last executing test programs:

7.099621686s ago: executing program 0 (id=15506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000080)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x5, 0x5, 0x9, 0x22001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x6, 0xc, &(0x7f0000002640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002700)={{r0}, &(0x7f0000002740), &(0x7f0000002780)=r3}, 0x20)

7.079549958s ago: executing program 1 (id=15507):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000}, 0x18)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200003, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x4}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000048000000050000000000000000000000000008000000000000000000000300000000020000000200000000000000000000000100000d00080000030000000300000000005f2e00c33e1ae99a841adef22744b74cc64503e1a41961358e44814a33cfac2cbf"], 0x0, 0x65}, 0x28)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0xffffff2d, &(0x7f0000000580)=[{&(0x7f00000005c0)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x6, 0x3, 0xe, 0x9e, 0x10}, @map_fd, @generic={0x68, 0x0, 0x0, 0x0, 0xfffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x190767b3, 0x0, 0x0, 0x0, 0xfffffffe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x1, 0x3}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$kcm(0xa, 0x3, 0x73)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="03e41f46f196fb00000004000000040000000a000000000000c4", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x8018, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x2)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000a80), 0xcf)
perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0xfffffffffffffffe, 0xc2ba, 0x0, 0xfffffffffffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000b40)={0x0, 0xffffffffffffffcc, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000cc0))
r6 = openat$cgroup_ro(r2, &(0x7f0000000d00)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
sendmsg$sock(r6, &(0x7f0000000d40)={&(0x7f0000000d80)=@llc={0x1a, 0xc, 0x4, 0x3, 0x73, 0x8, @multicast}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000ec0)="c95cbe5f23bd", 0x6}, {&(0x7f0000000f00)="201f4ea762c7c0046e6f974104efd6ebc4bed2c57441533cc6b4b006625f0d24cc1c8ec2856502bd1766265862261120142ff008dee22215cc385f0500175aa1ef1f41d5d944b21bc88512f76d9c3291eb87d8eaebda7d7924815bee9c2b692eb750b0b7affbf6acaf5267216ae1282254cd954f03cd22ca6e5be2b741656e51c063c50a32f1fde8dfc1431965509601db8f89c4835823", 0x97}, {0x0}, {&(0x7f0000000fc0)="618baad89564f50d56963bbc9b141aff5fd6e8610b404a474d5a6984498c6cdb0419762a7cda2fb9d51b0a5fcf26121db7addaf738a9b3653f91cf3e094e9a4719b2263f5d33ba4382ac0bde41ce20ec000140201bdeaec1eefbceb51147438f294d97bd50aec03341840c225f58294ccfcca206ad376b66b83ec442682ff948cfdc0757cf088cac4666cd099e116abd46fcaad61edeabd68f95fc4a699dc40900", 0xa1}, {&(0x7f0000001080)="57f896b55ce32650ec59531f67780312d7f8e4c15e3d902ef1ae23f3032ffb994f", 0x21}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="063cb63526c4d222defa232371c2141fa1e3373da7996c2b227b83478a46b7df7d2e1cbca272c6a11478e0942d", 0x2d}, {&(0x7f0000002100)="092419a51d95eb3b76094ef98a456e7b763093bbe65ddacad8", 0x19}, {&(0x7f0000002140)="3652d4b9d6e610ff7cfac49ffa4cc51af86c35af49aa8dd2e9bfc9c6d187a52db05b0a9d409ede19efafadd0fa69e5dce56bd480766705b80a97ce9c04f3730e7db4e66624c1c6b31a695d8af30520aa47ab72886c35161d139e757530f203fe1b9151486c800c4f4a483727fe02333e", 0x70}], 0x9, &(0x7f00000021c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x7af}}, @mark={{0x14, 0x1, 0x24, 0x30b1}}, @timestamping={{0x14, 0x1, 0x25, 0xd3}}], 0x60}, 0x4010)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000022c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000000)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002380), 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000023c0)={&(0x7f0000002400)="e6d1a0e84c536d18926083744453cda9a21c2d793da101af9b3cc6f96b757660a0b28686bb7fac6ed89ef3b929afe3e38ba87a18074f313866e3d101bf83ce4a89aa3c7b424d65", &(0x7f0000002480)=""/61, &(0x7f00000024c0)="f7e6b747832c91ba89a54a10e1a6c08f7a792f919b4c5ff4acbad739cc9cead613630aa639bdc4b35a607b2151414a8cc012ce6a6caa17f569e8f08bcda39b8a0641cd4d950a747c071db96fef7bf4638e8336dc22fdb99ef5fed2ab3cd671ca30afba24d8cae1798e15394cfbb337ffef2e7599e42d3a43bd051cb8e67604648b322383ddd3028eca6bf2386c853d62afb65ccaee5597a2b63d43fdecea5b059ef60690d360a7e3b1e9b4feae2c492c3a1ee39fd1d3d3c1a58a201f12ebc3dece5302e85317d36ad4b17181a244dcc2d9bdb7", &(0x7f00000025c0)="f7e9e50f9d203bba3b519d27f85bf512bd71a659a709399f0738b3dca46b8eeefe2cc40793d40da9ac952b082fd72668f743460855e3a97a6ef91499047fa9d2396af8bdc8d61809260d3e7ce60067496626e0fad9b7d6ceab63fda6ebcaa02900208b71530eba0203fff7ed9b1bc4", 0xa, r8}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002640)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef)

6.416572436s ago: executing program 0 (id=15508):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

6.220526875s ago: executing program 2 (id=15509):
perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e04, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000900000000001c00850000007d0000009500000000000000761ed5322161b35dbe48292c510c3749845b3e35377e6d780c5ac99e650878edb242b3977b99683542d511d62cfa85003ff2f1b4954b2a5a59d562736f0000000000000000f2b34954e250589ba81c5f8d1911ccf77b222eeb157ddc9ee8b05225f137812f56b030df2cad81e3611c7438388315604afb16d5b07de8a17a0ef4c21b3121e7b837922e07b6528b005acea78cc403045a7a0792b98c1e573900"/201], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x1, 0x7fff, 0x2, 0x3200, r0, 0x1, '\x00', r1, r2, 0x5, 0x5}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000800)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x1000}, 0x38)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mkdir(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000002040)={&(0x7f0000002080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002140)="80", 0x1}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="100000000000000084000000080000001800000000000000840000009c6d5a3196a2eb44804f8d1d66a206fe3eca5bc5fc91dd8b4e44f0feb562f9062ebad820a2d9764e200fe44386d8a31ed3049de3f4170cfd362c821c513e1edbcf1f467e0a802ddafad9b9b23359a4a7a18e22a30ed751b6cab936d22eb670ff64c9b24132ddf37af305a088dbee36b4098019b7df75729d3e1b2477b4f8112a6604b653dff33b64dbc670dc2a568571383be3a7874f8f328ab2ca5156a60bed046bbd0bed052a43ab7bb225860b18cc3f6ed74719a13f2524d34bea3a4d8d91b6c204508c3f010f21fa5820d8956175d63d2bef1ffa140b4d6d6643d803effb56c512fdebe74f76c7b5a8a50853d721c91e8721be912401d96995cb705b66095459d4a4cf344d5a52074da1f44a969b6177491af87b000000000000000000"], 0x28}, 0x880)
r8 = getpid()
perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x11e482, 0xac5d}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={0xffffffffffffffff, 0x1f4, 0xe, 0x0, &(0x7f0000000f00)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r9 = socket$kcm(0x11, 0x2, 0x0)
r10 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f0000001000)=r9, 0x8)

5.834653455s ago: executing program 1 (id=15512):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f00000001c0)=r1, 0x78)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r3, 0x0, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000540)='syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a40)=ANY=[@ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdb}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, 0x0, 0x0)
close(r6)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f00000000c0)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb7907003675f3757f0086dd6317ce800000000000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000009c0)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000a40))
getpid()
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840)
r10 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000005020000ff0000000700000000000000", @ANYRES32=0x1, @ANYBLOB="d600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)

5.478742191s ago: executing program 4 (id=15513):
socket$kcm(0x10, 0x3, 0x0) (async)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, &(0x7f0000000380), 0x0, 0x0, 0x6b, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0xf4, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, &(0x7f0000000380), 0x0, 0x0, 0x6b, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0xf4, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000005c0)=""/41, 0x29, <r4=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x6, 0x32, &(0x7f0000000700)=""/50, 0x41000, 0x4, '\x00', r2, @xdp=0x25, r3, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x200002, 0x1, 0x5, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x5, &(0x7f00000007c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1, r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x2, 0xd}, {0x6, 0x4, 0x6, 0x8}, {0xfffffffe, 0x3, 0xd, 0x7}, {0x1, 0x1, 0x1, 0xa}, {0x0, 0x3, 0x9, 0xa}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18c3abb3fbece52a83976337020000fcffffff000000000000000085000000410000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18c3abb3fbece52a83976337020000fcffffff000000000000000085000000410000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0x2100, 0x0, &(0x7f00000001c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0x0, 0x10, &(0x7f0000001380), 0xfffffffffffffd00}, 0x48)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r0, r5, 0x18, 0x2008, r0, @value=r6}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r0, r5, 0x18, 0x2008, r0, @value=r6}, 0x20)

5.39637288s ago: executing program 2 (id=15514):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xcb7b}, 0x109416, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[], 0x50)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000400000000070000000700002c000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000efaf0d10c67b2a3558db3141aab806000000b1de701486e259daf6348e17adc1f06badaa78e526601bd9db5ed14f1dfb58d9c9697c1f708ba662b9e49664c21178522bcc95cddf35626b2739fa09286c2808c8762fa6038b4ad1eca0af42a900aa004d7736054b94c667f0452c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r2)
perf_event_open(&(0x7f0000001780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x5, 0x3, 0x0, &(0x7f00000018c0)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001900)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000001980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x441a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x2, 0xfffffffe, 0x9, 0x2, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0x11, 0xa, 0x300)
r5 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000001a00)={&(0x7f0000001a40)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000)
sendmsg$kcm(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)='E', 0x1}], 0x1, &(0x7f0000001b80)=ANY=[], 0x368}, 0x20044000)
recvmsg$kcm(r4, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0)
r6 = socket$kcm(0x18, 0x2, 0x2)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001c00), 0x4)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c40)={<r7=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x89a2, &(0x7f0000001c80)={'bridge0\x00', @random="1400"})
perf_event_open(&(0x7f0000001cc0)={0x5, 0x80, 0x1d, 0x5, 0x0, 0x7, 0x0, 0x2000009, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0xc)
perf_event_open(&(0x7f0000001d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.30009191s ago: executing program 4 (id=15515):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0xa0880, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0)

5.20297859s ago: executing program 4 (id=15516):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

5.035990267s ago: executing program 1 (id=15517):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10081, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080))

4.976155223s ago: executing program 3 (id=15518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000080)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x5, 0x5, 0x9, 0x22001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x6, 0xc, &(0x7f0000002640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002700)={{r0}, &(0x7f0000002740), &(0x7f0000002780)=r3}, 0x20)

4.975805143s ago: executing program 4 (id=15519):
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r1, 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000540)='syz1\x00', 0x1ff)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x400000000408}, 0x2418, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000780)=@in6={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x80, 0x0}, 0x20000001)
sendmsg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="a6", 0xffffff58}], 0x1}, 0x40001)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
write$cgroup_subtree(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x30}, 0x94)
perf_event_open(&(0x7f0000000580)={0xb578e9d8f44bea7, 0x80, 0x1c, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000440), 0x8}, 0xb64264756c569791, 0xac5d, 0xfffffffc, 0x4, 0x0, 0x6a8e82e, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000001, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8040)
recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(r6)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f00000000c0)=r8, 0x4)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840)
r9 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)

4.922898138s ago: executing program 0 (id=15520):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000d00)=r1, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0x1c, &(0x7f0000000f00)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x116080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001200)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x40012142)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4c}, [@ldst={0x5}]}, &(0x7f0000000740)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x22e, 0x10, &(0x7f00000008c0), 0x1dd}, 0x48)
socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x10000)
r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.831088777s ago: executing program 2 (id=15521):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000040042783b9e100"/28], 0x50)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000440), 0x98)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x30001, 0x0)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x3, 0x84)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$kcm(0xa, 0x6, 0x0)
sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2600c055)
close(r2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000050900000058110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007c34060001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xcdc, 0x12, &(0x7f00000000c0)=""/18, 0x41100, 0x39, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x3, 0x3, 0x2}, 0x10, 0xbbc4, 0xffffffffffffffff, 0x7, &(0x7f0000000180)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x2, 0xe, 0xe78d50f998c9272}, {0x2, 0x4, 0x7, 0x8}, {0x1, 0x3, 0xd, 0x7}, {0x3, 0x4, 0x1, 0x2}, {0x2, 0x5, 0xe, 0xa}, {0x5, 0x3, 0xc, 0x7}, {0x3, 0x1, 0x10, 0x6}], 0x10, 0xbb7b}, 0x94)

4.634306297s ago: executing program 3 (id=15522):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0)

4.455410656s ago: executing program 1 (id=15523):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x1e, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000001c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000009b5a00000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xf, &(0x7f0000000d00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000dc0)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r6, 0x8100, 0xe80, 0x0, &(0x7f0000000b40)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.270248005s ago: executing program 2 (id=15524):
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000880), 0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000500)="09790000ffffff082b5108da88a8a5a186dd", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r1}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000240)=r5)
close(r4)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)

4.024764699s ago: executing program 3 (id=15525):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0))
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x86e46, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x200000ff}, 0x0, 0x10, 0xffffffffffffffff, 0x3)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)

3.889851553s ago: executing program 4 (id=15526):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0xa0880, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0)

3.656827677s ago: executing program 0 (id=15527):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x61}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x22e, 0x10, &(0x7f0000000440), 0x1dd}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000b80)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000001700)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x1e, 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000020000000071123400000000009500000000000000"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x6, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000e00)='GPL\x00', 0x3, 0xfa, &(0x7f0000000e40)=""/250, 0x0, 0x0, '\x00', r3}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0)
r5 = socket$kcm(0x2c, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f00000013c0)=r6, 0x4)
r7 = openat$cgroup_ro(r4, &(0x7f0000000f40)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000f80), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x10, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000001240)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
write$cgroup_int(r7, &(0x7f0000000fc0)=0x1, 0x12)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x0, 0x2, 0x0, 0x3905a53b)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @fallback=0x13}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

914.038217ms ago: executing program 4 (id=15528):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800010000000000000016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce3b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0xc, 0xc}, 0x50)
r5 = socket$kcm(0xa, 0x3, 0x87)
recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r4}, 0xc)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xffffff2d, &(0x7f0000000640)=[{&(0x7f0000000680)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000001400)="b9fa030711a5f32e019e14f088a861e0ffff01004000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

892.382499ms ago: executing program 1 (id=15529):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

770.258402ms ago: executing program 0 (id=15530):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0))
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x9, 0x0, 0x83, 0x2e5e4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x3}, 0x0, 0x8, 0x7f, 0x1, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x200000ff}, 0x0, 0x10, 0xffffffffffffffff, 0x3)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f0000000340)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x5, 0xe, 0x0, &(0x7f0000000580)="b5009fcbde000000528bf97a88f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f0000000100)}, 0x20)
perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x6}, 0x1005ac, 0x0, 0x0, 0x4, 0x0, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0x5}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0x41, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'ip6gre0\x00', 0x210})
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000740), 0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)

769.612422ms ago: executing program 2 (id=15531):
r0 = socket$kcm(0x29, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r2, 0x0, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000540)='syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xfe33)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, 0x0, 0x0)
close(r5)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000005020000ff0000000700000000000000", @ANYRES32=0x1, @ANYBLOB="d600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r8, r3})
perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffff51, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x100, 0xc2ba, 0x0, 0x4000000, 0x4, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x11, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

559.072644ms ago: executing program 3 (id=15532):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000080)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x5, 0x5, 0x9, 0x22001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002700)={{r0}, &(0x7f0000002740), &(0x7f0000002780)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={0xffffffffffffffff, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000002840)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

558.802484ms ago: executing program 1 (id=15533):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0)

412.362299ms ago: executing program 0 (id=15534):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000001340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001400)="b9fa030711a5f32e019e14f088a861e0ffff01004000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

292.315001ms ago: executing program 2 (id=15535):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0)

266.977533ms ago: executing program 3 (id=15536):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x200, 0x4, 0x0, 0x0, 0xd3, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x4008240b, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca1164010102000003ef7f00000100009f029344a5ee0a01010200000000ac141427ffffffff"], 0x40}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000002"], 0x50)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000240))
sendmsg$unix(r0, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)

0s ago: executing program 3 (id=15537):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000d00)=r1, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0x1c, &(0x7f0000000f00)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x116080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001200)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x40012142)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4c}, [@ldst={0x5}]}, &(0x7f0000000740)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x22e, 0x10, &(0x7f00000008c0), 0x1dd}, 0x48)
socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x10000)
r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

