last executing test programs:

9.91154225s ago: executing program 0 (id=4861):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
ioctl$TUNGETVNETLE(r2, 0x8953, &(0x7f0000000040))
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0xfc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000001}, 0x400, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x10012, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004800)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

9.424068922s ago: executing program 0 (id=4866):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ee09837153e370a0101", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x1000c8c0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45", 0x8}], 0x1}, 0x10)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)}, 0x40)

9.026341901s ago: executing program 0 (id=4869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000040850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

8.731816768s ago: executing program 0 (id=4872):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

8.437760185s ago: executing program 0 (id=4875):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
r0 = socket$kcm(0xa, 0x2, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))

8.068603024s ago: executing program 0 (id=4879):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1}, 0x40010143)

5.552949395s ago: executing program 3 (id=4897):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000004071185c000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.420872478s ago: executing program 3 (id=4901):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0xf, 0x3, 0x2)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {0x0}, {&(0x7f00000005c0)}], 0x3}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x40)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000028000000"], 0x48}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0xf, 0x0, &(0x7f0000000bc0), 0x0, 0x7ff, 0x1000, &(0x7f0000001e80)=""/4096, 0x41100, 0x61, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000002e80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002ec0)={0x5, 0x9, 0x1, 0xf7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000002f00)=[0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xc3}, 0x94)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)

4.358981874s ago: executing program 3 (id=4910):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="720ac4ff000000007110ab0000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000110000"], &(0x7f0000000480)='GPL\x00'}, 0x94)

4.10051508s ago: executing program 3 (id=4912):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xec, 0x0, 0x1, 0x0, 0x0, 0x480000000000002b, 0x944f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, @perf_config_ext={0x76, 0x7}, 0x0, 0x4b, 0x98, 0x1, 0x1, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x104101, 0x7, 0x0, 0x1, 0x100, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001140))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000d04000000000000080000000000306130611e00"], 0x0, 0x2b, 0x0, 0x1, 0xdb}, 0x28)
r6 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xfa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r5, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000001d0000000000000003000000852000000100000018470000feffffff0000000000000000852000000400000018410000feffffff00000000000000009500000000000000186800000500000000000000020000001865000009000000000000006c100000181b0000", @ANYRES32, @ANYBLOB="0000000000000000180100002020782500000000002020207b1af8ff00010000bfa100000701000000ffffffb702000008000000b703000013030000850000000600ffffffff9500"/88], &(0x7f00000007c0)='GPL\x00', 0x80, 0x94, &(0x7f00000009c0)=""/148, 0x41000, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x5, 0x1, 0x9}, 0x10, 0x1ae73, 0xffffffffffffffff, 0x1, &(0x7f0000001040)=[r5], &(0x7f0000001080)=[{0x0, 0x2, 0xb, 0x4}], 0x10, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x9a)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000083f2aee79210c3b4a239e4358e52557850fbeb9c53173da8b7dd22efc6d3066676bb58f606987024ed67b89ac28ba74c99b7db8e30a0ecb53e5f24c044283625ba339d4e88de", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0)
r10 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004000)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d", 0x0, 0xffff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4.022763222s ago: executing program 2 (id=4913):
r0 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0xef, 0x1af1ed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f00110000fffd0000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0)

3.876237866s ago: executing program 2 (id=4914):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5411, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, 0x0, 0x4000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff002718fce9d2b561a344a2eadd90ef8f44000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000336ae03419da40"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$cgroup_type(r6, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x7d, 0x0, 0x0)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x890)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)

3.28879235s ago: executing program 1 (id=4917):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x5, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x2}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x30, 0x2}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0xf, 0x4}, {0x0, 0x7fffffff}, {0xc, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x65b84459}}]}, {0x0, [0x5f, 0x30, 0x5f]}}, &(0x7f0000000640)=""/145, 0xd1, 0x91, 0x0, 0x1}, 0x28)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @generic={0x2, 0xc, 0x1, 0x100, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x1, 0x3, 0x3, 0x7, 0x100, 0x13}, @jmp={0x5, 0x1, 0x4, 0xb, 0x7, 0x40, 0x10}], &(0x7f00000000c0)='syzkaller\x00', 0x10001, 0x98, &(0x7f0000000140)=""/152, 0x41100, 0x55, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x2, 0xffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r1, r5, r1, r0, r1, r0], &(0x7f0000000880)=[{0x0, 0x2, 0x1}, {0x2, 0x5}], 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.036834296s ago: executing program 1 (id=4918):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48)

956.127346ms ago: executing program 1 (id=4919):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4)
close(r1)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004)
close(r2)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x28}, 0x40014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)

926.668327ms ago: executing program 2 (id=4920):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x5, 0x0, 0xa00}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94)

756.901751ms ago: executing program 2 (id=4921):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20}) (async, rerun: 32)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (rerun: 32)

701.493393ms ago: executing program 3 (id=4922):
socketpair(0x25, 0x5, 0x80, &(0x7f0000000b80))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000e0022000400000003000900000061000000302e2e"], 0x0, 0x3a, 0x0, 0x1, 0x5}, 0x28)

668.324893ms ago: executing program 1 (id=4923):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b4002f0000016e50dcd29a7a9d", 0x33}], 0x1, 0x0, 0x0, 0x1200}, 0x0)

532.920476ms ago: executing program 1 (id=4924):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x20000004)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

463.133949ms ago: executing program 2 (id=4925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000003030000000004d831141ac35813114b4c6113bb3b33bbdd2877b474a8ffaeaa9295af8a861811b9e94d6889a7b54a560718d1cae434727a59acd8299d4c356c375ea6570119d5de3f4e"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='G', 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="02d93259f2970dde9f32abb89277d28e64356ce9be6fd319262d6a1e1b553ed0ca3c171ec98f5d0cba01259c3c798182da7ea7fd843a6207ec554e21711d3430a30bf44e06f02ff93b431296883b792512eb316207b3ed9c44c65bc2b5a7ff83e0f5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x2e)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r3, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf7, 0xe8, 0x40, 0x3, 0x0, 0x7, 0x108, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x6, 0x3, 0x3, 0x8, 0x4, 0xffffff00, 0x90c2, 0x0, 0x0, 0x0, 0x1}, r5, 0x4, r6, 0x3)

443.176689ms ago: executing program 3 (id=4926):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x82, 0xfe, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xe}, 0x8008, 0x5, 0x43a1bd76, 0x7, 0x5, 0x4000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc9829ba7e49baa47)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000c40)=r0, 0x4)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x10)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x9, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xb0b, r5}, 0x38)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x3)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b1800089030400008450892f325f003911050b038902005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

647.1µs ago: executing program 2 (id=4927):
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x5}, @ldst={0x2, 0x0, 0x0, 0x9, 0x5, 0x6, 0x4}, @generic={0x5, 0x6, 0x9, 0x3, 0x8d}, @ldst={0x1, 0x1, 0x3, 0x0, 0x7, 0x8, 0xfffffffffffffffc}, @generic={0x3, 0x1, 0x3, 0xff81, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0xc, 0xffffffffffffffff}, @exit]}, 0x0, 0x0, 0xcd, &(0x7f0000000a40)=""/205, 0x40f00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0xf, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000ec0)=[r1, r1, r1], &(0x7f0000000f00)=[{0x2, 0x2, 0x5, 0x5}, {0x2, 0x5, 0x5, 0x4}, {0x3, 0x3, 0x2, 0x2}, {0x5, 0x2, 0x1}, {0x0, 0x4, 0xf, 0xa}, {0x3, 0x1, 0xd, 0x5}], 0x10, 0x6}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19)
socket$kcm(0xa, 0x5, 0x0)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

0s ago: executing program 1 (id=4928):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="2eb0e9dc27366f8deca98040b1bb6ed44fcdcf691d58de3f8cf7b7196c742ff3d369de6874d916681a155b5007b1d7e560ac320d79950c2fc58d51d5ad8fea6d074889e5208f87ba470e8f2adfa7b477d1dbee6ec55f9cc6b2da2bc8bb9997bf8b38813d17b5b68dad9514f92bb8a71a30d96752cde9ef2be7652856bbb17490d3af5fac3481c61d56aef9ab7666e006032cd3e4ea82731b4ceca9d2c260966a0920f1f1ff5390bb5993be7614e2bdbea2df5a6efd7719270606085879468a483d66b6afd77d", 0xc6}], 0x1, &(0x7f0000000940)=[{0x38, 0x113, 0x1, "0ef1371ca150d94274608f0a19a3b2a596608a8000235ec3fe0c035e18df4b974d"}, {0x40, 0x118, 0x6, "20bf3739ed45b2a2c4b35eac9e8b773c3b14eb18b307b6e0481a51a92b5403803d1f7f6ff443a0393accb095"}, {0xe0, 0x108, 0x10, "993dd065c296514679afad5b9e13ba6797f7a2b0bb154033bd1dc7516eb023cbf66524db12975c824ae5ef4362b3beddb53e15343a05e3bb7859f591ead66d9a426921f921cd0ceec7289ee9f9ac0bab3fd051ada0ceab233aa654e9d8193a7f4a8dbdea080fb6d161383777e969088b5dcca32210e14d332e933b539f5e51cd0b73e91f6e7497ccc4b6e1e49d37413aefcb0598b3bba2ae9d67f12a721dabfff63c133697cc0b7e95b81b85ea2f4963bf6fccf66ada6b87618386e68da5c3bfc1cdb65d6d439c06041b50fcd3d9d2"}], 0x158}, 0x40080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdc, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xb477}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

