last executing test programs:

9.071416369s ago: executing program 3 (id=2995):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) (fail_nth: 15)

8.040338765s ago: executing program 3 (id=2997):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$kcm(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a001140060000000360", 0x3a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x8, [{0xf, 0x0, 0x2}, {0xe, 0x0, 0xf}, {0x7, 0x5, 0x3}, {0x10, 0x0, 0x2f}, {0xf, 0x4, 0x8001}]}, @float={0x5, 0x0, 0x0, 0x10, 0xc}, @const={0xb, 0x0, 0x0, 0xa, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x30, 0x10, 0x0, 0x7f, 0x61, 0x2e, 0x61]}}, &(0x7f0000000980)=""/211, 0x8e, 0xd3, 0x1, 0x400}, 0x28)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, &(0x7f00000001c0), 0x0}, 0x20)
close(r6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={r6, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x29, &(0x7f00000026c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x30, 0x8, 0x8, &(0x7f0000002780)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r7, <r10=>0xffffffffffffffff}, &(0x7f0000002900), &(0x7f0000002940)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r6, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, r9, r6, 0x0, &(0x7f0000002a00)=[r10, r5, r5, r5, r8, r8], &(0x7f0000002a40), 0x10, 0x7}, 0x94)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc000000, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0xcb, &(0x7f0000000300)=""/203, 0x41100, 0x10, '\x00', r3, @fallback=0x1, r4, 0x8, &(0x7f0000000ac0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0xa, 0x1, 0x4}, 0x10, r9, r11, 0x6, &(0x7f0000000b40)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000b80)=[{0x5, 0x2, 0x3, 0x5}, {0x0, 0x4, 0x0, 0x6}, {0x5, 0x2, 0xb, 0x7}, {0x0, 0x5, 0xb}, {0x2, 0x2, 0xd, 0x6}, {0x0, 0x3, 0xa, 0x1}], 0x10, 0x2}, 0x94)

7.40577798s ago: executing program 3 (id=3000):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r5 = openat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x1, &(0x7f0000000280)=@raw=[@exit], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000013c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001400)=[{0x4, 0x4, 0x9, 0x8}, {0x1, 0x3, 0x3, 0x5}, {0x2, 0x2, 0x2, 0x7}, {0x5, 0x2, 0xe, 0x6}], 0x10, 0x950}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006c0000008500000017000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc0189436, 0x2000141a)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
r10 = syz_clone(0x12021000, &(0x7f0000001500)="9cf99a6ee7bfd5751069abdaeeb34341508d8eb2f7a7a5dc0f2b5604b420888f747129765006a6164a0eb1a61be3f27e0977822b3c0aaa64e39019e057a4923e3af71b3e756be48a2d8e7d8efc5dc9366b2c33b382ff92f2eeaeb197d4aa0f42a81824d13470107585d9cadb1fd1a05520e030c144530b060f49a4fde123ee3ce66f7023c180fa8bf0a9bd0d635531bf01995b0bbb7dc4248552f6b3b1d69fa2203b91acdeb12a36280e6d5e2674ab0b24689d0f99d5a2f796e346ec6e81c5a6", 0xc0, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="efbe2520e4c44bdeea6ba885f562848d22e017936836cbeecdc3859e760b26377d695a3f87d7d798be3bb105c3b84872e33f178ce9a6434e10ababa2fcb08c202e38d02074a60def51a1bbeec06b137ebd222ff92bde3ea33d1d00b87e44b10d8f4de869f4798350babb3b58355bcff8d7622e47173c5086e1d2258865d601")
r11 = syz_open_procfs$namespace(0x0, &(0x7f00000016c0)='ns/mnt\x00')
r12 = openat$cgroup_subtree(r0, &(0x7f0000001740), 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="e2f4ec2b04562fcb70d16ca0ec680bc73885db2d1bce5a0633847d10a221129fbe82f2b2184b92b5aa9ab7e4990c95e53b6afd9f87517437dc953bf713657e6c1f1ccc100c01b3c2bd4704", 0x4b}], 0x1, &(0x7f0000001780)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r5, r6, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r7, r1, r1, r8, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r1, r11, r12]}}], 0xf8, 0x40001}, 0x800)
sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4)
r13 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r13, &(0x7f0000000080)='FROZEN\x00', 0x7)
mkdirat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x1ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={r7, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000018c0)=[0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001900)=[0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000001980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0xd, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x765f, '\x00', r14, r8, 0x4, 0x3, 0x4}, 0x50)

6.797149435s ago: executing program 3 (id=3004):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="63202a3a2a2172778e00"], 0xa)

5.807344229s ago: executing program 3 (id=3006):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff21000097ff00000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r3 = perf_event_open(&(0x7f0000000a00)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00')

5.552561145s ago: executing program 3 (id=3011):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3, 0x7, 0x0, 0x8, 0x0, 0xfffffffffffffff7, 0x4c040, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000680), 0xf}, 0x40, 0x0, 0x42, 0x7, 0x8000, 0x4, 0x2, 0x0, 0xc4520000, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x7, 0x3, 0x6, 0xc8, 0x0, 0x1, 0x100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50, 0x2, @perf_config_ext={0x7fffffffffffffff, 0xbb3}, 0x4, 0x10001, 0xbd, 0x1, 0xfffffffffffffffa, 0x6, 0x100, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x1, r0, 0xee7d1c6b0ef5051b)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0}, 0x4040048)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="be74c464e3a090", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x10, 0x0, 0x9}, 0x10, 0x1f6db, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0), 0x10, 0x27d}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$kcm(0xa, 0x2, 0x3a)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0x8000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000040000000000001202000000020000000000001204000000070000000000001201000000040000000000000700000000002e305f5f612e2e009ca9c0aad27db5ebc2795aff73ff1c55a821166a0489f19d2d460dc982e3546bcb6787a048e28298cf457e79eb0ba58ea438c7fa44f9d54119d062c7e0a509991f2204e1e30f4471e0e1cc63"], 0x0, 0x51, 0x0, 0x1}, 0x28)
r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000380)=ANY=[], 0x31)

5.316345361s ago: executing program 1 (id=3013):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2008, 0x4}, 0x20)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000010008121687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012010400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661000000000000d5a3a000003a17b259b640cce851070d00103648ac61d1bdba65c514bbba2379bdbb260000000000000080373a24cbd99f0c59b23c28b7becf0f98b432ed1fd0d34b56cfcad18b1556894e3592334a8e92ca1b2405ae554109eae75ee0182f0b3e1806195c01712f5028c96fd0e23ff6fe", 0xd8}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x35, 0x1, 0x3}, {0x4d, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x4}, {}, {0x6}]})
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f0"], 0x0}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x40009}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r4, 0x4}, 0x38)

4.145307709s ago: executing program 1 (id=3021):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x200720e, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50)

3.851100006s ago: executing program 1 (id=3022):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x4, 0x0, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000008400002002000000"], 0x10}, 0x0)
recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000080)=""/124, 0x7c}], 0x4, &(0x7f0000000540)=""/16, 0x10}, 0x2001)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES32=r2], 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33)

2.950592428s ago: executing program 2 (id=3029):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002e40), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e00)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x3d, 0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}, @var={0xb, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x0, 0x61]}}, &(0x7f0000001e00)=""/4096, 0x7d, 0x1000, 0x1, 0x6, 0x10000, @value=r0}, 0x28)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d0ea2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008800)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8903, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000c040000000000002e"], 0x0, 0x4d}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

2.793218482s ago: executing program 1 (id=3031):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="63202a3a2a2172778e00"], 0xa)

2.668921175s ago: executing program 1 (id=3032):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0xfeff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)

2.536652809s ago: executing program 1 (id=3033):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1%\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r4 = getpid()
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, r4, 0x4000000000, 0xffffffffffffffff, 0xd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, 0x0})
close(r5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETVNETLE(r7, 0x8004745a, &(0x7f0000000180))
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x40, 0x8, 0x95, 0x7f, 0x0, 0x100000000, 0x200, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x571efb4b, 0x4, @perf_config_ext={0x5, 0x7}, 0x108, 0x4, 0x8001, 0x4, 0x5, 0x4000000, 0x10, 0x0, 0x800, 0x0, 0xd}, 0xffffffffffffffff, 0x0, r2, 0xb)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x86, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000b40)=r8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0)

2.373407272s ago: executing program 0 (id=3034):
r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xe}, 0x8200, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20)

2.292307824s ago: executing program 2 (id=3035):
r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xe}, 0xa200, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="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"], 0x6b}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x19, 0x0, 0xfcd8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd32000000000000001fff92e", 0x14}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = socket$kcm(0x1e, 0x7, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x1, 0x1, 0x3}], 0x10, 0x7}, 0x94)
r8 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0xf0}, 0x40)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x81, 0x21100, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x5}, 0x50)
r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001100)={0x0, r1}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
r12 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r12, r10, 0x0, 0x0, 0x0}, 0x30)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f00000010c0)='+.\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20)

2.009680221s ago: executing program 0 (id=3036):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffff7fffffff, 0x69296873}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000500), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)
write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2b, 'net'}, {0x2b, 'memory'}, {0x2b, 'net'}, {0x2d, 'rlimit'}, {0x2b, 'cpuset'}, {0x2b, 'cpuacct'}]}, 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x7c, &(0x7f0000000480)=""/124}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)

1.789207766s ago: executing program 2 (id=3037):
r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xe}, 0x8200, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) (fail_nth: 2)

1.693385789s ago: executing program 0 (id=3038):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x803}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x372efe22}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r3, 0x29, 0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0xfeff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.495412474s ago: executing program 2 (id=3039):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="63202a3a2a2172778e00"], 0xa)

1.009033246s ago: executing program 2 (id=3040):
socket$kcm(0x10, 0x2, 0x10) (async)
r0 = socket$kcm(0x10, 0x2, 0x2) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000040000060000000020000000850000002700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) (async)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
close(r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x4f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async)
recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/215, 0xd7}], 0x1}, 0x4880) (async)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES8=r8], 0xfe33)
recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) (async)
sendmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) (async)
close(r0)

771.410881ms ago: executing program 0 (id=3041):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fcf5120000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef)

491.427918ms ago: executing program 0 (id=3042):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502ea", 0x1f}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x8100000)

337.197222ms ago: executing program 0 (id=3043):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x4, 0x8, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x4}, 0x0, 0x85, 0x0, 0x9, 0x400, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2f0c1bad, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)=r0}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0xf, 0x3}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x0]}}, &(0x7f00000005c0)=""/139, 0x3b, 0x8b, 0x7fff, 0x1, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000800)={&(0x7f00000002c0)="34f4a33361b67c942d7f22cade544044d58ace511266c1ff684597c6cafdd39880e7a3917b9b7589867d56f5f327386b05c50a60bebcec678b704c29ff606febe6dd962546b970127b33926c0152f18bc0261ef88e93b795ecbc5252e29e2540020fc5556ebdfd", 0x0, &(0x7f00000006c0)="d0b63652", &(0x7f0000000740)="0d036b9336bc781242dec1ae54247103d62e73676306a89a26fb3917baddb9d3ec9bfafd1a98444be99ac58867d11694bb7834b534c3c1299c3a88952364c639f7a43cc4742c20e34f687f80dce2c6921d0a56acc1849aea4b484412561d68202117b7e4269a9099c6c2d75273c53f1c350c1c9e788fb82f7dfcbcdd379032b155dbefd364baeb164d88483b30df3792bf19eb2298d754c138c2f79085", 0x2, r13, 0x4}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1a, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xffff9f68}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x3, 0xd, &(0x7f0000000540)=""/13, 0x41000, 0x21, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[r5, r6, r7, r8, r11, r12, r13], &(0x7f00000009c0)=[{0x3, 0x5, 0x4, 0x6}, {0x1, 0x2, 0x1, 0x8}], 0x10, 0xce6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

