last executing test programs:

14.699112222s ago: executing program 1 (id=740):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0xfffffff9, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x5, 0x84)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5"], 0xfe33)
r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r3, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000004180)=""/4096, 0x1000}}, 0x10)

13.528131432s ago: executing program 1 (id=743):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

13.390888924s ago: executing program 1 (id=747):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x18, 0x0, 0x1, &(0x7f0000001780))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)

10.325731201s ago: executing program 1 (id=751):
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040)
close(r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
unlink(&(0x7f0000000240)='./file0\x00')
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0xeee}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="3fe7", 0x2}], 0x1}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), 0x4)

9.294848497s ago: executing program 0 (id=757):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="17724b568c149730350c352f658c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10)
r3 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
write$cgroup_devices(r4, 0x0, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa7, 0xf2, 0x10, 0x2, 0x0, 0x0, 0xa1100, 0xe1a7d742b0ec2988, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000002, 0x2, @perf_config_ext={0x4, 0x1}, 0xd12, 0x8, 0x2, 0x2, 0x3bd, 0x0, 0xe, 0x0, 0x79, 0x0, 0x4}, r3, 0x5, r0, 0x1)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
close(r1)
socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))

9.293722437s ago: executing program 1 (id=758):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000035000000040000000200000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$kcm(0x1e, 0x1, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}, {&(0x7f0000000080)="a95c5cba269452b256ccb792323475d2d765678da470acd36cf3a4fc8fecd8ba9d20f1be04e4ee3f2055a55c5eb1c815388c05f4b6f5ffd31abead5b9f052d7454f15e5cd2ec0e3fd4c6221066c36dc9fedb46798ef477fc921a11df165a5148c560e739f99877ca857a2ccee3", 0x6d}, {&(0x7f0000000180)="c900", 0x2}], 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x1000})
socketpair(0x15, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8922, &(0x7f0000000080))

9.242857859s ago: executing program 3 (id=759):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66)

4.892281968s ago: executing program 0 (id=763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[], 0x20)

4.82922179s ago: executing program 3 (id=764):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x15, 0x5, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f00000000c0), 0x4)
socketpair(0x6, 0x1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

4.747653732s ago: executing program 0 (id=765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66)

3.488918923s ago: executing program 2 (id=766):
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040)
close(r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
unlink(&(0x7f0000000240)='./file0\x00')
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0xeee}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="3fe7", 0x2}], 0x1}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), 0x4)

3.430697844s ago: executing program 3 (id=767):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

3.331201517s ago: executing program 3 (id=768):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0x6}, @generic={0x44, 0x2}, @generic={0x44, 0xc, "96b0c6640f8feda5312e"}, @end, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x1, [{@private=0xa010101, 0x4}]}, @lsrr={0x83, 0x1b, 0x50, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @lsrr={0x83, 0xf, 0xd9, [@dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}}}], 0x98}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0)
recvmsg$unix(r2, 0x0, 0x10060)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x4, 0x9, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0)
close(r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

1.952666401s ago: executing program 2 (id=769):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b901018dd26a2fa2505936632f080600"/32, 0x0, 0xffffff9a, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\n.t\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

1.891703283s ago: executing program 0 (id=770):
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0xa0800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffff, 0x1}, 0x100274, 0xca, 0x0, 0x4, 0x8, 0x100, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x2)

1.835593185s ago: executing program 0 (id=771):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="17724b568c149730350c352f658c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10)
r3 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
write$cgroup_devices(r4, 0x0, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa7, 0xf2, 0x10, 0x2, 0x0, 0x0, 0xa1100, 0xe1a7d742b0ec2988, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000002, 0x2, @perf_config_ext={0x4, 0x1}, 0xd12, 0x8, 0x2, 0x2, 0x3bd, 0x0, 0xe, 0x0, 0x79, 0x0, 0x4}, r3, 0x5, r0, 0x1)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
close(r1)
socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))

1.794287095s ago: executing program 3 (id=772):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2000})
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xe)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3, r2}, 0xc)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48)
r4 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="5c00000014006b08000000d86e6c1d000a117ea6e070d6060000000000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f003401}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x1d88, 0x1, 0x0, 0x9, 0x40000000, 0x800000, 0x400, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
syz_open_procfs$namespace(r6, &(0x7f00000000c0)='ns/user\x00')
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0x7ff, 0x43a1bd76, 0x4, 0x9, 0xfffffffa, 0x3ff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x103, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

1.647654919s ago: executing program 2 (id=773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[], 0x20)

1.542460592s ago: executing program 2 (id=774):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0x6}, @generic={0x44, 0x2}, @generic={0x44, 0xc, "96b0c6640f8feda5312e"}, @end, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x1, [{@private=0xa010101, 0x4}]}, @lsrr={0x83, 0x1b, 0x50, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @lsrr={0x83, 0xf, 0xd9, [@dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}}}], 0x98}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0)
recvmsg$unix(r2, 0x0, 0x10060)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x4, 0x9, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0)
close(r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 1)

759.952981ms ago: executing program 2 (id=775):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000000000000000000070000004404dc634402440c96b0c6640f8feda5312e004407f1130a01010100000004831b50e0000001ac1414bbac1e0101e0000001ac14140bac1414bb830fd9ac14141a0a0101020a010100000000000000001100000000000000290000000400000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="2100000000d85a1259c919152cff0f2fb41800000000000000"], 0x98}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0)
recvmsg$unix(r4, 0x0, 0x10060)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x4, 0x9, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
close(r5)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r4, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0xb4, &(0x7f0000001300)=[{}, {}], 0x10, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xed, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x61e4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x72, &(0x7f0000000940)=""/114, 0x41000, 0x40, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000009c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x4000004, 0x7, 0x2, 0x2}, 0x10, r7, 0x0, 0x4, &(0x7f0000000a40)=[r4, r4, r4, r1, r1, r1, r1, r6, r4], &(0x7f0000000ac0)=[{0x5, 0x3, 0xf, 0x8}, {0x4, 0x1, 0x5, 0x4}, {0x4, 0x4, 0xa, 0x7}, {0x1, 0x4, 0x5, 0x8}], 0x10, 0x80000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x23, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000006d204000100000018260000", @ANYRES32=r1, @ANYBLOB="000000000500000085100000f8ffffff185a000003000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000bf98df67a00000000dc2e9faff2cbc57d3dcbe08b3457532c3e16267dbe3f117be6939d379ab2373630af27ddac775086146f88b031bb9dea845b3a2fc656df1f1b7997344f444063a0bcf97dc18d5649c26ba292c518ee0fa7459349b2dd005b2eb5dedfb4", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000002000000186900000b00000000000000b2b4e62918360000030000000000000000000000bf91000000000000b7020000030000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0xe, 0xf6, &(0x7f0000001040)=""/246, 0x41100, 0x50, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x1, 0x4, 0xa, 0x5}, 0x10, r7, r8}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={r4, 0x20, &(0x7f00000016c0)={&(0x7f0000000140)=""/102, 0x66, 0x0, &(0x7f0000001600)=""/138, 0x8a}}, 0x10)

443.707839ms ago: executing program 1 (id=776):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

195.367465ms ago: executing program 3 (id=777):
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040)
close(r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
unlink(&(0x7f0000000240)='./file0\x00')
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0xeee}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="3fe7", 0x2}], 0x1}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), 0x4)

79.951638ms ago: executing program 2 (id=778):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x4, 0x0, 0x1, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xe3, &(0x7f00000004c0)=""/227, 0x8fc8934f56c48967, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xd, 0x401, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r11, r2], &(0x7f0000000ac0)=[{0x1, 0x3, 0x1, 0xe3dd01dd9c6614e7}], 0x10, 0x24}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r13, @ANYRES32=r13, @ANYBLOB="2f000000adfc82478b"], 0x20)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1131a1, 0x0)
ioctl$TUNSETDEBUG(r14, 0x400454c9, &(0x7f0000000080)=0x40e6)

0s ago: executing program 0 (id=779):
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0xa0800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffff, 0x1}, 0x100274, 0xca, 0x0, 0x4, 0x8, 0x100, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x2)

kernel console output (not intermixed with test programs):

le Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  141.226015][ T6579] Call Trace:
[  141.229305][ T6579]  <TASK>
[  141.232265][ T6579]  dump_stack_lvl+0x18c/0x250
[  141.236965][ T6579]  ? show_regs_print_info+0x20/0x20
[  141.242174][ T6579]  ? load_image+0x420/0x420
[  141.246698][ T6579]  ? __might_fault+0xaa/0x120
[  141.251386][ T6579]  ? __lock_acquire+0x7d40/0x7d40
[  141.256433][ T6579]  should_fail_ex+0x39d/0x4d0
[  141.261138][ T6579]  _copy_from_user+0x2f/0xe0
[  141.265747][ T6579]  ___sys_recvmsg+0x176/0x590
[  141.270445][ T6579]  ? __sys_recvmsg+0x2a0/0x2a0
[  141.275223][ T6579]  ? ksys_write+0x1c4/0x260
[  141.279756][ T6579]  ? __fget_files+0x43d/0x4b0
[  141.284467][ T6579]  __x64_sys_recvmsg+0x20c/0x2e0
[  141.289421][ T6579]  ? ___sys_recvmsg+0x590/0x590
[  141.294301][ T6579]  ? lockdep_hardirqs_on+0x98/0x150
[  141.299517][ T6579]  do_syscall_64+0x55/0xb0
[  141.303943][ T6579]  ? clear_bhb_loop+0x40/0x90
[  141.308633][ T6579]  ? clear_bhb_loop+0x40/0x90
[  141.313327][ T6579]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.319232][ T6579] RIP: 0033:0x7f0aacf9ce59
[  141.323661][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.343275][ T6579] RSP: 002b:00007f0aade16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  141.351700][ T6579] RAX: ffffffffffffffda RBX: 00007f0aad216090 RCX: 00007f0aacf9ce59
[  141.359680][ T6579] RDX: 0000000000010002 RSI: 0000200000000780 RDI: 0000000000000003
[  141.367666][ T6579] RBP: 00007f0aade16090 R08: 0000000000000000 R09: 0000000000000000
[  141.375652][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.383639][ T6579] R13: 00007f0aad216128 R14: 00007f0aad216090 R15: 00007ffd0a845638
[  141.391641][ T6579]  </TASK>
[  145.482540][ T6593] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  145.597237][ T6599] validate_nla: 1 callbacks suppressed
[  145.597252][ T6599] netlink: 'syz.2.233': attribute type 21 has an invalid length.
[  145.608964][ T6604] FAULT_INJECTION: forcing a failure.
[  145.608964][ T6604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.631235][ T6604] CPU: 0 PID: 6604 Comm: syz.1.236 Not tainted syzkaller #0
[  145.638555][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  145.648616][ T6604] Call Trace:
[  145.651900][ T6604]  <TASK>
[  145.654837][ T6604]  dump_stack_lvl+0x18c/0x250
[  145.659527][ T6604]  ? show_regs_print_info+0x20/0x20
[  145.664732][ T6604]  ? load_image+0x420/0x420
[  145.669249][ T6604]  ? __might_fault+0xaa/0x120
[  145.673936][ T6604]  ? __lock_acquire+0x7d40/0x7d40
[  145.678977][ T6604]  should_fail_ex+0x39d/0x4d0
[  145.683674][ T6604]  _copy_from_user+0x2f/0xe0
[  145.688281][ T6604]  __sys_bpf+0x23e/0x890
[  145.692535][ T6604]  ? bpf_link_show_fdinfo+0x390/0x390
[  145.697934][ T6604]  ? lock_chain_count+0x20/0x20
[  145.702803][ T6604]  __x64_sys_bpf+0x7c/0x90
[  145.707228][ T6604]  do_syscall_64+0x55/0xb0
[  145.711656][ T6604]  ? clear_bhb_loop+0x40/0x90
[  145.716340][ T6604]  ? clear_bhb_loop+0x40/0x90
[  145.721028][ T6604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.726927][ T6604] RIP: 0033:0x7f0aacf9ce59
[  145.731356][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.750969][ T6604] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  145.759392][ T6604] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  145.767369][ T6604] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012
[  145.775345][ T6604] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  145.783318][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.791295][ T6604] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  145.799296][ T6604]  </TASK>
[  145.985126][ T6609] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.238'.
[  146.484584][ T6625] FAULT_INJECTION: forcing a failure.
[  146.484584][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.515326][ T6625] CPU: 1 PID: 6625 Comm: syz.1.243 Not tainted syzkaller #0
[  146.522659][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  146.532730][ T6625] Call Trace:
[  146.536021][ T6625]  <TASK>
[  146.538968][ T6625]  dump_stack_lvl+0x18c/0x250
[  146.543669][ T6625]  ? show_regs_print_info+0x20/0x20
[  146.548888][ T6625]  ? load_image+0x420/0x420
[  146.553407][ T6625]  ? __might_fault+0xaa/0x120
[  146.558078][ T6625]  ? __lock_acquire+0x7d40/0x7d40
[  146.563099][ T6625]  should_fail_ex+0x39d/0x4d0
[  146.567780][ T6625]  _copy_from_user+0x2f/0xe0
[  146.572368][ T6625]  __sys_bpf+0x23e/0x890
[  146.576616][ T6625]  ? bpf_link_show_fdinfo+0x390/0x390
[  146.581996][ T6625]  ? lock_chain_count+0x20/0x20
[  146.586849][ T6625]  __x64_sys_bpf+0x7c/0x90
[  146.591262][ T6625]  do_syscall_64+0x55/0xb0
[  146.595675][ T6625]  ? clear_bhb_loop+0x40/0x90
[  146.600350][ T6625]  ? clear_bhb_loop+0x40/0x90
[  146.605029][ T6625]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.610915][ T6625] RIP: 0033:0x7f0aacf9ce59
[  146.615326][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.634926][ T6625] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  146.643331][ T6625] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  146.651292][ T6625] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  146.659252][ T6625] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  146.667211][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.675174][ T6625] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  146.683164][ T6625]  </TASK>
[  146.929813][ T6632] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  147.502567][ T6639] netlink: 'syz.1.249': attribute type 2 has an invalid length.
[  147.510256][ T6639] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.249'.
[  147.745241][ T6648] netlink: 'syz.2.250': attribute type 21 has an invalid length.
[  147.914877][ T6654] FAULT_INJECTION: forcing a failure.
[  147.914877][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.954510][ T6654] CPU: 1 PID: 6654 Comm: syz.0.255 Not tainted syzkaller #0
[  147.961825][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  147.971874][ T6654] Call Trace:
[  147.975146][ T6654]  <TASK>
[  147.978068][ T6654]  dump_stack_lvl+0x18c/0x250
[  147.982742][ T6654]  ? show_regs_print_info+0x20/0x20
[  147.987926][ T6654]  ? load_image+0x420/0x420
[  147.992420][ T6654]  ? __might_fault+0xaa/0x120
[  147.997088][ T6654]  ? __lock_acquire+0x7d40/0x7d40
[  148.002104][ T6654]  should_fail_ex+0x39d/0x4d0
[  148.006778][ T6654]  _copy_from_user+0x2f/0xe0
[  148.011359][ T6654]  ___sys_recvmsg+0x176/0x590
[  148.016033][ T6654]  ? __sys_recvmsg+0x2a0/0x2a0
[  148.020790][ T6654]  ? ksys_write+0x1c4/0x260
[  148.025291][ T6654]  ? __fget_files+0x43d/0x4b0
[  148.029969][ T6654]  __x64_sys_recvmsg+0x20c/0x2e0
[  148.034900][ T6654]  ? ___sys_recvmsg+0x590/0x590
[  148.039749][ T6654]  ? lockdep_hardirqs_on+0x98/0x150
[  148.044939][ T6654]  do_syscall_64+0x55/0xb0
[  148.049342][ T6654]  ? clear_bhb_loop+0x40/0x90
[  148.054009][ T6654]  ? clear_bhb_loop+0x40/0x90
[  148.058677][ T6654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  148.064559][ T6654] RIP: 0033:0x7f5a7539ce59
[  148.068966][ T6654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.088568][ T6654] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  148.096971][ T6654] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  148.104933][ T6654] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[  148.112896][ T6654] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  148.120852][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.128811][ T6654] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  148.136786][ T6654]  </TASK>
[  148.185708][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.256'.
[  148.196255][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.256'.
[  148.205807][ T6656] netlink: 13 bytes leftover after parsing attributes in process `syz.1.256'.
[  148.689069][ T6671] FAULT_INJECTION: forcing a failure.
[  148.689069][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.708560][ T6671] CPU: 1 PID: 6671 Comm: syz.0.260 Not tainted syzkaller #0
[  148.715880][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  148.725946][ T6671] Call Trace:
[  148.729235][ T6671]  <TASK>
[  148.732177][ T6671]  dump_stack_lvl+0x18c/0x250
[  148.736881][ T6671]  ? show_regs_print_info+0x20/0x20
[  148.742092][ T6671]  ? load_image+0x420/0x420
[  148.746618][ T6671]  ? __might_fault+0xaa/0x120
[  148.751310][ T6671]  ? __lock_acquire+0x7d40/0x7d40
[  148.756359][ T6671]  should_fail_ex+0x39d/0x4d0
[  148.761063][ T6671]  _copy_from_user+0x2f/0xe0
[  148.765673][ T6671]  __sys_bpf+0x23e/0x890
[  148.769932][ T6671]  ? bpf_link_show_fdinfo+0x390/0x390
[  148.775339][ T6671]  ? lock_chain_count+0x20/0x20
[  148.780222][ T6671]  __x64_sys_bpf+0x7c/0x90
[  148.784655][ T6671]  do_syscall_64+0x55/0xb0
[  148.789084][ T6671]  ? clear_bhb_loop+0x40/0x90
[  148.793773][ T6671]  ? clear_bhb_loop+0x40/0x90
[  148.798466][ T6671]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  148.804372][ T6671] RIP: 0033:0x7f5a7539ce59
[  148.808798][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.828422][ T6671] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  148.836850][ T6671] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  148.844832][ T6671] RDX: 0000000000000094 RSI: 0000200000000f40 RDI: 0000000000000005
[  148.852816][ T6671] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  148.860795][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.868781][ T6671] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  148.876782][ T6671]  </TASK>
[  149.198431][ T6677] Zero length message leads to an empty skb
[  149.597167][ T6684] netlink: 'syz.2.265': attribute type 21 has an invalid length.
[  149.836014][ T6690] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.267'.
[  150.259991][ T6694] netlink: 'syz.3.268': attribute type 10 has an invalid length.
[  150.283504][ T6694] netlink: 55 bytes leftover after parsing attributes in process `syz.3.268'.
[  150.450872][ T6706] FAULT_INJECTION: forcing a failure.
[  150.450872][ T6706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.484294][ T6706] CPU: 0 PID: 6706 Comm: syz.2.270 Not tainted syzkaller #0
[  150.491616][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  150.501683][ T6706] Call Trace:
[  150.504975][ T6706]  <TASK>
[  150.507923][ T6706]  dump_stack_lvl+0x18c/0x250
[  150.512624][ T6706]  ? show_regs_print_info+0x20/0x20
[  150.517835][ T6706]  ? load_image+0x420/0x420
[  150.522360][ T6706]  ? __lock_acquire+0x7d40/0x7d40
[  150.527404][ T6706]  ? snprintf+0xe9/0x140
[  150.531677][ T6706]  should_fail_ex+0x39d/0x4d0
[  150.536383][ T6706]  _copy_to_user+0x2f/0xa0
[  150.540821][ T6706]  simple_read_from_buffer+0xe7/0x150
[  150.546218][ T6706]  proc_fail_nth_read+0x1e8/0x260
[  150.551264][ T6706]  ? proc_fault_inject_write+0x360/0x360
[  150.556923][ T6706]  ? fsnotify_perm+0x271/0x5e0
[  150.561701][ T6706]  ? proc_fault_inject_write+0x360/0x360
[  150.567361][ T6706]  vfs_read+0x28b/0x970
[  150.571540][ T6706]  ? kernel_read+0x1e0/0x1e0
[  150.576149][ T6706]  ? __fget_files+0x28/0x4b0
[  150.580761][ T6706]  ? __fget_files+0x28/0x4b0
[  150.585367][ T6706]  ? __fget_files+0x43d/0x4b0
[  150.590068][ T6706]  ? __fdget_pos+0x2a3/0x330
[  150.594672][ T6706]  ? ksys_read+0x75/0x260
[  150.599022][ T6706]  ksys_read+0x150/0x260
[  150.603292][ T6706]  ? vfs_write+0x990/0x990
[  150.607727][ T6706]  ? lockdep_hardirqs_on+0x98/0x150
[  150.612950][ T6706]  do_syscall_64+0x55/0xb0
[  150.617379][ T6706]  ? clear_bhb_loop+0x40/0x90
[  150.622072][ T6706]  ? clear_bhb_loop+0x40/0x90
[  150.626769][ T6706]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.632677][ T6706] RIP: 0033:0x7f852ef5d68e
[  150.637109][ T6706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  150.656731][ T6706] RSP: 002b:00007f852fd81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  150.665165][ T6706] RAX: ffffffffffffffda RBX: 00007f852fd826c0 RCX: 00007f852ef5d68e
[  150.673149][ T6706] RDX: 000000000000000f RSI: 00007f852fd820a0 RDI: 0000000000000004
[  150.681130][ T6706] RBP: 00007f852fd82090 R08: 0000000000000000 R09: 0000000000000000
[  150.689113][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.697096][ T6706] R13: 00007f852f216218 R14: 00007f852f216180 R15: 00007ffe9c2c4878
[  150.705099][ T6706]  </TASK>
[  151.771039][ T6722] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1
[  154.623349][ T6734] netlink: 'syz.0.278': attribute type 21 has an invalid length.
[  154.774551][ T6742] FAULT_INJECTION: forcing a failure.
[  154.774551][ T6742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.815707][ T6742] CPU: 0 PID: 6742 Comm: syz.2.281 Not tainted syzkaller #0
[  154.823040][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  154.833110][ T6742] Call Trace:
[  154.836393][ T6742]  <TASK>
[  154.839308][ T6742]  dump_stack_lvl+0x18c/0x250
[  154.843977][ T6742]  ? show_regs_print_info+0x20/0x20
[  154.849163][ T6742]  ? load_image+0x420/0x420
[  154.853667][ T6742]  ? __might_fault+0xaa/0x120
[  154.858356][ T6742]  ? __lock_acquire+0x7d40/0x7d40
[  154.863400][ T6742]  should_fail_ex+0x39d/0x4d0
[  154.868104][ T6742]  _copy_from_user+0x2f/0xe0
[  154.872711][ T6742]  ___sys_recvmsg+0x176/0x590
[  154.877411][ T6742]  ? __sys_recvmsg+0x2a0/0x2a0
[  154.882189][ T6742]  ? ksys_write+0x1c4/0x260
[  154.886718][ T6742]  ? __fget_files+0x43d/0x4b0
[  154.891430][ T6742]  __x64_sys_recvmsg+0x20c/0x2e0
[  154.896390][ T6742]  ? ___sys_recvmsg+0x590/0x590
[  154.901273][ T6742]  ? lockdep_hardirqs_on+0x98/0x150
[  154.906492][ T6742]  do_syscall_64+0x55/0xb0
[  154.910917][ T6742]  ? clear_bhb_loop+0x40/0x90
[  154.915605][ T6742]  ? clear_bhb_loop+0x40/0x90
[  154.920294][ T6742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.926200][ T6742] RIP: 0033:0x7f852ef9ce59
[  154.930626][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.950245][ T6742] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  154.958675][ T6742] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  154.966662][ T6742] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  154.974654][ T6742] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  154.982634][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.990613][ T6742] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  154.998608][ T6742]  </TASK>
[  155.125974][ T6749] Driver unsupported XDP return value 0 on prog  (id 156) dev N/A, expect packet loss!
[  156.940137][ T6772] netlink: 'syz.3.290': attribute type 21 has an invalid length.
[  157.707657][ T6777] FAULT_INJECTION: forcing a failure.
[  157.707657][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.741794][ T6777] CPU: 0 PID: 6777 Comm: syz.1.292 Not tainted syzkaller #0
[  157.749132][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  157.759203][ T6777] Call Trace:
[  157.762494][ T6777]  <TASK>
[  157.765438][ T6777]  dump_stack_lvl+0x18c/0x250
[  157.770139][ T6777]  ? show_regs_print_info+0x20/0x20
[  157.775356][ T6777]  ? load_image+0x420/0x420
[  157.779884][ T6777]  ? __might_fault+0xaa/0x120
[  157.784572][ T6777]  ? __lock_acquire+0x7d40/0x7d40
[  157.789614][ T6777]  should_fail_ex+0x39d/0x4d0
[  157.794318][ T6777]  _copy_from_user+0x2f/0xe0
[  157.798924][ T6777]  ___sys_sendmsg+0x1c7/0x360
[  157.803621][ T6777]  ? __sys_sendmsg+0x2a0/0x2a0
[  157.808400][ T6777]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  157.814412][ T6777]  ? lockdep_hardirqs_on+0x98/0x150
[  157.819643][ T6777]  ? kasan_check_range+0x8f/0x290
[  157.824691][ T6777]  __se_sys_sendmsg+0x1c2/0x2b0
[  157.829559][ T6777]  ? __x64_sys_sendmsg+0x80/0x80
[  157.834538][ T6777]  ? syscall_enter_from_user_mode+0x2e/0x80
[  157.840448][ T6777]  do_syscall_64+0x55/0xb0
[  157.844880][ T6777]  ? clear_bhb_loop+0x40/0x90
[  157.849574][ T6777]  ? clear_bhb_loop+0x40/0x90
[  157.854269][ T6777]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.860177][ T6777] RIP: 0033:0x7f0aacf9ce59
[  157.864607][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.884224][ T6777] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.892654][ T6777] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  157.900637][ T6777] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000007
[  157.908623][ T6777] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  157.916603][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.924581][ T6777] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  157.932579][ T6777]  </TASK>
[  158.841909][ T6803] FAULT_INJECTION: forcing a failure.
[  158.841909][ T6803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.870778][ T6803] CPU: 0 PID: 6803 Comm: syz.3.301 Not tainted syzkaller #0
[  158.878101][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  158.888169][ T6803] Call Trace:
[  158.891463][ T6803]  <TASK>
[  158.894415][ T6803]  dump_stack_lvl+0x18c/0x250
[  158.899118][ T6803]  ? show_regs_print_info+0x20/0x20
[  158.904341][ T6803]  ? load_image+0x420/0x420
[  158.908864][ T6803]  ? __might_fault+0xaa/0x120
[  158.913551][ T6803]  ? __lock_acquire+0x7d40/0x7d40
[  158.918592][ T6803]  should_fail_ex+0x39d/0x4d0
[  158.923276][ T6803]  _copy_from_user+0x2f/0xe0
[  158.927868][ T6803]  __sys_bpf+0x23e/0x890
[  158.932106][ T6803]  ? bpf_link_show_fdinfo+0x390/0x390
[  158.937476][ T6803]  ? lock_chain_count+0x20/0x20
[  158.942322][ T6803]  __x64_sys_bpf+0x7c/0x90
[  158.946729][ T6803]  do_syscall_64+0x55/0xb0
[  158.951141][ T6803]  ? clear_bhb_loop+0x40/0x90
[  158.955809][ T6803]  ? clear_bhb_loop+0x40/0x90
[  158.960478][ T6803]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.966362][ T6803] RIP: 0033:0x7fd85ff9ce59
[  158.970768][ T6803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.990368][ T6803] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  158.998777][ T6803] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  159.006746][ T6803] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  159.014706][ T6803] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  159.022664][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.030620][ T6803] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  159.038595][ T6803]  </TASK>
[  162.043183][ T6823] netlink: 'syz.0.305': attribute type 21 has an invalid length.
[  163.676565][ T6844] FAULT_INJECTION: forcing a failure.
[  163.676565][ T6844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.741883][ T6844] CPU: 0 PID: 6844 Comm: syz.0.311 Not tainted syzkaller #0
[  163.744838][ T6850] syzkaller0: entered promiscuous mode
[  163.749200][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  163.749213][ T6844] Call Trace:
[  163.749220][ T6844]  <TASK>
[  163.749228][ T6844]  dump_stack_lvl+0x18c/0x250
[  163.758212][ T6850] syzkaller0: entered allmulticast mode
[  163.764714][ T6844]  ? show_regs_print_info+0x20/0x20
[  163.764737][ T6844]  ? load_image+0x420/0x420
[  163.764761][ T6844]  ? __might_fault+0xaa/0x120
[  163.764781][ T6844]  ? __lock_acquire+0x7d40/0x7d40
[  163.764805][ T6844]  should_fail_ex+0x39d/0x4d0
