last executing test programs:

2.625579585s ago: executing program 2 (id=5893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x4018, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001a80)={@ifindex, 0xffffffffffffffff, 0x2a, 0x3a}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2.514566252s ago: executing program 3 (id=5894):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0xb4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'})
socketpair(0x1d, 0x1, 0x100000, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

2.255558596s ago: executing program 1 (id=5895):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)
socket$kcm(0x10, 0x100000000002, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10)
close(r0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040)

2.210605979s ago: executing program 0 (id=5896):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x2, 0x0, 0x11)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x66199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000001100), 0x6}, 0x2b4adeb2ad951953, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001000)
r7 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6)
close(r8)
write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7fff)

2.134988494s ago: executing program 2 (id=5897):
syz_clone(0x211000, &(0x7f0000000180)="ce979406aa2d97b9e506eaddd34763a4d64a3bfdd6d5932d1347b045f99574a58e69040f52dbaa7195dfa72d6c83c16293369b0e8e71ee9a7b0da938a6aa2cc877d0c89615da8c0ebd794548171d7e9c94e73465b84d28c76d933e4d5ac120bfe5523cc718edac63f59c1b2b4ae084778ebe0f0b5cdaf00b3fdbf5bd6d689da7b66dd6276b38e43e78d00972ff17", 0x8e, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)="d9e33fe9da6fa20294e64d04ee9e31549fbe4473a4c1ad7d11a3bab2100a65dbaf67f6d2b8bfb8c29bc6e2e05e13fce31f50c73a56c20d469b76d340418838a48fd653b696769d022ae6e3b81fdf06201e940f5312b272eceb8417c48efcc6ffaa304aa1d81a5fbd077bac40d5f729b40d9a30df2523649974f16af63c5dc8d35489b1dcf425b29165ca2e71a5f4a464a981c6b518bf8a505c11f36d7f3d35d5ebf7584fbce856")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f00000000c0)={'gretap0\x00', @multicast})

2.04112471s ago: executing program 1 (id=5898):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x11)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
write$cgroup_subtree(r2, 0x0, 0xfe33)
write$cgroup_freezer_state(r2, &(0x7f0000000640)='FROZEN\x00', 0x1001)

2.001881362s ago: executing program 3 (id=5899):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000240)="b9e203076008008cb89e08f00800511d0833df54cef968f01b", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.790553704s ago: executing program 3 (id=5900):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000950000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000da986aa3eb24213f741ecd9c8e3f"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)

1.750012086s ago: executing program 1 (id=5902):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42)
recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
recvmsg$unix(r5, &(0x7f0000000240)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f00000006c0)=""/238, 0xee}], 0x3}, 0x40000040)
ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3f00, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)

1.562407598s ago: executing program 2 (id=5903):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f7, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)
r7 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.490748522s ago: executing program 0 (id=5904):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb0100180000fcffffffffffffff00180000000b000000090000000100009300000000060000000300000008000000005f305f30302e5f102e00"], 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40000143)

1.469187783s ago: executing program 3 (id=5905):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r0, 0x3, &(0x7f0000000380)}, 0x10)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000940), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af0755b798a0", 0x35}], 0x1}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@map=r5, r5, 0x20, 0x2004}, 0x20)
sendmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x9, 0x1, 0x1, 0x80, 0xffffffffffffffff, 0x66be, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18)

1.430757776s ago: executing program 1 (id=5906):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080000", @ANYRES32, @ANYBLOB="0200"/18, @ANYRES32, @ANYBLOB], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000001}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3, 0x0, 0x80000, 0x0, 0x100002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)

1.310791623s ago: executing program 0 (id=5907):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)
socket$kcm(0x10, 0x100000000002, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10)
close(r0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040)