5 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2663.480554][T19968] RSP: 002b:00007ff30e72b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2663.489017][T19968] RAX: ffffffffffffffda RBX: 00007ff30da25fa0 RCX: 00007ff30d79fb19
[ 2663.497025][T19968] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[ 2663.505031][T19968] RBP: 00007ff30e72b090 R08: 0000000000000000 R09: 0000000000000000
[ 2663.513040][T19968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2663.521041][T19968] R13: 00007ff30da26038 R14: 00007ff30da25fa0 R15: 00007ffdc9e8dd58
[ 2663.529054][T19968]  </TASK>
[ 2663.827661][T19966] can: request_module (can-proto-0) failed.
[ 2664.056332][T19992] FAULT_INJECTION: forcing a failure.
[ 2664.056332][T19992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2664.080038][T19992] CPU: 1 PID: 19992 Comm: syz.3.14823 Not tainted syzkaller #0
[ 2664.087674][T19992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2664.097778][T19992] Call Trace:
[ 2664.101100][T19992]  <TASK>
[ 2664.104071][T19992]  dump_stack_lvl+0x188/0x24e
[ 2664.108844][T19992]  ? show_regs_print_info+0x12/0x12
[ 2664.114106][T19992]  ? load_image+0x410/0x410
[ 2664.118674][T19992]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2664.123760][T19992]  should_fail_ex+0x390/0x4c0
[ 2664.128491][T19992]  _copy_from_user+0x2c/0x170
[ 2664.133229][T19992]  iovec_from_user+0x143/0x360
[ 2664.138054][T19992]  __import_iovec+0x6c/0x510
[ 2664.142710][T19992]  import_iovec+0x6f/0xa0
[ 2664.147101][T19992]  ___sys_sendmsg+0x252/0x360
[ 2664.151862][T19992]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2664.156742][T19992]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2664.161673][T19992]  ? __x64_sys_sendmsg+0x80/0x80
[ 2664.166787][T19992]  do_syscall_64+0x4c/0xa0
[ 2664.171283][T19992]  ? clear_bhb_loop+0x60/0xb0
[ 2664.176002][T19992]  ? clear_bhb_loop+0x60/0xb0
[ 2664.180760][T19992]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2664.186701][T19992] RIP: 0033:0x7fdd65f9fb19
[ 2664.191186][T19992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2664.210848][T19992] RSP: 002b:00007fdd66d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2664.219342][T19992] RAX: ffffffffffffffda RBX: 00007fdd66225fa0 RCX: 00007fdd65f9fb19
[ 2664.227355][T19992] RDX: 0000000004008000 RSI: 00002000000000c0 RDI: 0000000000000007
[ 2664.235403][T19992] RBP: 00007fdd66d9f090 R08: 0000000000000000 R09: 0000000000000000
[ 2664.243437][T19992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2664.251443][T19992] R13: 00007fdd66226038 R14: 00007fdd66225fa0 R15: 00007ffffcef26d8
[ 2664.259474][T19992]  </TASK>
[ 2664.308617][T19991] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14825'.
[ 2664.359273][T19991] netlink: 'syz.0.14825': attribute type 10 has an invalid length.
[ 2664.456743][T19998] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2666.799724][   T11] wlan1: Trigger new scan to find an IBSS to join
[ 2667.741753][T20028] netlink: 'syz.3.14834': attribute type 10 has an invalid length.
[ 2668.031065][T20044] netlink: 'syz.1.14842': attribute type 10 has an invalid length.
[ 2669.839883][   T30] wlan1: Trigger new scan to find an IBSS to join
[ 2671.203631][T20054] netlink: 'syz.1.14844': attribute type 13 has an invalid length.
[ 2671.218949][T20054] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14844'.
[ 2671.257202][T20054] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2673.839897][T14929] wlan1: Trigger new scan to find an IBSS to join
[ 2674.556280][T20077] FAULT_INJECTION: forcing a failure.
[ 2674.556280][T20077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2674.598633][T20077] CPU: 1 PID: 20077 Comm: syz.1.14856 Not tainted syzkaller #0
[ 2674.606313][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2674.616462][T20077] Call Trace:
[ 2674.619816][T20077]  <TASK>
[ 2674.622811][T20077]  dump_stack_lvl+0x188/0x24e
[ 2674.627560][T20077]  ? show_regs_print_info+0x12/0x12
[ 2674.632821][T20077]  ? load_image+0x410/0x410
[ 2674.637399][T20077]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2674.642526][T20077]  should_fail_ex+0x390/0x4c0
[ 2674.647273][T20077]  _copy_from_user+0x2c/0x170
[ 2674.652009][T20077]  bpf_test_init+0xde/0x140
[ 2674.656568][T20077]  bpf_prog_test_run_xdp+0x488/0xf80
[ 2674.661910][T20077]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2674.667014][T20077]  ? dev_put+0x80/0x80
[ 2674.671147][T20077]  ? dev_put+0x80/0x80
[ 2674.675267][T20077]  bpf_prog_test_run+0x31c/0x390
[ 2674.680295][T20077]  __sys_bpf+0x62b/0x780
[ 2674.684595][T20077]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2674.690049][T20077]  ? lock_chain_count+0x20/0x20
[ 2674.694966][T20077]  __x64_sys_bpf+0x78/0x90
[ 2674.699445][T20077]  do_syscall_64+0x4c/0xa0
[ 2674.703924][T20077]  ? clear_bhb_loop+0x60/0xb0
[ 2674.708653][T20077]  ? clear_bhb_loop+0x60/0xb0
[ 2674.713419][T20077]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2674.719405][T20077] RIP: 0033:0x7ff30d79fb19
[ 2674.723873][T20077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2674.745727][T20077] RSP: 002b:00007ff30e72b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2674.754207][T20077] RAX: ffffffffffffffda RBX: 00007ff30da25fa0 RCX: 00007ff30d79fb19
[ 2674.762239][T20077] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 2674.770257][T20077] RBP: 00007ff30e72b090 R08: 0000000000000000 R09: 0000000000000000
[ 2674.778303][T20077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2674.786327][T20077] R13: 00007ff30da26038 R14: 00007ff30da25fa0 R15: 00007ffdc9e8dd58
[ 2674.794375][T20077]  </TASK>
[ 2674.928435][   T11] wlan1: Creating new IBSS network, BSSID da:8f:ff:b2:36:5b
[ 2675.001145][T20089] netlink: 'syz.3.14860': attribute type 4 has an invalid length.
[ 2675.012230][T20089] netlink: 'syz.3.14860': attribute type 10 has an invalid length.
[ 2675.024343][T20089] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14860'.
[ 2675.036854][T20089] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 2676.072683][T20111] FAULT_INJECTION: forcing a failure.
[ 2676.072683][T20111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2676.086984][T20111] CPU: 1 PID: 20111 Comm: syz.2.14866 Not tainted syzkaller #0
[ 2676.094598][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2676.104701][T20111] Call Trace:
[ 2676.108025][T20111]  <TASK>
[ 2676.110994][T20111]  dump_stack_lvl+0x188/0x24e
[ 2676.115742][T20111]  ? show_regs_print_info+0x12/0x12
[ 2676.121002][T20111]  ? load_image+0x410/0x410
[ 2676.125555][T20111]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2676.130646][T20111]  should_fail_ex+0x390/0x4c0
[ 2676.135377][T20111]  _copy_from_user+0x2c/0x170
[ 2676.140110][T20111]  bpf_test_init+0xde/0x140
[ 2676.144672][T20111]  bpf_prog_test_run_xdp+0x488/0xf80
[ 2676.150046][T20111]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2676.155143][T20111]  ? dev_put+0x80/0x80
[ 2676.159298][T20111]  ? dev_put+0x80/0x80
[ 2676.163416][T20111]  bpf_prog_test_run+0x31c/0x390
[ 2676.168415][T20111]  __sys_bpf+0x62b/0x780
[ 2676.172721][T20111]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2676.178180][T20111]  ? lock_chain_count+0x20/0x20
[ 2676.183099][T20111]  __x64_sys_bpf+0x78/0x90
[ 2676.187687][T20111]  do_syscall_64+0x4c/0xa0
[ 2676.192176][T20111]  ? clear_bhb_loop+0x60/0xb0
[ 2676.196908][T20111]  ? clear_bhb_loop+0x60/0xb0
[ 2676.201669][T20111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2676.207621][T20111] RIP: 0033:0x7faf32f9fb19
[ 2676.212076][T20111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2676.231739][T20111] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2676.240213][T20111] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2676.248227][T20111] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 2676.256325][T20111] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2676.264342][T20111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2676.272357][T20111] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2676.280391][T20111]  </TASK>
[ 2676.540792][T20119] FAULT_INJECTION: forcing a failure.
[ 2676.540792][T20119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2676.554478][T20119] CPU: 1 PID: 20119 Comm: syz.0.14869 Not tainted syzkaller #0
[ 2676.562088][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2676.572198][T20119] Call Trace:
[ 2676.575520][T20119]  <TASK>
[ 2676.578492][T20119]  dump_stack_lvl+0x188/0x24e
[ 2676.583242][T20119]  ? show_regs_print_info+0x12/0x12
[ 2676.588507][T20119]  ? load_image+0x410/0x410
[ 2676.593072][T20119]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2676.598168][T20119]  should_fail_ex+0x390/0x4c0
[ 2676.602910][T20119]  _copy_from_user+0x2c/0x170
[ 2676.607709][T20119]  bpf_test_init+0xde/0x140
[ 2676.612267][T20119]  bpf_prog_test_run_xdp+0x488/0xf80
[ 2676.617587][T20119]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2676.622677][T20119]  ? dev_put+0x80/0x80
[ 2676.626789][T20119]  ? dev_put+0x80/0x80
[ 2676.630904][T20119]  bpf_prog_test_run+0x31c/0x390
[ 2676.635884][T20119]  __sys_bpf+0x62b/0x780
[ 2676.640168][T20119]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2676.645619][T20119]  ? lock_chain_count+0x20/0x20
[ 2676.650520][T20119]  __x64_sys_bpf+0x78/0x90
[ 2676.654972][T20119]  do_syscall_64+0x4c/0xa0
[ 2676.659431][T20119]  ? clear_bhb_loop+0x60/0xb0
[ 2676.664158][T20119]  ? clear_bhb_loop+0x60/0xb0
[ 2676.668893][T20119]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2676.674844][T20119] RIP: 0033:0x7f9b90d9fb19
[ 2676.679291][T20119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2676.699013][T20119] RSP: 002b:00007f9b91d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2676.707497][T20119] RAX: ffffffffffffffda RBX: 00007f9b91025fa0 RCX: 00007f9b90d9fb19
[ 2676.715503][T20119] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 2676.723506][T20119] RBP: 00007f9b91d38090 R08: 0000000000000000 R09: 0000000000000000
[ 2676.731551][T20119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2676.739572][T20119] R13: 00007f9b91026038 R14: 00007f9b91025fa0 R15: 00007ffd3c545198
[ 2676.747610][T20119]  </TASK>
[ 2677.010927][T20131] netlink: 'syz.0.14871': attribute type 2 has an invalid length.
[ 2678.518267][T20144] netlink: 'syz.1.14875': attribute type 4 has an invalid length.
[ 2678.547850][T20144] netlink: 'syz.1.14875': attribute type 10 has an invalid length.
[ 2678.571022][T20144] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14875'.
[ 2678.786348][T20149] netlink: 'syz.3.14877': attribute type 3 has an invalid length.
[ 2678.798396][T20149] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14877'.
[ 2679.218543][T20168] syz.4.14884[20168] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2679.218740][T20168] syz.4.14884[20168] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2679.385085][T20172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14886'.
[ 2679.939120][T20164] delete_channel: no stack
[ 2682.034578][T20172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14886'.
[ 2682.187657][T20181] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14888'.
[ 2682.400706][T20191] netlink: 'syz.4.14893': attribute type 4 has an invalid length.
[ 2682.429121][T20191] netlink: 'syz.4.14893': attribute type 10 has an invalid length.
[ 2682.455302][T20191] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14893'.
[ 2682.475633][T20191] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 2682.627050][T20194] netlink: 'syz.0.14895': attribute type 3 has an invalid length.
[ 2682.701362][T20194] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14895'.
[ 2682.870810][T20202] netlink: 'syz.2.14897': attribute type 13 has an invalid length.
[ 2682.940616][T20202] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14897'.
[ 2683.122767][T20213] netlink: 'syz.0.14900': attribute type 25 has an invalid length.
[ 2683.202631][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.323787][T20213] netlink: 'syz.0.14900': attribute type 25 has an invalid length.
[ 2683.400629][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.461037][T20213] netlink: 'syz.0.14900': attribute type 25 has an invalid length.
[ 2683.520833][T20213] netlink: 'syz.0.14900': attribute type 25 has an invalid length.
[ 2683.570979][T20213] netlink: 'syz.0.14900': attribute type 25 has an invalid length.
[ 2683.619608][T20213] __nla_validate_parse: 2 callbacks suppressed
[ 2683.619626][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.636746][T20213] netlink: 'syz.0.14900': attribute type 25 has an invalid length.
[ 2683.644880][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.657002][T23010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2683.667696][T23010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2683.680766][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.692751][T20222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2683.702207][T20222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2683.710600][T20222] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2683.718157][T20222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2683.762373][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.775564][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.788066][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.801021][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.817450][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.830253][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2683.842790][T20213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.14900'.
[ 2685.759824][T20222] Bluetooth: hci2: command 0x0409 tx timeout
[ 2686.251708][T20221] rxe_eth0 speed is unknown, defaulting to 1000
[ 2686.386190][T14929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2686.525586][T14929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2686.664391][T14929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2686.904056][T14929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2687.011621][T20221] chnl_net:caif_netlink_parms(): no params data found
[ 2687.595341][T20221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2687.607451][T20221] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2687.642689][T20221] device bridge_slave_0 entered promiscuous mode
[ 2687.839560][T20222] Bluetooth: hci2: command 0x041b tx timeout
[ 2689.919515][T20222] Bluetooth: hci2: command 0x040f tx timeout
[ 2690.614492][T20277] device sit0 entered promiscuous mode
[ 2690.664017][T20221] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2690.672961][T20221] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2690.682024][T20221] device bridge_slave_1 entered promiscuous mode
[ 2690.932163][T20221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2690.966480][T20221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2691.182502][T20221] team0: Port device team_slave_0 added
[ 2691.246685][T20221] team0: Port device team_slave_1 added
[ 2691.434497][T20221] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2691.451908][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2691.568008][T20221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2691.700542][T20221] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2691.710980][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2691.835606][T20221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2691.999835][T20222] Bluetooth: hci2: command 0x0419 tx timeout
[ 2692.022458][T20333] FAULT_INJECTION: forcing a failure.
[ 2692.022458][T20333] name failslab, interval 1, probability 0, space 0, times 0
[ 2692.042935][T20333] CPU: 1 PID: 20333 Comm: syz.0.14926 Not tainted syzkaller #0
[ 2692.050564][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2692.060670][T20333] Call Trace:
[ 2692.064029][T20333]  <TASK>
[ 2692.067003][T20333]  dump_stack_lvl+0x188/0x24e
[ 2692.071759][T20333]  ? show_regs_print_info+0x12/0x12
[ 2692.077018][T20333]  ? load_image+0x410/0x410
[ 2692.081583][T20333]  ? __might_sleep+0xd0/0xd0
[ 2692.086224][T20333]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2692.091307][T20333]  ? mark_lock+0x94/0x320
[ 2692.095695][T20333]  should_fail_ex+0x390/0x4c0
[ 2692.100435][T20333]  should_failslab+0x5/0x20
[ 2692.104977][T20333]  slab_pre_alloc_hook+0x59/0x300
[ 2692.110048][T20333]  ? __get_vm_area_node+0x122/0x330
[ 2692.115282][T20333]  __kmem_cache_alloc_node+0x4f/0x270
[ 2692.120686][T20333]  ? __get_vm_area_node+0x122/0x330
[ 2692.125919][T20333]  kmalloc_node_trace+0x22/0xe0
[ 2692.130824][T20333]  __get_vm_area_node+0x122/0x330
[ 2692.135884][T20333]  __vmalloc_node_range+0x357/0x1380
[ 2692.141205][T20333]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.146795][T20333]  ? aa_get_newest_label+0xf9/0x5b0
[ 2692.152030][T20333]  ? free_vm_area+0x50/0x50
[ 2692.156570][T20333]  ? end_current_label_crit_section+0x170/0x170
[ 2692.162853][T20333]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2692.167927][T20333]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.173503][T20333]  __vmalloc+0x76/0x80
[ 2692.177604][T20333]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.183175][T20333]  bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.188567][T20333]  ? bpf_prog_alloc+0x13/0x1b0
[ 2692.193364][T20333]  bpf_prog_alloc+0x1c/0x1b0
[ 2692.197980][T20333]  bpf_prog_load+0x7d4/0x1530
[ 2692.202701][T20333]  ? map_freeze+0x390/0x390
[ 2692.207242][T20333]  ? __might_fault+0xa6/0x120
[ 2692.211957][T20333]  ? __might_fault+0xa6/0x120
[ 2692.216683][T20333]  ? __might_fault+0xc2/0x120
[ 2692.221389][T20333]  ? __might_fault+0xa6/0x120
[ 2692.226092][T20333]  ? bpf_lsm_bpf+0x5/0x10
[ 2692.230448][T20333]  ? security_bpf+0x7a/0xa0
[ 2692.234985][T20333]  __sys_bpf+0x5b8/0x780
[ 2692.239262][T20333]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2692.244681][T20333]  ? lock_chain_count+0x20/0x20
[ 2692.249594][T20333]  __x64_sys_bpf+0x78/0x90
[ 2692.254046][T20333]  do_syscall_64+0x4c/0xa0
[ 2692.258528][T20333]  ? clear_bhb_loop+0x60/0xb0
[ 2692.263241][T20333]  ? clear_bhb_loop+0x60/0xb0
[ 2692.267963][T20333]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2692.273891][T20333] RIP: 0033:0x7f9b90d9fb19
[ 2692.278342][T20333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2692.297977][T20333] RSP: 002b:00007f9b91cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2692.306418][T20333] RAX: ffffffffffffffda RBX: 00007f9b91026180 RCX: 00007f9b90d9fb19
[ 2692.314415][T20333] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[ 2692.322412][T20333] RBP: 00007f9b91cf6090 R08: 0000000000000000 R09: 0000000000000000
[ 2692.330428][T20333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2692.338422][T20333] R13: 00007f9b91026218 R14: 00007f9b91026180 R15: 00007ffd3c545198
[ 2692.346456][T20333]  </TASK>
[ 2692.562201][T20333] warn_alloc: 1 callbacks suppressed
[ 2692.562222][T20333] syz.0.14926: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[ 2692.578433][T20221] device hsr_slave_0 entered promiscuous mode
[ 2692.619594][T20333] ,cpuset=syz0,mems_allowed=0-1
[ 2692.635335][T20333] CPU: 1 PID: 20333 Comm: syz.0.14926 Not tainted syzkaller #0
[ 2692.642980][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2692.653086][T20333] Call Trace:
[ 2692.656411][T20333]  <TASK>
[ 2692.659384][T20333]  dump_stack_lvl+0x188/0x24e
[ 2692.664129][T20333]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2692.670602][T20333]  ? show_regs_print_info+0x12/0x12
[ 2692.675872][T20333]  ? load_image+0x410/0x410
[ 2692.680440][T20333]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2692.686901][T20333]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 2692.693466][T20333]  warn_alloc+0x242/0x330
[ 2692.697833][T20333]  ? __get_vm_area_node+0x122/0x330
[ 2692.703067][T20333]  ? zone_watermark_ok_safe+0x270/0x270
[ 2692.708647][T20333]  ? rcu_is_watching+0x11/0xa0
[ 2692.713466][T20333]  ? __get_vm_area_node+0x318/0x330
[ 2692.718705][T20333]  __vmalloc_node_range+0x37c/0x1380
[ 2692.724064][T20333]  ? aa_get_newest_label+0xf9/0x5b0
[ 2692.729301][T20333]  ? free_vm_area+0x50/0x50
[ 2692.733839][T20333]  ? end_current_label_crit_section+0x170/0x170
[ 2692.740135][T20333]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2692.745206][T20333]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.750779][T20333]  __vmalloc+0x76/0x80
[ 2692.754881][T20333]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.760456][T20333]  bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2692.765876][T20333]  ? bpf_prog_alloc+0x13/0x1b0
[ 2692.770665][T20333]  bpf_prog_alloc+0x1c/0x1b0
[ 2692.775294][T20333]  bpf_prog_load+0x7d4/0x1530
[ 2692.780022][T20333]  ? map_freeze+0x390/0x390
[ 2692.784563][T20333]  ? __might_fault+0xa6/0x120
[ 2692.789278][T20333]  ? __might_fault+0xa6/0x120
[ 2692.793983][T20333]  ? __might_fault+0xc2/0x120
[ 2692.798687][T20333]  ? __might_fault+0xa6/0x120
[ 2692.803406][T20333]  ? bpf_lsm_bpf+0x5/0x10
[ 2692.807777][T20333]  ? security_bpf+0x7a/0xa0
[ 2692.812313][T20333]  __sys_bpf+0x5b8/0x780
[ 2692.816596][T20333]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2692.822037][T20333]  ? lock_chain_count+0x20/0x20
[ 2692.826931][T20333]  __x64_sys_bpf+0x78/0x90
[ 2692.831386][T20333]  do_syscall_64+0x4c/0xa0
[ 2692.835837][T20333]  ? clear_bhb_loop+0x60/0xb0
[ 2692.840549][T20333]  ? clear_bhb_loop+0x60/0xb0
[ 2692.845265][T20333]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2692.851188][T20333] RIP: 0033:0x7f9b90d9fb19
[ 2692.855630][T20333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2692.875267][T20333] RSP: 002b:00007f9b91cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2692.883756][T20333] RAX: ffffffffffffffda RBX: 00007f9b91026180 RCX: 00007f9b90d9fb19
[ 2692.891756][T20333] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[ 2692.899752][T20333] RBP: 00007f9b91cf6090 R08: 0000000000000000 R09: 0000000000000000
[ 2692.907765][T20333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2692.915761][T20333] R13: 00007f9b91026218 R14: 00007f9b91026180 R15: 00007ffd3c545198
[ 2692.923777][T20333]  </TASK>
[ 2692.932636][T20221] device hsr_slave_1 entered promiscuous mode
[ 2692.939540][T20221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2692.947145][T20221] Cannot create hsr debugfs directory
[ 2693.038174][T20333] Mem-Info:
[ 2693.046043][T20333] active_anon:23629 inactive_anon:0 isolated_anon:0
[ 2693.046043][T20333]  active_file:22071 inactive_file:41022 isolated_file:0
[ 2693.046043][T20333]  unevictable:768 dirty:509 writeback:0
[ 2693.046043][T20333]  slab_reclaimable:21462 slab_unreclaimable:99304
[ 2693.046043][T20333]  mapped:32131 shmem:1370 pagetables:739
[ 2693.046043][T20333]  sec_pagetables:0 bounce:0
[ 2693.046043][T20333]  kernel_misc_reclaimable:0
[ 2693.046043][T20333]  free:1286570 free_pcp:10023 free_cma:0
[ 2693.049791][T20340] validate_nla: 17 callbacks suppressed
[ 2693.049835][T20340] netlink: 'syz.2.14927': attribute type 12 has an invalid length.
[ 2693.169715][T20337] __nla_validate_parse: 10 callbacks suppressed
[ 2693.169742][T20337] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.14927'.
[ 2693.239633][T20340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14927'.
[ 2693.270898][T20333] Node 0 active_anon:94316kB inactive_anon:0kB active_file:88284kB inactive_file:163884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128524kB dirty:932kB writeback:400kB shmem:3944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10372kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no
[ 2693.384751][T20343] can: request_module (can-proto-0) failed.
[ 2693.570427][T20333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2693.707579][T20333] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2693.784445][T20333] lowmem_reserve[]: 0 2509 2510 2510 2510
[ 2693.794548][T20333] Node 0 DMA32 free:1215640kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:94216kB inactive_anon:0kB active_file:88284kB inactive_file:163884kB unevictable:1536kB writepending:932kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:33852kB local_pcp:13496kB free_cma:0kB
[ 2694.052488][T20333] lowmem_reserve[]: 0 0 1 1 1
[ 2694.057365][T20333] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2694.142207][T20333] lowmem_reserve[]: 0 0 0 0 0
[ 2694.155818][T20333] Node 1 Normal free:3911776kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11584kB local_pcp:11584kB free_cma:0kB
[ 2694.263335][T20333] lowmem_reserve[]: 0 0 0 0 0
[ 2694.280855][T20333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2694.318833][T20333] Node 0 DMA32: 1983*4kB (UM) 328*8kB (UME) 2047*16kB (UME) 604*32kB (UME) 684*64kB (UME) 322*128kB (UME) 126*256kB (UM) 129*512kB (UME) 49*1024kB (UM) 17*2048kB (UM) 220*4096kB (UM) = 1232044kB
[ 2694.388680][T20333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2694.440920][T20333] Node 1 Normal: 190*4kB (UE) 59*8kB (UME) 33*16kB (UE) 168*32kB (UME) 54*64kB (UME) 14*128kB (UME) 14*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3911776kB
[ 2694.674483][T20333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2694.730915][T20333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2694.770055][T20333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2694.794675][T20333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2694.831906][T20333] 64463 total pagecache pages
[ 2694.848719][T20333] 0 pages in swap cache
[ 2694.854843][T20333] Free swap  = 124996kB
[ 2694.863961][T20333] Total swap = 124996kB
[ 2694.883333][T20333] 2097051 pages RAM
[ 2694.939579][T20333] 0 pages HighMem/MovableOnly
[ 2694.944501][T20333] 419799 pages reserved
[ 2694.958979][T20333] 0 pages cma reserved
[ 2695.211988][T20368] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.14939'.
[ 2695.222798][T20378] netlink: 2 bytes leftover after parsing attributes in process `syz.4.14934'.
[ 2695.260854][T20378] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2695.343394][T20363] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.14939'.
[ 2695.630954][T20396] syz.0.14936[20396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2695.631139][T20396] syz.0.14936[20396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2695.952705][T14929] device hsr_slave_0 left promiscuous mode
[ 2695.991145][T14929] device hsr_slave_1 left promiscuous mode
[ 2696.150366][T14929] device veth1_vlan left promiscuous mode
[ 2696.158522][T14929] device veth0_vlan left promiscuous mode
[ 2696.382096][T20393] delete_channel: no stack
[ 2696.713794][T14929] team0 (unregistering): Port device geneve1 removed
[ 2696.784781][T20427] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.14940'.
[ 2696.796140][T14929] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 2696.957245][T20427] can: request_module (can-proto-0) failed.
[ 2697.272685][T20441] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.14945'.
[ 2697.420580][T20441] can: request_module (can-proto-0) failed.
[ 2697.817782][T14929] team0 (unregistering): Port device team_slave_1 removed
[ 2697.875614][T14929] team0 (unregistering): Port device team_slave_0 removed
[ 2697.964321][T14929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2697.973354][T14929] device bond_slave_1 left promiscuous mode
[ 2698.022044][T14929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2698.032295][T14929] device bond_slave_0 left promiscuous mode
[ 2698.299024][T14929] bond0 (unregistering): Released all slaves
[ 2698.381290][T20422] netlink: 'syz.4.14940': attribute type 12 has an invalid length.
[ 2698.389536][T20422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14940'.
[ 2698.399629][T20440] netlink: 'syz.0.14945': attribute type 12 has an invalid length.
[ 2698.407624][T20440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14945'.
[ 2698.732720][T20452] FAULT_INJECTION: forcing a failure.
[ 2698.732720][T20452] name failslab, interval 1, probability 0, space 0, times 0
[ 2698.766560][T20452] CPU: 0 PID: 20452 Comm: syz.2.14948 Not tainted syzkaller #0
[ 2698.774217][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2698.784320][T20452] Call Trace:
[ 2698.787731][T20452]  <TASK>
[ 2698.790706][T20452]  dump_stack_lvl+0x188/0x24e
[ 2698.795445][T20452]  ? show_regs_print_info+0x12/0x12
[ 2698.800717][T20452]  ? load_image+0x410/0x410
[ 2698.805308][T20452]  ? __might_sleep+0xd0/0xd0
[ 2698.810036][T20452]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2698.815118][T20452]  ? mark_lock+0x94/0x320
[ 2698.819508][T20452]  should_fail_ex+0x390/0x4c0
[ 2698.824240][T20452]  should_failslab+0x5/0x20
