffc900032975e8
[  964.276329][    C1] R13: dffffc0000000000 R14: 0000000000000005 R15: ffffffff8f0dc2bc
[  964.276342][    C1] FS:  00007f960433dc80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  964.276357][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  964.276368][    C1] CR2: 000055872ec84168 CR3: 000000002e20a000 CR4: 00000000003506e0
[  964.276383][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  964.276394][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  964.276405][    C1] Call Trace:
[  964.276410][    C1]  <TASK>
[  964.276420][    C1]  ? stack_trace_save+0x100/0x100
[  964.276443][    C1]  ? __unwind_start+0x2d2/0x7e0
[  964.276461][    C1]  __unwind_start+0x66a/0x7e0
[  964.276479][    C1]  ? stack_trace_save+0x100/0x100
[  964.276524][    C1]  arch_stack_walk+0xf8/0x190
[  964.276545][    C1]  ? __unwind_start+0x2d2/0x7e0
[  964.276563][    C1]  stack_trace_save+0xaa/0x100
[  964.276584][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  964.276605][    C1]  ? skb_release_data+0x5dc/0x7b0
[  964.276624][    C1]  ? vfs_read+0x46a/0x970
[  964.276646][    C1]  ? ksys_read+0x150/0x260
[  964.276668][    C1]  ? do_syscall_64+0x55/0xb0
[  964.276686][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  964.276711][    C1]  kasan_set_track+0x4e/0x70
[  964.276758][    C1]  ? kmem_cache_free+0xf8/0x270
[  964.276782][    C1]  kasan_save_free_info+0x2e/0x50
[  964.276806][    C1]  ____kasan_slab_free+0x126/0x1e0
[  964.276827][    C1]  slab_free_freelist_hook+0x130/0x1a0
[  964.276848][    C1]  ? __unix_dgram_recvmsg+0x9fa/0xd80
[  964.276942][    C1]  kmem_cache_free+0xf8/0x270
[  964.276981][    C1]  __unix_dgram_recvmsg+0x9fa/0xd80
[  964.277012][    C1]  ? unix_unhash+0x10/0x10
[  964.277038][    C1]  ? aa_af_perm+0x330/0x330
[  964.277054][    C1]  ? aa_file_perm+0x3e3/0xee0
[  964.277098][    C1]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  964.277120][    C1]  ? security_socket_recvmsg+0x89/0xb0
[  964.277140][    C1]  ? unix_dgram_recvmsg+0xad/0xd0
[  964.277159][    C1]  sock_read_iter+0x2d9/0x3e0
[  964.277180][    C1]  ? kernel_sock_ip_overhead+0x5a0/0x5a0
[  964.277218][    C1]  ? common_file_perm+0x198/0x1f0
[  964.277244][    C1]  vfs_read+0x46a/0x970
[  964.277269][    C1]  ? kernel_read+0x1e0/0x1e0
[  964.277290][    C1]  ? rcu_is_watching+0x15/0xb0
[  964.277320][    C1]  ? __fdget_pos+0x1d8/0x330
[  964.277345][    C1]  ksys_read+0x150/0x260
[  964.277369][    C1]  ? vfs_write+0x990/0x990
[  964.277393][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  964.277416][    C1]  do_syscall_64+0x55/0xb0
[  964.277431][    C1]  ? clear_bhb_loop+0x40/0x90
[  964.277453][    C1]  ? clear_bhb_loop+0x40/0x90
[  964.277476][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  964.277503][    C1] RIP: 0033:0x7f960448d407
[  964.277516][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  964.277531][    C1] RSP: 002b:00007ffc06a4f170 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  964.277548][    C1] RAX: ffffffffffffffda RBX: 00007f960433dc80 RCX: 00007f960448d407
[  964.277560][    C1] RDX: 00000000000000ff RSI: 000055eb4cf97950 RDI: 0000000000000000
[  964.277571][    C1] RBP: 000055eb4cf97910 R08: 0000000000000000 R09: 0000000000000000
[  964.277582][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055eb4cf97997
[  964.277593][    C1] R13: 0000000000000000 R14: 000055eb4cf97950 R15: 000055eb3bc3ed98
[  964.277612][    C1]  </TASK>
[  964.281841][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  964.703302][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  964.710541][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  964.720634][   T29] Call Trace:
[  964.723949][   T29]  <TASK>
[  964.726920][   T29]  dump_stack_lvl+0x18c/0x250
[  964.731753][   T29]  ? show_regs_print_info+0x20/0x20
[  964.736992][   T29]  ? load_image+0x420/0x420
[  964.741548][   T29]  panic+0x2dc/0x730
[  964.745481][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  964.751155][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  964.755684][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  964.761288][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  964.767491][   T29]  watchdog+0xf7c/0xf80
[  964.771687][   T29]  ? watchdog+0x1e1/0xf80
[  964.776043][   T29]  kthread+0x2fa/0x390
[  964.780165][   T29]  ? hungtask_pm_notify+0x90/0x90
[  964.785234][   T29]  ? kthread_blkcg+0xd0/0xd0
[  964.789862][   T29]  ret_from_fork+0x48/0x80
[  964.794310][   T29]  ? kthread_blkcg+0xd0/0xd0
[  964.799012][   T29]  ret_from_fork_asm+0x11/0x20
[  964.803843][   T29]  </TASK>
[  964.807472][   T29] Kernel Offset: disabled
[  964.811813][   T29] Rebooting in 86400 seconds..