1.226022448s ago: executing program 3 (id=5908):
r0 = socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}})
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000a80)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="9431cc5b04ddd4ec8828c0f9fea83f83497c80e6d937d59b5829bcba59bdf190caf369a7dac37bad8dc225de00e42e466d22b1ef636619359bbab648b28be6858d80462d803eb15c5ebbff51fcefe1bab88b16db8cb48bba6d715d02467512b50bb7", 0x62}, {&(0x7f0000000380)="08219796cd21682c5e068a842d90c17229a0387918bd96ec07e3db14f0825934604219608bda6045927b48348785276b8408c1679d1259a3a367ae43e2aa20a11ccb3983c156effc8a1f248024b08d1a15fd86b5ec24435c1961cd689365a9e86b66e9c96384557b82cc95965db3cbfe2813510412bf619e343c5e06cd337ee6228ccdf93221bca359d18a5acf0d02cd36d99c89f01d0da0a6f333b208b85a2a777522efad37a625bff932f7567537aed9567005553801bd62894f43a6f514f3745d641ccbf0f5e10f2c08ed259b03030fcdc723c545fc05dafa2a84ccdbdd7c123fc2cd548061bc7a6cf7c4", 0xec}, {&(0x7f0000000480)="381bcb5fd4aee2cfdcdb45b1cfa5c6a330e04d4c83de01f02c120a88f84a1fdf2e4647707c3eb17e389ef291dd9a32f5457189098640eb3facff6c708c0cfda864223bd47846d9cf09bdba9e7433fcff5e5f2d85b8af43c07b7b3fe9aa2b4607f7f177c45398639c92231078df5f2274594c6e", 0x73}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x510}, 0x8000)
r3 = syz_clone(0x84000, &(0x7f0000000140)="83d726da15fc3e5fb82b8caed9a897b8c6ab73c8e0103e0a922c0a9b8cae775026d08bde56cf14ec3a8d545398c1c9708f9229cc947643", 0x37, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="542d593e4fe5a7e35dd071938a5215046483fe5f694dc7d2811512648cb0f80d260beeda915fe64df5a97828222bfe757a36f3a97cf647a6ad21d79b81fbe8635cd6505bf91a15a146a2268658bbdefec3cc31598e28ca8f59b1e4b7641423db75f7b913d8b4ef")
getpid()
sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000ac0)=@phonet={0x23, 0x4b, 0x89, 0x2}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)="f1b68d41303348f56de5dd437b6996ade741db9a662b787ed4021e37e8ef6582a35c4809555ada09463c8b9d50e4f2208fb6", 0x32}, {&(0x7f0000000b80)="2d50a9f8b8bc26ca8d49903de795100459581c6daad380450db2c53ca073b34fd390f40cb151df3317ad672affd874f1bcaedaba27e9229d0f7f969850c5a1d7fad80bf18d3e1af880a67ca4cb7ad95b8dfffbb2412b34ff8417792954e92d6e72d92b598c9b9aba5fec3ae36fd39ce7fff845030b09e17ac6701f5e77aa9aa7c0fc789ad3aa046d7d3b1e305299d0f448d14da2021bc93ed85be4f172658fc934df925ac6be377fd0dfa6b3e5959c0613b511535d0c0f", 0xb7}, {&(0x7f0000000c40)="d0af666dc1acbf6ce8c1246b9f7319bcfdcd104db8441faf7c268095514698ffda1275889c241779e23f439fe2c00a316b564d0d5c434ea9977d1678b1cdb59da87f5deb77e9b3db22cac9e35fc36b6ca15dcc65bcf82c94f196028479617f0a68ae0878e9b12d6597191c5992ff9ba374c4ef6a60af7579d4a48bcb63f1c0d63c8cfb0f81646e81d7513fed1f69299234c816cd3327971134f312534a02f0c7545ddb49b8", 0xa5}, {&(0x7f0000000d00)="a4d14a98e62833b0232344fe2cb31c98e2d05bad5e922548d780ccd8d491bd4cf4717f3f220a704b7205e69636b2ed053eef6b19fb3494341c5f8e82f4dc90b504312b4324daaa2e1f7cc67119628628c36402f5d17b8af4", 0x58}, {&(0x7f0000000d80)="53c2f0a9a1d847001a7c6d9bd02ec69630efa3b09323d0412c98ec9b95cfef9db2edcc656c973228767204ba7fd2bf200715a3b8a6ea4fa75adaaf77abf774313b7fc762b505fa470bd629b5c2f83cda801862050d464685311763bf0348548339d1be59a04d097bbde61aa0b2fc1f", 0x6f}, {&(0x7f0000000e00)="1dfa23d37cf75fd5fb96488bb69f89d08c28f34dd6c3c2b35357437a98d50564dc3f78c714dddd3e045b4a22ea706c8561784009ecaf381ed74b80043bf2eb4e11f416c54ea5cbdef3daf9edc396f74eff4311a593223be1763f8d72d65840ca914098061b5aa2dd318906e4c3ca886e318bf8f6cb2d86117bdb11d9e8d968de81db8c68465d6042a9f124577466f4df8c3bb1814f009daf3067c5d7e90b0b3bc2e9eea5e450e19442", 0xa9}, {&(0x7f0000000ec0)="a67130d8afa0292df77b45991528bac622896da6359eb20f994ef2b44a609f704424b0d149824b01b00edfd9aa8e1d", 0x2f}, {&(0x7f0000000f00)="cd41927c7409620757", 0x9}, {&(0x7f0000000f40)="85715fa99b2dd7cfedcf6ab124a43020bdd058a13c7df16ed6c7cd9fcc037f197ac571a8d86fc096dd63171bd920df2d029ed9c3fbcd1e35bf71644f748f69f1ffc2d8844dee18b7614291f73da0a971fca7ee502c64b1f669d70c71299a9de2b42e0cb4dc9d7c778b2fe2a837ca79974fbddd2ef7a7c37917b6305f862da24c7c1a6ee6daa5381217e946097a0b07c4becffa91feaf0542bfec091e778802432f6fb4319103d8da805db2de4488765914489b7292a7fc241e82ddfd5e2fd5793e45a3c2e09df80edd5f242473eb05", 0xcf}], 0x9, &(0x7f0000001100)=[{0x90, 0x10e, 0x7f, "2e4a441954a47e4a36eba2e43bdd73cc5f787f1c37b53e12577145b003a5df5a639e0956ce30cbbeea3454bb097d83c4de16fd4c088f983fde6af2be1096491140c5f0ad6e0a8f09e25e0509f04311d1beffec3ae579bd7b2866802c0a71f688978b2576d01443c230d43bbab86f259e442be93c9d589db0f426"}, {0x68, 0x110, 0x7, "2b2822ebbe52437253c958433a50ded46a575df9979f4b0826417d3361c122055c67fe83cfb7c6ee79f313d984e5c614ef734ab6e4b0da2cc724477e6751e6a83f66166027464cab9c423c4ed483476b62"}, {0x78, 0x3a, 0x1, "6f47d8df92c192eb0dcab2a518dfd56f62eb159ee48d71dd9015f9b9c701a4750b72148a9eaad96ebeabaa451f22f35540232cf2bc830026c353e8429c201cbd83d0f4822c94ca4e09f395b0a15510c22976f361d96c8da7d8d9390ceb12c6a29845a3"}, {0x68, 0x1, 0x3, "305f39fa8c1236dcb1c4a7956d9e57e2f85b315d6f305e964b07fe7467303be94aa017b5ea02809e55d53ea5de9ec10fb26b6dca9d48e53885747fe1f56758ec673fc11d7c11f267a51359941910121fcdd75db515"}], 0x1d8}, 0x8000)
r4 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100, 0x0, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000001340), 0x1}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='}/\x00')

1.119143524s ago: executing program 0 (id=5909):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0xb4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'})
socketpair(0x1d, 0x1, 0x100000, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

366.812469ms ago: executing program 2 (id=5910):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x11)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
write$cgroup_subtree(r2, 0x0, 0xfe33)
write$cgroup_freezer_state(r2, &(0x7f0000000640)='FROZEN\x00', 0x1001)

330.363221ms ago: executing program 2 (id=5911):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000240)="b9e203076008008cb89e08f00800511d0833df54cef968f01b", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

308.486092ms ago: executing program 1 (id=5912):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002025252700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0xfff, 0x7}, 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x53f, 0x4, 0x40, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x80)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

287.032393ms ago: executing program 0 (id=5913):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000950000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000da986aa3eb24213f741ecd9c8e3f"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)

126.622803ms ago: executing program 3 (id=5914):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b1e87dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair(0x28, 0xa, 0x0, &(0x7f0000000080))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000005000000000000", @ANYRES32, @ANYBLOB="07f94f00000000000000000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/24], 0x50)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x61, 0x2}, @fwd={0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x7e}, 0x28)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(r6, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

126.195933ms ago: executing program 2 (id=5915):
r0 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r1 = socket$kcm(0x2, 0xa, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640), 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0xffeb}], 0x1}, 0x20040000)

79.253156ms ago: executing program 1 (id=5916):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r0, 0x3, &(0x7f0000000380)}, 0x10)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000940), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af0755b798a0", 0x35}], 0x1}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@map=r4, r4, 0x20, 0x2004}, 0x20)
sendmsg$kcm(r3, &(0x7f00000006c0)={&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x9, 0x1, 0x1, 0x80, 0xffffffffffffffff, 0x66be, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18)