[  163.805188][ T6844]  _copy_from_user+0x2f/0xe0
[  163.809785][ T6844]  ___sys_sendmsg+0x1c7/0x360
[  163.814468][ T6844]  ? __sys_sendmsg+0x2a0/0x2a0
[  163.819276][ T6844]  __se_sys_sendmsg+0x1c2/0x2b0
[  163.824121][ T6844]  ? __x64_sys_sendmsg+0x80/0x80
[  163.829068][ T6844]  ? syscall_enter_from_user_mode+0x2e/0x80
[  163.834960][ T6844]  do_syscall_64+0x55/0xb0
[  163.839366][ T6844]  ? clear_bhb_loop+0x40/0x90
[  163.844035][ T6844]  ? clear_bhb_loop+0x40/0x90
[  163.848706][ T6844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.854594][ T6844] RIP: 0033:0x7f5a7539ce59
[  163.859002][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.878599][ T6844] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.887007][ T6844] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  163.894973][ T6844] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  163.902940][ T6844] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  163.910902][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.918867][ T6844] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  163.926847][ T6844]  </TASK>
[  168.444042][ T6872] netlink: 'syz.1.316': attribute type 21 has an invalid length.
[  168.673461][ T6885] FAULT_INJECTION: forcing a failure.
[  168.673461][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.684053][ T6880] syzkaller0: entered promiscuous mode
[  168.687406][ T6885] CPU: 1 PID: 6885 Comm: syz.2.320 Not tainted syzkaller #0
[  168.692256][ T6880] syzkaller0: entered allmulticast mode
[  168.699408][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  168.699422][ T6885] Call Trace:
[  168.699436][ T6885]  <TASK>
[  168.699444][ T6885]  dump_stack_lvl+0x18c/0x250
[  168.699471][ T6885]  ? show_regs_print_info+0x20/0x20
[  168.699488][ T6885]  ? load_image+0x420/0x420
[  168.699513][ T6885]  ? __might_fault+0xaa/0x120
[  168.699532][ T6885]  ? __lock_acquire+0x7d40/0x7d40
[  168.699557][ T6885]  should_fail_ex+0x39d/0x4d0
[  168.699587][ T6885]  _copy_from_iter+0x1d9/0x12e0
[  168.754785][ T6885]  ? __virt_addr_valid+0x18c/0x540
[  168.759890][ T6885]  ? __lock_acquire+0x7d40/0x7d40
[  168.764905][ T6885]  ? mark_lock+0x94/0x320
[  168.769225][ T6885]  ? copyout_mc+0x70/0x70
[  168.773543][ T6885]  ? __virt_addr_valid+0x18c/0x540
[  168.778641][ T6885]  ? __virt_addr_valid+0x18c/0x540
[  168.783741][ T6885]  ? __virt_addr_valid+0x469/0x540
[  168.788840][ T6885]  ? __check_object_size+0x506/0xa20
[  168.794119][ T6885]  skb_copy_datagram_from_iter+0xf4/0x6e0
[  168.799842][ T6885]  ? napi_get_frags+0xbb/0x150
[  168.804600][ T6885]  tun_get_user+0x15db/0x3ca0
[  168.809282][ T6885]  ? rcu_read_unlock+0xa0/0xa0
[  168.814045][ T6885]  ? tun_get+0x1c/0x2e0
[  168.818195][ T6885]  ? __lock_acquire+0x7d40/0x7d40
[  168.823222][ T6885]  ? tun_get+0x1c/0x2e0
[  168.827375][ T6885]  tun_chr_write_iter+0x119/0x200
[  168.832405][ T6885]  vfs_write+0x46c/0x990
[  168.836660][ T6885]  ? file_end_write+0x250/0x250
[  168.841504][ T6885]  ? __fget_files+0x43d/0x4b0
[  168.846178][ T6885]  ? __fdget_pos+0x1d8/0x330
[  168.850756][ T6885]  ? ksys_write+0x75/0x260
[  168.855165][ T6885]  ksys_write+0x150/0x260
[  168.859489][ T6885]  ? __ia32_sys_read+0x90/0x90
[  168.864251][ T6885]  ? lockdep_hardirqs_on+0x98/0x150
[  168.869442][ T6885]  do_syscall_64+0x55/0xb0
[  168.873847][ T6885]  ? clear_bhb_loop+0x40/0x90
[  168.878512][ T6885]  ? clear_bhb_loop+0x40/0x90
[  168.883181][ T6885]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.889066][ T6885] RIP: 0033:0x7f852ef9ce59
[  168.893471][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.913064][ T6885] RSP: 002b:00007f852fda3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  168.921466][ T6885] RAX: ffffffffffffffda RBX: 00007f852f216090 RCX: 00007f852ef9ce59
[  168.929428][ T6885] RDX: 0000000000000280 RSI: 0000200000000440 RDI: 0000000000000003
[  168.937390][ T6885] RBP: 00007f852fda3090 R08: 0000000000000000 R09: 0000000000000000
[  168.945355][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.953317][ T6885] R13: 00007f852f216128 R14: 00007f852f216090 R15: 00007ffe9c2c4878
[  168.961286][ T6885]  </TASK>
[  171.561196][ T6887] netlink: 'syz.0.323': attribute type 21 has an invalid length.
[  171.569215][ T6887] netlink: 128 bytes leftover after parsing attributes in process `syz.0.323'.
[  171.578396][ T6887] netlink: 'syz.0.323': attribute type 5 has an invalid length.
[  171.592578][ T6887] netlink: 3 bytes leftover after parsing attributes in process `syz.0.323'.
[  171.699374][ T6903] FAULT_INJECTION: forcing a failure.
[  171.699374][ T6903] name failslab, interval 1, probability 0, space 0, times 0
[  171.714936][ T6903] CPU: 1 PID: 6903 Comm: syz.2.326 Not tainted syzkaller #0
[  171.722256][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  171.732323][ T6903] Call Trace:
[  171.735611][ T6903]  <TASK>
[  171.738551][ T6903]  dump_stack_lvl+0x18c/0x250
[  171.743248][ T6903]  ? show_regs_print_info+0x20/0x20
[  171.748465][ T6903]  ? load_image+0x420/0x420
[  171.752995][ T6903]  ? __might_sleep+0xe0/0xe0
[  171.757604][ T6903]  ? __lock_acquire+0x7d40/0x7d40
[  171.762651][ T6903]  should_fail_ex+0x39d/0x4d0
[  171.767356][ T6903]  should_failslab+0x9/0x20
[  171.771875][ T6903]  slab_pre_alloc_hook+0x59/0x310
[  171.776894][ T6903]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  171.782603][ T6903]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  171.788318][ T6903]  __kmem_cache_alloc_node+0x53/0x250
[  171.793710][ T6903]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  171.799438][ T6903]  __kmalloc+0xa4/0x230
[  171.803598][ T6903]  tomoyo_realpath_from_path+0xe3/0x5d0
[  171.809150][ T6903]  tomoyo_path_number_perm+0x248/0x620
[  171.814612][ T6903]  ? tomoyo_path_number_perm+0x217/0x620
[  171.820238][ T6903]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  171.825701][ T6903]  ? ksys_write+0x1c4/0x260
[  171.830261][ T6903]  ? __fget_files+0x28/0x4b0
[  171.834874][ T6903]  ? __fget_files+0x28/0x4b0
[  171.839498][ T6903]  security_file_ioctl+0x70/0xa0
[  171.844443][ T6903]  __se_sys_ioctl+0x48/0x170
[  171.849035][ T6903]  do_syscall_64+0x55/0xb0
[  171.853459][ T6903]  ? clear_bhb_loop+0x40/0x90
[  171.858151][ T6903]  ? clear_bhb_loop+0x40/0x90
[  171.862816][ T6903]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.868697][ T6903] RIP: 0033:0x7f852ef9ce59
[  171.873121][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.892731][ T6903] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.901130][ T6903] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  171.909085][ T6903] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a
[  171.917042][ T6903] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  171.925011][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.932973][ T6903] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  171.940937][ T6903]  </TASK>
[  171.960974][ T6903] ERROR: Out of memory at tomoyo_realpath_from_path.
[  172.030447][ T6906] netlink: 'syz.3.327': attribute type 2 has an invalid length.
[  172.056308][ T6906] netlink: 'syz.3.327': attribute type 8 has an invalid length.
[  172.067357][ T6906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.327'.
[  172.128743][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'.
[  172.593403][ T6918] netlink: 'syz.3.330': attribute type 21 has an invalid length.
[  175.272081][ T6927] FAULT_INJECTION: forcing a failure.
[  175.272081][ T6927] name failslab, interval 1, probability 0, space 0, times 0
[  175.292508][ T6927] CPU: 1 PID: 6927 Comm: syz.2.334 Not tainted syzkaller #0
[  175.299829][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  175.309901][ T6927] Call Trace:
[  175.313189][ T6927]  <TASK>
[  175.316129][ T6927]  dump_stack_lvl+0x18c/0x250
[  175.320828][ T6927]  ? show_regs_print_info+0x20/0x20
[  175.326038][ T6927]  ? load_image+0x420/0x420
[  175.330565][ T6927]  ? __might_sleep+0xe0/0xe0
[  175.335177][ T6927]  ? __lock_acquire+0x7d40/0x7d40
[  175.340226][ T6927]  should_fail_ex+0x39d/0x4d0
[  175.344935][ T6927]  should_failslab+0x9/0x20
[  175.349462][ T6927]  slab_pre_alloc_hook+0x59/0x310
[  175.354513][ T6927]  ? kernfs_fop_write_iter+0x159/0x520
[  175.359991][ T6927]  ? kernfs_fop_write_iter+0x159/0x520
[  175.365469][ T6927]  __kmem_cache_alloc_node+0x53/0x250
[  175.370872][ T6927]  ? kernfs_fop_write_iter+0x159/0x520
[  175.376357][ T6927]  __kmalloc+0xa4/0x230
[  175.380536][ T6927]  kernfs_fop_write_iter+0x159/0x520
[  175.385856][ T6927]  vfs_write+0x46c/0x990
[  175.390126][ T6927]  ? file_end_write+0x250/0x250
[  175.395007][ T6927]  ? __fget_files+0x43d/0x4b0
[  175.399714][ T6927]  ? __fdget_pos+0x2a3/0x330
[  175.404329][ T6927]  ? ksys_write+0x75/0x260
[  175.408775][ T6927]  ksys_write+0x150/0x260
[  175.413128][ T6927]  ? __ia32_sys_read+0x90/0x90
[  175.417915][ T6927]  ? lockdep_hardirqs_on+0x98/0x150
[  175.423135][ T6927]  do_syscall_64+0x55/0xb0
[  175.427556][ T6927]  ? clear_bhb_loop+0x40/0x90
[  175.432242][ T6927]  ? clear_bhb_loop+0x40/0x90
[  175.436928][ T6927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.442825][ T6927] RIP: 0033:0x7f852ef9ce59
[  175.447243][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.466863][ T6927] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  175.475288][ T6927] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  175.483259][ T6927] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000006
[  175.491230][ T6927] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  175.499198][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.507169][ T6927] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  175.515153][ T6927]  </TASK>
[  176.281798][ T6941] netlink: 'syz.3.337': attribute type 3 has an invalid length.
[  176.325720][ T6941] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.337'.
[  176.412162][ T6951] FAULT_INJECTION: forcing a failure.
[  176.412162][ T6951] name failslab, interval 1, probability 0, space 0, times 0
[  176.425633][ T6951] CPU: 1 PID: 6951 Comm: syz.1.340 Not tainted syzkaller #0
[  176.432943][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  176.443004][ T6951] Call Trace:
[  176.446292][ T6951]  <TASK>
[  176.449229][ T6951]  dump_stack_lvl+0x18c/0x250
[  176.453933][ T6951]  ? show_regs_print_info+0x20/0x20
[  176.459151][ T6951]  ? load_image+0x420/0x420
[  176.463680][ T6951]  ? __might_sleep+0xe0/0xe0
[  176.468287][ T6951]  ? __lock_acquire+0x7d40/0x7d40
[  176.473337][ T6951]  should_fail_ex+0x39d/0x4d0
[  176.478049][ T6951]  should_failslab+0x9/0x20
[  176.482573][ T6951]  slab_pre_alloc_hook+0x59/0x310
[  176.487618][ T6951]  ? kernfs_fop_write_iter+0x159/0x520
[  176.493107][ T6951]  ? kernfs_fop_write_iter+0x159/0x520
[  176.498589][ T6951]  __kmem_cache_alloc_node+0x53/0x250
[  176.503991][ T6951]  ? kernfs_fop_write_iter+0x159/0x520
[  176.509473][ T6951]  __kmalloc+0xa4/0x230
[  176.513658][ T6951]  kernfs_fop_write_iter+0x159/0x520
[  176.518970][ T6951]  vfs_write+0x46c/0x990
[  176.523240][ T6951]  ? file_end_write+0x250/0x250
[  176.528120][ T6951]  ? __fget_files+0x43d/0x4b0
[  176.532821][ T6951]  ? __fdget_pos+0x2a3/0x330
[  176.537421][ T6951]  ? ksys_write+0x75/0x260
[  176.541833][ T6951]  ksys_write+0x150/0x260
[  176.546158][ T6951]  ? __ia32_sys_read+0x90/0x90
[  176.550916][ T6951]  ? lockdep_hardirqs_on+0x98/0x150
[  176.556105][ T6951]  do_syscall_64+0x55/0xb0
[  176.560506][ T6951]  ? clear_bhb_loop+0x40/0x90
[  176.565174][ T6951]  ? clear_bhb_loop+0x40/0x90
[  176.569839][ T6951]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.575722][ T6951] RIP: 0033:0x7f0aacf9ce59
[  176.580136][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.599740][ T6951] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  176.608148][ T6951] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  176.616114][ T6951] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000004
[  176.624079][ T6951] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  176.632037][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.639998][ T6951] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  176.647972][ T6951]  </TASK>
[  176.750505][ T6955] netlink: 'syz.0.341': attribute type 21 has an invalid length.
[  180.308027][ T6981] FAULT_INJECTION: forcing a failure.
[  180.308027][ T6981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.332551][ T6981] CPU: 1 PID: 6981 Comm: syz.1.350 Not tainted syzkaller #0
[  180.339873][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  180.349940][ T6981] Call Trace:
[  180.353234][ T6981]  <TASK>
[  180.356179][ T6981]  dump_stack_lvl+0x18c/0x250
[  180.360877][ T6981]  ? show_regs_print_info+0x20/0x20
[  180.366086][ T6981]  ? load_image+0x420/0x420
[  180.370608][ T6981]  ? __might_fault+0xaa/0x120
[  180.375299][ T6981]  ? __lock_acquire+0x7d40/0x7d40
[  180.380346][ T6981]  should_fail_ex+0x39d/0x4d0
[  180.385051][ T6981]  _copy_from_user+0x2f/0xe0
[  180.389670][ T6981]  ___sys_sendmsg+0x1c7/0x360
[  180.394379][ T6981]  ? __sys_sendmsg+0x2a0/0x2a0
[  180.399181][ T6981]  ? __lock_acquire+0x7d40/0x7d40
[  180.404250][ T6981]  __se_sys_sendmsg+0x1c2/0x2b0
[  180.409116][ T6981]  ? __x64_sys_sendmsg+0x80/0x80
[  180.414087][ T6981]  ? lockdep_hardirqs_on+0x98/0x150
[  180.419308][ T6981]  do_syscall_64+0x55/0xb0
[  180.423734][ T6981]  ? clear_bhb_loop+0x40/0x90
[  180.428426][ T6981]  ? clear_bhb_loop+0x40/0x90
[  180.433120][ T6981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.439025][ T6981] RIP: 0033:0x7f0aacf9ce59
[  180.443460][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.463081][ T6981] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.471519][ T6981] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  180.479505][ T6981] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  180.487488][ T6981] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  180.495474][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.503457][ T6981] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  180.511456][ T6981]  </TASK>
[  180.548001][ T6979] netlink: 'syz.3.349': attribute type 10 has an invalid length.
[  180.585055][ T6984] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.351'.
[  180.621813][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.669633][ T6979] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  180.730570][ T6984] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.351'.
[  180.814899][ T6986] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.352'.
[  180.846636][ T6986] netlink: 'syz.1.352': attribute type 2 has an invalid length.
[  181.022807][ T6992] netlink: 'syz.0.353': attribute type 21 has an invalid length.
[  181.627827][ T6995] syzkaller0: entered promiscuous mode
[  181.686889][ T6995] syzkaller0: entered allmulticast mode
[  181.938022][ T7008] sctp: [Deprecated]: syz.2.359 (pid 7008) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.938022][ T7008] Use struct sctp_sack_info instead
[  184.647889][ T7013] syzkaller0: entered promiscuous mode
[  184.653502][ T7013] syzkaller0: entered allmulticast mode
[  186.106294][ T7035] syzkaller0: entered promiscuous mode
[  186.129534][ T7035] syzkaller0: entered allmulticast mode
[  186.464026][ T7045] FAULT_INJECTION: forcing a failure.
[  186.464026][ T7045] name failslab, interval 1, probability 0, space 0, times 0
[  186.477213][ T7045] CPU: 1 PID: 7045 Comm: syz.2.367 Not tainted syzkaller #0
[  186.484521][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  186.494588][ T7045] Call Trace:
[  186.497877][ T7045]  <TASK>
[  186.500817][ T7045]  dump_stack_lvl+0x18c/0x250
[  186.505519][ T7045]  ? show_regs_print_info+0x20/0x20
[  186.510730][ T7045]  ? load_image+0x420/0x420
[  186.515266][ T7045]  ? __might_sleep+0xe0/0xe0
[  186.519890][ T7045]  ? __lock_acquire+0x7d40/0x7d40
[  186.524932][ T7045]  should_fail_ex+0x39d/0x4d0
[  186.529633][ T7045]  should_failslab+0x9/0x20
[  186.534149][ T7045]  slab_pre_alloc_hook+0x59/0x310
[  186.539178][ T7045]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  186.544890][ T7045]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  186.550597][ T7045]  __kmem_cache_alloc_node+0x53/0x250
[  186.555970][ T7045]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  186.561683][ T7045]  __kmalloc+0xa4/0x230
[  186.565834][ T7045]  tomoyo_realpath_from_path+0xe3/0x5d0
[  186.571377][ T7045]  tomoyo_path_number_perm+0x248/0x620
[  186.576832][ T7045]  ? tomoyo_path_number_perm+0x217/0x620
[  186.582465][ T7045]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  186.587924][ T7045]  ? ktime_get+0x7f/0x280
[  186.592269][ T7045]  ? __fget_files+0x28/0x4b0
[  186.596856][ T7045]  ? __fget_files+0x28/0x4b0
[  186.601446][ T7045]  security_file_ioctl+0x70/0xa0
[  186.606375][ T7045]  __se_sys_ioctl+0x48/0x170
[  186.610962][ T7045]  do_syscall_64+0x55/0xb0
[  186.615367][ T7045]  ? clear_bhb_loop+0x40/0x90
[  186.620033][ T7045]  ? clear_bhb_loop+0x40/0x90
[  186.624702][ T7045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.630588][ T7045] RIP: 0033:0x7f852ef9ce59
[  186.635002][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.654600][ T7045] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  186.663003][ T7045] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  186.670963][ T7045] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000f
[  186.678924][ T7045] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  186.686885][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.694847][ T7045] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  186.702825][ T7045]  </TASK>
[  186.724863][ T7045] ERROR: Out of memory at tomoyo_realpath_from_path.
[  191.149897][ T7043] netlink: 'syz.3.366': attribute type 21 has an invalid length.
[  191.338376][ T7063] FAULT_INJECTION: forcing a failure.
[  191.338376][ T7063] name failslab, interval 1, probability 0, space 0, times 0
[  191.375112][ T7063] CPU: 1 PID: 7063 Comm: syz.3.374 Not tainted syzkaller #0
[  191.382452][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  191.392522][ T7063] Call Trace:
[  191.395812][ T7063]  <TASK>
[  191.398757][ T7063]  dump_stack_lvl+0x18c/0x250
[  191.403458][ T7063]  ? show_regs_print_info+0x20/0x20
[  191.408672][ T7063]  ? load_image+0x420/0x420
[  191.413204][ T7063]  ? __might_sleep+0xe0/0xe0
[  191.417814][ T7063]  ? __lock_acquire+0x7d40/0x7d40
[  191.422858][ T7063]  should_fail_ex+0x39d/0x4d0
[  191.427564][ T7063]  should_failslab+0x9/0x20
[  191.432089][ T7063]  slab_pre_alloc_hook+0x59/0x310
[  191.437136][ T7063]  ? kernfs_fop_write_iter+0x159/0x520
[  191.442623][ T7063]  ? kernfs_fop_write_iter+0x159/0x520
[  191.448105][ T7063]  __kmem_cache_alloc_node+0x53/0x250
[  191.453502][ T7063]  ? kernfs_fop_write_iter+0x159/0x520
[  191.458984][ T7063]  __kmalloc+0xa4/0x230
[  191.463163][ T7063]  kernfs_fop_write_iter+0x159/0x520
[  191.468474][ T7063]  vfs_write+0x46c/0x990
[  191.472741][ T7063]  ? file_end_write+0x250/0x250
[  191.477614][ T7063]  ? __fget_files+0x43d/0x4b0
[  191.482320][ T7063]  ? __fdget_pos+0x2a3/0x330