003
[  621.672514][T18360] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  621.680480][T18360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.688446][T18360] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  621.696426][T18360]  </TASK>
[  621.979927][T18367] FAULT_INJECTION: forcing a failure.
[  621.979927][T18367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  622.015047][T18367] CPU: 0 PID: 18367 Comm: syz.2.4043 Not tainted syzkaller #0
[  622.022551][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  622.032629][T18367] Call Trace:
[  622.035921][T18367]  <TASK>
[  622.038860][T18367]  dump_stack_lvl+0x18c/0x250
[  622.043562][T18367]  ? show_regs_print_info+0x20/0x20
[  622.048784][T18367]  ? load_image+0x420/0x420
[  622.053311][T18367]  ? __lock_acquire+0x7d80/0x7d80
[  622.058360][T18367]  ? snprintf+0xe9/0x140
[  622.062620][T18367]  should_fail_ex+0x394/0x4c0
[  622.067311][T18367]  _copy_to_user+0x2f/0xa0
[  622.071737][T18367]  simple_read_from_buffer+0xe7/0x150
[  622.077121][T18367]  proc_fail_nth_read+0x1e8/0x260
[  622.082160][T18367]  ? proc_fault_inject_write+0x360/0x360
[  622.087805][T18367]  ? fsnotify_perm+0x271/0x5e0
[  622.092576][T18367]  ? proc_fault_inject_write+0x360/0x360
[  622.098229][T18367]  vfs_read+0x298/0x990
[  622.102408][T18367]  ? kernel_read+0x1e0/0x1e0
[  622.107034][T18367]  ? __fget_files+0x28/0x460
[  622.111633][T18367]  ? __fget_files+0x3fc/0x460
[  622.116324][T18367]  ? __fdget_pos+0x2a3/0x330
[  622.120927][T18367]  ? ksys_read+0x74/0x260
[  622.125274][T18367]  ksys_read+0x151/0x260
[  622.129528][T18367]  ? vfs_write+0x9a0/0x9a0
[  622.133958][T18367]  ? lockdep_hardirqs_on+0x98/0x150
[  622.139168][T18367]  do_syscall_64+0x55/0xb0
[  622.143615][T18367]  ? clear_bhb_loop+0x40/0x90
[  622.148300][T18367]  ? clear_bhb_loop+0x40/0x90
[  622.152983][T18367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.158879][T18367] RIP: 0033:0x7ff14595e84e
[  622.163303][T18367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  622.182917][T18367] RSP: 002b:00007ff1467fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  622.191340][T18367] RAX: ffffffffffffffda RBX: 00007ff1467fe6c0 RCX: 00007ff14595e84e
[  622.199312][T18367] RDX: 000000000000000f RSI: 00007ff1467fe0a0 RDI: 0000000000000006
[  622.207287][T18367] RBP: 00007ff1467fe090 R08: 0000000000000000 R09: 0000000000000000
[  622.215268][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.223247][T18367] R13: 00007ff145c26128 R14: 00007ff145c26090 R15: 00007ffc949cae68
[  622.231233][T18367]  </TASK>
[  622.529287][T18376] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4047'.
[  622.621489][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  622.666116][T18376] bond0 (unregistering): (slave 
c
@0Ùaaaaaaaaa): Releasing backup interface
[  622.700431][T18376] bond0 (unregistering): Released all slaves
[  622.992769][T18395] netlink: 'syz.3.4052': attribute type 16 has an invalid length.
[  623.001698][T18395] netlink: 'syz.3.4052': attribute type 3 has an invalid length.
[  623.013943][T18395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4052'.
[  623.307200][T18403] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.4055'.
[  623.449929][T18403] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4055'.
[  623.825358][T18422] netlink: 'syz.3.4061': attribute type 16 has an invalid length.
[  623.846798][T18422] netlink: 'syz.3.4061': attribute type 3 has an invalid length.
[  623.856915][T18422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4061'.
[  624.112325][T18435] FAULT_INJECTION: forcing a failure.
[  624.112325][T18435] name failslab, interval 1, probability 0, space 0, times 0
[  624.131509][T18435] CPU: 0 PID: 18435 Comm: syz.0.4064 Not tainted syzkaller #0
[  624.139014][T18435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  624.149098][T18435] Call Trace:
[  624.150132][T18431] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4063'.
[  624.152372][T18435]  <TASK>
[  624.152404][T18435]  dump_stack_lvl+0x18c/0x250
[  624.152434][T18435]  ? show_regs_print_info+0x20/0x20
[  624.152455][T18435]  ? load_image+0x420/0x420
[  624.152485][T18435]  ? __might_sleep+0xe0/0xe0
[  624.152509][T18435]  ? __lock_acquire+0x7d80/0x7d80
[  624.152536][T18435]  should_fail_ex+0x394/0x4c0
[  624.152565][T18435]  should_failslab+0x9/0x20
[  624.197542][T18435]  slab_pre_alloc_hook+0x59/0x300
[  624.202559][T18435]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  624.208275][T18435]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  624.213983][T18435]  __kmem_cache_alloc_node+0x53/0x250
[  624.219364][T18435]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  624.225115][T18435]  __kmalloc+0xa7/0x240
[  624.229294][T18435]  tomoyo_realpath_from_path+0xe6/0x5c0
[  624.234848][T18435]  ? tomoyo_domain+0xd6/0x120
[  624.239560][T18435]  tomoyo_path_number_perm+0x248/0x5e0
[  624.245048][T18435]  ? tomoyo_path_number_perm+0x217/0x5e0
[  624.250707][T18435]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  624.256193][T18435]  ? ksys_write+0x1d2/0x260
[  624.260761][T18435]  ? __fget_files+0x28/0x460
[  624.265391][T18435]  security_file_ioctl+0x70/0xa0
[  624.270359][T18435]  __se_sys_ioctl+0x48/0x170
[  624.274984][T18435]  do_syscall_64+0x55/0xb0
[  624.279424][T18435]  ? clear_bhb_loop+0x40/0x90
[  624.284121][T18435]  ? clear_bhb_loop+0x40/0x90
[  624.288822][T18435]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  624.294757][T18435] RIP: 0033:0x7fe1d339e019
[  624.299190][T18435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.318813][T18435] RSP: 002b:00007fe1d42e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  624.327244][T18435] RAX: ffffffffffffffda RBX: 00007fe1d3625fa0 RCX: 00007fe1d339e019
[  624.335234][T18435] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  624.343212][T18435] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  624.351178][T18435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.359158][T18435] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  624.367132][T18435]  </TASK>
[  624.377144][T18435] ERROR: Out of memory at tomoyo_realpath_from_path.
[  624.466072][T18431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.488477][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  624.495002][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  624.496385][T18431] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  624.528923][T18431] bond0 (unregistering): Released all slaves
[  624.866679][T18455] netlink: 'syz.1.4068': attribute type 16 has an invalid length.
[  626.106714][T18504] validate_nla: 3 callbacks suppressed
[  626.106729][T18504] netlink: 'syz.0.4082': attribute type 16 has an invalid length.
[  626.120391][T18504] netlink: 'syz.0.4082': attribute type 3 has an invalid length.
[  626.128207][T18504] __nla_validate_parse: 2 callbacks suppressed
[  626.128219][T18504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4082'.
[  626.291595][T18496] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4081'.
[  626.404981][T18510] FAULT_INJECTION: forcing a failure.
[  626.404981][T18510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.438429][T18496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  626.476242][T18496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  626.498961][T18510] CPU: 1 PID: 18510 Comm: syz.0.4083 Not tainted syzkaller #0
[  626.506475][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  626.516552][T18510] Call Trace:
[  626.519854][T18510]  <TASK>
[  626.522808][T18510]  dump_stack_lvl+0x18c/0x250
[  626.527518][T18510]  ? show_regs_print_info+0x20/0x20
[  626.532739][T18510]  ? load_image+0x420/0x420
[  626.537273][T18510]  ? __might_fault+0xaa/0x120
[  626.541971][T18510]  ? __lock_acquire+0x7d80/0x7d80
[  626.547023][T18510]  should_fail_ex+0x394/0x4c0
[  626.551730][T18510]  _copy_from_iter+0x1cd/0x1290
[  626.556695][T18510]  ? rcu_is_watching+0x15/0xb0
[  626.561487][T18510]  ? copyout_mc+0x70/0x70
[  626.565843][T18510]  ? __virt_addr_valid+0x10c/0x380
[  626.570977][T18510]  ? __virt_addr_valid+0x10c/0x380
[  626.576108][T18510]  ? __virt_addr_valid+0x10c/0x380
[  626.581246][T18510]  ? __check_object_size+0x4fc/0xa40
[  626.586554][T18510]  netlink_sendmsg+0x76b/0xbf0
[  626.591353][T18510]  ? netlink_getsockopt+0x590/0x590
[  626.596574][T18510]  ? apparmor_socket_sendmsg+0x8e/0x330
[  626.602180][T18510]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  626.607488][T18510]  ? security_socket_sendmsg+0x80/0xa0
[  626.612995][T18510]  ? netlink_getsockopt+0x590/0x590
[  626.618219][T18510]  ____sys_sendmsg+0x61b/0x980
[  626.623012][T18510]  ? __asan_memset+0x22/0x40
[  626.627628][T18510]  ? __sys_sendmsg_sock+0x30/0x30
[  626.632671][T18510]  ? __import_iovec+0x5f2/0x850
[  626.637552][T18510]  ? import_iovec+0x73/0xa0
[  626.642086][T18510]  ___sys_sendmsg+0x2a6/0x360
[  626.646781][T18510]  ? get_pid_task+0x20/0x1e0
[  626.651413][T18510]  ? __sys_sendmsg+0x2b0/0x2b0
[  626.656222][T18510]  ? __lock_acquire+0x7d80/0x7d80
[  626.661294][T18510]  __se_sys_sendmsg+0x1d0/0x2c0
[  626.666167][T18510]  ? __x64_sys_sendmsg+0x80/0x80
[  626.671225][T18510]  ? lockdep_hardirqs_on+0x98/0x150
[  626.676460][T18510]  do_syscall_64+0x55/0xb0
[  626.680892][T18510]  ? clear_bhb_loop+0x40/0x90
[  626.685594][T18510]  ? clear_bhb_loop+0x40/0x90
[  626.690293][T18510]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  626.696206][T18510] RIP: 0033:0x7fe1d339e019
[  626.700637][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.720258][T18510] RSP: 002b:00007fe1d42e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  626.728691][T18510] RAX: ffffffffffffffda RBX: 00007fe1d3625fa0 RCX: 00007fe1d339e019
[  626.736677][T18510] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  626.744660][T18510] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  626.752653][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.760642][T18510] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  626.768653][T18510]  </TASK>
[  626.774912][T18496] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  626.936508][T18496] bond0 (unregistering): Released all slaves
[  627.400116][T18522] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4088'.
[  627.462282][T18522] net_ratelimit: 84 callbacks suppressed
[  627.462299][T18522] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  627.685594][T18529] netlink: 'syz.2.4091': attribute type 16 has an invalid length.
[  627.694027][T18529] netlink: 'syz.2.4091': attribute type 3 has an invalid length.
[  627.714061][T18529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4091'.
[  628.717311][T18553] syz.3.4099 (18553) used obsolete PPPIOCDETACH ioctl
[  628.836250][T18553] netlink: 'syz.3.4099': attribute type 3 has an invalid length.
[  628.877852][T18553] netlink: 'syz.3.4099': attribute type 1 has an invalid length.
[  628.930080][T18553] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4099'.
[  629.428976][T18560] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4097'.
[  629.893502][T18560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  630.143535][T18560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  630.190318][T18586] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4109'.
[  630.291160][T18560] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  630.508986][T18560] bond0 (unregistering): Released all slaves
[  630.942979][T18586] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4109'.
[  630.956154][T18587] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4109'.
[  631.220815][T18591] netlink: 'syz.3.4110': attribute type 2 has an invalid length.
[  631.266622][T18591] netlink: 'syz.3.4110': attribute type 8 has an invalid length.
[  631.284501][T18591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4110'.
[  631.581368][T18603] netlink: 'syz.2.4116': attribute type 10 has an invalid length.
[  633.026762][T18636] netlink: 'syz.0.4126': attribute type 27 has an invalid length.
[  633.043188][T18636] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4126'.
[  633.186598][T18644] FAULT_INJECTION: forcing a failure.
[  633.186598][T18644] name failslab, interval 1, probability 0, space 0, times 0
[  633.212519][T18644] CPU: 1 PID: 18644 Comm: syz.0.4129 Not tainted syzkaller #0
[  633.220034][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  633.227189][T18646] netlink: 'syz.1.4128': attribute type 6 has an invalid length.
[  633.230084][T18644] Call Trace:
[  633.230095][T18644]  <TASK>
[  633.244019][T18644]  dump_stack_lvl+0x18c/0x250
[  633.248729][T18644]  ? show_regs_print_info+0x20/0x20
[  633.251736][T18646] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4128'.
[  633.253921][T18644]  ? load_image+0x420/0x420
[  633.253952][T18644]  ? __might_sleep+0xe0/0xe0
[  633.253974][T18644]  ? __lock_acquire+0x7d80/0x7d80
[  633.253998][T18644]  should_fail_ex+0x394/0x4c0
[  633.254026][T18644]  should_failslab+0x9/0x20
[  633.254051][T18644]  slab_pre_alloc_hook+0x59/0x300
[  633.254078][T18644]  ? tomoyo_encode+0x2ad/0x570
[  633.254103][T18644]  ? tomoyo_encode+0x2ad/0x570
[  633.254124][T18644]  __kmem_cache_alloc_node+0x53/0x250
[  633.254152][T18644]  ? tomoyo_encode+0x2ad/0x570
[  633.311494][T18644]  __kmalloc+0xa7/0x240
[  633.315681][T18644]  tomoyo_encode+0x2ad/0x570
[  633.320305][T18644]  tomoyo_realpath_from_path+0x57c/0x5c0
[  633.325966][T18644]  ? tomoyo_domain+0xd6/0x120
[  633.330675][T18644]  tomoyo_path_number_perm+0x248/0x5e0
[  633.336157][T18644]  ? tomoyo_path_number_perm+0x217/0x5e0
[  633.341821][T18644]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  633.347306][T18644]  ? ksys_write+0x1d2/0x260
[  633.351866][T18644]  ? __fget_files+0x28/0x460
[  633.356494][T18644]  security_file_ioctl+0x70/0xa0
[  633.361458][T18644]  __se_sys_ioctl+0x48/0x170
[  633.366075][T18644]  do_syscall_64+0x55/0xb0
[  633.370513][T18644]  ? clear_bhb_loop+0x40/0x90
[  633.375215][T18644]  ? clear_bhb_loop+0x40/0x90
[  633.379935][T18644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  633.385845][T18644] RIP: 0033:0x7fe1d339e019
[  633.390276][T18644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.409895][T18644] RSP: 002b:00007fe1d42e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  633.418321][T18644] RAX: ffffffffffffffda RBX: 00007fe1d3625fa0 RCX: 00007fe1d339e019
[  633.426303][T18644] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  633.434284][T18644] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  633.442257][T18644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.450231][T18644] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  633.458218][T18644]  </TASK>
[  633.486175][T18644] ERROR: Out of memory at tomoyo_realpath_from_path.
[  633.980307][T18658] syzkaller0: entered promiscuous mode
[  634.000591][T18658] syzkaller0: entered allmulticast mode
[  634.043797][T18658] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4131'.
[  634.067267][T18658] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4131'.
[  638.255708][T18712] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4149'.
[  638.327835][T18715] netlink: 'syz.0.4150': attribute type 6 has an invalid length.
[  638.385119][T18715] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4150'.
[  639.462603][T18739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4157'.
[  639.574991][T18743] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4159'.
[  639.746126][T18749] netlink: 'syz.3.4161': attribute type 2 has an invalid length.
[  639.760913][T18749] netlink: 'syz.3.4161': attribute type 8 has an invalid length.
[  639.770372][T18749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4161'.
[  639.940808][T18753] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4162'.
[  640.237852][T18765] FAULT_INJECTION: forcing a failure.
[  640.237852][T18765] name failslab, interval 1, probability 0, space 0, times 0
[  640.261231][T18765] CPU: 0 PID: 18765 Comm: syz.2.4167 Not tainted syzkaller #0
[  640.268723][T18765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  640.278789][T18765] Call Trace:
[  640.282059][T18765]  <TASK>
[  640.284982][T18765]  dump_stack_lvl+0x18c/0x250
[  640.289657][T18765]  ? show_regs_print_info+0x20/0x20
[  640.294846][T18765]  ? load_image+0x420/0x420
[  640.299346][T18765]  ? verify_lock_unused+0x140/0x140
[  640.304544][T18765]  should_fail_ex+0x394/0x4c0
[  640.309219][T18765]  should_failslab+0x9/0x20
[  640.313716][T18765]  slab_pre_alloc_hook+0x59/0x300
[  640.318746][T18765]  kmem_cache_alloc+0x5a/0x2c0
[  640.323512][T18765]  ? skb_clone+0x1eb/0x370
[  640.327932][T18765]  skb_clone+0x1eb/0x370
[  640.332167][T18765]  __netlink_deliver_tap+0x411/0x7f0
[  640.337455][T18765]  ? netlink_deliver_tap+0x2e/0x1b0
[  640.342641][T18765]  netlink_deliver_tap+0x19c/0x1b0
[  640.347746][T18765]  netlink_unicast+0x77b/0x930
[  640.352519][T18765]  netlink_sendmsg+0x8d0/0xbf0
[  640.357284][T18765]  ? netlink_getsockopt+0x590/0x590
[  640.362472][T18765]  ? apparmor_socket_sendmsg+0x8e/0x330
[  640.368010][T18765]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  640.373284][T18765]  ? security_socket_sendmsg+0x80/0xa0
[  640.378747][T18765]  ? netlink_getsockopt+0x590/0x590
[  640.383964][T18765]  ____sys_sendmsg+0x61b/0x980
[  640.388736][T18765]  ? __asan_memset+0x22/0x40
[  640.393341][T18765]  ? __sys_sendmsg_sock+0x30/0x30
[  640.398355][T18765]  ? __import_iovec+0x3fa/0x850
[  640.403208][T18765]  ? import_iovec+0x73/0xa0
[  640.407728][T18765]  ___sys_sendmsg+0x2a6/0x360
[  640.412404][T18765]  ? get_pid_task+0x20/0x1e0
[  640.416997][T18765]  ? __sys_sendmsg+0x2b0/0x2b0
[  640.421769][T18765]  ? __lock_acquire+0x7d80/0x7d80
[  640.426808][T18765]  __se_sys_sendmsg+0x1d0/0x2c0
[  640.431652][T18765]  ? __x64_sys_sendmsg+0x80/0x80
[  640.436593][T18765]  ? lockdep_hardirqs_on+0x98/0x150
[  640.441788][T18765]  do_syscall_64+0x55/0xb0
[  640.446214][T18765]  ? clear_bhb_loop+0x40/0x90
[  640.450881][T18765]  ? clear_bhb_loop+0x40/0x90
[  640.455548][T18765]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  640.461433][T18765] RIP: 0033:0x7ff14599e019
[  640.465840][T18765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.485438][T18765] RSP: 002b:00007ff14681f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  640.493845][T18765] RAX: ffffffffffffffda RBX: 00007ff145c25fa0 RCX: 00007ff14599e019