0s ago: executing program 0 (id=5917):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)
socket$kcm(0x10, 0x100000000002, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10)
close(r0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040)

kernel console output (not intermixed with test programs):

4.863632][T18407]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1024.868981][T18407]  ? security_socket_sendmsg+0x80/0xa0
[ 1024.874497][T18407]  ? netlink_getsockopt+0x590/0x590
[ 1024.879800][T18407]  ____sys_sendmsg+0x5ba/0x960
[ 1024.884628][T18407]  ? __asan_memset+0x22/0x40
[ 1024.889367][T18407]  ? __sys_sendmsg_sock+0x30/0x30
[ 1024.894457][T18407]  ? __import_iovec+0x5f2/0x850
[ 1024.899410][T18407]  ? import_iovec+0x73/0xa0
[ 1024.903958][T18407]  ___sys_sendmsg+0x2a6/0x360
[ 1024.908688][T18407]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1024.913541][T18407]  ? trace_call_bpf+0xc3/0x6c0
[ 1024.918406][T18407]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1024.923423][T18407]  ? __x64_sys_sendmsg+0x80/0x80
[ 1024.928468][T18407]  ? lockdep_hardirqs_on+0x98/0x150
[ 1024.933829][T18407]  do_syscall_64+0x55/0xa0
[ 1024.938309][T18407]  ? clear_bhb_loop+0x40/0x90
[ 1024.943052][T18407]  ? clear_bhb_loop+0x40/0x90
[ 1024.947806][T18407]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1024.953856][T18407] RIP: 0033:0x7f1fb8f9acb9
[ 1024.958415][T18407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1024.978697][T18407] RSP: 002b:00007f1fb9daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1024.987228][T18407] RAX: ffffffffffffffda RBX: 00007f1fb9215fa0 RCX: 00007f1fb8f9acb9
[ 1024.995279][T18407] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1025.003418][T18407] RBP: 00007f1fb9daf090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.011472][T18407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.019790][T18407] R13: 00007f1fb9216038 R14: 00007f1fb9215fa0 R15: 00007ffe50b54e68
[ 1025.027834][T18407]  </TASK>
[ 1025.699893][T18429] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4499'.
[ 1025.713688][T18430] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4500'.
[ 1026.235967][T18443] FAULT_INJECTION: forcing a failure.
[ 1026.235967][T18443] name failslab, interval 1, probability 0, space 0, times 0
[ 1026.268581][T18443] CPU: 0 PID: 18443 Comm: syz.2.4506 Not tainted syzkaller #0
[ 1026.276133][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1026.286249][T18443] Call Trace:
[ 1026.289589][T18443]  <TASK>
[ 1026.292573][T18443]  dump_stack_lvl+0x18c/0x250
[ 1026.297300][T18443]  ? show_regs_print_info+0x20/0x20
[ 1026.302523][T18443]  ? load_image+0x400/0x400
[ 1026.307058][T18443]  should_fail_ex+0x39d/0x4d0
[ 1026.311780][T18443]  should_failslab+0x9/0x20
[ 1026.316326][T18443]  slab_pre_alloc_hook+0x59/0x310
[ 1026.321412][T18443]  ? ___neigh_create+0x6d2/0x2440
[ 1026.326471][T18443]  ? ___neigh_create+0x6d2/0x2440
[ 1026.331551][T18443]  __kmem_cache_alloc_node+0x53/0x250
[ 1026.336963][T18443]  ? ___neigh_create+0x6d2/0x2440
[ 1026.342027][T18443]  __kmalloc+0xa4/0x230
[ 1026.346238][T18443]  ___neigh_create+0x6d2/0x2440
[ 1026.351256][T18443]  ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0
[ 1026.357147][T18443]  ip6_finish_output2+0x1581/0x1630
[ 1026.362418][T18443]  ? ip6_finish_output2+0x645/0x1630
[ 1026.367777][T18443]  ? ip6_mtu+0x7d/0x3f0
[ 1026.372005][T18443]  ? nf_hook+0x390/0x390
[ 1026.376373][T18443]  ? ip6_finish_output+0x57b/0x820
[ 1026.381542][T18443]  ? ip6_send_skb+0x10f/0x380
[ 1026.386286][T18443]  ip6_send_skb+0x1d5/0x380
[ 1026.390846][T18443]  rawv6_push_pending_frames+0x6ee/0x8d0
[ 1026.396651][T18443]  ? raw6_getfrag+0x3a0/0x3a0
[ 1026.401394][T18443]  ? rawv6_send_hdrinc+0x1640/0x1640
[ 1026.407059][T18443]  rawv6_sendmsg+0x131b/0x1770
[ 1026.411924][T18443]  ? compat_rawv6_ioctl+0x70/0x70
[ 1026.417113][T18443]  ? aa_sk_perm+0x83c/0x970
[ 1026.421669][T18443]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 1026.428111][T18443]  ? inet_sendmsg+0x7c/0x2f0
[ 1026.432751][T18443]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1026.438154][T18443]  ? security_socket_sendmsg+0x80/0xa0
[ 1026.443839][T18443]  ? inet_send_prepare+0x260/0x260
[ 1026.449173][T18443]  ____sys_sendmsg+0x5ba/0x960
[ 1026.454006][T18443]  ? __lock_acquire+0x7d40/0x7d40
[ 1026.459136][T18443]  ? __asan_memset+0x22/0x40
[ 1026.463792][T18443]  ? __sys_sendmsg_sock+0x30/0x30
[ 1026.469265][T18443]  ? __import_iovec+0x5f2/0x850
[ 1026.474553][T18443]  ? import_iovec+0x73/0xa0
[ 1026.479134][T18443]  ___sys_sendmsg+0x2a6/0x360
[ 1026.483884][T18443]  ? get_pid_task+0x20/0x1e0
[ 1026.488627][T18443]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1026.493446][T18443]  ? __lock_acquire+0x7d40/0x7d40
[ 1026.498605][T18443]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1026.503496][T18443]  ? __x64_sys_sendmsg+0x80/0x80
[ 1026.508571][T18443]  ? lockdep_hardirqs_on+0x98/0x150
[ 1026.514412][T18443]  do_syscall_64+0x55/0xa0
[ 1026.518865][T18443]  ? clear_bhb_loop+0x40/0x90
[ 1026.523623][T18443]  ? clear_bhb_loop+0x40/0x90
[ 1026.528465][T18443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1026.534414][T18443] RIP: 0033:0x7f1fb8f9acb9
[ 1026.538873][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1026.558610][T18443] RSP: 002b:00007f1fb9daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1026.567094][T18443] RAX: ffffffffffffffda RBX: 00007f1fb9215fa0 RCX: 00007f1fb8f9acb9
[ 1026.575146][T18443] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1026.583168][T18443] RBP: 00007f1fb9daf090 R08: 0000000000000000 R09: 0000000000000000
[ 1026.591217][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1026.599246][T18443] R13: 00007f1fb9216038 R14: 00007f1fb9215fa0 R15: 00007ffe50b54e68
[ 1026.607287][T18443]  </TASK>
[ 1026.888518][T18457] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4511'.
[ 1026.977026][T18453] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4510'.
[ 1027.537977][T18473] tap0: tun_chr_ioctl cmd 2148553947
[ 1027.916782][T18484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1027.927093][T18484] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1027.938689][T18484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1027.960173][T18484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1027.971383][T18484] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1027.979025][T18484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1028.233229][T12638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.460867][T12638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.046305][ T5780] Bluetooth: hci1: command tx timeout