[  191.486925][ T7063]  ? ksys_write+0x75/0x260
[  191.491366][ T7063]  ksys_write+0x150/0x260
[  191.495723][ T7063]  ? __ia32_sys_read+0x90/0x90
[  191.500512][ T7063]  ? lockdep_hardirqs_on+0x98/0x150
[  191.505735][ T7063]  do_syscall_64+0x55/0xb0
[  191.510166][ T7063]  ? clear_bhb_loop+0x40/0x90
[  191.514863][ T7063]  ? clear_bhb_loop+0x40/0x90
[  191.519564][ T7063]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.525476][ T7063] RIP: 0033:0x7fd85ff9ce59
[  191.529904][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.549525][ T7063] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  191.557954][ T7063] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  191.565942][ T7063] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007
[  191.573925][ T7063] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  191.581910][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.589895][ T7063] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  191.597899][ T7063]  </TASK>
[  191.794621][ T7075] netlink: 'syz.2.376': attribute type 41 has an invalid length.
[  192.047589][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  192.497254][ T7096] netlink: 'syz.1.384': attribute type 21 has an invalid length.
[  194.339475][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.352667][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  194.767243][ T5778] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  196.372489][ T5778] Bluetooth: hci2: command 0x0406 tx timeout
[  196.374515][ T5776] Bluetooth: hci0: command 0x0406 tx timeout
[  196.381614][ T5778] Bluetooth: hci1: command 0x0406 tx timeout
[  196.386695][ T5776] Bluetooth: hci3: command 0x0406 tx timeout
[  197.292245][ T7134] FAULT_INJECTION: forcing a failure.
[  197.292245][ T7134] name failslab, interval 1, probability 0, space 0, times 0
[  197.421884][ T7134] CPU: 1 PID: 7134 Comm: syz.0.394 Not tainted syzkaller #0
[  197.429221][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  197.439287][ T7134] Call Trace:
[  197.442574][ T7134]  <TASK>
[  197.445511][ T7134]  dump_stack_lvl+0x18c/0x250
[  197.450206][ T7134]  ? show_regs_print_info+0x20/0x20
[  197.455410][ T7134]  ? load_image+0x420/0x420
[  197.459933][ T7134]  ? __might_sleep+0xe0/0xe0
[  197.464538][ T7134]  ? __lock_acquire+0x7d40/0x7d40
[  197.469571][ T7134]  ? kvm_sched_clock_read+0x11/0x20
[  197.474786][ T7134]  should_fail_ex+0x39d/0x4d0
[  197.479484][ T7134]  should_failslab+0x9/0x20
[  197.484002][ T7134]  slab_pre_alloc_hook+0x59/0x310
[  197.489045][ T7134]  kmem_cache_alloc+0x5a/0x2d0
[  197.493820][ T7134]  ? getname_flags+0xbb/0x500
[  197.498514][ T7134]  getname_flags+0xbb/0x500
[  197.503038][ T7134]  __x64_sys_mkdirat+0x7c/0xa0
[  197.507811][ T7134]  do_syscall_64+0x55/0xb0
[  197.512232][ T7134]  ? clear_bhb_loop+0x40/0x90
[  197.517004][ T7134]  ? clear_bhb_loop+0x40/0x90
[  197.521694][ T7134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.527607][ T7134] RIP: 0033:0x7f5a7539ce59
[  197.532027][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.551641][ T7134] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  197.560066][ T7134] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  197.568044][ T7134] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  197.576021][ T7134] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  197.583996][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.591972][ T7134] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  197.599965][ T7134]  </TASK>
[  197.707986][ T7132] netlink: 'syz.2.393': attribute type 21 has an invalid length.
[  197.936756][ T7138] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  197.943899][ T7138] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  198.566974][ T7146] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  198.593174][ T7146] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  198.613269][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  202.297013][ T7174] netlink: 'syz.1.405': attribute type 10 has an invalid length.
[  202.402409][ T7176] netlink: 'syz.2.404': attribute type 21 has an invalid length.
[  203.852720][ T7191] netlink: 160 bytes leftover after parsing attributes in process `syz.1.414'.
[  204.079547][ T7191] netlink: 'syz.1.414': attribute type 10 has an invalid length.
[  204.123080][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.130900][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.241278][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.248663][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.256610][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.263817][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.338015][ T7191] team0: Port device bridge0 added
[  204.344768][ T7198] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.415'.
[  205.107654][ T7212] netlink: 160 bytes leftover after parsing attributes in process `syz.2.417'.
[  205.219909][ T7216] FAULT_INJECTION: forcing a failure.
[  205.219909][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.254680][ T7216] CPU: 1 PID: 7216 Comm: syz.2.417 Not tainted syzkaller #0
[  205.261999][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.272058][ T7216] Call Trace:
[  205.275345][ T7216]  <TASK>
[  205.278280][ T7216]  dump_stack_lvl+0x18c/0x250
[  205.282976][ T7216]  ? show_regs_print_info+0x20/0x20
[  205.288181][ T7216]  ? load_image+0x420/0x420
[  205.292702][ T7216]  ? __might_fault+0xaa/0x120
[  205.297387][ T7216]  ? __lock_acquire+0x7d40/0x7d40
[  205.302425][ T7216]  should_fail_ex+0x39d/0x4d0
[  205.307129][ T7216]  _copy_from_user+0x2f/0xe0
[  205.311729][ T7216]  ___sys_sendmsg+0x1c7/0x360
[  205.316423][ T7216]  ? __sys_sendmsg+0x2a0/0x2a0
[  205.321234][ T7216]  ? __lock_acquire+0x7d40/0x7d40
[  205.326297][ T7216]  __se_sys_sendmsg+0x1c2/0x2b0
[  205.331161][ T7216]  ? __x64_sys_sendmsg+0x80/0x80
[  205.336124][ T7216]  ? lockdep_hardirqs_on+0x98/0x150
[  205.341335][ T7216]  do_syscall_64+0x55/0xb0
[  205.345757][ T7216]  ? clear_bhb_loop+0x40/0x90
[  205.350451][ T7216]  ? clear_bhb_loop+0x40/0x90
[  205.355143][ T7216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.361048][ T7216] RIP: 0033:0x7f852ef9ce59
[  205.365477][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.385088][ T7216] RSP: 002b:00007f852fda3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.393512][ T7216] RAX: ffffffffffffffda RBX: 00007f852f216090 RCX: 00007f852ef9ce59
[  205.401490][ T7216] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000007
[  205.409469][ T7216] RBP: 00007f852fda3090 R08: 0000000000000000 R09: 0000000000000000
[  205.417455][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.425432][ T7216] R13: 00007f852f216128 R14: 00007f852f216090 R15: 00007ffe9c2c4878
[  205.433432][ T7216]  </TASK>
[  205.619292][ T7220] netlink: 'syz.3.416': attribute type 21 has an invalid length.
[  206.202895][ T7226] netlink: 160 bytes leftover after parsing attributes in process `syz.0.421'.
[  206.278427][ T7226] netlink: 'syz.0.421': attribute type 29 has an invalid length.
[  206.305623][ T7226] netlink: 'syz.0.421': attribute type 29 has an invalid length.
[  206.333659][ T7226] netlink: 'syz.0.421': attribute type 29 has an invalid length.
[  206.385528][ T7226] netlink: 'syz.0.421': attribute type 10 has an invalid length.
[  206.434965][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.463717][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.471069][ T7226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.498194][ T7226] team0: Port device bridge0 added
[  206.576778][ T7245] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  207.084222][ T7256] netlink: 'syz.3.429': attribute type 21 has an invalid length.
[  208.787919][ T7281] netlink: 'syz.0.437': attribute type 29 has an invalid length.
[  208.877711][ T7281] netlink: 'syz.0.437': attribute type 29 has an invalid length.
[  208.931222][ T7283] netlink: 'syz.0.437': attribute type 29 has an invalid length.
[  209.077816][ T7287] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.439'.
[  209.103151][ T7281] validate_nla: 1 callbacks suppressed
[  209.103207][ T7281] netlink: 'syz.0.437': attribute type 29 has an invalid length.
[  209.302188][ T7292] netlink: 'syz.3.441': attribute type 29 has an invalid length.
[  209.349136][ T7285] netlink: 'syz.0.437': attribute type 29 has an invalid length.
[  209.388304][ T7292] netlink: 'syz.3.441': attribute type 29 has an invalid length.
[  209.481031][ T7293] FAULT_INJECTION: forcing a failure.
[  209.481031][ T7293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.532550][ T7293] CPU: 1 PID: 7293 Comm: syz.3.441 Not tainted syzkaller #0
[  209.539880][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  209.549941][ T7293] Call Trace:
[  209.553227][ T7293]  <TASK>
[  209.556168][ T7293]  dump_stack_lvl+0x18c/0x250
[  209.560862][ T7293]  ? show_regs_print_info+0x20/0x20
[  209.566073][ T7293]  ? load_image+0x420/0x420
[  209.570596][ T7293]  ? __might_fault+0xaa/0x120
[  209.575287][ T7293]  ? __lock_acquire+0x7d40/0x7d40
[  209.580346][ T7293]  should_fail_ex+0x39d/0x4d0
[  209.585058][ T7293]  _copy_from_user+0x2f/0xe0
[  209.589668][ T7293]  ___sys_recvmsg+0x176/0x590
[  209.594367][ T7293]  ? __sys_recvmsg+0x2a0/0x2a0
[  209.599148][ T7293]  ? ksys_write+0x1c4/0x260
[  209.603678][ T7293]  ? __fget_files+0x43d/0x4b0
[  209.608388][ T7293]  __x64_sys_recvmsg+0x20c/0x2e0
[  209.613346][ T7293]  ? ___sys_recvmsg+0x590/0x590
[  209.618225][ T7293]  ? lockdep_hardirqs_on+0x98/0x150
[  209.623442][ T7293]  do_syscall_64+0x55/0xb0
[  209.627867][ T7293]  ? clear_bhb_loop+0x40/0x90
[  209.632556][ T7293]  ? clear_bhb_loop+0x40/0x90
[  209.637248][ T7293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  209.643151][ T7293] RIP: 0033:0x7fd85ff9ce59
[  209.647576][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.667194][ T7293] RSP: 002b:00007fd860f08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  209.675626][ T7293] RAX: ffffffffffffffda RBX: 00007fd860216090 RCX: 00007fd85ff9ce59
[  209.683614][ T7293] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000007
[  209.691608][ T7293] RBP: 00007fd860f08090 R08: 0000000000000000 R09: 0000000000000000
[  209.699589][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.707570][ T7293] R13: 00007fd860216128 R14: 00007fd860216090 R15: 00007ffe104c8188
[  209.715568][ T7293]  </TASK>
[  210.007143][ T7292] netlink: 'syz.3.441': attribute type 29 has an invalid length.
[  210.101842][ T7294] netlink: 'syz.3.441': attribute type 29 has an invalid length.
[  210.146545][ T7292] netlink: 'syz.3.441': attribute type 29 has an invalid length.
[  210.194986][ T7296] netlink: 'syz.1.442': attribute type 29 has an invalid length.
[  210.392620][ T7296] netlink: 'syz.1.442': attribute type 29 has an invalid length.
[  210.501572][ T7307] netlink: 'syz.0.444': attribute type 21 has an invalid length.
[  210.594218][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  212.262328][ T7335] FAULT_INJECTION: forcing a failure.
[  212.262328][ T7335] name failslab, interval 1, probability 0, space 0, times 0
[  212.350063][ T7335] CPU: 1 PID: 7335 Comm: syz.3.454 Not tainted syzkaller #0
[  212.357425][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  212.367499][ T7335] Call Trace:
[  212.370794][ T7335]  <TASK>
[  212.373743][ T7335]  dump_stack_lvl+0x18c/0x250
[  212.378450][ T7335]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.384641][ T7335]  ? show_regs_print_info+0x20/0x20
[  212.389862][ T7335]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.396059][ T7335]  should_fail_ex+0x39d/0x4d0
[  212.400770][ T7335]  should_failslab+0x9/0x20
[  212.405300][ T7335]  slab_pre_alloc_hook+0x59/0x310
[  212.410355][ T7335]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  212.416094][ T7335]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  212.421836][ T7335]  __kmem_cache_alloc_node+0x53/0x250
[  212.427239][ T7335]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  212.432980][ T7335]  __kmalloc+0xa4/0x230
[  212.437172][ T7335]  tomoyo_realpath_from_path+0xe3/0x5d0
[  212.442757][ T7335]  tomoyo_path_number_perm+0x248/0x620
[  212.448243][ T7335]  ? tomoyo_path_number_perm+0x217/0x620
[  212.453902][ T7335]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  212.459389][ T7335]  ? hrtimer_interrupt+0x597/0x9c0
[  212.464524][ T7335]  ? ktime_get+0x7f/0x280
[  212.468922][ T7335]  ? __fget_files+0x28/0x4b0
[  212.473535][ T7335]  ? __fget_files+0x28/0x4b0
[  212.478168][ T7335]  security_file_ioctl+0x70/0xa0
[  212.483123][ T7335]  __se_sys_ioctl+0x48/0x170
[  212.487735][ T7335]  do_syscall_64+0x55/0xb0
[  212.492167][ T7335]  ? clear_bhb_loop+0x40/0x90
[  212.496862][ T7335]  ? clear_bhb_loop+0x40/0x90
[  212.501565][ T7335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.507484][ T7335] RIP: 0033:0x7fd85ff9ce59
[  212.511925][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.531556][ T7335] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.539996][ T7335] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  212.547987][ T7335] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b
[  212.555975][ T7335] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  212.563960][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.571939][ T7335] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  212.579932][ T7335]  </TASK>
[  212.622546][ T7335] ERROR: Out of memory at tomoyo_realpath_from_path.
[  213.889420][ T7369] FAULT_INJECTION: forcing a failure.
[  213.889420][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.919591][ T7369] CPU: 0 PID: 7369 Comm: syz.1.463 Not tainted syzkaller #0
[  213.926917][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  213.936988][ T7369] Call Trace:
[  213.940276][ T7369]  <TASK>
[  213.943221][ T7369]  dump_stack_lvl+0x18c/0x250
[  213.947918][ T7369]  ? show_regs_print_info+0x20/0x20
[  213.953134][ T7369]  ? load_image+0x420/0x420
[  213.957655][ T7369]  ? __might_fault+0xaa/0x120
[  213.962341][ T7369]  ? __lock_acquire+0x7d40/0x7d40
[  213.967380][ T7369]  should_fail_ex+0x39d/0x4d0
[  213.972085][ T7369]  _copy_from_user+0x2f/0xe0
[  213.976692][ T7369]  ___sys_recvmsg+0x176/0x590
[  213.981388][ T7369]  ? __sys_recvmsg+0x2a0/0x2a0
[  213.986172][ T7369]  ? ksys_write+0x1c4/0x260
[  213.990703][ T7369]  ? __fget_files+0x43d/0x4b0
[  213.995414][ T7369]  __x64_sys_recvmsg+0x20c/0x2e0
[  214.000366][ T7369]  ? ___sys_recvmsg+0x590/0x590
[  214.005244][ T7369]  ? lockdep_hardirqs_on+0x98/0x150
[  214.010463][ T7369]  do_syscall_64+0x55/0xb0
[  214.014893][ T7369]  ? clear_bhb_loop+0x40/0x90
[  214.019587][ T7369]  ? clear_bhb_loop+0x40/0x90
[  214.024283][ T7369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.030189][ T7369] RIP: 0033:0x7f0aacf9ce59
[  214.034615][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.054236][ T7369] RSP: 002b:00007f0aade16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  214.062668][ T7369] RAX: ffffffffffffffda RBX: 00007f0aad216090 RCX: 00007f0aacf9ce59
[  214.070649][ T7369] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000007
[  214.078628][ T7369] RBP: 00007f0aade16090 R08: 0000000000000000 R09: 0000000000000000
[  214.086613][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.094593][ T7369] R13: 00007f0aad216128 R14: 00007f0aad216090 R15: 00007ffd0a845638
[  214.102592][ T7369]  </TASK>
[  216.818628][ T7367] validate_nla: 4 callbacks suppressed
[  216.818672][ T7367] netlink: 'syz.1.463': attribute type 29 has an invalid length.
[  217.290901][ T7384] netlink: 'syz.0.468': attribute type 29 has an invalid length.
[  217.300718][ T7384] netlink: 'syz.0.468': attribute type 29 has an invalid length.
[  217.330751][ T7384] netlink: 'syz.0.468': attribute type 29 has an invalid length.
[  217.368163][ T7384] netlink: 'syz.0.468': attribute type 29 has an invalid length.
[  217.413007][ T7384] netlink: 'syz.0.468': attribute type 29 has an invalid length.
[  217.677152][ T7391] netlink: 'syz.0.468': attribute type 29 has an invalid length.
[  217.716343][ T7392] netlink: 'syz.3.471': attribute type 29 has an invalid length.
[  217.743986][ T7392] netlink: 'syz.3.471': attribute type 29 has an invalid length.
[  217.766084][ T7392] netlink: 'syz.3.471': attribute type 29 has an invalid length.
[  219.304377][ T7424] FAULT_INJECTION: forcing a failure.
[  219.304377][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.347233][ T7424] CPU: 0 PID: 7424 Comm: syz.3.480 Not tainted syzkaller #0
[  219.354566][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.364645][ T7424] Call Trace:
[  219.367946][ T7424]  <TASK>
[  219.370889][ T7424]  dump_stack_lvl+0x18c/0x250
[  219.375611][ T7424]  ? show_regs_print_info+0x20/0x20
[  219.380815][ T7424]  ? load_image+0x420/0x420
[  219.385326][ T7424]  ? __might_fault+0xaa/0x120
[  219.390001][ T7424]  ? __lock_acquire+0x7d40/0x7d40
[  219.395037][ T7424]  should_fail_ex+0x39d/0x4d0
[  219.399734][ T7424]  _copy_from_user+0x2f/0xe0
[  219.404335][ T7424]  ___sys_sendmsg+0x1c7/0x360
[  219.409012][ T7424]  ? get_pid_task+0x20/0x1e0
[  219.413602][ T7424]  ? __sys_sendmsg+0x2a0/0x2a0
[  219.418379][ T7424]  ? __lock_acquire+0x7d40/0x7d40
[  219.423415][ T7424]  __se_sys_sendmsg+0x1c2/0x2b0
[  219.428259][ T7424]  ? __x64_sys_sendmsg+0x80/0x80
[  219.433200][ T7424]  ? lockdep_hardirqs_on+0x98/0x150
[  219.438396][ T7424]  do_syscall_64+0x55/0xb0
[  219.442800][ T7424]  ? clear_bhb_loop+0x40/0x90
[  219.447468][ T7424]  ? clear_bhb_loop+0x40/0x90
[  219.452139][ T7424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.458028][ T7424] RIP: 0033:0x7fd85ff9ce59
[  219.462437][ T7424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.482032][ T7424] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.490438][ T7424] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  219.498423][ T7424] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004
[  219.506389][ T7424] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  219.514357][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.522316][ T7424] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  219.530301][ T7424]  </TASK>
[  219.798669][ T7437] FAULT_INJECTION: forcing a failure.
[  219.798669][ T7437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.829349][ T7437] CPU: 1 PID: 7437 Comm: syz.3.485 Not tainted syzkaller #0
[  219.836683][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.846750][ T7437] Call Trace:
[  219.850056][ T7437]  <TASK>
[  219.853003][ T7437]  dump_stack_lvl+0x18c/0x250
[  219.857706][ T7437]  ? show_regs_print_info+0x20/0x20
[  219.862926][ T7437]  ? load_image+0x420/0x420
[  219.867451][ T7437]  ? __might_fault+0xaa/0x120
[  219.872142][ T7437]  ? __lock_acquire+0x7d40/0x7d40
[  219.877189][ T7437]  should_fail_ex+0x39d/0x4d0
[  219.881894][ T7437]  _copy_from_user+0x2f/0xe0
[  219.886508][ T7437]  __sys_bpf+0x23e/0x890
[  219.890772][ T7437]  ? bpf_link_show_fdinfo+0x390/0x390
[  219.896176][ T7437]  ? lock_chain_count+0x20/0x20
[  219.901058][ T7437]  __x64_sys_bpf+0x7c/0x90