[ 2698.828788][T20452]  slab_pre_alloc_hook+0x59/0x300
[ 2698.833863][T20452]  ? __get_vm_area_node+0x122/0x330
[ 2698.839095][T20452]  __kmem_cache_alloc_node+0x4f/0x270
[ 2698.844512][T20452]  ? __get_vm_area_node+0x122/0x330
[ 2698.849742][T20452]  kmalloc_node_trace+0x22/0xe0
[ 2698.854624][T20452]  __get_vm_area_node+0x122/0x330
[ 2698.859723][T20452]  __vmalloc_node_range+0x357/0x1380
[ 2698.865049][T20452]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2698.870645][T20452]  ? aa_get_newest_label+0xf9/0x5b0
[ 2698.875902][T20452]  ? free_vm_area+0x50/0x50
[ 2698.880442][T20452]  ? end_current_label_crit_section+0x170/0x170
[ 2698.886726][T20452]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2698.891814][T20452]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2698.897387][T20452]  __vmalloc+0x76/0x80
[ 2698.901489][T20452]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2698.907067][T20452]  bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2698.912467][T20452]  ? bpf_prog_alloc+0x13/0x1b0
[ 2698.917283][T20452]  bpf_prog_alloc+0x1c/0x1b0
[ 2698.921904][T20452]  bpf_prog_load+0x7d4/0x1530
[ 2698.926628][T20452]  ? map_freeze+0x390/0x390
[ 2698.931174][T20452]  ? __might_fault+0xa6/0x120
[ 2698.935885][T20452]  ? __might_fault+0xa6/0x120
[ 2698.940595][T20452]  ? __might_fault+0xc2/0x120
[ 2698.945321][T20452]  ? __might_fault+0xa6/0x120
[ 2698.950034][T20452]  ? bpf_lsm_bpf+0x5/0x10
[ 2698.954392][T20452]  ? security_bpf+0x7a/0xa0
[ 2698.958929][T20452]  __sys_bpf+0x5b8/0x780
[ 2698.963207][T20452]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2698.968728][T20452]  ? lock_chain_count+0x20/0x20
[ 2698.973625][T20452]  __x64_sys_bpf+0x78/0x90
[ 2698.978078][T20452]  do_syscall_64+0x4c/0xa0
[ 2698.982533][T20452]  ? clear_bhb_loop+0x60/0xb0
[ 2698.987247][T20452]  ? clear_bhb_loop+0x60/0xb0
[ 2698.991957][T20452]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2698.997879][T20452] RIP: 0033:0x7faf32f9fb19
[ 2699.002322][T20452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2699.021980][T20452] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2699.030440][T20452] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2699.038462][T20452] RDX: 0000000000000090 RSI: 0000200000001080 RDI: 0000000000000005
[ 2699.046460][T20452] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2699.054490][T20452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2699.062487][T20452] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2699.070499][T20452]  </TASK>
[ 2699.200030][T20461] FAULT_INJECTION: forcing a failure.
[ 2699.200030][T20461] name failslab, interval 1, probability 0, space 0, times 0
[ 2699.263220][T20461] CPU: 1 PID: 20461 Comm: syz.4.14952 Not tainted syzkaller #0
[ 2699.270865][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2699.280988][T20461] Call Trace:
[ 2699.284296][T20461]  <TASK>
[ 2699.287258][T20461]  dump_stack_lvl+0x188/0x24e
[ 2699.291977][T20461]  ? show_regs_print_info+0x12/0x12
[ 2699.297212][T20461]  ? load_image+0x410/0x410
[ 2699.301747][T20461]  ? __might_sleep+0xd0/0xd0
[ 2699.306368][T20461]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2699.311429][T20461]  should_fail_ex+0x390/0x4c0
[ 2699.316141][T20461]  should_failslab+0x5/0x20
[ 2699.320697][T20461]  slab_pre_alloc_hook+0x59/0x300
[ 2699.325756][T20461]  ? is_bpf_text_address+0x22/0x2a0
[ 2699.330990][T20461]  kmem_cache_alloc+0x56/0x2f0
[ 2699.335790][T20461]  ? __alloc_file+0x25/0x230
[ 2699.340417][T20461]  __alloc_file+0x25/0x230
[ 2699.344866][T20461]  alloc_empty_file+0x90/0x180
[ 2699.349657][T20461]  path_openat+0x11c/0x2f10
[ 2699.354199][T20461]  ? kasan_set_track+0x60/0x70
[ 2699.359020][T20461]  ? verify_lock_unused+0x140/0x140
[ 2699.364253][T20461]  ? do_sys_openat2+0xdd/0x4f0
[ 2699.369047][T20461]  ? __x64_sys_openat+0x135/0x160
[ 2699.374102][T20461]  ? do_syscall_64+0x4c/0xa0
[ 2699.378733][T20461]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2699.384861][T20461]  ? do_filp_open+0x420/0x420
[ 2699.389582][T20461]  do_filp_open+0x1ee/0x420
[ 2699.394148][T20461]  ? vfs_tmpfile+0x490/0x490
[ 2699.398787][T20461]  ? _raw_spin_unlock+0x24/0x40
[ 2699.403671][T20461]  ? alloc_fd+0x590/0x640
[ 2699.408048][T20461]  do_sys_openat2+0x14b/0x4f0
[ 2699.412770][T20461]  ? do_sys_open+0xe0/0xe0
[ 2699.417217][T20461]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2699.423232][T20461]  ? lock_chain_count+0x20/0x20
[ 2699.428127][T20461]  __x64_sys_openat+0x135/0x160
[ 2699.433026][T20461]  do_syscall_64+0x4c/0xa0
[ 2699.437484][T20461]  ? clear_bhb_loop+0x60/0xb0
[ 2699.442197][T20461]  ? clear_bhb_loop+0x60/0xb0
[ 2699.446911][T20461]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2699.452843][T20461] RIP: 0033:0x7f4c97b6034e
[ 2699.457287][T20461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2699.476923][T20461] RSP: 002b:00007f4c989eaec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2699.485365][T20461] RAX: ffffffffffffffda RBX: 00007f4c989eb6c0 RCX: 00007f4c97b6034e
[ 2699.493368][T20461] RDX: 0000000000000002 RSI: 00007f4c989eaf90 RDI: ffffffffffffff9c
[ 2699.501364][T20461] RBP: 00007f4c989eb090 R08: 0000000000000000 R09: 0000000000000000
[ 2699.509361][T20461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2699.517359][T20461] R13: 00007f4c97e26038 R14: 00007f4c97e25fa0 R15: 00007ffd710c6298
[ 2699.525375][T20461]  </TASK>
[ 2699.550190][T20221] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2699.682905][T20221] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2699.711325][T20472] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14951'.
[ 2699.799947][T20472] device bond0 entered promiscuous mode
[ 2699.805643][T20472] device bond_slave_0 entered promiscuous mode
[ 2699.832659][T20472] device bond_slave_1 entered promiscuous mode
[ 2699.884088][T20472] device bridge_slave_1 entered promiscuous mode
[ 2699.958631][T20221] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2700.032713][T20221] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2700.650166][T20221] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2700.731853][ T9251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2700.750624][ T9251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2700.780633][T20221] 8021q: adding VLAN 0 to HW filter on device team0
[ 2700.814627][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2700.824156][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2700.860511][T21547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2700.867700][T21547] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2700.921799][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2700.932084][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2700.960536][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2700.982710][T21547] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2700.989907][T21547] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2701.036581][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2701.070026][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2701.119733][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2701.171134][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2701.180584][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2701.192752][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2701.220636][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2701.236058][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2701.267544][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2701.296684][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2701.320518][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2701.342783][T20221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2701.374569][T20501] netlink: 'syz.1.14957': attribute type 12 has an invalid length.
[ 2701.423427][T20507] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.14957'.
[ 2701.451184][T20501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14957'.
[ 2701.560188][T20510] netlink: 'syz.2.14959': attribute type 12 has an invalid length.
[ 2701.593699][T20510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14959'.
[ 2701.637118][T20516] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.14959'.
[ 2701.726340][T20513] can: request_module (can-proto-0) failed.
[ 2701.989253][T20521] can: request_module (can-proto-0) failed.
[ 2702.485481][T20535] device syzkaller0 entered promiscuous mode
[ 2702.705123][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2702.737162][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2706.577215][T20221] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2706.592866][T20548] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14967'.
[ 2706.603238][T20548] device bond0 entered promiscuous mode
[ 2706.608887][T20548] device bond_slave_0 entered promiscuous mode
[ 2706.615715][T20548] device bond_slave_1 entered promiscuous mode
[ 2706.624892][T20548] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2706.661889][T20561] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2706.733659][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2706.750502][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2706.818687][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2706.840409][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2706.880405][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2706.915524][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2706.950007][T20221] device veth0_vlan entered promiscuous mode
[ 2707.003463][T20221] device veth1_vlan entered promiscuous mode
[ 2707.142523][T20574] netlink: 'syz.2.14972': attribute type 12 has an invalid length.
[ 2707.178847][T20574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14972'.
[ 2707.196001][T20579] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.14972'.
[ 2707.238745][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2707.261682][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2707.300566][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2707.333633][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2707.371419][T20221] device veth0_macvtap entered promiscuous mode
[ 2707.410043][T20221] device veth1_macvtap entered promiscuous mode
[ 2707.493392][T20221] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2707.533483][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2707.562074][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2707.591922][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2707.612723][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2707.623908][T20574] can: request_module (can-proto-0) failed.
[ 2707.660415][T20221] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2707.692161][T20221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2707.718114][T20221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2707.729213][T20587] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.14975'.
[ 2707.740598][T20221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2707.752980][T20221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2707.764282][T20588] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.14974'.
[ 2707.777724][T20582] netlink: 'syz.4.14975': attribute type 12 has an invalid length.
[ 2707.787436][T20582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14975'.
[ 2707.808099][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2707.828617][T21547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2707.850985][T20584] netlink: 'syz.0.14974': attribute type 12 has an invalid length.
[ 2707.862866][T20584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14974'.
[ 2707.956884][T20588] can: request_module (can-proto-0) failed.
[ 2708.018339][T20587] can: request_module (can-proto-0) failed.
[ 2710.032226][ T9251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2710.050813][ T9251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2710.089611][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2710.177827][T20623] FAULT_INJECTION: forcing a failure.
[ 2710.177827][T20623] name failslab, interval 1, probability 0, space 0, times 0
[ 2710.191404][T20623] CPU: 1 PID: 20623 Comm: syz.4.14980 Not tainted syzkaller #0
[ 2710.199005][T20623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2710.209110][T20623] Call Trace:
[ 2710.212427][T20623]  <TASK>
[ 2710.215389][T20623]  dump_stack_lvl+0x188/0x24e
[ 2710.220118][T20623]  ? show_regs_print_info+0x12/0x12
[ 2710.225381][T20623]  ? load_image+0x410/0x410
[ 2710.229936][T20623]  should_fail_ex+0x390/0x4c0
[ 2710.234661][T20623]  should_failslab+0x5/0x20
[ 2710.239194][T20623]  slab_pre_alloc_hook+0x59/0x300
[ 2710.244256][T20623]  kmem_cache_alloc+0x56/0x2f0
[ 2710.249073][T20623]  ? skb_clone+0x1e7/0x370
[ 2710.253532][T20623]  skb_clone+0x1e7/0x370
[ 2710.257809][T20623]  ? dev_queue_xmit_nit+0x223/0xba0
[ 2710.263050][T20623]  dev_queue_xmit_nit+0x23b/0xba0
[ 2710.268106][T20623]  ? dev_queue_xmit_nit+0x29/0xba0
[ 2710.273256][T20623]  ? dev_hard_start_xmit+0x11b/0x8b0
[ 2710.278580][T20623]  dev_hard_start_xmit+0x158/0x8b0
[ 2710.283730][T20623]  ? validate_xmit_skb_list+0x120/0x120
[ 2710.289332][T20623]  __dev_queue_xmit+0x1d27/0x3a70
[ 2710.294415][T20623]  ? __dev_queue_xmit+0x274/0x3a70
[ 2710.299568][T20623]  ? netdev_core_pick_tx+0x360/0x360
[ 2710.304888][T20623]  ? lock_chain_count+0x20/0x20
[ 2710.309783][T20623]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2710.315973][T20623]  ? lockdep_hardirqs_on+0x94/0x140
[ 2710.321203][T20623]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2710.327406][T20623]  ? ip_finish_output2+0xa2b/0x1220
[ 2710.332649][T20623]  ? ip_finish_output2+0x407/0x1220
[ 2710.337891][T20623]  ip_finish_output2+0xc20/0x1220
[ 2710.342946][T20623]  ? ip_finish_output2+0x407/0x1220
[ 2710.348194][T20623]  ? ip_fragment+0x210/0x210
[ 2710.352824][T20623]  ? ip_skb_dst_mtu+0x18d/0xb60
[ 2710.357713][T20623]  ? ip_skb_dst_mtu+0x91c/0xb60
[ 2710.362599][T20623]  ? ip_finish_output+0x3e8/0x4b0
[ 2710.367685][T20623]  ip_output+0x2f5/0x470
[ 2710.371971][T20623]  ? ip_output+0x57/0x470
[ 2710.376337][T20623]  __ip_queue_xmit+0x10e6/0x1c10
[ 2710.381314][T20623]  ? __ip_queue_xmit+0x59/0x1c10
[ 2710.386289][T20623]  __tcp_transmit_skb+0x1cc4/0x31e0
[ 2710.391592][T20623]  ? __tcp_send_ack+0x5a0/0x5a0
[ 2710.396517][T20623]  ? tcp_small_queue_check+0x1d6/0x3c0
[ 2710.402030][T20623]  tcp_write_xmit+0x192a/0x6420
[ 2710.406970][T20623]  __tcp_push_pending_frames+0x92/0x330
[ 2710.412564][T20623]  __tcp_close+0x508/0xdd0
[ 2710.417044][T20623]  ? do_raw_spin_unlock+0x11d/0x230
[ 2710.422283][T20623]  tcp_close+0x24/0x110
[ 2710.426477][T20623]  inet_release+0x139/0x180
[ 2710.431106][T20623]  sock_close+0xbf/0x210
[ 2710.435388][T20623]  ? sock_mmap+0x90/0x90
[ 2710.439668][T20623]  __fput+0x20a/0x8b0
[ 2710.443691][T20623]  task_work_run+0x1d0/0x260
[ 2710.448372][T20623]  ? task_work_cancel+0x220/0x220
[ 2710.453441][T20623]  exit_to_user_mode_loop+0xe6/0x110
[ 2710.458780][T20623]  exit_to_user_mode_prepare+0xee/0x180
[ 2710.464396][T20623]  syscall_exit_to_user_mode+0x16/0x40
[ 2710.469920][T20623]  do_syscall_64+0x58/0xa0
[ 2710.474403][T20623]  ? clear_bhb_loop+0x60/0xb0
[ 2710.479154][T20623]  ? clear_bhb_loop+0x60/0xb0
[ 2710.483880][T20623]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2710.489818][T20623] RIP: 0033:0x7f4c97b9fb19
[ 2710.494265][T20623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2710.513926][T20623] RSP: 002b:00007f4c989eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2710.522397][T20623] RAX: 0000000000000000 RBX: 00007f4c97e25fa0 RCX: 00007f4c97b9fb19
[ 2710.530419][T20623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[ 2710.538418][T20623] RBP: 00007f4c989eb090 R08: 0000000000000000 R09: 0000000000000000
[ 2710.546415][T20623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2710.554425][T20623] R13: 00007f4c97e26038 R14: 00007f4c97e25fa0 R15: 00007ffd710c6298
[ 2710.562443][T20623]  </TASK>
[ 2710.589760][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2710.597831][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2710.630100][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2713.320504][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.326982][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 2714.374695][T20658] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2714.682622][T20702] netlink: 'syz.3.14992': attribute type 2 has an invalid length.
[ 2714.737106][T20702] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14992'.
[ 2715.529616][T20707] device sit0 left promiscuous mode
[ 2718.426257][T20722] FAULT_INJECTION: forcing a failure.
[ 2718.426257][T20722] name failslab, interval 1, probability 0, space 0, times 0
[ 2718.460225][T20722] CPU: 1 PID: 20722 Comm: syz.3.14997 Not tainted syzkaller #0
[ 2718.467889][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2718.477995][T20722] Call Trace:
[ 2718.481312][T20722]  <TASK>
[ 2718.484281][T20722]  dump_stack_lvl+0x188/0x24e
[ 2718.489034][T20722]  ? show_regs_print_info+0x12/0x12
[ 2718.494301][T20722]  ? load_image+0x410/0x410
[ 2718.498911][T20722]  ? __might_sleep+0xd0/0xd0
[ 2718.503566][T20722]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2718.508653][T20722]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2718.514887][T20722]  should_fail_ex+0x390/0x4c0
[ 2718.519633][T20722]  should_failslab+0x5/0x20
[ 2718.524190][T20722]  slab_pre_alloc_hook+0x59/0x300
[ 2718.529314][T20722]  kmem_cache_alloc_node+0x5a/0x310
[ 2718.534562][T20722]  ? __alloc_skb+0xf9/0x7d0
[ 2718.539131][T20722]  __alloc_skb+0xf9/0x7d0
[ 2718.543511][T20722]  kcm_sendmsg+0x2123/0x25f0
[ 2718.548168][T20722]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 2718.553950][T20722]  ? aa_sk_perm+0x795/0x8c0
[ 2718.558528][T20722]  ? aa_af_perm+0x340/0x340
[ 2718.563102][T20722]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 2718.569557][T20722]  ? kcm_getsockopt+0x280/0x280
[ 2718.574451][T20722]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2718.580031][T20722]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2718.585366][T20722]  ? security_socket_sendmsg+0x7c/0xa0
[ 2718.590853][T20722]  ? kcm_getsockopt+0x280/0x280
[ 2718.595744][T20722]  ____sys_sendmsg+0x5ed/0x9a0
[ 2718.600544][T20722]  ? __import_iovec+0x1e3/0x510
[ 2718.605427][T20722]  ? __sys_sendmsg_sock+0x30/0x30
[ 2718.610480][T20722]  ? __import_iovec+0x306/0x510
[ 2718.615394][T20722]  ? import_iovec+0x6f/0xa0
[ 2718.619935][T20722]  ___sys_sendmsg+0x2a2/0x360
[ 2718.624696][T20722]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2718.629531][T20722]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2718.634420][T20722]  ? perf_trace_preemptirq_template+0x268/0x320
[ 2718.640698][T20722]  ? __x64_sys_sendmsg+0x80/0x80
[ 2718.645689][T20722]  ? lockdep_hardirqs_on+0x94/0x140
[ 2718.650944][T20722]  do_syscall_64+0x4c/0xa0
[ 2718.655405][T20722]  ? clear_bhb_loop+0x60/0xb0
[ 2718.660129][T20722]  ? clear_bhb_loop+0x60/0xb0
[ 2718.664850][T20722]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2718.670776][T20722] RIP: 0033:0x7fb93659fb19
[ 2718.675228][T20722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2718.694870][T20722] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2718.703313][T20722] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2718.711335][T20722] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003
[ 2718.719336][T20722] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2718.727339][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2718.735334][T20722] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2718.743351][T20722]  </TASK>
[ 2719.722184][T20753] syz.0.15006[20753] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2719.722350][T20753] syz.0.15006[20753] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2721.314711][T20775] FAULT_INJECTION: forcing a failure.
[ 2721.314711][T20775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2721.370392][T20775] CPU: 1 PID: 20775 Comm: syz.0.15013 Not tainted syzkaller #0
[ 2721.378112][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2721.388231][T20775] Call Trace:
[ 2721.391578][T20775]  <TASK>
[ 2721.394556][T20775]  dump_stack_lvl+0x188/0x24e
[ 2721.399298][T20775]  ? show_regs_print_info+0x12/0x12
[ 2721.404549][T20775]  ? load_image+0x410/0x410
[ 2721.409104][T20775]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2721.414193][T20775]  should_fail_ex+0x390/0x4c0
[ 2721.418926][T20775]  _copy_from_user+0x2c/0x170
[ 2721.423663][T20775]  __sys_bpf+0x2ea/0x780
[ 2721.427971][T20775]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2721.433446][T20775]  ? lock_chain_count+0x20/0x20
[ 2721.438358][T20775]  __x64_sys_bpf+0x78/0x90
[ 2721.442861][T20775]  do_syscall_64+0x4c/0xa0
[ 2721.447360][T20775]  ? clear_bhb_loop+0x60/0xb0
[ 2721.452092][T20775]  ? clear_bhb_loop+0x60/0xb0
[ 2721.456828][T20775]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2721.462781][T20775] RIP: 0033:0x7f9b90d9fb19
[ 2721.467247][T20775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2721.486911][T20775] RSP: 002b:00007f9b91d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2721.495389][T20775] RAX: ffffffffffffffda RBX: 00007f9b91025fa0 RCX: 00007f9b90d9fb19
[ 2721.503419][T20775] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[ 2721.511433][T20775] RBP: 00007f9b91d38090 R08: 0000000000000000 R09: 0000000000000000
[ 2721.519455][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2721.527471][T20775] R13: 00007f9b91026038 R14: 00007f9b91025fa0 R15: 00007ffd3c545198
[ 2721.535517][T20775]  </TASK>
[ 2722.812398][T20782] netlink: 'syz.2.15016': attribute type 4 has an invalid length.
[ 2722.830627][T20782] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15016'.
[ 2722.900724][T20782] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 2722.970657][T20788] netlink: 'syz.2.15016': attribute type 4 has an invalid length.
[ 2722.989629][T20788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15016'.
[ 2723.028772][T20788] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 2723.132544][T20795] netlink: 'syz.4.15020': attribute type 29 has an invalid length.
[ 2723.593091][T20808] syz.2.15022[20808] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2723.593300][T20808] syz.2.15022[20808] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2723.617761][T20799] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.15021'.
[ 2723.753063][T20795] netlink: 'syz.4.15020': attribute type 29 has an invalid length.
[ 2723.797566][T20798] netlink: 'syz.4.15020': attribute type 29 has an invalid length.
[ 2724.075658][T20815] netlink: 'syz.1.15024': attribute type 2 has an invalid length.
[ 2724.104362][T20815] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15024'.
[ 2725.477258][T20824] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2727.412165][T20840] netlink: 'syz.4.15032': attribute type 12 has an invalid length.
[ 2727.431126][T20840] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15032'.
[ 2727.467099][T20847] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15032'.
[ 2727.623304][T20856] netlink: 'syz.3.15035': attribute type 39 has an invalid length.
[ 2727.641392][T20840] can: request_module (can-proto-0) failed.
[ 2727.687116][T20859] FAULT_INJECTION: forcing a failure.
[ 2727.687116][T20859] name failslab, interval 1, probability 0, space 0, times 0
[ 2727.700314][T20859] CPU: 1 PID: 20859 Comm: syz.2.15037 Not tainted syzkaller #0
[ 2727.707933][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2727.718040][T20859] Call Trace:
[ 2727.721368][T20859]  <TASK>
[ 2727.724350][T20859]  dump_stack_lvl+0x188/0x24e
[ 2727.729097][T20859]  ? show_regs_print_info+0x12/0x12
[ 2727.734355][T20859]  ? load_image+0x410/0x410
[ 2727.738918][T20859]  ? mark_lock+0x94/0x320
[ 2727.743326][T20859]  should_fail_ex+0x390/0x4c0
[ 2727.748074][T20859]  should_failslab+0x5/0x20
[ 2727.752628][T20859]  slab_pre_alloc_hook+0x59/0x300
[ 2727.757721][T20859]  kmem_cache_alloc+0x56/0x2f0
[ 2727.762549][T20859]  ? radix_tree_node_alloc+0x7e/0x3a0
[ 2727.767985][T20859]  radix_tree_node_alloc+0x7e/0x3a0
[ 2727.773242][T20859]  radix_tree_extend+0x14c/0x590
[ 2727.778241][T20859]  idr_get_free+0x1b3/0xa10
[ 2727.782812][T20859]  idr_alloc_cyclic+0x286/0x610
[ 2727.787800][T20859]  ? idr_alloc+0x2e0/0x2e0
[ 2727.792291][T20859]  ? do_raw_spin_lock+0x128/0x2f0
[ 2727.797351][T20859]  ? __radix_tree_preload+0x82/0x880
[ 2727.802679][T20859]  ? bpf_link_prime+0x48/0x1d0
[ 2727.807484][T20859]  bpf_link_prime+0x67/0x1d0
[ 2727.812113][T20859]  bpf_tracing_prog_attach+0x861/0xe10
[ 2727.817621][T20859]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 2727.824276][T20859]  ? bpf_raw_tp_link_attach+0x570/0x570
[ 2727.829872][T20859]  bpf_raw_tp_link_attach+0x3c7/0x570
[ 2727.835274][T20859]  ? bpf_insn_prepare_dump+0x840/0x840
[ 2727.840782][T20859]  bpf_raw_tracepoint_open+0x192/0x210
[ 2727.846296][T20859]  __sys_bpf+0x581/0x780
[ 2727.850574][T20859]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2727.856006][T20859]  ? lock_chain_count+0x20/0x20
[ 2727.860915][T20859]  __x64_sys_bpf+0x78/0x90
[ 2727.865367][T20859]  do_syscall_64+0x4c/0xa0
[ 2727.869827][T20859]  ? clear_bhb_loop+0x60/0xb0
[ 2727.874572][T20859]  ? clear_bhb_loop+0x60/0xb0
[ 2727.879293][T20859]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2727.885222][T20859] RIP: 0033:0x7faf32f9fb19
[ 2727.889671][T20859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2727.909305][T20859] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2727.917746][T20859] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2727.925747][T20859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[ 2727.933751][T20859] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2727.941753][T20859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2727.949756][T20859] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2727.957782][T20859]  </TASK>
[ 2728.107943][T20862] netlink: 'syz.1.15038': attribute type 2 has an invalid length.
[ 2728.140779][T20862] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15038'.
[ 2728.729002][T20878] syz.4.15043[20878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2728.729197][T20878] syz.4.15043[20878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2729.497688][T20892] netlink: 'syz.1.15049': attribute type 29 has an invalid length.
[ 2729.518735][T20892] netlink: 'syz.1.15049': attribute type 29 has an invalid length.
[ 2729.539271][T20892] netlink: 'syz.1.15049': attribute type 29 has an invalid length.
[ 2729.555749][T20892] netlink: 'syz.1.15049': attribute type 29 has an invalid length.
[ 2729.592626][T20897] netlink: 'syz.3.15051': attribute type 2 has an invalid length.
[ 2729.622396][T20897] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15051'.
[ 2729.969156][T20921] netlink: 'syz.1.15057': attribute type 21 has an invalid length.
[ 2730.048982][T20925] FAULT_INJECTION: forcing a failure.
[ 2730.048982][T20925] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2730.158393][T20925] CPU: 1 PID: 20925 Comm: syz.2.15059 Not tainted syzkaller #0
[ 2730.166035][T20925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2730.176153][T20925] Call Trace:
[ 2730.179470][T20925]  <TASK>
[ 2730.182447][T20925]  dump_stack_lvl+0x188/0x24e
[ 2730.187197][T20925]  ? show_regs_print_info+0x12/0x12
[ 2730.192459][T20925]  ? load_image+0x410/0x410
[ 2730.197050][T20925]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2730.202166][T20925]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2730.208205][T20925]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2730.213297][T20925]  should_fail_ex+0x390/0x4c0
[ 2730.218028][T20925]  _copy_to_user+0x2c/0x130
[ 2730.222593][T20925]  bpf_test_finish+0x198/0x600
[ 2730.227408][T20925]  ? convert_skb_to___skb+0x420/0x420
[ 2730.232840][T20925]  bpf_prog_test_run_flow_dissector+0x4c5/0x640
[ 2730.239147][T20925]  ? xdp_convert_buff_to_md+0x200/0x200
[ 2730.244748][T20925]  ? __fget_files+0x28/0x460
[ 2730.249412][T20925]  ? xdp_convert_buff_to_md+0x200/0x200
[ 2730.255004][T20925]  bpf_prog_test_run+0x31c/0x390
[ 2730.260011][T20925]  __sys_bpf+0x62b/0x780
[ 2730.264327][T20925]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2730.269808][T20925]  ? lock_chain_count+0x20/0x20
[ 2730.274738][T20925]  __x64_sys_bpf+0x78/0x90
[ 2730.279219][T20925]  do_syscall_64+0x4c/0xa0
[ 2730.283700][T20925]  ? clear_bhb_loop+0x60/0xb0
[ 2730.288449][T20925]  ? clear_bhb_loop+0x60/0xb0