[ 1031.410101][T12638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.538294][T12638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.570355][T18480] chnl_net:caif_netlink_parms(): no params data found
[ 1031.902246][T18480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.921773][T18480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.937545][T18480] bridge_slave_0: entered allmulticast mode
[ 1031.945084][T18480] bridge_slave_0: entered promiscuous mode
[ 1032.030651][T18480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.048116][T18480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.055736][T18480] bridge_slave_1: entered allmulticast mode
[ 1032.078008][T18480] bridge_slave_1: entered promiscuous mode
[ 1032.129636][ T5780] Bluetooth: hci1: command tx timeout
[ 1032.191837][T12638] bridge0: port 2(ip6gretap0) entered disabled state
[ 1032.281872][T12638] ip6gretap0 (unregistering): left allmulticast mode
[ 1032.316316][T12638] ip6gretap0 (unregistering): left promiscuous mode
[ 1032.325454][T12638] bridge0: port 2(ip6gretap0) entered disabled state
[ 1032.525626][T18480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1032.616682][T18480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1034.206385][ T5780] Bluetooth: hci1: command tx timeout
[ 1035.619836][T18480] team0: Port device team_slave_0 added
[ 1035.644782][T18480] team0: Port device team_slave_1 added
[ 1035.766651][T18480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1035.773693][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1035.856279][T18480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1035.880706][T18480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1035.888863][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1035.946234][T18480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1036.180642][T18480] hsr_slave_0: entered promiscuous mode
[ 1036.201820][T18480] hsr_slave_1: entered promiscuous mode
[ 1036.222196][T18480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1036.260400][T18480] Cannot create hsr debugfs directory
[ 1036.292675][ T5780] Bluetooth: hci1: command tx timeout
[ 1036.334284][T18572] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4541'.
[ 1037.211427][T18595] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'.
[ 1037.256643][T18595] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'.
[ 1037.467258][T18598] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4545'.
[ 1037.534923][T18590] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'.
[ 1037.850096][T18595] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'.
[ 1038.590136][T12638] hsr_slave_0: left promiscuous mode
[ 1038.602355][T12638] hsr_slave_1: left promiscuous mode
[ 1038.654234][T12638] veth1_macvtap: left promiscuous mode
[ 1038.663680][T12638] veth0_macvtap: left promiscuous mode
[ 1038.671116][T12638] veth1_vlan: left promiscuous mode
[ 1039.553026][T12638] team0 (unregistering): Port device team_slave_1 removed
[ 1039.612721][T12638] team0 (unregistering): Port device team_slave_0 removed
[ 1039.669832][T12638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1039.680484][T12638] bond_slave_1 (unregistering): left promiscuous mode
[ 1039.769623][T12638] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1039.782348][T12638] bridge_slave_1 (unregistering): left promiscuous mode
[ 1040.032687][T12638] team0 (unregistering): Port device bond0 removed
[ 1040.072095][T12638] bond0 (unregistering): Released all slaves
[ 1040.575591][T18480] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1040.611056][T18480] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1040.657999][T18480] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1040.669948][T18480] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1040.912911][T18480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1040.963617][T18480] 8021q: adding VLAN 0 to HW filter on device team0
[ 1040.994112][T12638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.001367][T12638] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1041.027611][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.034947][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1041.286392][T18627] delete_channel: no stack
[ 1041.661995][T18655] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4555'.
[ 1041.844604][T18480] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1042.022720][T18480] veth0_vlan: entered promiscuous mode
[ 1042.099059][T18674] netlink: 'syz.2.4558': attribute type 10 has an invalid length.
[ 1042.143908][T18480] veth1_vlan: entered promiscuous mode
[ 1042.245613][T18480] veth0_macvtap: entered promiscuous mode
[ 1042.280011][T18480] veth1_macvtap: entered promiscuous mode
[ 1042.332356][T18480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1042.361061][T18480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1042.395586][T18480] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1042.419667][T18480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1042.450536][T18480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1042.473708][T18480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1042.496789][T18480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1042.524649][T18480] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1042.563254][T18480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.596177][T18480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.621705][T18480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.636633][T18480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.991849][T11133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1043.035265][T11133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1043.384265][ T6054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1043.446256][ T6054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1043.812814][T18699] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4563'.
[ 1043.883468][T18699] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4563'.
[ 1043.997049][T18693] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4563'.
[ 1044.029222][T18717] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4563'.
[ 1044.621986][T18726] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4571'.
[ 1044.871675][T18733] netlink: 'syz.1.4572': attribute type 10 has an invalid length.
[ 1045.088868][T18731] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4573'.
[ 1045.297363][T18484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1045.328512][T18484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1045.353518][T18484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1045.387638][T18738] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4574'.