[  219.905498][ T7437]  do_syscall_64+0x55/0xb0
[  219.909929][ T7437]  ? clear_bhb_loop+0x40/0x90
[  219.914624][ T7437]  ? clear_bhb_loop+0x40/0x90
[  219.919317][ T7437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.925211][ T7437] RIP: 0033:0x7fd85ff9ce59
[  219.929615][ T7437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.949216][ T7437] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  219.957621][ T7437] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  219.965581][ T7437] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000008
[  219.973543][ T7437] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  219.981504][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.989464][ T7437] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  219.997436][ T7437]  </TASK>
[  221.183927][ T7467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.495'.
[  221.856361][ T7491] FAULT_INJECTION: forcing a failure.
[  221.856361][ T7491] name failslab, interval 1, probability 0, space 0, times 0
[  221.887708][ T7483] validate_nla: 6 callbacks suppressed
[  221.887751][ T7483] netlink: 'syz.3.502': attribute type 21 has an invalid length.
[  221.892394][ T7491] CPU: 0 PID: 7491 Comm: syz.0.505 Not tainted syzkaller #0
[  221.908313][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  221.918384][ T7491] Call Trace:
[  221.921682][ T7491]  <TASK>
[  221.924625][ T7491]  dump_stack_lvl+0x18c/0x250
[  221.929340][ T7491]  ? show_regs_print_info+0x20/0x20
[  221.934561][ T7491]  ? load_image+0x420/0x420
[  221.939088][ T7491]  ? __might_sleep+0xe0/0xe0
[  221.943705][ T7491]  ? __lock_acquire+0x7d40/0x7d40
[  221.948751][ T7491]  should_fail_ex+0x39d/0x4d0
[  221.953455][ T7491]  should_failslab+0x9/0x20
[  221.957974][ T7491]  slab_pre_alloc_hook+0x59/0x310
[  221.963018][ T7491]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  221.968754][ T7491]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  221.974486][ T7491]  __kmem_cache_alloc_node+0x53/0x250
[  221.979878][ T7491]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  221.985607][ T7491]  __kmalloc+0xa4/0x230
[  221.989801][ T7491]  tomoyo_realpath_from_path+0xe3/0x5d0
[  221.995383][ T7491]  tomoyo_path_number_perm+0x248/0x620
[  222.000866][ T7491]  ? tomoyo_path_number_perm+0x217/0x620
[  222.006521][ T7491]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  222.012005][ T7491]  ? ksys_write+0x1c4/0x260
[  222.016564][ T7491]  ? __fget_files+0x28/0x4b0
[  222.021185][ T7491]  ? __fget_files+0x28/0x4b0
[  222.025811][ T7491]  security_file_ioctl+0x70/0xa0
[  222.030767][ T7491]  __se_sys_ioctl+0x48/0x170
[  222.035379][ T7491]  do_syscall_64+0x55/0xb0
[  222.039803][ T7491]  ? clear_bhb_loop+0x40/0x90
[  222.044492][ T7491]  ? clear_bhb_loop+0x40/0x90
[  222.049187][ T7491]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.055101][ T7491] RIP: 0033:0x7f5a7539ce59
[  222.059529][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.079152][ T7491] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  222.087581][ T7491] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  222.095563][ T7491] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000004
[  222.103561][ T7491] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  222.111546][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.119536][ T7491] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  222.127639][ T7491]  </TASK>
[  222.152754][ T7491] ERROR: Out of memory at tomoyo_realpath_from_path.
[  223.315596][ T7516] FAULT_INJECTION: forcing a failure.
[  223.315596][ T7516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.356408][ T7516] CPU: 0 PID: 7516 Comm: syz.2.514 Not tainted syzkaller #0
[  223.363752][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  223.373830][ T7516] Call Trace:
[  223.377141][ T7516]  <TASK>
[  223.380089][ T7516]  dump_stack_lvl+0x18c/0x250
[  223.384794][ T7516]  ? show_regs_print_info+0x20/0x20
[  223.390015][ T7516]  ? load_image+0x420/0x420
[  223.394549][ T7516]  ? __might_fault+0xaa/0x120
[  223.399252][ T7516]  ? __lock_acquire+0x7d40/0x7d40
[  223.404313][ T7516]  should_fail_ex+0x39d/0x4d0
[  223.409030][ T7516]  _copy_from_user+0x2f/0xe0
[  223.413647][ T7516]  sk_setsockopt+0x2b2/0x2bc0
[  223.418356][ T7516]  ? sockopt_capable+0x60/0x60
[  223.423155][ T7516]  ? aa_sk_perm+0x83c/0x970
[  223.427677][ T7516]  ? __fget_files+0x28/0x4b0
[  223.432300][ T7516]  ? aa_af_perm+0x330/0x330
[  223.436828][ T7516]  ? __fget_files+0x28/0x4b0
[  223.441440][ T7516]  ? __fget_files+0x28/0x4b0
[  223.446055][ T7516]  ? aa_sock_opt_perm+0x74/0x100
[  223.451023][ T7516]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  223.456599][ T7516]  ? security_socket_setsockopt+0x7e/0xa0
[  223.462349][ T7516]  do_sock_setsockopt+0x11b/0x1a0
[  223.467399][ T7516]  __x64_sys_setsockopt+0x182/0x200
[  223.472631][ T7516]  do_syscall_64+0x55/0xb0
[  223.477076][ T7516]  ? clear_bhb_loop+0x40/0x90
[  223.481776][ T7516]  ? clear_bhb_loop+0x40/0x90
[  223.486477][ T7516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.492398][ T7516] RIP: 0033:0x7f852ef9ce59
[  223.496834][ T7516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.516467][ T7516] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  223.524910][ T7516] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  223.532910][ T7516] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000003
[  223.540903][ T7516] RBP: 00007f852fdc4090 R08: 0000000000000004 R09: 0000000000000000
[  223.548894][ T7516] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  223.556887][ T7516] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  223.564896][ T7516]  </TASK>
[  223.943793][ T7520] netlink: 'syz.3.515': attribute type 21 has an invalid length.
[  225.936336][ T7544] FAULT_INJECTION: forcing a failure.
[  225.936336][ T7544] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.974497][ T7544] CPU: 1 PID: 7544 Comm: syz.2.524 Not tainted syzkaller #0
[  225.981824][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  225.991880][ T7544] Call Trace:
[  225.995155][ T7544]  <TASK>
[  225.998078][ T7544]  dump_stack_lvl+0x18c/0x250
[  226.002757][ T7544]  ? show_regs_print_info+0x20/0x20
[  226.007948][ T7544]  ? load_image+0x420/0x420
[  226.012451][ T7544]  ? __might_fault+0xaa/0x120
[  226.017120][ T7544]  ? __lock_acquire+0x7d40/0x7d40
[  226.022156][ T7544]  should_fail_ex+0x39d/0x4d0
[  226.026846][ T7544]  _copy_from_user+0x2f/0xe0
[  226.031438][ T7544]  ___sys_sendmsg+0x1c7/0x360
[  226.036117][ T7544]  ? __sys_sendmsg+0x2a0/0x2a0
[  226.040892][ T7544]  ? __lock_acquire+0x7d40/0x7d40
[  226.045928][ T7544]  __se_sys_sendmsg+0x1c2/0x2b0
[  226.050788][ T7544]  ? __x64_sys_sendmsg+0x80/0x80
[  226.055734][ T7544]  ? lockdep_hardirqs_on+0x98/0x150
[  226.060937][ T7544]  do_syscall_64+0x55/0xb0
[  226.065363][ T7544]  ? clear_bhb_loop+0x40/0x90
[  226.070055][ T7544]  ? clear_bhb_loop+0x40/0x90
[  226.074744][ T7544]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.080633][ T7544] RIP: 0033:0x7f852ef9ce59
[  226.085050][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.104656][ T7544] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.113068][ T7544] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  226.121032][ T7544] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003
[  226.128998][ T7544] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  226.136966][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.144929][ T7544] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  226.152914][ T7544]  </TASK>
[  226.918553][ T7556] netlink: 'syz.1.527': attribute type 21 has an invalid length.
[  227.922995][ T7585] FAULT_INJECTION: forcing a failure.
[  227.922995][ T7585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.942523][ T7583] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.534'.
[  227.944528][ T7585] CPU: 1 PID: 7585 Comm: syz.1.536 Not tainted syzkaller #0
[  227.958960][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  227.969029][ T7585] Call Trace:
[  227.972303][ T7585]  <TASK>
[  227.975228][ T7585]  dump_stack_lvl+0x18c/0x250
[  227.979907][ T7585]  ? show_regs_print_info+0x20/0x20
[  227.985100][ T7585]  ? load_image+0x420/0x420
[  227.989609][ T7585]  ? __lock_acquire+0x7d40/0x7d40
[  227.994629][ T7585]  ? snprintf+0xe9/0x140
[  227.998868][ T7585]  should_fail_ex+0x39d/0x4d0
[  228.003550][ T7585]  _copy_to_user+0x2f/0xa0
[  228.007971][ T7585]  simple_read_from_buffer+0xe7/0x150
[  228.013358][ T7585]  proc_fail_nth_read+0x1e8/0x260
[  228.018381][ T7585]  ? proc_fault_inject_write+0x360/0x360
[  228.024016][ T7585]  ? fsnotify_perm+0x271/0x5e0
[  228.028777][ T7585]  ? proc_fault_inject_write+0x360/0x360
[  228.034409][ T7585]  vfs_read+0x28b/0x970
[  228.038564][ T7585]  ? kernel_read+0x1e0/0x1e0
[  228.043151][ T7585]  ? __fget_files+0x28/0x4b0
[  228.047736][ T7585]  ? __fget_files+0x28/0x4b0
[  228.052322][ T7585]  ? __fget_files+0x43d/0x4b0
[  228.057011][ T7585]  ? __fdget_pos+0x2a3/0x330
[  228.061601][ T7585]  ? ksys_read+0x75/0x260
[  228.065928][ T7585]  ksys_read+0x150/0x260
[  228.070185][ T7585]  ? vfs_write+0x990/0x990
[  228.074613][ T7585]  ? lockdep_hardirqs_on+0x98/0x150
[  228.079814][ T7585]  do_syscall_64+0x55/0xb0
[  228.084231][ T7585]  ? clear_bhb_loop+0x40/0x90
[  228.088908][ T7585]  ? clear_bhb_loop+0x40/0x90
[  228.093604][ T7585]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.099503][ T7585] RIP: 0033:0x7f0aacf5d68e
[  228.103922][ T7585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  228.123538][ T7585] RSP: 002b:00007f0aade36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  228.131971][ T7585] RAX: ffffffffffffffda RBX: 00007f0aade376c0 RCX: 00007f0aacf5d68e
[  228.139956][ T7585] RDX: 000000000000000f RSI: 00007f0aade370a0 RDI: 0000000000000004
[  228.147934][ T7585] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  228.155906][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.163874][ T7585] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  228.171872][ T7585]  </TASK>
[  228.230013][ T7583] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.534'.
[  228.341348][ T7591] 
: port 1(bond0) entered blocking state
[  228.394690][ T7591] 
: port 1(bond0) entered disabled state
[  228.400648][ T7591] bond0: entered allmulticast mode
[  228.425462][ T7591] bond_slave_0: entered allmulticast mode
[  228.438141][ T7591] bond_slave_1: entered allmulticast mode
[  228.457763][ T7591] bond0: entered promiscuous mode
[  228.466465][ T7591] bond_slave_0: entered promiscuous mode
[  228.472300][ T7591] bond_slave_1: entered promiscuous mode
[  228.722895][ T7599] netlink: 'syz.1.541': attribute type 21 has an invalid length.
[  228.973909][ T7607] FAULT_INJECTION: forcing a failure.
[  228.973909][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.001577][ T7607] CPU: 0 PID: 7607 Comm: syz.0.543 Not tainted syzkaller #0
[  229.008918][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  229.018992][ T7607] Call Trace:
[  229.022287][ T7607]  <TASK>
[  229.025233][ T7607]  dump_stack_lvl+0x18c/0x250
[  229.029939][ T7607]  ? show_regs_print_info+0x20/0x20
[  229.035161][ T7607]  ? load_image+0x420/0x420
[  229.039690][ T7607]  ? __might_fault+0xaa/0x120
[  229.044381][ T7607]  ? __lock_acquire+0x7d40/0x7d40
[  229.049440][ T7607]  should_fail_ex+0x39d/0x4d0
[  229.054147][ T7607]  _copy_from_user+0x2f/0xe0
[  229.058764][ T7607]  ___sys_recvmsg+0x176/0x590
[  229.063470][ T7607]  ? __sys_recvmsg+0x2a0/0x2a0
[  229.068270][ T7607]  ? ksys_write+0x1c4/0x260
[  229.072808][ T7607]  ? __fget_files+0x43d/0x4b0
[  229.077525][ T7607]  __x64_sys_recvmsg+0x20c/0x2e0
[  229.082486][ T7607]  ? ___sys_recvmsg+0x590/0x590
[  229.087369][ T7607]  ? lockdep_hardirqs_on+0x98/0x150
[  229.092659][ T7607]  do_syscall_64+0x55/0xb0
[  229.097098][ T7607]  ? clear_bhb_loop+0x40/0x90
[  229.101796][ T7607]  ? clear_bhb_loop+0x40/0x90
[  229.106498][ T7607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.112417][ T7607] RIP: 0033:0x7f5a7539ce59
[  229.116848][ T7607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.136470][ T7607] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  229.144905][ T7607] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  229.152892][ T7607] RDX: 0000000000000002 RSI: 0000200000004080 RDI: 0000000000000003
[  229.160876][ T7607] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  229.168854][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.176824][ T7607] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  229.184799][ T7607]  </TASK>
[  232.811738][ T7626] FAULT_INJECTION: forcing a failure.
[  232.811738][ T7626] name failslab, interval 1, probability 0, space 0, times 0
[  232.828149][ T7626] CPU: 1 PID: 7626 Comm: syz.3.550 Not tainted syzkaller #0
[  232.835469][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  232.845534][ T7626] Call Trace:
[  232.848819][ T7626]  <TASK>
[  232.851757][ T7626]  dump_stack_lvl+0x18c/0x250
[  232.856455][ T7626]  ? show_regs_print_info+0x20/0x20
[  232.861663][ T7626]  ? load_image+0x420/0x420
[  232.866186][ T7626]  ? __might_sleep+0xe0/0xe0
[  232.870791][ T7626]  ? __lock_acquire+0x7d40/0x7d40
[  232.875824][ T7626]  ? mark_lock+0x94/0x320
[  232.880164][ T7626]  should_fail_ex+0x39d/0x4d0
[  232.884871][ T7626]  should_failslab+0x9/0x20
[  232.889397][ T7626]  slab_pre_alloc_hook+0x59/0x310
[  232.894442][ T7626]  kmem_cache_alloc_node+0x60/0x320
[  232.899650][ T7626]  ? __alloc_skb+0x103/0x2c0
[  232.904247][ T7626]  __alloc_skb+0x103/0x2c0
[  232.908672][ T7626]  inet_netconf_notify_devconf+0x173/0x230
[  232.914491][ T7626]  inetdev_event+0x7c8/0x1630
[  232.919183][ T7626]  ? devinet_exit_net+0x220/0x220
[  232.924232][ T7626]  notifier_call_chain+0x197/0x380
[  232.929361][ T7626]  unregister_netdevice_many_notify+0x100d/0x1900
[  232.935801][ T7626]  ? trace_raw_output_contention_end+0xd0/0xd0
[  232.941960][ T7626]  ? unregister_netdevice_many+0x20/0x20
[  232.947603][ T7626]  ? rcu_is_watching+0x15/0xb0
[  232.952376][ T7626]  ? trace_contention_end+0x39/0xe0
[  232.957576][ T7626]  ? __mutex_lock+0x315/0xcc0
[  232.962280][ T7626]  unregister_netdevice_queue+0x32c/0x370
[  232.968007][ T7626]  ? list_netdevice+0x730/0x730
[  232.972878][ T7626]  ppp_release+0xf0/0x1f0
[  232.977214][ T7626]  ? ppp_open+0x70/0x70
[  232.981378][ T7626]  __fput+0x234/0x970
[  232.985380][ T7626]  __se_sys_close+0x15f/0x220
[  232.990072][ T7626]  do_syscall_64+0x55/0xb0
[  232.994500][ T7626]  ? clear_bhb_loop+0x40/0x90
[  232.999199][ T7626]  ? clear_bhb_loop+0x40/0x90
[  233.003909][ T7626]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.009813][ T7626] RIP: 0033:0x7fd85ff9ce59
[  233.014237][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.033855][ T7626] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  233.042275][ T7626] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  233.050249][ T7626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  233.058229][ T7626] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  233.066209][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.074189][ T7626] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  233.082187][ T7626]  </TASK>
[  233.340942][ T7644] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.554'.
[  233.728783][ T7653] netlink: 'syz.1.556': attribute type 21 has an invalid length.
[  234.195281][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  235.556028][ T7678] FAULT_INJECTION: forcing a failure.
[  235.556028][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.576845][ T7678] CPU: 0 PID: 7678 Comm: syz.0.564 Not tainted syzkaller #0
[  235.584151][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  235.594222][ T7678] Call Trace:
[  235.597512][ T7678]  <TASK>
[  235.600467][ T7678]  dump_stack_lvl+0x18c/0x250
[  235.605173][ T7678]  ? show_regs_print_info+0x20/0x20
[  235.610377][ T7678]  ? load_image+0x420/0x420
[  235.614883][ T7678]  ? __might_fault+0xaa/0x120
[  235.619552][ T7678]  ? __lock_acquire+0x7d40/0x7d40
[  235.624599][ T7678]  should_fail_ex+0x39d/0x4d0
[  235.629293][ T7678]  _copy_from_user+0x2f/0xe0
[  235.633882][ T7678]  ___sys_recvmsg+0x176/0x590
[  235.638563][ T7678]  ? __sys_recvmsg+0x2a0/0x2a0
[  235.643328][ T7678]  ? ksys_write+0x1c4/0x260
[  235.647841][ T7678]  ? __fget_files+0x43d/0x4b0
[  235.652533][ T7678]  __x64_sys_recvmsg+0x20c/0x2e0
[  235.657475][ T7678]  ? ___sys_recvmsg+0x590/0x590
[  235.662334][ T7678]  ? lockdep_hardirqs_on+0x98/0x150
[  235.667537][ T7678]  do_syscall_64+0x55/0xb0
[  235.671942][ T7678]  ? clear_bhb_loop+0x40/0x90
[  235.676611][ T7678]  ? clear_bhb_loop+0x40/0x90
[  235.681283][ T7678]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.687172][ T7678] RIP: 0033:0x7f5a7539ce59
[  235.691580][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.711181][ T7678] RSP: 002b:00007f5a7632b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  235.719593][ T7678] RAX: ffffffffffffffda RBX: 00007f5a75616090 RCX: 00007f5a7539ce59
[  235.727557][ T7678] RDX: 0000000000010000 RSI: 00002000000002c0 RDI: 0000000000000003
[  235.735520][ T7678] RBP: 00007f5a7632b090 R08: 0000000000000000 R09: 0000000000000000
[  235.743483][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.751442][ T7678] R13: 00007f5a75616128 R14: 00007f5a75616090 R15: 00007ffd0b5469b8
[  235.759416][ T7678]  </TASK>
[  236.242603][ T7690] FAULT_INJECTION: forcing a failure.
[  236.242603][ T7690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.288997][ T7690] CPU: 0 PID: 7690 Comm: syz.1.569 Not tainted syzkaller #0
[  236.296323][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  236.306396][ T7690] Call Trace:
[  236.309686][ T7690]  <TASK>
[  236.312640][ T7690]  dump_stack_lvl+0x18c/0x250
[  236.317348][ T7690]  ? show_regs_print_info+0x20/0x20
[  236.322567][ T7690]  ? load_image+0x420/0x420
[  236.327098][ T7690]  ? __might_fault+0xaa/0x120
[  236.331803][ T7690]  ? __lock_acquire+0x7d40/0x7d40
[  236.336855][ T7690]  should_fail_ex+0x39d/0x4d0
[  236.341550][ T7690]  _copy_from_user+0x2f/0xe0
[  236.346142][ T7690]  __sys_bpf+0x23e/0x890
[  236.350381][ T7690]  ? bpf_link_show_fdinfo+0x390/0x390
[  236.355757][ T7690]  ? lock_chain_count+0x20/0x20
[  236.360606][ T7690]  __x64_sys_bpf+0x7c/0x90
[  236.365017][ T7690]  do_syscall_64+0x55/0xb0
[  236.369422][ T7690]  ? clear_bhb_loop+0x40/0x90
[  236.374093][ T7690]  ? clear_bhb_loop+0x40/0x90
[  236.378765][ T7690]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.384654][ T7690] RIP: 0033:0x7f0aacf9ce59
[  236.389065][ T7690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.408670][ T7690] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  236.417084][ T7690] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  236.425049][ T7690] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002
[  236.433010][ T7690] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  236.440968][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.448927][ T7690] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  236.456901][ T7690]  </TASK>