0s ago: executing program 2 (id=3044):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x480}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5, 0x2000000}}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.360629][T14093] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  679.369061][T14093] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  679.377078][T14093] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000048
[  679.385070][T14093] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  679.393082][T14093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.401082][T14093] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  679.409475][T14093]  </TASK>
[  679.440583][T14093] ERROR: Out of memory at tomoyo_realpath_from_path.
[  681.733443][T14133] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2594'.
[  682.161843][T14140] bridge0: port 4(team0) entered disabled state
[  682.201256][T14140] hsr0: left allmulticast mode
[  682.230545][T14140] hsr_slave_0: left allmulticast mode
[  682.254114][T14140] hsr_slave_1: left allmulticast mode
[  682.278143][T14140] bridge0: port 3(hsr0) entered disabled state
[  682.335728][T14140] bridge_slave_1: left allmulticast mode
[  682.368464][T14148] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2597'.
[  682.377091][T14140] bridge_slave_1: left promiscuous mode
[  682.386690][T14148] netlink: get zone limit has 4 unknown bytes
[  682.450827][T14140] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.527716][T14140] bridge_slave_0: left allmulticast mode
[  682.533511][T14140] bridge_slave_0: left promiscuous mode
[  682.556734][T14140] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.587232][T14158] netlink: 'syz.3.2603': attribute type 10 has an invalid length.
[  683.724483][T14162] netlink: 'syz.0.2604': attribute type 3 has an invalid length.
[  683.775820][T14162] netlink: 'syz.0.2604': attribute type 5 has an invalid length.
[  684.374620][T14155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.779036][T14158] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  684.813658][T14158] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  684.840536][T14158] team0: Port device wlan1 added
[  684.886940][T14157] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2604'.
[  685.066608][T14168] netlink: 'syz.2.2605': attribute type 1 has an invalid length.
[  685.156688][T14174] netlink: 'syz.3.2606': attribute type 3 has an invalid length.
[  685.188941][T14174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2606'.
[  685.483635][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.240631][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  686.256826][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  686.807382][T14184] delete_channel: no stack
[  687.352063][T14203] FAULT_INJECTION: forcing a failure.
[  687.352063][T14203] name failslab, interval 1, probability 0, space 0, times 0
[  687.365117][T14203] CPU: 1 PID: 14203 Comm: syz.0.2617 Not tainted syzkaller #0
[  687.372706][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  687.382817][T14203] Call Trace:
[  687.386135][T14203]  <TASK>
[  687.389101][T14203]  dump_stack_lvl+0x18c/0x250
[  687.393919][T14203]  ? show_regs_print_info+0x20/0x20
[  687.399177][T14203]  ? load_image+0x420/0x420
[  687.403904][T14203]  ? skb_network_protocol+0x529/0x790
[  687.409424][T14203]  should_fail_ex+0x394/0x4c0
[  687.414211][T14203]  should_failslab+0x9/0x20
[  687.418880][T14203]  slab_pre_alloc_hook+0x59/0x300
[  687.423985][T14203]  kmem_cache_alloc+0x5a/0x2c0
[  687.429092][T14203]  ? skb_clone+0x1eb/0x370
[  687.433589][T14203]  skb_clone+0x1eb/0x370
[  687.437883][T14203]  ? dev_queue_xmit_nit+0x204/0xba0
[  687.443136][T14203]  dev_queue_xmit_nit+0x23f/0xba0
[  687.448315][T14203]  ? dev_queue_xmit_nit+0x2d/0xba0
[  687.453610][T14203]  dev_hard_start_xmit+0x150/0x790
[  687.458796][T14203]  __dev_queue_xmit+0x1be8/0x37e0
[  687.463877][T14203]  ? __dev_queue_xmit+0x272/0x37e0
[  687.469144][T14203]  ? netdev_core_pick_tx+0x370/0x370
[  687.474456][T14203]  ? ref_tracker_alloc+0x347/0x4b0
[  687.479682][T14203]  ? __copy_skb_header+0xa3/0x4a0
[  687.484734][T14203]  ? __asan_memcpy+0x40/0x70
[  687.489382][T14203]  ? __skb_clone+0x5c/0x6c0
[  687.494102][T14203]  ? __skb_clone+0x446/0x6c0
[  687.498812][T14203]  ? skb_clone+0x21f/0x370
[  687.503245][T14203]  __netlink_deliver_tap+0x579/0x7f0
[  687.508580][T14203]  ? netlink_deliver_tap+0x2e/0x1b0
[  687.513817][T14203]  netlink_deliver_tap+0x19c/0x1b0
[  687.519061][T14203]  netlink_unicast+0x77b/0x930
[  687.523866][T14203]  netlink_sendmsg+0x8d0/0xbf0
[  687.528653][T14203]  ? netlink_getsockopt+0x590/0x590
[  687.533952][T14203]  ? apparmor_socket_sendmsg+0x8e/0x330
[  687.540211][T14203]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  687.545776][T14203]  ? security_socket_sendmsg+0x80/0xa0
[  687.551421][T14203]  ? netlink_getsockopt+0x590/0x590
[  687.556642][T14203]  ____sys_sendmsg+0x61b/0x980
[  687.561522][T14203]  ? __asan_memset+0x22/0x40
[  687.566577][T14203]  ? __sys_sendmsg_sock+0x30/0x30
[  687.571618][T14203]  ? __import_iovec+0x5f2/0x850
[  687.576589][T14203]  ? import_iovec+0x73/0xa0
[  687.581197][T14203]  ___sys_sendmsg+0x2a6/0x360
[  687.585890][T14203]  ? get_pid_task+0x20/0x1e0
[  687.590599][T14203]  ? __sys_sendmsg+0x2b0/0x2b0
[  687.595405][T14203]  ? __lock_acquire+0x7d80/0x7d80
[  687.600481][T14203]  __se_sys_sendmsg+0x1d0/0x2c0
[  687.605438][T14203]  ? perf_trace_preemptirq_template+0x269/0x330
[  687.611723][T14203]  ? __x64_sys_sendmsg+0x80/0x80
[  687.616724][T14203]  ? lockdep_hardirqs_on+0x98/0x150
[  687.621978][T14203]  do_syscall_64+0x55/0xb0
[  687.626418][T14203]  ? clear_bhb_loop+0x40/0x90
[  687.631205][T14203]  ? clear_bhb_loop+0x40/0x90
[  687.635985][T14203]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  687.641999][T14203] RIP: 0033:0x7f4ead99e159
[  687.646429][T14203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.666047][T14203] RSP: 002b:00007f4eae8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  687.674500][T14203] RAX: ffffffffffffffda RBX: 00007f4eadc25fa0 RCX: 00007f4ead99e159
[  687.682498][T14203] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005
[  687.690589][T14203] RBP: 00007f4eae8bf090 R08: 0000000000000000 R09: 0000000000000000
[  687.698765][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  687.706857][T14203] R13: 00007f4eadc26038 R14: 00007f4eadc25fa0 R15: 00007ffec41008e8
[  687.714873][T14203]  </TASK>
[  687.953473][T14212] netlink: 'syz.0.2617': attribute type 3 has an invalid length.
[  687.972883][T14203] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2617'.
[  688.049421][T14212] netlink: 'syz.0.2617': attribute type 5 has an invalid length.
[  688.229328][T14215] netlink: 'syz.2.2620': attribute type 3 has an invalid length.
[  688.317852][T14215] netlink: 'syz.2.2620': attribute type 5 has an invalid length.
[  688.854011][T14227] netlink: 'syz.3.2626': attribute type 10 has an invalid length.
[  688.875838][T14227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2626'.
[  688.927693][T14227] 8021q: adding VLAN 0 to HW filter on device team0
[  688.945320][T14227] ¥: port 1(team0) entered disabled state
[  688.963546][T14227] bridge0: port 5(team0) entered blocking state
[  688.977053][T14227] bridge0: port 5(team0) entered disabled state
[  688.998300][T14227] bridge0: port 5(team0) entered blocking state
[  689.005013][T14227] bridge0: port 5(team0) entered forwarding state
[  689.578032][T14249] netlink: 'syz.2.2633': attribute type 2 has an invalid length.
[  689.635232][T14249] netlink: 'syz.2.2633': attribute type 8 has an invalid length.
[  689.673431][T14249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2633'.
[  689.728905][T14253] netlink: 'syz.1.2635': attribute type 4 has an invalid length.
[  689.756746][T14253] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2635'.
[  691.413999][T14290] raw_sendmsg: syz.3.2647 forgot to set AF_INET. Fix it!
[  692.346735][T14309] netlink: 'syz.3.2652': attribute type 10 has an invalid length.
[  692.368741][T14309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2652'.
[  692.586695][T14311] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2653'.
[  692.905591][T14317] netlink: 'syz.3.2656': attribute type 2 has an invalid length.
[  692.986630][T14317] netlink: 'syz.3.2656': attribute type 8 has an invalid length.
[  693.008949][T14317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2656'.
[  693.341512][T14325] netlink: 'syz.3.2657': attribute type 3 has an invalid length.
[  693.388168][T14325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2657'.
[  694.187919][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2663'.
[  696.061277][T14375] netlink: 'syz.2.2672': attribute type 10 has an invalid length.
[  696.130021][T14375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2672'.
[  696.167781][T14375] team0: left allmulticast mode
[  696.187748][T14375] team_slave_0: left allmulticast mode
[  696.208212][T14376] netlink: 'syz.0.2673': attribute type 3 has an invalid length.
[  696.238220][T14375] team_slave_1: left allmulticast mode
[  696.243797][T14375] macvlan0: left allmulticast mode
[  696.296515][T14376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2673'.
[  696.326549][T14375] dummy0: left allmulticast mode
[  696.331693][T14375] bond0: left allmulticast mode
[  696.386958][T14375] bond_slave_0: left allmulticast mode
[  696.392537][T14375] bond_slave_1: left allmulticast mode
[  696.455257][T14375] syz_tun: left allmulticast mode
[  696.466565][T14375] bridge0: left allmulticast mode
[  696.512584][T14375] team0: left promiscuous mode
[  696.567023][T14375] team_slave_0: left promiscuous mode
[  696.572760][T14375] team_slave_1: left promiscuous mode
[  696.608225][T14375] macvlan0: left promiscuous mode
[  696.613588][T14375] dummy0: left promiscuous mode
[  696.717502][T14375] bond0: left promiscuous mode
[  696.736262][T14375] bond_slave_0: left promiscuous mode
[  696.772125][T14375] bond_slave_1: left promiscuous mode
[  696.782727][T14386] FAULT_INJECTION: forcing a failure.
[  696.782727][T14386] name failslab, interval 1, probability 0, space 0, times 0
[  696.836560][T14386] CPU: 1 PID: 14386 Comm: syz.1.2676 Not tainted syzkaller #0
[  696.844155][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  696.847228][T12959] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  696.854330][T14386] Call Trace:
[  696.854350][T14386]  <TASK>
[  696.854361][T14386]  dump_stack_lvl+0x18c/0x250
[  696.854397][T14386]  ? show_regs_print_info+0x20/0x20
[  696.854421][T14386]  ? load_image+0x420/0x420
[  696.854446][T14386]  ? __might_sleep+0xe0/0xe0
[  696.886717][T14386]  ? __lock_acquire+0x7d80/0x7d80
[  696.891802][T14386]  should_fail_ex+0x394/0x4c0
[  696.896552][T14386]  should_failslab+0x9/0x20
[  696.901152][T14386]  slab_pre_alloc_hook+0x59/0x300
[  696.906240][T14386]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  696.911581][T14386]  __kmem_cache_alloc_node+0x53/0x250
[  696.917018][T14386]  ? __asan_memset+0x22/0x40
[  696.921721][T14386]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  696.927078][T14386]  kmalloc_trace+0x2a/0xe0
[  696.931814][T14386]  __xdp_reg_mem_model+0x1e3/0x5a0
[  696.936993][T14386]  ? kvmalloc_node+0x70/0x180
[  696.941911][T14386]  ? kvmalloc_node+0x70/0x180
[  696.946738][T14386]  ? xdp_reg_mem_model+0x40/0x40
[  696.951785][T14386]  xdp_reg_mem_model+0x22/0x40
[  696.956772][T14386]  bpf_test_run_xdp_live+0x262/0x1b30
[  696.962259][T14386]  ? verify_lock_unused+0x140/0x140
[  696.967502][T14386]  ? kasan_set_track+0x4e/0x70
[  696.972372][T14386]  ? __kasan_kmalloc+0x8f/0xa0
[  696.977267][T14386]  ? __kmalloc+0xb7/0x240
[  696.981614][T14386]  ? bpf_test_init+0x9f/0x140
[  696.986415][T14386]  ? bpf_prog_test_run+0x31f/0x390
[  696.991582][T14386]  ? __sys_bpf+0x49d/0x890
[  696.996049][T14386]  ? __x64_sys_bpf+0x7c/0x90
[  697.000836][T14386]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.006938][T14386]  ? xdp_convert_md_to_buff+0x330/0x330
[  697.012519][T14386]  ? __lock_acquire+0x7d80/0x7d80
[  697.017563][T14386]  ? __virt_addr_valid+0x10c/0x380
[  697.022787][T14386]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  697.029072][T14386]  ? _copy_from_user+0xa5/0xe0
[  697.033850][T14386]  ? bpf_test_init+0x119/0x140
[  697.038895][T14386]  ? xdp_convert_md_to_buff+0x5b/0x330
[  697.044807][T14386]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  697.050202][T14386]  ? __lock_acquire+0x7d80/0x7d80
[  697.055256][T14386]  ? dev_put+0x80/0x80
[  697.059350][T14386]  ? dev_put+0x80/0x80
[  697.063449][T14386]  bpf_prog_test_run+0x31f/0x390
[  697.068412][T14386]  __sys_bpf+0x49d/0x890
[  697.072671][T14386]  ? bpf_link_show_fdinfo+0x390/0x390
[  697.078093][T14386]  ? lock_chain_count+0x20/0x20
[  697.083050][T14386]  __x64_sys_bpf+0x7c/0x90
[  697.087485][T14386]  do_syscall_64+0x55/0xb0
[  697.091914][T14386]  ? clear_bhb_loop+0x40/0x90
[  697.096609][T14386]  ? clear_bhb_loop+0x40/0x90
[  697.101312][T14386]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.107218][T14386] RIP: 0033:0x7f4c7ad9e159
[  697.111668][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.131376][T14386] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  697.139907][T14386] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  697.147891][T14386] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  697.155879][T14386] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  697.163865][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  697.171860][T14386] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  697.179854][T14386]  </TASK>
[  697.197818][T14375] bridge0: left promiscuous mode
[  697.217438][T14375] ¥: port 1(team0) entered disabled state
[  697.559435][T14375] bridge0: port 4(team0) entered blocking state
[  697.640054][T14375] bridge0: port 4(team0) entered disabled state
[  697.667069][T14375] team0: entered allmulticast mode
[  697.672378][T14375] team_slave_0: entered allmulticast mode
[  697.756625][T14375] team_slave_1: entered allmulticast mode
[  697.762457][T14375] macvlan0: entered allmulticast mode
[  697.795313][T14375] dummy0: entered allmulticast mode
[  697.816528][T14375] bond0: entered allmulticast mode
[  697.822090][T14375] bond_slave_0: entered allmulticast mode
[  697.851829][T14375] bond_slave_1: entered allmulticast mode
[  697.861405][T14375] syz_tun: entered allmulticast mode
[  697.889990][T14375] bridge0: entered allmulticast mode
[  697.951306][T14375] team0: left allmulticast mode
[  697.956269][T14375] team_slave_0: left allmulticast mode
[  698.061052][T14375] team_slave_1: left allmulticast mode
[  698.069507][T14375] macvlan0: left allmulticast mode
[  698.079337][T14375] dummy0: left allmulticast mode
[  698.084362][T14375] bond0: left allmulticast mode
[  698.091761][T14375] bond_slave_0: left allmulticast mode
[  698.099585][T14375] bond_slave_1: left allmulticast mode
[  698.105382][T14375] syz_tun: left allmulticast mode
[  698.125109][T14375] bridge0: left allmulticast mode
[  698.157502][T14375] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  698.632519][T14403] netlink: 'syz.1.2681': attribute type 10 has an invalid length.
[  698.667066][T14403] team0: Device ipvlan1 failed to register rx_handler
[  698.996563][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2683'.
[  699.095204][T14412] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2683'.
[  699.207070][T12959] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  699.375205][T14419] netlink: 'syz.3.2687': attribute type 3 has an invalid length.
[  699.420074][T14419] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2687'.
[  701.162411][T14433] FAULT_INJECTION: forcing a failure.
[  701.162411][T14433] name failslab, interval 1, probability 0, space 0, times 0
[  701.188632][T14433] CPU: 1 PID: 14433 Comm: syz.1.2691 Not tainted syzkaller #0
[  701.196301][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  701.206925][T14433] Call Trace:
[  701.210254][T14433]  <TASK>
[  701.213229][T14433]  dump_stack_lvl+0x18c/0x250
[  701.217988][T14433]  ? show_regs_print_info+0x20/0x20
[  701.223285][T14433]  ? load_image+0x420/0x420
[  701.227917][T14433]  ? __might_sleep+0xe0/0xe0
[  701.232555][T14433]  ? __lock_acquire+0x7d80/0x7d80
[  701.237632][T14433]  should_fail_ex+0x394/0x4c0
[  701.242361][T14433]  should_failslab+0x9/0x20
[  701.246914][T14433]  slab_pre_alloc_hook+0x59/0x300
[  701.251997][T14433]  ? kvmalloc_node+0x70/0x180
[  701.256725][T14433]  ? kvmalloc_node+0x70/0x180
[  701.261446][T14433]  __kmem_cache_alloc_node+0x53/0x250
[  701.266876][T14433]  ? kvmalloc_node+0x70/0x180
[  701.271593][T14433]  __kmalloc_node+0xa6/0x240
[  701.276245][T14433]  kvmalloc_node+0x70/0x180
[  701.280799][T14433]  page_pool_create+0x1eb/0x5c0
[  701.285939][T14433]  bpf_test_run_xdp_live+0x203/0x1b30
[  701.291754][T14433]  ? bpf_dispatcher_xdp+0x800/0x1000
[  701.297142][T14433]  ? bpf_dispatcher_xdp+0x800/0x1000
[  701.302491][T14433]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  701.308432][T14433]  ? perf_trace_preemptirq_template+0x269/0x330
[  701.314754][T14433]  ? xdp_convert_md_to_buff+0x330/0x330
[  701.320574][T14433]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  701.327062][T14433]  ? _copy_from_user+0xa5/0xe0
[  701.331980][T14433]  ? bpf_test_init+0x119/0x140
[  701.336797][T14433]  ? xdp_convert_md_to_buff+0x5b/0x330
[  701.342399][T14433]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  701.347825][T14433]  ? __lock_acquire+0x7d80/0x7d80
[  701.352911][T14433]  ? dev_put+0x80/0x80
[  701.357042][T14433]  ? dev_put+0x80/0x80
[  701.361155][T14433]  bpf_prog_test_run+0x31f/0x390
[  701.366161][T14433]  __sys_bpf+0x49d/0x890
[  701.370458][T14433]  ? bpf_link_show_fdinfo+0x390/0x390
[  701.375900][T14433]  ? lock_chain_count+0x20/0x20
[  701.380878][T14433]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  701.386916][T14433]  __x64_sys_bpf+0x7c/0x90
[  701.391439][T14433]  do_syscall_64+0x55/0xb0
[  701.395928][T14433]  ? clear_bhb_loop+0x40/0x90
[  701.400659][T14433]  ? clear_bhb_loop+0x40/0x90
[  701.405432][T14433]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  701.411499][T14433] RIP: 0033:0x7f4c7ad9e159
[  701.415958][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.436048][T14433] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  701.444787][T14433] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  701.452822][T14433] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  701.461119][T14433] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  701.469323][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.477436][T14433] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  701.485647][T14433]  </TASK>