[  640.501804][T18765] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[  640.509766][T18765] RBP: 00007ff14681f090 R08: 0000000000000000 R09: 0000000000000000
[  640.517728][T18765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.525689][T18765] R13: 00007ff145c26038 R14: 00007ff145c25fa0 R15: 00007ffc949cae68
[  640.533665][T18765]  </TASK>
[  640.549849][T18765] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4167'.
[  641.330410][T18797] netlink: 'syz.2.4175': attribute type 3 has an invalid length.
[  641.342438][T18794] netlink: 'syz.2.4175': attribute type 3 has an invalid length.
[  641.379550][T18797] netlink: 'syz.2.4175': attribute type 1 has an invalid length.
[  641.384143][T18794] netlink: 'syz.2.4175': attribute type 1 has an invalid length.
[  641.428867][T18797] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4175'.
[  641.438167][T18794] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4175'.
[  641.450662][T18801] FAULT_INJECTION: forcing a failure.
[  641.450662][T18801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  641.474094][T18801] CPU: 0 PID: 18801 Comm: syz.1.4180 Not tainted syzkaller #0
[  641.481580][T18801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  641.491627][T18801] Call Trace:
[  641.494897][T18801]  <TASK>
[  641.497818][T18801]  dump_stack_lvl+0x18c/0x250
[  641.502492][T18801]  ? show_regs_print_info+0x20/0x20
[  641.507680][T18801]  ? load_image+0x420/0x420
[  641.512178][T18801]  ? __might_fault+0xaa/0x120
[  641.516845][T18801]  ? __lock_acquire+0x7d80/0x7d80
[  641.521865][T18801]  should_fail_ex+0x394/0x4c0
[  641.526542][T18801]  _copy_from_user+0x2f/0xe0
[  641.531144][T18801]  get_user_ifreq+0x6b/0x180
[  641.535745][T18801]  sock_ioctl+0x6f1/0x7e0
[  641.540074][T18801]  ? sock_poll+0x3e0/0x3e0
[  641.544497][T18801]  ? bpf_lsm_file_ioctl+0x9/0x10
[  641.549432][T18801]  ? security_file_ioctl+0x80/0xa0
[  641.554552][T18801]  ? sock_poll+0x3e0/0x3e0
[  641.558966][T18801]  __se_sys_ioctl+0xfd/0x170
[  641.563567][T18801]  do_syscall_64+0x55/0xb0
[  641.567979][T18801]  ? clear_bhb_loop+0x40/0x90
[  641.572665][T18801]  ? clear_bhb_loop+0x40/0x90
[  641.577347][T18801]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.583242][T18801] RIP: 0033:0x7f26db59e019
[  641.587658][T18801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.607260][T18801] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  641.615668][T18801] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  641.623637][T18801] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  641.631597][T18801] RBP: 00007f26dc4c8090 R08: 0000000000000000 R09: 0000000000000000
[  641.639557][T18801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.647520][T18801] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  641.655498][T18801]  </TASK>
[  641.920247][T18811] can: request_module (can-proto-0) failed.
[  642.467861][T18834] ipvlan1: entered promiscuous mode
[  642.481966][T18834] ipvlan1: entered allmulticast mode
[  642.489990][T18834] veth0_vlan: entered allmulticast mode
[  642.503148][T18843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4193'.
[  642.533521][T18843] FAULT_INJECTION: forcing a failure.
[  642.533521][T18843] name failslab, interval 1, probability 0, space 0, times 0
[  642.552799][T18843] CPU: 1 PID: 18843 Comm: syz.1.4193 Not tainted syzkaller #0
[  642.560284][T18843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  642.570337][T18843] Call Trace:
[  642.573609][T18843]  <TASK>
[  642.576531][T18843]  dump_stack_lvl+0x18c/0x250
[  642.581202][T18843]  ? verify_lock_unused+0x140/0x140
[  642.586394][T18843]  ? show_regs_print_info+0x20/0x20
[  642.591583][T18843]  ? load_image+0x420/0x420
[  642.596088][T18843]  ? do_trace_netlink_extack+0x7e/0x1a0
[  642.601632][T18843]  ? __nla_validate_parse+0x2701/0x2fd0
[  642.607176][T18843]  should_fail_ex+0x394/0x4c0
[  642.611850][T18843]  should_failslab+0x9/0x20
[  642.616349][T18843]  slab_pre_alloc_hook+0x59/0x300
[  642.621376][T18843]  ? ___neigh_create+0x6f4/0x23d0
[  642.626391][T18843]  ? ___neigh_create+0x6f4/0x23d0
[  642.631409][T18843]  __kmem_cache_alloc_node+0x53/0x250
[  642.636780][T18843]  ? ___neigh_create+0x6f4/0x23d0
[  642.641795][T18843]  __kmalloc+0xa7/0x240
[  642.645955][T18843]  ___neigh_create+0x6f4/0x23d0
[  642.650804][T18843]  ? neigh_lookup+0xaf/0x3f0
[  642.655389][T18843]  ? neigh_ifdown+0x30/0x30
[  642.659890][T18843]  neigh_add+0xb18/0xdf0
[  642.664135][T18843]  ? do_raw_spin_unlock+0x121/0x230
[  642.669333][T18843]  ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0
[  642.675595][T18843]  ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0
[  642.681831][T18843]  rtnetlink_rcv_msg+0x843/0xf90
[  642.686762][T18843]  ? rtnetlink_rcv_msg+0x220/0xf90
[  642.691868][T18843]  ? rtnetlink_bind+0x80/0x80
[  642.696538][T18843]  ? perf_trace_preemptirq_template+0xac/0x330
[  642.702693][T18843]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  642.708666][T18843]  ? lock_chain_count+0x20/0x20
[  642.713507][T18843]  ? __local_bh_enable_ip+0x13a/0x1c0
[  642.718869][T18843]  ? lockdep_hardirqs_on+0x98/0x150
[  642.724062][T18843]  ? __local_bh_enable_ip+0x13a/0x1c0
[  642.729425][T18843]  ? _local_bh_enable+0xa0/0xa0
[  642.734269][T18843]  ? __dev_queue_xmit+0x275/0x3630
[  642.739374][T18843]  ? __dev_queue_xmit+0x1bc2/0x3630
[  642.744567][T18843]  ? __dev_queue_xmit+0x275/0x3630
[  642.749682][T18843]  ? ref_tracker_free+0x686/0x830
[  642.754704][T18843]  netlink_rcv_skb+0x235/0x4c0
[  642.759471][T18843]  ? rtnetlink_bind+0x80/0x80
[  642.764139][T18843]  ? netlink_ack+0x1160/0x1160
[  642.768910][T18843]  ? __lock_acquire+0x7d80/0x7d80
[  642.773946][T18843]  ? netlink_deliver_tap+0x2e/0x1b0
[  642.779137][T18843]  netlink_unicast+0x7b1/0x930
[  642.783910][T18843]  netlink_sendmsg+0x8d0/0xbf0
[  642.788676][T18843]  ? netlink_getsockopt+0x590/0x590
[  642.793867][T18843]  ? apparmor_socket_sendmsg+0x8e/0x330
[  642.799410][T18843]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  642.804689][T18843]  ? security_socket_sendmsg+0x80/0xa0
[  642.810137][T18843]  ? netlink_getsockopt+0x590/0x590
[  642.815323][T18843]  ____sys_sendmsg+0x61b/0x980
[  642.820092][T18843]  ? __asan_memset+0x22/0x40
[  642.824675][T18843]  ? __sys_sendmsg_sock+0x30/0x30
[  642.829689][T18843]  ? __import_iovec+0x5f2/0x850
[  642.834539][T18843]  ? import_iovec+0x73/0xa0
[  642.839039][T18843]  ___sys_sendmsg+0x2a6/0x360
[  642.843703][T18843]  ? get_pid_task+0x20/0x1e0
[  642.848291][T18843]  ? __sys_sendmsg+0x2b0/0x2b0
[  642.853079][T18843]  ? __lock_acquire+0x7d80/0x7d80
[  642.858115][T18843]  __se_sys_sendmsg+0x1d0/0x2c0
[  642.862961][T18843]  ? __x64_sys_sendmsg+0x80/0x80
[  642.867900][T18843]  ? lockdep_hardirqs_on+0x98/0x150
[  642.873097][T18843]  do_syscall_64+0x55/0xb0
[  642.877502][T18843]  ? clear_bhb_loop+0x40/0x90
[  642.882169][T18843]  ? clear_bhb_loop+0x40/0x90
[  642.886836][T18843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  642.892733][T18843] RIP: 0033:0x7f26db59e019
[  642.897142][T18843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.916739][T18843] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.925149][T18843] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  642.933114][T18843] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  642.941073][T18843] RBP: 00007f26dc4c8090 R08: 0000000000000000 R09: 0000000000000000
[  642.949030][T18843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.956990][T18843] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  642.964965][T18843]  </TASK>
[  643.242541][T18853] netlink: 'syz.1.4195': attribute type 9 has an invalid length.
[  643.693045][T18872] __nla_validate_parse: 1 callbacks suppressed
[  643.693061][T18872] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4204'.
[  643.753307][T18872] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4204'.
[  643.783811][T18872] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  643.816730][T18872] CPU: 1 PID: 18872 Comm: syz.1.4204 Not tainted syzkaller #0
[  643.824253][T18872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  643.834333][T18872] Call Trace:
[  643.837643][T18872]  <TASK>
[  643.840591][T18872]  dump_stack_lvl+0x18c/0x250
[  643.845300][T18872]  ? show_regs_print_info+0x20/0x20
[  643.850516][T18872]  ? load_image+0x420/0x420
[  643.855042][T18872]  sysfs_warn_dup+0x8e/0xa0
[  643.859550][T18872]  sysfs_do_create_link_sd+0xc0/0x110
[  643.864923][T18872]  device_add_class_symlinks+0x1cf/0x240
[  643.870554][T18872]  device_add+0x4f9/0xc40
[  643.874882][T18872]  wiphy_register+0x1d99/0x2ac0
[  643.879743][T18872]  ? cfg80211_event_work+0x40/0x40
[  643.884852][T18872]  ? minstrel_ht_alloc+0x88a/0x990
[  643.889971][T18872]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  643.896036][T18872]  ieee80211_register_hw+0x2dd8/0x3b30
[  643.901499][T18872]  ? ieee80211_register_hw+0xed1/0x3b30
[  643.907046][T18872]  ? ieee80211_tasklet_handler+0x20/0x20
[  643.912673][T18872]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  643.918567][T18872]  ? __debug_object_init+0xec/0x450
[  643.923764][T18872]  ? __asan_memset+0x22/0x40
[  643.928350][T18872]  ? __hrtimer_init+0x189/0x270
[  643.933203][T18872]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  643.938934][T18872]  ? mac80211_hwsim_free+0x220/0x220
[  643.944210][T18872]  ? rcu_is_watching+0x15/0xb0
[  643.948968][T18872]  ? kstrndup+0xbd/0x140
[  643.953213][T18872]  hwsim_new_radio_nl+0xdad/0x1a70
[  643.958325][T18872]  ? __nla_validate+0x50/0x50
[  643.963011][T18872]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  643.969343][T18872]  ? __nla_parse+0x40/0x50
[  643.973763][T18872]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  643.980088][T18872]  genl_family_rcv_msg_doit+0x21a/0x310
[  643.985633][T18872]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  643.991527][T18872]  ? bpf_lsm_capable+0x9/0x10
[  643.996202][T18872]  ? security_capable+0x89/0xb0
[  644.001055][T18872]  genl_rcv_msg+0x611/0x7a0
[  644.005558][T18872]  ? genl_bind+0x360/0x360
[  644.009965][T18872]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  644.016289][T18872]  ? ref_tracker_free+0x686/0x830
[  644.021309][T18872]  ? __kasan_kmalloc_large+0x8b/0xa0
[  644.026599][T18872]  netlink_rcv_skb+0x235/0x4c0
[  644.031367][T18872]  ? genl_bind+0x360/0x360
[  644.035776][T18872]  ? netlink_ack+0x1160/0x1160
[  644.040546][T18872]  ? __lock_acquire+0x7d80/0x7d80
[  644.045574][T18872]  ? down_read+0x1ac/0x2e0
[  644.049990][T18872]  genl_rcv+0x28/0x40
[  644.053965][T18872]  netlink_unicast+0x7b1/0x930
[  644.058735][T18872]  netlink_sendmsg+0x8d0/0xbf0
[  644.063498][T18872]  ? netlink_getsockopt+0x590/0x590
[  644.068690][T18872]  ? apparmor_socket_sendmsg+0x8e/0x330
[  644.074229][T18872]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  644.079508][T18872]  ? security_socket_sendmsg+0x80/0xa0
[  644.084959][T18872]  ? netlink_getsockopt+0x590/0x590
[  644.090150][T18872]  ____sys_sendmsg+0x61b/0x980
[  644.094913][T18872]  ? __asan_memset+0x22/0x40
[  644.099501][T18872]  ? __sys_sendmsg_sock+0x30/0x30
[  644.104515][T18872]  ? __import_iovec+0x5f2/0x850
[  644.109373][T18872]  ? import_iovec+0x73/0xa0
[  644.113874][T18872]  ___sys_sendmsg+0x2a6/0x360
[  644.118554][T18872]  ? __sys_sendmsg+0x2b0/0x2b0
[  644.123354][T18872]  __se_sys_sendmsg+0x1d0/0x2c0
[  644.128201][T18872]  ? __x64_sys_sendmsg+0x80/0x80
[  644.133144][T18872]  ? lockdep_hardirqs_on+0x98/0x150
[  644.138345][T18872]  do_syscall_64+0x55/0xb0
[  644.142754][T18872]  ? clear_bhb_loop+0x40/0x90
[  644.147428][T18872]  ? clear_bhb_loop+0x40/0x90
[  644.152097][T18872]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.157984][T18872] RIP: 0033:0x7f26db59e019
[  644.162397][T18872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.182012][T18872] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.190421][T18872] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  644.198384][T18872] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  644.206352][T18872] RBP: 00007f26db63500c R08: 0000000000000000 R09: 0000000000000000
[  644.214315][T18872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.222278][T18872] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  644.230254][T18872]  </TASK>
[  645.044741][T18914] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4219'.
[  645.109330][T18914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  645.230490][T18927] FAULT_INJECTION: forcing a failure.
[  645.230490][T18927] name failslab, interval 1, probability 0, space 0, times 0
[  645.243650][T18927] CPU: 0 PID: 18927 Comm: syz.2.4222 Not tainted syzkaller #0
[  645.251140][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  645.261207][T18927] Call Trace:
[  645.264500][T18927]  <TASK>
[  645.267450][T18927]  dump_stack_lvl+0x18c/0x250
[  645.272154][T18927]  ? show_regs_print_info+0x20/0x20
[  645.277374][T18927]  ? load_image+0x420/0x420
[  645.281905][T18927]  ? __might_sleep+0xe0/0xe0
[  645.286513][T18927]  ? __lock_acquire+0x7d80/0x7d80
[  645.291559][T18927]  should_fail_ex+0x394/0x4c0
[  645.296307][T18927]  should_failslab+0x9/0x20
[  645.300833][T18927]  slab_pre_alloc_hook+0x59/0x300
[  645.305880][T18927]  ? rtnl_newlink+0x10d/0x2170
[  645.310658][T18927]  __kmem_cache_alloc_node+0x53/0x250
[  645.316042][T18927]  ? rtnl_newlink+0x10d/0x2170
[  645.320798][T18927]  kmalloc_trace+0x2a/0xe0
[  645.325211][T18927]  rtnl_newlink+0x10d/0x2170
[  645.329791][T18927]  ? arch_stack_walk+0x160/0x190
[  645.334728][T18927]  ? verify_lock_unused+0x140/0x140
[  645.339920][T18927]  ? __mutex_trylock_common+0x160/0x270
[  645.345454][T18927]  ? rtnl_setlink+0x4e0/0x4e0
[  645.350122][T18927]  ? trace_raw_output_contention_end+0xd0/0xd0
[  645.356272][T18927]  ? rcu_is_watching+0x15/0xb0
[  645.361031][T18927]  ? trace_contention_end+0x39/0xe0
[  645.366217][T18927]  ? __mutex_lock+0x30d/0xc80
[  645.370895][T18927]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  645.375996][T18927]  ? mutex_lock_nested+0x20/0x20
[  645.380932][T18927]  ? rtnl_setlink+0x4e0/0x4e0
[  645.385598][T18927]  rtnetlink_rcv_msg+0x843/0xf90
[  645.390528][T18927]  ? rtnetlink_rcv_msg+0x220/0xf90
[  645.395634][T18927]  ? rtnetlink_bind+0x80/0x80
[  645.400306][T18927]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  645.406282][T18927]  ? lock_chain_count+0x20/0x20
[  645.411129][T18927]  ? __local_bh_enable_ip+0x13a/0x1c0
[  645.416492][T18927]  ? lockdep_hardirqs_on+0x98/0x150
[  645.421682][T18927]  ? __local_bh_enable_ip+0x13a/0x1c0
[  645.427041][T18927]  ? _local_bh_enable+0xa0/0xa0
[  645.431889][T18927]  ? __dev_queue_xmit+0x275/0x3630
[  645.436990][T18927]  ? __dev_queue_xmit+0x1bc2/0x3630
[  645.442185][T18927]  ? __dev_queue_xmit+0x275/0x3630
[  645.447303][T18927]  ? ref_tracker_free+0x686/0x830
[  645.452323][T18927]  netlink_rcv_skb+0x235/0x4c0
[  645.457085][T18927]  ? rtnetlink_bind+0x80/0x80
[  645.461775][T18927]  ? netlink_ack+0x1160/0x1160
[  645.466542][T18927]  ? __lock_acquire+0x7d80/0x7d80
[  645.471562][T18927]  ? netlink_deliver_tap+0x2e/0x1b0
[  645.476755][T18927]  netlink_unicast+0x7b1/0x930
[  645.481524][T18927]  netlink_sendmsg+0x8d0/0xbf0
[  645.486286][T18927]  ? netlink_getsockopt+0x590/0x590
[  645.491473][T18927]  ? apparmor_socket_sendmsg+0x8e/0x330
[  645.497025][T18927]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  645.502314][T18927]  ? security_socket_sendmsg+0x80/0xa0
[  645.507771][T18927]  ? netlink_getsockopt+0x590/0x590
[  645.512971][T18927]  ____sys_sendmsg+0x61b/0x980
[  645.517736][T18927]  ? __asan_memset+0x22/0x40
[  645.522322][T18927]  ? __sys_sendmsg_sock+0x30/0x30
[  645.527338][T18927]  ? __import_iovec+0x3fa/0x850
[  645.532190][T18927]  ? import_iovec+0x73/0xa0
[  645.536692][T18927]  ___sys_sendmsg+0x2a6/0x360
[  645.541358][T18927]  ? get_pid_task+0x20/0x1e0
[  645.545950][T18927]  ? __sys_sendmsg+0x2b0/0x2b0
[  645.550723][T18927]  ? __lock_acquire+0x7d80/0x7d80
[  645.555758][T18927]  __se_sys_sendmsg+0x1d0/0x2c0
[  645.560604][T18927]  ? __x64_sys_sendmsg+0x80/0x80
[  645.565542][T18927]  ? lockdep_hardirqs_on+0x98/0x150
[  645.570735][T18927]  do_syscall_64+0x55/0xb0
[  645.575141][T18927]  ? clear_bhb_loop+0x40/0x90
[  645.579805][T18927]  ? clear_bhb_loop+0x40/0x90
[  645.584471][T18927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  645.590353][T18927] RIP: 0033:0x7ff14599e019
[  645.594758][T18927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.614363][T18927] RSP: 002b:00007ff14681f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  645.622771][T18927] RAX: ffffffffffffffda RBX: 00007ff145c25fa0 RCX: 00007ff14599e019
[  645.630754][T18927] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[  645.638719][T18927] RBP: 00007ff14681f090 R08: 0000000000000000 R09: 0000000000000000
[  645.646681][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.654641][T18927] R13: 00007ff145c26038 R14: 00007ff145c25fa0 R15: 00007ffc949cae68
[  645.662613][T18927]  </TASK>
[  645.749092][T18931] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4224'.
[  646.274334][T18954] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4233'.
[  646.606303][T18967] FAULT_INJECTION: forcing a failure.
[  646.606303][T18967] name failslab, interval 1, probability 0, space 0, times 0
[  646.665014][T18967] CPU: 0 PID: 18967 Comm: syz.3.4236 Not tainted syzkaller #0
[  646.672557][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  646.682630][T18967] Call Trace:
[  646.685923][T18967]  <TASK>
[  646.688866][T18967]  dump_stack_lvl+0x18c/0x250
[  646.693568][T18967]  ? show_regs_print_info+0x20/0x20
[  646.698784][T18967]  ? load_image+0x420/0x420
[  646.703286][T18967]  ? __might_sleep+0xe0/0xe0
[  646.707868][T18967]  ? __lock_acquire+0x7d80/0x7d80
[  646.712885][T18967]  ? lock_chain_count+0x20/0x20
[  646.717724][T18967]  should_fail_ex+0x394/0x4c0
[  646.722407][T18967]  should_failslab+0x9/0x20
[  646.726917][T18967]  slab_pre_alloc_hook+0x59/0x300
[  646.731981][T18967]  ? _raw_spin_unlock+0x40/0x40
[  646.736861][T18967]  ? string+0x257/0x290
[  646.741045][T18967]  ? __request_module+0x2d1/0x600
[  646.746099][T18967]  __kmem_cache_alloc_node+0x53/0x250
[  646.751512][T18967]  ? __request_module+0x2d1/0x600
[  646.756557][T18967]  kmalloc_trace+0x2a/0xe0