[  236.530017][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  236.730495][ T7694] netlink: 'syz.0.571': attribute type 21 has an invalid length.
[  239.977932][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  240.305257][ T7741] netlink: 'syz.2.585': attribute type 21 has an invalid length.
[  240.816115][ T7735] FAULT_INJECTION: forcing a failure.
[  240.816115][ T7735] name failslab, interval 1, probability 0, space 0, times 0
[  240.835949][ T7735] CPU: 1 PID: 7735 Comm: syz.0.583 Not tainted syzkaller #0
[  240.843265][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  240.853339][ T7735] Call Trace:
[  240.856629][ T7735]  <TASK>
[  240.859572][ T7735]  dump_stack_lvl+0x18c/0x250
[  240.864271][ T7735]  ? show_regs_print_info+0x20/0x20
[  240.869492][ T7735]  ? load_image+0x420/0x420
[  240.874017][ T7735]  ? __might_sleep+0xe0/0xe0
[  240.878624][ T7735]  ? __lock_acquire+0x7d40/0x7d40
[  240.883667][ T7735]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.888891][ T7735]  should_fail_ex+0x39d/0x4d0
[  240.893596][ T7735]  should_failslab+0x9/0x20
[  240.898118][ T7735]  slab_pre_alloc_hook+0x59/0x310
[  240.903159][ T7735]  ? acct_exit_ns+0xf0/0xf0
[  240.907684][ T7735]  kmem_cache_alloc+0x5a/0x2d0
[  240.912469][ T7735]  ? taskstats_exit+0xcc/0x9d0
[  240.917259][ T7735]  taskstats_exit+0xcc/0x9d0
[  240.921881][ T7735]  ? tty_audit_exit+0x152/0x200
[  240.926754][ T7735]  do_exit+0x8d0/0x2460
[  240.930939][ T7735]  ? get_signal+0x1068/0x13f0
[  240.935632][ T7735]  ? put_task_struct+0xc0/0xc0
[  240.940417][ T7735]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  240.946416][ T7735]  ? get_signal+0x1068/0x13f0
[  240.951112][ T7735]  ? lock_chain_count+0x20/0x20
[  240.955983][ T7735]  do_group_exit+0x21b/0x2d0
[  240.960595][ T7735]  ? lockdep_hardirqs_on+0x98/0x150
[  240.965810][ T7735]  get_signal+0x12fc/0x13f0
[  240.970346][ T7735]  arch_do_signal_or_restart+0xc2/0x800
[  240.975916][ T7735]  ? __ia32_sys_pidfd_getfd+0x90/0x90
[  240.981310][ T7735]  ? get_sigframe_size+0x20/0x20
[  240.986287][ T7735]  ? ksys_write+0x1fb/0x260
[  240.990807][ T7735]  ? exit_to_user_mode_loop+0x3b/0x110
[  240.996293][ T7735]  exit_to_user_mode_loop+0x70/0x110
[  241.001595][ T7735]  exit_to_user_mode_prepare+0xee/0x180
[  241.007158][ T7735]  syscall_exit_to_user_mode+0x1a/0x50
[  241.012639][ T7735]  do_syscall_64+0x61/0xb0
[  241.017069][ T7735]  ? clear_bhb_loop+0x40/0x90
[  241.021763][ T7735]  ? clear_bhb_loop+0x40/0x90
[  241.026454][ T7735]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  241.032360][ T7735] RIP: 0033:0x7f5a7539ce59
[  241.036788][ T7735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.056404][ T7735] RSP: 002b:00007f5a7632b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  241.064831][ T7735] RAX: fffffffffffffe00 RBX: 00007f5a75616090 RCX: 00007f5a7539ce59
[  241.072812][ T7735] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003
[  241.080791][ T7735] RBP: 00007f5a7632b090 R08: 0000000000000000 R09: 0000000000000000
[  241.088771][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.096756][ T7735] R13: 00007f5a75616128 R14: 00007f5a75616090 R15: 00007ffd0b5469b8
[  241.104758][ T7735]  </TASK>
[  243.921020][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  244.059833][ T7774] FAULT_INJECTION: forcing a failure.
[  244.059833][ T7774] name failslab, interval 1, probability 0, space 0, times 0
[  244.085090][ T7774] CPU: 0 PID: 7774 Comm: syz.0.596 Not tainted syzkaller #0
[  244.092410][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  244.102477][ T7774] Call Trace:
[  244.105760][ T7774]  <TASK>
[  244.108702][ T7774]  dump_stack_lvl+0x18c/0x250
[  244.113397][ T7774]  ? show_regs_print_info+0x20/0x20
[  244.118605][ T7774]  ? load_image+0x420/0x420
[  244.123121][ T7774]  ? __might_sleep+0xe0/0xe0
[  244.127727][ T7774]  ? __lock_acquire+0x7d40/0x7d40
[  244.132783][ T7774]  should_fail_ex+0x39d/0x4d0
[  244.137495][ T7774]  should_failslab+0x9/0x20
[  244.142023][ T7774]  slab_pre_alloc_hook+0x59/0x310
[  244.147083][ T7774]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  244.152824][ T7774]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  244.158556][ T7774]  __kmem_cache_alloc_node+0x53/0x250
[  244.163955][ T7774]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  244.169687][ T7774]  __kmalloc+0xa4/0x230
[  244.173866][ T7774]  tomoyo_realpath_from_path+0xe3/0x5d0
[  244.179442][ T7774]  tomoyo_path_number_perm+0x248/0x620
[  244.184922][ T7774]  ? tomoyo_path_number_perm+0x217/0x620
[  244.190578][ T7774]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  244.196061][ T7774]  ? ksys_write+0x1c4/0x260
[  244.200624][ T7774]  ? __fget_files+0x28/0x4b0
[  244.205234][ T7774]  ? __fget_files+0x28/0x4b0
[  244.209854][ T7774]  security_file_ioctl+0x70/0xa0
[  244.214809][ T7774]  __se_sys_ioctl+0x48/0x170
[  244.219431][ T7774]  do_syscall_64+0x55/0xb0
[  244.223892][ T7774]  ? clear_bhb_loop+0x40/0x90
[  244.228584][ T7774]  ? clear_bhb_loop+0x40/0x90
[  244.233285][ T7774]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.239199][ T7774] RIP: 0033:0x7f5a7539ce59
[  244.243628][ T7774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.263250][ T7774] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  244.271761][ T7774] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  244.279740][ T7774] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  244.287724][ T7774] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  244.295709][ T7774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.303689][ T7774] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  244.311686][ T7774]  </TASK>
[  244.351880][ T7774] ERROR: Out of memory at tomoyo_realpath_from_path.
[  244.527972][ T7778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.597'.
[  244.871277][ T7783] netlink: 'syz.2.598': attribute type 21 has an invalid length.
[  245.331265][ T7792] syzkaller0: entered promiscuous mode
[  245.358718][ T7792] syzkaller0: entered allmulticast mode
[  245.414842][ T7794] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  245.782027][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  248.699811][ T7820] FAULT_INJECTION: forcing a failure.
[  248.699811][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.736425][ T7820] CPU: 1 PID: 7820 Comm: syz.2.607 Not tainted syzkaller #0
[  248.743746][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  248.753813][ T7820] Call Trace:
[  248.757107][ T7820]  <TASK>
[  248.760049][ T7820]  dump_stack_lvl+0x18c/0x250
[  248.764742][ T7820]  ? show_regs_print_info+0x20/0x20
[  248.769958][ T7820]  ? load_image+0x420/0x420
[  248.774483][ T7820]  ? __might_fault+0xaa/0x120
[  248.779174][ T7820]  ? __lock_acquire+0x7d40/0x7d40
[  248.784219][ T7820]  should_fail_ex+0x39d/0x4d0
[  248.788924][ T7820]  _copy_from_user+0x2f/0xe0
[  248.793534][ T7820]  ___sys_sendmsg+0x1c7/0x360
[  248.798253][ T7820]  ? __sys_sendmsg+0x2a0/0x2a0
[  248.803048][ T7820]  ? __lock_acquire+0x7d40/0x7d40
[  248.808112][ T7820]  __se_sys_sendmsg+0x1c2/0x2b0
[  248.812986][ T7820]  ? __x64_sys_sendmsg+0x80/0x80
[  248.817957][ T7820]  ? lockdep_hardirqs_on+0x98/0x150
[  248.823177][ T7820]  do_syscall_64+0x55/0xb0
[  248.827612][ T7820]  ? clear_bhb_loop+0x40/0x90
[  248.832304][ T7820]  ? clear_bhb_loop+0x40/0x90
[  248.836998][ T7820]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.842905][ T7820] RIP: 0033:0x7f852ef9ce59
[  248.847334][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.866964][ T7820] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.875391][ T7820] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  248.883377][ T7820] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  248.891361][ T7820] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  248.899348][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.907330][ T7820] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  248.915329][ T7820]  </TASK>
[  249.187337][ T7832] FAULT_INJECTION: forcing a failure.
[  249.187337][ T7832] name failslab, interval 1, probability 0, space 0, times 0
[  249.209749][ T7832] CPU: 0 PID: 7832 Comm: syz.3.612 Not tainted syzkaller #0
[  249.217077][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  249.227149][ T7832] Call Trace:
[  249.230443][ T7832]  <TASK>
[  249.233389][ T7832]  dump_stack_lvl+0x18c/0x250
[  249.238085][ T7832]  ? show_regs_print_info+0x20/0x20
[  249.243299][ T7832]  ? load_image+0x420/0x420
[  249.247825][ T7832]  ? __might_sleep+0xe0/0xe0
[  249.252434][ T7832]  ? __lock_acquire+0x7d40/0x7d40
[  249.257481][ T7832]  should_fail_ex+0x39d/0x4d0
[  249.262186][ T7832]  should_failslab+0x9/0x20
[  249.266709][ T7832]  slab_pre_alloc_hook+0x59/0x310
[  249.271762][ T7832]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  249.277504][ T7832]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  249.283243][ T7832]  __kmem_cache_alloc_node+0x53/0x250
[  249.288624][ T7832]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  249.294342][ T7832]  __kmalloc+0xa4/0x230
[  249.298503][ T7832]  tomoyo_realpath_from_path+0xe3/0x5d0
[  249.304054][ T7832]  tomoyo_path_number_perm+0x248/0x620
[  249.309518][ T7832]  ? tomoyo_path_number_perm+0x217/0x620
[  249.315168][ T7832]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  249.320649][ T7832]  ? ksys_write+0x1c4/0x260
[  249.325186][ T7832]  ? __fget_files+0x28/0x4b0
[  249.329770][ T7832]  ? __fget_files+0x28/0x4b0
[  249.334369][ T7832]  security_file_ioctl+0x70/0xa0
[  249.339319][ T7832]  __se_sys_ioctl+0x48/0x170
[  249.343926][ T7832]  do_syscall_64+0x55/0xb0
[  249.348336][ T7832]  ? clear_bhb_loop+0x40/0x90
[  249.353013][ T7832]  ? clear_bhb_loop+0x40/0x90
[  249.357698][ T7832]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  249.363594][ T7832] RIP: 0033:0x7fd85ff9ce59
[  249.368004][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.387607][ T7832] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  249.396022][ T7832] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  249.403986][ T7832] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000004
[  249.411952][ T7832] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  249.420013][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.427979][ T7832] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  249.435961][ T7832]  </TASK>
[  249.505959][ T7834] netlink: 'syz.2.611': attribute type 21 has an invalid length.
[  249.527606][ T7832] ERROR: Out of memory at tomoyo_realpath_from_path.
[  249.656618][ T5774] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  253.146846][ T7870] netlink: 21 bytes leftover after parsing attributes in process `syz.2.621'.
[  253.205430][ T7870] ksmbd: Unknown IPC event: 0, ignore.
[  253.403497][ T7877] FAULT_INJECTION: forcing a failure.
[  253.403497][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.427784][ T7877] CPU: 1 PID: 7877 Comm: syz.0.626 Not tainted syzkaller #0
[  253.435107][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  253.445176][ T7877] Call Trace:
[  253.448462][ T7877]  <TASK>
[  253.451404][ T7877]  dump_stack_lvl+0x18c/0x250
[  253.456107][ T7877]  ? show_regs_print_info+0x20/0x20
[  253.461326][ T7877]  ? load_image+0x420/0x420
[  253.465860][ T7877]  ? __might_fault+0xaa/0x120
[  253.470553][ T7877]  ? __lock_acquire+0x7d40/0x7d40
[  253.475600][ T7877]  should_fail_ex+0x39d/0x4d0
[  253.480301][ T7877]  _copy_from_user+0x2f/0xe0
[  253.484906][ T7877]  ___sys_sendmsg+0x1c7/0x360
[  253.489588][ T7877]  ? get_pid_task+0x20/0x1e0
[  253.494181][ T7877]  ? __sys_sendmsg+0x2a0/0x2a0
[  253.498958][ T7877]  ? __lock_acquire+0x7d40/0x7d40
[  253.504003][ T7877]  __se_sys_sendmsg+0x1c2/0x2b0
[  253.508848][ T7877]  ? __x64_sys_sendmsg+0x80/0x80
[  253.513788][ T7877]  ? lockdep_hardirqs_on+0x98/0x150
[  253.518986][ T7877]  do_syscall_64+0x55/0xb0
[  253.523393][ T7877]  ? clear_bhb_loop+0x40/0x90
[  253.528100][ T7877]  ? clear_bhb_loop+0x40/0x90
[  253.532772][ T7877]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  253.538655][ T7877] RIP: 0033:0x7f5a7539ce59
[  253.543059][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.562654][ T7877] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.571058][ T7877] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  253.579018][ T7877] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003
[  253.586982][ T7877] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  253.594947][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.602908][ T7877] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  253.610881][ T7877]  </TASK>
[  253.667354][ T5774] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  254.115001][ T7883] netlink: 'syz.1.627': attribute type 21 has an invalid length.
[  255.059990][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  255.234018][ T7914] FAULT_INJECTION: forcing a failure.
[  255.234018][ T7914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.287699][ T7914] CPU: 1 PID: 7914 Comm: syz.0.638 Not tainted syzkaller #0
[  255.295039][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  255.305117][ T7914] Call Trace:
[  255.308409][ T7914]  <TASK>
[  255.311358][ T7914]  dump_stack_lvl+0x18c/0x250
[  255.316061][ T7914]  ? show_regs_print_info+0x20/0x20
[  255.321276][ T7914]  ? load_image+0x420/0x420
[  255.325813][ T7914]  ? __might_fault+0xaa/0x120
[  255.330514][ T7914]  ? __lock_acquire+0x7d40/0x7d40
[  255.335567][ T7914]  should_fail_ex+0x39d/0x4d0
[  255.340277][ T7914]  _copy_from_user+0x2f/0xe0
[  255.344898][ T7914]  ___sys_sendmsg+0x1c7/0x360
[  255.349603][ T7914]  ? get_pid_task+0x20/0x1e0
[  255.354220][ T7914]  ? __sys_sendmsg+0x2a0/0x2a0
[  255.359028][ T7914]  ? __lock_acquire+0x7d40/0x7d40
[  255.364103][ T7914]  __se_sys_sendmsg+0x1c2/0x2b0
[  255.368977][ T7914]  ? __x64_sys_sendmsg+0x80/0x80
[  255.373954][ T7914]  ? lockdep_hardirqs_on+0x98/0x150
[  255.379175][ T7914]  do_syscall_64+0x55/0xb0
[  255.383609][ T7914]  ? clear_bhb_loop+0x40/0x90
[  255.388310][ T7914]  ? clear_bhb_loop+0x40/0x90
[  255.393014][ T7914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.398925][ T7914] RIP: 0033:0x7f5a7539ce59
[  255.403338][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.422934][ T7914] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.431344][ T7914] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  255.439314][ T7914] RDX: 0000000000000010 RSI: 0000200000001640 RDI: 0000000000000003
[  255.447283][ T7914] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  255.455258][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.463224][ T7914] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  255.471198][ T7914]  </TASK>
[  255.741076][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  255.754671][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.083747][ T7929] netlink: 'syz.2.642': attribute type 21 has an invalid length.
[  257.266150][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  257.328462][ T5774] Bluetooth: hci2: ISO packet for unknown connection handle 3846
[  258.887528][ T7975] netlink: 'syz.1.655': attribute type 21 has an invalid length.
[  259.002376][ T7982] FAULT_INJECTION: forcing a failure.
[  259.002376][ T7982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.022869][ T7982] CPU: 1 PID: 7982 Comm: syz.2.657 Not tainted syzkaller #0
[  259.030204][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  259.040276][ T7982] Call Trace:
[  259.043568][ T7982]  <TASK>
[  259.046511][ T7982]  dump_stack_lvl+0x18c/0x250
[  259.051213][ T7982]  ? show_regs_print_info+0x20/0x20
[  259.056425][ T7982]  ? load_image+0x420/0x420
[  259.060954][ T7982]  ? __might_fault+0xaa/0x120
[  259.065648][ T7982]  ? __lock_acquire+0x7d40/0x7d40
[  259.070696][ T7982]  should_fail_ex+0x39d/0x4d0
[  259.075411][ T7982]  _copy_from_user+0x2f/0xe0
[  259.080030][ T7982]  ___sys_sendmsg+0x1c7/0x360
[  259.084738][ T7982]  ? __sys_sendmsg+0x2a0/0x2a0
[  259.089533][ T7982]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  259.095786][ T7982]  __se_sys_sendmsg+0x1c2/0x2b0
[  259.100631][ T7982]  ? __x64_sys_sendmsg+0x80/0x80
[  259.105574][ T7982]  ? lockdep_hardirqs_on+0x98/0x150
[  259.110778][ T7982]  do_syscall_64+0x55/0xb0
[  259.115184][ T7982]  ? clear_bhb_loop+0x40/0x90
[  259.119855][ T7982]  ? clear_bhb_loop+0x40/0x90
[  259.124525][ T7982]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  259.130421][ T7982] RIP: 0033:0x7f852ef9ce59
[  259.134832][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.154437][ T7982] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.162846][ T7982] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  259.170832][ T7982] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[  259.178806][ T7982] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  259.186776][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.194741][ T7982] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  259.202718][ T7982]  </TASK>
[  259.300642][ T7981] netlink: 'syz.0.658': attribute type 10 has an invalid length.
[  259.332086][ T7981] team0: Device vxcan0 is of different type
[  259.495545][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  261.417657][ T8009] netlink: 'syz.0.668': attribute type 21 has an invalid length.
[  261.779047][ T8019] FAULT_INJECTION: forcing a failure.
[  261.779047][ T8019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.794400][ T8019] CPU: 1 PID: 8019 Comm: syz.1.669 Not tainted syzkaller #0
[  261.801722][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  261.811793][ T8019] Call Trace:
[  261.815095][ T8019]  <TASK>
[  261.818039][ T8019]  dump_stack_lvl+0x18c/0x250
[  261.822713][ T8019]  ? show_regs_print_info+0x20/0x20
[  261.827897][ T8019]  ? load_image+0x420/0x420
[  261.832396][ T8019]  ? __might_fault+0xaa/0x120
[  261.837058][ T8019]  ? __lock_acquire+0x7d40/0x7d40
[  261.842066][ T8019]  should_fail_ex+0x39d/0x4d0
[  261.846743][ T8019]  _copy_from_user+0x2f/0xe0
[  261.851333][ T8019]  ___sys_recvmsg+0x176/0x590
[  261.856016][ T8019]  ? __sys_recvmsg+0x2a0/0x2a0
[  261.860777][ T8019]  ? ksys_write+0x1c4/0x260
[  261.865285][ T8019]  ? __fget_files+0x43d/0x4b0
[  261.869966][ T8019]  __x64_sys_recvmsg+0x20c/0x2e0
[  261.874898][ T8019]  ? ___sys_recvmsg+0x590/0x590
[  261.879751][ T8019]  ? lockdep_hardirqs_on+0x98/0x150
[  261.884944][ T8019]  do_syscall_64+0x55/0xb0
[  261.889351][ T8019]  ? clear_bhb_loop+0x40/0x90
[  261.894023][ T8019]  ? clear_bhb_loop+0x40/0x90
[  261.898710][ T8019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.904611][ T8019] RIP: 0033:0x7f0aacf9ce59
[  261.909020][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.928618][ T8019] RSP: 002b:00007f0aade16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  261.937022][ T8019] RAX: ffffffffffffffda RBX: 00007f0aad216090 RCX: 00007f0aacf9ce59
[  261.944986][ T8019] RDX: 0000000000010000 RSI: 00002000000002c0 RDI: 0000000000000003