[ 2730.293193][T20925]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2730.299145][T20925] RIP: 0033:0x7faf32f9fb19
[ 2730.303605][T20925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2730.323316][T20925] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2730.331791][T20925] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2730.339833][T20925] RDX: 0000000000000050 RSI: 0000200000001340 RDI: 000000000000000a
[ 2730.347850][T20925] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2730.355876][T20925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2730.363902][T20925] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2730.371949][T20925]  </TASK>
[ 2731.816185][T20949] syz.1.15063[20949] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2731.816358][T20949] syz.1.15063[20949] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2731.973530][T20955] FAULT_INJECTION: forcing a failure.
[ 2731.973530][T20955] name failslab, interval 1, probability 0, space 0, times 0
[ 2732.051818][T20959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15068'.
[ 2732.061302][T20959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15068'.
[ 2732.071671][T20959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15068'.
[ 2732.082156][T20955] CPU: 1 PID: 20955 Comm: syz.2.15066 Not tainted syzkaller #0
[ 2732.089779][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2732.099905][T20955] Call Trace:
[ 2732.103236][T20955]  <TASK>
[ 2732.106226][T20955]  dump_stack_lvl+0x188/0x24e
[ 2732.110977][T20955]  ? show_regs_print_info+0x12/0x12
[ 2732.116265][T20955]  ? load_image+0x410/0x410
[ 2732.120838][T20955]  ? __might_sleep+0xd0/0xd0
[ 2732.125496][T20955]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2732.130615][T20955]  should_fail_ex+0x390/0x4c0
[ 2732.135378][T20955]  should_failslab+0x5/0x20
[ 2732.140074][T20955]  slab_pre_alloc_hook+0x59/0x300
[ 2732.145165][T20955]  ? mutex_lock_nested+0x10/0x10
[ 2732.150163][T20955]  ? rxrpc_lookup_local+0x765/0x1600
[ 2732.155502][T20955]  __kmem_cache_alloc_node+0x4f/0x270
[ 2732.160939][T20955]  ? rxrpc_lookup_local+0x765/0x1600
[ 2732.166286][T20955]  kmalloc_trace+0x26/0xe0
[ 2732.170757][T20955]  rxrpc_lookup_local+0x765/0x1600
[ 2732.175960][T20955]  ? rxrpc_process_local_events+0xa40/0xa40
[ 2732.181911][T20955]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2732.187346][T20955]  ? lockdep_hardirqs_on+0x94/0x140
[ 2732.192605][T20955]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2732.198043][T20955]  ? _local_bh_enable+0xa0/0xa0
[ 2732.202954][T20955]  rxrpc_sendmsg+0x3e7/0x890
[ 2732.207721][T20955]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2732.213067][T20955]  ? rxrpc_getsockopt+0x150/0x150
[ 2732.218228][T20955]  ____sys_sendmsg+0x5ed/0x9a0
[ 2732.223048][T20955]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2732.228144][T20955]  ? __sys_sendmsg_sock+0x30/0x30
[ 2732.233226][T20955]  ? __import_iovec+0x306/0x510
[ 2732.238140][T20955]  ? import_iovec+0x6f/0xa0
[ 2732.242712][T20955]  ___sys_sendmsg+0x2a2/0x360
[ 2732.247462][T20955]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2732.252308][T20955]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2732.257424][T20955]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2732.262341][T20955]  ? __x64_sys_sendmsg+0x80/0x80
[ 2732.267377][T20955]  ? lockdep_hardirqs_on+0x94/0x140
[ 2732.272636][T20955]  do_syscall_64+0x4c/0xa0
[ 2732.277123][T20955]  ? clear_bhb_loop+0x60/0xb0
[ 2732.281869][T20955]  ? clear_bhb_loop+0x60/0xb0
[ 2732.286613][T20955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2732.292567][T20955] RIP: 0033:0x7faf32f9fb19
[ 2732.297028][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2732.316692][T20955] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2732.325176][T20955] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2732.333203][T20955] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003
[ 2732.341239][T20955] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2732.349260][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2732.357279][T20955] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2732.365315][T20955]  </TASK>
[ 2732.859088][T20985] FAULT_INJECTION: forcing a failure.
[ 2732.859088][T20985] name failslab, interval 1, probability 0, space 0, times 0
[ 2732.877609][T20984] netlink: 'syz.4.15075': attribute type 3 has an invalid length.
[ 2732.900358][T20985] CPU: 1 PID: 20985 Comm: syz.2.15076 Not tainted syzkaller #0
[ 2732.908002][T20985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2732.918109][T20985] Call Trace:
[ 2732.921469][T20985]  <TASK>
[ 2732.924474][T20985]  dump_stack_lvl+0x188/0x24e
[ 2732.929216][T20985]  ? show_regs_print_info+0x12/0x12
[ 2732.935190][T20985]  ? load_image+0x410/0x410
[ 2732.939750][T20985]  ? __might_sleep+0xd0/0xd0
[ 2732.944387][T20985]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2732.949473][T20985]  ? trace_event_raw_event_lock+0x230/0x230
[ 2732.955426][T20985]  should_fail_ex+0x390/0x4c0
[ 2732.960167][T20985]  should_failslab+0x5/0x20
[ 2732.964742][T20985]  slab_pre_alloc_hook+0x59/0x300
[ 2732.969836][T20985]  ? sk_prot_alloc+0xe7/0x210
[ 2732.974593][T20985]  __kmem_cache_alloc_node+0x4f/0x270
[ 2732.980042][T20985]  ? sk_prot_alloc+0xe7/0x210
[ 2732.984772][T20985]  __kmalloc+0xa3/0x240
[ 2732.988983][T20985]  sk_prot_alloc+0xe7/0x210
[ 2732.993533][T20985]  ? sk_alloc+0x20/0x330
[ 2732.997832][T20985]  sk_alloc+0x36/0x330
[ 2733.001958][T20985]  ? bpf_ctx_init+0x154/0x190
[ 2733.006688][T20985]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 2733.012124][T20985]  ? __fget_files+0x28/0x460
[ 2733.016810][T20985]  ? __fget_files+0x3fc/0x460
[ 2733.021563][T20985]  ? cpu_online+0xa0/0xa0
[ 2733.025956][T20985]  bpf_prog_test_run+0x31c/0x390
[ 2733.030955][T20985]  __sys_bpf+0x62b/0x780
[ 2733.035263][T20985]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2733.040711][T20985]  ? lock_chain_count+0x20/0x20
[ 2733.045624][T20985]  __x64_sys_bpf+0x78/0x90
[ 2733.050145][T20985]  do_syscall_64+0x4c/0xa0
[ 2733.054623][T20985]  ? clear_bhb_loop+0x60/0xb0
[ 2733.059363][T20985]  ? clear_bhb_loop+0x60/0xb0
[ 2733.064100][T20985]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2733.070052][T20985] RIP: 0033:0x7faf32f9fb19
[ 2733.074545][T20985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2733.094208][T20985] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2733.102675][T20985] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2733.110694][T20985] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a
[ 2733.118719][T20985] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2733.126739][T20985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2733.134756][T20985] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2733.142809][T20985]  </TASK>
[ 2733.186723][T20987] netlink: 'syz.4.15075': attribute type 21 has an invalid length.
[ 2733.229666][T20984] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15075'.
[ 2733.244979][T20987] netlink: 'syz.4.15075': attribute type 6 has an invalid length.
[ 2733.261057][T20987] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15075'.
[ 2733.554741][T20994] netlink: 'syz.0.15078': attribute type 2 has an invalid length.
[ 2733.573677][T20994] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.15078'.
[ 2733.621779][T20997] netlink: 'syz.2.15079': attribute type 12 has an invalid length.
[ 2733.640268][T20997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15079'.
[ 2733.677671][T20997] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.15079'.
[ 2733.688554][T21004] FAULT_INJECTION: forcing a failure.
[ 2733.688554][T21004] name failslab, interval 1, probability 0, space 0, times 0
[ 2733.705107][T21004] CPU: 0 PID: 21004 Comm: syz.3.15083 Not tainted syzkaller #0
[ 2733.712723][T21004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2733.722910][T21004] Call Trace:
[ 2733.726250][T21004]  <TASK>
[ 2733.729223][T21004]  dump_stack_lvl+0x188/0x24e
[ 2733.734322][T21004]  ? show_regs_print_info+0x12/0x12
[ 2733.739603][T21004]  ? load_image+0x410/0x410
[ 2733.744340][T21004]  ? __might_sleep+0xd0/0xd0
[ 2733.748983][T21004]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2733.754164][T21004]  should_fail_ex+0x390/0x4c0
[ 2733.758902][T21004]  should_failslab+0x5/0x20
[ 2733.763449][T21004]  slab_pre_alloc_hook+0x59/0x300
[ 2733.768536][T21004]  ? tomoyo_encode+0x28a/0x550
[ 2733.773359][T21004]  __kmem_cache_alloc_node+0x4f/0x270
[ 2733.778785][T21004]  ? tomoyo_encode+0x28a/0x550
[ 2733.783609][T21004]  __kmalloc+0xa3/0x240
[ 2733.787857][T21004]  tomoyo_encode+0x28a/0x550
[ 2733.792594][T21004]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2733.798280][T21004]  ? tomoyo_path_number_perm+0x205/0x650
[ 2733.804000][T21004]  tomoyo_path_number_perm+0x22f/0x650
[ 2733.809520][T21004]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2733.815086][T21004]  ? __fget_files+0x28/0x460
[ 2733.819749][T21004]  security_file_ioctl+0x6c/0xa0
[ 2733.824739][T21004]  __se_sys_ioctl+0x48/0x170
[ 2733.829366][T21004]  do_syscall_64+0x4c/0xa0
[ 2733.833928][T21004]  ? clear_bhb_loop+0x60/0xb0
[ 2733.838637][T21004]  ? clear_bhb_loop+0x60/0xb0
[ 2733.843354][T21004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2733.849276][T21004] RIP: 0033:0x7fb93659fb19
[ 2733.853727][T21004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2733.873360][T21004] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2733.881802][T21004] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2733.889794][T21004] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c
[ 2733.897787][T21004] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2733.905782][T21004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2733.913780][T21004] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2733.921813][T21004]  </TASK>
[ 2733.946516][T21004] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2734.094345][T21005] can: request_module (can-proto-0) failed.
[ 2734.167381][T21017] syz.3.15085[21017] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2734.167572][T21017] syz.3.15085[21017] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2734.287336][T21008] device syzkaller0 entered promiscuous mode
[ 2734.763065][T21033] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15089'.
[ 2734.879230][T21033] can: request_module (can-proto-0) failed.
[ 2735.021697][T21036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15090'.
[ 2735.348376][T21047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15095'.
[ 2735.856107][T21039] FAULT_INJECTION: forcing a failure.
[ 2735.856107][T21039] name fail_futex, interval 1, probability 0, space 0, times 0
[ 2735.869915][T21039] CPU: 1 PID: 21039 Comm: syz.1.15090 Not tainted syzkaller #0
[ 2735.877536][T21039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2735.887628][T21039] Call Trace:
[ 2735.890935][T21039]  <TASK>
[ 2735.893884][T21039]  dump_stack_lvl+0x188/0x24e
[ 2735.898605][T21039]  ? show_regs_print_info+0x12/0x12
[ 2735.903839][T21039]  ? load_image+0x410/0x410
[ 2735.908376][T21039]  ? __lock_acquire+0x142d/0x7ea0
[ 2735.913447][T21039]  should_fail_ex+0x390/0x4c0
[ 2735.918141][T21039]  get_futex_key+0x1a6/0xe70
[ 2735.922743][T21039]  ? verify_lock_unused+0x140/0x140
[ 2735.927959][T21039]  ? futex_setup_timer+0xc0/0xc0
[ 2735.932905][T21039]  ? verify_lock_unused+0x140/0x140
[ 2735.938126][T21039]  futex_wake+0x123/0x4f0
[ 2735.942474][T21039]  ? futex_wake_mark+0x150/0x150
[ 2735.947547][T21039]  do_futex+0x2e2/0x320
[ 2735.951732][T21039]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 2735.957654][T21039]  ? __might_fault+0xc2/0x120
[ 2735.962345][T21039]  mm_release+0x20a/0x330
[ 2735.966690][T21039]  ? exit_robust_list+0x2ce/0x2f0
[ 2735.971727][T21039]  ? exit_mm_release+0x30/0x30
[ 2735.976516][T21039]  ? lockdep_hardirqs_on+0x94/0x140
[ 2735.981735][T21039]  exit_mm+0xa0/0x350
[ 2735.985733][T21039]  ? sysctl_delayacct+0x220/0x220
[ 2735.990786][T21039]  ? do_exit+0x2570/0x2570
[ 2735.995244][T21039]  ? mm_trace_rss_stat+0xa7/0x250
[ 2736.000304][T21039]  ? sync_mm_rss+0x211/0x350
[ 2736.004935][T21039]  do_exit+0x958/0x2570
[ 2736.009126][T21039]  ? put_task_struct+0x80/0x80
[ 2736.013917][T21039]  ? ct_nmi_exit+0x145/0x1c0
[ 2736.018532][T21039]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2736.024534][T21039]  ? lock_chain_count+0x20/0x20
[ 2736.029425][T21039]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 2736.034536][T21039]  do_group_exit+0x229/0x2e0
[ 2736.039151][T21039]  ? lockdep_hardirqs_on+0x94/0x140
[ 2736.044368][T21039]  get_signal+0x1259/0x1340
[ 2736.048910][T21039]  arch_do_signal_or_restart+0xc4/0x1310
[ 2736.054571][T21039]  ? __fget_files+0x3fc/0x460
[ 2736.059274][T21039]  ? get_sigframe_size+0x10/0x10
[ 2736.064250][T21039]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2736.069761][T21039]  exit_to_user_mode_loop+0x70/0x110
[ 2736.075082][T21039]  exit_to_user_mode_prepare+0xee/0x180
[ 2736.080651][T21039]  syscall_exit_to_user_mode+0x16/0x40
[ 2736.086137][T21039]  do_syscall_64+0x58/0xa0
[ 2736.090632][T21039]  ? clear_bhb_loop+0x60/0xb0
[ 2736.095373][T21039]  ? clear_bhb_loop+0x60/0xb0
[ 2736.100100][T21039]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2736.106136][T21039] RIP: 0033:0x7ff30d79fb19
[ 2736.110582][T21039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2736.130217][T21039] RSP: 002b:00007ff30e70a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 2736.138823][T21039] RAX: fffffffffffffe00 RBX: 00007ff30da26090 RCX: 00007ff30d79fb19
[ 2736.146831][T21039] RDX: 0000000040000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 2736.154823][T21039] RBP: 00007ff30e70a090 R08: 0000000000000000 R09: 0000000000000000
[ 2736.162806][T21039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2736.170790][T21039] R13: 00007ff30da26128 R14: 00007ff30da26090 R15: 00007ffdc9e8dd58
[ 2736.178784][T21039]  </TASK>
[ 2737.254635][T21032] netlink: 'syz.0.15089': attribute type 12 has an invalid length.
[ 2737.262910][T21032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15089'.
[ 2737.273440][T21036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15090'.
[ 2737.501701][T21058] netlink: 'syz.0.15108': attribute type 2 has an invalid length.
[ 2737.505011][T21052] netlink: 'syz.1.15096': attribute type 2 has an invalid length.
[ 2737.608593][T21052] netlink: 'syz.1.15096': attribute type 8 has an invalid length.
[ 2737.921472][T21067] netlink: 'syz.4.15099': attribute type 12 has an invalid length.
[ 2738.046977][T21066] can: request_module (can-proto-0) failed.
[ 2740.618100][T21073] netlink: 'syz.0.15111': attribute type 2 has an invalid length.
[ 2740.691700][T21078] FAULT_INJECTION: forcing a failure.
[ 2740.691700][T21078] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2740.721846][T21073] __nla_validate_parse: 6 callbacks suppressed
[ 2740.721889][T21073] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15111'.
[ 2740.751314][T21078] CPU: 0 PID: 21078 Comm: syz.3.15101 Not tainted syzkaller #0
[ 2740.758952][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2740.769062][T21078] Call Trace:
[ 2740.772378][T21078]  <TASK>
[ 2740.775338][T21078]  dump_stack_lvl+0x188/0x24e
[ 2740.780060][T21078]  ? show_regs_print_info+0x12/0x12
[ 2740.785292][T21078]  ? load_image+0x410/0x410
[ 2740.789864][T21078]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2740.794927][T21078]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2740.800970][T21078]  should_fail_ex+0x390/0x4c0
[ 2740.805702][T21078]  prepare_alloc_pages+0x1e1/0x5b0
[ 2740.810864][T21078]  __alloc_pages+0x130/0x4f0
[ 2740.815507][T21078]  ? zone_statistics+0x170/0x170
[ 2740.820495][T21078]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 2740.826003][T21078]  bpf_prog_test_run_xdp+0xb24/0xf80
[ 2740.831318][T21078]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2740.836387][T21078]  ? dev_put+0x80/0x80
[ 2740.840512][T21078]  ? dev_put+0x80/0x80
[ 2740.844605][T21078]  bpf_prog_test_run+0x31c/0x390
[ 2740.849582][T21078]  __sys_bpf+0x62b/0x780
[ 2740.853859][T21078]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2740.859363][T21078]  ? lock_chain_count+0x20/0x20
[ 2740.864260][T21078]  __x64_sys_bpf+0x78/0x90
[ 2740.868791][T21078]  do_syscall_64+0x4c/0xa0
[ 2740.873263][T21078]  ? clear_bhb_loop+0x60/0xb0
[ 2740.877971][T21078]  ? clear_bhb_loop+0x60/0xb0
[ 2740.882765][T21078]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2740.888704][T21078] RIP: 0033:0x7fb93659fb19
[ 2740.893158][T21078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2740.912789][T21078] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2740.921227][T21078] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2740.929234][T21078] RDX: 0000000000000050 RSI: 0000200000002840 RDI: 000000000000000a
[ 2740.937243][T21078] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2740.945250][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2740.953242][T21078] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2740.961426][T21078]  </TASK>
[ 2741.071390][T21084] syz.1.15103[21084] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2741.071560][T21084] syz.1.15103[21084] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2741.549341][T21094] netlink: 180 bytes leftover after parsing attributes in process `syz.3.15107'.
[ 2742.030037][T21107] netlink: 'syz.2.15114': attribute type 12 has an invalid length.
[ 2742.041420][T21107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15114'.
[ 2742.121573][T21107] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.15114'.
[ 2742.412537][T21109] can: request_module (can-proto-0) failed.
[ 2744.934985][T21114] netlink: 'syz.3.15117': attribute type 2 has an invalid length.
[ 2744.964690][T21114] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15117'.
[ 2745.374913][T21120] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.15115'.
[ 2746.283931][T21140] FAULT_INJECTION: forcing a failure.
[ 2746.283931][T21140] name failslab, interval 1, probability 0, space 0, times 0
[ 2746.334519][T21140] CPU: 1 PID: 21140 Comm: syz.2.15123 Not tainted syzkaller #0
[ 2746.342161][T21140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2746.352259][T21140] Call Trace:
[ 2746.355576][T21140]  <TASK>
[ 2746.358637][T21140]  dump_stack_lvl+0x188/0x24e
[ 2746.363386][T21140]  ? show_regs_print_info+0x12/0x12
[ 2746.368638][T21140]  ? load_image+0x410/0x410
[ 2746.373197][T21140]  ? __might_sleep+0xd0/0xd0
[ 2746.377837][T21140]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2746.382920][T21140]  should_fail_ex+0x390/0x4c0
[ 2746.387652][T21140]  should_failslab+0x5/0x20
[ 2746.392198][T21140]  slab_pre_alloc_hook+0x59/0x300
[ 2746.397278][T21140]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2746.402360][T21140]  ? security_sk_alloc+0x47/0x130
[ 2746.407461][T21140]  __kmem_cache_alloc_node+0x4f/0x270
[ 2746.412919][T21140]  ? security_sk_alloc+0x47/0x130
[ 2746.417996][T21140]  __kmalloc+0xa3/0x240
[ 2746.422195][T21140]  security_sk_alloc+0x47/0x130
[ 2746.427098][T21140]  sk_prot_alloc+0x101/0x210
[ 2746.431745][T21140]  sk_alloc+0x36/0x330
[ 2746.435861][T21140]  kcm_create+0xfa/0x540
[ 2746.440207][T21140]  __sock_create+0x49a/0x940
[ 2746.444874][T21140]  __sys_socket+0xc4/0x190
[ 2746.449349][T21140]  __x64_sys_socket+0x76/0x80
[ 2746.454088][T21140]  do_syscall_64+0x4c/0xa0
[ 2746.458574][T21140]  ? clear_bhb_loop+0x60/0xb0
[ 2746.463302][T21140]  ? clear_bhb_loop+0x60/0xb0
[ 2746.468044][T21140]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2746.474001][T21140] RIP: 0033:0x7faf32f9fb19
[ 2746.478459][T21140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2746.498126][T21140] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 2746.506608][T21140] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2746.514656][T21140] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029
[ 2746.522783][T21140] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2746.530830][T21140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2746.538848][T21140] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2746.546888][T21140]  </TASK>
[ 2747.498005][T21163] netlink: 'syz.4.15128': attribute type 12 has an invalid length.
[ 2747.555284][T21166] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15128'.
[ 2747.574733][T21163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15128'.
[ 2747.954217][T21168] can: request_module (can-proto-0) failed.
[ 2748.397115][T21171] device syzkaller0 entered promiscuous mode
[ 2752.150939][T21203] FAULT_INJECTION: forcing a failure.
[ 2752.150939][T21203] name failslab, interval 1, probability 0, space 0, times 0
[ 2752.192616][T21203] CPU: 1 PID: 21203 Comm: syz.2.15142 Not tainted syzkaller #0
[ 2752.200372][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2752.210503][T21203] Call Trace:
[ 2752.213859][T21203]  <TASK>
[ 2752.216883][T21203]  dump_stack_lvl+0x188/0x24e
[ 2752.221662][T21203]  ? show_regs_print_info+0x12/0x12
[ 2752.226947][T21203]  ? load_image+0x410/0x410
[ 2752.231545][T21203]  ? __might_sleep+0xd0/0xd0
[ 2752.236306][T21203]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2752.241528][T21203]  should_fail_ex+0x390/0x4c0
[ 2752.246313][T21203]  should_failslab+0x5/0x20
[ 2752.250882][T21203]  slab_pre_alloc_hook+0x59/0x300
[ 2752.256007][T21203]  kmem_cache_alloc+0x56/0x2f0
[ 2752.260845][T21203]  ? security_file_alloc+0x30/0x110
[ 2752.266143][T21203]  security_file_alloc+0x30/0x110
[ 2752.271259][T21203]  __alloc_file+0xc2/0x230
[ 2752.275764][T21203]  alloc_empty_file+0x90/0x180
[ 2752.280616][T21203]  path_openat+0x11c/0x2f10
[ 2752.285194][T21203]  ? trace_call_bpf+0xbf/0x6b0
[ 2752.290043][T21203]  ? trace_call_bpf+0xbf/0x6b0
[ 2752.294897][T21203]  ? trace_call_bpf+0xbf/0x6b0
[ 2752.299769][T21203]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 2752.305814][T21203]  ? do_filp_open+0x420/0x420
[ 2752.310581][T21203]  ? perf_trace_lock+0x301/0x390
[ 2752.315664][T21203]  do_filp_open+0x1ee/0x420
[ 2752.320257][T21203]  ? vfs_tmpfile+0x490/0x490
[ 2752.325092][T21203]  ? _raw_spin_unlock+0x24/0x40
[ 2752.330040][T21203]  ? alloc_fd+0x590/0x640
[ 2752.334488][T21203]  do_sys_openat2+0x14b/0x4f0
[ 2752.339258][T21203]  ? do_sys_open+0xe0/0xe0
[ 2752.343765][T21203]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2752.349863][T21203]  ? lock_chain_count+0x20/0x20
[ 2752.354824][T21203]  __x64_sys_openat+0x135/0x160
[ 2752.359785][T21203]  do_syscall_64+0x4c/0xa0
[ 2752.364278][T21203]  ? clear_bhb_loop+0x60/0xb0
[ 2752.369041][T21203]  ? clear_bhb_loop+0x60/0xb0
[ 2752.373811][T21203]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2752.379782][T21203] RIP: 0033:0x7faf32f9fb19
[ 2752.384266][T21203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2752.403943][T21203] RSP: 002b:00007faf33dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2752.412438][T21203] RAX: ffffffffffffffda RBX: 00007faf33225fa0 RCX: 00007faf32f9fb19
[ 2752.420513][T21203] RDX: 0000000000028382 RSI: 00002000000040c0 RDI: ffffffffffffff9c
[ 2752.428553][T21203] RBP: 00007faf33dcb090 R08: 0000000000000000 R09: 0000000000000000
[ 2752.436602][T21203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2752.444667][T21203] R13: 00007faf33226038 R14: 00007faf33225fa0 R15: 00007ffffd4dfdf8
[ 2752.452767][T21203]  </TASK>
[ 2753.056733][T21210] netlink: 'syz.4.15143': attribute type 12 has an invalid length.
[ 2753.101619][T21210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15143'.
[ 2753.376185][T21208] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15143'.
[ 2753.594657][T21211] can: request_module (can-proto-0) failed.
[ 2757.386712][T21272] FAULT_INJECTION: forcing a failure.
[ 2757.386712][T21272] name failslab, interval 1, probability 0, space 0, times 0
[ 2757.582172][T21272] CPU: 1 PID: 21272 Comm: syz.3.15153 Not tainted syzkaller #0
[ 2757.589810][T21272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2757.599922][T21272] Call Trace:
[ 2757.603237][T21272]  <TASK>
[ 2757.606205][T21272]  dump_stack_lvl+0x188/0x24e
[ 2757.610944][T21272]  ? show_regs_print_info+0x12/0x12
[ 2757.616201][T21272]  ? load_image+0x410/0x410
[ 2757.620763][T21272]  ? __might_sleep+0xd0/0xd0
[ 2757.625400][T21272]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2757.630511][T21272]  should_fail_ex+0x390/0x4c0
[ 2757.635248][T21272]  should_failslab+0x5/0x20
[ 2757.639799][T21272]  slab_pre_alloc_hook+0x59/0x300
[ 2757.644879][T21272]  ? sk_prot_alloc+0xe7/0x210
[ 2757.649601][T21272]  __kmem_cache_alloc_node+0x4f/0x270
[ 2757.655039][T21272]  ? sk_prot_alloc+0xe7/0x210
[ 2757.659763][T21272]  __kmalloc+0xa3/0x240
[ 2757.663998][T21272]  sk_prot_alloc+0xe7/0x210
[ 2757.668542][T21272]  ? sk_alloc+0x20/0x330
[ 2757.672829][T21272]  sk_alloc+0x36/0x330
[ 2757.676969][T21272]  ? bpf_ctx_init+0x154/0x190
[ 2757.681694][T21272]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 2757.687117][T21272]  ? __fget_files+0x28/0x460
[ 2757.691775][T21272]  ? __fget_files+0x3fc/0x460
[ 2757.696521][T21272]  ? cpu_online+0xa0/0xa0
[ 2757.700931][T21272]  bpf_prog_test_run+0x31c/0x390
[ 2757.705927][T21272]  __sys_bpf+0x62b/0x780
[ 2757.710234][T21272]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2757.715681][T21272]  ? lock_chain_count+0x20/0x20
[ 2757.720598][T21272]  __x64_sys_bpf+0x78/0x90
[ 2757.725075][T21272]  do_syscall_64+0x4c/0xa0
[ 2757.729565][T21272]  ? clear_bhb_loop+0x60/0xb0
[ 2757.734299][T21272]  ? clear_bhb_loop+0x60/0xb0
[ 2757.739034][T21272]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2757.744982][T21272] RIP: 0033:0x7fb93659fb19
[ 2757.749440][T21272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2757.769110][T21272] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2757.777606][T21272] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2757.785638][T21272] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 2757.793657][T21272] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2757.801683][T21272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2757.809701][T21272] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2757.817737][T21272]  </TASK>
[ 2758.735353][T21285] netlink: 'syz.4.15157': attribute type 12 has an invalid length.
[ 2758.781566][T21285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15157'.
[ 2758.840069][T21286] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15157'.
[ 2759.257062][T21287] can: request_module (can-proto-0) failed.
[ 2761.925370][T21323] FAULT_INJECTION: forcing a failure.
[ 2761.925370][T21323] name failslab, interval 1, probability 0, space 0, times 0
[ 2761.941561][T21323] CPU: 0 PID: 21323 Comm: syz.3.15166 Not tainted syzkaller #0
[ 2761.949168][T21323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2761.959287][T21323] Call Trace:
[ 2761.962632][T21323]  <TASK>
[ 2761.965604][T21323]  dump_stack_lvl+0x188/0x24e
[ 2761.970603][T21323]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2761.976907][T21323]  ? show_regs_print_info+0x12/0x12
[ 2761.982174][T21323]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2761.988395][T21323]  should_fail_ex+0x390/0x4c0
[ 2761.993150][T21323]  should_failslab+0x5/0x20
[ 2761.997704][T21323]  slab_pre_alloc_hook+0x59/0x300
[ 2762.002793][T21323]  kmem_cache_alloc+0x56/0x2f0
[ 2762.007596][T21323]  ? security_file_alloc+0x30/0x110
[ 2762.012870][T21323]  security_file_alloc+0x30/0x110
[ 2762.017947][T21323]  __alloc_file+0xc2/0x230
[ 2762.022409][T21323]  alloc_empty_file+0x90/0x180
[ 2762.027212][T21323]  path_openat+0x11c/0x2f10
[ 2762.031794][T21323]  ? perf_trace_lock+0xf8/0x390
[ 2762.036972][T21323]  ? do_filp_open+0x420/0x420
[ 2762.041704][T21323]  ? perf_trace_lock+0xf8/0x390
[ 2762.046601][T21323]  ? perf_trace_preemptirq_template+0xa8/0x320
[ 2762.052825][T21323]  do_filp_open+0x1ee/0x420
[ 2762.057385][T21323]  ? vfs_tmpfile+0x490/0x490
[ 2762.062049][T21323]  ? _raw_spin_unlock+0x24/0x40
[ 2762.066955][T21323]  ? alloc_fd+0x590/0x640
[ 2762.071353][T21323]  do_sys_openat2+0x14b/0x4f0
[ 2762.076100][T21323]  ? do_sys_open+0xe0/0xe0
[ 2762.080573][T21323]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2762.086634][T21323]  ? lock_chain_count+0x20/0x20
[ 2762.091531][T21323]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2762.097576][T21323]  __x64_sys_openat+0x135/0x160
[ 2762.102522][T21323]  do_syscall_64+0x4c/0xa0
[ 2762.107027][T21323]  ? clear_bhb_loop+0x60/0xb0
[ 2762.111755][T21323]  ? clear_bhb_loop+0x60/0xb0
[ 2762.116499][T21323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2762.122442][T21323] RIP: 0033:0x7fb93659fb19