[  646.761005][T18967]  __request_module+0x2d1/0x600
[  646.765882][T18967]  ? module_enforce_rwx_sections+0x150/0x150
[  646.771893][T18967]  ? dev_load+0x21/0x1f0
[  646.776165][T18967]  ? bpf_lsm_capable+0x9/0x10
[  646.780867][T18967]  ? dev_load+0x21/0x1f0
[  646.785131][T18967]  dev_load+0x18b/0x1f0
[  646.789314][T18967]  dev_ioctl+0x837/0x1140
[  646.793666][T18967]  sock_ioctl+0x74c/0x7e0
[  646.798016][T18967]  ? sock_poll+0x3e0/0x3e0
[  646.802458][T18967]  ? bpf_lsm_file_ioctl+0x9/0x10
[  646.807406][T18967]  ? security_file_ioctl+0x80/0xa0
[  646.812534][T18967]  ? sock_poll+0x3e0/0x3e0
[  646.816965][T18967]  __se_sys_ioctl+0xfd/0x170
[  646.821573][T18967]  do_syscall_64+0x55/0xb0
[  646.826006][T18967]  ? clear_bhb_loop+0x40/0x90
[  646.830691][T18967]  ? clear_bhb_loop+0x40/0x90
[  646.835381][T18967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  646.841284][T18967] RIP: 0033:0x7f259699e019
[  646.845712][T18967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.865336][T18967] RSP: 002b:00007f25977ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  646.873772][T18967] RAX: ffffffffffffffda RBX: 00007f2596c25fa0 RCX: 00007f259699e019
[  646.881854][T18967] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  646.889846][T18967] RBP: 00007f25977ef090 R08: 0000000000000000 R09: 0000000000000000
[  646.897835][T18967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.905831][T18967] R13: 00007f2596c26038 R14: 00007f2596c25fa0 R15: 00007ffc744352f8
[  646.913841][T18967]  </TASK>
[  647.127654][T18979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4239'.
[  647.149732][T18979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4239'.
[  647.177954][T18979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4239'.
[  647.788372][T18995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4247'.
[  647.797712][T18995] FAULT_INJECTION: forcing a failure.
[  647.797712][T18995] name failslab, interval 1, probability 0, space 0, times 0
[  647.810526][T18995] CPU: 1 PID: 18995 Comm: syz.1.4247 Not tainted syzkaller #0
[  647.818011][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  647.828059][T18995] Call Trace:
[  647.831333][T18995]  <TASK>
[  647.834256][T18995]  dump_stack_lvl+0x18c/0x250
[  647.838934][T18995]  ? verify_lock_unused+0x140/0x140
[  647.844126][T18995]  ? show_regs_print_info+0x20/0x20
[  647.849314][T18995]  ? load_image+0x420/0x420
[  647.853811][T18995]  ? do_trace_netlink_extack+0x7e/0x1a0
[  647.859355][T18995]  ? __nla_validate_parse+0x2701/0x2fd0
[  647.864902][T18995]  should_fail_ex+0x394/0x4c0
[  647.869576][T18995]  should_failslab+0x9/0x20
[  647.874074][T18995]  slab_pre_alloc_hook+0x59/0x300
[  647.879095][T18995]  ? ___neigh_create+0x6f4/0x23d0
[  647.884121][T18995]  ? ___neigh_create+0x6f4/0x23d0
[  647.889139][T18995]  __kmem_cache_alloc_node+0x53/0x250
[  647.894514][T18995]  ? ___neigh_create+0x6f4/0x23d0
[  647.899536][T18995]  __kmalloc+0xa7/0x240
[  647.903703][T18995]  ___neigh_create+0x6f4/0x23d0
[  647.908550][T18995]  ? neigh_lookup+0xaf/0x3f0
[  647.913135][T18995]  ? neigh_ifdown+0x30/0x30
[  647.917662][T18995]  neigh_add+0xb18/0xdf0
[  647.921898][T18995]  ? do_raw_spin_unlock+0x121/0x230
[  647.927094][T18995]  ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0
[  647.933348][T18995]  ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0
[  647.939583][T18995]  rtnetlink_rcv_msg+0x843/0xf90
[  647.944517][T18995]  ? rtnetlink_rcv_msg+0x220/0xf90
[  647.949629][T18995]  ? rtnetlink_bind+0x80/0x80
[  647.954299][T18995]  ? perf_trace_preemptirq_template+0xac/0x330
[  647.960452][T18995]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  647.966427][T18995]  ? lock_chain_count+0x20/0x20
[  647.971273][T18995]  ? __local_bh_enable_ip+0x13a/0x1c0
[  647.976638][T18995]  ? lockdep_hardirqs_on+0x98/0x150
[  647.981830][T18995]  ? __local_bh_enable_ip+0x13a/0x1c0
[  647.987192][T18995]  ? _local_bh_enable+0xa0/0xa0
[  647.992036][T18995]  ? __dev_queue_xmit+0x275/0x3630
[  647.997147][T18995]  ? __dev_queue_xmit+0x1bc2/0x3630
[  648.002344][T18995]  ? __dev_queue_xmit+0x275/0x3630
[  648.007465][T18995]  ? ref_tracker_free+0x686/0x830
[  648.012487][T18995]  netlink_rcv_skb+0x235/0x4c0
[  648.017250][T18995]  ? rtnetlink_bind+0x80/0x80
[  648.021922][T18995]  ? netlink_ack+0x1160/0x1160
[  648.026691][T18995]  ? __lock_acquire+0x7d80/0x7d80
[  648.031712][T18995]  ? netlink_deliver_tap+0x2e/0x1b0
[  648.036902][T18995]  netlink_unicast+0x7b1/0x930
[  648.041669][T18995]  netlink_sendmsg+0x8d0/0xbf0
[  648.046432][T18995]  ? netlink_getsockopt+0x590/0x590
[  648.051622][T18995]  ? apparmor_socket_sendmsg+0x8e/0x330
[  648.057165][T18995]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  648.062445][T18995]  ? security_socket_sendmsg+0x80/0xa0
[  648.067893][T18995]  ? netlink_getsockopt+0x590/0x590
[  648.073083][T18995]  ____sys_sendmsg+0x61b/0x980
[  648.077844][T18995]  ? __asan_memset+0x22/0x40
[  648.082429][T18995]  ? __sys_sendmsg_sock+0x30/0x30
[  648.087442][T18995]  ? __import_iovec+0x5f2/0x850
[  648.092291][T18995]  ? import_iovec+0x73/0xa0
[  648.096791][T18995]  ___sys_sendmsg+0x2a6/0x360
[  648.101458][T18995]  ? get_pid_task+0x20/0x1e0
[  648.106046][T18995]  ? __sys_sendmsg+0x2b0/0x2b0
[  648.110837][T18995]  ? __lock_acquire+0x7d80/0x7d80
[  648.115887][T18995]  __se_sys_sendmsg+0x1d0/0x2c0
[  648.120747][T18995]  ? __x64_sys_sendmsg+0x80/0x80
[  648.125701][T18995]  ? lockdep_hardirqs_on+0x98/0x150
[  648.130900][T18995]  do_syscall_64+0x55/0xb0
[  648.135309][T18995]  ? clear_bhb_loop+0x40/0x90
[  648.139977][T18995]  ? clear_bhb_loop+0x40/0x90
[  648.144645][T18995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  648.150538][T18995] RIP: 0033:0x7f26db59e019
[  648.154947][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.174574][T18995] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  648.183004][T18995] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  648.190987][T18995] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  648.198954][T18995] RBP: 00007f26dc4c8090 R08: 0000000000000000 R09: 0000000000000000
[  648.206919][T18995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.214881][T18995] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  648.222856][T18995]  </TASK>
[  648.562576][T19009] netlink: 'syz.3.4253': attribute type 21 has an invalid length.
[  648.590825][T19009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4253'.
[  648.727662][T19019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4256'.
[  648.742661][T19017] sit0: entered allmulticast mode
[  648.788388][T19019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4256'.
[  648.814439][T19009] sit0: entered promiscuous mode
[  649.002101][T19022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4256'.
[  650.042990][T19058] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4270'.
[  650.519406][T19068] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4274'.
[  651.234213][T19081] netlink: 'syz.3.4278': attribute type 29 has an invalid length.
[  651.277491][T19081] netlink: 'syz.3.4278': attribute type 29 has an invalid length.
[  651.295247][T19078] netlink: 'syz.3.4278': attribute type 29 has an invalid length.
[  651.317650][T19078] netlink: 'syz.3.4278': attribute type 29 has an invalid length.
[  651.351185][T19086] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4281'.
[  651.675337][T19092] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4283'.
[  651.876361][T19102] FAULT_INJECTION: forcing a failure.
[  651.876361][T19102] name failslab, interval 1, probability 0, space 0, times 0
[  651.914139][T19102] CPU: 0 PID: 19102 Comm: syz.1.4288 Not tainted syzkaller #0
[  651.921661][T19102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  651.931736][T19102] Call Trace:
[  651.935012][T19102]  <TASK>
[  651.937934][T19102]  dump_stack_lvl+0x18c/0x250
[  651.942699][T19102]  ? show_regs_print_info+0x20/0x20
[  651.947891][T19102]  ? load_image+0x420/0x420
[  651.952396][T19102]  ? __might_sleep+0xe0/0xe0
[  651.957010][T19102]  ? __lock_acquire+0x7d80/0x7d80
[  651.962035][T19102]  should_fail_ex+0x394/0x4c0
[  651.966733][T19102]  should_failslab+0x9/0x20
[  651.971234][T19102]  slab_pre_alloc_hook+0x59/0x300
[  651.976264][T19102]  ? __request_module+0x2ed/0x600
[  651.981286][T19102]  ? __request_module+0x2ed/0x600
[  651.986301][T19102]  __kmem_cache_alloc_node+0x53/0x250
[  651.991674][T19102]  ? __request_module+0x2ed/0x600
[  651.996688][T19102]  __kmalloc_node_track_caller+0xa4/0x230
[  652.002408][T19102]  kstrdup+0x3b/0x80
[  652.006303][T19102]  __request_module+0x2ed/0x600
[  652.011149][T19102]  ? module_enforce_rwx_sections+0x150/0x150
[  652.017121][T19102]  ? dev_load+0x21/0x1f0
[  652.021365][T19102]  ? bpf_lsm_capable+0x9/0x10
[  652.026045][T19102]  ? dev_load+0x21/0x1f0
[  652.030283][T19102]  dev_load+0x18b/0x1f0
[  652.034432][T19102]  dev_ioctl+0x837/0x1140
[  652.038758][T19102]  sock_ioctl+0x74c/0x7e0
[  652.043090][T19102]  ? sock_poll+0x3e0/0x3e0
[  652.047506][T19102]  ? bpf_lsm_file_ioctl+0x9/0x10
[  652.052435][T19102]  ? security_file_ioctl+0x80/0xa0
[  652.057579][T19102]  ? sock_poll+0x3e0/0x3e0
[  652.061998][T19102]  __se_sys_ioctl+0xfd/0x170
[  652.066587][T19102]  do_syscall_64+0x55/0xb0
[  652.070995][T19102]  ? clear_bhb_loop+0x40/0x90
[  652.075664][T19102]  ? clear_bhb_loop+0x40/0x90
[  652.080353][T19102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  652.086237][T19102] RIP: 0033:0x7f26db59e019
[  652.090648][T19102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  652.110245][T19102] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  652.118661][T19102] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  652.126637][T19102] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  652.134607][T19102] RBP: 00007f26dc4c8090 R08: 0000000000000000 R09: 0000000000000000
[  652.142569][T19102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.150528][T19102] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  652.158507][T19102]  </TASK>
[  652.416139][T19104] netlink: 'syz.2.4289': attribute type 21 has an invalid length.
[  652.435428][T19104] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4289'.
[  652.539582][T19115] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4294'.
[  652.646702][T19116] sit0: entered allmulticast mode
[  652.686625][T19104] sit0: entered promiscuous mode
[  653.682455][T19143] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.4302'.
[  653.949877][T19174] netlink: 'syz.1.4304': attribute type 16 has an invalid length.
[  654.012906][T19174] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4304'.
[  654.616549][T19197] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4313'.
[  654.699871][T19201] netlink: 'syz.0.4315': attribute type 16 has an invalid length.
[  654.724683][T19201] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4315'.
[  656.053014][T19241] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4328'.
[  656.287179][T19242] netlink: 'syz.2.4328': attribute type 21 has an invalid length.
[  656.730754][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4333'.
[  657.094295][T19270] netlink: 'syz.1.4337': attribute type 2 has an invalid length.
[  657.115409][T19270] netlink: 'syz.1.4337': attribute type 8 has an invalid length.
[  657.123471][T19270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4337'.
[  657.761364][T19296] FAULT_INJECTION: forcing a failure.
[  657.761364][T19296] name failslab, interval 1, probability 0, space 0, times 0
[  657.784911][T19296] CPU: 1 PID: 19296 Comm: syz.0.4346 Not tainted syzkaller #0
[  657.792431][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  657.802508][T19296] Call Trace:
[  657.805808][T19296]  <TASK>
[  657.808753][T19296]  dump_stack_lvl+0x18c/0x250
[  657.813454][T19296]  ? show_regs_print_info+0x20/0x20
[  657.818671][T19296]  ? load_image+0x420/0x420
[  657.823207][T19296]  ? __might_sleep+0xe0/0xe0
[  657.827820][T19296]  ? __lock_acquire+0x7d80/0x7d80
[  657.832871][T19296]  should_fail_ex+0x394/0x4c0
[  657.837576][T19296]  should_failslab+0x9/0x20
[  657.842100][T19296]  slab_pre_alloc_hook+0x59/0x300
[  657.847155][T19296]  ? call_usermodehelper_setup+0x8e/0x260
[  657.852894][T19296]  __kmem_cache_alloc_node+0x53/0x250
[  657.858296][T19296]  ? call_usermodehelper_setup+0x8e/0x260
[  657.864033][T19296]  kmalloc_trace+0x2a/0xe0
[  657.868472][T19296]  call_usermodehelper_setup+0x8e/0x260
[  657.874037][T19296]  ? __request_module+0x600/0x600
[  657.879086][T19296]  __request_module+0x3bb/0x600
[  657.883965][T19296]  ? module_enforce_rwx_sections+0x150/0x150
[  657.889968][T19296]  ? dev_load+0x21/0x1f0
[  657.894244][T19296]  ? bpf_lsm_capable+0x9/0x10
[  657.898959][T19296]  ? dev_load+0x21/0x1f0
[  657.903226][T19296]  dev_load+0x18b/0x1f0
[  657.907406][T19296]  dev_ioctl+0x837/0x1140
[  657.911761][T19296]  sock_ioctl+0x74c/0x7e0
[  657.916115][T19296]  ? sock_poll+0x3e0/0x3e0
[  657.920559][T19296]  ? bpf_lsm_file_ioctl+0x9/0x10
[  657.925515][T19296]  ? security_file_ioctl+0x80/0xa0
[  657.930650][T19296]  ? sock_poll+0x3e0/0x3e0
[  657.935089][T19296]  __se_sys_ioctl+0xfd/0x170
[  657.939705][T19296]  do_syscall_64+0x55/0xb0
[  657.944146][T19296]  ? clear_bhb_loop+0x40/0x90
[  657.948845][T19296]  ? clear_bhb_loop+0x40/0x90
[  657.953545][T19296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.959491][T19296] RIP: 0033:0x7fe1d339e019
[  657.963924][T19296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.983551][T19296] RSP: 002b:00007fe1d42e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  657.991985][T19296] RAX: ffffffffffffffda RBX: 00007fe1d3625fa0 RCX: 00007fe1d339e019
[  657.999982][T19296] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  658.007972][T19296] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  658.015961][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.023951][T19296] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  658.031960][T19296]  </TASK>
[  658.299117][T19306] netlink: 'syz.2.4349': attribute type 28 has an invalid length.
[  658.326208][T19306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4349'.
[  658.505080][T19308] bridge0: port 4(batadv0) entered disabled state
[  658.513512][T19308] bridge0: port 3(hsr0) entered disabled state
[  658.520794][T19308] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.530714][T19308] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.586352][T19308] bridge0: entered allmulticast mode
[  658.780173][T19315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4360'.
[  659.922864][T19334] -1: renamed from syzkaller0
[  660.897895][T19358] syzkaller0: entered promiscuous mode
[  660.907086][T19358] syzkaller0: entered allmulticast mode
[  663.632764][T19398] netlink: 'syz.1.4381': attribute type 2 has an invalid length.
[  663.640928][T19398] netlink: 'syz.1.4381': attribute type 8 has an invalid length.
[  663.653622][T19398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4381'.
[  663.795702][T19402] netlink: 'syz.3.4383': attribute type 4 has an invalid length.
[  663.803503][T19402] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4383'.
[  663.983026][T19412] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4385'.
[  664.244421][T19425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4392'.
[  664.388523][T19430] netlink: 'syz.3.4393': attribute type 9 has an invalid length.
[  664.408754][T19430] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4393'.
[  664.900324][T19443] batman_adv: batadv0: Interface deactivated: vlan1
[  664.993985][T19451] netlink: 'syz.3.4399': attribute type 21 has an invalid length.
[  665.001845][T19451] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.4399'.
[  665.392858][T19468] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4404'.
[  665.611495][T19469] syzkaller0: entered promiscuous mode
[  665.633989][T19469] syzkaller0: entered allmulticast mode
[  667.725225][T19506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4419'.
[  667.735689][T19506] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4419'.
[  668.156392][T19525] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4426'.
[  668.220467][T19525] FAULT_INJECTION: forcing a failure.
[  668.220467][T19525] name failslab, interval 1, probability 0, space 0, times 0
[  668.235358][T19525] CPU: 1 PID: 19525 Comm: syz.3.4426 Not tainted syzkaller #0
[  668.242867][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  668.252944][T19525] Call Trace:
[  668.256236][T19525]  <TASK>
[  668.259184][T19525]  dump_stack_lvl+0x18c/0x250
[  668.263892][T19525]  ? show_regs_print_info+0x20/0x20
[  668.269119][T19525]  ? load_image+0x420/0x420
[  668.273683][T19525]  ? __might_sleep+0xe0/0xe0
[  668.278307][T19525]  ? __lock_acquire+0x7d80/0x7d80
[  668.283359][T19525]  should_fail_ex+0x394/0x4c0
[  668.288065][T19525]  should_failslab+0x9/0x20
[  668.292587][T19525]  slab_pre_alloc_hook+0x59/0x300
[  668.297647][T19525]  ? lockdep_hardirqs_on+0x98/0x150
[  668.302873][T19525]  kmem_cache_alloc_node+0x5e/0x310
[  668.308098][T19525]  ? __alloc_skb+0x103/0x2c0
[  668.312713][T19525]  __alloc_skb+0x103/0x2c0
[  668.317154][T19525]  netlink_ack+0x377/0x1160
[  668.321703][T19525]  ? netlink_dump+0xec0/0xec0
[  668.326411][T19525]  ? ref_tracker_free+0x686/0x830
[  668.331472][T19525]  netlink_rcv_skb+0x2b3/0x4c0
[  668.336270][T19525]  ? rtnetlink_bind+0x80/0x80
[  668.341323][T19525]  ? netlink_ack+0x1160/0x1160
[  668.346128][T19525]  ? __lock_acquire+0x7d80/0x7d80
[  668.351182][T19525]  ? netlink_deliver_tap+0x2e/0x1b0
[  668.356406][T19525]  netlink_unicast+0x7b1/0x930
[  668.361216][T19525]  netlink_sendmsg+0x8d0/0xbf0
[  668.366012][T19525]  ? netlink_getsockopt+0x590/0x590
[  668.371239][T19525]  ? apparmor_socket_sendmsg+0x8e/0x330
[  668.376811][T19525]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  668.382121][T19525]  ? security_socket_sendmsg+0x80/0xa0
[  668.387607][T19525]  ? netlink_getsockopt+0x590/0x590
[  668.392833][T19525]  ____sys_sendmsg+0x61b/0x980
[  668.397629][T19525]  ? __asan_memset+0x22/0x40
[  668.402246][T19525]  ? __sys_sendmsg_sock+0x30/0x30
[  668.407288][T19525]  ? __import_iovec+0x3fa/0x850
[  668.412176][T19525]  ? import_iovec+0x73/0xa0
[  668.416708][T19525]  ___sys_sendmsg+0x2a6/0x360