[  261.952950][ T8019] RBP: 00007f0aade16090 R08: 0000000000000000 R09: 0000000000000000
[  261.960913][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.968877][ T8019] R13: 00007f0aad216128 R14: 00007f0aad216090 R15: 00007ffd0a845638
[  261.976854][ T8019]  </TASK>
[  262.365596][ T8027] FAULT_INJECTION: forcing a failure.
[  262.365596][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.409700][ T8027] CPU: 1 PID: 8027 Comm: syz.0.675 Not tainted syzkaller #0
[  262.417040][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  262.427110][ T8027] Call Trace:
[  262.430397][ T8027]  <TASK>
[  262.433350][ T8027]  dump_stack_lvl+0x18c/0x250
[  262.438031][ T8027]  ? show_regs_print_info+0x20/0x20
[  262.443227][ T8027]  ? load_image+0x420/0x420
[  262.447824][ T8027]  ? __might_fault+0xaa/0x120
[  262.452495][ T8027]  ? __lock_acquire+0x7d40/0x7d40
[  262.457512][ T8027]  should_fail_ex+0x39d/0x4d0
[  262.462188][ T8027]  _copy_from_user+0x2f/0xe0
[  262.466774][ T8027]  __sys_bpf+0x23e/0x890
[  262.471011][ T8027]  ? bpf_link_show_fdinfo+0x390/0x390
[  262.476381][ T8027]  ? lock_chain_count+0x20/0x20
[  262.481230][ T8027]  __x64_sys_bpf+0x7c/0x90
[  262.485645][ T8027]  do_syscall_64+0x55/0xb0
[  262.490048][ T8027]  ? clear_bhb_loop+0x40/0x90
[  262.494716][ T8027]  ? clear_bhb_loop+0x40/0x90
[  262.499389][ T8027]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.505275][ T8027] RIP: 0033:0x7f5a7539ce59
[  262.510115][ T8027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.529715][ T8027] RSP: 002b:00007f5a7634c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  262.538125][ T8027] RAX: ffffffffffffffda RBX: 00007f5a75615fa0 RCX: 00007f5a7539ce59
[  262.546086][ T8027] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  262.554046][ T8027] RBP: 00007f5a7634c090 R08: 0000000000000000 R09: 0000000000000000
[  262.562005][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.569966][ T8027] R13: 00007f5a75616038 R14: 00007f5a75615fa0 R15: 00007ffd0b5469b8
[  262.577939][ T8027]  </TASK>
[  262.642699][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  262.732770][ T8037] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  265.498064][ T8037] team0: Device hsr_slave_0 failed to register rx_handler
[  265.616942][ T8046] netlink: 'syz.3.679': attribute type 29 has an invalid length.
[  265.626656][ T8046] netlink: 'syz.3.679': attribute type 29 has an invalid length.
[  265.644952][ T8046] netlink: 'syz.3.679': attribute type 29 has an invalid length.
[  265.660546][ T8046] netlink: 'syz.3.679': attribute type 29 has an invalid length.
[  265.671495][ T8046] netlink: 'syz.3.679': attribute type 29 has an invalid length.
[  265.679192][ T8050] FAULT_INJECTION: forcing a failure.
[  265.679192][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.723064][ T8050] CPU: 0 PID: 8050 Comm: syz.1.681 Not tainted syzkaller #0
[  265.730397][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  265.740469][ T8050] Call Trace:
[  265.743767][ T8050]  <TASK>
[  265.746693][ T8050]  dump_stack_lvl+0x18c/0x250
[  265.751374][ T8050]  ? show_regs_print_info+0x20/0x20
[  265.756563][ T8050]  ? load_image+0x420/0x420
[  265.761061][ T8050]  ? __might_fault+0xaa/0x120
[  265.765735][ T8050]  ? __lock_acquire+0x7d40/0x7d40
[  265.770754][ T8050]  should_fail_ex+0x39d/0x4d0
[  265.775431][ T8050]  _copy_from_user+0x2f/0xe0
[  265.780033][ T8050]  __sys_bpf+0x23e/0x890
[  265.784270][ T8050]  ? bpf_link_show_fdinfo+0x390/0x390
[  265.789654][ T8050]  ? lock_chain_count+0x20/0x20
[  265.794511][ T8050]  __x64_sys_bpf+0x7c/0x90
[  265.798920][ T8050]  do_syscall_64+0x55/0xb0
[  265.803323][ T8050]  ? clear_bhb_loop+0x40/0x90
[  265.807991][ T8050]  ? clear_bhb_loop+0x40/0x90
[  265.812663][ T8050]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.818549][ T8050] RIP: 0033:0x7f0aacf9ce59
[  265.822956][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.842553][ T8050] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  265.850960][ T8050] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  265.858925][ T8050] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  265.866904][ T8050] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  265.874865][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.882822][ T8050] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  265.890791][ T8050]  </TASK>
[  266.138049][ T8058] netlink: 'syz.0.682': attribute type 21 has an invalid length.
[  266.962769][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  268.614208][ T8096] FAULT_INJECTION: forcing a failure.
[  268.614208][ T8096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.638941][ T8096] CPU: 1 PID: 8096 Comm: syz.3.694 Not tainted syzkaller #0
[  268.646252][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  268.656315][ T8096] Call Trace:
[  268.659602][ T8096]  <TASK>
[  268.662542][ T8096]  dump_stack_lvl+0x18c/0x250
[  268.667241][ T8096]  ? show_regs_print_info+0x20/0x20
[  268.672454][ T8096]  ? load_image+0x420/0x420
[  268.676978][ T8096]  ? __might_fault+0xaa/0x120
[  268.681667][ T8096]  ? __lock_acquire+0x7d40/0x7d40
[  268.686711][ T8096]  should_fail_ex+0x39d/0x4d0
[  268.691412][ T8096]  _copy_from_user+0x2f/0xe0
[  268.696018][ T8096]  ___sys_sendmsg+0x1c7/0x360
[  268.700721][ T8096]  ? __sys_sendmsg+0x2a0/0x2a0
[  268.705520][ T8096]  ? __lock_acquire+0x7d40/0x7d40
[  268.710586][ T8096]  __se_sys_sendmsg+0x1c2/0x2b0
[  268.715449][ T8096]  ? __x64_sys_sendmsg+0x80/0x80
[  268.720422][ T8096]  ? lockdep_hardirqs_on+0x98/0x150
[  268.725711][ T8096]  do_syscall_64+0x55/0xb0
[  268.730169][ T8096]  ? clear_bhb_loop+0x40/0x90
[  268.734862][ T8096]  ? clear_bhb_loop+0x40/0x90
[  268.739555][ T8096]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.745470][ T8096] RIP: 0033:0x7fd85ff9ce59
[  268.749901][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.769526][ T8096] RSP: 002b:00007fd860f29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.777966][ T8096] RAX: ffffffffffffffda RBX: 00007fd860215fa0 RCX: 00007fd85ff9ce59
[  268.785966][ T8096] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003
[  268.793955][ T8096] RBP: 00007fd860f29090 R08: 0000000000000000 R09: 0000000000000000
[  268.801942][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.809921][ T8096] R13: 00007fd860216038 R14: 00007fd860215fa0 R15: 00007ffe104c8188
[  268.817926][ T8096]  </TASK>
[  269.317010][ T8097] netlink: 'syz.0.695': attribute type 21 has an invalid length.
[  269.822670][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  270.813171][ T8127] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.704'.
[  270.909174][ T8127] syzkaller0: entered promiscuous mode
[  270.919819][ T8127] syzkaller0: entered allmulticast mode
[  271.067027][ T8132] netlink: 'syz.1.706': attribute type 21 has an invalid length.
[  271.571694][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  271.771721][ T8145] FAULT_INJECTION: forcing a failure.
[  271.771721][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.881000][ T8145] CPU: 1 PID: 8145 Comm: syz.2.709 Not tainted syzkaller #0
[  271.888337][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  271.898404][ T8145] Call Trace:
[  271.901690][ T8145]  <TASK>
[  271.904633][ T8145]  dump_stack_lvl+0x18c/0x250
[  271.909330][ T8145]  ? show_regs_print_info+0x20/0x20
[  271.914541][ T8145]  ? load_image+0x420/0x420
[  271.919061][ T8145]  ? __might_fault+0xaa/0x120
[  271.923754][ T8145]  ? __lock_acquire+0x7d40/0x7d40
[  271.928811][ T8145]  should_fail_ex+0x39d/0x4d0
[  271.933513][ T8145]  _copy_from_user+0x2f/0xe0
[  271.938121][ T8145]  mptcp_setsockopt+0x15b0/0x3340
[  271.943164][ T8145]  ? aa_sk_perm+0x83c/0x970
[  271.947682][ T8145]  ? __fget_files+0x28/0x4b0
[  271.952291][ T8145]  ? pm_nl_exit_net+0x230/0x230
[  271.957156][ T8145]  ? aa_af_perm+0x330/0x330
[  271.961673][ T8145]  ? __fget_files+0x28/0x4b0
[  271.966275][ T8145]  ? __fget_files+0x28/0x4b0
[  271.970895][ T8145]  ? sock_common_setsockopt+0x36/0xc0
[  271.976282][ T8145]  ? sock_common_recvmsg+0x190/0x190
[  271.981591][ T8145]  do_sock_setsockopt+0x175/0x1a0
[  271.986632][ T8145]  __x64_sys_setsockopt+0x182/0x200
[  271.991848][ T8145]  do_syscall_64+0x55/0xb0
[  271.996273][ T8145]  ? clear_bhb_loop+0x40/0x90
[  272.000964][ T8145]  ? clear_bhb_loop+0x40/0x90
[  272.005655][ T8145]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.011568][ T8145] RIP: 0033:0x7f852ef9ce59
[  272.015991][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.035608][ T8145] RSP: 002b:00007f852fda3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  272.044040][ T8145] RAX: ffffffffffffffda RBX: 00007f852f216090 RCX: 00007f852ef9ce59
[  272.052023][ T8145] RDX: 0000000000000024 RSI: 0000000000000001 RDI: 0000000000000003
[  272.060002][ T8145] RBP: 00007f852fda3090 R08: 0000000000000004 R09: 0000000000000000
[  272.067982][ T8145] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.075965][ T8145] R13: 00007f852f216128 R14: 00007f852f216090 R15: 00007ffe9c2c4878
[  272.083964][ T8145]  </TASK>
[  275.558726][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  275.626559][ T8187] netlink: 'syz.0.718': attribute type 21 has an invalid length.
[  275.767669][ T8193] FAULT_INJECTION: forcing a failure.
[  275.767669][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.784652][ T8193] CPU: 1 PID: 8193 Comm: syz.1.722 Not tainted syzkaller #0
[  275.791959][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  275.802022][ T8193] Call Trace:
[  275.805310][ T8193]  <TASK>
[  275.808247][ T8193]  dump_stack_lvl+0x18c/0x250
[  275.812941][ T8193]  ? show_regs_print_info+0x20/0x20
[  275.818147][ T8193]  ? load_image+0x420/0x420
[  275.822665][ T8193]  ? __might_fault+0xaa/0x120
[  275.827363][ T8193]  ? __lock_acquire+0x7d40/0x7d40
[  275.832416][ T8193]  should_fail_ex+0x39d/0x4d0
[  275.837117][ T8193]  _copy_from_user+0x2f/0xe0
[  275.841723][ T8193]  ___sys_sendmsg+0x1c7/0x360
[  275.846423][ T8193]  ? __sys_sendmsg+0x2a0/0x2a0
[  275.851219][ T8193]  ? __lock_acquire+0x7d40/0x7d40
[  275.856277][ T8193]  __se_sys_sendmsg+0x1c2/0x2b0
[  275.861138][ T8193]  ? __x64_sys_sendmsg+0x80/0x80
[  275.866102][ T8193]  ? lockdep_hardirqs_on+0x98/0x150
[  275.871319][ T8193]  do_syscall_64+0x55/0xb0
[  275.875745][ T8193]  ? clear_bhb_loop+0x40/0x90
[  275.880430][ T8193]  ? clear_bhb_loop+0x40/0x90
[  275.885128][ T8193]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.891037][ T8193] RIP: 0033:0x7f0aacf9ce59
[  275.895460][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.915084][ T8193] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.923510][ T8193] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  275.931490][ T8193] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  275.939468][ T8193] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  275.947444][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.955426][ T8193] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  275.963427][ T8193]  </TASK>
[  276.193335][ T8200] netlink: 'syz.3.724': attribute type 10 has an invalid length.
[  276.291979][ T8204] FAULT_INJECTION: forcing a failure.
[  276.291979][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.314986][ T8204] CPU: 0 PID: 8204 Comm: syz.1.727 Not tainted syzkaller #0
[  276.322310][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  276.332381][ T8204] Call Trace:
[  276.335667][ T8204]  <TASK>
[  276.338609][ T8204]  dump_stack_lvl+0x18c/0x250
[  276.343309][ T8204]  ? show_regs_print_info+0x20/0x20
[  276.348521][ T8204]  ? load_image+0x420/0x420
[  276.353042][ T8204]  ? __might_fault+0xaa/0x120
[  276.357725][ T8204]  ? __lock_acquire+0x7d40/0x7d40
[  276.362762][ T8204]  should_fail_ex+0x39d/0x4d0
[  276.367459][ T8204]  _copy_from_user+0x2f/0xe0
[  276.372056][ T8204]  ___sys_sendmsg+0x1c7/0x360
[  276.376743][ T8204]  ? get_pid_task+0x20/0x1e0
[  276.381344][ T8204]  ? __sys_sendmsg+0x2a0/0x2a0
[  276.386129][ T8204]  ? __lock_acquire+0x7d40/0x7d40
[  276.391183][ T8204]  __se_sys_sendmsg+0x1c2/0x2b0
[  276.396041][ T8204]  ? __x64_sys_sendmsg+0x80/0x80
[  276.400992][ T8204]  ? lockdep_hardirqs_on+0x98/0x150
[  276.406202][ T8204]  do_syscall_64+0x55/0xb0
[  276.410621][ T8204]  ? clear_bhb_loop+0x40/0x90
[  276.415307][ T8204]  ? clear_bhb_loop+0x40/0x90
[  276.419991][ T8204]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.425890][ T8204] RIP: 0033:0x7f0aacf9ce59
[  276.430313][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.449925][ T8204] RSP: 002b:00007f0aade37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.458346][ T8204] RAX: ffffffffffffffda RBX: 00007f0aad215fa0 RCX: 00007f0aacf9ce59
[  276.466320][ T8204] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003
[  276.474292][ T8204] RBP: 00007f0aade37090 R08: 0000000000000000 R09: 0000000000000000
[  276.482265][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.490238][ T8204] R13: 00007f0aad216038 R14: 00007f0aad215fa0 R15: 00007ffd0a845638
[  276.498226][ T8204]  </TASK>
[  276.648629][ T5774] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  276.825177][ T8211] netlink: 'syz.0.730': attribute type 10 has an invalid length.
[  276.891228][ T8211] veth0_vlan: left promiscuous mode
[  276.915085][ T8211] veth0_vlan: entered promiscuous mode
[  276.952803][ T8211] team0: Device veth0_vlan failed to register rx_handler
[  277.114126][ T8212] netlink: 'syz.0.730': attribute type 10 has an invalid length.
[  277.165726][ T5774] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[  277.776456][ T8227] FAULT_INJECTION: forcing a failure.
[  277.776456][ T8227] name failslab, interval 1, probability 0, space 0, times 0
[  277.862683][ T8227] CPU: 1 PID: 8227 Comm: syz.1.735 Not tainted syzkaller #0
[  277.870029][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  277.880099][ T8227] Call Trace:
[  277.883389][ T8227]  <TASK>
[  277.886330][ T8227]  dump_stack_lvl+0x18c/0x250
[  277.891027][ T8227]  ? show_regs_print_info+0x20/0x20
[  277.896239][ T8227]  ? load_image+0x420/0x420
[  277.900761][ T8227]  ? __might_sleep+0xe0/0xe0
[  277.905368][ T8227]  ? __lock_acquire+0x7d40/0x7d40
[  277.910421][ T8227]  should_fail_ex+0x39d/0x4d0
[  277.915133][ T8227]  should_failslab+0x9/0x20
[  277.919654][ T8227]  slab_pre_alloc_hook+0x59/0x310
[  277.924700][ T8227]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  277.930433][ T8227]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  277.936160][ T8227]  __kmem_cache_alloc_node+0x53/0x250
[  277.941561][ T8227]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  277.947289][ T8227]  __kmalloc+0xa4/0x230
[  277.951468][ T8227]  tomoyo_realpath_from_path+0xe3/0x5d0
[  277.957056][ T8227]  tomoyo_path_number_perm+0x248/0x620
[  277.962540][ T8227]  ? tomoyo_path_number_perm+0x217/0x620
[  277.968191][ T8227]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  277.973673][ T8227]  ? ksys_write+0x1c4/0x260
[  277.978276][ T8227]  ? __fget_files+0x28/0x4b0
[  277.982881][ T8227]  ? __fget_files+0x28/0x4b0
[  277.987515][ T8227]  security_file_ioctl+0x70/0xa0
[  277.992471][ T8227]  __se_sys_ioctl+0x48/0x170
[  277.997088][ T8227]  do_syscall_64+0x55/0xb0
[  278.001510][ T8227]  ? clear_bhb_loop+0x40/0x90
[  278.006201][ T8227]  ? clear_bhb_loop+0x40/0x90
[  278.010894][ T8227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.016794][ T8227] RIP: 0033:0x7f0aacf9ce59
[  278.021219][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.041960][ T8227] RSP: 002b:00007f0aade16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  278.050388][ T8227] RAX: ffffffffffffffda RBX: 00007f0aad216090 RCX: 00007f0aacf9ce59
[  278.058366][ T8227] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000007
[  278.066348][ T8227] RBP: 00007f0aade16090 R08: 0000000000000000 R09: 0000000000000000
[  278.074327][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.082312][ T8227] R13: 00007f0aad216128 R14: 00007f0aad216090 R15: 00007ffd0a845638
[  278.090342][ T8227]  </TASK>
[  278.175759][ T8227] ERROR: Out of memory at tomoyo_realpath_from_path.
[  278.864023][ T8240] netlink: 'syz.0.737': attribute type 21 has an invalid length.
[  278.966447][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  279.362329][ T8249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.522468][ T8249] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  279.530335][ T8249] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  279.794272][ T8249] syz.3.741 (8249) used greatest stack depth: 18952 bytes left
[  283.126599][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  283.244973][ T8281] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.750'.
[  283.308099][ T8289] FAULT_INJECTION: forcing a failure.
[  283.308099][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.354149][ T8289] CPU: 1 PID: 8289 Comm: syz.2.752 Not tainted syzkaller #0
[  283.361485][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  283.371554][ T8289] Call Trace:
[  283.374841][ T8289]  <TASK>
[  283.377797][ T8289]  dump_stack_lvl+0x18c/0x250
[  283.382510][ T8289]  ? show_regs_print_info+0x20/0x20
[  283.387745][ T8289]  ? load_image+0x420/0x420
[  283.392275][ T8289]  ? __might_fault+0xaa/0x120
[  283.396971][ T8289]  ? __lock_acquire+0x7d40/0x7d40
[  283.402029][ T8289]  should_fail_ex+0x39d/0x4d0
[  283.406746][ T8289]  _copy_from_user+0x2f/0xe0
[  283.411357][ T8289]  ___sys_sendmsg+0x1c7/0x360
[  283.416059][ T8289]  ? __sys_sendmsg+0x2a0/0x2a0
[  283.420857][ T8289]  ? __lock_acquire+0x7d40/0x7d40
[  283.425925][ T8289]  __se_sys_sendmsg+0x1c2/0x2b0
[  283.430791][ T8289]  ? __x64_sys_sendmsg+0x80/0x80
[  283.435757][ T8289]  ? lockdep_hardirqs_on+0x98/0x150
[  283.440974][ T8289]  do_syscall_64+0x55/0xb0
[  283.445404][ T8289]  ? clear_bhb_loop+0x40/0x90
[  283.450094][ T8289]  ? clear_bhb_loop+0x40/0x90
[  283.454788][ T8289]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  283.460693][ T8289] RIP: 0033:0x7f852ef9ce59
[  283.465119][ T8289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.484734][ T8289] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.493162][ T8289] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  283.501143][ T8289] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  283.509121][ T8289] RBP: 00007f852fdc4090 R08: 0000000000000000 R09: 0000000000000000
[  283.517100][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.525103][ T8289] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  283.533111][ T8289]  </TASK>
[  283.807605][ T8290] netlink: 'syz.1.751': attribute type 21 has an invalid length.
[  287.365049][ T5774] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  289.871465][ T8334] netlink: 'syz.3.764': attribute type 2 has an invalid length.
[  289.886941][ T8334] netlink: 'syz.3.764': attribute type 8 has an invalid length.
[  289.894760][ T8334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.764'.
[  290.116452][ T8345] netlink: 'syz.3.768': attribute type 29 has an invalid length.
[  291.394945][ T8345] netlink: 'syz.3.768': attribute type 29 has an invalid length.