[ 1045.407229][T18484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1045.418132][T18484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1045.426696][T18484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1045.621075][T18742] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4576'.
[ 1046.153334][T12638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.309144][T12638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.362192][T18739] chnl_net:caif_netlink_parms(): no params data found
[ 1046.569288][T12638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.647550][T18776] netlink: 'syz.1.4582': attribute type 29 has an invalid length.
[ 1046.655488][T18776] netlink: 'syz.1.4582': attribute type 3 has an invalid length.
[ 1046.676346][T18776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4582'.
[ 1046.721772][T18778] netlink: 'syz.3.4583': attribute type 10 has an invalid length.
[ 1046.810251][T18778] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1046.888495][T18778] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1047.068214][T12638] bond0: (slave netdevsim0): Releasing backup interface
[ 1047.124184][T12638] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[ 1047.165559][T12638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.279681][T18794] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4581'.
[ 1047.445977][T18794] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4581'.
[ 1047.486633][ T5780] Bluetooth: hci3: command tx timeout
[ 1047.531294][T18792] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4584'.
[ 1047.615659][T18787] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4581'.
[ 1047.698851][T18798] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4585'.
[ 1047.755821][T18785] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4581'.
[ 1048.097320][T18739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.104539][T18739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.125862][T18739] bridge_slave_0: entered allmulticast mode
[ 1048.147736][T18739] bridge_slave_0: entered promiscuous mode
[ 1048.210261][T18739] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.217952][T18809] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4587'.
[ 1048.238772][T18739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.251916][T18739] bridge_slave_1: entered allmulticast mode
[ 1048.263477][T18739] bridge_slave_1: entered promiscuous mode
[ 1048.354780][T18739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1048.481216][T18739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1048.718906][T18739] team0: Port device team_slave_0 added
[ 1048.767764][T18739] team0: Port device team_slave_1 added
[ 1048.925937][T18739] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1048.950699][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1049.013685][T18739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1049.117624][T18739] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1049.130321][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1049.200125][T18739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1049.303713][T18830] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4593'.
[ 1049.566372][ T5780] Bluetooth: hci3: command tx timeout
[ 1049.588366][T18739] hsr_slave_0: entered promiscuous mode
[ 1049.595274][T18739] hsr_slave_1: entered promiscuous mode
[ 1049.624599][T18739] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1049.665125][T18739] Cannot create hsr debugfs directory
[ 1049.898248][T18844] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4596'.
[ 1050.911012][T12638] hsr_slave_0: left promiscuous mode
[ 1050.986942][T12638] hsr_slave_1: left promiscuous mode
[ 1051.003760][T12638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1051.011768][T12638] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1051.055067][T12638] veth1_macvtap: left promiscuous mode
[ 1051.062209][T12638] veth0_macvtap: left promiscuous mode
[ 1051.071424][T12638] veth1_vlan: left promiscuous mode
[ 1051.081392][T12638] veth0_vlan: left promiscuous mode
[ 1051.477296][T18870] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[ 1051.650232][ T5780] Bluetooth: hci3: command tx timeout
[ 1051.763221][T18873] __nla_validate_parse: 3 callbacks suppressed
[ 1051.763242][T18873] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4605'.
[ 1052.372620][T12638] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1052.382308][T12638] batadv_slave_0 (unregistering): left promiscuous mode
[ 1052.435286][T12638] team0 (unregistering): Port device team_slave_1 removed
[ 1052.490050][T12638] team0 (unregistering): Port device team_slave_0 removed
[ 1052.537883][T12638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1052.549364][T12638] bond_slave_1 (unregistering): left promiscuous mode
[ 1052.602040][T12638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1052.613865][T12638] bond_slave_0 (unregistering): left promiscuous mode
[ 1052.873304][T12638] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1052.882827][T12638] batadv0 (unregistering): left promiscuous mode
[ 1052.965391][T12638] team0 (unregistering): Port device bond0 removed
[ 1053.003110][T12638] bond0 (unregistering): Released all slaves
[ 1053.042990][T18861] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.4603'.
[ 1053.132529][T18873] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4605'.
[ 1053.726957][ T5780] Bluetooth: hci3: command tx timeout
[ 1053.788946][T18889] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4610'.
[ 1053.800289][T18739] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1053.856797][T18739] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1053.875560][T18739] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1053.892508][T18739] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1054.772294][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.778695][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.978750][T18911] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4613'.
[ 1057.108409][T18739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1057.189599][T18739] 8021q: adding VLAN 0 to HW filter on device team0
[ 1057.251905][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.259266][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1057.300988][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1057.308240][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1057.645030][ T5780] Bluetooth: hci4: ISO packet for unknown connection handle 2622