[ 2762.126899][T21323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2762.146557][T21323] RSP: 002b:00007fb9347f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2762.155026][T21323] RAX: ffffffffffffffda RBX: 00007fb936826090 RCX: 00007fb93659fb19
[ 2762.163044][T21323] RDX: 00000000000026e1 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[ 2762.171088][T21323] RBP: 00007fb9347f6090 R08: 0000000000000000 R09: 0000000000000000
[ 2762.179122][T21323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2762.187142][T21323] R13: 00007fb936826128 R14: 00007fb936826090 R15: 00007fff82661ba8
[ 2762.195204][T21323]  </TASK>
[ 2763.799257][T21325] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2764.494901][T21341] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15170'.
[ 2764.965991][T21347] can: request_module (can-proto-0) failed.
[ 2766.983940][T20222] Bluetooth: hci1: unexpected event 0x1c length: 151 > 5
[ 2767.784714][T21385] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2768.370861][T21399] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15184'.
[ 2768.584347][T21399] can: request_module (can-proto-0) failed.
[ 2769.600624][T21398] netlink: 'syz.1.15184': attribute type 12 has an invalid length.
[ 2769.608686][T21398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15184'.
[ 2771.066255][T21417] netlink: 'syz.0.15190': attribute type 12 has an invalid length.
[ 2771.127946][T21417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15190'.
[ 2771.216721][T21421] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15190'.
[ 2771.555342][T21424] rxe_eth0 speed is unknown, defaulting to 1000
[ 2771.712136][T21427] can: request_module (can-proto-0) failed.
[ 2772.058551][T21436] FAULT_INJECTION: forcing a failure.
[ 2772.058551][T21436] name failslab, interval 1, probability 0, space 0, times 0
[ 2772.136433][T21436] CPU: 0 PID: 21436 Comm: syz.0.15195 Not tainted syzkaller #0
[ 2772.144083][T21436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2772.154184][T21436] Call Trace:
[ 2772.157511][T21436]  <TASK>
[ 2772.160482][T21436]  dump_stack_lvl+0x188/0x24e
[ 2772.165223][T21436]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2772.171434][T21436]  ? show_regs_print_info+0x12/0x12
[ 2772.176688][T21436]  ? load_image+0x410/0x410
[ 2772.181301][T21436]  should_fail_ex+0x390/0x4c0
[ 2772.186076][T21436]  should_failslab+0x5/0x20
[ 2772.190668][T21436]  slab_pre_alloc_hook+0x59/0x300
[ 2772.195754][T21436]  ? security_sk_alloc+0x47/0x130
[ 2772.200843][T21436]  __kmem_cache_alloc_node+0x4f/0x270
[ 2772.206274][T21436]  ? security_sk_alloc+0x47/0x130
[ 2772.211349][T21436]  __kmalloc+0xa3/0x240
[ 2772.215552][T21436]  security_sk_alloc+0x47/0x130
[ 2772.220453][T21436]  sk_prot_alloc+0x101/0x210
[ 2772.225090][T21436]  sk_alloc+0x36/0x330
[ 2772.229214][T21436]  unix_create1+0xb3/0x710
[ 2772.233700][T21436]  unix_create+0x139/0x1f0
[ 2772.238170][T21436]  __sock_create+0x49a/0x940
[ 2772.242824][T21436]  __sys_socketpair+0x1bd/0x540
[ 2772.247740][T21436]  __x64_sys_socketpair+0x97/0xb0
[ 2772.252831][T21436]  do_syscall_64+0x4c/0xa0
[ 2772.257303][T21436]  ? clear_bhb_loop+0x60/0xb0
[ 2772.262031][T21436]  ? clear_bhb_loop+0x60/0xb0
[ 2772.266773][T21436]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2772.272744][T21436] RIP: 0033:0x7f9b90d9fb19
[ 2772.277206][T21436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2772.296945][T21436] RSP: 002b:00007f9b91d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 2772.305413][T21436] RAX: ffffffffffffffda RBX: 00007f9b91025fa0 RCX: 00007f9b90d9fb19
[ 2772.313432][T21436] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[ 2772.321455][T21436] RBP: 00007f9b91d38090 R08: 0000000000000000 R09: 0000000000000000
[ 2772.329473][T21436] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[ 2772.337490][T21436] R13: 00007f9b91026038 R14: 00007f9b91025fa0 R15: 00007ffd3c545198
[ 2772.345539][T21436]  </TASK>
[ 2772.622843][T21442] syz.4.15196[21442] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2772.623016][T21442] syz.4.15196[21442] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2773.047795][T21451] netlink: 'syz.3.15199': attribute type 12 has an invalid length.
[ 2773.152910][T21451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15199'.
[ 2773.177449][T21455] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15199'.
[ 2773.501614][T21456] can: request_module (can-proto-0) failed.
[ 2774.727121][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 2774.733620][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 2777.789931][T21505] syz.0.15212[21505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2777.790110][T21505] syz.0.15212[21505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2778.668771][T21515] netlink: 'syz.3.15215': attribute type 12 has an invalid length.
[ 2778.699684][T21515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15215'.
[ 2778.806245][T21515] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15215'.
[ 2779.004843][T21523] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2779.152086][T21521] can: request_module (can-proto-0) failed.
[ 2782.011265][T21530] FAULT_INJECTION: forcing a failure.
[ 2782.011265][T21530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2782.069823][T21530] CPU: 0 PID: 21530 Comm: syz.0.15220 Not tainted syzkaller #0
[ 2782.077466][T21530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2782.087690][T21530] Call Trace:
[ 2782.091014][T21530]  <TASK>
[ 2782.093992][T21530]  dump_stack_lvl+0x188/0x24e
[ 2782.098740][T21530]  ? show_regs_print_info+0x12/0x12
[ 2782.104009][T21530]  ? load_image+0x410/0x410
[ 2782.108571][T21530]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2782.113661][T21530]  should_fail_ex+0x390/0x4c0
[ 2782.118402][T21530]  _copy_from_user+0x2c/0x170
[ 2782.123136][T21530]  dev_ethtool+0xc2/0x12f0
[ 2782.127607][T21530]  ? ethtool_get_module_eeprom_call+0x170/0x170
[ 2782.133904][T21530]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2782.139008][T21530]  ? __kmem_cache_free+0xb6/0x200
[ 2782.144089][T21530]  ? full_name_hash+0x8e/0xe0
[ 2782.148814][T21530]  ? dev_load+0x1d/0x1e0
[ 2782.153113][T21530]  ? dev_load+0x1d/0x1e0
[ 2782.157417][T21530]  dev_ioctl+0x474/0xe80
[ 2782.161738][T21530]  sock_do_ioctl+0x245/0x320
[ 2782.166393][T21530]  ? sock_show_fdinfo+0xb0/0xb0
[ 2782.171323][T21530]  sock_ioctl+0x48a/0x700
[ 2782.175711][T21530]  ? sock_poll+0x430/0x430
[ 2782.180194][T21530]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2782.185190][T21530]  ? security_file_ioctl+0x7c/0xa0
[ 2782.190364][T21530]  ? sock_poll+0x430/0x430
[ 2782.194847][T21530]  __se_sys_ioctl+0xfa/0x170
[ 2782.199507][T21530]  do_syscall_64+0x4c/0xa0
[ 2782.203993][T21530]  ? clear_bhb_loop+0x60/0xb0
[ 2782.208736][T21530]  ? clear_bhb_loop+0x60/0xb0
[ 2782.213475][T21530]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2782.219426][T21530] RIP: 0033:0x7f9b90d9fb19
[ 2782.223885][T21530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2782.243545][T21530] RSP: 002b:00007f9b91d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2782.252017][T21530] RAX: ffffffffffffffda RBX: 00007f9b91025fa0 RCX: 00007f9b90d9fb19
[ 2782.260072][T21530] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002c
[ 2782.268097][T21530] RBP: 00007f9b91d38090 R08: 0000000000000000 R09: 0000000000000000
[ 2782.276121][T21530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2782.284172][T21530] R13: 00007f9b91026038 R14: 00007f9b91025fa0 R15: 00007ffd3c545198
[ 2782.292212][T21530]  </TASK>
[ 2782.409182][T21534] tun1: tun_chr_ioctl cmd 1074025675
[ 2782.413597][T21540] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15224'.
[ 2782.456025][T21534] tun1: persist enabled
[ 2782.475107][T21540] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 2782.685523][T21546] syz.1.15226[21546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2782.685741][T21546] syz.1.15226[21546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2783.226493][T21561] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15230'.
[ 2783.824554][T21246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2783.835783][ T9952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2783.845303][ T9952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2783.853294][ T9952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2783.881360][ T9952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2783.892124][ T9952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2783.899949][ T9952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2786.010197][T20222] Bluetooth: hci3: command 0x0409 tx timeout
[ 2786.953293][T21574] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2786.983572][T21571] rxe_eth0 speed is unknown, defaulting to 1000
[ 2787.272106][T21246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2787.394610][T21246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2787.596901][T21588] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.15238'.
[ 2787.696250][T21246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2788.067824][T21571] chnl_net:caif_netlink_parms(): no params data found
[ 2788.089539][T20222] Bluetooth: hci3: command 0x041b tx timeout
[ 2788.117055][T21596] FAULT_INJECTION: forcing a failure.
[ 2788.117055][T21596] name failslab, interval 1, probability 0, space 0, times 0
[ 2788.199621][T21596] CPU: 0 PID: 21596 Comm: syz.4.15239 Not tainted syzkaller #0
[ 2788.207264][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2788.217372][T21596] Call Trace:
[ 2788.220701][T21596]  <TASK>
[ 2788.223681][T21596]  dump_stack_lvl+0x188/0x24e
[ 2788.228428][T21596]  ? show_regs_print_info+0x12/0x12
[ 2788.233691][T21596]  ? load_image+0x410/0x410
[ 2788.238253][T21596]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2788.243347][T21596]  should_fail_ex+0x390/0x4c0
[ 2788.248084][T21596]  should_failslab+0x5/0x20
[ 2788.252641][T21596]  slab_pre_alloc_hook+0x59/0x300
[ 2788.257717][T21596]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2788.263864][T21596]  kmem_cache_alloc_node+0x5a/0x310
[ 2788.269123][T21596]  ? alloc_vmap_area+0x194/0x1b10
[ 2788.274249][T21596]  alloc_vmap_area+0x194/0x1b10
[ 2788.279178][T21596]  ? vm_map_ram+0xab0/0xab0
[ 2788.283743][T21596]  ? rcu_is_watching+0x11/0xa0
[ 2788.288580][T21596]  __get_vm_area_node+0x158/0x330
[ 2788.293662][T21596]  __vmalloc_node_range+0x357/0x1380
[ 2788.298995][T21596]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2788.304001][T21596]  ? free_vm_area+0x50/0x50
[ 2788.308545][T21596]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2788.313538][T21596]  vmalloc+0x75/0x80
[ 2788.317472][T21596]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2788.322448][T21596]  netlink_sendmsg+0x5ec/0xbd0
[ 2788.327260][T21596]  ? netlink_getsockopt+0x550/0x550
[ 2788.332497][T21596]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2788.338087][T21596]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2788.343426][T21596]  ? security_socket_sendmsg+0x7c/0xa0
[ 2788.348923][T21596]  ? netlink_getsockopt+0x550/0x550
[ 2788.354164][T21596]  ____sys_sendmsg+0x5ed/0x9a0
[ 2788.358991][T21596]  ? __sys_sendmsg_sock+0x30/0x30
[ 2788.364053][T21596]  ? __import_iovec+0x306/0x510
[ 2788.368955][T21596]  ? import_iovec+0x6f/0xa0
[ 2788.373500][T21596]  ___sys_sendmsg+0x2a2/0x360
[ 2788.378250][T21596]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2788.383065][T21596]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 2788.388836][T21596]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2788.393750][T21596]  ? __x64_sys_sendmsg+0x80/0x80
[ 2788.398734][T21596]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 2788.404662][T21596]  do_syscall_64+0x4c/0xa0
[ 2788.409112][T21596]  ? clear_bhb_loop+0x60/0xb0
[ 2788.413838][T21596]  ? clear_bhb_loop+0x60/0xb0
[ 2788.418555][T21596]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2788.424489][T21596] RIP: 0033:0x7f4c97b9fb19
[ 2788.428953][T21596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2788.448611][T21596] RSP: 002b:00007f4c989eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2788.457078][T21596] RAX: ffffffffffffffda RBX: 00007f4c97e25fa0 RCX: 00007f4c97b9fb19
[ 2788.465078][T21596] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2788.473100][T21596] RBP: 00007f4c989eb090 R08: 0000000000000000 R09: 0000000000000000
[ 2788.481098][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2788.489117][T21596] R13: 00007f4c97e26038 R14: 00007f4c97e25fa0 R15: 00007ffd710c6298
[ 2788.497158][T21596]  </TASK>
[ 2788.541199][T21596] warn_alloc: 1 callbacks suppressed
[ 2788.541238][T21596] syz.4.15239: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[ 2788.587795][T21602] syz.1.15240[21602] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2788.587984][T21602] syz.1.15240[21602] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2788.600138][T21596] CPU: 1 PID: 21596 Comm: syz.4.15239 Not tainted syzkaller #0
[ 2788.619264][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2788.629370][T21596] Call Trace:
[ 2788.632684][T21596]  <TASK>
[ 2788.635659][T21596]  dump_stack_lvl+0x188/0x24e
[ 2788.640382][T21596]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2788.646831][T21596]  ? show_regs_print_info+0x12/0x12
[ 2788.652071][T21596]  ? load_image+0x410/0x410
[ 2788.656606][T21596]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2788.663047][T21596]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 2788.669580][T21596]  warn_alloc+0x242/0x330
[ 2788.673947][T21596]  ? slab_free_freelist_hook+0x133/0x1b0
[ 2788.679617][T21596]  ? zone_watermark_ok_safe+0x270/0x270
[ 2788.685199][T21596]  ? __get_vm_area_node+0x16d/0x330
[ 2788.690437][T21596]  ? __get_vm_area_node+0x16d/0x330
[ 2788.695673][T21596]  __vmalloc_node_range+0x37c/0x1380
[ 2788.701015][T21596]  ? free_vm_area+0x50/0x50
[ 2788.705566][T21596]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2788.710539][T21596]  vmalloc+0x75/0x80
[ 2788.714472][T21596]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2788.719447][T21596]  netlink_sendmsg+0x5ec/0xbd0
[ 2788.724262][T21596]  ? netlink_getsockopt+0x550/0x550
[ 2788.729503][T21596]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2788.735093][T21596]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2788.740409][T21596]  ? security_socket_sendmsg+0x7c/0xa0
[ 2788.745902][T21596]  ? netlink_getsockopt+0x550/0x550
[ 2788.751142][T21596]  ____sys_sendmsg+0x5ed/0x9a0
[ 2788.755969][T21596]  ? __sys_sendmsg_sock+0x30/0x30
[ 2788.761026][T21596]  ? __import_iovec+0x306/0x510
[ 2788.765924][T21596]  ? import_iovec+0x6f/0xa0
[ 2788.770468][T21596]  ___sys_sendmsg+0x2a2/0x360
[ 2788.775786][T21596]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2788.780604][T21596]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 2788.786368][T21596]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2788.791257][T21596]  ? __x64_sys_sendmsg+0x80/0x80
[ 2788.796235][T21596]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 2788.802176][T21596]  do_syscall_64+0x4c/0xa0
[ 2788.806649][T21596]  ? clear_bhb_loop+0x60/0xb0
[ 2788.811357][T21596]  ? clear_bhb_loop+0x60/0xb0
[ 2788.816068][T21596]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2788.821997][T21596] RIP: 0033:0x7f4c97b9fb19
[ 2788.826438][T21596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2788.846068][T21596] RSP: 002b:00007f4c989eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2788.854533][T21596] RAX: ffffffffffffffda RBX: 00007f4c97e25fa0 RCX: 00007f4c97b9fb19
[ 2788.862535][T21596] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2788.870556][T21596] RBP: 00007f4c989eb090 R08: 0000000000000000 R09: 0000000000000000
[ 2788.878553][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2788.886550][T21596] R13: 00007f4c97e26038 R14: 00007f4c97e25fa0 R15: 00007ffd710c6298
[ 2788.894595][T21596]  </TASK>
[ 2789.077085][T21596] Mem-Info:
[ 2789.089192][T21596] active_anon:23486 inactive_anon:0 isolated_anon:0
[ 2789.089192][T21596]  active_file:22071 inactive_file:41060 isolated_file:0
[ 2789.089192][T21596]  unevictable:768 dirty:195 writeback:0
[ 2789.089192][T21596]  slab_reclaimable:21520 slab_unreclaimable:99301
[ 2789.089192][T21596]  mapped:32092 shmem:1368 pagetables:662
[ 2789.089192][T21596]  sec_pagetables:0 bounce:0
[ 2789.089192][T21596]  kernel_misc_reclaimable:0
[ 2789.089192][T21596]  free:1286741 free_pcp:9287 free_cma:0
[ 2789.230447][T21596] Node 0 active_anon:93744kB inactive_anon:0kB active_file:88284kB inactive_file:164036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124268kB dirty:776kB writeback:0kB shmem:3936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10644kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no
[ 2789.336903][T21596] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2789.578886][T21571] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2789.603637][T21571] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2789.629877][T21596] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2789.715119][T21571] device bridge_slave_0 entered promiscuous mode
[ 2789.766456][T21596] lowmem_reserve[]: 0 2509 2510 2510 2510
[ 2789.772495][T21596] Node 0 DMA32 free:1217236kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:94544kB inactive_anon:0kB active_file:88284kB inactive_file:164036kB unevictable:1536kB writepending:676kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:26200kB local_pcp:11132kB free_cma:0kB
[ 2789.803426][T21596] lowmem_reserve[]: 0 0 1 1 1
[ 2789.808273][T21596] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2789.869464][T21596] lowmem_reserve[]: 0 0 0 0 0
[ 2789.884386][T21571] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2789.897361][T21571] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2789.913089][T21596] Node 1 Normal free:3911776kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11584kB local_pcp:11584kB free_cma:0kB
[ 2789.955921][T21571] device bridge_slave_1 entered promiscuous mode
[ 2790.045747][T21596] lowmem_reserve[]: 0 0 0 0 0
[ 2790.068414][T21596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2790.085121][T21618] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2790.096090][T21596] Node 0 DMA32: 1565*4kB (UME) 782*8kB (UME) 530*16kB (UME) 1102*32kB (UME) 779*64kB (UME) 270*128kB (UME) 92*256kB (UM) 131*512kB (UME) 51*1024kB (UM) 21*2048kB (UM) 217*4096kB (UM) = 1215364kB
[ 2790.164315][T21596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2790.170388][T20222] Bluetooth: hci3: command 0x040f tx timeout
[ 2790.188913][T21596] Node 1 Normal: 190*4kB (UE) 59*8kB (UME) 33*16kB (UE) 168*32kB (UME) 54*64kB (UME) 14*128kB (UME) 14*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3911776kB
[ 2790.219471][T21596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2790.252326][T21596] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2790.263037][T21596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2790.273161][T21596] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2790.282902][T21596] 64499 total pagecache pages
[ 2790.284363][T21571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2790.289251][T21596] 0 pages in swap cache
[ 2790.303127][T21596] Free swap  = 124996kB
[ 2790.307358][T21596] Total swap = 124996kB
[ 2790.312041][T21596] 2097051 pages RAM
[ 2790.316049][T21596] 0 pages HighMem/MovableOnly
[ 2790.321411][T21596] 419799 pages reserved
[ 2790.325705][T21596] 0 pages cma reserved
[ 2790.352507][T21571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2790.481519][T21571] team0: Port device team_slave_0 added
[ 2790.547153][T21571] team0: Port device team_slave_1 added
[ 2790.644902][T21571] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2790.677376][T21571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2790.756479][T21571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2790.824403][T21571] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2790.831531][T21571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2790.924240][T21571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2791.011729][T21650] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.15248'.
[ 2791.215068][T21571] device hsr_slave_0 entered promiscuous mode
[ 2791.231743][T21571] device hsr_slave_1 entered promiscuous mode
[ 2791.242732][T21571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2791.271790][T21571] Cannot create hsr debugfs directory
[ 2791.445846][T21659] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15250'.
[ 2791.458577][T21660] syz.3.15251[21660] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2791.458755][T21660] syz.3.15251[21660] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2791.527013][T21663] netlink: 'syz.4.15252': attribute type 2 has an invalid length.
[ 2791.552308][T21663] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15252'.
[ 2791.895334][T21246] device hsr_slave_0 left promiscuous mode
[ 2791.922088][T21246] device hsr_slave_1 left promiscuous mode
[ 2792.017814][T21246] device veth1_macvtap left promiscuous mode
[ 2792.036743][T21246] device veth0_macvtap left promiscuous mode
[ 2792.055846][T21246] device veth1_vlan left promiscuous mode
[ 2792.071284][T21246] device veth0_vlan left promiscuous mode
[ 2792.249463][T20222] Bluetooth: hci3: command 0x0419 tx timeout
[ 2792.567926][T21246] team0 (unregistering): Port device geneve1 removed
[ 2792.667650][T21246] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 2793.529419][T21246] team0 (unregistering): Port device team_slave_1 removed
[ 2793.620140][T21246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2793.629216][T21246] device bond_slave_1 left promiscuous mode
[ 2793.677177][T21246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2793.687284][T21246] device bond_slave_0 left promiscuous mode
[ 2793.732591][T21246] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2793.742408][T21246] device bridge_slave_1 left promiscuous mode
[ 2793.990342][T21246] bond0 (unregistering): Released all slaves
[ 2794.051436][T21700] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2794.250199][T21711] netlink: 'syz.4.15261': attribute type 10 has an invalid length.
[ 2794.264414][T21711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15261'.
[ 2794.279628][T21711] device veth1_to_team entered promiscuous mode
[ 2794.290773][T21711] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 2794.342477][T21714] netlink: 'syz.0.15262': attribute type 2 has an invalid length.
[ 2794.368101][T21714] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15262'.
[ 2794.534115][T21721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15263'.
[ 2794.768798][T21730] syz.4.15265[21730] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2794.768977][T21730] syz.4.15265[21730] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2795.015470][T21735] netlink: 'syz.3.15270': attribute type 10 has an invalid length.
[ 2795.061481][T21737] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.15269'.
[ 2795.317595][T21735] device veth0_vlan left promiscuous mode
[ 2795.436055][T21735] device veth0_vlan entered promiscuous mode
[ 2795.542600][T21735] team0: Device veth0_vlan failed to register rx_handler
[ 2795.826671][T21751] syz.4.15272[21751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2795.826851][T21751] syz.4.15272[21751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2796.551338][T21737] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 2796.559226][T21737] CPU: 0 PID: 21737 Comm: syz.1.15269 Not tainted syzkaller #0
[ 2796.566797][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2796.576888][T21737] Call Trace:
[ 2796.580193][T21737]  <TASK>
[ 2796.583150][T21737]  dump_stack_lvl+0x188/0x24e
[ 2796.587877][T21737]  ? show_regs_print_info+0x12/0x12
[ 2796.593115][T21737]  ? load_image+0x410/0x410
[ 2796.597663][T21737]  sysfs_warn_dup+0x8a/0xa0
[ 2796.602202][T21737]  sysfs_do_create_link_sd+0xc0/0x110
[ 2796.607612][T21737]  device_add+0x83b/0x1050
[ 2796.612074][T21737]  wiphy_register+0x1f16/0x2c50
[ 2796.616985][T21737]  ? cfg80211_event_work+0x40/0x40
[ 2796.622130][T21737]  ? minstrel_ht_alloc+0x894/0xa20
[ 2796.627303][T21737]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 2796.633420][T21737]  ieee80211_register_hw+0x2e33/0x3b00
[ 2796.638928][T21737]  ? ieee80211_register_hw+0xec1/0x3b00
[ 2796.644510][T21737]  ? ieee80211_register_hw+0xec1/0x3b00
[ 2796.650100][T21737]  ? ieee80211_tasklet_handler+0x20/0x20
[ 2796.655771][T21737]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2796.661724][T21737]  ? __debug_object_init+0xed/0x440
[ 2796.666962][T21737]  ? memset+0x1e/0x40
[ 2796.670975][T21737]  ? __hrtimer_init+0x189/0x270
[ 2796.675870][T21737]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 2796.681642][T21737]  ? memcpy+0x3c/0x60
[ 2796.685661][T21737]  hwsim_new_radio_nl+0xab7/0xc90
[ 2796.690757][T21737]  genl_family_rcv_msg_doit+0x22f/0x350
[ 2796.696340][T21737]  ? end_current_label_crit_section+0x170/0x170
[ 2796.702616][T21737]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 2796.708562][T21737]  ? bpf_lsm_capable+0x5/0x10
[ 2796.713282][T21737]  ? security_capable+0x85/0xb0
[ 2796.718181][T21737]  genl_rcv_msg+0x601/0x790
[ 2796.722721][T21737]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2796.728920][T21737]  ? genl_bind+0x360/0x360
[ 2796.733374][T21737]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 2796.739748][T21737]  ? kasan_check_range+0x84/0x290
[ 2796.744819][T21737]  netlink_rcv_skb+0x1ef/0x440
[ 2796.749622][T21737]  ? genl_bind+0x360/0x360
[ 2796.754080][T21737]  ? netlink_ack+0x1160/0x1160
[ 2796.758884][T21737]  ? down_read+0x1a8/0x2d0
[ 2796.763331][T21737]  genl_rcv+0x24/0x40
[ 2796.767354][T21737]  netlink_unicast+0x7ad/0x920
[ 2796.772162][T21737]  netlink_sendmsg+0x8ad/0xbd0
[ 2796.776992][T21737]  ? netlink_getsockopt+0x550/0x550
[ 2796.782223][T21737]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2796.787806][T21737]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2796.793142][T21737]  ? security_socket_sendmsg+0x7c/0xa0
[ 2796.798628][T21737]  ? netlink_getsockopt+0x550/0x550
[ 2796.803889][T21737]  ____sys_sendmsg+0x5ed/0x9a0
[ 2796.808719][T21737]  ? __sys_sendmsg_sock+0x30/0x30
[ 2796.813775][T21737]  ? __import_iovec+0x306/0x510
[ 2796.818696][T21737]  ? import_iovec+0x6f/0xa0
[ 2796.823240][T21737]  ___sys_sendmsg+0x2a2/0x360
[ 2796.827967][T21737]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2796.832767][T21737]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2796.838787][T21737]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2796.844977][T21737]  ? lockdep_hardirqs_on+0x94/0x140
[ 2796.850220][T21737]  ? __sanitizer_cov_trace_pc+0x37/0x60
[ 2796.855804][T21737]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2796.860685][T21737]  ? perf_trace_preemptirq_template+0x268/0x320
[ 2796.866981][T21737]  ? __x64_sys_sendmsg+0x80/0x80
[ 2796.871968][T21737]  ? lockdep_hardirqs_on+0x94/0x140
[ 2796.877202][T21737]  do_syscall_64+0x4c/0xa0
[ 2796.881657][T21737]  ? clear_bhb_loop+0x60/0xb0
[ 2796.886379][T21737]  ? clear_bhb_loop+0x60/0xb0
[ 2796.891091][T21737]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2796.897020][T21737] RIP: 0033:0x7ff30d79fb19
[ 2796.901468][T21737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2796.921110][T21737] RSP: 002b:00007ff30e72b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2796.929558][T21737] RAX: ffffffffffffffda RBX: 00007ff30da25fa0 RCX: 00007ff30d79fb19
[ 2796.937563][T21737] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 2796.945571][T21737] RBP: 00007ff30d837b70 R08: 0000000000000000 R09: 0000000000000000
[ 2796.953574][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2796.961580][T21737] R13: 00007ff30da26038 R14: 00007ff30da25fa0 R15: 00007ffdc9e8dd58
[ 2796.969606][T21737]  </TASK>
[ 2796.985536][T21571] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2797.071053][T21571] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2797.167356][T21571] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2797.213038][T21571] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2797.283205][T21759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15274'.
[ 2797.309579][T21759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15274'.
[ 2797.387786][T21760] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15274'.
[ 2797.554849][T21767] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.15273'.