[  701.510492][T14433] page_pool_create() gave up with errno -12
[  701.682764][T14453] netlink: 'syz.3.2692': attribute type 10 has an invalid length.
[  701.725323][T14453] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  701.786792][T14453] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  701.796199][T14453] team0: Port device netdevsim0 added
[  701.896507][T14454] netlink: 'syz.3.2692': attribute type 10 has an invalid length.
[  701.926920][T14454] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  701.934432][T14454] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  702.073204][T14454] team0: Port device netdevsim0 removed
[  702.123983][T14454] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  702.557467][T12959] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  704.946420][T14482] netlink: 'syz.3.2702': attribute type 10 has an invalid length.
[  704.970129][T14482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2702'.
[  705.157037][T14486] wg2: entered promiscuous mode
[  705.166547][T14486] wg2: entered allmulticast mode
[  706.093454][T14515] FAULT_INJECTION: forcing a failure.
[  706.093454][T14515] name failslab, interval 1, probability 0, space 0, times 0
[  706.175179][T14515] CPU: 0 PID: 14515 Comm: syz.0.2714 Not tainted syzkaller #0
[  706.182909][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  706.193091][T14515] Call Trace:
[  706.196399][T14515]  <TASK>
[  706.199372][T14515]  dump_stack_lvl+0x18c/0x250
[  706.204168][T14515]  ? show_regs_print_info+0x20/0x20
[  706.209405][T14515]  ? load_image+0x420/0x420
[  706.213999][T14515]  should_fail_ex+0x394/0x4c0
[  706.218925][T14515]  should_failslab+0x9/0x20
[  706.223764][T14515]  slab_pre_alloc_hook+0x59/0x300
[  706.228877][T14515]  kmem_cache_alloc+0x5a/0x2c0
[  706.233720][T14515]  ? __nf_conntrack_alloc+0x93/0x370
[  706.239118][T14515]  __nf_conntrack_alloc+0x93/0x370
[  706.244290][T14515]  init_conntrack+0x166/0xe20
[  706.249038][T14515]  ? early_drop+0x7f0/0x7f0
[  706.253791][T14515]  ? nf_conntrack_find_get+0x670/0x670
[  706.259296][T14515]  ? __siphash_unaligned+0x25c/0x3d0
[  706.264824][T14515]  nf_conntrack_in+0xc29/0x15b0
[  706.270363][T14515]  ? nf_ct_pernet+0x270/0x270
[  706.275108][T14515]  ? ip6t_do_table+0x1cb/0x1570
[  706.280069][T14515]  ? ip6t_alloc_initial_table+0x640/0x640
[  706.286015][T14515]  ? ipv6_defrag+0x2d6/0x3a0
[  706.290726][T14515]  ? ipv6_conntrack_in+0x20/0x20
[  706.295701][T14515]  nf_hook_slow+0xbd/0x200
[  706.300240][T14515]  __ip6_local_out+0x784/0x8a0
[  706.305094][T14515]  ? __ip6_local_out+0x60c/0x8a0
[  706.310067][T14515]  ? ip6_dst_hoplimit+0x350/0x350
[  706.315220][T14515]  ? ip6_setup_cork+0xa4a/0xff0
[  706.320110][T14515]  ? __ip6_local_out+0x8a0/0x8a0
[  706.325160][T14515]  ? read_lock_is_recursive+0x20/0x20
[  706.330557][T14515]  ? ip6_make_skb+0x3f0/0x520
[  706.335269][T14515]  ip6_local_out+0x2a/0x130
[  706.339793][T14515]  ? ip6_send_skb+0x10a/0x380
[  706.344586][T14515]  ip6_send_skb+0x1cd/0x380
[  706.349113][T14515]  udp_v6_send_skb+0xbd8/0x1810
[  706.354051][T14515]  udpv6_sendmsg+0x1c08/0x2350
[  706.358940][T14515]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  706.363915][T14515]  ? udp_v6_early_demux+0xf90/0xf90
[  706.369229][T14515]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  706.375259][T14515]  ? __local_bh_enable_ip+0x13a/0x1c0
[  706.380744][T14515]  ? _local_bh_enable+0xa0/0xa0
[  706.385613][T14515]  ? inet_send_prepare+0x1ae/0x250
[  706.390873][T14515]  ? inet_send_prepare+0x1ae/0x250
[  706.396005][T14515]  ? inet6_sendmsg+0x5f/0xd0
[  706.400614][T14515]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  706.405835][T14515]  ____sys_sendmsg+0x61b/0x980
[  706.410897][T14515]  ? __sys_sendmsg_sock+0x30/0x30
[  706.416031][T14515]  ? __import_iovec+0x3fa/0x850
[  706.420919][T14515]  ? import_iovec+0x73/0xa0
[  706.425442][T14515]  ___sys_sendmsg+0x2a6/0x360
[  706.430140][T14515]  ? __sys_sendmsg+0x2b0/0x2b0
[  706.434949][T14515]  ? ktime_get+0x7f/0x280
[  706.439415][T14515]  __se_sys_sendmsg+0x1d0/0x2c0
[  706.444281][T14515]  ? perf_trace_preemptirq_template+0x269/0x330
[  706.450543][T14515]  ? __x64_sys_sendmsg+0x80/0x80
[  706.455570][T14515]  ? lockdep_hardirqs_on+0x98/0x150
[  706.460898][T14515]  do_syscall_64+0x55/0xb0
[  706.465429][T14515]  ? clear_bhb_loop+0x40/0x90
[  706.470294][T14515]  ? clear_bhb_loop+0x40/0x90
[  706.475091][T14515]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  706.481117][T14515] RIP: 0033:0x7f4ead99e159
[  706.485549][T14515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.505280][T14515] RSP: 002b:00007f4eae8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  706.513831][T14515] RAX: ffffffffffffffda RBX: 00007f4eadc25fa0 RCX: 00007f4ead99e159
[  706.521908][T14515] RDX: 0000000004000001 RSI: 0000200000000400 RDI: 0000000000000005
[  706.529899][T14515] RBP: 00007f4eae8bf090 R08: 0000000000000000 R09: 0000000000000000
[  706.538167][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.546250][T14515] R13: 00007f4eadc26038 R14: 00007f4eadc25fa0 R15: 00007ffec41008e8
[  706.554373][T14515]  </TASK>
[  707.126988][T14534] FAULT_INJECTION: forcing a failure.
[  707.126988][T14534] name failslab, interval 1, probability 0, space 0, times 0
[  707.144304][T14534] CPU: 0 PID: 14534 Comm: syz.1.2717 Not tainted syzkaller #0
[  707.151838][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  707.161956][T14534] Call Trace:
[  707.165267][T14534]  <TASK>
[  707.168232][T14534]  dump_stack_lvl+0x18c/0x250
[  707.172958][T14534]  ? show_regs_print_info+0x20/0x20
[  707.178280][T14534]  ? load_image+0x420/0x420
[  707.182829][T14534]  ? __might_sleep+0xe0/0xe0
[  707.187546][T14534]  ? __lock_acquire+0x7d80/0x7d80
[  707.192610][T14534]  should_fail_ex+0x394/0x4c0
[  707.197334][T14534]  should_failslab+0x9/0x20
[  707.201967][T14534]  slab_pre_alloc_hook+0x59/0x300
[  707.207093][T14534]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  707.212857][T14534]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  707.218738][T14534]  __kmem_cache_alloc_node+0x53/0x250
[  707.224152][T14534]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  707.230026][T14534]  __kmalloc+0xa7/0x240
[  707.234243][T14534]  tomoyo_realpath_from_path+0xe6/0x5c0
[  707.240102][T14534]  ? tomoyo_domain+0xd6/0x120
[  707.244830][T14534]  tomoyo_path_number_perm+0x248/0x5e0
[  707.250411][T14534]  ? tomoyo_path_number_perm+0x217/0x5e0
[  707.256088][T14534]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  707.261695][T14534]  ? __lock_acquire+0x7d80/0x7d80
[  707.266793][T14534]  ? current_check_access_path+0x3b4/0x480
[  707.272637][T14534]  ? lookup_one_qstr_excl+0x120/0x250
[  707.278120][T14534]  tomoyo_path_mkdir+0xb1/0xf0
[  707.283016][T14534]  ? tomoyo_path_unlink+0xf0/0xf0
[  707.288085][T14534]  ? kern_path_create+0x50/0x50
[  707.292962][T14534]  ? __virt_addr_valid+0x10c/0x380
[  707.298115][T14534]  security_path_mkdir+0xe4/0x140
[  707.303178][T14534]  do_mkdirat+0x162/0x450
[  707.307543][T14534]  ? vfs_mkdir+0x470/0x470
[  707.311999][T14534]  ? getname_flags+0x20a/0x500
[  707.316812][T14534]  __x64_sys_mkdir+0x6e/0x80
[  707.321441][T14534]  do_syscall_64+0x55/0xb0
[  707.326027][T14534]  ? clear_bhb_loop+0x40/0x90
[  707.330745][T14534]  ? clear_bhb_loop+0x40/0x90
[  707.335462][T14534]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  707.341477][T14534] RIP: 0033:0x7f4c7ad9e159
[  707.345940][T14534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.365758][T14534] RSP: 002b:00007f4c7bd02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  707.374213][T14534] RAX: ffffffffffffffda RBX: 00007f4c7b026180 RCX: 00007f4c7ad9e159
[  707.382233][T14534] RDX: 0000000000000000 RSI: 000000000000010c RDI: 0000200000000000
[  707.390581][T14534] RBP: 00007f4c7bd02090 R08: 0000000000000000 R09: 0000000000000000
[  707.398677][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.406684][T14534] R13: 00007f4c7b026218 R14: 00007f4c7b026180 R15: 00007fff57654048
[  707.414709][T14534]  </TASK>
[  707.432042][T14534] ERROR: Out of memory at tomoyo_realpath_from_path.
[  707.970189][T14543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2722'.
[  708.369583][T14556] netlink: 'syz.3.2727': attribute type 41 has an invalid length.
[  708.406480][T14556] netlink: 'syz.3.2727': attribute type 41 has an invalid length.
[  711.447374][T14567] FAULT_INJECTION: forcing a failure.
[  711.447374][T14567] name failslab, interval 1, probability 0, space 0, times 0
[  711.480382][T14567] CPU: 1 PID: 14567 Comm: syz.2.2730 Not tainted syzkaller #0
[  711.488019][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  711.492970][T14571] netlink: 'syz.1.2731': attribute type 41 has an invalid length.
[  711.498111][T14567] Call Trace:
[  711.498124][T14567]  <TASK>
[  711.498134][T14567]  dump_stack_lvl+0x18c/0x250
[  711.498168][T14567]  ? show_regs_print_info+0x20/0x20
[  711.498194][T14567]  ? load_image+0x420/0x420
[  711.498219][T14567]  ? kasan_check_range+0x4b/0x290
[  711.498252][T14567]  should_fail_ex+0x394/0x4c0
[  711.498284][T14567]  should_failslab+0x9/0x20
[  711.498312][T14567]  slab_pre_alloc_hook+0x59/0x300
[  711.498341][T14567]  ? __lock_acquire+0x7d80/0x7d80
[  711.498369][T14567]  kmem_cache_alloc_node+0x5e/0x310
[  711.498397][T14567]  ? __alloc_skb+0x103/0x2c0
[  711.498426][T14567]  __alloc_skb+0x103/0x2c0
[  711.498450][T14567]  netlink_sendmsg+0x66a/0xbf0
[  711.498482][T14567]  ? netlink_getsockopt+0x590/0x590
[  711.498513][T14567]  ? netlink_getsockopt+0x590/0x590
[  711.511934][T14571] netlink: 'syz.1.2731': attribute type 41 has an invalid length.
[  711.512759][T14567]  ____sys_sendmsg+0x61b/0x980
[  711.512802][T14567]  ? __asan_memset+0x22/0x40
[  711.512829][T14567]  ? __sys_sendmsg_sock+0x30/0x30
[  711.512849][T14567]  ? __import_iovec+0x5f2/0x850
[  711.512885][T14567]  ? import_iovec+0x73/0xa0
[  711.512916][T14567]  ___sys_sendmsg+0x2a6/0x360
[  711.512945][T14567]  ? __sys_sendmsg+0x2b0/0x2b0
[  711.513018][T14567]  __se_sys_sendmsg+0x1d0/0x2c0
[  711.627460][T14567]  ? __x64_sys_sendmsg+0x80/0x80
[  711.632519][T14567]  ? syscall_enter_from_user_mode+0x2e/0x80
[  711.638456][T14567]  do_syscall_64+0x55/0xb0
[  711.642892][T14567]  ? clear_bhb_loop+0x40/0x90
[  711.647620][T14567]  ? clear_bhb_loop+0x40/0x90
[  711.652356][T14567]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  711.658348][T14567] RIP: 0033:0x7f304959e159
[  711.662913][T14567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.682670][T14567] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  711.691156][T14567] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  711.699288][T14567] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008
[  711.707598][T14567] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  711.715746][T14567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  711.723780][T14567] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  711.731846][T14567]  </TASK>
[  711.782464][T14575] netlink: set zone limit has 8 unknown bytes
[  712.953702][T14582] netlink: 'syz.2.2735': attribute type 2 has an invalid length.
[  712.971754][T14582] netlink: 'syz.2.2735': attribute type 8 has an invalid length.
[  712.990504][T14588] netlink: 'syz.0.2737': attribute type 4 has an invalid length.
[  712.995963][T14582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2735'.
[  713.023901][T14588] netlink: 'syz.0.2737': attribute type 16 has an invalid length.
[  713.062641][T14588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2737'.
[  713.297105][T14593] syzkaller0: entered promiscuous mode
[  713.313277][T14593] syzkaller0: entered allmulticast mode
[  713.704054][T14608] FAULT_INJECTION: forcing a failure.
[  713.704054][T14608] name failslab, interval 1, probability 0, space 0, times 0
[  713.722879][T14608] CPU: 0 PID: 14608 Comm: syz.3.2742 Not tainted syzkaller #0
[  713.730597][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  713.740790][T14608] Call Trace:
[  713.744223][T14608]  <TASK>
[  713.747175][T14608]  dump_stack_lvl+0x18c/0x250
[  713.751907][T14608]  ? show_regs_print_info+0x20/0x20
[  713.757167][T14608]  ? load_image+0x420/0x420
[  713.761707][T14608]  ? __might_sleep+0xe0/0xe0
[  713.766499][T14608]  ? __lock_acquire+0x7d80/0x7d80
[  713.771640][T14608]  should_fail_ex+0x394/0x4c0
[  713.776338][T14608]  should_failslab+0x9/0x20
[  713.780883][T14608]  slab_pre_alloc_hook+0x59/0x300
[  713.785961][T14608]  kmem_cache_alloc_node+0x5e/0x310
[  713.791409][T14608]  ? perf_event_alloc+0x146/0x2150
[  713.796752][T14608]  perf_event_alloc+0x146/0x2150
[  713.801717][T14608]  ? _raw_spin_unlock+0x28/0x40
[  713.806592][T14608]  ? find_lively_task_by_vpid+0x19/0x290
[  713.812262][T14608]  ? find_lively_task_by_vpid+0x19/0x290
[  713.818037][T14608]  __se_sys_perf_event_open+0x796/0x1d40
[  713.824045][T14608]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  713.829705][T14608]  ? lock_chain_count+0x20/0x20
[  713.834606][T14608]  ? lockdep_hardirqs_on+0x98/0x150
[  713.839827][T14608]  ? __x64_sys_perf_event_open+0x20/0xc0
[  713.845659][T14608]  do_syscall_64+0x55/0xb0
[  713.850100][T14608]  ? clear_bhb_loop+0x40/0x90
[  713.854811][T14608]  ? clear_bhb_loop+0x40/0x90
[  713.859525][T14608]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  713.865443][T14608] RIP: 0033:0x7f4dd2f9e159
[  713.869877][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.889544][T14608] RSP: 002b:00007f4dd3e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  713.897986][T14608] RAX: ffffffffffffffda RBX: 00007f4dd3226090 RCX: 00007f4dd2f9e159
[  713.906061][T14608] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  713.914045][T14608] RBP: 00007f4dd3e98090 R08: 0000000000000000 R09: 0000000000000000
[  713.922042][T14608] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  713.930765][T14608] R13: 00007f4dd3226128 R14: 00007f4dd3226090 R15: 00007ffdc7af7ef8
[  713.939149][T14608]  </TASK>
[  713.996322][T12959] Bluetooth: hci4: command 0x0406 tx timeout
[  714.031646][T14611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2743'.
[  714.211542][T14619] netlink: 'syz.0.2745': attribute type 29 has an invalid length.
[  714.224538][T14619] netlink: 'syz.0.2745': attribute type 29 has an invalid length.
[  714.235985][T14619] netlink: 'syz.0.2745': attribute type 29 has an invalid length.
[  714.260750][T14619] netlink: 'syz.0.2745': attribute type 29 has an invalid length.
[  714.801556][T14639] FAULT_INJECTION: forcing a failure.
[  714.801556][T14639] name failslab, interval 1, probability 0, space 0, times 0
[  714.815313][T14639] CPU: 0 PID: 14639 Comm: syz.1.2751 Not tainted syzkaller #0
[  714.822912][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  714.833040][T14639] Call Trace:
[  714.836372][T14639]  <TASK>
[  714.839432][T14639]  dump_stack_lvl+0x18c/0x250
[  714.844155][T14639]  ? show_regs_print_info+0x20/0x20
[  714.849440][T14639]  ? load_image+0x420/0x420
[  714.853992][T14639]  ? __might_sleep+0xe0/0xe0
[  714.858636][T14639]  ? __lock_acquire+0x7d80/0x7d80
[  714.863713][T14639]  should_fail_ex+0x394/0x4c0
[  714.868440][T14639]  should_failslab+0x9/0x20
[  714.873245][T14639]  slab_pre_alloc_hook+0x59/0x300
[  714.878504][T14639]  ? tomoyo_encode+0x2ad/0x570
[  714.883425][T14639]  ? tomoyo_encode+0x2ad/0x570
[  714.888440][T14639]  __kmem_cache_alloc_node+0x53/0x250
[  714.893882][T14639]  ? tomoyo_encode+0x2ad/0x570
[  714.898825][T14639]  __kmalloc+0xa7/0x240
[  714.903027][T14639]  tomoyo_encode+0x2ad/0x570
[  714.907676][T14639]  tomoyo_realpath_from_path+0x57c/0x5c0
[  714.913382][T14639]  ? tomoyo_domain+0xd6/0x120
[  714.918363][T14639]  tomoyo_path_number_perm+0x248/0x5e0
[  714.924135][T14639]  ? tomoyo_path_number_perm+0x217/0x5e0
[  714.929826][T14639]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  714.936120][T14639]  ? trace_call_bpf+0xc3/0x6c0
[  714.941008][T14639]  ? trace_call_bpf+0xc3/0x6c0
[  714.945923][T14639]  ? trace_call_bpf+0x5e9/0x6c0
[  714.951025][T14639]  ? __fget_files+0x28/0x460
[  714.955739][T14639]  security_file_ioctl+0x70/0xa0
[  714.960722][T14639]  __se_sys_ioctl+0x48/0x170
[  714.965554][T14639]  do_syscall_64+0x55/0xb0
[  714.970104][T14639]  ? clear_bhb_loop+0x40/0x90
[  714.974917][T14639]  ? clear_bhb_loop+0x40/0x90
[  714.979625][T14639]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  714.985659][T14639] RIP: 0033:0x7f4c7ad9e159
[  714.990190][T14639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.010095][T14639] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  715.018735][T14639] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  715.026763][T14639] RDX: 0000200000000b40 RSI: 000000000000541b RDI: 0000000000000003
[  715.034929][T14639] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  715.042917][T14639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.050902][T14639] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  715.058901][T14639]  </TASK>
[  715.082161][T14639] ERROR: Out of memory at tomoyo_realpath_from_path.
[  715.165964][T14644] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2753'.
[  715.326622][T14649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2753'.
[  715.592641][T14655] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.2757'.
[  715.627806][T14655] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  715.663570][T14655] netlink: 'syz.2.2757': attribute type 1 has an invalid length.
[  715.819077][T14658] netlink: 'syz.0.2758': attribute type 29 has an invalid length.
[  715.827803][T14658] netlink: 'syz.0.2758': attribute type 29 has an invalid length.
[  715.838870][T14658] netlink: 'syz.0.2758': attribute type 29 has an invalid length.
[  715.943609][T14662] netlink: 'syz.0.2760': attribute type 7 has an invalid length.
[  715.959022][T14662] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2760'.
[  715.970480][T14662] netlink: 'syz.0.2760': attribute type 21 has an invalid length.
[  715.981352][T14662] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2760'.
[  716.116050][T14664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'.
[  716.141360][T14664] veth0_vlan: entered allmulticast mode
[  716.158996][T14664] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  716.760900][T14672] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  716.768847][T14672] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  718.013895][T14680] FAULT_INJECTION: forcing a failure.
[  718.013895][T14680] name failslab, interval 1, probability 0, space 0, times 0