[  668.421405][T19525]  ? get_pid_task+0x20/0x1e0
[  668.426029][T19525]  ? __sys_sendmsg+0x2b0/0x2b0
[  668.430838][T19525]  ? __lock_acquire+0x7d80/0x7d80
[  668.435914][T19525]  __se_sys_sendmsg+0x1d0/0x2c0
[  668.440789][T19525]  ? __x64_sys_sendmsg+0x80/0x80
[  668.446285][T19525]  ? lockdep_hardirqs_on+0x98/0x150
[  668.451517][T19525]  do_syscall_64+0x55/0xb0
[  668.455956][T19525]  ? clear_bhb_loop+0x40/0x90
[  668.460656][T19525]  ? clear_bhb_loop+0x40/0x90
[  668.465357][T19525]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  668.471270][T19525] RIP: 0033:0x7f259699e019
[  668.475709][T19525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.495340][T19525] RSP: 002b:00007f25977ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  668.503784][T19525] RAX: ffffffffffffffda RBX: 00007f2596c25fa0 RCX: 00007f259699e019
[  668.511782][T19525] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[  668.519780][T19525] RBP: 00007f25977ef090 R08: 0000000000000000 R09: 0000000000000000
[  668.527786][T19525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  668.535786][T19525] R13: 00007f2596c26038 R14: 00007f2596c25fa0 R15: 00007ffc744352f8
[  668.544153][T19525]  </TASK>
[  668.744431][T19539] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4431'.
[  669.040032][T19551] FAULT_INJECTION: forcing a failure.
[  669.040032][T19551] name failslab, interval 1, probability 0, space 0, times 0
[  669.074127][T19551] CPU: 1 PID: 19551 Comm: syz.1.4435 Not tainted syzkaller #0
[  669.081649][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  669.091724][T19551] Call Trace:
[  669.095023][T19551]  <TASK>
[  669.097980][T19551]  dump_stack_lvl+0x18c/0x250
[  669.102684][T19551]  ? show_regs_print_info+0x20/0x20
[  669.107889][T19551]  ? load_image+0x420/0x420
[  669.112422][T19551]  ? __might_sleep+0xe0/0xe0
[  669.117042][T19551]  ? __lock_acquire+0x7d80/0x7d80
[  669.122094][T19551]  should_fail_ex+0x394/0x4c0
[  669.126805][T19551]  should_failslab+0x9/0x20
[  669.131335][T19551]  slab_pre_alloc_hook+0x59/0x300
[  669.136389][T19551]  ? __request_module+0x2ed/0x600
[  669.141435][T19551]  ? __request_module+0x2ed/0x600
[  669.146480][T19551]  __kmem_cache_alloc_node+0x53/0x250
[  669.151883][T19551]  ? __request_module+0x2ed/0x600
[  669.156929][T19551]  __kmalloc_node_track_caller+0xa4/0x230
[  669.162682][T19551]  kstrdup+0x3b/0x80
[  669.166605][T19551]  __request_module+0x2ed/0x600
[  669.171485][T19551]  ? module_enforce_rwx_sections+0x150/0x150
[  669.177491][T19551]  ? module_enforce_rwx_sections+0x150/0x150
[  669.183497][T19551]  ? apparmor_capable+0x137/0x1a0
[  669.188547][T19551]  ? dev_load+0x21/0x1f0
[  669.192823][T19551]  dev_ioctl+0x837/0x1140
[  669.197175][T19551]  sock_ioctl+0x74c/0x7e0
[  669.201527][T19551]  ? sock_poll+0x3e0/0x3e0
[  669.205975][T19551]  ? bpf_lsm_file_ioctl+0x9/0x10
[  669.210928][T19551]  ? security_file_ioctl+0x80/0xa0
[  669.216063][T19551]  ? sock_poll+0x3e0/0x3e0
[  669.220492][T19551]  __se_sys_ioctl+0xfd/0x170
[  669.225106][T19551]  do_syscall_64+0x55/0xb0
[  669.229544][T19551]  ? clear_bhb_loop+0x40/0x90
[  669.234241][T19551]  ? clear_bhb_loop+0x40/0x90
[  669.238933][T19551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  669.244846][T19551] RIP: 0033:0x7f26db59e019
[  669.249281][T19551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  669.268904][T19551] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  669.277338][T19551] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  669.285328][T19551] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  669.293313][T19551] RBP: 00007f26dc4c8090 R08: 0000000000000000 R09: 0000000000000000
[  669.301300][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  669.309293][T19551] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  669.317299][T19551]  </TASK>
[  670.036961][T19586] netlink: 'syz.2.4443': attribute type 29 has an invalid length.
[  670.064325][T19586] netlink: 'syz.2.4443': attribute type 29 has an invalid length.
[  670.130470][T19586] syzkaller0: entered promiscuous mode
[  670.149481][T19586] syzkaller0: entered allmulticast mode
[  671.627632][T19640] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4459'.
[  672.290614][T19668] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4469'.
[  672.993487][T19689] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4477'.
[  673.014197][T19688] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4477'.
[  673.113174][ T7904] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  673.270212][T19697] IPv6: Can't replace route, no match found
[  674.300254][T19724] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4486'.
[  674.426331][T19727] FAULT_INJECTION: forcing a failure.
[  674.426331][T19727] name failslab, interval 1, probability 0, space 0, times 0
[  674.464090][T19727] CPU: 0 PID: 19727 Comm: syz.3.4488 Not tainted syzkaller #0
[  674.471594][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  674.481653][T19727] Call Trace:
[  674.484928][T19727]  <TASK>
[  674.487868][T19727]  dump_stack_lvl+0x18c/0x250
[  674.492543][T19727]  ? show_regs_print_info+0x20/0x20
[  674.497741][T19727]  ? load_image+0x420/0x420
[  674.502248][T19727]  ? __might_sleep+0xe0/0xe0
[  674.506834][T19727]  ? __lock_acquire+0x7d80/0x7d80
[  674.511854][T19727]  should_fail_ex+0x394/0x4c0
[  674.516530][T19727]  should_failslab+0x9/0x20
[  674.521029][T19727]  slab_pre_alloc_hook+0x59/0x300
[  674.526055][T19727]  ? __get_vm_area_node+0x125/0x370
[  674.531256][T19727]  __kmem_cache_alloc_node+0x53/0x250
[  674.536628][T19727]  ? __get_vm_area_node+0x125/0x370
[  674.541821][T19727]  kmalloc_node_trace+0x26/0xe0
[  674.546669][T19727]  __get_vm_area_node+0x125/0x370
[  674.551694][T19727]  __vmalloc_node_range+0x36f/0x1320
[  674.556977][T19727]  ? netlink_sendmsg+0x602/0xbf0
[  674.561911][T19727]  ? netlink_insert+0x1094/0x1390
[  674.566945][T19727]  ? netlink_insert+0x2ba/0x1390
[  674.571884][T19727]  ? free_vm_area+0x50/0x50
[  674.576388][T19727]  ? netlink_sendmsg+0x602/0xbf0
[  674.581315][T19727]  vmalloc+0x79/0x90
[  674.585204][T19727]  ? netlink_sendmsg+0x602/0xbf0
[  674.590131][T19727]  netlink_sendmsg+0x602/0xbf0
[  674.594890][T19727]  ? netlink_getsockopt+0x590/0x590
[  674.600086][T19727]  ? apparmor_socket_sendmsg+0x8e/0x330
[  674.605625][T19727]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  674.610903][T19727]  ? security_socket_sendmsg+0x80/0xa0
[  674.616368][T19727]  sock_write_iter+0x2dc/0x420
[  674.621138][T19727]  ? sock_read_iter+0x3f0/0x3f0
[  674.625997][T19727]  ? common_file_perm+0x198/0x1f0
[  674.631024][T19727]  vfs_write+0x474/0x9a0
[  674.635267][T19727]  ? file_end_write+0x250/0x250
[  674.640116][T19727]  ? __fget_files+0x3fc/0x460
[  674.644797][T19727]  ? __fdget_pos+0x1d8/0x330
[  674.649384][T19727]  ? ksys_write+0x74/0x260
[  674.653799][T19727]  ksys_write+0x151/0x260
[  674.658132][T19727]  ? __ia32_sys_read+0x90/0x90
[  674.662902][T19727]  ? lockdep_hardirqs_on+0x98/0x150
[  674.668101][T19727]  do_syscall_64+0x55/0xb0
[  674.672521][T19727]  ? clear_bhb_loop+0x40/0x90
[  674.677202][T19727]  ? clear_bhb_loop+0x40/0x90
[  674.681874][T19727]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  674.687765][T19727] RIP: 0033:0x7f259699e019
[  674.692184][T19727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.711788][T19727] RSP: 002b:00007f25977ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  674.720197][T19727] RAX: ffffffffffffffda RBX: 00007f2596c25fa0 RCX: 00007f259699e019
[  674.728168][T19727] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  674.736131][T19727] RBP: 00007f25977ef090 R08: 0000000000000000 R09: 0000000000000000
[  674.744094][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  674.752053][T19727] R13: 00007f2596c26038 R14: 00007f2596c25fa0 R15: 00007ffc744352f8
[  674.760027][T19727]  </TASK>
[  674.796974][T19731] netlink: 'syz.2.4490': attribute type 16 has an invalid length.
[  674.805681][T19731] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4490'.
[  674.884251][T19727] syz.3.4488: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  674.904016][T19727] CPU: 1 PID: 19727 Comm: syz.3.4488 Not tainted syzkaller #0
[  674.911522][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  674.921596][T19727] Call Trace:
[  674.924891][T19727]  <TASK>
[  674.927839][T19727]  dump_stack_lvl+0x18c/0x250
[  674.932547][T19727]  ? show_regs_print_info+0x20/0x20
[  674.937770][T19727]  ? load_image+0x420/0x420
[  674.942304][T19727]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  674.948741][T19727]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  674.955267][T19727]  warn_alloc+0x246/0x340
[  674.959790][T19727]  ? __get_vm_area_node+0x125/0x370
[  674.965016][T19727]  ? zone_watermark_ok_safe+0x230/0x230
[  674.970584][T19727]  ? rcu_is_watching+0x15/0xb0
[  674.975380][T19727]  ? __get_vm_area_node+0x356/0x370
[  674.980609][T19727]  __vmalloc_node_range+0x394/0x1320
[  674.985926][T19727]  ? netlink_insert+0x1094/0x1390
[  674.990989][T19727]  ? netlink_insert+0x2ba/0x1390
[  674.995959][T19727]  ? free_vm_area+0x50/0x50
[  675.000493][T19727]  ? netlink_sendmsg+0x602/0xbf0
[  675.005455][T19727]  vmalloc+0x79/0x90
[  675.009376][T19727]  ? netlink_sendmsg+0x602/0xbf0
[  675.014331][T19727]  netlink_sendmsg+0x602/0xbf0
[  675.019125][T19727]  ? netlink_getsockopt+0x590/0x590
[  675.024348][T19727]  ? apparmor_socket_sendmsg+0x8e/0x330
[  675.029915][T19727]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  675.035222][T19727]  ? security_socket_sendmsg+0x80/0xa0
[  675.040703][T19727]  sock_write_iter+0x2dc/0x420
[  675.045485][T19727]  ? sock_read_iter+0x3f0/0x3f0
[  675.050346][T19727]  ? common_file_perm+0x198/0x1f0
[  675.055375][T19727]  vfs_write+0x474/0x9a0
[  675.059624][T19727]  ? file_end_write+0x250/0x250
[  675.064481][T19727]  ? __fget_files+0x3fc/0x460
[  675.069161][T19727]  ? __fdget_pos+0x1d8/0x330
[  675.073742][T19727]  ? ksys_write+0x74/0x260
[  675.078155][T19727]  ksys_write+0x151/0x260
[  675.082483][T19727]  ? __ia32_sys_read+0x90/0x90
[  675.087246][T19727]  ? lockdep_hardirqs_on+0x98/0x150
[  675.092441][T19727]  do_syscall_64+0x55/0xb0
[  675.096849][T19727]  ? clear_bhb_loop+0x40/0x90
[  675.101519][T19727]  ? clear_bhb_loop+0x40/0x90
[  675.106194][T19727]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.112077][T19727] RIP: 0033:0x7f259699e019
[  675.116488][T19727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.136096][T19727] RSP: 002b:00007f25977ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  675.144521][T19727] RAX: ffffffffffffffda RBX: 00007f2596c25fa0 RCX: 00007f259699e019
[  675.152489][T19727] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  675.160462][T19727] RBP: 00007f25977ef090 R08: 0000000000000000 R09: 0000000000000000
[  675.168433][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  675.176410][T19727] R13: 00007f2596c26038 R14: 00007f2596c25fa0 R15: 00007ffc744352f8
[  675.184393][T19727]  </TASK>
[  675.224017][T19727] Mem-Info:
[  675.231869][T19727] active_anon:19276 inactive_anon:0 isolated_anon:0
[  675.231869][T19727]  active_file:18949 inactive_file:40193 isolated_file:0
[  675.231869][T19727]  unevictable:768 dirty:78 writeback:0
[  675.231869][T19727]  slab_reclaimable:10874 slab_unreclaimable:94197
[  675.231869][T19727]  mapped:24931 shmem:11840 pagetables:552
[  675.231869][T19727]  sec_pagetables:0 bounce:0
[  675.231869][T19727]  kernel_misc_reclaimable:0
[  675.231869][T19727]  free:1328991 free_pcp:10730 free_cma:0
[  675.278279][T19727] Node 0 active_anon:74404kB inactive_anon:0kB active_file:75796kB inactive_file:160572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99724kB dirty:312kB writeback:0kB shmem:43124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10312kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no
[  675.279977][T19739] netlink: 'syz.2.4491': attribute type 10 has an invalid length.
[  675.311269][T19727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  675.350125][T19727] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  675.396439][T19739] bridge0: port 4(team0) entered disabled state
[  675.404854][T19727] lowmem_reserve[]: 0 2521 2522 2522 2522
[  675.410724][T19727] Node 0 DMA32 free:1409504kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:70164kB inactive_anon:0kB active_file:75796kB inactive_file:159744kB unevictable:1536kB writepending:312kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:30680kB local_pcp:18504kB free_cma:0kB
[  675.482067][T19739] bridge0: port 4(team0) entered disabled state
[  675.482138][T19727] lowmem_reserve[]: 0 0 0 0 0
[  675.508759][T19739] C: left promiscuous mode
[  675.513535][T19739] C: left allmulticast mode
[  675.513632][T19727] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  675.553174][T19727] lowmem_reserve[]: 0 0 0 0 0
[  675.559719][T19727] Node 1 Normal free:3891100kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19396kB local_pcp:10272kB free_cma:0kB
[  675.580772][T19739] team0 (unregistering): Port device C removed
[  675.589929][T19727] lowmem_reserve[]: 0 0 0 0 0
[  675.600625][T19727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  675.614982][T19739] team_slave_1: left promiscuous mode
[  675.624942][T19739] team_slave_1: left allmulticast mode
[  675.640645][T19727] Node 0 DMA32: 2487*4kB (UME) 941*8kB (UME) 890*16kB (UME) 565*32kB (UME) 233*64kB (UME) 840*128kB (UME) 294*256kB (UME) 145*512kB (UM) 86*1024kB (UM) 31*2048kB (UM) 229*4096kB (UM) = 1411268kB
[  675.651935][T19739] team0 (unregistering): Port device team_slave_1 removed
[  675.692896][T19727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  675.701068][T19739] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  675.717399][T19727] Node 1 Normal: 183*4kB (UME) 70*8kB (UME) 51*16kB (UME) 51*32kB (UME) 20*64kB (UE) 8*128kB (UME) 2*256kB (U) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3891100kB
[  675.728561][T19739] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  675.752624][T19743] FAULT_INJECTION: forcing a failure.
[  675.752624][T19743] name failslab, interval 1, probability 0, space 0, times 0
[  675.774260][T19727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  675.775474][T19743] CPU: 1 PID: 19743 Comm: syz.0.4494 Not tainted syzkaller #0
[  675.788696][T19727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  675.791267][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  675.810630][T19743] Call Trace:
[  675.811784][T19727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  675.813910][T19743]  <TASK>
[  675.813920][T19743]  dump_stack_lvl+0x18c/0x250
[  675.813948][T19743]  ? show_regs_print_info+0x20/0x20
[  675.813967][T19743]  ? load_image+0x420/0x420
[  675.813992][T19743]  ? __might_sleep+0xe0/0xe0
[  675.841970][T19727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  675.845361][T19743]  ? __lock_acquire+0x7d80/0x7d80
[  675.845393][T19743]  should_fail_ex+0x394/0x4c0
[  675.845421][T19743]  should_failslab+0x9/0x20
[  675.845443][T19743]  slab_pre_alloc_hook+0x59/0x300
[  675.868508][T19727] 64607 total pagecache pages
[  675.868885][T19743]  ? call_usermodehelper_setup+0x8e/0x260
[  675.880097][T19727] 0 pages in swap cache
[  675.884277][T19743]  __kmem_cache_alloc_node+0x53/0x250
[  675.884312][T19743]  ? call_usermodehelper_setup+0x8e/0x260
[  675.884332][T19743]  kmalloc_trace+0x2a/0xe0
[  675.884359][T19743]  call_usermodehelper_setup+0x8e/0x260
[  675.909539][T19743]  ? __request_module+0x600/0x600
[  675.914579][T19743]  __request_module+0x3bb/0x600
[  675.919427][T19743]  ? module_enforce_rwx_sections+0x150/0x150
[  675.925405][T19743]  ? module_enforce_rwx_sections+0x150/0x150
[  675.931385][T19743]  ? apparmor_capable+0x137/0x1a0
[  675.936409][T19743]  ? dev_load+0x21/0x1f0
[  675.940650][T19743]  dev_ioctl+0x837/0x1140
[  675.944978][T19743]  sock_ioctl+0x74c/0x7e0
[  675.949303][T19743]  ? sock_poll+0x3e0/0x3e0
[  675.953723][T19743]  ? bpf_lsm_file_ioctl+0x9/0x10
[  675.958655][T19743]  ? security_file_ioctl+0x80/0xa0
[  675.963764][T19743]  ? sock_poll+0x3e0/0x3e0
[  675.968174][T19743]  __se_sys_ioctl+0xfd/0x170
[  675.972763][T19743]  do_syscall_64+0x55/0xb0
[  675.977174][T19743]  ? clear_bhb_loop+0x40/0x90
[  675.981842][T19743]  ? clear_bhb_loop+0x40/0x90
[  675.986519][T19743]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.992411][T19743] RIP: 0033:0x7fe1d339e019
[  675.996825][T19743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.016433][T19743] RSP: 002b:00007fe1d42e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  676.024851][T19743] RAX: ffffffffffffffda RBX: 00007fe1d3625fa0 RCX: 00007fe1d339e019
[  676.032818][T19743] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004
[  676.040783][T19743] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  676.048748][T19743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.056710][T19743] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  676.064689][T19743]  </TASK>
[  676.090400][T19727] Free swap  = 124996kB
[  676.104004][T19727] Total swap = 124996kB
[  676.108210][T19727] 2097051 pages RAM
[  676.112022][T19727] 0 pages HighMem/MovableOnly
[  676.124010][T19727] 416955 pages reserved
[  676.128205][T19727] 0 pages cma reserved
[  676.181000][T19739] team0 (unregistering): Port device netdevsim0 removed
[  676.391945][T19755] netlink: 'syz.2.4497': attribute type 16 has an invalid length.
[  676.414045][T19755] netlink: 'syz.2.4497': attribute type 3 has an invalid length.
[  676.421877][T19755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4497'.
[  676.577072][T19761] netlink: 'syz.0.4498': attribute type 16 has an invalid length.
[  676.613518][T19761] netlink: 'syz.0.4498': attribute type 3 has an invalid length.
[  676.622872][T19761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4498'.
[  676.703508][T19769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4500'.
[  676.753341][T19765] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4502'.
[  676.876334][T19775] netlink: 'syz.0.4504': attribute type 12 has an invalid length.
[  676.910732][T19775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4504'.
[  677.982019][T19815] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4520'.
[  678.423594][T19831] syzkaller0: entered promiscuous mode
[  678.432858][T19831] syzkaller0: entered allmulticast mode