[  291.404364][ T8346] netlink: 'syz.2.766': attribute type 21 has an invalid length.
[  291.505299][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  291.978330][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.006262][ T8370] netlink: 'syz.2.774': attribute type 29 has an invalid length.
[  292.085014][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.127673][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.165990][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.433510][ T8367] bond0: (slave batadv0): Releasing backup interface
[  292.547473][ T8370] netlink: 'syz.2.774': attribute type 29 has an invalid length.
[  292.803551][ T8377] netlink: 'syz.2.775': attribute type 29 has an invalid length.
[  292.837115][ T8377] netlink: 'syz.2.775': attribute type 29 has an invalid length.
[  292.925015][ T8377] netlink: 'syz.2.775': attribute type 29 has an invalid length.
[  293.463263][ T8384] ==================================================================
[  293.471373][ T8384] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[  293.479213][ T8384] Write of size 88 at addr ffff888023943690 by task syz.2.778/8384
[  293.487119][ T8384] 
[  293.489451][ T8384] CPU: 1 PID: 8384 Comm: syz.2.778 Not tainted syzkaller #0
[  293.496751][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  293.506818][ T8384] Call Trace:
[  293.510105][ T8384]  <TASK>
[  293.513048][ T8384]  dump_stack_lvl+0x18c/0x250
[  293.517741][ T8384]  ? __lock_acquire+0x7d40/0x7d40
[  293.522789][ T8384]  ? show_regs_print_info+0x20/0x20
[  293.528003][ T8384]  ? load_image+0x420/0x420
[  293.532526][ T8384]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  293.538000][ T8384]  ? __virt_addr_valid+0x18c/0x540
[  293.543115][ T8384]  ? __virt_addr_valid+0x469/0x540
[  293.548223][ T8384]  print_report+0xa8/0x210
[  293.552636][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  293.557738][ T8384]  kasan_report+0x117/0x150
[  293.562231][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  293.567337][ T8384]  kasan_check_range+0x241/0x290
[  293.572262][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  293.577364][ T8384]  __asan_memcpy+0x40/0x70
[  293.581774][ T8384]  __bpf_get_stackid+0x6bf/0x900
[  293.586707][ T8384]  bpf_get_stackid_pe+0x343/0x410
[  293.591731][ T8384]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  293.597178][ T8384]  bpf_overflow_handler+0x1fc/0x510
[  293.602376][ T8384]  ? bpf_overflow_handler+0xde/0x510
[  293.607652][ T8384]  ? tp_perf_event_destroy+0x20/0x20
[  293.612928][ T8384]  ? perf_trace_preemptirq_template+0xac/0x330
[  293.619079][ T8384]  ? __perf_event_account_interrupt+0x187/0x280
[  293.625312][ T8384]  __perf_event_overflow+0x447/0x630
[  293.630593][ T8384]  perf_swevent_event+0x319/0x570
[  293.635608][ T8384]  ? perf_tp_event+0x1520/0x1520
[  293.640536][ T8384]  ? trace_event_raw_event_lock+0x250/0x250
[  293.646432][ T8384]  ___perf_sw_event+0x4a7/0x730
[  293.651305][ T8384]  ? ___perf_sw_event+0x199/0x730
[  293.656321][ T8384]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  293.662730][ T8384]  ? __lock_acquire+0x1347/0x7d40
[  293.667746][ T8384]  ? rep_movs_alternative+0x33/0x90
[  293.672939][ T8384]  ? verify_lock_unused+0x140/0x140
[  293.678134][ T8384]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  293.684105][ T8384]  ? arch_stack_walk+0x160/0x190
[  293.689030][ T8384]  ? lock_chain_count+0x20/0x20
[  293.693874][ T8384]  __perf_sw_event+0x139/0x270
[  293.698631][ T8384]  do_user_addr_fault+0x123e/0x12c0
[  293.703825][ T8384]  ? rcu_is_watching+0x15/0xb0
[  293.708583][ T8384]  exc_page_fault+0x64/0x100
[  293.713167][ T8384]  asm_exc_page_fault+0x26/0x30
[  293.718013][ T8384] RIP: 0010:rep_movs_alternative+0x33/0x90
[  293.723812][ T8384] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[  293.743408][ T8384] RSP: 0018:ffffc90019547310 EFLAGS: 00050206
[  293.749467][ T8384] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[  293.757428][ T8384] RDX: 0000000000000000 RSI: ffff888065efc68c RDI: 000020000000cf3d
[  293.765390][ T8384] RBP: 000000000000000b R08: ffff888065efc696 R09: 1ffff1100cbdf8d2
[  293.773351][ T8384] R10: dffffc0000000000 R11: ffffed100cbdf8d3 R12: 000020000000cf48
[  293.781312][ T8384] R13: 0000000000000000 R14: 000020000000cf3d R15: ffff888065efc68c
[  293.789286][ T8384]  _copy_to_user+0x85/0xa0
[  293.793701][ T8384]  bpf_verifier_vlog+0x2fa/0x870
[  293.798638][ T8384]  verbose+0x11e/0x1a0
[  293.802700][ T8384]  ? sort_r+0x17f0/0x17f0
[  293.807020][ T8384]  ? check_func_arg_reg_off+0x2f0/0x2f0
[  293.812556][ T8384]  ? add_subprog+0x2b8/0x3c0
[  293.817139][ T8384]  bpf_check+0x30ed/0xeba0
[  293.821557][ T8384]  ? __lock_acquire+0x1273/0x7d40
[  293.826571][ T8384]  ? bpf_get_btf_vmlinux+0x20/0x20
[  293.831676][ T8384]  ? mark_lock+0x94/0x320
[  293.835996][ T8384]  ? __lock_acquire+0x1347/0x7d40
[  293.841023][ T8384]  ? verify_lock_unused+0x140/0x140
[  293.846211][ T8384]  ? perf_trace_lock+0xfc/0x3b0
[  293.851060][ T8384]  ? trace_event_raw_event_lock+0x250/0x250
[  293.856953][ T8384]  ? perf_trace_lock+0xfc/0x3b0
[  293.861795][ T8384]  ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[  293.867601][ T8384]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  293.873573][ T8384]  ? lock_chain_count+0x20/0x20
[  293.878415][ T8384]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  293.884650][ T8384]  ? lockdep_hardirqs_on+0x98/0x150
[  293.889835][ T8384]  ? ktime_get_with_offset+0x103/0x330
[  293.895283][ T8384]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  293.901510][ T8384]  ? ktime_get_real_ts64+0x440/0x440
[  293.906787][ T8384]  ? do_raw_spin_unlock+0x121/0x230
[  293.911978][ T8384]  ? bpf_obj_name_cpy+0x194/0x1e0
[  293.916996][ T8384]  bpf_prog_load+0x1163/0x1670
[  293.921755][ T8384]  ? map_freeze+0x420/0x420
[  293.926256][ T8384]  ? __might_fault+0xaa/0x120
[  293.930918][ T8384]  ? __might_fault+0xc6/0x120
[  293.935582][ T8384]  ? __might_fault+0xaa/0x120
[  293.940245][ T8384]  ? bpf_lsm_bpf+0x9/0x10
[  293.944564][ T8384]  ? security_bpf+0x7e/0xa0
[  293.949059][ T8384]  __sys_bpf+0x5ba/0x890
[  293.953294][ T8384]  ? bpf_link_show_fdinfo+0x390/0x390
[  293.958662][ T8384]  ? lock_chain_count+0x20/0x20
[  293.963507][ T8384]  __x64_sys_bpf+0x7c/0x90
[  293.967911][ T8384]  do_syscall_64+0x55/0xb0
[  293.972322][ T8384]  ? clear_bhb_loop+0x40/0x90
[  293.976993][ T8384]  ? clear_bhb_loop+0x40/0x90
[  293.981667][ T8384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.987563][ T8384] RIP: 0033:0x7f852ef9ce59
[  293.991976][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.011572][ T8384] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  294.019974][ T8384] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  294.027936][ T8384] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  294.035893][ T8384] RBP: 00007f852f032d6f R08: 0000000000000000 R09: 0000000000000000
[  294.043858][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.051816][ T8384] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  294.059783][ T8384]  </TASK>
[  294.062791][ T8384] 
[  294.065099][ T8384] Allocated by task 8384:
[  294.069410][ T8384]  kasan_set_track+0x4e/0x70
[  294.073993][ T8384]  __kasan_kmalloc+0x8f/0xa0
[  294.078573][ T8384]  __kmalloc_node+0xb4/0x230
[  294.083154][ T8384]  bpf_map_area_alloc+0x5e/0x110
[  294.088082][ T8384]  prealloc_elems_and_freelist+0x86/0x1c0
[  294.093788][ T8384]  stack_map_alloc+0x33a/0x4c0
[  294.098537][ T8384]  map_create+0x877/0x12f0
[  294.102940][ T8384]  __sys_bpf+0x651/0x890
[  294.107168][ T8384]  __x64_sys_bpf+0x7c/0x90
[  294.111567][ T8384]  do_syscall_64+0x55/0xb0
[  294.115966][ T8384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.121850][ T8384] 
[  294.124169][ T8384] Last potentially related work creation:
[  294.129864][ T8384]  kasan_save_stack+0x3e/0x60
[  294.134533][ T8384]  __kasan_record_aux_stack+0xaf/0xc0
[  294.139892][ T8384]  call_rcu+0x153/0x950
[  294.144044][ T8384]  nf_unregister_net_hooks+0xcb/0x130
[  294.149406][ T8384]  nf_defrag_ipv4_disable+0x95/0xe0
[  294.154599][ T8384]  nf_ct_netns_put+0x2da/0x520
[  294.159362][ T8384]  nf_conncount_destroy+0x41/0x150
[  294.164462][ T8384]  ovs_ct_exit+0x9c/0x200
[  294.168782][ T8384]  ovs_exit_net+0xed/0x7a0
[  294.173205][ T8384]  cleanup_net+0x70a/0xbb0
[  294.177619][ T8384]  process_scheduled_works+0xa5d/0x15d0
[  294.183160][ T8384]  worker_thread+0xa55/0xfc0
[  294.187737][ T8384]  kthread+0x2fa/0x390
[  294.191791][ T8384]  ret_from_fork+0x48/0x80
[  294.196196][ T8384]  ret_from_fork_asm+0x11/0x20
[  294.200953][ T8384] 
[  294.203263][ T8384] Second to last potentially related work creation:
[  294.209829][ T8384]  kasan_save_stack+0x3e/0x60
[  294.214507][ T8384]  __kasan_record_aux_stack+0xaf/0xc0
[  294.219875][ T8384]  call_rcu+0x153/0x950
[  294.224027][ T8384]  nf_unregister_net_hooks+0xcb/0x130
[  294.229394][ T8384]  cleanup_net+0x70a/0xbb0
[  294.233798][ T8384]  process_scheduled_works+0xa5d/0x15d0
[  294.239331][ T8384]  worker_thread+0xa55/0xfc0
[  294.243908][ T8384]  kthread+0x2fa/0x390
[  294.247963][ T8384]  ret_from_fork+0x48/0x80
[  294.252368][ T8384]  ret_from_fork_asm+0x11/0x20
[  294.257131][ T8384] 
[  294.259441][ T8384] The buggy address belongs to the object at ffff888023943680
[  294.259441][ T8384]  which belongs to the cache kmalloc-cg-64 of size 64
[  294.273568][ T8384] The buggy address is located 16 bytes inside of
[  294.273568][ T8384]  allocated 40-byte region [ffff888023943680, ffff8880239436a8)
[  294.287523][ T8384] 
[  294.289834][ T8384] The buggy address belongs to the physical page:
[  294.296240][ T8384] page:ffffea00008e50c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023943880 pfn:0x23943
[  294.307680][ T8384] memcg:ffff888023d96001
[  294.311903][ T8384] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  294.319790][ T8384] page_type: 0xffffffff()
[  294.324109][ T8384] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c64200 0000000000000007
[  294.332679][ T8384] raw: ffff888023943880 000000008020001e 00000001ffffffff ffff888023d96001
[  294.341246][ T8384] page dumped because: kasan: bad access detected
[  294.347646][ T8384] page_owner tracks the page as allocated
[  294.353343][ T8384] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5767, tgid 5767 (syz-executor), ts 79224245605, free_ts 79037709971
[  294.371566][ T8384]  post_alloc_hook+0x1c1/0x200
[  294.376329][ T8384]  get_page_from_freelist+0x1951/0x19e0
[  294.381862][ T8384]  __alloc_pages+0x1f0/0x460
[  294.386439][ T8384]  alloc_slab_page+0x5d/0x160
[  294.391102][ T8384]  new_slab+0x87/0x2d0
[  294.395162][ T8384]  ___slab_alloc+0xc5d/0x12f0
[  294.399830][ T8384]  __kmem_cache_alloc_node+0x19e/0x250
[  294.405282][ T8384]  kmalloc_trace+0x2a/0xe0
[  294.409688][ T8384]  alloc_fdtable+0xca/0x2c0
[  294.414186][ T8384]  dup_fd+0x786/0xa50
[  294.418156][ T8384]  copy_files+0xc3/0x120
[  294.422469][ T8384]  copy_process+0x15ab/0x3dc0
[  294.427140][ T8384]  kernel_clone+0x24b/0x8a0
[  294.431630][ T8384]  __x64_sys_clone+0x1b7/0x230
[  294.436389][ T8384]  do_syscall_64+0x55/0xb0
[  294.440790][ T8384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.446676][ T8384] page last free stack trace:
[  294.451330][ T8384]  free_unref_page_prepare+0x7b2/0x8c0
[  294.456787][ T8384]  free_unref_page+0x32/0x2e0
[  294.461457][ T8384]  __unfreeze_partials+0x1cf/0x210
[  294.466563][ T8384]  put_cpu_partial+0x17c/0x250
[  294.471312][ T8384]  __slab_free+0x319/0x400
[  294.475724][ T8384]  qlist_free_all+0x75/0xd0
[  294.480218][ T8384]  kasan_quarantine_reduce+0x143/0x160
[  294.485685][ T8384]  __kasan_slab_alloc+0x22/0x80
[  294.490533][ T8384]  slab_post_alloc_hook+0x6e/0x4b0
[  294.495640][ T8384]  kmem_cache_alloc+0x11a/0x2d0
[  294.500485][ T8384]  getname_flags+0xbb/0x500
[  294.504992][ T8384]  __x64_sys_symlinkat+0x7c/0xb0
[  294.509923][ T8384]  do_syscall_64+0x55/0xb0
[  294.514330][ T8384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.520223][ T8384] 
[  294.522535][ T8384] Memory state around the buggy address:
[  294.528165][ T8384]  ffff888023943580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  294.536214][ T8384]  ffff888023943600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  294.544261][ T8384] >ffff888023943680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  294.552303][ T8384]                                   ^
[  294.557923][ T8384]  ffff888023943700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  294.565971][ T8384]  ffff888023943780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  294.574015][ T8384] ==================================================================
[  294.582090][ T8384] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  294.589271][ T8384] CPU: 1 PID: 8384 Comm: syz.2.778 Not tainted syzkaller #0
[  294.596715][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  294.606759][ T8384] Call Trace:
[  294.610026][ T8384]  <TASK>
[  294.612947][ T8384]  dump_stack_lvl+0x18c/0x250
[  294.617623][ T8384]  ? show_regs_print_info+0x20/0x20
[  294.622814][ T8384]  ? load_image+0x420/0x420
[  294.627318][ T8384]  panic+0x2dc/0x730
[  294.631220][ T8384]  ? __lock_acquire+0x7d40/0x7d40
[  294.636242][ T8384]  ? bpf_jit_dump+0xd0/0xd0
[  294.640739][ T8384]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  294.646622][ T8384]  ? _raw_spin_unlock+0x40/0x40
[  294.651460][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  294.656564][ T8384]  check_panic_on_warn+0x84/0xa0
[  294.661494][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  294.666603][ T8384]  end_report+0x6f/0x130
[  294.670847][ T8384]  kasan_report+0x128/0x150
[  294.675341][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  294.680460][ T8384]  kasan_check_range+0x241/0x290
[  294.685399][ T8384]  ? __bpf_get_stackid+0x6bf/0x900
[  294.690515][ T8384]  __asan_memcpy+0x40/0x70
[  294.694923][ T8384]  __bpf_get_stackid+0x6bf/0x900
[  294.699860][ T8384]  bpf_get_stackid_pe+0x343/0x410
[  294.704880][ T8384]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  294.710327][ T8384]  bpf_overflow_handler+0x1fc/0x510
[  294.715524][ T8384]  ? bpf_overflow_handler+0xde/0x510
[  294.720805][ T8384]  ? tp_perf_event_destroy+0x20/0x20
[  294.726087][ T8384]  ? perf_trace_preemptirq_template+0xac/0x330
[  294.732336][ T8384]  ? __perf_event_account_interrupt+0x187/0x280
[  294.738579][ T8384]  __perf_event_overflow+0x447/0x630
[  294.743866][ T8384]  perf_swevent_event+0x319/0x570
[  294.748879][ T8384]  ? perf_tp_event+0x1520/0x1520
[  294.753805][ T8384]  ? trace_event_raw_event_lock+0x250/0x250
[  294.759693][ T8384]  ___perf_sw_event+0x4a7/0x730
[  294.764533][ T8384]  ? ___perf_sw_event+0x199/0x730
[  294.769547][ T8384]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  294.775954][ T8384]  ? __lock_acquire+0x1347/0x7d40
[  294.780971][ T8384]  ? rep_movs_alternative+0x33/0x90
[  294.786167][ T8384]  ? verify_lock_unused+0x140/0x140
[  294.791360][ T8384]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  294.797329][ T8384]  ? arch_stack_walk+0x160/0x190
[  294.802261][ T8384]  ? lock_chain_count+0x20/0x20
[  294.807100][ T8384]  __perf_sw_event+0x139/0x270
[  294.811859][ T8384]  do_user_addr_fault+0x123e/0x12c0
[  294.817052][ T8384]  ? rcu_is_watching+0x15/0xb0
[  294.821809][ T8384]  exc_page_fault+0x64/0x100
[  294.826392][ T8384]  asm_exc_page_fault+0x26/0x30
[  294.831234][ T8384] RIP: 0010:rep_movs_alternative+0x33/0x90
[  294.837031][ T8384] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[  294.856624][ T8384] RSP: 0018:ffffc90019547310 EFLAGS: 00050206
[  294.862679][ T8384] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[  294.870636][ T8384] RDX: 0000000000000000 RSI: ffff888065efc68c RDI: 000020000000cf3d
[  294.878595][ T8384] RBP: 000000000000000b R08: ffff888065efc696 R09: 1ffff1100cbdf8d2
[  294.886554][ T8384] R10: dffffc0000000000 R11: ffffed100cbdf8d3 R12: 000020000000cf48
[  294.894515][ T8384] R13: 0000000000000000 R14: 000020000000cf3d R15: ffff888065efc68c
[  294.902480][ T8384]  _copy_to_user+0x85/0xa0
[  294.906890][ T8384]  bpf_verifier_vlog+0x2fa/0x870
[  294.911825][ T8384]  verbose+0x11e/0x1a0
[  294.915965][ T8384]  ? sort_r+0x17f0/0x17f0
[  294.920287][ T8384]  ? check_func_arg_reg_off+0x2f0/0x2f0
[  294.925833][ T8384]  ? add_subprog+0x2b8/0x3c0
[  294.930418][ T8384]  bpf_check+0x30ed/0xeba0
[  294.934845][ T8384]  ? __lock_acquire+0x1273/0x7d40
[  294.939857][ T8384]  ? bpf_get_btf_vmlinux+0x20/0x20
[  294.944972][ T8384]  ? mark_lock+0x94/0x320
[  294.949302][ T8384]  ? __lock_acquire+0x1347/0x7d40
[  294.954329][ T8384]  ? verify_lock_unused+0x140/0x140
[  294.959523][ T8384]  ? perf_trace_lock+0xfc/0x3b0
[  294.964367][ T8384]  ? trace_event_raw_event_lock+0x250/0x250
[  294.970253][ T8384]  ? perf_trace_lock+0xfc/0x3b0
[  294.975099][ T8384]  ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[  294.980907][ T8384]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  294.986879][ T8384]  ? lock_chain_count+0x20/0x20
[  294.991720][ T8384]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  294.997954][ T8384]  ? lockdep_hardirqs_on+0x98/0x150
[  295.003145][ T8384]  ? ktime_get_with_offset+0x103/0x330
[  295.008598][ T8384]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  295.014832][ T8384]  ? ktime_get_real_ts64+0x440/0x440
[  295.020118][ T8384]  ? do_raw_spin_unlock+0x121/0x230
[  295.025316][ T8384]  ? bpf_obj_name_cpy+0x194/0x1e0
[  295.030336][ T8384]  bpf_prog_load+0x1163/0x1670
[  295.035096][ T8384]  ? map_freeze+0x420/0x420
[  295.039592][ T8384]  ? __might_fault+0xaa/0x120
[  295.044256][ T8384]  ? __might_fault+0xc6/0x120
[  295.048919][ T8384]  ? __might_fault+0xaa/0x120
[  295.053579][ T8384]  ? bpf_lsm_bpf+0x9/0x10
[  295.057896][ T8384]  ? security_bpf+0x7e/0xa0
[  295.062391][ T8384]  __sys_bpf+0x5ba/0x890
[  295.066622][ T8384]  ? bpf_link_show_fdinfo+0x390/0x390
[  295.071988][ T8384]  ? lock_chain_count+0x20/0x20
[  295.076841][ T8384]  __x64_sys_bpf+0x7c/0x90
[  295.081248][ T8384]  do_syscall_64+0x55/0xb0
[  295.085657][ T8384]  ? clear_bhb_loop+0x40/0x90
[  295.090329][ T8384]  ? clear_bhb_loop+0x40/0x90
[  295.094998][ T8384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.100882][ T8384] RIP: 0033:0x7f852ef9ce59
[  295.105286][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.124970][ T8384] RSP: 002b:00007f852fdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.133370][ T8384] RAX: ffffffffffffffda RBX: 00007f852f215fa0 RCX: 00007f852ef9ce59
[  295.141330][ T8384] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  295.149288][ T8384] RBP: 00007f852f032d6f R08: 0000000000000000 R09: 0000000000000000
[  295.157244][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.165201][ T8384] R13: 00007f852f216038 R14: 00007f852f215fa0 R15: 00007ffe9c2c4878
[  295.173168][ T8384]  </TASK>
[  295.176407][ T8384] Kernel Offset: disabled
[  295.180718][ T8384] Rebooting in 86400 seconds..