[  718.070048][T14680] CPU: 0 PID: 14680 Comm: syz.1.2767 Not tainted syzkaller #0
[  718.077586][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  718.087856][T14680] Call Trace:
[  718.091176][T14680]  <TASK>
[  718.094238][T14680]  dump_stack_lvl+0x18c/0x250
[  718.098964][T14680]  ? show_regs_print_info+0x20/0x20
[  718.104410][T14680]  ? load_image+0x420/0x420
[  718.108970][T14680]  ? verify_lock_unused+0x140/0x140
[  718.114507][T14680]  should_fail_ex+0x394/0x4c0
[  718.119312][T14680]  should_failslab+0x9/0x20
[  718.123944][T14680]  slab_pre_alloc_hook+0x59/0x300
[  718.129005][T14680]  kmem_cache_alloc+0x5a/0x2c0
[  718.133795][T14680]  ? skb_clone+0x1eb/0x370
[  718.138244][T14680]  skb_clone+0x1eb/0x370
[  718.142691][T14680]  __netlink_deliver_tap+0x411/0x7f0
[  718.148190][T14680]  ? netlink_deliver_tap+0x2e/0x1b0
[  718.153501][T14680]  netlink_deliver_tap+0x19c/0x1b0
[  718.158826][T14680]  netlink_unicast+0x77b/0x930
[  718.163892][T14680]  netlink_sendmsg+0x8d0/0xbf0
[  718.168716][T14680]  ? lockdep_hardirqs_on+0x98/0x150
[  718.173963][T14680]  ? netlink_getsockopt+0x590/0x590
[  718.179183][T14680]  ? bpf_lsm_socket_sendmsg+0x4/0x10
[  718.184597][T14680]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  718.190259][T14680]  ? security_socket_sendmsg+0x80/0xa0
[  718.195903][T14680]  ? netlink_getsockopt+0x590/0x590
[  718.201121][T14680]  ____sys_sendmsg+0x61b/0x980
[  718.205910][T14680]  ? __asan_memset+0x22/0x40
[  718.210621][T14680]  ? __sys_sendmsg_sock+0x30/0x30
[  718.215661][T14680]  ? __import_iovec+0x5f2/0x850
[  718.220540][T14680]  ? import_iovec+0x73/0xa0
[  718.225151][T14680]  ___sys_sendmsg+0x2a6/0x360
[  718.229850][T14680]  ? __sys_sendmsg+0x2b0/0x2b0
[  718.234636][T14680]  ? perf_trace_preemptirq_template+0xac/0x330
[  718.240949][T14680]  __se_sys_sendmsg+0x1d0/0x2c0
[  718.245914][T14680]  ? __x64_sys_sendmsg+0x80/0x80
[  718.250891][T14680]  do_syscall_64+0x55/0xb0
[  718.255445][T14680]  ? clear_bhb_loop+0x40/0x90
[  718.260188][T14680]  ? clear_bhb_loop+0x40/0x90
[  718.264900][T14680]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.270807][T14680] RIP: 0033:0x7f4c7ad9e159
[  718.275242][T14680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.295121][T14680] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  718.303637][T14680] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  718.311632][T14680] RDX: 0000000024004800 RSI: 0000200000000000 RDI: 0000000000000007
[  718.319703][T14680] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  718.327781][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.335847][T14680] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  718.343848][T14680]  </TASK>
[  718.816903][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2771'.
[  718.889334][T14696] FAULT_INJECTION: forcing a failure.
[  718.889334][T14696] name failslab, interval 1, probability 0, space 0, times 0
[  718.935591][T14696] CPU: 1 PID: 14696 Comm: syz.2.2771 Not tainted syzkaller #0
[  718.943352][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  718.953469][T14696] Call Trace:
[  718.956882][T14696]  <TASK>
[  718.959860][T14696]  dump_stack_lvl+0x18c/0x250
[  718.964599][T14696]  ? show_regs_print_info+0x20/0x20
[  718.970193][T14696]  ? load_image+0x420/0x420
[  718.974752][T14696]  ? lock_chain_count+0x20/0x20
[  718.979688][T14696]  should_fail_ex+0x394/0x4c0
[  718.984897][T14696]  should_failslab+0x9/0x20
[  718.989599][T14696]  slab_pre_alloc_hook+0x59/0x300
[  718.994892][T14696]  ? __mutex_lock+0x919/0xc80
[  718.999768][T14696]  kmem_cache_alloc_node+0x5e/0x310
[  719.005226][T14696]  ? __alloc_skb+0x103/0x2c0
[  719.009906][T14696]  __alloc_skb+0x103/0x2c0
[  719.014595][T14696]  wireless_send_event+0x2b0/0xc50
[  719.019878][T14696]  ? cfg80211_wext_siwmode+0x188/0x2c0
[  719.025448][T14696]  ? wireless_nlevent_flush+0x110/0x110
[  719.031178][T14696]  ioctl_standard_call+0x12a/0x250
[  719.036618][T14696]  ? cfg80211_wext_giwname+0x30/0x30
[  719.042237][T14696]  ? cfg80211_wext_giwname+0x30/0x30
[  719.047594][T14696]  wext_ioctl_dispatch+0x51a/0x650
[  719.052855][T14696]  ? __lock_acquire+0x7d80/0x7d80
[  719.057953][T14696]  ? wext_ioctl_dispatch+0x650/0x650
[  719.063315][T14696]  ? iw_handler_get_private+0x1f0/0x1f0
[  719.069084][T14696]  ? wext_handle_ioctl+0x1e0/0x1e0
[  719.074252][T14696]  ? __might_fault+0xaa/0x120
[  719.078981][T14696]  ? __might_fault+0xc6/0x120
[  719.083804][T14696]  ? __might_fault+0xaa/0x120
[  719.088740][T14696]  wext_handle_ioctl+0x118/0x1e0
[  719.093759][T14696]  ? call_commit_handler+0xf0/0xf0
[  719.098981][T14696]  sock_ioctl+0x15d/0x7e0
[  719.103397][T14696]  ? sock_poll+0x3e0/0x3e0
[  719.107906][T14696]  ? bpf_lsm_file_ioctl+0x9/0x10
[  719.112909][T14696]  ? security_file_ioctl+0x80/0xa0
[  719.118173][T14696]  ? sock_poll+0x3e0/0x3e0
[  719.122733][T14696]  __se_sys_ioctl+0xfd/0x170
[  719.127422][T14696]  do_syscall_64+0x55/0xb0
[  719.131910][T14696]  ? clear_bhb_loop+0x40/0x90
[  719.136635][T14696]  ? clear_bhb_loop+0x40/0x90
[  719.141546][T14696]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  719.147663][T14696] RIP: 0033:0x7f304959e159
[  719.152146][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.171833][T14696] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  719.180344][T14696] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  719.188459][T14696] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000005
[  719.196523][T14696] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  719.204638][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.212774][T14696] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  719.220864][T14696]  </TASK>
[  719.736203][T14715] FAULT_INJECTION: forcing a failure.
[  719.736203][T14715] name failslab, interval 1, probability 0, space 0, times 0
[  719.757666][T14715] CPU: 0 PID: 14715 Comm: syz.3.2774 Not tainted syzkaller #0
[  719.765188][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  719.775442][T14715] Call Trace:
[  719.778745][T14715]  <TASK>
[  719.781709][T14715]  dump_stack_lvl+0x18c/0x250
[  719.786518][T14715]  ? show_regs_print_info+0x20/0x20
[  719.792008][T14715]  ? load_image+0x420/0x420
[  719.796538][T14715]  ? __might_sleep+0xe0/0xe0
[  719.801143][T14715]  ? __lock_acquire+0x7d80/0x7d80
[  719.806377][T14715]  should_fail_ex+0x394/0x4c0
[  719.811090][T14715]  should_failslab+0x9/0x20
[  719.815622][T14715]  slab_pre_alloc_hook+0x59/0x300
[  719.821022][T14715]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  719.827220][T14715]  ? __get_vm_area_node+0x125/0x370
[  719.832486][T14715]  __kmem_cache_alloc_node+0x53/0x250
[  719.837996][T14715]  ? __get_vm_area_node+0x125/0x370
[  719.843238][T14715]  kmalloc_node_trace+0x26/0xe0
[  719.848121][T14715]  __get_vm_area_node+0x125/0x370
[  719.853169][T14715]  __vmalloc_node_range+0x36f/0x1320
[  719.858470][T14715]  ? netlink_sendmsg+0x602/0xbf0
[  719.863463][T14715]  ? netlink_insert+0x1094/0x1390
[  719.868516][T14715]  ? netlink_insert+0x2ba/0x1390
[  719.873563][T14715]  ? free_vm_area+0x50/0x50
[  719.878211][T14715]  ? netlink_sendmsg+0x602/0xbf0
[  719.883247][T14715]  vmalloc+0x79/0x90
[  719.887249][T14715]  ? netlink_sendmsg+0x602/0xbf0
[  719.892328][T14715]  netlink_sendmsg+0x602/0xbf0
[  719.897260][T14715]  ? netlink_getsockopt+0x590/0x590
[  719.902579][T14715]  ? apparmor_socket_sendmsg+0x8e/0x330
[  719.908186][T14715]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  719.913617][T14715]  ? security_socket_sendmsg+0x80/0xa0
[  719.919293][T14715]  sock_write_iter+0x2dc/0x420
[  719.924081][T14715]  ? sock_read_iter+0x3f0/0x3f0
[  719.928962][T14715]  ? lockdep_hardirqs_on+0x98/0x150
[  719.934201][T14715]  vfs_write+0x474/0x9a0
[  719.938656][T14715]  ? file_end_write+0x250/0x250
[  719.943920][T14715]  ? __fget_files+0x3fc/0x460
[  719.948907][T14715]  ? __fdget_pos+0x1d8/0x330
[  719.953560][T14715]  ? ksys_write+0x74/0x260
[  719.958058][T14715]  ksys_write+0x151/0x260
[  719.962532][T14715]  ? __ia32_sys_read+0x90/0x90
[  719.968225][T14715]  ? syscall_enter_from_user_mode+0x2e/0x80
[  719.974441][T14715]  do_syscall_64+0x55/0xb0
[  719.979004][T14715]  ? clear_bhb_loop+0x40/0x90
[  719.984066][T14715]  ? clear_bhb_loop+0x40/0x90
[  719.988822][T14715]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  719.994859][T14715] RIP: 0033:0x7f4dd2f9e159
[  719.999487][T14715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.019897][T14715] RSP: 002b:00007f4dd3eb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  720.028775][T14715] RAX: ffffffffffffffda RBX: 00007f4dd3225fa0 RCX: 00007f4dd2f9e159
[  720.036794][T14715] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 000000000000000d
[  720.045214][T14715] RBP: 00007f4dd3eb9090 R08: 0000000000000000 R09: 0000000000000000
[  720.053484][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  720.061660][T14715] R13: 00007f4dd3226038 R14: 00007f4dd3225fa0 R15: 00007ffdc7af7ef8
[  720.070042][T14715]  </TASK>
[  720.086828][T14715] syz.3.2774: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  720.124989][T14715] CPU: 1 PID: 14715 Comm: syz.3.2774 Not tainted syzkaller #0
[  720.132563][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  720.142672][T14715] Call Trace:
[  720.145993][T14715]  <TASK>
[  720.148965][T14715]  dump_stack_lvl+0x18c/0x250
[  720.153825][T14715]  ? show_regs_print_info+0x20/0x20
[  720.159148][T14715]  ? load_image+0x420/0x420
[  720.163715][T14715]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  720.170196][T14715]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  720.176940][T14715]  warn_alloc+0x246/0x340
[  720.181324][T14715]  ? __get_vm_area_node+0x125/0x370
[  720.186671][T14715]  ? zone_watermark_ok_safe+0x230/0x230
[  720.192358][T14715]  ? rcu_is_watching+0x15/0xb0
[  720.197184][T14715]  ? __get_vm_area_node+0x356/0x370
[  720.202458][T14715]  __vmalloc_node_range+0x394/0x1320
[  720.208003][T14715]  ? netlink_insert+0x1094/0x1390
[  720.213288][T14715]  ? netlink_insert+0x2ba/0x1390
[  720.218394][T14715]  ? free_vm_area+0x50/0x50
[  720.223069][T14715]  ? netlink_sendmsg+0x602/0xbf0
[  720.228269][T14715]  vmalloc+0x79/0x90
[  720.232239][T14715]  ? netlink_sendmsg+0x602/0xbf0
[  720.237324][T14715]  netlink_sendmsg+0x602/0xbf0
[  720.242173][T14715]  ? netlink_getsockopt+0x590/0x590
[  720.247971][T14715]  ? apparmor_socket_sendmsg+0x8e/0x330
[  720.254014][T14715]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  720.259362][T14715]  ? security_socket_sendmsg+0x80/0xa0
[  720.264888][T14715]  sock_write_iter+0x2dc/0x420
[  720.269815][T14715]  ? sock_read_iter+0x3f0/0x3f0
[  720.274812][T14715]  ? lockdep_hardirqs_on+0x98/0x150
[  720.280111][T14715]  vfs_write+0x474/0x9a0
[  720.284526][T14715]  ? file_end_write+0x250/0x250
[  720.289535][T14715]  ? __fget_files+0x3fc/0x460
[  720.294280][T14715]  ? __fdget_pos+0x1d8/0x330
[  720.298945][T14715]  ? ksys_write+0x74/0x260
[  720.303609][T14715]  ksys_write+0x151/0x260
[  720.308165][T14715]  ? __ia32_sys_read+0x90/0x90
[  720.313164][T14715]  ? syscall_enter_from_user_mode+0x2e/0x80
[  720.319211][T14715]  do_syscall_64+0x55/0xb0
[  720.323699][T14715]  ? clear_bhb_loop+0x40/0x90
[  720.328430][T14715]  ? clear_bhb_loop+0x40/0x90
[  720.333160][T14715]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  720.339194][T14715] RIP: 0033:0x7f4dd2f9e159
[  720.343663][T14715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.364211][T14715] RSP: 002b:00007f4dd3eb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  720.372781][T14715] RAX: ffffffffffffffda RBX: 00007f4dd3225fa0 RCX: 00007f4dd2f9e159
[  720.380974][T14715] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 000000000000000d
[  720.389715][T14715] RBP: 00007f4dd3eb9090 R08: 0000000000000000 R09: 0000000000000000
[  720.397731][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  720.405756][T14715] R13: 00007f4dd3226038 R14: 00007f4dd3225fa0 R15: 00007ffdc7af7ef8
[  720.414148][T14715]  </TASK>
[  720.434140][T14715] Mem-Info:
[  720.438369][T14715] active_anon:9075 inactive_anon:0 isolated_anon:0
[  720.438369][T14715]  active_file:19488 inactive_file:40216 isolated_file:0
[  720.438369][T14715]  unevictable:768 dirty:463 writeback:0
[  720.438369][T14715]  slab_reclaimable:11193 slab_unreclaimable:93371
[  720.438369][T14715]  mapped:26587 shmem:3157 pagetables:608
[  720.438369][T14715]  sec_pagetables:0 bounce:0
[  720.438369][T14715]  kernel_misc_reclaimable:0
[  720.438369][T14715]  free:1339112 free_pcp:10628 free_cma:0
[  720.485461][T14715] Node 0 active_anon:37000kB inactive_anon:0kB active_file:77952kB inactive_file:160660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106948kB dirty:1852kB writeback:0kB shmem:11792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no
[  720.505386][T14725] FAULT_INJECTION: forcing a failure.
[  720.505386][T14725] name failslab, interval 1, probability 0, space 0, times 0
[  720.532886][T14715] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  720.533001][T14715] Node 0 
[  720.563618][T14725] CPU: 0 PID: 14725 Comm: syz.2.2778 Not tainted syzkaller #0
[  720.563653][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  720.563667][T14725] Call Trace:
[  720.563677][T14725]  <TASK>
[  720.563688][T14725]  dump_stack_lvl+0x18c/0x250
[  720.563721][T14725]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  720.563749][T14725]  ? show_regs_print_info+0x20/0x20
[  720.563773][T14725]  ? load_image+0x420/0x420
[  720.563819][T14725]  should_fail_ex+0x394/0x4c0
[  720.563852][T14725]  should_failslab+0x9/0x20
[  720.563880][T14725]  slab_pre_alloc_hook+0x59/0x300
[  720.563910][T14725]  ? do_raw_spin_lock+0x11f/0x2b0
[  720.563943][T14725]  ? tipc_nametbl_lookup_group+0x783/0xc10
[  720.564045][T14725]  __kmem_cache_alloc_node+0x53/0x250
[  720.564078][T14725]  ? tipc_nametbl_lookup_group+0x783/0xc10
[  720.564099][T14725]  kmalloc_trace+0x2a/0xe0
[  720.564129][T14725]  tipc_nametbl_lookup_group+0x783/0xc10
[  720.564159][T14725]  ? tipc_nametbl_lookup_group+0xac/0xc10
[  720.564183][T14725]  __tipc_sendmsg+0x14cf/0x2b20
[  720.564242][T14725]  ? __perf_event_task_sched_in+0xf0/0x1300
[  720.564266][T14725]  ? __lock_acquire+0x7d80/0x7d80
[  720.564294][T14725]  ? rht_unlock+0x1d0/0x1d0
[  720.564321][T14725]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  720.564345][T14725]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  720.564376][T14725]  ? lock_chain_count+0x20/0x20
[  720.564406][T14725]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  720.564430][T14725]  ? lockdep_hardirqs_on+0x98/0x150
[  720.564460][T14725]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  720.564493][T14725]  ? mark_lock+0x94/0x320
[  720.564521][T14725]  ? __lock_acquire+0x1336/0x7d80
[  720.564568][T14725]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  720.564592][T14725]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  720.564621][T14725]  ? lock_chain_count+0x20/0x20
[  720.564656][T14725]  __tipc_sendstream+0x104d/0x1290
[  720.564700][T14725]  ? mark_lock+0x94/0x320
[  720.564728][T14725]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  720.564755][T14725]  ? lock_chain_count+0x20/0x20
[  720.564785][T14725]  ? tsk_advance_rx_queue+0x310/0x310
[  720.564823][T14725]  ? __local_bh_enable_ip+0x13a/0x1c0
[  720.564845][T14725]  ? _local_bh_enable+0xa0/0xa0
[  720.564877][T14725]  tipc_send_packet+0x7c/0x90
[  720.564903][T14725]  ? tipc_sk_send_ack+0x580/0x580
[  720.564930][T14725]  ____sys_sendmsg+0x61b/0x980
[  720.564962][T14725]  ? __asan_memset+0x22/0x40
[  720.564988][T14725]  ? __sys_sendmsg_sock+0x30/0x30
[  720.565008][T14725]  ? __import_iovec+0x3fa/0x850
[  720.565045][T14725]  ? import_iovec+0x73/0xa0
[  720.565075][T14725]  ___sys_sendmsg+0x2a6/0x360
[  720.565106][T14725]  ? __sys_sendmsg+0x2b0/0x2b0
[  720.565153][T14725]  ? __lock_acquire+0x7d80/0x7d80
[  720.565207][T14725]  __se_sys_sendmsg+0x1d0/0x2c0
[  720.565233][T14725]  ? __x64_sys_sendmsg+0x80/0x80
[  720.565275][T14725]  ? syscall_enter_from_user_mode+0x2e/0x80
[  720.565308][T14725]  do_syscall_64+0x55/0xb0
[  720.565330][T14725]  ? clear_bhb_loop+0x40/0x90
[  720.565352][T14725]  ? clear_bhb_loop+0x40/0x90
[  720.565377][T14725]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  720.565400][T14725] RIP: 0033:0x7f304959e159
[  720.565421][T14725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.565439][T14725] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  720.565465][T14725] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  720.565481][T14725] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[  720.565496][T14725] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  720.565508][T14725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  720.565521][T14725] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  720.565554][T14725]  </TASK>
[  720.988711][T14715] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  721.019800][T14715] lowmem_reserve[]: 0 2521 2522 2522 2522
[  721.026952][T14715] Node 0 DMA32 free:1438280kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49360kB inactive_anon:0kB active_file:77952kB inactive_file:159840kB unevictable:1536kB writepending:1852kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:21556kB local_pcp:15144kB free_cma:0kB
[  721.066734][T14715] lowmem_reserve[]: 0 0 0 0 0
[  721.072944][T14715] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  721.126840][T14715] lowmem_reserve[]: 0 0 0 0 0
[  721.142160][T14715] Node 1 Normal free:3889196kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20416kB local_pcp:9732kB free_cma:0kB
[  721.206536][T14715] lowmem_reserve[]: 0 0 0 0 0
[  721.211504][T14715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  721.225781][T14715] Node 0 DMA32: 350*4kB (UE) 516*8kB (UME) 1985*16kB (UME) 1416*32kB (UME) 839*64kB (UME) 566*128kB (UME) 187*256kB (UM) 68*512kB (UME) 20*1024kB (UME) 3*2048kB (ME) 273*4096kB (UM) = 1436264kB
[  721.253916][T14715] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  721.277540][T14715] Node 1 Normal: 195*4kB (UME) 44*8kB (UME) 40*16kB (UME) 48*32kB (UME) 17*64kB (UME) 8*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889196kB
[  721.297343][T14715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  721.309171][T14715] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  721.330082][T14715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  721.341423][T14715] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  721.354156][T14715] 67979 total pagecache pages
[  721.361210][T14715] 0 pages in swap cache
[  721.365818][T14715] Free swap  = 124996kB
[  721.367875][T14732] validate_nla: 3 callbacks suppressed