[  678.768710][T19849] netlink: 'syz.0.4530': attribute type 29 has an invalid length.
[  680.541207][T19849] netlink: 'syz.0.4530': attribute type 29 has an invalid length.
[  680.550018][T19854] netlink: 'syz.1.4532': attribute type 2 has an invalid length.
[  680.558273][T19854] netlink: 'syz.1.4532': attribute type 8 has an invalid length.
[  680.576332][T19854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4532'.
[  680.585876][T19859] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.4533'.
[  680.749453][T19868] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4536'.
[  680.909106][T19868] FAULT_INJECTION: forcing a failure.
[  680.909106][T19868] name failslab, interval 1, probability 0, space 0, times 0
[  680.925337][T19868] CPU: 1 PID: 19868 Comm: syz.1.4536 Not tainted syzkaller #0
[  680.932841][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  680.942907][T19868] Call Trace:
[  680.946184][T19868]  <TASK>
[  680.949107][T19868]  dump_stack_lvl+0x18c/0x250
[  680.953788][T19868]  ? show_regs_print_info+0x20/0x20
[  680.958981][T19868]  ? load_image+0x420/0x420
[  680.963486][T19868]  ? verify_lock_unused+0x140/0x140
[  680.968686][T19868]  should_fail_ex+0x394/0x4c0
[  680.973373][T19868]  should_failslab+0x9/0x20
[  680.977875][T19868]  slab_pre_alloc_hook+0x59/0x300
[  680.982900][T19868]  kmem_cache_alloc+0x5a/0x2c0
[  680.987657][T19868]  ? skb_clone+0x1eb/0x370
[  680.992075][T19868]  skb_clone+0x1eb/0x370
[  680.996314][T19868]  __netlink_deliver_tap+0x411/0x7f0
[  681.001601][T19868]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.006796][T19868]  netlink_deliver_tap+0x19c/0x1b0
[  681.011897][T19868]  netlink_sendskb+0x68/0x130
[  681.016573][T19868]  netlink_ack+0xcd5/0x1160
[  681.021086][T19868]  ? netlink_dump+0xec0/0xec0
[  681.025758][T19868]  ? ref_tracker_free+0x686/0x830
[  681.030782][T19868]  netlink_rcv_skb+0x2b3/0x4c0
[  681.035545][T19868]  ? rtnetlink_bind+0x80/0x80
[  681.040220][T19868]  ? netlink_ack+0x1160/0x1160
[  681.044990][T19868]  ? __lock_acquire+0x7d80/0x7d80
[  681.050015][T19868]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.055213][T19868]  netlink_unicast+0x7b1/0x930
[  681.059981][T19868]  netlink_sendmsg+0x8d0/0xbf0
[  681.064740][T19868]  ? netlink_getsockopt+0x590/0x590
[  681.069931][T19868]  ? apparmor_socket_sendmsg+0x8e/0x330
[  681.075470][T19868]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  681.080748][T19868]  ? security_socket_sendmsg+0x80/0xa0
[  681.086196][T19868]  ? netlink_getsockopt+0x590/0x590
[  681.091386][T19868]  ____sys_sendmsg+0x61b/0x980
[  681.096149][T19868]  ? __asan_memset+0x22/0x40
[  681.100740][T19868]  ? __sys_sendmsg_sock+0x30/0x30
[  681.105755][T19868]  ? __import_iovec+0x3fa/0x850
[  681.110608][T19868]  ? import_iovec+0x73/0xa0
[  681.115108][T19868]  ___sys_sendmsg+0x2a6/0x360
[  681.119776][T19868]  ? get_pid_task+0x20/0x1e0
[  681.124364][T19868]  ? __sys_sendmsg+0x2b0/0x2b0
[  681.129135][T19868]  ? __lock_acquire+0x7d80/0x7d80
[  681.134172][T19868]  __se_sys_sendmsg+0x1d0/0x2c0
[  681.139021][T19868]  ? __x64_sys_sendmsg+0x80/0x80
[  681.143970][T19868]  ? lockdep_hardirqs_on+0x98/0x150
[  681.149173][T19868]  do_syscall_64+0x55/0xb0
[  681.153581][T19868]  ? clear_bhb_loop+0x40/0x90
[  681.158250][T19868]  ? clear_bhb_loop+0x40/0x90
[  681.162922][T19868]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.168805][T19868] RIP: 0033:0x7f26db59e019
[  681.173215][T19868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.192815][T19868] RSP: 002b:00007f26dc4c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.201224][T19868] RAX: ffffffffffffffda RBX: 00007f26db825fa0 RCX: 00007f26db59e019
[  681.209189][T19868] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[  681.217152][T19868] RBP: 00007f26dc4c8090 R08: 0000000000000000 R09: 0000000000000000
[  681.225115][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  681.233093][T19868] R13: 00007f26db826038 R14: 00007f26db825fa0 R15: 00007ffeb09e5748
[  681.241068][T19868]  </TASK>
[  681.411232][T19876] FAULT_INJECTION: forcing a failure.
[  681.411232][T19876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.441351][T19876] CPU: 1 PID: 19876 Comm: syz.0.4540 Not tainted syzkaller #0
[  681.448870][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  681.458941][T19876] Call Trace:
[  681.462235][T19876]  <TASK>
[  681.465184][T19876]  dump_stack_lvl+0x18c/0x250
[  681.469887][T19876]  ? show_regs_print_info+0x20/0x20
[  681.475109][T19876]  ? load_image+0x420/0x420
[  681.479646][T19876]  ? __lock_acquire+0x7d80/0x7d80
[  681.484703][T19876]  ? snprintf+0xe9/0x140
[  681.488979][T19876]  should_fail_ex+0x394/0x4c0
[  681.493690][T19876]  _copy_to_user+0x2f/0xa0
[  681.498130][T19876]  simple_read_from_buffer+0xe7/0x150
[  681.503534][T19876]  proc_fail_nth_read+0x1e8/0x260
[  681.508581][T19876]  ? proc_fault_inject_write+0x360/0x360
[  681.514220][T19876]  ? fsnotify_perm+0x271/0x5e0
[  681.518984][T19876]  ? proc_fault_inject_write+0x360/0x360
[  681.524622][T19876]  vfs_read+0x298/0x990
[  681.528803][T19876]  ? kernel_read+0x1e0/0x1e0
[  681.533411][T19876]  ? __fget_files+0x28/0x460
[  681.538011][T19876]  ? __fget_files+0x3fc/0x460
[  681.542688][T19876]  ? __fdget_pos+0x2a3/0x330
[  681.547274][T19876]  ? ksys_read+0x74/0x260
[  681.551603][T19876]  ksys_read+0x151/0x260
[  681.555848][T19876]  ? vfs_write+0x9a0/0x9a0
[  681.560266][T19876]  ? lockdep_hardirqs_on+0x98/0x150
[  681.565468][T19876]  do_syscall_64+0x55/0xb0
[  681.569878][T19876]  ? clear_bhb_loop+0x40/0x90
[  681.574552][T19876]  ? clear_bhb_loop+0x40/0x90
[  681.579223][T19876]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.585114][T19876] RIP: 0033:0x7fe1d335e84e
[  681.589527][T19876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  681.609135][T19876] RSP: 002b:00007fe1d42e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  681.617548][T19876] RAX: ffffffffffffffda RBX: 00007fe1d42e36c0 RCX: 00007fe1d335e84e
[  681.625512][T19876] RDX: 000000000000000f RSI: 00007fe1d42e30a0 RDI: 0000000000000008
[  681.633477][T19876] RBP: 00007fe1d42e3090 R08: 0000000000000000 R09: 0000000000000000
[  681.641437][T19876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  681.649398][T19876] R13: 00007fe1d3626038 R14: 00007fe1d3625fa0 R15: 00007ffde7f4ff48
[  681.657376][T19876]  </TASK>
[  682.146699][T19901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4548'.
[  682.936877][T19926] netlink: 'syz.2.4555': attribute type 39 has an invalid length.
[  683.681068][T19956] netlink: 'syz.0.4563': attribute type 27 has an invalid length.
[  683.697690][T19956] netlink: 'syz.0.4563': attribute type 25 has an invalid length.
[  685.053746][T20003] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4579'.
[  685.270258][T20003] FAULT_INJECTION: forcing a failure.
[  685.270258][T20003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.283595][T20003] CPU: 1 PID: 20003 Comm: syz.2.4579 Not tainted syzkaller #0
[  685.291077][T20003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  685.301143][T20003] Call Trace:
[  685.304438][T20003]  <TASK>
[  685.307378][T20003]  dump_stack_lvl+0x18c/0x250
[  685.312085][T20003]  ? show_regs_print_info+0x20/0x20
[  685.317302][T20003]  ? load_image+0x420/0x420
[  685.321834][T20003]  ? __lock_acquire+0x7d80/0x7d80
[  685.326891][T20003]  ? snprintf+0xe9/0x140
[  685.331150][T20003]  should_fail_ex+0x394/0x4c0
[  685.335825][T20003]  _copy_to_user+0x2f/0xa0
[  685.340238][T20003]  simple_read_from_buffer+0xe7/0x150
[  685.345607][T20003]  proc_fail_nth_read+0x1e8/0x260
[  685.350628][T20003]  ? proc_fault_inject_write+0x360/0x360
[  685.356262][T20003]  ? fsnotify_perm+0x271/0x5e0
[  685.361021][T20003]  ? proc_fault_inject_write+0x360/0x360
[  685.366649][T20003]  vfs_read+0x298/0x990
[  685.370807][T20003]  ? kernel_read+0x1e0/0x1e0
[  685.375397][T20003]  ? __fget_files+0x28/0x460
[  685.379986][T20003]  ? __fget_files+0x3fc/0x460
[  685.384663][T20003]  ? __fdget_pos+0x2a3/0x330
[  685.389245][T20003]  ? ksys_read+0x74/0x260
[  685.393568][T20003]  ksys_read+0x151/0x260
[  685.397810][T20003]  ? vfs_write+0x9a0/0x9a0
[  685.402224][T20003]  ? lockdep_hardirqs_on+0x98/0x150
[  685.407418][T20003]  do_syscall_64+0x55/0xb0
[  685.411823][T20003]  ? clear_bhb_loop+0x40/0x90
[  685.416491][T20003]  ? clear_bhb_loop+0x40/0x90
[  685.421162][T20003]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  685.427045][T20003] RIP: 0033:0x7ff14595e84e
[  685.431454][T20003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  685.451051][T20003] RSP: 002b:00007ff14681efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  685.459458][T20003] RAX: ffffffffffffffda RBX: 00007ff14681f6c0 RCX: 00007ff14595e84e
[  685.467424][T20003] RDX: 000000000000000f RSI: 00007ff14681f0a0 RDI: 0000000000000004
[  685.475395][T20003] RBP: 00007ff14681f090 R08: 0000000000000000 R09: 0000000000000000
[  685.483355][T20003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  685.491320][T20003] R13: 00007ff145c26038 R14: 00007ff145c25fa0 R15: 00007ffc949cae68
[  685.499294][T20003]  </TASK>
[  685.933790][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  685.940824][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  686.111232][T20019] netlink: 'syz.1.4583': attribute type 16 has an invalid length.
[  686.134090][T20019] netlink: 'syz.1.4583': attribute type 3 has an invalid length.
[  686.142226][T20019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4583'.
[  686.688482][T20023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4585'.
[  690.163080][T20063] netlink: 'syz.1.4597': attribute type 13 has an invalid length.
[  690.171309][T20063] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4597'.
[  690.186704][T20063] erspan0: refused to change device tx_queue_len
[  690.205935][T20068] vcan0: entered allmulticast mode
[  690.541943][T20086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4604'.
[  691.288391][T20120] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4615'.
[  691.426320][T15969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  691.435675][T15969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  691.443535][T15969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  691.453369][T15969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  691.462031][T15969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  691.470523][T15969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  691.860090][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.898808][T20123] chnl_net:caif_netlink_parms(): no params data found
[  691.992329][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.022859][T20148] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4624'.
[  692.022992][T20150] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4624'.
[  692.160404][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.230021][T20123] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.237495][T20123] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.245326][T20123] bridge_slave_0: entered allmulticast mode
[  692.253005][T20123] bridge_slave_0: entered promiscuous mode
[  692.336030][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.363103][T20123] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.373845][T20123] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.391732][T20123] bridge_slave_1: entered allmulticast mode
[  692.415314][T20123] bridge_slave_1: entered promiscuous mode
[  692.523687][T20123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.562656][T20123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.687355][T20181] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4632'.
[  692.701078][T20181] tc_dump_action: action bad kind
[  692.715105][T20123] team0: Port device team_slave_0 added
[  692.814853][T20123] team0: Port device team_slave_1 added
[  692.933127][T20123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  692.971377][T20123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.010286][T20123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.054479][T20123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.073940][T20123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.124355][T13329] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  693.133954][T20123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.322199][ T1147] ip6gretap0 (unregistering): left allmulticast mode
[  693.338697][ T1147] ip6gretap0 (unregistering): left promiscuous mode
[  693.350501][ T1147] : port 1(ip6gretap0) entered disabled state
[  693.458535][T20206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4639'.
[  693.529183][T15969] Bluetooth: hci1: command tx timeout
[  693.827356][T20123] hsr_slave_0: entered promiscuous mode
[  693.839464][T20123] hsr_slave_1: entered promiscuous mode
[  694.940029][ T1147] hsr_slave_0: left promiscuous mode
[  694.954832][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.962270][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.985026][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.992461][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  695.015214][ T1147] hsr0: left allmulticast mode
[  695.020199][ T1147] bridge0: port 3(hsr0) entered disabled state
[  695.050232][ T1147] bridge_slave_1: left allmulticast mode
[  695.061066][ T1147] bridge_slave_1: left promiscuous mode
[  695.072427][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.082117][ T1147] bridge_slave_0: left allmulticast mode
[  695.095420][ T1147] bridge_slave_0: left promiscuous mode
[  695.101136][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.148845][ T1147] veth1_macvtap: left promiscuous mode
[  695.154473][ T1147] veth0_macvtap: left promiscuous mode
[  695.160121][ T1147] veth1_vlan: left promiscuous mode
[  695.604097][T15969] Bluetooth: hci1: command tx timeout
[  696.307207][T20123] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  696.346781][T20123] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  696.387192][T20123] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  696.419312][T20123] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  697.058803][T20123] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.209654][T20123] 8021q: adding VLAN 0 to HW filter on device team0
[  697.245493][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.252632][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.302469][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.309670][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.691726][T15969] Bluetooth: hci1: command tx timeout
[  697.850414][T20297] FAULT_INJECTION: forcing a failure.
[  697.850414][T20297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  697.872144][T20301] syz.1.4652[20301] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  697.872276][T20301] syz.1.4652[20301] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  697.913558][T20297] CPU: 0 PID: 20297 Comm: syz.2.4653 Not tainted syzkaller #0
[  697.932423][T20297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  697.942499][T20297] Call Trace:
[  697.945803][T20297]  <TASK>
[  697.948751][T20297]  dump_stack_lvl+0x18c/0x250
[  697.953458][T20297]  ? show_regs_print_info+0x20/0x20
[  697.958686][T20297]  ? load_image+0x420/0x420
[  697.963233][T20297]  ? __might_fault+0xaa/0x120
[  697.967928][T20297]  ? __lock_acquire+0x7d80/0x7d80
[  697.972976][T20297]  should_fail_ex+0x394/0x4c0
[  697.977685][T20297]  _copy_from_user+0x2f/0xe0
[  697.982300][T20297]  ip6_tnl_siocdevprivate+0x1d9/0xab0
[  697.987704][T20297]  ? ip6_tnl_start_xmit+0x1230/0x1230
[  697.993107][T20297]  ? dev_ioctl+0x83c/0x1140
[  697.997633][T20297]  ? __lock_acquire+0x7d80/0x7d80
[  698.002694][T20297]  ? dev_ifsioc+0x957/0xc40
[  698.007225][T20297]  dev_ioctl+0x84c/0x1140
[  698.011584][T20297]  sock_ioctl+0x74c/0x7e0
[  698.015940][T20297]  ? sock_poll+0x3e0/0x3e0
[  698.020392][T20297]  ? bpf_lsm_file_ioctl+0x9/0x10
[  698.025349][T20297]  ? security_file_ioctl+0x80/0xa0
[  698.030486][T20297]  ? sock_poll+0x3e0/0x3e0
[  698.034928][T20297]  __se_sys_ioctl+0xfd/0x170
[  698.039556][T20297]  do_syscall_64+0x55/0xb0
[  698.043988][T20297]  ? clear_bhb_loop+0x40/0x90
[  698.048689][T20297]  ? clear_bhb_loop+0x40/0x90
[  698.053389][T20297]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  698.059302][T20297] RIP: 0033:0x7ff14599e019
[  698.063737][T20297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.083363][T20297] RSP: 002b:00007ff14681f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  698.091799][T20297] RAX: ffffffffffffffda RBX: 00007ff145c25fa0 RCX: 00007ff14599e019
[  698.099787][T20297] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004
[  698.107774][T20297] RBP: 00007ff14681f090 R08: 0000000000000000 R09: 0000000000000000
[  698.115763][T20297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.123753][T20297] R13: 00007ff145c26038 R14: 00007ff145c25fa0 R15: 00007ffc949cae68
[  698.131763][T20297]  </TASK>
[  698.237160][T20123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.072396][T20123] veth0_vlan: entered promiscuous mode
[  699.211004][T20331] tun0: tun_chr_ioctl cmd 1074025678
[  699.221646][T20331] tun0: group set to 0
[  699.236963][T20123] veth1_vlan: entered promiscuous mode
[  699.682138][T20123] veth0_macvtap: entered promiscuous mode
[  699.716900][T20123] veth1_macvtap: entered promiscuous mode
[  699.766662][T15969] Bluetooth: hci1: command tx timeout
[  699.799809][T20123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  699.820853][T20123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.831482][T20123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  699.842447][T20123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.856152][T20123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.868812][T20123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.879557][T20123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.889927][T20123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.907202][T20123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.917447][T20123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.933350][T20123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.959436][T20123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.032291][T20123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.043835][T20123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.067073][T20123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.080319][T20123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.429592][T19162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.448731][T19162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.517269][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.564549][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.084851][T20396] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4671'.