[ 1058.055833][T18739] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1058.234668][T18739] veth0_vlan: entered promiscuous mode
[ 1058.311832][T18739] veth1_vlan: entered promiscuous mode
[ 1058.431048][T18739] veth0_macvtap: entered promiscuous mode
[ 1058.458113][T18948] netlink: 'syz.2.4619': attribute type 10 has an invalid length.
[ 1058.604125][T18739] veth1_macvtap: entered promiscuous mode
[ 1058.650846][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1058.671455][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1058.690693][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1058.719020][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1058.736726][T18739] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1058.758740][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1058.774295][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1058.787214][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1058.798952][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1058.841305][T18739] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1058.878534][T18739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.906150][T18739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.929598][T18739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.948106][T18958] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4620'.
[ 1058.961173][T18739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.247361][T12638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1059.276324][T12638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1059.370115][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1059.400062][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1059.725143][T18983] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4569'.
[ 1060.395650][T19000] netlink: 'syz.3.4628': attribute type 10 has an invalid length.
[ 1060.844495][T19007] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4632'.
[ 1061.664330][T19028] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4639'.
[ 1061.689574][T19033] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4640'.
[ 1061.716379][T19033] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4640'.
[ 1062.027268][T19045] netlink: 'syz.3.4642': attribute type 10 has an invalid length.
[ 1063.239068][T19061] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4648'.
[ 1063.691200][T19074] FAULT_INJECTION: forcing a failure.
[ 1063.691200][T19074] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1063.714050][T19077] netlink: 'syz.3.4654': attribute type 10 has an invalid length.
[ 1063.743136][T19074] CPU: 0 PID: 19074 Comm: syz.1.4655 Not tainted syzkaller #0
[ 1063.750695][T19074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1063.760808][T19074] Call Trace:
[ 1063.764132][T19074]  <TASK>
[ 1063.767125][T19074]  dump_stack_lvl+0x18c/0x250
[ 1063.771872][T19074]  ? show_regs_print_info+0x20/0x20
[ 1063.777143][T19074]  ? load_image+0x400/0x400
[ 1063.781722][T19074]  ? __lock_acquire+0x7d40/0x7d40
[ 1063.786798][T19074]  ? snprintf+0xe9/0x140
[ 1063.791103][T19074]  should_fail_ex+0x39d/0x4d0
[ 1063.795830][T19074]  _copy_to_user+0x2f/0xa0
[ 1063.800286][T19074]  simple_read_from_buffer+0xe7/0x150
[ 1063.805732][T19074]  proc_fail_nth_read+0x1e8/0x260
[ 1063.810808][T19074]  ? proc_fault_inject_write+0x360/0x360
[ 1063.816551][T19074]  ? fsnotify_perm+0x271/0x5e0
[ 1063.821440][T19074]  ? proc_fault_inject_write+0x360/0x360
[ 1063.827150][T19074]  vfs_read+0x28b/0x970
[ 1063.831386][T19074]  ? kernel_read+0x1e0/0x1e0
[ 1063.836037][T19074]  ? __fget_files+0x28/0x4b0
[ 1063.840685][T19074]  ? __fget_files+0x28/0x4b0
[ 1063.845357][T19074]  ? __fget_files+0x43d/0x4b0
[ 1063.850124][T19074]  ? __fdget_pos+0x2a3/0x330
[ 1063.854788][T19074]  ? ksys_read+0x75/0x260
[ 1063.859232][T19074]  ksys_read+0x150/0x260
[ 1063.863569][T19074]  ? vfs_write+0x990/0x990
[ 1063.868144][T19074]  ? lockdep_hardirqs_on+0x98/0x150
[ 1063.873409][T19074]  do_syscall_64+0x55/0xa0
[ 1063.878006][T19074]  ? clear_bhb_loop+0x40/0x90
[ 1063.882736][T19074]  ? clear_bhb_loop+0x40/0x90
[ 1063.887466][T19074]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1063.893411][T19074] RIP: 0033:0x7f8e7b15b58e
[ 1063.897874][T19074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1063.917533][T19074] RSP: 002b:00007f8e7c068fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1063.926007][T19074] RAX: ffffffffffffffda RBX: 00007f8e7c0696c0 RCX: 00007f8e7b15b58e
[ 1063.934037][T19074] RDX: 000000000000000f RSI: 00007f8e7c0690a0 RDI: 0000000000000003
[ 1063.942144][T19074] RBP: 00007f8e7c069090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.950180][T19074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.958220][T19074] R13: 00007f8e7b416038 R14: 00007f8e7b415fa0 R15: 00007ffd04b957b8
[ 1063.966260][T19074]  </TASK>
[ 1064.148696][T19089] netlink: 'syz.1.4656': attribute type 10 has an invalid length.
[ 1064.159864][T19089] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.4656'.
[ 1066.839819][T19096] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4658'.
[ 1067.475045][T19112] netlink: 'syz.0.4666': attribute type 10 has an invalid length.
[ 1067.644263][T19112] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1067.773422][T19112] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1068.305377][T19138] FAULT_INJECTION: forcing a failure.
[ 1068.305377][T19138] name failslab, interval 1, probability 0, space 0, times 0
[ 1068.321304][T19138] CPU: 1 PID: 19138 Comm: syz.1.4673 Not tainted syzkaller #0
[ 1068.328846][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1068.339477][T19138] Call Trace:
[ 1068.342800][T19138]  <TASK>
[ 1068.345774][T19138]  dump_stack_lvl+0x18c/0x250
[ 1068.350515][T19138]  ? show_regs_print_info+0x20/0x20
[ 1068.355770][T19138]  ? load_image+0x400/0x400
[ 1068.360452][T19138]  ? __might_sleep+0xe0/0xe0
[ 1068.365108][T19138]  ? __lock_acquire+0x7d40/0x7d40
[ 1068.370195][T19138]  should_fail_ex+0x39d/0x4d0
[ 1068.374938][T19138]  should_failslab+0x9/0x20
[ 1068.379493][T19138]  slab_pre_alloc_hook+0x59/0x310
[ 1068.384591][T19138]  ? tomoyo_encode+0x28b/0x540
[ 1068.389406][T19138]  ? tomoyo_encode+0x28b/0x540
[ 1068.394215][T19138]  __kmem_cache_alloc_node+0x53/0x250
[ 1068.399648][T19138]  ? tomoyo_realpath_from_path+0x5d0/0x5d0
[ 1068.405516][T19138]  ? tomoyo_encode+0x28b/0x540
[ 1068.410600][T19138]  __kmalloc+0xa4/0x230
[ 1068.414831][T19138]  tomoyo_encode+0x28b/0x540
[ 1068.419484][T19138]  tomoyo_realpath_from_path+0x592/0x5d0
[ 1068.425188][T19138]  tomoyo_check_open_permission+0x224/0x460
[ 1068.431231][T19138]  ? tomoyo_check_open_permission+0x1cf/0x460