[ 2797.614460][T21571] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2797.683070][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2797.701799][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2797.718229][T21571] 8021q: adding VLAN 0 to HW filter on device team0
[ 2797.734997][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2797.746078][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2797.762414][T21245] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2797.769705][T21245] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2797.793819][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2797.806619][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2797.817591][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2797.830538][T21245] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2797.837767][T21245] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2797.850891][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2797.885484][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2797.895750][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2797.914441][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2797.930998][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2797.948955][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2797.958714][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2797.984861][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2798.003422][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2798.024369][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2798.046091][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2798.064125][T21571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2798.594699][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2798.612165][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2798.646464][T21571] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2798.701310][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2798.722452][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2798.779027][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2798.788752][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2798.805063][T21571] device veth0_vlan entered promiscuous mode
[ 2798.817273][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2798.836015][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2798.868786][T21571] device veth1_vlan entered promiscuous mode
[ 2798.939141][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2798.966802][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2798.985846][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2799.007272][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2799.034266][T21571] device veth0_macvtap entered promiscuous mode
[ 2799.065240][T21571] device veth1_macvtap entered promiscuous mode
[ 2799.103977][T21571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2799.116015][T21571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2799.133181][T21571] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2799.146067][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2799.157915][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2799.184816][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2799.214742][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2799.238438][T21571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2799.261826][T21571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2799.297091][T21571] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2799.320091][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2799.341438][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2799.365460][T21571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2799.388396][T21571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2799.403125][T21571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2799.415499][T21571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2800.447285][T21241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2800.462160][T21241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2800.503317][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2800.557486][T21801] netlink: 'syz.0.15277': attribute type 2 has an invalid length.
[ 2800.569749][T21241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2800.588336][T21241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2800.598646][T21801] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15277'.
[ 2800.627974][T21236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2801.041323][T21814] FAULT_INJECTION: forcing a failure.
[ 2801.041323][T21814] name failslab, interval 1, probability 0, space 0, times 0
[ 2801.055140][T21814] CPU: 0 PID: 21814 Comm: syz.2.15227 Not tainted syzkaller #0
[ 2801.062749][T21814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2801.072851][T21814] Call Trace:
[ 2801.076173][T21814]  <TASK>
[ 2801.079150][T21814]  dump_stack_lvl+0x188/0x24e
[ 2801.083892][T21814]  ? show_regs_print_info+0x12/0x12
[ 2801.089148][T21814]  ? load_image+0x410/0x410
[ 2801.093722][T21814]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2801.098823][T21814]  should_fail_ex+0x390/0x4c0
[ 2801.103564][T21814]  should_failslab+0x5/0x20
[ 2801.108124][T21814]  slab_pre_alloc_hook+0x59/0x300
[ 2801.113208][T21814]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2801.119373][T21814]  kmem_cache_alloc_node+0x5a/0x310
[ 2801.124623][T21814]  ? alloc_vmap_area+0x194/0x1b10
[ 2801.129711][T21814]  alloc_vmap_area+0x194/0x1b10
[ 2801.134634][T21814]  ? vm_map_ram+0xab0/0xab0
[ 2801.139217][T21814]  ? rcu_is_watching+0x11/0xa0
[ 2801.144053][T21814]  __get_vm_area_node+0x158/0x330
[ 2801.149136][T21814]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2801.154651][T21814]  __vmalloc_node_range+0x357/0x1380
[ 2801.159993][T21814]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2801.165017][T21814]  ? free_vm_area+0x50/0x50
[ 2801.169585][T21814]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2801.174574][T21814]  vmalloc+0x75/0x80
[ 2801.178509][T21814]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2801.183518][T21814]  netlink_sendmsg+0x5ec/0xbd0
[ 2801.188347][T21814]  ? netlink_getsockopt+0x550/0x550
[ 2801.193583][T21814]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2801.199158][T21814]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2801.204477][T21814]  ? security_socket_sendmsg+0x7c/0xa0
[ 2801.209971][T21814]  ? netlink_getsockopt+0x550/0x550
[ 2801.215215][T21814]  ____sys_sendmsg+0x5ed/0x9a0
[ 2801.220066][T21814]  ? __sys_sendmsg_sock+0x30/0x30
[ 2801.225159][T21814]  ? __import_iovec+0x306/0x510
[ 2801.230078][T21814]  ? import_iovec+0x6f/0xa0
[ 2801.234616][T21814]  ___sys_sendmsg+0x2a2/0x360
[ 2801.239324][T21814]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2801.244128][T21814]  ? ct_nmi_exit+0x145/0x1c0
[ 2801.248745][T21814]  ? ct_irq_exit_irqson+0x113/0x170
[ 2801.254011][T21814]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2801.258907][T21814]  ? __x64_sys_sendmsg+0x80/0x80
[ 2801.263927][T21814]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 2801.269865][T21814]  do_syscall_64+0x4c/0xa0
[ 2801.274338][T21814]  ? clear_bhb_loop+0x60/0xb0
[ 2801.279050][T21814]  ? clear_bhb_loop+0x60/0xb0
[ 2801.283775][T21814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2801.289705][T21814] RIP: 0033:0x7fb49cd9fb19
[ 2801.294144][T21814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2801.313776][T21814] RSP: 002b:00007fb49dc6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2801.322222][T21814] RAX: ffffffffffffffda RBX: 00007fb49d025fa0 RCX: 00007fb49cd9fb19
[ 2801.330228][T21814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2801.338259][T21814] RBP: 00007fb49dc6d090 R08: 0000000000000000 R09: 0000000000000000
[ 2801.346270][T21814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2801.354297][T21814] R13: 00007fb49d026038 R14: 00007fb49d025fa0 R15: 00007ffd5df495a8
[ 2801.362338][T21814]  </TASK>
[ 2801.397828][T21817] syz.1.15281[21817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2801.398022][T21817] syz.1.15281[21817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2801.410674][T21814] syz.2.15227: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 2801.503458][T21814] CPU: 1 PID: 21814 Comm: syz.2.15227 Not tainted syzkaller #0
[ 2801.511104][T21814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2801.521213][T21814] Call Trace:
[ 2801.524532][T21814]  <TASK>
[ 2801.527511][T21814]  dump_stack_lvl+0x188/0x24e
[ 2801.532250][T21814]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2801.538718][T21814]  ? show_regs_print_info+0x12/0x12
[ 2801.543976][T21814]  ? load_image+0x410/0x410
[ 2801.548549][T21814]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2801.555113][T21814]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 2801.561674][T21814]  warn_alloc+0x242/0x330
[ 2801.566068][T21814]  ? zone_watermark_ok_safe+0x270/0x270
[ 2801.571687][T21814]  ? lockdep_hardirqs_on+0x94/0x140
[ 2801.576957][T21814]  __vmalloc_node_range+0x37c/0x1380
[ 2801.582450][T21814]  ? free_vm_area+0x50/0x50
[ 2801.587024][T21814]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2801.592055][T21814]  vmalloc+0x75/0x80
[ 2801.596014][T21814]  ? netlink_sendmsg+0x5ec/0xbd0
[ 2801.601008][T21814]  netlink_sendmsg+0x5ec/0xbd0
[ 2801.605841][T21814]  ? netlink_getsockopt+0x550/0x550
[ 2801.611098][T21814]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 2801.616731][T21814]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2801.622071][T21814]  ? security_socket_sendmsg+0x7c/0xa0
[ 2801.627585][T21814]  ? netlink_getsockopt+0x550/0x550
[ 2801.632866][T21814]  ____sys_sendmsg+0x5ed/0x9a0
[ 2801.637698][T21814]  ? __sys_sendmsg_sock+0x30/0x30
[ 2801.642782][T21814]  ? __import_iovec+0x306/0x510
[ 2801.647699][T21814]  ? import_iovec+0x6f/0xa0
[ 2801.652266][T21814]  ___sys_sendmsg+0x2a2/0x360
[ 2801.657020][T21814]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2801.661854][T21814]  ? ct_nmi_exit+0x145/0x1c0
[ 2801.666540][T21814]  ? ct_irq_exit_irqson+0x113/0x170
[ 2801.671843][T21814]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2801.676803][T21814]  ? __x64_sys_sendmsg+0x80/0x80
[ 2801.681811][T21814]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 2801.687824][T21814]  do_syscall_64+0x4c/0xa0
[ 2801.692309][T21814]  ? clear_bhb_loop+0x60/0xb0
[ 2801.697075][T21814]  ? clear_bhb_loop+0x60/0xb0
[ 2801.701808][T21814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2801.707755][T21814] RIP: 0033:0x7fb49cd9fb19
[ 2801.712218][T21814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2801.731883][T21814] RSP: 002b:00007fb49dc6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2801.740359][T21814] RAX: ffffffffffffffda RBX: 00007fb49d025fa0 RCX: 00007fb49cd9fb19
[ 2801.748388][T21814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 2801.756428][T21814] RBP: 00007fb49dc6d090 R08: 0000000000000000 R09: 0000000000000000
[ 2801.764447][T21814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2801.772468][T21814] R13: 00007fb49d026038 R14: 00007fb49d025fa0 R15: 00007ffd5df495a8
[ 2801.780506][T21814]  </TASK>
[ 2801.887252][T21814] Mem-Info:
[ 2801.893810][T21814] active_anon:23466 inactive_anon:0 isolated_anon:0
[ 2801.893810][T21814]  active_file:22071 inactive_file:41065 isolated_file:0
[ 2801.893810][T21814]  unevictable:768 dirty:132 writeback:0
[ 2801.893810][T21814]  slab_reclaimable:21637 slab_unreclaimable:99623
[ 2801.893810][T21814]  mapped:31087 shmem:1364 pagetables:684
[ 2801.893810][T21814]  sec_pagetables:0 bounce:0
[ 2801.893810][T21814]  kernel_misc_reclaimable:0
[ 2801.893810][T21814]  free:1289690 free_pcp:5603 free_cma:0
[ 2802.069524][T21814] Node 0 active_anon:95064kB inactive_anon:0kB active_file:88284kB inactive_file:164056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104248kB dirty:524kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10668kB pagetables:2636kB sec_pagetables:0kB all_unreclaimable? no
[ 2802.154707][T21828] syz.3.15284[21828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2802.154896][T21828] syz.3.15284[21828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2802.239643][T21814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2802.422136][T21834] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.15287'.
[ 2802.452293][T21814] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2802.516698][T21834] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 2802.541336][T21814] lowmem_reserve[]: 0 2509 2510 2510 2510
[ 2802.588884][T21814] Node 0 DMA32 free:1223680kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:93764kB inactive_anon:0kB active_file:88284kB inactive_file:164056kB unevictable:1536kB writepending:524kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:17212kB local_pcp:8140kB free_cma:0kB
[ 2802.752485][T21814] lowmem_reserve[]: 0 0 1 1 1
[ 2802.767803][T21814] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2802.777655][T21839] netlink: 'syz.1.15288': attribute type 10 has an invalid length.
[ 2802.883342][T21814] lowmem_reserve[]: 0 0 0 0 0
[ 2802.888204][T21814] Node 1 Normal free:3912032kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11328kB local_pcp:11328kB free_cma:0kB
[ 2803.026002][T21814] lowmem_reserve[]: 0 0 0 0 0
[ 2803.046446][T21814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2803.087990][T21839] device veth0_vlan left promiscuous mode
[ 2803.113295][T21814] Node 0 DMA32: 1859*4kB (UME) 278*8kB (UME) 2134*16kB (UM) 429*32kB (UME) 592*64kB (UME) 341*128kB (UME) 129*256kB (UM) 132*512kB (UME) 51*1024kB (UM) 21*2048kB (UM) 217*4096kB (UM) = 1223740kB
[ 2803.144428][T21839] device veth0_vlan entered promiscuous mode
[ 2803.217890][T21814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2803.222818][T21839] team0: Device veth0_vlan failed to register rx_handler
[ 2803.278367][T20222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2803.288869][T20222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2803.298512][T20222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2803.304703][T21814] Node 1 Normal: 190*4kB (UE) 59*8kB (UME) 33*16kB 
[ 2803.307254][T20222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2803.322477][T20222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2803.330095][T20222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2803.359554][T21814] (UE) 168*32kB (UME) 54*64kB (UME) 14*128kB (UME) 15*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3912032kB
[ 2803.376900][T21814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2803.387126][T21814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2803.396673][T21814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2803.406927][T21814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2803.416677][T21814] 64501 total pagecache pages
[ 2803.421718][T21814] 0 pages in swap cache
[ 2803.426022][T21814] Free swap  = 124996kB
[ 2803.430339][T21814] Total swap = 124996kB
[ 2803.434787][T21814] 2097051 pages RAM
[ 2803.438720][T21814] 0 pages HighMem/MovableOnly
[ 2803.462433][T21814] 419799 pages reserved
[ 2803.466668][T21814] 0 pages cma reserved
[ 2803.860299][T21860] netlink: 'syz.1.15293': attribute type 2 has an invalid length.
[ 2803.892594][T21860] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15293'.
[ 2804.041958][T21848] rxe_eth0 speed is unknown, defaulting to 1000
[ 2804.237344][T21869] syz.3.15295[21869] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2804.237522][T21869] syz.3.15295[21869] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2804.275416][T21236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2804.504682][T21236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2804.664617][T21236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2804.686975][T21881] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.15298'.
[ 2804.723456][T21876] netlink: 'syz.2.15298': attribute type 12 has an invalid length.
[ 2804.737815][T21876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15298'.
[ 2804.797682][T21236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2804.864141][T21880] netlink: 'syz.0.15299': attribute type 12 has an invalid length.
[ 2804.882139][T21880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15299'.
[ 2804.912096][T21883] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15299'.
[ 2804.938997][T21881] can: request_module (can-proto-0) failed.
[ 2805.116975][T21880] can: request_module (can-proto-0) failed.
[ 2805.359899][ T9952] Bluetooth: hci5: command 0x0409 tx timeout
[ 2805.403756][T21899] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.15301'.
[ 2805.563345][T21916] FAULT_INJECTION: forcing a failure.
[ 2805.563345][T21916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2805.612805][T21848] chnl_net:caif_netlink_parms(): no params data found
[ 2805.629806][T21916] CPU: 0 PID: 21916 Comm: syz.3.15304 Not tainted syzkaller #0
[ 2805.637460][T21916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2805.647549][T21916] Call Trace:
[ 2805.650886][T21916]  <TASK>
[ 2805.653846][T21916]  dump_stack_lvl+0x188/0x24e
[ 2805.658565][T21916]  ? show_regs_print_info+0x12/0x12
[ 2805.663808][T21916]  ? load_image+0x410/0x410
[ 2805.668354][T21916]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2805.673440][T21916]  should_fail_ex+0x390/0x4c0
[ 2805.678156][T21916]  _copy_from_user+0x2c/0x170
[ 2805.682896][T21916]  __sys_bpf+0x2ea/0x780
[ 2805.687178][T21916]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2805.692628][T21916]  ? lock_chain_count+0x20/0x20
[ 2805.697520][T21916]  __x64_sys_bpf+0x78/0x90
[ 2805.701977][T21916]  do_syscall_64+0x4c/0xa0
[ 2805.706438][T21916]  ? clear_bhb_loop+0x60/0xb0
[ 2805.711153][T21916]  ? clear_bhb_loop+0x60/0xb0
[ 2805.715883][T21916]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2805.721814][T21916] RIP: 0033:0x7fb93659fb19
[ 2805.726258][T21916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2805.745900][T21916] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2805.754346][T21916] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2805.762440][T21916] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[ 2805.770440][T21916] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2805.778437][T21916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2805.786434][T21916] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2805.794453][T21916]  </TASK>
[ 2805.952961][T21899] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 2806.572899][T21932] netlink: 'syz.0.15307': attribute type 2 has an invalid length.
[ 2806.647791][T21932] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15307'.
[ 2806.714526][T21940] syz.1.15309[21940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2806.714689][T21940] syz.1.15309[21940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2806.753164][T21848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2806.792417][T21848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2806.811246][T21848] device bridge_slave_0 entered promiscuous mode
[ 2806.885312][T21848] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2806.894981][T21848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2806.924219][T21848] device bridge_slave_1 entered promiscuous mode
[ 2807.048860][T21848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2807.078038][T21848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2807.132205][T21950] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15311'.
[ 2807.145282][T21951] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15312'.
[ 2807.167252][T21943] netlink: 'syz.3.15311': attribute type 12 has an invalid length.
[ 2807.203716][T21943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15311'.
[ 2807.251532][T21946] netlink: 'syz.0.15312': attribute type 12 has an invalid length.
[ 2807.272184][T21946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15312'.
[ 2807.419114][T21848] team0: Port device team_slave_0 added
[ 2807.439718][ T9952] Bluetooth: hci5: command 0x041b tx timeout
[ 2807.477282][T21955] can: request_module (can-proto-0) failed.
[ 2807.503108][T21950] can: request_module (can-proto-0) failed.
[ 2807.519502][ T9952] Bluetooth: hci2: command 0x0406 tx timeout
[ 2807.573576][T21848] team0: Port device team_slave_1 added
[ 2807.752136][T21848] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2807.759204][T21848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2807.843604][T21965] netlink: 'syz.1.15315': attribute type 3 has an invalid length.
[ 2807.883920][T21965] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15315'.
[ 2807.895399][T21848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2808.184913][T21977] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15316'.
[ 2809.519674][T20222] Bluetooth: hci5: command 0x040f tx timeout
[ 2810.887914][T21848] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2810.895841][T21848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2810.923368][T21848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2810.977132][T21977] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2811.023579][T21977] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2811.059472][T21977] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2811.263269][T21990] netlink: 'syz.0.15321': attribute type 2 has an invalid length.
[ 2811.299767][T21990] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15321'.
[ 2811.316227][T21848] device hsr_slave_0 entered promiscuous mode
[ 2811.353739][T21848] device hsr_slave_1 entered promiscuous mode
[ 2811.567662][T21236] device hsr_slave_0 left promiscuous mode
[ 2811.575717][T21236] device hsr_slave_1 left promiscuous mode
[ 2811.606759][T21236] device veth1_macvtap left promiscuous mode
[ 2811.609784][T20222] Bluetooth: hci5: command 0x0419 tx timeout
[ 2811.619171][T21236] device veth0_macvtap left promiscuous mode
[ 2811.642023][T22002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15324'.
[ 2811.672802][T21236] device veth1_vlan left promiscuous mode
[ 2811.678734][T21236] device veth0_vlan left promiscuous mode
[ 2812.008776][T22017] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15326'.
[ 2812.036466][T22019] syz.0.15328[22019] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2812.036649][T22019] syz.0.15328[22019] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2812.425243][T22023] can: request_module (can-proto-0) failed.
[ 2812.472108][T21236] team0 (unregistering): Port device geneve1 removed
[ 2812.522056][T21236] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 2812.715078][T21236] team0 (unregistering): Port device macvlan0 removed
[ 2813.080095][T21236] team0 (unregistering): Port device team_slave_1 removed
[ 2813.158387][T21236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2813.167683][T21236] device bond_slave_1 left promiscuous mode
[ 2813.218344][T21236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2813.228645][T21236] device bond_slave_0 left promiscuous mode
[ 2813.272414][T21236] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2813.282189][T21236] device bridge_slave_1 left promiscuous mode
[ 2813.502398][T21236] bond0 (unregistering): Released all slaves
[ 2813.545429][T21999] netlink: 'syz.2.15324': attribute type 15 has an invalid length.
[ 2813.553822][T21999] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15324'.
[ 2813.571971][T22002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15324'.
[ 2813.584736][T22008] netlink: 'syz.3.15327': attribute type 21 has an invalid length.
[ 2813.610740][T22008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15327'.
[ 2813.622161][T22008] netlink: 'syz.3.15327': attribute type 1 has an invalid length.
[ 2813.632252][T22016] netlink: 'syz.1.15326': attribute type 12 has an invalid length.
[ 2813.649577][T22016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15326'.
[ 2814.148113][T22046] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15332'.
[ 2814.163356][T22049] netlink: 'syz.2.15334': attribute type 2 has an invalid length.
[ 2814.186932][T22052] FAULT_INJECTION: forcing a failure.
[ 2814.186932][T22052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2814.210705][T22049] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15334'.
[ 2814.233970][T22052] CPU: 0 PID: 22052 Comm: syz.0.15335 Not tainted syzkaller #0
[ 2814.241599][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2814.251711][T22052] Call Trace:
[ 2814.255031][T22052]  <TASK>
[ 2814.258006][T22052]  dump_stack_lvl+0x188/0x24e
[ 2814.262753][T22052]  ? show_regs_print_info+0x12/0x12
[ 2814.268020][T22052]  ? load_image+0x410/0x410
[ 2814.272577][T22052]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2814.277700][T22052]  should_fail_ex+0x390/0x4c0
[ 2814.282443][T22052]  _copy_from_user+0x2c/0x170
[ 2814.287204][T22052]  dev_ethtool+0xc2/0x12f0
[ 2814.291695][T22052]  ? ethtool_get_module_eeprom_call+0x170/0x170
[ 2814.298006][T22052]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2814.303090][T22052]  ? __kmem_cache_free+0xb6/0x200
[ 2814.308164][T22052]  ? full_name_hash+0x8e/0xe0
[ 2814.312891][T22052]  ? dev_load+0x1d/0x1e0
[ 2814.317234][T22052]  ? dev_load+0x1d/0x1e0
[ 2814.321534][T22052]  dev_ioctl+0x474/0xe80
[ 2814.325853][T22052]  sock_do_ioctl+0x245/0x320
[ 2814.330498][T22052]  ? sock_show_fdinfo+0xb0/0xb0
[ 2814.335420][T22052]  sock_ioctl+0x48a/0x700
[ 2814.339811][T22052]  ? sock_poll+0x430/0x430
[ 2814.344292][T22052]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2814.349287][T22052]  ? security_file_ioctl+0x7c/0xa0
[ 2814.354464][T22052]  ? sock_poll+0x430/0x430
[ 2814.358931][T22052]  __se_sys_ioctl+0xfa/0x170
[ 2814.363582][T22052]  do_syscall_64+0x4c/0xa0
[ 2814.368065][T22052]  ? clear_bhb_loop+0x60/0xb0
[ 2814.372801][T22052]  ? clear_bhb_loop+0x60/0xb0
[ 2814.377534][T22052]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2814.383484][T22052] RIP: 0033:0x7f9b90d9fb19
[ 2814.387947][T22052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2814.407607][T22052] RSP: 002b:00007f9b91d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2814.416080][T22052] RAX: ffffffffffffffda RBX: 00007f9b91025fa0 RCX: 00007f9b90d9fb19
[ 2814.424109][T22052] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[ 2814.432132][T22052] RBP: 00007f9b91d38090 R08: 0000000000000000 R09: 0000000000000000
[ 2814.440149][T22052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2814.448161][T22052] R13: 00007f9b91026038 R14: 00007f9b91025fa0 R15: 00007ffd3c545198
[ 2814.456197][T22052]  </TASK>
[ 2816.974449][T22046] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2817.039631][T22046] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2817.075521][T22046] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2817.478109][T22082] netlink: 'syz.2.15341': attribute type 21 has an invalid length.
[ 2817.528802][T22082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15341'.
[ 2817.567937][T22082] netlink: 'syz.2.15341': attribute type 1 has an invalid length.
[ 2817.614204][T22079] netlink: 'syz.3.15342': attribute type 12 has an invalid length.
[ 2817.650803][T22079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15342'.
[ 2817.730886][T22084] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15342'.
[ 2817.982411][T21848] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2818.030240][T21848] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2818.044806][T22079] can: request_module (can-proto-0) failed.
[ 2818.073053][T21848] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2818.112701][T21848] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2818.260124][T22097] netlink: 'syz.2.15344': attribute type 3 has an invalid length.
[ 2818.268029][T22097] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15344'.
[ 2818.334488][T22098] FAULT_INJECTION: forcing a failure.
[ 2818.334488][T22098] name failslab, interval 1, probability 0, space 0, times 0
[ 2818.407146][T22098] CPU: 0 PID: 22098 Comm: syz.0.15345 Not tainted syzkaller #0
[ 2818.414814][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2818.424910][T22098] Call Trace:
[ 2818.428250][T22098]  <TASK>
[ 2818.431225][T22098]  dump_stack_lvl+0x188/0x24e
[ 2818.435979][T22098]  ? show_regs_print_info+0x12/0x12
[ 2818.441244][T22098]  ? load_image+0x410/0x410
[ 2818.445809][T22098]  ? __might_sleep+0xd0/0xd0
[ 2818.450455][T22098]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2818.455541][T22098]  should_fail_ex+0x390/0x4c0
[ 2818.460284][T22098]  should_failslab+0x5/0x20