[  721.367891][T14732] netlink: 'syz.1.2780': attribute type 28 has an invalid length.
[  721.378642][T14715] Total swap = 124996kB
[  721.406640][T14732] netlink: 'syz.1.2780': attribute type 29 has an invalid length.
[  721.411702][T14715] 2097051 pages RAM
[  721.425210][T14715] 0 pages HighMem/MovableOnly
[  721.425764][T14732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2780'.
[  721.430867][T14715] 416960 pages reserved
[  721.451666][T14715] 0 pages cma reserved
[  721.933519][T14750] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2785'.
[  722.784479][T14769] netlink: 'syz.0.2790': attribute type 33 has an invalid length.
[  722.824429][T14769] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2790'.
[  725.913929][T14784] netlink: 'syz.2.2796': attribute type 10 has an invalid length.
[  725.943366][T14784] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2796'.
[  725.959623][T14784] hsr0: left allmulticast mode
[  725.965113][T14784] hsr_slave_0: left allmulticast mode
[  725.974516][T14784] hsr_slave_1: left allmulticast mode
[  725.992314][T14784] nr0: port 1(hsr0) entered disabled state
[  726.042311][T14784] bridge0: port 4(hsr0) entered blocking state
[  726.051545][T14787] FAULT_INJECTION: forcing a failure.
[  726.051545][T14787] name failslab, interval 1, probability 0, space 0, times 0
[  726.077201][T14784] bridge0: port 4(hsr0) entered disabled state
[  726.089548][T14787] CPU: 0 PID: 14787 Comm: syz.0.2797 Not tainted syzkaller #0
[  726.097125][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.104538][T14784] hsr0: entered allmulticast mode
[  726.107465][T14787] Call Trace:
[  726.107479][T14787]  <TASK>
[  726.107489][T14787]  dump_stack_lvl+0x18c/0x250
[  726.107527][T14787]  ? show_regs_print_info+0x20/0x20
[  726.107552][T14787]  ? load_image+0x420/0x420
[  726.107578][T14787]  ? __might_sleep+0xe0/0xe0
[  726.107605][T14787]  ? __lock_acquire+0x7d80/0x7d80
[  726.107637][T14787]  should_fail_ex+0x394/0x4c0
[  726.148300][T14787]  should_failslab+0x9/0x20
[  726.152944][T14787]  slab_pre_alloc_hook+0x59/0x300
[  726.158102][T14787]  ? __lock_acquire+0x7d80/0x7d80
[  726.163182][T14787]  kmem_cache_alloc_node+0x5e/0x310
[  726.168426][T14787]  ? __alloc_skb+0x103/0x2c0
[  726.173085][T14787]  __alloc_skb+0x103/0x2c0
[  726.177579][T14787]  netlink_sendmsg+0x66a/0xbf0
[  726.182420][T14787]  ? netlink_getsockopt+0x590/0x590
[  726.186558][T14784] hsr_slave_0: entered allmulticast mode
[  726.187665][T14787]  ? apparmor_socket_sendmsg+0x8e/0x330
[  726.199380][T14787]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  726.204726][T14787]  ? security_socket_sendmsg+0x80/0xa0
[  726.210480][T14787]  ? netlink_getsockopt+0x590/0x590
[  726.215825][T14787]  ____sys_sendmsg+0x61b/0x980
[  726.220713][T14787]  ? __asan_memset+0x22/0x40
[  726.225633][T14787]  ? __sys_sendmsg_sock+0x30/0x30
[  726.230888][T14787]  ? __import_iovec+0x5f2/0x850
[  726.236072][T14787]  ? import_iovec+0x73/0xa0
[  726.236528][T14784] hsr_slave_1: entered allmulticast mode
[  726.240727][T14787]  ___sys_sendmsg+0x2a6/0x360
[  726.240771][T14787]  ? __sys_sendmsg+0x2b0/0x2b0
[  726.256035][T14787]  ? __lock_acquire+0x7d80/0x7d80
[  726.261161][T14787]  __se_sys_sendmsg+0x1d0/0x2c0
[  726.266082][T14787]  ? __x64_sys_sendmsg+0x80/0x80
[  726.271096][T14787]  ? lockdep_hardirqs_on+0x98/0x150
[  726.276388][T14787]  do_syscall_64+0x55/0xb0
[  726.280870][T14787]  ? clear_bhb_loop+0x40/0x90
[  726.285693][T14787]  ? clear_bhb_loop+0x40/0x90
[  726.290660][T14787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.296601][T14787] RIP: 0033:0x7f4ead99e159
[  726.301075][T14787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.320911][T14787] RSP: 002b:00007f4eae8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  726.329484][T14787] RAX: ffffffffffffffda RBX: 00007f4eadc25fa0 RCX: 00007f4ead99e159
[  726.337665][T14787] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  726.345755][T14787] RBP: 00007f4eae8bf090 R08: 0000000000000000 R09: 0000000000000000
[  726.353769][T14787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.361774][T14787] R13: 00007f4eadc26038 R14: 00007f4eadc25fa0 R15: 00007ffec41008e8
[  726.370242][T14787]  </TASK>
[  727.883618][T14812] FAULT_INJECTION: forcing a failure.
[  727.883618][T14812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  727.898281][T14812] CPU: 0 PID: 14812 Comm: syz.3.2804 Not tainted syzkaller #0
[  727.905902][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  727.916103][T14812] Call Trace:
[  727.919432][T14812]  <TASK>
[  727.922582][T14812]  dump_stack_lvl+0x18c/0x250
[  727.927291][T14812]  ? show_regs_print_info+0x20/0x20
[  727.932526][T14812]  ? load_image+0x420/0x420
[  727.937077][T14812]  ? __might_fault+0xaa/0x120
[  727.941795][T14812]  ? __lock_acquire+0x7d80/0x7d80
[  727.946863][T14812]  should_fail_ex+0x394/0x4c0
[  727.951579][T14812]  _copy_from_user+0x2f/0xe0
[  727.956370][T14812]  smc_setsockopt+0x3bb/0xb00
[  727.961130][T14812]  ? smc_shutdown+0x9a0/0x9a0
[  727.965910][T14812]  ? __fget_files+0x28/0x460
[  727.970619][T14812]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  727.976366][T14812]  ? security_socket_setsockopt+0x7e/0xa0
[  727.982187][T14812]  ? smc_shutdown+0x9a0/0x9a0
[  727.986971][T14812]  do_sock_setsockopt+0x175/0x1a0
[  727.992012][T14812]  ? __fdget+0x180/0x210
[  727.996274][T14812]  __x64_sys_setsockopt+0x182/0x200
[  728.001675][T14812]  do_syscall_64+0x55/0xb0
[  728.006108][T14812]  ? clear_bhb_loop+0x40/0x90
[  728.010973][T14812]  ? clear_bhb_loop+0x40/0x90
[  728.015771][T14812]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  728.021685][T14812] RIP: 0033:0x7f4dd2f9e159
[  728.026144][T14812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.045944][T14812] RSP: 002b:00007f4dd3eb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  728.054553][T14812] RAX: ffffffffffffffda RBX: 00007f4dd3225fa0 RCX: 00007f4dd2f9e159
[  728.062558][T14812] RDX: 0000000000000018 RSI: 0000000000000006 RDI: 0000000000000003
[  728.070553][T14812] RBP: 00007f4dd3eb9090 R08: 0000000000000004 R09: 0000000000000000
[  728.078546][T14812] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  728.086550][T14812] R13: 00007f4dd3226038 R14: 00007f4dd3225fa0 R15: 00007ffdc7af7ef8
[  728.094751][T14812]  </TASK>
[  728.593680][ T5086] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  728.940255][T14828] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2808'.
[  729.428054][T14833] netlink: 'syz.3.2809': attribute type 27 has an invalid length.
[  729.488036][T14833] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2809'.
[  730.656970][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  730.692343][T14846] FAULT_INJECTION: forcing a failure.
[  730.692343][T14846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  730.805446][T14846] CPU: 1 PID: 14846 Comm: syz.2.2814 Not tainted syzkaller #0
[  730.813013][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  730.823096][T14846] Call Trace:
[  730.826391][T14846]  <TASK>
[  730.829336][T14846]  dump_stack_lvl+0x18c/0x250
[  730.834198][T14846]  ? show_regs_print_info+0x20/0x20
[  730.839438][T14846]  ? load_image+0x420/0x420
[  730.843971][T14846]  ? __might_fault+0xaa/0x120
[  730.848789][T14846]  ? __lock_acquire+0x7d80/0x7d80
[  730.853831][T14846]  ? __virt_addr_valid+0x10c/0x380
[  730.858970][T14846]  should_fail_ex+0x394/0x4c0
[  730.863769][T14846]  _copy_from_user+0x2f/0xe0
[  730.868378][T14846]  generic_map_update_batch+0x53e/0x800
[  730.873960][T14846]  ? rcu_read_unlock+0xa0/0xa0
[  730.878749][T14846]  ? __fdget+0x180/0x210
[  730.883023][T14846]  ? rcu_read_unlock+0xa0/0xa0
[  730.887817][T14846]  bpf_map_do_batch+0x3f2/0x600
[  730.892696][T14846]  ? bpf_lsm_key_alloc+0x10/0x10
[  730.897676][T14846]  __sys_bpf+0x381/0x890
[  730.901962][T14846]  ? bpf_link_show_fdinfo+0x390/0x390
[  730.907381][T14846]  ? lock_chain_count+0x20/0x20
[  730.912354][T14846]  __x64_sys_bpf+0x7c/0x90
[  730.916885][T14846]  do_syscall_64+0x55/0xb0
[  730.921494][T14846]  ? clear_bhb_loop+0x40/0x90
[  730.926327][T14846]  ? clear_bhb_loop+0x40/0x90
[  730.931027][T14846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  730.936937][T14846] RIP: 0033:0x7f304959e159
[  730.941466][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  730.961348][T14846] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  730.969795][T14846] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  730.977972][T14846] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a
[  730.986040][T14846] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  730.994042][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  731.002053][T14846] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  731.010063][T14846]  </TASK>
[  731.451308][T14863] netlink: 'syz.1.2819': attribute type 10 has an invalid length.
[  731.573800][T14863] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  731.703243][T14861] netlink: 'syz.0.2818': attribute type 2 has an invalid length.
[  731.726646][T14861] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2818'.
[  731.937401][T14858] syzkaller0: entered promiscuous mode
[  731.943010][T14858] syzkaller0: entered allmulticast mode
[  733.268571][T14888] netlink: 'syz.3.2826': attribute type 27 has an invalid length.
[  733.296932][T14888] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2826'.
[  733.306004][T14890] FAULT_INJECTION: forcing a failure.
[  733.306004][T14890] name failslab, interval 1, probability 0, space 0, times 0
[  733.326748][T14890] CPU: 1 PID: 14890 Comm: syz.1.2827 Not tainted syzkaller #0
[  733.334411][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  733.344542][T14890] Call Trace:
[  733.347891][T14890]  <TASK>
[  733.350978][T14890]  dump_stack_lvl+0x18c/0x250
[  733.355942][T14890]  ? show_regs_print_info+0x20/0x20
[  733.361350][T14890]  ? load_image+0x420/0x420
[  733.365960][T14890]  ? __might_sleep+0xe0/0xe0
[  733.370639][T14890]  ? __lock_acquire+0x7d80/0x7d80
[  733.375887][T14890]  should_fail_ex+0x394/0x4c0
[  733.380668][T14890]  should_failslab+0x9/0x20
[  733.385790][T14890]  slab_pre_alloc_hook+0x59/0x300
[  733.390949][T14890]  ? __get_vm_area_node+0x125/0x370
[  733.396323][T14890]  __kmem_cache_alloc_node+0x53/0x250
[  733.401877][T14890]  ? __get_vm_area_node+0x125/0x370
[  733.407181][T14890]  kmalloc_node_trace+0x26/0xe0
[  733.412140][T14890]  __get_vm_area_node+0x125/0x370
[  733.417285][T14890]  __vmalloc_node_range+0x36f/0x1320
[  733.422688][T14890]  ? copy_process+0x5a6/0x3da0
[  733.427616][T14890]  ? __lock_acquire+0x7d80/0x7d80
[  733.432777][T14890]  ? free_vm_area+0x50/0x50
[  733.437362][T14890]  ? arch_dup_task_struct+0x57/0xd0
[  733.442658][T14890]  ? __asan_memcpy+0x40/0x70
[  733.447420][T14890]  dup_task_struct+0x3c8/0x800
[  733.452267][T14890]  ? copy_process+0x5a6/0x3da0
[  733.457102][T14890]  ? lockdep_hardirqs_on+0x98/0x150
[  733.462391][T14890]  copy_process+0x5a6/0x3da0
[  733.467223][T14890]  ? __might_fault+0xaa/0x120
[  733.472253][T14890]  ? get_pid_task+0x20/0x1e0
[  733.476937][T14890]  ? __pidfd_prepare+0x140/0x140
[  733.482165][T14890]  kernel_clone+0x24b/0x8a0
[  733.486842][T14890]  ? create_io_thread+0x190/0x190
[  733.492067][T14890]  __x64_sys_clone+0x1b7/0x230
[  733.496928][T14890]  ? __fget_files+0x3fc/0x460
[  733.501711][T14890]  ? __ia32_sys_vfork+0x140/0x140
[  733.506865][T14890]  ? lock_chain_count+0x20/0x20
[  733.511913][T14890]  ? lockdep_hardirqs_on+0x98/0x150
[  733.517311][T14890]  do_syscall_64+0x55/0xb0
[  733.521836][T14890]  ? clear_bhb_loop+0x40/0x90
[  733.526765][T14890]  ? clear_bhb_loop+0x40/0x90
[  733.531539][T14890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  733.537588][T14890] RIP: 0033:0x7f4c7ad9e159
[  733.542164][T14890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  733.561950][T14890] RSP: 002b:00007f4c7bd43fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  733.570541][T14890] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  733.578773][T14890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000023000200
[  733.587068][T14890] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  733.595194][T14890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  733.603241][T14890] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  733.611348][T14890]  </TASK>
[  733.619083][T14890] syz.1.2827: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  733.648591][T14890] CPU: 1 PID: 14890 Comm: syz.1.2827 Not tainted syzkaller #0
[  733.656250][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  733.666729][T14890] Call Trace:
[  733.670089][T14890]  <TASK>
[  733.673100][T14890]  dump_stack_lvl+0x18c/0x250
[  733.677887][T14890]  ? show_regs_print_info+0x20/0x20
[  733.683166][T14890]  ? load_image+0x420/0x420
[  733.687776][T14890]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  733.694361][T14890]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  733.701038][T14890]  warn_alloc+0x246/0x340
[  733.705436][T14890]  ? __get_vm_area_node+0x125/0x370
[  733.710709][T14890]  ? zone_watermark_ok_safe+0x230/0x230
[  733.716278][T14890]  ? rcu_is_watching+0x15/0xb0
[  733.721075][T14890]  ? __get_vm_area_node+0x356/0x370
[  733.726311][T14890]  __vmalloc_node_range+0x394/0x1320
[  733.731693][T14890]  ? __lock_acquire+0x7d80/0x7d80
[  733.736815][T14890]  ? free_vm_area+0x50/0x50
[  733.741353][T14890]  ? arch_dup_task_struct+0x57/0xd0
[  733.746618][T14890]  ? __asan_memcpy+0x40/0x70
[  733.751277][T14890]  dup_task_struct+0x3c8/0x800
[  733.756072][T14890]  ? copy_process+0x5a6/0x3da0
[  733.760876][T14890]  ? lockdep_hardirqs_on+0x98/0x150
[  733.766238][T14890]  copy_process+0x5a6/0x3da0
[  733.771054][T14890]  ? __might_fault+0xaa/0x120
[  733.775993][T14890]  ? get_pid_task+0x20/0x1e0
[  733.781067][T14890]  ? __pidfd_prepare+0x140/0x140
[  733.786071][T14890]  kernel_clone+0x24b/0x8a0
[  733.790607][T14890]  ? create_io_thread+0x190/0x190
[  733.795771][T14890]  __x64_sys_clone+0x1b7/0x230
[  733.800672][T14890]  ? __fget_files+0x3fc/0x460
[  733.805715][T14890]  ? __ia32_sys_vfork+0x140/0x140
[  733.810983][T14890]  ? lock_chain_count+0x20/0x20
[  733.816035][T14890]  ? lockdep_hardirqs_on+0x98/0x150
[  733.821518][T14890]  do_syscall_64+0x55/0xb0
[  733.826077][T14890]  ? clear_bhb_loop+0x40/0x90
[  733.830890][T14890]  ? clear_bhb_loop+0x40/0x90
[  733.835628][T14890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  733.841605][T14890] RIP: 0033:0x7f4c7ad9e159
[  733.846163][T14890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  733.866159][T14890] RSP: 002b:00007f4c7bd43fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  733.874733][T14890] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  733.882751][T14890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000023000200
[  733.890857][T14890] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  733.898887][T14890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  733.906997][T14890] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  733.915452][T14890]  </TASK>
[  733.920570][T14890] Mem-Info:
[  733.924117][T14890] active_anon:7319 inactive_anon:0 isolated_anon:0
[  733.924117][T14890]  active_file:19488 inactive_file:40222 isolated_file:0
[  733.924117][T14890]  unevictable:768 dirty:195 writeback:0
[  733.924117][T14890]  slab_reclaimable:11127 slab_unreclaimable:95251
[  733.924117][T14890]  mapped:28239 shmem:1385 pagetables:572
[  733.924117][T14890]  sec_pagetables:0 bounce:0
[  733.924117][T14890]  kernel_misc_reclaimable:0
[  733.924117][T14890]  free:1338227 free_pcp:11720 free_cma:0
[  733.970875][T14890] Node 0 active_anon:29276kB inactive_anon:0kB active_file:77952kB inactive_file:160684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112956kB dirty:780kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10548kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no
[  734.022564][T14890] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  734.077684][T14890] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  734.115784][T14890] lowmem_reserve[]: 0 2521 2522 2522 2522
[  734.124968][T14890] Node 0 DMA32 free:1469416kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29236kB inactive_anon:0kB active_file:77952kB inactive_file:159864kB unevictable:1536kB writepending:780kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:6336kB local_pcp:5360kB free_cma:0kB
[  734.206503][T14890] lowmem_reserve[]: 0 0 0 0 0
[  734.211871][T14890] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  734.257283][T14890] lowmem_reserve[]: 0 0 0 0 0
[  734.264971][T14890] Node 1 Normal free:3889196kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20416kB local_pcp:10684kB free_cma:0kB
[  734.326661][T14890] lowmem_reserve[]: 0 0 0 0 0
[  734.331624][T14890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  734.363836][T14890] Node 0 DMA32: 2749*4kB (UME) 2113*8kB (UME) 1497*16kB (UME) 1089*32kB (UME) 737*64kB (UME) 488*128kB (UME) 192*256kB (UM) 70*512kB (UME) 36*1024kB (UME) 14*2048kB (ME) 274*4096kB (UM) = 1469164kB
[  734.415177][T14893] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2828'.
[  734.425305][T14890] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  734.438276][T14890] Node 1 Normal: 195*4kB (UME) 44*8kB (UME) 40*16kB (UME) 48*32kB (UME) 17*64kB (UME) 8*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889196kB
[  734.475805][T14890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  734.495635][T14890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  734.505806][T14890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  734.541459][T14890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  734.567857][T14890] 61071 total pagecache pages
[  734.582705][T14890] 0 pages in swap cache
[  734.592939][T14890] Free swap  = 124996kB
[  734.606270][T14890] Total swap = 124996kB
[  734.610873][T14890] 2097051 pages RAM
[  734.614886][T14890] 0 pages HighMem/MovableOnly
[  734.620706][T14890] 416960 pages reserved
[  734.625360][T14890] 0 pages cma reserved
[  734.938725][T14897] FAULT_INJECTION: forcing a failure.
[  734.938725][T14897] name failslab, interval 1, probability 0, space 0, times 0
[  734.952211][T14897] CPU: 1 PID: 14897 Comm: syz.1.2830 Not tainted syzkaller #0
[  734.959848][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  734.970032][T14897] Call Trace:
[  734.973350][T14897]  <TASK>
[  734.976297][T14897]  dump_stack_lvl+0x18c/0x250
[  734.981107][T14897]  ? sctp_sendmsg+0x1519/0x27b0
[  734.985982][T14897]  ? ___sys_sendmsg+0x2a6/0x360
[  734.990857][T14897]  ? show_regs_print_info+0x20/0x20
[  734.996080][T14897]  ? load_image+0x420/0x420
[  735.000674][T14897]  should_fail_ex+0x394/0x4c0