[ 1068.437369][T19138]  ? tomoyo_check_path_number_acl+0x280/0x280
[ 1068.443519][T19138]  ? __asan_memset+0x22/0x40
[ 1068.448210][T19138]  ? __rwlock_init+0x150/0x150
[ 1068.453033][T19138]  ? tomoyo_file_open+0xed/0x180
[ 1068.458023][T19138]  security_file_open+0x62/0xa0
[ 1068.462936][T19138]  do_dentry_open+0x380/0x1500
[ 1068.467773][T19138]  path_openat+0x27f1/0x3230
[ 1068.472457][T19138]  ? verify_lock_unused+0x140/0x140
[ 1068.477728][T19138]  ? do_filp_open+0x430/0x430
[ 1068.482466][T19138]  ? perf_trace_lock_acquire+0x104/0x410
[ 1068.488183][T19138]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1068.494852][T19138]  do_filp_open+0x1f5/0x430
[ 1068.499428][T19138]  ? vfs_tmpfile+0x490/0x490
[ 1068.504093][T19138]  ? noop_direct_IO+0x20/0x20
[ 1068.508932][T19138]  ? _raw_spin_unlock+0x28/0x40
[ 1068.513833][T19138]  ? alloc_fd+0x58f/0x630
[ 1068.518227][T19138]  do_sys_openat2+0x134/0x1d0
[ 1068.522962][T19138]  ? do_sys_open+0xe0/0xe0
[ 1068.527439][T19138]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1068.533565][T19138]  ? lock_chain_count+0x20/0x20
[ 1068.538473][T19138]  __x64_sys_openat+0x139/0x160
[ 1068.543397][T19138]  do_syscall_64+0x55/0xa0
[ 1068.547886][T19138]  ? clear_bhb_loop+0x40/0x90
[ 1068.552667][T19138]  ? clear_bhb_loop+0x40/0x90
[ 1068.557589][T19138]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1068.563545][T19138] RIP: 0033:0x7f8e7b15b58e
[ 1068.568138][T19138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1068.587806][T19138] RSP: 002b:00007f8e7c068ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1068.596272][T19138] RAX: ffffffffffffffda RBX: 00007f8e7c0696c0 RCX: 00007f8e7b15b58e
[ 1068.604327][T19138] RDX: 0000000000000000 RSI: 00007f8e7c068f90 RDI: ffffffffffffff9c
[ 1068.612439][T19138] RBP: 00007f8e7c069090 R08: 0000000000000000 R09: 0000000000000000
[ 1068.620476][T19138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1068.628531][T19138] R13: 00007f8e7b416038 R14: 00007f8e7b415fa0 R15: 00007ffd04b957b8
[ 1068.636930][T19138]  </TASK>
[ 1068.656420][T19138] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1068.973464][T19142] netlink: 'syz.1.4674': attribute type 27 has an invalid length.
[ 1068.985866][T19142] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4674'.
[ 1071.411510][T19157] netlink: 'syz.1.4679': attribute type 10 has an invalid length.
[ 1074.245558][T19166] netlink: 'syz.3.4684': attribute type 10 has an invalid length.
[ 1074.262763][T19166] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4684'.
[ 1074.518804][T19167] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4683'.
[ 1074.538791][T19168] bridge0: port 3(ip6gretap0) entered blocking state
[ 1074.556668][T19168] bridge0: port 3(ip6gretap0) entered disabled state
[ 1074.569730][T19168] ip6gretap0: entered allmulticast mode
[ 1074.591240][T19168] ip6gretap0: entered promiscuous mode
[ 1074.617463][T19168] bridge0: port 3(ip6gretap0) entered blocking state
[ 1074.624496][T19168] bridge0: port 3(ip6gretap0) entered forwarding state
[ 1074.652288][T19170] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4685'.
[ 1075.459849][T19193] netlink: 'syz.3.4692': attribute type 10 has an invalid length.
[ 1075.821285][T19197] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4695'.
[ 1075.843151][T19199] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4696'.
[ 1075.961798][T19201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1075.980509][T19201] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.005731][T19201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.029553][T19201] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.063418][T19201] bond0: (slave batadv0): Releasing backup interface
[ 1076.076994][T19201] batadv0 (unregistering): left promiscuous mode
[ 1076.097906][T19203] netlink: 'syz.0.4698': attribute type 10 has an invalid length.
[ 1076.110499][T19203] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4698'.
[ 1076.785042][T19220] netlink: 'syz.3.4704': attribute type 10 has an invalid length.
[ 1077.021672][T19236] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4708'.
[ 1077.139949][T19237] netlink: 'syz.2.4716': attribute type 10 has an invalid length.
[ 1077.601906][T19249] FAULT_INJECTION: forcing a failure.
[ 1077.601906][T19249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1077.626394][T19249] CPU: 1 PID: 19249 Comm: syz.3.4713 Not tainted syzkaller #0
[ 1077.633944][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1077.644067][T19249] Call Trace:
[ 1077.647407][T19249]  <TASK>
[ 1077.650409][T19249]  dump_stack_lvl+0x18c/0x250
[ 1077.655160][T19249]  ? show_regs_print_info+0x20/0x20
[ 1077.660523][T19249]  ? load_image+0x400/0x400
[ 1077.665112][T19249]  ? __lock_acquire+0x7d40/0x7d40
[ 1077.670200][T19249]  ? snprintf+0xe9/0x140
[ 1077.674524][T19249]  should_fail_ex+0x39d/0x4d0
[ 1077.679283][T19249]  _copy_to_user+0x2f/0xa0
[ 1077.683766][T19249]  simple_read_from_buffer+0xe7/0x150
[ 1077.689228][T19249]  proc_fail_nth_read+0x1e8/0x260
[ 1077.694331][T19249]  ? proc_fault_inject_write+0x360/0x360
[ 1077.700064][T19249]  ? fsnotify_perm+0x271/0x5e0
[ 1077.705084][T19249]  ? proc_fault_inject_write+0x360/0x360
[ 1077.710788][T19249]  vfs_read+0x28b/0x970
[ 1077.715113][T19249]  ? kernel_read+0x1e0/0x1e0
[ 1077.719797][T19249]  ? __fget_files+0x28/0x4b0
[ 1077.724453][T19249]  ? __fget_files+0x28/0x4b0
[ 1077.729206][T19249]  ? __fget_files+0x43d/0x4b0
[ 1077.734136][T19249]  ? __fdget_pos+0x2a3/0x330
[ 1077.738924][T19249]  ? ksys_read+0x75/0x260
[ 1077.743339][T19249]  ksys_read+0x150/0x260
[ 1077.747747][T19249]  ? vfs_write+0x990/0x990
[ 1077.752251][T19249]  ? lockdep_hardirqs_on+0x98/0x150
[ 1077.757613][T19249]  do_syscall_64+0x55/0xa0
[ 1077.762099][T19249]  ? clear_bhb_loop+0x40/0x90
[ 1077.766850][T19249]  ? clear_bhb_loop+0x40/0x90
[ 1077.771610][T19249]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1077.777574][T19249] RIP: 0033:0x7f34d755b58e
[ 1077.782044][T19249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1077.802083][T19249] RSP: 002b:00007f34d845efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1077.810564][T19249] RAX: ffffffffffffffda RBX: 00007f34d845f6c0 RCX: 00007f34d755b58e
[ 1077.818584][T19249] RDX: 000000000000000f RSI: 00007f34d845f0a0 RDI: 0000000000000014
[ 1077.826596][T19249] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1077.834686][T19249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1077.842695][T19249] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1077.850744][T19249]  </TASK>
[ 1077.870868][T19256] netlink: 'syz.1.4714': attribute type 10 has an invalid length.