[ 2818.464835][T22098]  slab_pre_alloc_hook+0x59/0x300
[ 2818.469916][T22098]  ? sctp_association_new+0x86/0x2520
[ 2818.475409][T22098]  __kmem_cache_alloc_node+0x4f/0x270
[ 2818.480842][T22098]  ? sctp_has_association+0x8e/0x440
[ 2818.486191][T22098]  ? sctp_association_new+0x86/0x2520
[ 2818.491611][T22098]  kmalloc_trace+0x26/0xe0
[ 2818.496087][T22098]  sctp_association_new+0x86/0x2520
[ 2818.501337][T22098]  ? security_capable+0x85/0xb0
[ 2818.506251][T22098]  sctp_connect_new_asoc+0x2da/0x6a0
[ 2818.511602][T22098]  ? __sctp_connect+0xd80/0xd80
[ 2818.516498][T22098]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2818.521903][T22098]  ? _local_bh_enable+0xa0/0xa0
[ 2818.526781][T22098]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 2818.532626][T22098]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 2818.538472][T22098]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 2818.544045][T22098]  ? security_sctp_bind_connect+0x85/0xb0
[ 2818.549800][T22098]  sctp_sendmsg+0x1686/0x2940
[ 2818.554525][T22098]  ? sctp_getsockopt+0x8a0/0x8a0
[ 2818.559519][T22098]  ? __might_fault+0xa6/0x120
[ 2818.564237][T22098]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 2818.570678][T22098]  ? aa_sock_msg_perm+0x94/0x150
[ 2818.575654][T22098]  ? inet_sendmsg+0x7a/0x2a0
[ 2818.580278][T22098]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2818.585590][T22098]  ? inet_send_prepare+0x250/0x250
[ 2818.590754][T22098]  ____sys_sendmsg+0x5ed/0x9a0
[ 2818.595577][T22098]  ? __sys_sendmsg_sock+0x30/0x30
[ 2818.600651][T22098]  ? __import_iovec+0x306/0x510
[ 2818.605549][T22098]  ? import_iovec+0x6f/0xa0
[ 2818.610085][T22098]  ___sys_sendmsg+0x2a2/0x360
[ 2818.614802][T22098]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2818.619625][T22098]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2818.624710][T22098]  __se_sys_sendmsg+0x1c3/0x2b0
[ 2818.629586][T22098]  ? ct_nmi_exit+0x145/0x1c0
[ 2818.634228][T22098]  ? __x64_sys_sendmsg+0x80/0x80
[ 2818.639222][T22098]  ? lockdep_hardirqs_on+0x94/0x140
[ 2818.644449][T22098]  do_syscall_64+0x4c/0xa0
[ 2818.648990][T22098]  ? clear_bhb_loop+0x60/0xb0
[ 2818.653704][T22098]  ? clear_bhb_loop+0x60/0xb0
[ 2818.658413][T22098]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2818.664375][T22098] RIP: 0033:0x7f9b90d9fb19
[ 2818.668818][T22098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2818.688447][T22098] RSP: 002b:00007f9b91d38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2818.696903][T22098] RAX: ffffffffffffffda RBX: 00007f9b91025fa0 RCX: 00007f9b90d9fb19
[ 2818.704915][T22098] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[ 2818.712907][T22098] RBP: 00007f9b91d38090 R08: 0000000000000000 R09: 0000000000000000
[ 2818.720918][T22098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2818.728945][T22098] R13: 00007f9b91026038 R14: 00007f9b91025fa0 R15: 00007ffd3c545198
[ 2818.736975][T22098]  </TASK>
[ 2818.933533][T21848] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2819.003731][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2819.014107][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2819.047484][T21848] 8021q: adding VLAN 0 to HW filter on device team0
[ 2819.078856][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2819.101625][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2819.126193][T21239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2819.133426][T21239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2819.187521][T22110] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.15347'.
[ 2819.276395][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2819.298162][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2819.344716][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2819.385828][T21239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2819.393084][T21239] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2819.438896][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2819.506196][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2819.539077][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2819.569007][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2819.637400][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2819.656924][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2819.680373][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2819.694137][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2819.703584][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2819.907016][T21848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2819.940775][T21848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2819.955188][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2819.987708][T21239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2820.426621][T22138] syz.1.15352[22138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2820.426798][T22138] syz.1.15352[22138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2820.814106][T22148] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.15350'.
[ 2823.490944][T22148] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2823.520864][T22148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2823.543453][T22148] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2823.620383][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2823.627961][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2823.672681][T21848] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2823.833635][T22161] netlink: 'syz.3.15355': attribute type 12 has an invalid length.
[ 2823.865194][T22161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15355'.
[ 2823.911903][T22171] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15355'.
[ 2824.030553][T22175] syz.1.15358[22175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2824.030733][T22175] syz.1.15358[22175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2824.312621][T22161] can: request_module (can-proto-0) failed.
[ 2825.185142][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2825.214248][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2825.289008][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2825.308591][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2825.345776][T21848] device veth0_vlan entered promiscuous mode
[ 2825.355537][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2825.386197][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2825.422941][T21848] device veth1_vlan entered promiscuous mode
[ 2825.514758][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2825.539275][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2825.563996][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2825.594443][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2825.626864][T21848] device veth0_macvtap entered promiscuous mode
[ 2825.657626][T21848] device veth1_macvtap entered promiscuous mode
[ 2825.724076][T21848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2825.774329][T21848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2825.802727][T21848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2825.834152][T21848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2825.866879][T21848] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2825.889746][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2825.905611][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2825.931665][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2825.966333][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2825.992974][T21848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2826.022700][T21848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2826.048347][T21848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2826.076524][T21848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2826.103820][T21848] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2826.135540][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2826.147497][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2826.178482][T21848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2826.205098][T21848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2826.232545][T21848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2826.261317][T21848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2826.733744][T21239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2826.753518][T21239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2826.799054][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2826.874173][T21246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2826.918482][T21246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2827.022347][T22216] netlink: 'syz.3.15361': attribute type 3 has an invalid length.
[ 2827.067064][T22216] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15361'.
[ 2827.077735][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2830.017907][ T9952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2830.028500][ T9952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2830.036844][ T9952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2830.046544][ T9952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2830.064388][ T9952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2830.071929][ T9952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2830.985411][T22249] rxe_eth0 speed is unknown, defaulting to 1000
[ 2831.185311][T22271] syz.2.15369[22271] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2831.185475][T22271] syz.2.15369[22271] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2832.159637][T20222] Bluetooth: hci1: command 0x0409 tx timeout
[ 2833.967777][T22287] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2834.039601][T22295] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2834.091698][T22295] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15376'.
[ 2834.245988][ T9952] Bluetooth: hci1: command 0x041b tx timeout
[ 2834.398999][T21236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2834.510151][T22300] team0: Port device team_slave_0 removed
[ 2834.611971][T21236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2834.808322][T21236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2835.103201][T21236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2836.200726][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.207112][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 2836.319461][T20222] Bluetooth: hci1: command 0x040f tx timeout
[ 2836.483831][T22249] chnl_net:caif_netlink_parms(): no params data found
[ 2836.674211][T22249] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2836.693325][T22249] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2836.703817][T22249] device bridge_slave_0 entered promiscuous mode
[ 2836.713046][T22249] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2836.720583][T22249] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2836.729041][T22249] device bridge_slave_1 entered promiscuous mode
[ 2836.731219][T22327] syz.4.15382[22327] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2836.758771][T22249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2836.783498][T22249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2836.802309][T22327] syz.4.15382[22327] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2836.851391][T22249] team0: Port device team_slave_0 added
[ 2836.875338][T22249] team0: Port device team_slave_1 added
[ 2836.902057][T22249] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2836.909178][T22249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2836.935999][T22249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2836.949870][T22249] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2836.957893][T22249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2836.995528][T22249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2837.823568][T22249] device hsr_slave_0 entered promiscuous mode
[ 2837.836783][T22249] device hsr_slave_1 entered promiscuous mode
[ 2837.845862][T22249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2837.859155][T22249] Cannot create hsr debugfs directory
[ 2838.180146][T22340] delete_channel: no stack
[ 2838.399691][T20222] Bluetooth: hci1: command 0x0419 tx timeout
[ 2840.411637][T22249] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2840.478765][T22249] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2840.504141][T22249] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2840.695781][T22249] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2840.732886][T22396] syz.2.15396[22396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2840.733073][T22396] syz.2.15396[22396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2843.933487][T22249] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2847.080183][T22249] 8021q: adding VLAN 0 to HW filter on device team0
[ 2847.087259][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2847.100276][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2847.159298][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2847.181928][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2847.210207][T21246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2847.217472][T21246] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2847.277528][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2847.296663][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2847.307016][T22441] syz.3.15407[22441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2847.307224][T22441] syz.3.15407[22441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2847.321487][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2847.367044][T21246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2847.374374][T21246] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2847.415892][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2847.473676][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2847.517346][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2847.567239][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2847.628255][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2847.650811][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2847.664471][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2847.675389][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2847.696134][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2847.723646][T22249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2847.743898][T22249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2847.756994][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2847.768790][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2847.788764][T22449] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2848.809607][T21236] device hsr_slave_0 left promiscuous mode
[ 2848.820138][T21236] device hsr_slave_1 left promiscuous mode
[ 2848.889416][T21236] device veth1_macvtap left promiscuous mode
[ 2848.895725][T21236] device veth0_macvtap left promiscuous mode
[ 2848.960592][T21236] device veth1_vlan left promiscuous mode
[ 2849.595921][T21236] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 2850.134949][T21236] team0 (unregistering): Port device team_slave_1 removed
[ 2850.236265][T21236] team0 (unregistering): Port device team_slave_0 removed
[ 2853.320578][T21236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2853.333155][T21236] device bond_slave_1 left promiscuous mode
[ 2853.398316][T22481] syz.2.15418[22481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2853.398599][T22481] syz.2.15418[22481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2853.411388][T21236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2853.450054][T21236] device bond_slave_0 left promiscuous mode
[ 2853.529462][T21236] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2853.541175][T21236] device bridge_slave_1 left promiscuous mode
[ 2853.841003][T21236] team0 (unregistering): Port device dummy0 removed
[ 2853.873227][T21236] team0 (unregistering): Port device bond0 removed
[ 2853.909187][T21236] bond0 (unregistering): Released all slaves
[ 2853.975393][T22483] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15420'.
[ 2854.010322][T22483] device bond0 entered promiscuous mode
[ 2854.019590][T22483] device bond_slave_0 entered promiscuous mode
[ 2854.040741][T22483] device bond_slave_1 entered promiscuous mode
[ 2854.054429][T22486] device bridge_slave_1 left promiscuous mode
[ 2854.072930][T22486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2854.107166][T22486] device bridge_slave_0 left promiscuous mode
[ 2854.123858][T22486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2854.312380][T22249] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2854.334688][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2854.342576][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2854.380115][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2854.389101][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2854.416509][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2854.430129][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2854.439090][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2854.470865][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2854.534125][T22249] device veth0_vlan entered promiscuous mode
[ 2854.571898][T22249] device veth1_vlan entered promiscuous mode
[ 2854.707688][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2854.743819][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2854.811761][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2854.867960][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2854.929120][T22249] device veth0_macvtap entered promiscuous mode
[ 2854.995019][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2855.022160][T22249] device veth1_macvtap entered promiscuous mode
[ 2855.065521][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2855.080201][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2855.091013][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2855.102154][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2855.114337][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2855.125416][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2855.137645][T22249] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2855.167217][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2855.200509][T21245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2855.211381][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2855.233435][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2855.253355][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2855.267389][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2855.277949][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2855.291537][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2855.305150][T22249] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2855.335544][T22501] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 2855.419221][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2855.445774][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2855.468242][T22249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2855.489463][T22249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2855.509873][T22249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2855.518675][T22249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2855.699751][T21245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2855.707744][T21245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2855.742349][T21236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2855.795994][T21236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2855.825646][T21236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2855.833468][T22519] syz.4.15430[22519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2855.833642][T22519] syz.4.15430[22519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2855.857224][T21236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2859.545251][T22538] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15436'.
[ 2859.588005][T22538] device bond0 entered promiscuous mode
[ 2859.627971][T22538] device bond_slave_0 entered promiscuous mode
[ 2859.773889][T22538] device bond_slave_1 entered promiscuous mode
[ 2860.104017][T22538] device bridge_slave_1 left promiscuous mode
[ 2860.121669][T22538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2860.151789][T22538] device bridge_slave_0 left promiscuous mode
[ 2860.159226][T22538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2860.504315][T22558] syz.4.15441[22558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2860.504496][T22558] syz.4.15441[22558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2860.914288][T22560] netlink: 'syz.4.15443': attribute type 12 has an invalid length.
[ 2860.958300][T22560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15443'.
[ 2860.986676][T22561] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15443'.
[ 2861.344361][T22560] can: request_module (can-proto-0) failed.
[ 2861.694427][T22576] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15451'.
[ 2862.274753][ T9952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2862.285067][ T9952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2862.293560][T22587] syz.1.15454[22587] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2862.293562][ T9952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2862.315769][ T9952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2862.324738][ T9952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2862.335449][ T9952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2862.358104][T22588] FAULT_INJECTION: forcing a failure.
[ 2862.358104][T22588] name failslab, interval 1, probability 0, space 0, times 0
[ 2862.364267][T22587] syz.1.15454[22587] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2862.375361][T22588] CPU: 1 PID: 22588 Comm: syz.3.15455 Not tainted syzkaller #0
[ 2862.394495][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2862.404603][T22588] Call Trace:
[ 2862.407918][T22588]  <TASK>
[ 2862.410894][T22588]  dump_stack_lvl+0x188/0x24e
[ 2862.415638][T22588]  ? show_regs_print_info+0x12/0x12
[ 2862.420906][T22588]  ? load_image+0x410/0x410
[ 2862.425463][T22588]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2862.430586][T22588]  should_fail_ex+0x390/0x4c0
[ 2862.435318][T22588]  should_failslab+0x5/0x20
[ 2862.439865][T22588]  slab_pre_alloc_hook+0x59/0x300
[ 2862.444953][T22588]  ? do_syscall_64+0x4c/0xa0
[ 2862.449619][T22588]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2862.455789][T22588]  kmem_cache_alloc_node+0x5a/0x310
[ 2862.461076][T22588]  ? alloc_vmap_area+0x194/0x1b10
[ 2862.466160][T22588]  alloc_vmap_area+0x194/0x1b10
[ 2862.471085][T22588]  ? vm_map_ram+0xab0/0xab0
[ 2862.475645][T22588]  ? rcu_is_watching+0x11/0xa0
[ 2862.480476][T22588]  __get_vm_area_node+0x158/0x330
[ 2862.485562][T22588]  __vmalloc_node_range+0x357/0x1380
[ 2862.490908][T22588]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.496522][T22588]  ? aa_get_newest_label+0xf9/0x5b0
[ 2862.501773][T22588]  ? free_vm_area+0x50/0x50
[ 2862.506328][T22588]  ? end_current_label_crit_section+0x170/0x170
[ 2862.512624][T22588]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2862.517708][T22588]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.523294][T22588]  __vmalloc+0x76/0x80
[ 2862.527419][T22588]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.533014][T22588]  bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.538434][T22588]  ? bpf_prog_alloc+0x13/0x1b0
[ 2862.543251][T22588]  bpf_prog_alloc+0x1c/0x1b0
[ 2862.547892][T22588]  bpf_prog_load+0x7d4/0x1530
[ 2862.552639][T22588]  ? map_freeze+0x390/0x390
[ 2862.557197][T22588]  ? __might_fault+0xa6/0x120
[ 2862.561967][T22588]  ? __might_fault+0xa6/0x120
[ 2862.566715][T22588]  ? __might_fault+0xc2/0x120
[ 2862.571436][T22588]  ? __might_fault+0xa6/0x120
[ 2862.576164][T22588]  ? bpf_lsm_bpf+0x5/0x10
[ 2862.580543][T22588]  ? security_bpf+0x7a/0xa0
[ 2862.585101][T22588]  __sys_bpf+0x5b8/0x780
[ 2862.589399][T22588]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2862.594842][T22588]  ? lock_chain_count+0x20/0x20
[ 2862.599793][T22588]  __x64_sys_bpf+0x78/0x90
[ 2862.604282][T22588]  do_syscall_64+0x4c/0xa0
[ 2862.608781][T22588]  ? clear_bhb_loop+0x60/0xb0
[ 2862.613514][T22588]  ? clear_bhb_loop+0x60/0xb0
[ 2862.618245][T22588]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2862.624202][T22588] RIP: 0033:0x7fb93659fb19
[ 2862.628661][T22588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2862.648351][T22588] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2862.656821][T22588] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2862.664864][T22588] RDX: 0000000000000090 RSI: 0000200000001080 RDI: 0000000000000005
[ 2862.672892][T22588] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2862.680926][T22588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2862.688941][T22588] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2862.697006][T22588]  </TASK>
[ 2862.721572][T22588] syz.3.15455: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 2862.744335][T22588] CPU: 0 PID: 22588 Comm: syz.3.15455 Not tainted syzkaller #0
[ 2862.751974][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2862.762124][T22588] Call Trace:
[ 2862.765445][T22588]  <TASK>
[ 2862.768429][T22588]  dump_stack_lvl+0x188/0x24e
[ 2862.773256][T22588]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2862.779722][T22588]  ? show_regs_print_info+0x12/0x12
[ 2862.784999][T22588]  ? load_image+0x410/0x410
[ 2862.789554][T22588]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 2862.796056][T22588]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 2862.802609][T22588]  warn_alloc+0x242/0x330
[ 2862.806998][T22588]  ? slab_free_freelist_hook+0x133/0x1b0
[ 2862.812688][T22588]  ? zone_watermark_ok_safe+0x270/0x270
[ 2862.818289][T22588]  ? __get_vm_area_node+0x16d/0x330
[ 2862.823556][T22588]  ? __get_vm_area_node+0x16d/0x330
[ 2862.828818][T22588]  __vmalloc_node_range+0x37c/0x1380
[ 2862.834210][T22588]  ? aa_get_newest_label+0xf9/0x5b0
[ 2862.839628][T22588]  ? free_vm_area+0x50/0x50
[ 2862.844185][T22588]  ? end_current_label_crit_section+0x170/0x170
[ 2862.850484][T22588]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2862.855564][T22588]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.861161][T22588]  __vmalloc+0x76/0x80
[ 2862.865282][T22588]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.870872][T22588]  bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2862.876280][T22588]  ? bpf_prog_alloc+0x13/0x1b0
[ 2862.881107][T22588]  bpf_prog_alloc+0x1c/0x1b0
[ 2862.885724][T22588]  bpf_prog_load+0x7d4/0x1530
[ 2862.890449][T22588]  ? map_freeze+0x390/0x390
[ 2862.894993][T22588]  ? __might_fault+0xa6/0x120
[ 2862.899711][T22588]  ? __might_fault+0xa6/0x120
[ 2862.904415][T22588]  ? __might_fault+0xc2/0x120
[ 2862.909119][T22588]  ? __might_fault+0xa6/0x120
[ 2862.913827][T22588]  ? bpf_lsm_bpf+0x5/0x10
[ 2862.918190][T22588]  ? security_bpf+0x7a/0xa0
[ 2862.922728][T22588]  __sys_bpf+0x5b8/0x780
[ 2862.927010][T22588]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2862.932430][T22588]  ? lock_chain_count+0x20/0x20
[ 2862.937353][T22588]  __x64_sys_bpf+0x78/0x90
[ 2862.941802][T22588]  do_syscall_64+0x4c/0xa0
[ 2862.946263][T22588]  ? clear_bhb_loop+0x60/0xb0
[ 2862.950979][T22588]  ? clear_bhb_loop+0x60/0xb0
[ 2862.955701][T22588]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2862.961638][T22588] RIP: 0033:0x7fb93659fb19
[ 2862.966107][T22588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2862.985950][T22588] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2862.994392][T22588] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2863.002395][T22588] RDX: 0000000000000090 RSI: 0000200000001080 RDI: 0000000000000005
[ 2863.010394][T22588] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2863.018394][T22588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2863.026391][T22588] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2863.034405][T22588]  </TASK>
[ 2863.107594][T22596] FAULT_INJECTION: forcing a failure.
[ 2863.107594][T22596] name failslab, interval 1, probability 0, space 0, times 0
[ 2863.145578][T22596] CPU: 0 PID: 22596 Comm: syz.1.15456 Not tainted syzkaller #0
[ 2863.153228][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2863.163341][T22596] Call Trace:
[ 2863.166663][T22596]  <TASK>
[ 2863.169674][T22596]  dump_stack_lvl+0x188/0x24e