[  735.005398][T14897]  should_failslab+0x9/0x20
[  735.009959][T14897]  slab_pre_alloc_hook+0x59/0x300
[  735.015038][T14897]  ? sctp_add_bind_addr+0x8c/0x360
[  735.020291][T14897]  __kmem_cache_alloc_node+0x53/0x250
[  735.025722][T14897]  ? sctp_add_bind_addr+0x8c/0x360
[  735.031067][T14897]  kmalloc_trace+0x2a/0xe0
[  735.035938][T14897]  sctp_add_bind_addr+0x8c/0x360
[  735.041013][T14897]  sctp_copy_local_addr_list+0x31b/0x4e0
[  735.046700][T14897]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  735.052461][T14897]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  735.058687][T14897]  ? sctp_v4_is_any+0x35/0x60
[  735.063424][T14897]  ? sctp_copy_one_addr+0x8c/0x350
[  735.068623][T14897]  sctp_bind_addr_copy+0xb3/0x3c0
[  735.073714][T14897]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  735.080108][T14897]  sctp_connect_new_asoc+0x2f9/0x6a0
[  735.085878][T14897]  ? __sctp_connect+0xd80/0xd80
[  735.090768][T14897]  ? __local_bh_enable_ip+0x13a/0x1c0
[  735.096178][T14897]  ? _local_bh_enable+0xa0/0xa0
[  735.101067][T14897]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  735.107005][T14897]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  735.113029][T14897]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  735.118620][T14897]  ? security_sctp_bind_connect+0x89/0xb0
[  735.124394][T14897]  sctp_sendmsg+0x1519/0x27b0
[  735.129237][T14897]  ? sctp_getsockopt+0xb60/0xb60
[  735.134321][T14897]  ? aa_af_perm+0x330/0x330
[  735.138891][T14897]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  735.145362][T14897]  ? sock_rps_record_flow+0x19/0x3f0
[  735.150716][T14897]  ? inet_sendmsg+0x7e/0x2a0
[  735.155339][T14897]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  735.160673][T14897]  ? inet_send_prepare+0x250/0x250
[  735.165826][T14897]  ____sys_sendmsg+0x61b/0x980
[  735.170653][T14897]  ? __asan_memset+0x22/0x40
[  735.175294][T14897]  ? __sys_sendmsg_sock+0x30/0x30
[  735.180368][T14897]  ? __import_iovec+0x5f2/0x850
[  735.185285][T14897]  ? import_iovec+0x73/0xa0
[  735.189930][T14897]  ___sys_sendmsg+0x2a6/0x360
[  735.194645][T14897]  ? get_pid_task+0x20/0x1e0
[  735.199430][T14897]  ? __sys_sendmsg+0x2b0/0x2b0
[  735.204378][T14897]  ? __lock_acquire+0x7d80/0x7d80
[  735.209518][T14897]  __se_sys_sendmsg+0x1d0/0x2c0
[  735.214426][T14897]  ? __x64_sys_sendmsg+0x80/0x80
[  735.219565][T14897]  ? lockdep_hardirqs_on+0x98/0x150
[  735.224845][T14897]  do_syscall_64+0x55/0xb0
[  735.229315][T14897]  ? clear_bhb_loop+0x40/0x90
[  735.234030][T14897]  ? clear_bhb_loop+0x40/0x90
[  735.238750][T14897]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  735.244793][T14897] RIP: 0033:0x7f4c7ad9e159
[  735.249342][T14897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.268981][T14897] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  735.277615][T14897] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  735.285629][T14897] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  735.293636][T14897] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  735.301660][T14897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  735.309785][T14897] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  735.318151][T14897]  </TASK>
[  737.177855][T14899] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2831'.
[  737.424369][T14902] bridge_slave_0: entered promiscuous mode
[  737.444668][T14910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2834'.
[  737.473640][T14902] bridge_slave_0: entered allmulticast mode
[  737.510749][T14908] netlink: 'syz.2.2834': attribute type 4 has an invalid length.
[  737.520231][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'.
[  737.531529][T14910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2834'.
[  737.541689][T14912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2834'.
[  737.696767][T14918] netlink: 'syz.1.2839': attribute type 10 has an invalid length.
[  737.731781][T14917] netlink: 178584 bytes leftover after parsing attributes in process `syz.3.2836'.
[  737.737080][T14918] team0: Device veth1_macvtap failed to register rx_handler
[  737.753147][T14917] netlink: zone id is out of range
[  737.764387][T14917] netlink: zone id is out of range
[  737.778298][T14917] netlink: zone id is out of range
[  737.790488][T14917] netlink: zone id is out of range
[  737.796034][T14917] netlink: zone id is out of range
[  737.822145][T14917] netlink: zone id is out of range
[  737.848266][T14917] netlink: zone id is out of range
[  737.861394][T14917] netlink: zone id is out of range
[  737.861569][T14920] netlink: 'syz.2.2837': attribute type 10 has an invalid length.
[  737.880514][T14917] netlink: zone id is out of range
[  737.907781][T14917] netlink: zone id is out of range
[  737.985575][T14926] netlink: 'syz.1.2840': attribute type 10 has an invalid length.
[  737.999971][T14926] FAULT_INJECTION: forcing a failure.
[  737.999971][T14926] name failslab, interval 1, probability 0, space 0, times 0
[  738.013561][T14926] CPU: 0 PID: 14926 Comm: syz.1.2840 Not tainted syzkaller #0
[  738.021092][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  738.031209][T14926] Call Trace:
[  738.034529][T14926]  <TASK>
[  738.037497][T14926]  dump_stack_lvl+0x18c/0x250
[  738.042232][T14926]  ? show_regs_print_info+0x20/0x20
[  738.047484][T14926]  ? load_image+0x420/0x420
[  738.052032][T14926]  ? __might_sleep+0xe0/0xe0
[  738.056670][T14926]  ? __lock_acquire+0x7d80/0x7d80
[  738.061765][T14926]  ? netdev_has_upper_dev+0x3b0/0x460
[  738.067295][T14926]  should_fail_ex+0x394/0x4c0
[  738.072204][T14926]  should_failslab+0x9/0x20
[  738.076760][T14926]  slab_pre_alloc_hook+0x59/0x300
[  738.081845][T14926]  ? team_add_slave+0x2a2/0x28a0
[  738.086880][T14926]  ? team_add_slave+0x2a2/0x28a0
[  738.091861][T14926]  __kmem_cache_alloc_node+0x53/0x250
[  738.097307][T14926]  ? team_add_slave+0x2a2/0x28a0
[  738.102284][T14926]  __kmalloc+0xa7/0x240
[  738.106534][T14926]  team_add_slave+0x2a2/0x28a0
[  738.111356][T14926]  ? __local_bh_enable_ip+0x13a/0x1c0
[  738.116861][T14926]  ? lockdep_hardirqs_on+0x98/0x150
[  738.122117][T14926]  ? __local_bh_enable_ip+0x13a/0x1c0
[  738.127546][T14926]  ? _local_bh_enable+0xa0/0xa0
[  738.132553][T14926]  ? team_netpoll_cleanup+0xf0/0xf0
[  738.137807][T14926]  ? __dev_change_flags+0x4d2/0x6a0
[  738.143149][T14926]  ? dev_get_flags+0x1c0/0x1c0
[  738.147985][T14926]  ? printk_sprint+0x460/0x460
[  738.152817][T14926]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  738.158772][T14926]  ? mutex_is_locked+0x12/0x40
[  738.163605][T14926]  do_setlink+0xcde/0x3f40
[  738.168086][T14926]  ? load_image+0x420/0x420
[  738.172643][T14926]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  738.178858][T14926]  ? stack_trace_save+0xaa/0x100
[  738.183846][T14926]  ? stack_trace_snprint+0xf0/0xf0
[  738.189156][T14926]  ? __nla_validate+0x50/0x50
[  738.193938][T14926]  ? validate_linkmsg+0x719/0x910
[  738.199069][T14926]  rtnl_newlink+0x1848/0x2170
[  738.203864][T14926]  ? rtnl_newlink+0x431/0x2170
[  738.208877][T14926]  ? rtnl_setlink+0x4e0/0x4e0
[  738.213612][T14926]  ? __rwlock_init+0x150/0x150
[  738.218433][T14926]  ? do_raw_spin_unlock+0x121/0x230
[  738.223687][T14926]  ? __mutex_lock+0x923/0xc80
[  738.228423][T14926]  ? __mutex_lock+0x4d2/0xc80
[  738.233232][T14926]  ? rtnl_setlink+0x4e0/0x4e0
[  738.237959][T14926]  rtnetlink_rcv_msg+0x843/0xf90
[  738.243207][T14926]  ? rtnetlink_rcv_msg+0x220/0xf90
[  738.248367][T14926]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  738.254313][T14926]  ? rtnetlink_bind+0x80/0x80
[  738.259047][T14926]  ? perf_trace_preemptirq_template+0xac/0x330
[  738.265258][T14926]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  738.271289][T14926]  ? lock_chain_count+0x20/0x20
[  738.276191][T14926]  ? __local_bh_enable_ip+0x13a/0x1c0
[  738.281610][T14926]  ? lockdep_hardirqs_on+0x98/0x150
[  738.286945][T14926]  ? __local_bh_enable_ip+0x13a/0x1c0
[  738.292449][T14926]  ? _local_bh_enable+0xa0/0xa0
[  738.297352][T14926]  ? __dev_queue_xmit+0x272/0x37e0
[  738.302509][T14926]  ? __dev_queue_xmit+0x1329/0x37e0
[  738.307883][T14926]  ? __dev_queue_xmit+0x272/0x37e0
[  738.313169][T14926]  ? perf_trace_lock+0xfc/0x3b0
[  738.318076][T14926]  netlink_rcv_skb+0x235/0x4c0
[  738.322893][T14926]  ? rtnetlink_bind+0x80/0x80
[  738.327615][T14926]  ? netlink_ack+0x1160/0x1160
[  738.332435][T14926]  ? __lock_acquire+0x7d80/0x7d80
[  738.337512][T14926]  ? netlink_deliver_tap+0x2e/0x1b0
[  738.342758][T14926]  netlink_unicast+0x7b1/0x930
[  738.347579][T14926]  netlink_sendmsg+0x8d0/0xbf0
[  738.352490][T14926]  ? netlink_getsockopt+0x590/0x590
[  738.357746][T14926]  ? apparmor_socket_sendmsg+0x8e/0x330
[  738.363732][T14926]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  738.369066][T14926]  ? security_socket_sendmsg+0x80/0xa0
[  738.374565][T14926]  ? netlink_getsockopt+0x590/0x590
[  738.379811][T14926]  ____sys_sendmsg+0x61b/0x980
[  738.384642][T14926]  ? __asan_memset+0x22/0x40
[  738.389288][T14926]  ? __sys_sendmsg_sock+0x30/0x30
[  738.394367][T14926]  ? __import_iovec+0x5f2/0x850
[  738.399278][T14926]  ? import_iovec+0x73/0xa0
[  738.403844][T14926]  ___sys_sendmsg+0x2a6/0x360
[  738.408584][T14926]  ? __sys_sendmsg+0x2b0/0x2b0
[  738.413597][T14926]  ? trace_call_bpf+0xc3/0x6c0
[  738.418450][T14926]  __se_sys_sendmsg+0x1d0/0x2c0
[  738.423436][T14926]  ? __x64_sys_sendmsg+0x80/0x80
[  738.428441][T14926]  ? lockdep_hardirqs_on+0x98/0x150
[  738.433712][T14926]  do_syscall_64+0x55/0xb0
[  738.438345][T14926]  ? clear_bhb_loop+0x40/0x90
[  738.443095][T14926]  ? clear_bhb_loop+0x40/0x90
[  738.447825][T14926]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.453849][T14926] RIP: 0033:0x7f4c7ad9e159
[  738.458312][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.478070][T14926] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.486621][T14926] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  738.494634][T14926] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  738.502644][T14926] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  738.510829][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  738.518943][T14926] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  738.527072][T14926]  </TASK>
[  739.042253][T14933] netlink: 30932 bytes leftover after parsing attributes in process `syz.3.2844'.
[  739.135957][T14936] FAULT_INJECTION: forcing a failure.
[  739.135957][T14936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  739.149684][T14936] CPU: 1 PID: 14936 Comm: syz.0.2845 Not tainted syzkaller #0
[  739.157195][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  739.167293][T14936] Call Trace:
[  739.170624][T14936]  <TASK>
[  739.173606][T14936]  dump_stack_lvl+0x18c/0x250
[  739.178352][T14936]  ? show_regs_print_info+0x20/0x20
[  739.183666][T14936]  ? load_image+0x420/0x420
[  739.188196][T14936]  ? __might_fault+0xaa/0x120
[  739.193264][T14936]  ? __lock_acquire+0x7d80/0x7d80
[  739.198337][T14936]  should_fail_ex+0x394/0x4c0
[  739.203074][T14936]  _copy_from_user+0x2f/0xe0
[  739.207705][T14936]  ___sys_sendmsg+0x1c7/0x360
[  739.212418][T14936]  ? get_pid_task+0x20/0x1e0
[  739.217222][T14936]  ? __sys_sendmsg+0x2b0/0x2b0
[  739.222541][T14936]  ? __lock_acquire+0x7d80/0x7d80
[  739.227605][T14936]  __se_sys_sendmsg+0x1d0/0x2c0
[  739.232473][T14936]  ? __x64_sys_sendmsg+0x80/0x80
[  739.237455][T14936]  ? lockdep_hardirqs_on+0x98/0x150
[  739.242711][T14936]  do_syscall_64+0x55/0xb0
[  739.247142][T14936]  ? clear_bhb_loop+0x40/0x90
[  739.251919][T14936]  ? clear_bhb_loop+0x40/0x90
[  739.256622][T14936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  739.262531][T14936] RIP: 0033:0x7f4ead99e159
[  739.266981][T14936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.286781][T14936] RSP: 002b:00007f4eae8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  739.295297][T14936] RAX: ffffffffffffffda RBX: 00007f4eadc25fa0 RCX: 00007f4ead99e159
[  739.303279][T14936] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 0000000000000003
[  739.311270][T14936] RBP: 00007f4eae8bf090 R08: 0000000000000000 R09: 0000000000000000
[  739.319339][T14936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.327333][T14936] R13: 00007f4eadc26038 R14: 00007f4eadc25fa0 R15: 00007ffec41008e8
[  739.335524][T14936]  </TASK>
[  739.406787][T14943] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2848'.
[  739.576981][T14948] sctp: [Deprecated]: syz.1.2850 (pid 14948) Use of int in max_burst socket option deprecated.
[  739.576981][T14948] Use struct sctp_assoc_value instead
[  739.735484][T14951] netlink: 'syz.2.2851': attribute type 9 has an invalid length.
[  739.761895][T14951] netlink: 'syz.2.2851': attribute type 23 has an invalid length.
[  739.772801][T14951] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.2851'.
[  740.820319][T14965] FAULT_INJECTION: forcing a failure.
[  740.820319][T14965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.835560][T14965] CPU: 1 PID: 14965 Comm: syz.3.2856 Not tainted syzkaller #0
[  740.843083][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  740.853440][T14965] Call Trace:
[  740.856758][T14965]  <TASK>
[  740.859718][T14965]  dump_stack_lvl+0x18c/0x250
[  740.864546][T14965]  ? show_regs_print_info+0x20/0x20
[  740.869881][T14965]  ? load_image+0x420/0x420
[  740.874427][T14965]  ? __might_fault+0xaa/0x120
[  740.879152][T14965]  ? __lock_acquire+0x7d80/0x7d80
[  740.884244][T14965]  should_fail_ex+0x394/0x4c0
[  740.888991][T14965]  _copy_from_user+0x2f/0xe0
[  740.893635][T14965]  ___sys_sendmsg+0x1c7/0x360
[  740.898409][T14965]  ? __sys_sendmsg+0x2b0/0x2b0
[  740.903244][T14965]  ? __lock_acquire+0x7d80/0x7d80
[  740.908419][T14965]  __se_sys_sendmsg+0x1d0/0x2c0
[  740.913310][T14965]  ? __x64_sys_sendmsg+0x80/0x80
[  740.918330][T14965]  ? lockdep_hardirqs_on+0x98/0x150
[  740.923596][T14965]  do_syscall_64+0x55/0xb0
[  740.928151][T14965]  ? clear_bhb_loop+0x40/0x90
[  740.932869][T14965]  ? clear_bhb_loop+0x40/0x90
[  740.937599][T14965]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  740.943620][T14965] RIP: 0033:0x7f4dd2f9e159
[  740.948057][T14965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.967685][T14965] RSP: 002b:00007f4dd3eb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  740.976208][T14965] RAX: ffffffffffffffda RBX: 00007f4dd3225fa0 RCX: 00007f4dd2f9e159
[  740.984319][T14965] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  740.992394][T14965] RBP: 00007f4dd3eb9090 R08: 0000000000000000 R09: 0000000000000000
[  741.000467][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  741.008646][T14965] R13: 00007f4dd3226038 R14: 00007f4dd3225fa0 R15: 00007ffdc7af7ef8
[  741.016741][T14965]  </TASK>
[  741.319175][T14968] sock: sock_timestamping_bind_phc: sock not bind to device
[  741.494129][T14974] netlink: 56847 bytes leftover after parsing attributes in process `syz.2.2859'.
[  741.975410][T14995] netlink: 'syz.2.2865': attribute type 10 has an invalid length.
[  742.183185][T14998] netlink: 'syz.1.2866': attribute type 10 has an invalid length.
[  742.204366][T14998] team0: Device geneve1 is up. Set it down before adding it as a team port
[  742.985833][T15010] netlink: 'syz.2.2872': attribute type 10 has an invalid length.
[  743.035548][T15010] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.058986][T15010] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.071419][T15010] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.083101][T15015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2873'.
[  743.093738][T15010] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.261279][T15010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.272439][T15010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.292437][T15010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.309430][T15010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.474248][T15010] team0: Port device geneve1 added
[  743.481147][T15015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2873'.
[  743.497045][T15017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2873'.
[  743.630188][T15029] netlink: 'syz.1.2878': attribute type 58 has an invalid length.
[  743.645190][T15029] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2878'.
[  743.705207][T15028] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2877'.
[  743.716202][T15028] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2877'.
[  744.052735][T15046] FAULT_INJECTION: forcing a failure.
[  744.052735][T15046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  744.071323][T15046] CPU: 1 PID: 15046 Comm: syz.2.2885 Not tainted syzkaller #0
[  744.079202][T15046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  744.089392][T15046] Call Trace:
[  744.092706][T15046]  <TASK>
[  744.095668][T15046]  dump_stack_lvl+0x18c/0x250
[  744.100431][T15046]  ? show_regs_print_info+0x20/0x20
[  744.105670][T15046]  ? load_image+0x420/0x420
[  744.110214][T15046]  ? __might_fault+0xaa/0x120
[  744.114935][T15046]  ? __lock_acquire+0x7d80/0x7d80
[  744.120075][T15046]  ? memset_orig+0x30/0xac
[  744.124678][T15046]  should_fail_ex+0x394/0x4c0
[  744.129387][T15046]  strncpy_from_user+0x36/0x2f0
[  744.134288][T15046]  getname_flags+0xf6/0x500
[  744.138856][T15046]  __x64_sys_mkdirat+0x7c/0xa0
[  744.143681][T15046]  do_syscall_64+0x55/0xb0
[  744.148216][T15046]  ? clear_bhb_loop+0x40/0x90
[  744.152898][T15046]  ? clear_bhb_loop+0x40/0x90
[  744.157664][T15046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.163733][T15046] RIP: 0033:0x7f304959e159
[  744.168153][T15046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.188134][T15046] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  744.196661][T15046] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  744.204738][T15046] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  744.212759][T15046] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  744.220855][T15046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.228864][T15046] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  744.236885][T15046]  </TASK>
[  744.356080][T15046] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2885'.
[  744.452543][T15049] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2886'.
[  744.746666][T15054] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2888'.
[  744.757866][T15059] netlink: 'syz.2.2890': attribute type 2 has an invalid length.
[  744.757903][T15059] netlink: 'syz.2.2890': attribute type 9 has an invalid length.
[  744.757930][T15059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2890'.
[  745.256055][T15067] FAULT_INJECTION: forcing a failure.