[  701.551145][T20408] netlink: 'syz.1.4673': attribute type 153 has an invalid length.
[  701.590810][T20408] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4673'.
[  701.780578][T20413] netlink: 'syz.0.4677': attribute type 10 has an invalid length.
[  701.819344][T20413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4677'.
[  701.868799][T20413] veth0_vlan: left promiscuous mode
[  701.919446][T20413] veth0_vlan: entered promiscuous mode
[  701.986202][T20413] batman_adv: batadv0: Interface activated: vlan1
[  702.045365][T20413] batman_adv: batadv0: Adding interface: veth0_vlan
[  702.072152][T20413] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.099573][T20413] batman_adv: batadv0: Interface activated: veth0_vlan
[  703.162974][T20465] netlink: 'syz.0.4692': attribute type 153 has an invalid length.
[  703.171175][T20465] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4692'.
[  703.277755][T20468] netlink: 'syz.1.4695': attribute type 10 has an invalid length.
[  703.403242][T20468] team0: Device wg1 is of different type
[  703.444979][T20474] FAULT_INJECTION: forcing a failure.
[  703.444979][T20474] name failslab, interval 1, probability 0, space 0, times 0
[  703.462280][T20474] CPU: 0 PID: 20474 Comm: syz.3.4698 Not tainted syzkaller #0
[  703.469773][T20474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  703.479823][T20474] Call Trace:
[  703.483099][T20474]  <TASK>
[  703.486026][T20474]  dump_stack_lvl+0x18c/0x250
[  703.490704][T20474]  ? show_regs_print_info+0x20/0x20
[  703.495893][T20474]  ? load_image+0x420/0x420
[  703.500401][T20474]  ? __might_sleep+0xe0/0xe0
[  703.505012][T20474]  ? __lock_acquire+0x7d80/0x7d80
[  703.510037][T20474]  should_fail_ex+0x394/0x4c0
[  703.514719][T20474]  should_failslab+0x9/0x20
[  703.519223][T20474]  slab_pre_alloc_hook+0x59/0x300
[  703.524250][T20474]  kmem_cache_alloc_node+0x5e/0x310
[  703.529446][T20474]  ? __alloc_skb+0x103/0x2c0
[  703.534033][T20474]  __alloc_skb+0x103/0x2c0
[  703.538443][T20474]  rtmsg_ifinfo_build_skb+0x83/0x260
[  703.543737][T20474]  ? ip6_route_dev_notify+0x9a/0x5b0
[  703.549031][T20474]  rtmsg_ifinfo+0x8c/0x1a0
[  703.553450][T20474]  netdev_state_change+0xfe/0x170
[  703.558488][T20474]  ? netdev_features_change+0xd0/0xd0
[  703.563871][T20474]  ? __might_fault+0xaa/0x120
[  703.568554][T20474]  ? __might_fault+0xc6/0x120
[  703.573246][T20474]  ? __might_fault+0xaa/0x120
[  703.577927][T20474]  ip6_tnl_siocdevprivate+0x841/0xab0
[  703.583305][T20474]  ? ip6_tnl_start_xmit+0x1230/0x1230
[  703.588680][T20474]  ? dev_ioctl+0x83c/0x1140
[  703.593190][T20474]  ? dev_ifsioc+0x957/0xc40
[  703.597693][T20474]  dev_ioctl+0x84c/0x1140
[  703.602022][T20474]  sock_ioctl+0x74c/0x7e0
[  703.606369][T20474]  ? sock_poll+0x3e0/0x3e0
[  703.610797][T20474]  ? bpf_lsm_file_ioctl+0x9/0x10
[  703.615733][T20474]  ? security_file_ioctl+0x80/0xa0
[  703.620846][T20474]  ? sock_poll+0x3e0/0x3e0
[  703.625268][T20474]  __se_sys_ioctl+0xfd/0x170
[  703.629871][T20474]  do_syscall_64+0x55/0xb0
[  703.634290][T20474]  ? clear_bhb_loop+0x40/0x90
[  703.638981][T20474]  ? clear_bhb_loop+0x40/0x90
[  703.643663][T20474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.649551][T20474] RIP: 0033:0x7f8f1cb9e019
[  703.653962][T20474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.673568][T20474] RSP: 002b:00007f8f1da04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  703.681979][T20474] RAX: ffffffffffffffda RBX: 00007f8f1ce25fa0 RCX: 00007f8f1cb9e019
[  703.689943][T20474] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004
[  703.697907][T20474] RBP: 00007f8f1da04090 R08: 0000000000000000 R09: 0000000000000000
[  703.705870][T20474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.713835][T20474] R13: 00007f8f1ce26038 R14: 00007f8f1ce25fa0 R15: 00007ffdb2adfc98
[  703.721813][T20474]  </TASK>
[  704.649871][T20517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'.
[  704.659396][T20517] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4711'.
[  704.942240][T20526] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4713'.
[  704.981825][T20526] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  705.087399][T20534] netlink: 'syz.3.4716': attribute type 4 has an invalid length.
[  705.112798][T20534] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4716'.
[  705.425670][T20555] netlink: 'syz.2.4724': attribute type 9 has an invalid length.
[  705.439702][T20555] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.4724'.
[  705.455425][T20558] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4723'.
[  706.304851][T20567] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4726'.
[  706.567664][T20581] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4731'.
[  706.709889][T20584] netlink: 'syz.2.4732': attribute type 16 has an invalid length.
[  706.724178][T20586] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4733'.
[  706.737863][T20584] netlink: 'syz.2.4732': attribute type 3 has an invalid length.
[  706.750896][T20584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4732'.
[  707.120899][T20600] netlink: 'syz.2.4737': attribute type 153 has an invalid length.
[  707.137315][T20600] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4737'.
[  707.363806][T20605] netlink: 'syz.3.4739': attribute type 10 has an invalid length.
[  707.380879][T20605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4739'.
[  707.417011][T20605] batman_adv: batadv0: Adding interface: veth0_vlan
[  707.468733][T20605] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  707.530650][T20605] batman_adv: batadv0: Interface activated: veth0_vlan
[  707.621505][T20612] netlink: 'syz.2.4741': attribute type 4 has an invalid length.
[  707.634441][T20612] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4741'.
[  707.913174][T20612] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  708.495900][T20635] netlink: 'syz.0.4748': attribute type 4 has an invalid length.
[  708.534573][T20635] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4748'.
[  708.691113][T20643] FAULT_INJECTION: forcing a failure.
[  708.691113][T20643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.739512][T20643] CPU: 0 PID: 20643 Comm: syz.2.4752 Not tainted syzkaller #0
[  708.747038][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  708.757134][T20643] Call Trace:
[  708.760443][T20643]  <TASK>
[  708.763403][T20643]  dump_stack_lvl+0x18c/0x250
[  708.768119][T20643]  ? show_regs_print_info+0x20/0x20
[  708.773345][T20643]  ? load_image+0x420/0x420
[  708.775187][T20642] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan
[  708.777872][T20643]  ? __might_fault+0xaa/0x120
[  708.777943][T20643]  ? __lock_acquire+0x7d80/0x7d80
[  708.777975][T20643]  should_fail_ex+0x394/0x4c0
[  708.778008][T20643]  _copy_from_user+0x2f/0xe0
[  708.788371][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.792719][T20643]  kstrtouint_from_user+0xde/0x170
[  708.792753][T20643]  ? kstrtol_from_user+0x190/0x190
[  708.792799][T20643]  proc_fail_nth_write+0x8f/0x250
[  708.832220][T20643]  ? proc_fail_nth_read+0x260/0x260
[  708.837471][T20643]  ? proc_fail_nth_read+0x260/0x260
[  708.842714][T20643]  vfs_write+0x299/0x9a0
[  708.847005][T20643]  ? file_end_write+0x250/0x250
[  708.851893][T20643]  ? __fget_files+0x28/0x460
[  708.856518][T20643]  ? __fget_files+0x3fc/0x460
[  708.861239][T20643]  ? __fdget_pos+0x2a3/0x330
[  708.865850][T20643]  ? ksys_write+0x74/0x260
[  708.870295][T20643]  ksys_write+0x151/0x260
[  708.874652][T20643]  ? __ia32_sys_read+0x90/0x90
[  708.879454][T20643]  ? lockdep_hardirqs_on+0x98/0x150
[  708.884684][T20643]  do_syscall_64+0x55/0xb0
[  708.889133][T20643]  ? clear_bhb_loop+0x40/0x90
[  708.893831][T20643]  ? clear_bhb_loop+0x40/0x90
[  708.898534][T20643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  708.904454][T20643] RIP: 0033:0x7ff14595e84e
[  708.908892][T20643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  708.928540][T20643] RSP: 002b:00007ff14681efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  708.936990][T20643] RAX: ffffffffffffffda RBX: 00007ff14681f6c0 RCX: 00007ff14595e84e
[  708.944997][T20643] RDX: 0000000000000001 RSI: 00007ff14681f0a0 RDI: 0000000000000005
[  708.953002][T20643] RBP: 00007ff14681f090 R08: 0000000000000000 R09: 0000000000000000
[  708.961007][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.969009][T20643] R13: 00007ff145c26038 R14: 00007ff145c25fa0 R15: 00007ffc949cae68
[  708.977030][T20643]  </TASK>
[  709.019199][T20649] netlink: 822 bytes leftover after parsing attributes in process `syz.1.4753'.
[  709.034117][T20649] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0
[  709.714119][T20666] netlink: 'syz.1.4769': attribute type 2 has an invalid length.
[  709.754187][T20666] netlink: 'syz.1.4769': attribute type 8 has an invalid length.
[  709.770779][T20666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4769'.
[  710.223309][T20677] netlink: 'syz.1.4764': attribute type 21 has an invalid length.
[  711.866193][T20685] __nla_validate_parse: 1 callbacks suppressed
[  711.866211][T20685] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4766'.
[  711.954165][T20685] bridge_slave_1: default FDB implementation only supports local addresses
[  712.619889][T20721] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4778'.
[  712.777607][T20724] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4780'.
[  712.874010][T20724] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  712.942529][T20727] netlink: 'syz.0.4781': attribute type 16 has an invalid length.
[  713.032756][T20727] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4781'.
[  713.854746][T20734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4783'.
[  713.894054][T20734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4783'.
[  713.911401][T20734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4783'.
[  714.027230][T20739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4783'.
[  714.548361][T20752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4790'.
[  714.780171][T20745] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4789'.
[  714.792604][T20745] bridge_slave_1: default FDB implementation only supports local addresses
[  715.606522][T20778] netlink: 'syz.0.4800': attribute type 10 has an invalid length.
[  715.745424][T20778] bridge_slave_1: left allmulticast mode
[  715.751141][T20778] bridge_slave_1: left promiscuous mode
[  715.862775][T20778] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.531821][T20795] netlink: 'syz.2.4803': attribute type 10 has an invalid length.
[  717.242626][ T7904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  717.297155][ T7904] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  717.309718][ T7904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  717.323506][ T7904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  717.337349][ T7904] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  717.344823][ T7904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  717.968207][ T6435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.024502][T20825] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4813'.
[  718.187818][ T6435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.236462][T20830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4814'.
[  718.299288][T20830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4814'.
[  718.395210][ T6435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.547110][ T6435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.602963][T20806] chnl_net:caif_netlink_parms(): no params data found
[  718.673048][T20835] netlink: 'syz.0.4815': attribute type 10 has an invalid length.
[  718.732193][T20835] team0: Port device wlan1 added
[  718.849924][T20806] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.875232][T20806] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.882485][T20806] bridge_slave_0: entered allmulticast mode
[  718.890578][T20806] bridge_slave_0: entered promiscuous mode
[  718.921683][T20806] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.942926][T20806] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.961084][T20806] bridge_slave_1: entered allmulticast mode
[  718.968984][T20806] bridge_slave_1: entered promiscuous mode
[  719.059485][T20842] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4817'.
[  719.103445][T20842] netlink: 'syz.2.4817': attribute type 2 has an invalid length.
[  719.265218][T20806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  719.444252][ T7904] Bluetooth: hci4: command tx timeout
[  719.446888][T20806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  719.748593][T20806] team0: Port device team_slave_0 added
[  719.781285][T20806] team0: Port device team_slave_1 added
[  720.018114][T20877] netlink: 'syz.0.4828': attribute type 8 has an invalid length.
[  720.044970][T20877] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4828'.
[  720.123371][T20806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.150679][T20806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.184800][T20806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.290543][T20806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.314015][T20806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.374049][T20806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.766715][T20806] hsr_slave_0: entered promiscuous mode
[  720.773303][T20806] hsr_slave_1: entered promiscuous mode
[  720.781463][T20806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  720.791956][T20806] Cannot create hsr debugfs directory
[  720.840111][T20905] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4835'.
[  721.525028][ T7904] Bluetooth: hci4: command tx timeout
[  722.014561][ T6435] hsr_slave_0: left promiscuous mode
[  722.022160][ T6435] hsr_slave_1: left promiscuous mode
[  722.032612][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.044968][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.053204][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.061250][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.072875][ T6435] hsr0: left allmulticast mode
[  722.081878][ T6435] bridge0: port 3(hsr0) entered disabled state
[  722.096450][ T6435] bridge_slave_1: left allmulticast mode
[  722.105740][ T6435] bridge_slave_1: left promiscuous mode
[  722.111713][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.126706][ T6435] bridge_slave_0: left allmulticast mode
[  722.132613][ T6435] bridge_slave_0: left promiscuous mode
[  722.144245][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.170440][ T6435] veth1_macvtap: left promiscuous mode
[  722.177051][ T6435] veth0_macvtap: left promiscuous mode
[  722.182670][ T6435] veth1_vlan: left promiscuous mode
[  722.188811][ T6435] veth0_vlan: left promiscuous mode
[  722.747360][ T6435] team0 (unregistering): Port device team_slave_1 removed
[  722.787738][ T6435] team0 (unregistering): Port device team_slave_0 removed
[  723.182998][T20942] netlink: 'syz.3.4842': attribute type 39 has an invalid length.
[  723.236171][T20940] netlink: 'syz.2.4840': attribute type 21 has an invalid length.
[  723.244289][T20940] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.4840'.
[  723.259296][T20949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4840'.
[  723.511406][T20806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  723.558116][T20955] netlink: 'syz.3.4847': attribute type 2 has an invalid length.
[  723.575737][T20955] netlink: 'syz.3.4847': attribute type 8 has an invalid length.
[  723.583643][T20955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4847'.
[  723.604501][ T7904] Bluetooth: hci4: command tx timeout
[  723.643501][T20806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  723.667904][T20806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  723.719976][T20806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  723.836046][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4856'.
[  723.898037][T20972] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4856'.
[  724.047324][T20806] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.128837][T20806] 8021q: adding VLAN 0 to HW filter on device team0
[  724.226081][T19162] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.233254][T19162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.362139][T19162] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.369394][T19162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.738878][T20998] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4855'.
[  725.044643][T21005] netlink: 'syz.3.4857': attribute type 16 has an invalid length.
[  725.052700][T21005] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4857'.
[  725.321285][T21012] netlink: 'syz.3.4859': attribute type 3 has an invalid length.
[  725.374399][T21012] netlink: 'syz.3.4859': attribute type 1 has an invalid length.
[  725.382188][T21012] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.4859'.
[  725.684537][ T7904] Bluetooth: hci4: command tx timeout
[  725.808597][T20806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.093934][T20806] veth0_vlan: entered promiscuous mode
[  726.207604][T20806] veth1_vlan: entered promiscuous mode
[  726.277183][T20806] veth0_macvtap: entered promiscuous mode
[  726.303087][T20806] veth1_macvtap: entered promiscuous mode
[  726.389295][T21038] netlink: 64771 bytes leftover after parsing attributes in process `syz.0.4866'.