[ 2863.174448][T22596]  ? show_regs_print_info+0x12/0x12
[ 2863.179706][T22596]  ? load_image+0x410/0x410
[ 2863.184245][T22596]  ? __might_sleep+0xd0/0xd0
[ 2863.188872][T22596]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2863.193943][T22596]  should_fail_ex+0x390/0x4c0
[ 2863.198660][T22596]  should_failslab+0x5/0x20
[ 2863.203217][T22596]  slab_pre_alloc_hook+0x59/0x300
[ 2863.208287][T22596]  kmem_cache_alloc+0x56/0x2f0
[ 2863.213091][T22596]  ? security_file_alloc+0x30/0x110
[ 2863.218362][T22596]  security_file_alloc+0x30/0x110
[ 2863.223426][T22596]  __alloc_file+0xc2/0x230
[ 2863.227873][T22596]  alloc_empty_file+0x90/0x180
[ 2863.232668][T22596]  path_openat+0x11c/0x2f10
[ 2863.237213][T22596]  ? kasan_set_track+0x60/0x70
[ 2863.242017][T22596]  ? verify_lock_unused+0x140/0x140
[ 2863.247252][T22596]  ? do_sys_openat2+0xdd/0x4f0
[ 2863.252053][T22596]  ? __x64_sys_openat+0x135/0x160
[ 2863.257110][T22596]  ? do_syscall_64+0x4c/0xa0
[ 2863.261752][T22596]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2863.267856][T22596]  ? do_filp_open+0x420/0x420
[ 2863.272582][T22596]  do_filp_open+0x1ee/0x420
[ 2863.277123][T22596]  ? vfs_tmpfile+0x490/0x490
[ 2863.281765][T22596]  ? _raw_spin_unlock+0x24/0x40
[ 2863.286815][T22596]  ? alloc_fd+0x590/0x640
[ 2863.291208][T22596]  do_sys_openat2+0x14b/0x4f0
[ 2863.295934][T22596]  ? do_sys_open+0xe0/0xe0
[ 2863.300416][T22596]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2863.306436][T22596]  ? lock_chain_count+0x20/0x20
[ 2863.311337][T22596]  __x64_sys_openat+0x135/0x160
[ 2863.316224][T22596]  do_syscall_64+0x4c/0xa0
[ 2863.320682][T22596]  ? clear_bhb_loop+0x60/0xb0
[ 2863.325403][T22596]  ? clear_bhb_loop+0x60/0xb0
[ 2863.330115][T22596]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2863.336063][T22596] RIP: 0033:0x7faaa136034e
[ 2863.340544][T22596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2863.360189][T22596] RSP: 002b:00007faaa2278ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2863.368635][T22596] RAX: ffffffffffffffda RBX: 00007faaa22796c0 RCX: 00007faaa136034e
[ 2863.376631][T22596] RDX: 0000000000000002 RSI: 00007faaa2278f90 RDI: ffffffffffffff9c
[ 2863.384628][T22596] RBP: 00007faaa2279090 R08: 0000000000000000 R09: 0000000000000000
[ 2863.392623][T22596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2863.400639][T22596] R13: 00007faaa1626038 R14: 00007faaa1625fa0 R15: 00007fff6ae10348
[ 2863.408649][T22596]  </TASK>
[ 2863.454722][T22588] Mem-Info:
[ 2863.458113][T22588] active_anon:23394 inactive_anon:0 isolated_anon:0
[ 2863.458113][T22588]  active_file:22071 inactive_file:41092 isolated_file:0
[ 2863.458113][T22588]  unevictable:768 dirty:167 writeback:0
[ 2863.458113][T22588]  slab_reclaimable:21504 slab_unreclaimable:101067
[ 2863.458113][T22588]  mapped:31066 shmem:1364 pagetables:670
[ 2863.458113][T22588]  sec_pagetables:0 bounce:0
[ 2863.458113][T22588]  kernel_misc_reclaimable:0
[ 2863.458113][T22588]  free:1282935 free_pcp:10374 free_cma:0
[ 2863.532739][T22588] Node 0 active_anon:93576kB inactive_anon:0kB active_file:88284kB inactive_file:164164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124264kB dirty:664kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10860kB pagetables:2680kB sec_pagetables:0kB all_unreclaimable? no
[ 2863.566939][T22588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2863.600291][T22588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2863.605239][T21247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2863.629399][T22588] lowmem_reserve[]: 0 2509 2510 2510 2510
[ 2863.654032][T22588] Node 0 DMA32 free:1204124kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:93576kB inactive_anon:0kB active_file:88284kB inactive_file:164164kB unevictable:1536kB writepending:664kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:30324kB local_pcp:13200kB free_cma:0kB
[ 2863.686067][T22588] lowmem_reserve[]: 0 0 1 1 1
[ 2863.690926][T22585] rxe_eth0 speed is unknown, defaulting to 1000
[ 2863.712577][T22602] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15457'.
[ 2863.721872][T22588] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2863.758292][T22602] device bond0 entered promiscuous mode
[ 2863.764426][T22602] device bond_slave_0 entered promiscuous mode
[ 2863.771242][T22602] device bond_slave_1 entered promiscuous mode
[ 2863.834909][T22588] lowmem_reserve[]: 0 0 0 0 0
[ 2863.847517][T21247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2863.878334][T22588] Node 1 Normal free:3912032kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11328kB local_pcp:0kB free_cma:0kB
[ 2863.912823][T22598] device bridge_slave_1 left promiscuous mode
[ 2863.931762][T22598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2863.966563][T22598] device bridge_slave_0 left promiscuous mode
[ 2863.988824][T22598] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2864.009545][T22588] lowmem_reserve[]: 0 0 0 0 0
[ 2864.019461][T22588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2864.081959][T22588] Node 0 DMA32: 347*4kB (UM) 323*8kB (UME) 2424*16kB (UME) 1573*32kB (UME) 651*64kB (UME) 282*128kB (UME) 84*256kB (UM) 86*512kB (UME) 34*1024kB (UM) 21*2048kB (UM) 217*4096kB (UM) = 1203044kB
[ 2864.141006][T22588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2864.164118][T22607] FAULT_INJECTION: forcing a failure.
[ 2864.164118][T22607] name failslab, interval 1, probability 0, space 0, times 0
[ 2864.184074][T22588] Node 1 Normal: 190*4kB (UE) 59*8kB (UME) 33*16kB (UE) 168*32kB (UME) 54*64kB (UME) 14*128kB (UME) 15*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3912032kB
[ 2864.212603][T22607] CPU: 0 PID: 22607 Comm: syz.2.15459 Not tainted syzkaller #0
[ 2864.220226][T22607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2864.230333][T22607] Call Trace:
[ 2864.233660][T22607]  <TASK>
[ 2864.236640][T22607]  dump_stack_lvl+0x188/0x24e
[ 2864.241391][T22607]  ? show_regs_print_info+0x12/0x12
[ 2864.246699][T22607]  ? load_image+0x410/0x410
[ 2864.251265][T22607]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2864.256360][T22607]  should_fail_ex+0x390/0x4c0
[ 2864.261118][T22607]  should_failslab+0x5/0x20
[ 2864.265673][T22607]  slab_pre_alloc_hook+0x59/0x300
[ 2864.270756][T22607]  ? do_syscall_64+0x4c/0xa0
[ 2864.275414][T22607]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2864.281540][T22607]  kmem_cache_alloc_node+0x5a/0x310
[ 2864.286800][T22607]  ? alloc_vmap_area+0x194/0x1b10
[ 2864.291889][T22607]  alloc_vmap_area+0x194/0x1b10
[ 2864.296809][T22607]  ? vm_map_ram+0xab0/0xab0
[ 2864.301376][T22607]  ? rcu_is_watching+0x11/0xa0
[ 2864.306230][T22607]  __get_vm_area_node+0x158/0x330
[ 2864.311320][T22607]  __vmalloc_node_range+0x357/0x1380
[ 2864.316667][T22607]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2864.322289][T22607]  ? aa_get_newest_label+0xf9/0x5b0
[ 2864.327546][T22607]  ? free_vm_area+0x50/0x50
[ 2864.332103][T22607]  ? end_current_label_crit_section+0x170/0x170
[ 2864.338399][T22607]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2864.343481][T22607]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2864.349074][T22607]  __vmalloc+0x76/0x80
[ 2864.353239][T22607]  ? bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2864.358837][T22607]  bpf_prog_alloc_no_stats+0x37/0x3c0
[ 2864.364406][T22607]  ? bpf_prog_alloc+0x13/0x1b0
[ 2864.369222][T22607]  bpf_prog_alloc+0x1c/0x1b0
[ 2864.373859][T22607]  bpf_prog_load+0x7d4/0x1530
[ 2864.378608][T22607]  ? map_freeze+0x390/0x390
[ 2864.383198][T22607]  ? __might_fault+0xa6/0x120
[ 2864.387943][T22607]  ? __might_fault+0xa6/0x120
[ 2864.392695][T22607]  ? __might_fault+0xc2/0x120
[ 2864.397417][T22607]  ? __might_fault+0xa6/0x120
[ 2864.402152][T22607]  ? bpf_lsm_bpf+0x5/0x10
[ 2864.406534][T22607]  ? security_bpf+0x7a/0xa0
[ 2864.411098][T22607]  __sys_bpf+0x5b8/0x780
[ 2864.415407][T22607]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2864.420857][T22607]  ? lock_chain_count+0x20/0x20
[ 2864.425788][T22607]  __x64_sys_bpf+0x78/0x90
[ 2864.427004][T20222] Bluetooth: hci0: command 0x0409 tx timeout
[ 2864.430247][T22607]  do_syscall_64+0x4c/0xa0
[ 2864.430281][T22607]  ? clear_bhb_loop+0x60/0xb0
[ 2864.430313][T22607]  ? clear_bhb_loop+0x60/0xb0
[ 2864.450364][T22607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2864.456315][T22607] RIP: 0033:0x7fb49cd9fb19
[ 2864.460774][T22607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2864.480437][T22607] RSP: 002b:00007fb49dc4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2864.488926][T22607] RAX: ffffffffffffffda RBX: 00007fb49d026090 RCX: 00007fb49cd9fb19
[ 2864.496952][T22607] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[ 2864.504972][T22607] RBP: 00007fb49dc4c090 R08: 0000000000000000 R09: 0000000000000000
[ 2864.513005][T22607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2864.521022][T22607] R13: 00007fb49d026128 R14: 00007fb49d026090 R15: 00007ffd5df495a8
[ 2864.529062][T22607]  </TASK>
[ 2864.539564][T22588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2864.549186][T22588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2864.586933][T22588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2864.607049][T22588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2864.627312][T22588] 64527 total pagecache pages
[ 2864.638155][T22588] 0 pages in swap cache
[ 2864.642764][T22588] Free swap  = 124996kB
[ 2864.646988][T22588] Total swap = 124996kB
[ 2864.651446][T22588] 2097051 pages RAM
[ 2864.655299][T22588] 0 pages HighMem/MovableOnly
[ 2864.660180][T22588] 419799 pages reserved
[ 2864.664511][T22588] 0 pages cma reserved
[ 2864.678976][T21247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2864.847264][T22617] netlink: 'syz.4.15463': attribute type 3 has an invalid length.
[ 2864.858625][T21247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2864.884672][T22617] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15463'.
[ 2864.924519][T22614] netlink: 'syz.1.15461': attribute type 12 has an invalid length.
[ 2864.933552][T22614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15461'.
[ 2864.996014][T22614] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15461'.
[ 2865.121404][T22624] netlink: 'syz.2.15465': attribute type 2 has an invalid length.
[ 2865.155326][T22624] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15465'.
[ 2865.247974][T21247] device .*! left promiscuous mode
[ 2865.325584][T22622] can: request_module (can-proto-0) failed.
[ 2865.463610][T22585] chnl_net:caif_netlink_parms(): no params data found
[ 2866.152244][T22585] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2866.174336][T22585] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2866.189663][T22585] device bridge_slave_0 entered promiscuous mode
[ 2866.257465][T22585] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2866.264898][T22585] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2866.281177][T22585] device bridge_slave_1 entered promiscuous mode
[ 2866.394506][T22585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2866.465658][T22657] FAULT_INJECTION: forcing a failure.
[ 2866.465658][T22657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2866.480112][ T9952] Bluetooth: hci0: command 0x041b tx timeout
[ 2866.500076][T22657] CPU: 1 PID: 22657 Comm: syz.2.15472 Not tainted syzkaller #0
[ 2866.507699][T22657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2866.517792][T22657] Call Trace:
[ 2866.521092][T22657]  <TASK>
[ 2866.524037][T22657]  dump_stack_lvl+0x188/0x24e
[ 2866.528738][T22657]  ? show_regs_print_info+0x12/0x12
[ 2866.533961][T22657]  ? load_image+0x410/0x410
[ 2866.538512][T22657]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2866.543567][T22657]  should_fail_ex+0x390/0x4c0
[ 2866.548293][T22657]  _copy_from_user+0x2c/0x170
[ 2866.553018][T22657]  dev_ethtool+0xc2/0x12f0
[ 2866.557528][T22657]  ? ethtool_get_module_eeprom_call+0x170/0x170
[ 2866.563876][T22657]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2866.568999][T22657]  ? full_name_hash+0x8e/0xe0
[ 2866.573758][T22657]  ? dev_load+0x1d/0x1e0
[ 2866.578060][T22657]  ? dev_load+0x1d/0x1e0
[ 2866.582376][T22657]  dev_ioctl+0x474/0xe80
[ 2866.586681][T22657]  sock_do_ioctl+0x245/0x320
[ 2866.591361][T22657]  ? sock_show_fdinfo+0xb0/0xb0
[ 2866.596273][T22657]  ? lock_chain_get_class+0xa1/0xb0
[ 2866.601528][T22657]  ? rcu_is_watching+0x11/0xa0
[ 2866.606360][T22657]  sock_ioctl+0x48a/0x700
[ 2866.610747][T22657]  ? sock_poll+0x430/0x430
[ 2866.615230][T22657]  ? security_file_ioctl+0x70/0xa0
[ 2866.620413][T22657]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2866.625409][T22657]  ? security_file_ioctl+0x7c/0xa0
[ 2866.630584][T22657]  ? sock_poll+0x430/0x430
[ 2866.635093][T22657]  __se_sys_ioctl+0xfa/0x170
[ 2866.639752][T22657]  do_syscall_64+0x4c/0xa0
[ 2866.644228][T22657]  ? clear_bhb_loop+0x60/0xb0
[ 2866.648975][T22657]  ? clear_bhb_loop+0x60/0xb0
[ 2866.653745][T22657]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2866.659697][T22657] RIP: 0033:0x7fb49cd9fb19
[ 2866.664164][T22657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2866.683866][T22657] RSP: 002b:00007fb49dc6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2866.692339][T22657] RAX: ffffffffffffffda RBX: 00007fb49d025fa0 RCX: 00007fb49cd9fb19
[ 2866.700364][T22657] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000012
[ 2866.708383][T22657] RBP: 00007fb49dc6d090 R08: 0000000000000000 R09: 0000000000000000
[ 2866.716406][T22657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2866.724427][T22657] R13: 00007fb49d026038 R14: 00007fb49d025fa0 R15: 00007ffd5df495a8
[ 2866.732466][T22657]  </TASK>
[ 2866.744975][T22585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2866.909310][T22585] team0: Port device team_slave_0 added
[ 2866.964867][T22585] team0: Port device team_slave_1 added
[ 2867.041534][T22585] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2867.048577][T22585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2867.124222][T22585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2867.165925][T22585] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2867.173073][T22585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2867.210871][T22585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2867.362817][T22585] device hsr_slave_0 entered promiscuous mode
[ 2867.372144][T22585] device hsr_slave_1 entered promiscuous mode
[ 2867.378910][T22585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2867.388003][T22585] Cannot create hsr debugfs directory
[ 2867.828948][T22675] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15473'.
[ 2867.875433][T22675] device bond0 entered promiscuous mode
[ 2867.898825][T22675] device bond_slave_0 entered promiscuous mode
[ 2867.950192][T22675] device bond_slave_1 entered promiscuous mode
[ 2868.046350][T21247] device bridge_slave_0 left promiscuous mode
[ 2868.060863][T21247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2868.122785][T21247] device veth1_macvtap left promiscuous mode
[ 2868.135681][T21247] device veth0_macvtap left promiscuous mode
[ 2868.148798][T21247] device veth1_vlan left promiscuous mode
[ 2868.162454][T21247] device veth0_vlan left promiscuous mode
[ 2868.434679][T22695] netlink: 'syz.4.15478': attribute type 2 has an invalid length.
[ 2868.465821][T22695] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15478'.
[ 2868.512887][T21247] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 2868.556021][T22697] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.15477'.
[ 2868.565861][ T9952] Bluetooth: hci0: command 0x040f tx timeout
[ 2868.727527][T22697] can: request_module (can-proto-0) failed.
[ 2869.194853][T21247] team0 (unregistering): Port device team_slave_1 removed
[ 2869.282091][T21247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2869.290998][T21247] device bond_slave_1 left promiscuous mode
[ 2869.336037][T21247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2869.346662][T21247] device bond_slave_0 left promiscuous mode
[ 2869.526079][T21247] team0 (unregistering): Port device dummy0 removed
[ 2869.577246][T21247] bond0 (unregistering): Released all slaves
[ 2869.669680][T22677] device bridge_slave_1 left promiscuous mode
[ 2869.676008][T22677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2869.695961][T22677] device bridge_slave_0 left promiscuous mode
[ 2869.705586][T22677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2869.797885][T22696] netlink: 'syz.2.15477': attribute type 12 has an invalid length.
[ 2869.809606][T22696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15477'.
[ 2869.911529][T22704] netlink: 'syz.3.15479': attribute type 12 has an invalid length.
[ 2869.959899][T22704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15479'.
[ 2869.983241][T22705] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15479'.
[ 2870.451994][T22704] can: request_module (can-proto-0) failed.
[ 2870.639569][T20222] Bluetooth: hci0: command 0x0419 tx timeout
[ 2873.339271][T22736] syz.3.15488[22736] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2873.346343][T22735] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.15487'.
[ 2873.372009][T22736] syz.3.15488[22736] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2873.452871][T22585] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2873.553638][T22585] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2873.582912][T22585] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2873.617442][T22585] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2873.636799][T22742] netlink: 'syz.1.15490': attribute type 2 has an invalid length.
[ 2873.661512][T22742] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15490'.
[ 2873.686943][T22745] syz.3.15491[22745] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2873.687114][T22745] syz.3.15491[22745] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2873.841353][T22585] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2873.885591][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2873.894642][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2873.908297][T22585] 8021q: adding VLAN 0 to HW filter on device team0
[ 2873.921502][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2873.932187][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2873.942140][T21241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2873.949287][T21241] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2873.958359][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2873.976787][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2873.990347][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2874.007385][T21235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2874.014604][T21235] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2874.036566][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2874.046359][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2874.068051][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2874.079076][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2874.090330][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2874.099233][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2874.114180][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2874.138048][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2874.146829][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2874.171562][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2874.183083][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2874.199232][T22585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2874.513351][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2874.523939][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2874.543412][T22585] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2874.581708][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2874.597066][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2874.613314][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2874.625763][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2874.638349][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2874.655514][T21235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2874.668209][T22585] device veth0_vlan entered promiscuous mode
[ 2874.697523][T22585] device veth1_vlan entered promiscuous mode
[ 2874.752986][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2874.765206][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2874.777782][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2874.793638][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2874.813103][T22585] device veth0_macvtap entered promiscuous mode
[ 2874.830044][T22585] device veth1_macvtap entered promiscuous mode
[ 2874.866888][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2874.877907][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2874.896452][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2874.907765][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2874.919461][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2874.938004][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2874.948520][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2874.960381][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2874.972914][T22585] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2874.986557][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2874.996062][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2875.005956][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2875.016059][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2875.026904][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2875.044186][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2875.056294][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2875.067109][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2875.078306][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2875.089754][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2875.099848][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2875.111312][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2875.137539][T22585] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2875.147633][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2875.158184][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2875.172804][T22585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2875.183421][T22585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2875.193125][T22585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2875.203184][T22585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2875.287628][T21235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2875.299807][T21235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2875.325882][T21247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2875.348268][T21242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2875.364152][T21242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2875.385237][T21241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2876.143130][T22797] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 2876.446071][T22797] can: request_module (can-proto-0) failed.
[ 2876.555848][T22794] netlink: 'syz.0.15493': attribute type 12 has an invalid length.
[ 2876.582770][T22794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 2876.686253][T22805] netlink: 'syz.1.15497': attribute type 19 has an invalid length.
[ 2877.804425][T22834] netlink: 'syz.1.15507': attribute type 3 has an invalid length.
[ 2877.812630][T22832] netlink: 'syz.3.15505': attribute type 39 has an invalid length.
[ 2877.857538][T22834] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15507'.
[ 2878.087767][T22834] netlink: 'syz.1.15507': attribute type 21 has an invalid length.
[ 2878.149738][T22834] netlink: 'syz.1.15507': attribute type 6 has an invalid length.
[ 2878.267279][T22834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15507'.
[ 2878.369465][T22841] netlink: 'syz.0.15508': attribute type 39 has an invalid length.
[ 2878.584256][T22847] netlink: 'syz.2.15509': attribute type 21 has an invalid length.
[ 2878.612841][T22847] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15509'.
[ 2878.656449][T22849] FAULT_INJECTION: forcing a failure.
[ 2878.656449][T22849] name failslab, interval 1, probability 0, space 0, times 0
[ 2878.708535][T22849] CPU: 1 PID: 22849 Comm: syz.3.15510 Not tainted syzkaller #0
[ 2878.716179][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 2878.726283][T22849] Call Trace:
[ 2878.729602][T22849]  <TASK>
[ 2878.732573][T22849]  dump_stack_lvl+0x188/0x24e
[ 2878.737300][T22849]  ? show_regs_print_info+0x12/0x12
[ 2878.742541][T22849]  ? load_image+0x410/0x410
[ 2878.747084][T22849]  ? __might_sleep+0xd0/0xd0
[ 2878.751707][T22849]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2878.756792][T22849]  should_fail_ex+0x390/0x4c0
[ 2878.761508][T22849]  should_failslab+0x5/0x20
[ 2878.766037][T22849]  slab_pre_alloc_hook+0x59/0x300
[ 2878.771192][T22849]  ? sk_prot_alloc+0xe7/0x210
[ 2878.775898][T22849]  __kmem_cache_alloc_node+0x4f/0x270
[ 2878.781306][T22849]  ? sk_prot_alloc+0xe7/0x210
[ 2878.786010][T22849]  __kmalloc+0xa3/0x240
[ 2878.790215][T22849]  sk_prot_alloc+0xe7/0x210
[ 2878.794744][T22849]  ? sk_alloc+0x20/0x330
[ 2878.799014][T22849]  sk_alloc+0x36/0x330
[ 2878.803114][T22849]  ? bpf_ctx_init+0x154/0x190
[ 2878.807820][T22849]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 2878.813219][T22849]  ? __fget_files+0x28/0x460
[ 2878.817845][T22849]  ? __fget_files+0x3fc/0x460
[ 2878.822570][T22849]  ? cpu_online+0xa0/0xa0
[ 2878.826935][T22849]  bpf_prog_test_run+0x31c/0x390
[ 2878.831914][T22849]  __sys_bpf+0x62b/0x780
[ 2878.836198][T22849]  ? bpf_link_show_fdinfo+0x550/0x550
[ 2878.841632][T22849]  ? lock_chain_count+0x20/0x20
[ 2878.846524][T22849]  __x64_sys_bpf+0x78/0x90
[ 2878.850983][T22849]  do_syscall_64+0x4c/0xa0
[ 2878.855435][T22849]  ? clear_bhb_loop+0x60/0xb0
[ 2878.860144][T22849]  ? clear_bhb_loop+0x60/0xb0
[ 2878.864865][T22849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2878.870790][T22849] RIP: 0033:0x7fb93659fb19
[ 2878.875236][T22849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2878.894870][T22849] RSP: 002b:00007fb93738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2878.903312][T22849] RAX: ffffffffffffffda RBX: 00007fb936825fa0 RCX: 00007fb93659fb19
[ 2878.911315][T22849] RDX: 0000000000000050 RSI: 0000200000001380 RDI: 000000000000000a
[ 2878.919310][T22849] RBP: 00007fb93738f090 R08: 0000000000000000 R09: 0000000000000000
[ 2878.927337][T22849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2878.935352][T22849] R13: 00007fb936826038 R14: 00007fb936825fa0 R15: 00007fff82661ba8
[ 2878.943365][T22849]  </TASK>
[ 2879.619026][T22874] ¥: port 1(team0) entered blocking state
[ 2879.653166][T22874] ¥: port 1(team0) entered disabled state
[ 2879.696631][T22874] device team0 entered promiscuous mode
[ 2879.757661][T22874] device team_slave_0 entered promiscuous mode
[ 2879.800073][T22874] device team_slave_1 entered promiscuous mode
[ 2881.045103][T22905] netlink: 'syz.0.15527': attribute type 3 has an invalid length.
[ 2881.079882][T22905] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15527'.
[ 2883.275615][T22904] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.15527'.
Stopping sshd: stopped /usr/sbin/sshd (pid 4030)
OK
[ 2883.771122][T22914] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15528'.
[ 2883.896755][T22914] netlink: 'syz.4.15528': attribute type 3 has an invalid length.
[ 2883.925488][T22914] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15528'.
Stopping crond: stopped /usr/sbin/crond (pid 4016)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 3936)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: done
Stopping klogd: OK
Stopping acpid: OK
Stopping syslogd: stopped /sbin/syslogd (pid 3624)
OK
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system poweroff
[ 2896.538110][T21241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2896.693818][T21241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2896.751709][T21241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2896.838848][T21241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2897.364521][T23025] kvm: exiting hardware virtualization
[ 2897.371589][T23025] smc: removing ib device rxe0
[ 2897.389153][T23025] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 2897.465255][T23025] ACPI: PM: Preparing to enter system sleep state S5
[ 2897.476066][T23025] reboot: Power down
serialport: VM disconnected.