[  745.256055][T15067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  745.265035][T15069] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  745.276506][T15067] CPU: 0 PID: 15067 Comm: syz.2.2893 Not tainted syzkaller #0
[  745.284897][T15067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  745.288198][T15069] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  745.295070][T15067] Call Trace:
[  745.295085][T15067]  <TASK>
[  745.295094][T15067]  dump_stack_lvl+0x18c/0x250
[  745.295134][T15067]  ? show_regs_print_info+0x20/0x20
[  745.295159][T15067]  ? load_image+0x420/0x420
[  745.309753][T15069] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  745.313864][T15067]  ? __lock_acquire+0x7d80/0x7d80
[  745.313903][T15067]  should_fail_ex+0x394/0x4c0
[  745.313937][T15067]  _copy_from_user+0x2f/0xe0
[  745.325738][T15069] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  745.331526][T15067]  __copy_msghdr+0x388/0x560
[  745.331564][T15067]  ___sys_sendmsg+0x214/0x360
[  745.331596][T15067]  ? __sys_sendmsg+0x2b0/0x2b0
[  745.331680][T15067]  __se_sys_sendmsg+0x1d0/0x2c0
[  745.331711][T15067]  ? __x64_sys_sendmsg+0x80/0x80
[  745.331756][T15067]  ? syscall_enter_from_user_mode+0x2e/0x80
[  745.345096][T15069] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  745.346084][T15067]  do_syscall_64+0x55/0xb0
[  745.346114][T15067]  ? clear_bhb_loop+0x40/0x90
[  745.361406][T15069] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  745.363104][T15067]  ? clear_bhb_loop+0x40/0x90
[  745.363138][T15067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  745.419321][T15067] RIP: 0033:0x7f304959e159
[  745.423787][T15067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  745.443935][T15067] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  745.452563][T15067] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  745.460559][T15067] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000007
[  745.468560][T15067] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  745.476571][T15067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  745.484651][T15067] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  745.492802][T15067]  </TASK>
[  745.645143][T15078] FAULT_INJECTION: forcing a failure.
[  745.645143][T15078] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  745.674697][T15078] CPU: 0 PID: 15078 Comm: syz.2.2896 Not tainted syzkaller #0
[  745.682427][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  745.692797][T15078] Call Trace:
[  745.696129][T15078]  <TASK>
[  745.699134][T15078]  dump_stack_lvl+0x18c/0x250
[  745.703972][T15078]  ? show_regs_print_info+0x20/0x20
[  745.709231][T15078]  ? load_image+0x420/0x420
[  745.713796][T15078]  ? __might_fault+0xaa/0x120
[  745.718528][T15078]  ? __lock_acquire+0x7d80/0x7d80
[  745.723608][T15078]  should_fail_ex+0x394/0x4c0
[  745.728361][T15078]  _copy_from_user+0x2f/0xe0
[  745.733118][T15078]  ___sys_sendmsg+0x1c7/0x360
[  745.737832][T15078]  ? __sys_sendmsg+0x2b0/0x2b0
[  745.742669][T15078]  ? __lock_acquire+0x7d80/0x7d80
[  745.747941][T15078]  __se_sys_sendmsg+0x1d0/0x2c0
[  745.752933][T15078]  ? __x64_sys_sendmsg+0x80/0x80
[  745.757934][T15078]  ? lockdep_hardirqs_on+0x98/0x150
[  745.763259][T15078]  do_syscall_64+0x55/0xb0
[  745.767717][T15078]  ? clear_bhb_loop+0x40/0x90
[  745.772607][T15078]  ? clear_bhb_loop+0x40/0x90
[  745.777314][T15078]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  745.783272][T15078] RIP: 0033:0x7f304959e159
[  745.787755][T15078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  745.808023][T15078] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  745.816643][T15078] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  745.824628][T15078] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004
[  745.833249][T15078] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  745.841261][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  745.849367][T15078] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  745.857375][T15078]  </TASK>
[  747.691203][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  747.698080][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  748.668642][T15110] validate_nla: 27 callbacks suppressed
[  748.668661][T15110] netlink: 'syz.1.2905': attribute type 10 has an invalid length.
[  748.683717][T15110] __nla_validate_parse: 34 callbacks suppressed
[  748.683757][T15110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2905'.
[  748.935283][T15126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2908'.
[  748.964011][T15126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2908'.
[  748.989393][T15128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2908'.
[  749.037589][T15129] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2909'.
[  749.080542][T15134] FAULT_INJECTION: forcing a failure.
[  749.080542][T15134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.084754][T15135] delete_channel: no stack
[  749.094431][T15134] CPU: 1 PID: 15134 Comm: syz.2.2911 Not tainted syzkaller #0
[  749.105952][T15134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  749.116489][T15134] Call Trace:
[  749.120100][T15134]  <TASK>
[  749.123078][T15134]  dump_stack_lvl+0x18c/0x250
[  749.127810][T15134]  ? show_regs_print_info+0x20/0x20
[  749.133075][T15134]  ? load_image+0x420/0x420
[  749.137940][T15134]  ? __might_fault+0xaa/0x120
[  749.142688][T15134]  ? __lock_acquire+0x7d80/0x7d80
[  749.147804][T15134]  ? bpf_percpu_hash_update+0x2b/0x200
[  749.153449][T15134]  ? __virt_addr_valid+0x10c/0x380
[  749.158700][T15134]  should_fail_ex+0x394/0x4c0
[  749.163480][T15134]  _copy_from_user+0x2f/0xe0
[  749.168261][T15134]  generic_map_update_batch+0x58c/0x800
[  749.174267][T15134]  ? rcu_read_unlock+0xa0/0xa0
[  749.179072][T15134]  ? __fdget+0x180/0x210
[  749.183509][T15134]  ? rcu_read_unlock+0xa0/0xa0
[  749.188296][T15134]  bpf_map_do_batch+0x3f2/0x600
[  749.193688][T15134]  ? bpf_lsm_key_alloc+0x10/0x10
[  749.198825][T15134]  __sys_bpf+0x381/0x890
[  749.203267][T15134]  ? bpf_link_show_fdinfo+0x390/0x390
[  749.208865][T15134]  ? lock_chain_count+0x20/0x20
[  749.214137][T15134]  __x64_sys_bpf+0x7c/0x90
[  749.218589][T15134]  do_syscall_64+0x55/0xb0
[  749.223213][T15134]  ? clear_bhb_loop+0x40/0x90
[  749.227911][T15134]  ? clear_bhb_loop+0x40/0x90
[  749.232630][T15134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  749.238645][T15134] RIP: 0033:0x7f304959e159
[  749.243084][T15134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.263141][T15134] RSP: 002b:00007f304a51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  749.271645][T15134] RAX: ffffffffffffffda RBX: 00007f3049825fa0 RCX: 00007f304959e159
[  749.279710][T15134] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a
[  749.287723][T15134] RBP: 00007f304a51e090 R08: 0000000000000000 R09: 0000000000000000
[  749.295718][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  749.303730][T15134] R13: 00007f3049826038 R14: 00007f3049825fa0 R15: 00007ffe52419ba8
[  749.311750][T15134]  </TASK>
[  749.819466][T15154] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2917'.
[  749.965452][T15162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2919'.
[  750.575235][T15167] syzkaller0: entered promiscuous mode
[  750.589313][T15167] syzkaller0: entered allmulticast mode
[  750.597834][T15167] net_ratelimit: 41 callbacks suppressed
[  750.597901][T15167] veth1_virt_wifi: mtu less than device minimum
[  750.935917][T15181] netlink: 'syz.3.2925': attribute type 4 has an invalid length.
[  750.955662][T15181] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2925'.
[  750.958633][T15179] netlink: 'syz.1.2924': attribute type 6 has an invalid length.
[  750.980786][T15181] .`: renamed from bond0 (while UP)
[  751.006732][T15179] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2924'.
[  751.197909][T15185] IPv6: NLM_F_CREATE should be specified when creating new route
[  751.483885][T15197] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2932'.
[  752.846190][T15232] netlink: 'syz.3.2942': attribute type 10 has an invalid length.
[  752.962581][T15226] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  753.407298][T15226] geneve1: entered promiscuous mode
[  753.414318][T15236] netlink: 'syz.0.2943': attribute type 3 has an invalid length.
[  753.432608][T15226] geneve1: entered allmulticast mode
[  753.479734][T15226] team0: Port device geneve1 added
[  753.889661][T15241] netlink: 'syz.3.2945': attribute type 27 has an invalid length.
[  753.928298][T15241] bridge0: port 3(veth0_to_bond) entered disabled state
[  753.990583][T15241] .`: (slave bond_slave_0): Releasing backup interface
[  754.039316][T15241] veth0_to_bond (unregistering): left allmulticast mode
[  754.047279][T15241] veth0_to_bond (unregistering): left promiscuous mode
[  754.054305][T15241] bridge0: port 3(veth0_to_bond) entered disabled state
[  754.085351][T15226] syz.1.2941 (15226) used greatest stack depth: 17960 bytes left
[  754.371229][T15254] netlink: 'syz.0.2949': attribute type 10 has an invalid length.
[  754.396459][T15254] __nla_validate_parse: 3 callbacks suppressed
[  754.396479][T15254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2949'.
[  754.463878][T15254] FAULT_INJECTION: forcing a failure.
[  754.463878][T15254] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.495487][T15254] CPU: 0 PID: 15254 Comm: syz.0.2949 Not tainted syzkaller #0
[  754.503032][T15254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  754.513119][T15254] Call Trace:
[  754.516435][T15254]  <TASK>
[  754.519386][T15254]  dump_stack_lvl+0x18c/0x250
[  754.524102][T15254]  ? show_regs_print_info+0x20/0x20
[  754.529496][T15254]  ? load_image+0x420/0x420
[  754.534105][T15254]  ? __lock_acquire+0x7d80/0x7d80
[  754.539148][T15254]  ? snprintf+0xe9/0x140
[  754.543584][T15254]  should_fail_ex+0x394/0x4c0
[  754.548381][T15254]  _copy_to_user+0x2f/0xa0
[  754.553160][T15254]  simple_read_from_buffer+0xe7/0x150
[  754.558636][T15254]  proc_fail_nth_read+0x1e8/0x260
[  754.563688][T15254]  ? proc_fault_inject_write+0x360/0x360
[  754.569448][T15254]  ? fsnotify_perm+0x271/0x5e0
[  754.574229][T15254]  ? proc_fault_inject_write+0x360/0x360
[  754.579885][T15254]  vfs_read+0x298/0x990
[  754.584071][T15254]  ? kernel_read+0x1e0/0x1e0
[  754.588690][T15254]  ? __fget_files+0x28/0x460
[  754.593308][T15254]  ? __fget_files+0x3fc/0x460
[  754.598113][T15254]  ? __fdget_pos+0x2a3/0x330
[  754.602817][T15254]  ? ksys_read+0x74/0x260
[  754.607175][T15254]  ksys_read+0x151/0x260
[  754.611440][T15254]  ? vfs_write+0x9a0/0x9a0
[  754.615902][T15254]  ? lockdep_hardirqs_on+0x98/0x150
[  754.621122][T15254]  do_syscall_64+0x55/0xb0
[  754.625551][T15254]  ? clear_bhb_loop+0x40/0x90
[  754.630350][T15254]  ? clear_bhb_loop+0x40/0x90
[  754.635155][T15254]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  754.641190][T15254] RIP: 0033:0x7f4ead95e98e
[  754.645810][T15254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  754.666072][T15254] RSP: 002b:00007f4eae8befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  754.674517][T15254] RAX: ffffffffffffffda RBX: 00007f4eae8bf6c0 RCX: 00007f4ead95e98e
[  754.682500][T15254] RDX: 000000000000000f RSI: 00007f4eae8bf0a0 RDI: 0000000000000005
[  754.690489][T15254] RBP: 00007f4eae8bf090 R08: 0000000000000000 R09: 0000000000000000
[  754.698596][T15254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  754.706609][T15254] R13: 00007f4eadc26038 R14: 00007f4eadc25fa0 R15: 00007ffec41008e8
[  754.714636][T15254]  </TASK>
[  754.916246][T15262] syzkaller0: entered promiscuous mode
[  754.937502][T15262] syzkaller0: entered allmulticast mode
[  757.622941][T15267] netlink: 'syz.0.2954': attribute type 10 has an invalid length.
[  757.633534][T15267] virt_wifi0: entered promiscuous mode
[  757.643733][T15267] virt_wifi0: entered allmulticast mode
[  757.650203][T15267] team0: Port device virt_wifi0 added
[  757.656418][T15276] netlink: 'syz.1.2956': attribute type 21 has an invalid length.
[  757.667578][T15279] netlink: 'syz.3.2957': attribute type 10 has an invalid length.
[  757.675428][T15279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2957'.
[  757.707171][T15278] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.2956'.
[  757.913717][T15288] ±ÿ: renamed from lo (while UP)
[  758.453004][T15303] netlink: set zone limit has 8 unknown bytes
[  758.788115][T15311] netlink: 'syz.1.2964': attribute type 10 has an invalid length.
[  758.826638][T15311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2964'.
[  758.841545][T15311] 8021q: adding VLAN 0 to HW filter on device team0
[  758.849789][T15311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  758.959646][T15314] netlink: 'syz.2.2967': attribute type 10 has an invalid length.
[  758.986430][T15314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2967'.
[  759.037853][T15316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2968'.
[  759.457309][T15331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2974'.
[  759.517371][T15331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2974'.
[  759.571476][T15335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2974'.
[  759.857344][T15342] FAULT_INJECTION: forcing a failure.
[  759.857344][T15342] name failslab, interval 1, probability 0, space 0, times 0
[  759.934859][T15342] CPU: 0 PID: 15342 Comm: syz.1.2977 Not tainted syzkaller #0
[  759.942529][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  759.952740][T15342] Call Trace:
[  759.956072][T15342]  <TASK>
[  759.959067][T15342]  dump_stack_lvl+0x18c/0x250
[  759.963915][T15342]  ? show_regs_print_info+0x20/0x20
[  759.969360][T15342]  ? load_image+0x420/0x420
[  759.974147][T15342]  ? __might_sleep+0xe0/0xe0
[  759.978834][T15342]  ? __lock_acquire+0x7d80/0x7d80
[  759.983952][T15342]  should_fail_ex+0x394/0x4c0
[  759.988842][T15342]  should_failslab+0x9/0x20
[  759.993427][T15342]  slab_pre_alloc_hook+0x59/0x300
[  759.998556][T15342]  ? kernfs_fop_write_iter+0x158/0x520
[  760.004117][T15342]  ? kernfs_fop_write_iter+0x158/0x520
[  760.009728][T15342]  __kmem_cache_alloc_node+0x53/0x250
[  760.015546][T15342]  ? kernfs_fop_write_iter+0x158/0x520
[  760.021068][T15342]  __kmalloc+0xa7/0x240
[  760.025318][T15342]  kernfs_fop_write_iter+0x158/0x520
[  760.030703][T15342]  vfs_write+0x474/0x9a0
[  760.035035][T15342]  ? file_end_write+0x250/0x250
[  760.040050][T15342]  ? __fget_files+0x3fc/0x460
[  760.044805][T15342]  ? __fdget_pos+0x2a3/0x330
[  760.049457][T15342]  ? ksys_write+0x74/0x260
[  760.054116][T15342]  ksys_write+0x151/0x260
[  760.058512][T15342]  ? __ia32_sys_read+0x90/0x90
[  760.063339][T15342]  ? lockdep_hardirqs_on+0x98/0x150
[  760.068619][T15342]  do_syscall_64+0x55/0xb0
[  760.073192][T15342]  ? clear_bhb_loop+0x40/0x90
[  760.077926][T15342]  ? clear_bhb_loop+0x40/0x90
[  760.082749][T15342]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  760.088689][T15342] RIP: 0033:0x7f4c7ad9e159
[  760.093192][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.113278][T15342] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  760.121860][T15342] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  760.129987][T15342] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000005
[  760.138009][T15342] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  760.146310][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  760.154406][T15342] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  760.162633][T15342]  </TASK>
[  760.498996][T15353] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2981'.
[  760.899156][T15363] netlink: 'syz.1.2984': attribute type 10 has an invalid length.
[  760.949219][T15363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2984'.
[  760.992795][T15363] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  761.346663][T15377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2988'.
[  761.585428][T15374] netlink: 'syz.3.2987': attribute type 11 has an invalid length.
[  761.629273][T15374] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.2987'.
[  762.122617][T15382] netlink: 'syz.2.2989': attribute type 11 has an invalid length.
[  762.178758][T15382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2989'.
[  764.659736][T15415] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2998'.
[  765.931295][T15441] FAULT_INJECTION: forcing a failure.
[  765.931295][T15441] name failslab, interval 1, probability 0, space 0, times 0
[  765.955044][T15441] CPU: 0 PID: 15441 Comm: syz.1.3005 Not tainted syzkaller #0
[  765.962780][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  765.973249][T15441] Call Trace:
[  765.976869][T15441]  <TASK>
[  765.982942][T15441]  dump_stack_lvl+0x18c/0x250
[  765.988044][T15441]  ? show_regs_print_info+0x20/0x20
[  765.993845][T15441]  ? load_image+0x420/0x420
[  765.998519][T15441]  ? __lock_acquire+0x7d80/0x7d80
[  766.003783][T15441]  ? mark_lock+0x94/0x320
[  766.008353][T15441]  should_fail_ex+0x394/0x4c0
[  766.014047][T15441]  should_failslab+0x9/0x20
[  766.019097][T15441]  slab_pre_alloc_hook+0x59/0x300
[  766.024458][T15441]  ? lockdep_init_map_type+0x9c/0x8e0
[  766.029993][T15441]  ? psi_cgroup_alloc+0x56/0x1f0
[  766.035625][T15441]  __kmem_cache_alloc_node+0x53/0x250
[  766.041253][T15441]  ? psi_cgroup_alloc+0x56/0x1f0
[  766.046433][T15441]  kmalloc_trace+0x2a/0xe0
[  766.050923][T15441]  psi_cgroup_alloc+0x56/0x1f0
[  766.055768][T15441]  cgroup_mkdir+0x5a1/0xe70
[  766.060457][T15441]  ? css_task_iter_end+0x2c0/0x2c0
[  766.065632][T15441]  ? up_read+0x20/0x20
[  766.069948][T15441]  ? make_vfsuid+0x67/0xb0
[  766.074456][T15441]  ? generic_permission+0x1ed/0x590
[  766.079821][T15441]  ? kernfs_iop_permission+0x2c4/0x3b0
[  766.085789][T15441]  ? css_task_iter_end+0x2c0/0x2c0
[  766.091521][T15441]  kernfs_iop_mkdir+0x241/0x3e0
[  766.096537][T15441]  vfs_mkdir+0x2a5/0x470
[  766.100973][T15441]  do_mkdirat+0x1dc/0x450
[  766.105461][T15441]  ? vfs_mkdir+0x470/0x470
[  766.109960][T15441]  __x64_sys_mkdirat+0x89/0xa0
[  766.114866][T15441]  do_syscall_64+0x55/0xb0
[  766.119448][T15441]  ? clear_bhb_loop+0x40/0x90
[  766.124278][T15441]  ? clear_bhb_loop+0x40/0x90
[  766.129022][T15441]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  766.135086][T15441] RIP: 0033:0x7f4c7ad9e159
[  766.139562][T15441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  766.159486][T15441] RSP: 002b:00007f4c7bd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  766.168089][T15441] RAX: ffffffffffffffda RBX: 00007f4c7b025fa0 RCX: 00007f4c7ad9e159
[  766.176500][T15441] RDX: 00000000000001ff RSI: 0000200000000380 RDI: 0000000000000003
[  766.184970][T15441] RBP: 00007f4c7bd44090 R08: 0000000000000000 R09: 0000000000000000