[  726.440002][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.457014][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.467358][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.478061][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.492347][T20806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  726.598533][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  726.620712][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.633964][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  726.647942][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.664212][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  726.686050][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.703822][T20806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  726.756852][T20806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  726.804060][T20806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  726.814401][T20806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  726.823139][T20806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  727.272421][T19167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.286811][T21066] netlink: 64771 bytes leftover after parsing attributes in process `syz.2.4876'.
[  727.322848][T19167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.404287][T10128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.412157][T10128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.225093][T21094] netlink: 'syz.3.4885': attribute type 2 has an invalid length.
[  728.243449][T21094] netlink: 'syz.3.4885': attribute type 8 has an invalid length.
[  728.279314][T21094] __nla_validate_parse: 3 callbacks suppressed
[  728.279358][T21094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4885'.
[  728.671015][T21106] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.4886'.
[  728.829904][T15969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  728.839338][T15969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  728.848436][T15969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  728.859120][T15969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  728.899001][T15969] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  728.910525][T15969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  729.323284][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.475897][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.499710][T21129] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4898'.
[  729.545372][T21111] chnl_net:caif_netlink_parms(): no params data found
[  729.595788][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.644974][T21135] netlink: 'syz.2.4892': attribute type 21 has an invalid length.
[  729.707317][T21135] netlink: 'syz.2.4892': attribute type 1 has an invalid length.
[  729.734852][T21135] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4892'.
[  729.846790][ T1147] team0: Port device netdevsim0 removed
[  729.856362][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.906591][T21145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4895'.
[  730.065584][T21111] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.072800][T21111] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.086567][T21111] bridge_slave_0: entered allmulticast mode
[  730.108379][T21111] bridge_slave_0: entered promiscuous mode
[  730.140286][T21111] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.147879][T21111] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.170933][T21160] netlink: 'syz.1.4902': attribute type 16 has an invalid length.
[  730.174640][T21111] bridge_slave_1: entered allmulticast mode
[  730.184158][T21160] netlink: 'syz.1.4902': attribute type 3 has an invalid length.
[  730.192773][T21160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4902'.
[  730.193365][T21111] bridge_slave_1: entered promiscuous mode
[  730.373684][T21111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.403514][T21111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.538000][T21111] team0: Port device team_slave_0 added
[  730.576614][T21111] team0: Port device team_slave_1 added
[  730.943579][T21111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  730.975004][ T7904] Bluetooth: hci2: command tx timeout
[  730.981728][T21111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.070331][T21111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.224353][T21111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.240867][T21111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.271215][T21111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  731.466406][T21111] hsr_slave_0: entered promiscuous mode
[  731.477263][T21111] hsr_slave_1: entered promiscuous mode
[  731.500799][T21111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  731.509821][T21111] Cannot create hsr debugfs directory
[  733.044338][ T7904] Bluetooth: hci2: command tx timeout
Stopping sshd: stopped /usr/sbin/sshd (pid 5525)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5508)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5433)
Stopping network: [  735.136814][ T7904] Bluetooth: hci2: command tx timeout
OK
[  735.671341][ T1147] 
[  735.673709][ T1147] ======================================================
[  735.680725][ T1147] WARNING: possible circular locking dependency detected
[  735.687754][ T1147] syzkaller #0 Not tainted
[  735.692170][ T1147] ------------------------------------------------------
[  735.699184][ T1147] kworker/u4:7/1147 is trying to acquire lock:
[  735.705333][ T1147] ffff88805ad7cd80 (team->team_lock_key#7){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0
[  735.714932][ T1147] 
[  735.714932][ T1147] but task is already holding lock:
[  735.722299][ T1147] ffff8880492f8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  735.732663][ T1147] 
[  735.732663][ T1147] which lock already depends on the new lock.
[  735.732663][ T1147] 
[  735.743064][ T1147] 
[  735.743064][ T1147] the existing dependency chain (in reverse order) is:
[  735.752075][ T1147] 
[  735.752075][ T1147] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  735.759820][ T1147]        __mutex_lock+0x135/0xc80
[  735.764860][ T1147]        ieee80211_open+0x144/0x200
[  735.770062][ T1147]        __dev_open+0x2cb/0x430
[  735.774919][ T1147]        dev_open+0xab/0x190
[  735.779515][ T1147]        team_add_slave+0x703/0x28a0
[  735.784821][ T1147]        do_setlink+0xcde/0x3f40
[  735.789760][ T1147]        rtnl_newlink+0x1848/0x2170
[  735.794963][ T1147]        rtnetlink_rcv_msg+0x843/0xf90
[  735.800425][ T1147]        netlink_rcv_skb+0x235/0x4c0
[  735.805719][ T1147]        netlink_unicast+0x7b1/0x930
[  735.811011][ T1147]        netlink_sendmsg+0x8d0/0xbf0
[  735.816300][ T1147]        ____sys_sendmsg+0x61b/0x980
[  735.821587][ T1147]        ___sys_sendmsg+0x2a6/0x360
[  735.826796][ T1147]        __se_sys_sendmsg+0x1d0/0x2c0
[  735.832169][ T1147]        do_syscall_64+0x55/0xb0
[  735.837111][ T1147]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  735.843530][ T1147] 
[  735.843530][ T1147] -> #0 (team->team_lock_key#7){+.+.}-{3:3}:
[  735.851711][ T1147]        __lock_acquire+0x37ef/0x7d80
[  735.857090][ T1147]        lock_acquire+0x19e/0x420
[  735.862118][ T1147]        __mutex_lock+0x135/0xc80
[  735.867150][ T1147]        team_del_slave+0x31/0x1b0
[  735.872270][ T1147]        team_device_event+0x297/0xa30
[  735.877730][ T1147]        notifier_call_chain+0x18f/0x380
[  735.883379][ T1147]        unregister_netdevice_many_notify+0x1037/0x1910
[  735.890320][ T1147]        unregister_netdevice_queue+0x2e9/0x330
[  735.896563][ T1147]        _cfg80211_unregister_wdev+0x16d/0x580
[  735.902720][ T1147]        ieee80211_remove_interfaces+0x4b3/0x690
[  735.909053][ T1147]        ieee80211_unregister_hw+0x5d/0x2a0
[  735.914950][ T1147]        mac80211_hwsim_del_radio+0x289/0x480
[  735.921022][ T1147]        hwsim_exit_net+0x58d/0x650
[  735.926229][ T1147]        cleanup_net+0x707/0xbb0
[  735.931169][ T1147]        process_scheduled_works+0xa60/0x1600
[  735.937246][ T1147]        worker_thread+0xa5e/0xfe0
[  735.942360][ T1147]        kthread+0x2fa/0x390
[  735.946951][ T1147]        ret_from_fork+0x48/0x80
[  735.951895][ T1147]        ret_from_fork_asm+0x11/0x20
[  735.957193][ T1147] 
[  735.957193][ T1147] other info that might help us debug this:
[  735.957193][ T1147] 
[  735.967422][ T1147]  Possible unsafe locking scenario:
[  735.967422][ T1147] 
[  735.974892][ T1147]        CPU0                    CPU1
[  735.980254][ T1147]        ----                    ----
[  735.985630][ T1147]   lock(&rdev->wiphy.mtx);
[  735.990140][ T1147]                                lock(team->team_lock_key#7);
[  735.997592][ T1147]                                lock(&rdev->wiphy.mtx);
[  736.004602][ T1147]   lock(team->team_lock_key#7);
[  736.009532][ T1147] 
[  736.009532][ T1147]  *** DEADLOCK ***
[  736.009532][ T1147] 
[  736.017658][ T1147] 5 locks held by kworker/u4:7/1147:
[  736.022925][ T1147]  #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  736.033794][ T1147]  #1: ffffc9000498fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  736.044313][ T1147]  #2: ffffffff8e3c9b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  736.053691][ T1147]  #3: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  736.063508][ T1147]  #4: ffff8880492f8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  736.074283][ T1147] 
[  736.074283][ T1147] stack backtrace:
[  736.080170][ T1147] CPU: 0 PID: 1147 Comm: kworker/u4:7 Not tainted syzkaller #0
[  736.087709][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  736.097753][ T1147] Workqueue: netns cleanup_net
[  736.102515][ T1147] Call Trace:
[  736.105790][ T1147]  <TASK>
[  736.108708][ T1147]  dump_stack_lvl+0x18c/0x250
[  736.113381][ T1147]  ? load_image+0x420/0x420
[  736.117891][ T1147]  ? show_regs_print_info+0x20/0x20
[  736.123088][ T1147]  ? print_circular_bug+0x12b/0x1a0
[  736.128292][ T1147]  check_noncircular+0x2fc/0x400
[  736.133231][ T1147]  ? print_deadlock_bug+0x5d0/0x5d0
[  736.138427][ T1147]  ? lockdep_lock+0xf5/0x230
[  736.143015][ T1147]  ? _find_first_zero_bit+0xd6/0x100
[  736.148303][ T1147]  __lock_acquire+0x37ef/0x7d80
[  736.153154][ T1147]  ? verify_lock_unused+0x140/0x140
[  736.158344][ T1147]  ? verify_lock_unused+0x140/0x140
[  736.163536][ T1147]  ? __up_read+0x2b8/0x6b0
[  736.167941][ T1147]  lock_acquire+0x19e/0x420
[  736.172435][ T1147]  ? team_del_slave+0x31/0x1b0
[  736.177196][ T1147]  ? __might_sleep+0xe0/0xe0
[  736.181784][ T1147]  ? read_lock_is_recursive+0x20/0x20
[  736.187148][ T1147]  __mutex_lock+0x135/0xc80
[  736.191732][ T1147]  ? team_del_slave+0x31/0x1b0
[  736.196492][ T1147]  ? __mutex_lock+0x30d/0xc80
[  736.201159][ T1147]  ? team_del_slave+0x31/0x1b0
[  736.205913][ T1147]  ? mutex_lock_nested+0x20/0x20
[  736.210843][ T1147]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  736.216474][ T1147]  team_del_slave+0x31/0x1b0
[  736.221061][ T1147]  team_device_event+0x297/0xa30
[  736.225989][ T1147]  notifier_call_chain+0x18f/0x380
[  736.231093][ T1147]  unregister_netdevice_many_notify+0x1037/0x1910
[  736.237513][ T1147]  ? unregister_netdevice_many+0x20/0x20
[  736.243138][ T1147]  ? kernfs_remove_by_name_ns+0x117/0x150
[  736.248850][ T1147]  ? __lock_acquire+0x7d80/0x7d80
[  736.253866][ T1147]  unregister_netdevice_queue+0x2e9/0x330
[  736.259577][ T1147]  ? list_netdevice+0x730/0x730
[  736.264416][ T1147]  ? kernfs_remove_by_name_ns+0x117/0x150
[  736.270130][ T1147]  _cfg80211_unregister_wdev+0x16d/0x580
[  736.275755][ T1147]  ieee80211_remove_interfaces+0x4b3/0x690
[  736.281559][ T1147]  ? ieee80211_do_stop+0x1df0/0x1df0
[  736.286833][ T1147]  ? rcu_is_watching+0x15/0xb0
[  736.291589][ T1147]  ieee80211_unregister_hw+0x5d/0x2a0
[  736.296951][ T1147]  mac80211_hwsim_del_radio+0x289/0x480
[  736.302485][ T1147]  ? rhashtable_remove_fast+0xc00/0xc00
[  736.308025][ T1147]  hwsim_exit_net+0x58d/0x650
[  736.312694][ T1147]  ? hwsim_init_net+0x90/0x90
[  736.317367][ T1147]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  736.323168][ T1147]  cleanup_net+0x707/0xbb0
[  736.327575][ T1147]  ? ops_free_list+0x3b0/0x3b0
[  736.332328][ T1147]  ? _raw_spin_unlock_irq+0x23/0x50
[  736.337519][ T1147]  ? process_scheduled_works+0x975/0x1600
[  736.343229][ T1147]  ? process_scheduled_works+0x975/0x1600
[  736.348943][ T1147]  process_scheduled_works+0xa60/0x1600
[  736.354487][ T1147]  ? worker_attach_to_pool+0x370/0x370
[  736.359937][ T1147]  ? assign_work+0x3cc/0x5d0
[  736.364520][ T1147]  worker_thread+0xa5e/0xfe0
[  736.369137][ T1147]  kthread+0x2fa/0x390
[  736.373197][ T1147]  ? pr_cont_work+0x550/0x550
[  736.377865][ T1147]  ? kthread_blkcg+0xd0/0xd0
[  736.382441][ T1147]  ret_from_fork+0x48/0x80
[  736.386847][ T1147]  ? kthread_blkcg+0xd0/0xd0
[  736.391424][ T1147]  ret_from_fork_asm+0x11/0x20
[  736.396185][ T1147]  </TASK>
Stopping iptables: OK
[  736.476995][ T1147] team0: Port device wlan1 removed
Stopping system message bus: done
[  737.204135][ T7904] Bluetooth: hci2: command tx timeout
Stopping klogd: OK
Stopping acpid: [  737.821886][ T1147] hsr_slave_0: left promiscuous mode
[  737.828434][ T1147] hsr_slave_1: left promiscuous mode
[  737.838321][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  737.846580][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  737.854597][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  737.862010][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  737.871100][ T1147] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  737.881739][ T1147] batman_adv: batadv0: Removing interface: veth0_vlan
[  737.890533][ T1147] batman_adv: batadv0: Interface deactivated: vlan1
[  737.898769][ T1147] batman_adv: batadv0: Removing interface: vlan1
[  737.906165][ T1147] batadv0: left allmulticast mode
[  737.911267][ T1147] batadv0: left promiscuous mode
[  737.925628][ T1147] bridge0: port 4(batadv0) entered disabled state
[  737.932972][ T1147] hsr0: left allmulticast mode
[  737.938029][ T1147] hsr0: left promiscuous mode
[  737.942788][ T1147] bridge0: port 3(hsr0) entered disabled state
[  737.949850][ T1147] bridge_slave_0: left allmulticast mode
[  737.955977][ T1147] bridge_slave_0: left promiscuous mode
[  737.961577][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.970792][ T1147] veth0_macvtap: left promiscuous mode
[  737.976422][ T1147] veth1_vlan: left promiscuous mode
[  737.981686][ T1147] veth0_vlan: left promiscuous mode
[  738.193601][ T1147] team0 (unregistering): Port device team_slave_1 removed
OK
[  738.640301][T21111] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  738.666212][T21111] netdevsim netdevsim0 netdevsim1: renamed from eth1
Stopping syslogd: [  738.719232][T21111] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  738.733031][T21111] netdevsim netdevsim0 netdevsim3: renamed from eth3
stopped /sbin/syslogd (pid 5121)
OK
[  738.824163][T21111] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.845617][T21111] 8021q: adding VLAN 0 to HW filter on device team0
[  738.861617][T19170] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.868746][T19170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  738.882791][T19170] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.889940][T19170] bridge0: port 2(bridge_slave_1) entered forwarding state
umount: can't remount debugfs read-only
[  739.087884][T21111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  739.145407][T21111] veth0_vlan: entered promiscuous mode
[  739.158382][T21111] veth1_vlan: entered promiscuous mode
[  739.200447][T21111] veth0_macvtap: entered promiscuous mode
[  739.211428][T21111] veth1_macvtap: entered promiscuous mode
[  739.237723][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  739.248192][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  739.260223][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  739.270677][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  739.287932][T21111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  739.307239][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  739.320325][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  739.330365][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  739.345170][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  739.356304][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  739.367085][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  739.379732][T21111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  739.513673][T21111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  739.557462][T21111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  739.566750][T21111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  739.576777][T21111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  739.672529][T21111] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht'
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.0.199 closed by remote host.
[  740.556321][T19170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.679952][T19170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.732557][T19170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.792472][T19170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.899952][T19170] ip6gretap0 (unregistering): left allmulticast mode
[  740.906726][T19170] ip6gretap0 (unregistering): left promiscuous mode
[  740.913339][T19170] : port 1(ip6gretap0) entered disabled state
Sent SIGKILL to all processes
Requesting system poweroff
[  741.565006][T19170] hsr_slave_0: left promiscuous mode
[  741.570642][T19170] hsr_slave_1: left promiscuous mode
[  741.576391][T19170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  741.583839][T19170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  741.591364][T19170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  741.599086][T19170] hsr0: left allmulticast mode
[  741.603978][T19170] bridge0: port 3(hsr0) entered disabled state
[  741.610956][T19170] bridge_slave_1: left allmulticast mode
[  741.616852][T19170] bridge_slave_1: left promiscuous mode
[  741.622495][T19170] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.630845][T19170] bridge_slave_0: left allmulticast mode
[  741.636765][T19170] bridge_slave_0: left promiscuous mode
[  741.642387][T19170] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.946716][T21310] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  741.956646][T21310] ACPI: PM: Preparing to enter system sleep state S5
[  741.969049][T21310] kvm: exiting hardware virtualization
[  741.976647][T21310] reboot: Power down
serialport: VM disconnected.