[  766.193432][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  766.202084][T15441] R13: 00007f4c7b026038 R14: 00007f4c7b025fa0 R15: 00007fff57654048
[  766.211829][T15441]  </TASK>
[  766.259476][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  766.269447][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  766.300218][T15443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3006'.
[  766.594613][T15458] netlink: 'syz.0.3009': attribute type 12 has an invalid length.
[  766.860187][T15464] netlink: 'syz.2.3012': attribute type 10 has an invalid length.
[  766.887963][T15464] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  766.901498][T15464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  766.913455][T15464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  766.927611][T15464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.450452][T15477] netlink: 'syz.2.3017': attribute type 2 has an invalid length.
[  767.496597][T15477] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.3017'.
[  767.846689][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  767.877991][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  767.973835][T12959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  767.986477][T12959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  768.002708][T12959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  768.011927][T12959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  768.022028][T12959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  768.029959][T12959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  768.163260][T10528] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.190074][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  768.225659][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  768.294403][T15502] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3022'.
[  768.313092][T10528] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.332037][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  768.341277][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  768.371944][T15487] netlink: 'syz.2.3019': attribute type 4 has an invalid length.
[  768.520180][T10528] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.651896][T10528] .`: (slave netdevsim0): Releasing backup interface
[  768.671891][T10528] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.735870][T15513] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3026'.
[  768.920431][T15495] chnl_net:caif_netlink_parms(): no params data found
[  769.253628][T15526] netlink: 'syz.2.3029': attribute type 11 has an invalid length.
[  769.301252][T15526] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3029'.
[  769.384330][T15526] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  769.563492][T15495] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.585058][T15495] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.606247][T15495] bridge_slave_0: entered allmulticast mode
[  769.616572][T15495] bridge_slave_0: entered promiscuous mode
[  769.629868][T15495] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.646514][T15495] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.664115][T15495] bridge_slave_1: entered allmulticast mode
[  769.683307][T15495] bridge_slave_1: entered promiscuous mode
[  769.863846][T15495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.987922][T15495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  770.094618][T12959] Bluetooth: hci2: command tx timeout
[  770.369272][T15495] team0: Port device team_slave_0 added
[  770.651166][T15495] team0: Port device team_slave_1 added
[  771.341235][T15495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  771.358187][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.385998][T15495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.412332][T15495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.420132][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.451768][T15495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  771.721620][T15495] hsr_slave_0: entered promiscuous mode
[  771.733188][T15495] hsr_slave_1: entered promiscuous mode
[  771.742479][T15495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  771.754397][T15495] Cannot create hsr debugfs directory
Stopping sshd: [  772.070031][T10528] 
[  772.072437][T10528] ======================================================
[  772.079495][T10528] WARNING: possible circular locking dependency detected
[  772.086570][T10528] syzkaller #0 Not tainted
[  772.091017][T10528] ------------------------------------------------------
[  772.098164][T10528] kworker/u4:31/10528 is trying to acquire lock:
[  772.104604][T10528] ffff88802f278d80 (team->team_lock_key#10){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0
[  772.114419][T10528] 
[  772.114419][T10528] but task is already holding lock:
[  772.122074][T10528] ffff888026630768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  772.132741][T10528] 
[  772.132741][T10528] which lock already depends on the new lock.
[  772.132741][T10528] 
[  772.143384][T10528] 
[  772.143384][T10528] the existing dependency chain (in reverse order) is:
[  772.153415][T10528] 
[  772.153415][T10528] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  772.156517][T12959] Bluetooth: hci2: command tx timeout
[  772.161827][T10528]        __mutex_lock+0x135/0xc80
[  772.161862][T10528]        ieee80211_open+0x144/0x200
[  772.177804][T10528]        __dev_open+0x2cb/0x430
[  772.182835][T10528]        dev_open+0xab/0x190
[  772.187672][T10528]        team_add_slave+0x703/0x28a0
[  772.193100][T10528]        do_setlink+0xcde/0x3f40
[  772.198147][T10528]        rtnl_newlink+0x1848/0x2170
[  772.203428][T10528]        rtnetlink_rcv_msg+0x843/0xf90
[  772.210017][T10528]        netlink_rcv_skb+0x235/0x4c0
[  772.215471][T10528]        netlink_unicast+0x7b1/0x930
[  772.221088][T10528]        netlink_sendmsg+0x8d0/0xbf0
[  772.226613][T10528]        ____sys_sendmsg+0x61b/0x980
[  772.232032][T10528]        ___sys_sendmsg+0x2a6/0x360
[  772.237456][T10528]        __se_sys_sendmsg+0x1d0/0x2c0
[  772.242886][T10528]        do_syscall_64+0x55/0xb0
[  772.247957][T10528]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  772.254532][T10528] 
[  772.254532][T10528] -> #0 (team->team_lock_key#10){+.+.}-{3:3}:
[  772.262855][T10528]        __lock_acquire+0x37ef/0x7d80
[  772.268370][T10528]        lock_acquire+0x19e/0x420
[  772.273452][T10528]        __mutex_lock+0x135/0xc80
[  772.278538][T10528]        team_del_slave+0x31/0x1b0
[  772.283735][T10528]        team_device_event+0x297/0xa30
[  772.289347][T10528]        notifier_call_chain+0x18f/0x380
[  772.295054][T10528]        unregister_netdevice_many_notify+0x1037/0x1910
[  772.302135][T10528]        unregister_netdevice_queue+0x2e9/0x330
[  772.308869][T10528]        _cfg80211_unregister_wdev+0x16d/0x580
[  772.315574][T10528]        ieee80211_remove_interfaces+0x4b3/0x690
[  772.322063][T10528]        ieee80211_unregister_hw+0x5d/0x2a0
[  772.328260][T10528]        mac80211_hwsim_del_radio+0x289/0x480
[  772.334475][T10528]        hwsim_exit_net+0x58d/0x650
[  772.339725][T10528]        cleanup_net+0x707/0xbb0
[  772.344796][T10528]        process_scheduled_works+0xa60/0x1600
[  772.350963][T10528]        worker_thread+0xa5e/0xfe0
[  772.356111][T10528]        kthread+0x2fa/0x390
[  772.360719][T10528]        ret_from_fork+0x48/0x80
[  772.365722][T10528]        ret_from_fork_asm+0x11/0x20
[  772.371165][T10528] 
[  772.371165][T10528] other info that might help us debug this:
[  772.371165][T10528] 
[  772.381693][T10528]  Possible unsafe locking scenario:
[  772.381693][T10528] 
[  772.389404][T10528]        CPU0                    CPU1
[  772.395068][T10528]        ----                    ----
[  772.400451][T10528]   lock(&rdev->wiphy.mtx);
[  772.405103][T10528]                                lock(team->team_lock_key#10);
[  772.412775][T10528]                                lock(&rdev->wiphy.mtx);
[  772.420351][T10528]   lock(team->team_lock_key#10);
[  772.425661][T10528] 
[  772.425661][T10528]  *** DEADLOCK ***
[  772.425661][T10528] 
[  772.433932][T10528] 5 locks held by kworker/u4:31/10528:
[  772.439496][T10528]  #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  772.450434][T10528]  #1: ffffc9000c7ffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  772.462099][T10528]  #2: ffffffff8e3ca510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  772.471815][T10528]  #3: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  772.482570][T10528]  #4: ffff888026630768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  772.493783][T10528] 
[  772.493783][T10528] stack backtrace:
[  772.499697][T10528] CPU: 0 PID: 10528 Comm: kworker/u4:31 Not tainted syzkaller #0
[  772.507860][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  772.518211][T10528] Workqueue: netns cleanup_net
[  772.523452][T10528] Call Trace:
[  772.526758][T10528]  <TASK>
[  772.529708][T10528]  dump_stack_lvl+0x18c/0x250
[  772.534407][T10528]  ? load_image+0x420/0x420
[  772.538938][T10528]  ? show_regs_print_info+0x20/0x20
[  772.544156][T10528]  ? print_circular_bug+0x12b/0x1a0
[  772.549403][T10528]  check_noncircular+0x2fc/0x400
[  772.554381][T10528]  ? print_deadlock_bug+0x5d0/0x5d0
[  772.559709][T10528]  ? lockdep_lock+0xf5/0x230
[  772.564430][T10528]  ? _find_first_zero_bit+0xd6/0x100
[  772.569747][T10528]  __lock_acquire+0x37ef/0x7d80
[  772.574668][T10528]  ? verify_lock_unused+0x140/0x140
[  772.579908][T10528]  ? verify_lock_unused+0x140/0x140
[  772.585140][T10528]  ? __up_read+0x2b8/0x6b0
[  772.589776][T10528]  lock_acquire+0x19e/0x420
[  772.594314][T10528]  ? team_del_slave+0x31/0x1b0
[  772.599215][T10528]  ? __might_sleep+0xe0/0xe0
[  772.603860][T10528]  ? read_lock_is_recursive+0x20/0x20
[  772.609310][T10528]  __mutex_lock+0x135/0xc80
[  772.613864][T10528]  ? team_del_slave+0x31/0x1b0
[  772.618833][T10528]  ? __mutex_lock+0x30d/0xc80
[  772.623611][T10528]  ? team_del_slave+0x31/0x1b0
[  772.628427][T10528]  ? mutex_lock_nested+0x20/0x20
[  772.633409][T10528]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  772.640130][T10528]  team_del_slave+0x31/0x1b0
[  772.644840][T10528]  team_device_event+0x297/0xa30
[  772.649890][T10528]  notifier_call_chain+0x18f/0x380
[  772.655026][T10528]  unregister_netdevice_many_notify+0x1037/0x1910
[  772.661494][T10528]  ? unregister_netdevice_many+0x20/0x20
[  772.667169][T10528]  ? kernfs_remove_by_name_ns+0x117/0x150
[  772.672948][T10528]  ? __lock_acquire+0x7d80/0x7d80
[  772.678359][T10528]  unregister_netdevice_queue+0x2e9/0x330
[  772.684256][T10528]  ? list_netdevice+0x730/0x730
[  772.689252][T10528]  ? kernfs_remove_by_name_ns+0x117/0x150
[  772.695035][T10528]  _cfg80211_unregister_wdev+0x16d/0x580
[  772.700728][T10528]  ieee80211_remove_interfaces+0x4b3/0x690
[  772.706600][T10528]  ? ieee80211_do_stop+0x2000/0x2000
[  772.712062][T10528]  ? rcu_is_watching+0x15/0xb0
[  772.717588][T10528]  ieee80211_unregister_hw+0x5d/0x2a0
[  772.722998][T10528]  mac80211_hwsim_del_radio+0x289/0x480
[  772.728576][T10528]  ? rhashtable_remove_fast+0xc00/0xc00
[  772.734136][T10528]  hwsim_exit_net+0x58d/0x650
[  772.738871][T10528]  ? hwsim_init_net+0x90/0x90
[  772.743566][T10528]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  772.749447][T10528]  cleanup_net+0x707/0xbb0
[  772.753976][T10528]  ? ops_free_list+0x3b0/0x3b0
[  772.758761][T10528]  ? _raw_spin_unlock_irq+0x23/0x50
[  772.763969][T10528]  ? process_scheduled_works+0x975/0x1600
[  772.769705][T10528]  ? process_scheduled_works+0x975/0x1600
[  772.775437][T10528]  process_scheduled_works+0xa60/0x1600
[  772.781011][T10528]  ? worker_attach_to_pool+0x370/0x370
[  772.786681][T10528]  ? assign_work+0x3cc/0x5d0
[  772.791422][T10528]  worker_thread+0xa5e/0xfe0
[  772.796162][T10528]  kthread+0x2fa/0x390
[  772.800354][T10528]  ? pr_cont_work+0x550/0x550
[  772.805070][T10528]  ? kthread_blkcg+0xd0/0xd0
[  772.809878][T10528]  ret_from_fork+0x48/0x80
[  772.814351][T10528]  ? kthread_blkcg+0xd0/0xd0
[  772.819078][T10528]  ret_from_fork_asm+0x11/0x20
[  772.823894][T10528]  </TASK>
stopped /usr/sbin/sshd (pid 5531)
OK
Stopping crond: [  772.866251][T10528] mac80211_hwsim hwsim21 wlan1 (unregistering): left promiscuous mode
[  772.885110][T10528] mac80211_hwsim hwsim21 wlan1 (unregistering): left allmulticast mode
[  772.916144][T10528] team0: Port device wlan1 removed
stopped /usr/sbin/crond (pid 5514)
OK
[  773.080705][T10528] hsr_slave_0: left promiscuous mode
[  773.087869][T10528] hsr_slave_1: left promiscuous mode
[  773.108573][T10528] bridge0: port 5(team0) entered disabled state
[  773.121565][T10528] hsr0: left allmulticast mode
[  773.136590][T10528] bridge0: port 4(hsr0) entered disabled state
[  773.144458][T10528] bridge_slave_1: left allmulticast mode
[  773.157219][T10528] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.178353][T10528] bridge_slave_0: left allmulticast mode
[  773.184157][T10528] bridge_slave_0: left promiscuous mode
[  773.196615][T10528] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.218093][T10528] veth1_macvtap: left promiscuous mode
[  773.223773][T10528] veth0_macvtap: left promiscuous mode
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5435)
Stopping network: [  773.587777][T10528] team_slave_1 (unregistering): left promiscuous mode
[  773.594709][T10528] team_slave_1 (unregistering): left allmulticast mode
[  773.611798][T10528] team0 (unregistering): Port device team_slave_1 removed
[  773.646484][T10528] team_slave_0 (unregistering): left promiscuous mode
[  773.653418][T10528] team_slave_0 (unregistering): left allmulticast mode
[  773.665742][T10528] team0 (unregistering): Port device team_slave_0 removed
[  773.682199][T10528] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.871114][T10528] dummy0 (unregistering): left promiscuous mode
[  773.880329][T10528] dummy0 (unregistering): left allmulticast mode
[  773.887547][T10528] team0 (unregistering): Port device dummy0 removed
[  773.941783][T10528] .` (unregistering): Released all slaves
[  774.242230][T12959] Bluetooth: hci2: command tx timeout
OK
[  774.465318][T15495] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  774.491105][T15495] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  774.514103][T15495] netdevsim netdevsim3 netdevsim2: renamed from eth2
Stopping iptables: [  774.544105][T15495] netdevsim netdevsim3 netdevsim3: renamed from eth3
OK
[  774.705612][T15495] 8021q: adding VLAN 0 to HW filter on device bond0
Stopping system message bus: [  774.760999][T15495] 8021q: adding VLAN 0 to HW filter on device team0
[  774.778978][T15229] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.786594][T15229] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.809652][T10528] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.818436][T10528] bridge0: port 2(bridge_slave_1) entered forwarding state
done
[  775.180670][T15495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.240269][T15495] veth0_vlan: entered promiscuous mode
[  775.254338][T15495] veth1_vlan: entered promiscuous mode
[  775.293990][T15495] veth0_macvtap: entered promiscuous mode
[  775.309291][T15495] veth1_macvtap: entered promiscuous mode
[  775.331974][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  775.346138][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.361390][T15495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.378514][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.390292][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.403034][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.414881][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.430488][T15495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.445301][T15495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.455390][T15495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  775.464861][T15495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  775.475651][T15495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.523462][T15495] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht'
[  775.558020][T10532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.565903][T10532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.575363][T15495] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'
[  775.610626][T15229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.620997][T15229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
killall: can't kill pid 14565: No such process
killall: can't kill pid 15517: No such process
killall: can't kill pid 15520: No such process
killall: can't kill pid 15521: No such process
Stopping klogd: OK
Stopping acpid: [  776.316538][T12959] Bluetooth: hci2: command tx timeout
OK
Stopping syslogd: stopped /sbin/syslogd (pid 5123)
OK
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.186 closed by remote host.
Sent SIGTERM to all processes
[  778.739261][T10528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.883612][ T7635] bond0: (slave syz_tun): Releasing backup interface
[  778.902339][T10528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.985378][T10528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.032075][T10528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
Requesting system poweroff
[  779.922379][T10528] ¨à'©ÿˆ: left allmulticast mode
[  779.931524][T10528] hsr_slave_0: left allmulticast mode
[  779.938058][T10528] hsr_slave_1: left allmulticast mode
[  779.943877][T10528] ¨à'©ÿˆ: left promiscuous mode
[  779.949187][T10528] nr0: port 1(¨à'©ÿˆ) entered disabled state
[  779.959693][T10528] hsr_slave_0: left promiscuous mode
[  779.965686][T10528] hsr_slave_1: left promiscuous mode
[  779.971871][T10528] bridge0: port 2(team0) entered disabled state
[  779.981541][T10528] veth0_to_bond: left allmulticast mode
[  779.987357][T10528] veth0_to_bond: left promiscuous mode
[  779.993024][T10528] bridge0: port 3(veth0_to_bond) entered disabled state
[  780.001715][T10528] bridge_slave_0: left allmulticast mode
[  780.007565][T10528] bridge_slave_0: left promiscuous mode
[  780.013382][T10528] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.023434][T10528] veth0_macvtap: left promiscuous mode
[  780.029768][T10528] veth1_vlan: left allmulticast mode
[  780.035253][T10528] veth1_vlan: left promiscuous mode
[  780.040835][T10528] veth0_vlan: left promiscuous mode
[  780.182637][T15661] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  780.191673][T15661] ACPI: PM: Preparing to enter system sleep state S5
[  780.198886][T15661] kvm: exiting hardware virtualization
[  780.204571][T15661] reboot: Power down
serialport: VM disconnected.