[ 1077.893331][T19256] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4714'.
[ 1078.641963][T19275] netlink: 'syz.1.4722': attribute type 10 has an invalid length.
[ 1079.426506][T19298] netlink: 'syz.2.4731': attribute type 10 has an invalid length.
[ 1079.444287][T19298] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4731'.
[ 1080.157554][T19305] netlink: 'syz.3.4734': attribute type 10 has an invalid length.
[ 1080.608139][T19316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4736'.
[ 1080.906357][T19325] FAULT_INJECTION: forcing a failure.
[ 1080.906357][T19325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1080.930351][T19325] CPU: 0 PID: 19325 Comm: syz.1.4741 Not tainted syzkaller #0
[ 1080.937905][T19325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1080.948009][T19325] Call Trace:
[ 1080.951330][T19325]  <TASK>
[ 1080.954303][T19325]  dump_stack_lvl+0x18c/0x250
[ 1080.959038][T19325]  ? show_regs_print_info+0x20/0x20
[ 1080.964291][T19325]  ? load_image+0x400/0x400
[ 1080.968848][T19325]  ? __might_fault+0xaa/0x120
[ 1080.973576][T19325]  ? __lock_acquire+0x7d40/0x7d40
[ 1080.978652][T19325]  should_fail_ex+0x39d/0x4d0
[ 1080.983397][T19325]  _copy_from_user+0x2f/0xe0
[ 1080.988049][T19325]  generic_map_update_batch+0x54b/0x810
[ 1080.993669][T19325]  ? rcu_read_unlock+0xa0/0xa0
[ 1080.998501][T19325]  ? __fdget+0x180/0x210
[ 1081.002802][T19325]  ? rcu_read_unlock+0xa0/0xa0
[ 1081.007620][T19325]  bpf_map_do_batch+0x3d7/0x610
[ 1081.012528][T19325]  __sys_bpf+0x381/0x890
[ 1081.016823][T19325]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1081.022263][T19325]  ? lock_chain_count+0x20/0x20
[ 1081.027186][T19325]  __x64_sys_bpf+0x7c/0x90
[ 1081.031654][T19325]  do_syscall_64+0x55/0xa0
[ 1081.036118][T19325]  ? clear_bhb_loop+0x40/0x90
[ 1081.040856][T19325]  ? clear_bhb_loop+0x40/0x90
[ 1081.045594][T19325]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1081.051539][T19325] RIP: 0033:0x7f8e7b19acb9
[ 1081.056000][T19325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1081.075664][T19325] RSP: 002b:00007f8e7c069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1081.084132][T19325] RAX: ffffffffffffffda RBX: 00007f8e7b415fa0 RCX: 00007f8e7b19acb9
[ 1081.092170][T19325] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a
[ 1081.100184][T19325] RBP: 00007f8e7c069090 R08: 0000000000000000 R09: 0000000000000000
[ 1081.108204][T19325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1081.116219][T19325] R13: 00007f8e7b416038 R14: 00007f8e7b415fa0 R15: 00007ffd04b957b8
[ 1081.124259][T19325]  </TASK>
[ 1084.156621][T19337] bridge0: port 3(ip6gretap0) entered blocking state
[ 1084.174000][T19337] bridge0: port 3(ip6gretap0) entered disabled state
[ 1084.196631][T19337] ip6gretap0: entered allmulticast mode
[ 1084.217005][T19337] ip6gretap0: entered promiscuous mode
[ 1084.232866][T19337] bridge0: port 3(ip6gretap0) entered blocking state
[ 1084.239893][T19337] bridge0: port 3(ip6gretap0) entered forwarding state
[ 1084.385022][T19346] netlink: 'syz.2.4745': attribute type 10 has an invalid length.
[ 1087.861170][T19368] netlink: 'syz.2.4756': attribute type 10 has an invalid length.
[ 1088.249527][T19383] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4761'.
[ 1089.520303][T19399] netlink: 'syz.1.4767': attribute type 10 has an invalid length.
[ 1090.589863][T19417] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4772'.
[ 1091.991765][T19430] netlink: 'syz.1.4781': attribute type 10 has an invalid length.
[ 1092.957848][T19454] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4789'.
[ 1093.844951][T19470] netlink: 'syz.1.4792': attribute type 10 has an invalid length.
[ 1094.239623][T19481] FAULT_INJECTION: forcing a failure.
[ 1094.239623][T19481] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.263864][T19481] CPU: 0 PID: 19481 Comm: syz.1.4798 Not tainted syzkaller #0
[ 1094.271422][T19481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1094.281550][T19481] Call Trace:
[ 1094.284879][T19481]  <TASK>
[ 1094.287961][T19481]  dump_stack_lvl+0x18c/0x250
[ 1094.292693][T19481]  ? show_regs_print_info+0x20/0x20
[ 1094.297973][T19481]  ? load_image+0x400/0x400
[ 1094.302739][T19481]  ? __might_sleep+0xe0/0xe0
[ 1094.307447][T19481]  ? __lock_acquire+0x7d40/0x7d40
[ 1094.312546][T19481]  should_fail_ex+0x39d/0x4d0
[ 1094.317299][T19481]  should_failslab+0x9/0x20
[ 1094.322139][T19481]  slab_pre_alloc_hook+0x59/0x310
[ 1094.327238][T19481]  ? __lock_acquire+0x7d40/0x7d40
[ 1094.332328][T19481]  kmem_cache_alloc_node+0x60/0x320
[ 1094.337641][T19481]  ? __alloc_skb+0x103/0x2c0
[ 1094.342408][T19481]  __alloc_skb+0x103/0x2c0
[ 1094.346902][T19481]  netlink_sendmsg+0x66a/0xbf0
[ 1094.351729][T19481]  ? netlink_getsockopt+0x590/0x590
[ 1094.357017][T19481]  ? aa_sock_msg_perm+0x94/0x150
[ 1094.362016][T19481]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1094.367354][T19481]  ? security_socket_sendmsg+0x80/0xa0
[ 1094.372923][T19481]  ? netlink_getsockopt+0x590/0x590
[ 1094.378174][T19481]  ____sys_sendmsg+0x5ba/0x960
[ 1094.382967][T19481]  ? __asan_memset+0x22/0x40
[ 1094.387581][T19481]  ? __sys_sendmsg_sock+0x30/0x30
[ 1094.392624][T19481]  ? __import_iovec+0x5f2/0x850
[ 1094.397518][T19481]  ? import_iovec+0x73/0xa0
[ 1094.402055][T19481]  ___sys_sendmsg+0x2a6/0x360
[ 1094.406761][T19481]  ? get_pid_task+0x20/0x1e0
[ 1094.411411][T19481]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1094.416241][T19481]  ? __lock_acquire+0x7d40/0x7d40
[ 1094.421422][T19481]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1094.426327][T19481]  ? __x64_sys_sendmsg+0x80/0x80
[ 1094.429081][T19482] FAULT_INJECTION: forcing a failure.
[ 1094.429081][T19482] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.431332][T19481]  ? lockdep_hardirqs_on+0x98/0x150
[ 1094.449140][T19481]  do_syscall_64+0x55/0xa0
[ 1094.453595][T19481]  ? clear_bhb_loop+0x40/0x90
[ 1094.458345][T19481]  ? clear_bhb_loop+0x40/0x90
[ 1094.463086][T19481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1094.469033][T19481] RIP: 0033:0x7f8e7b19acb9
[ 1094.473492][T19481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1094.493149][T19481] RSP: 002b:00007f8e7c069028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1094.501600][T19481] RAX: ffffffffffffffda RBX: 00007f8e7b415fa0 RCX: 00007f8e7b19acb9
[ 1094.509788][T19481] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003
[ 1094.517810][T19481] RBP: 00007f8e7c069090 R08: 0000000000000000 R09: 0000000000000000
[ 1094.525915][T19481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1094.533922][T19481] R13: 00007f8e7b416038 R14: 00007f8e7b415fa0 R15: 00007ffd04b957b8
[ 1094.542045][T19481]  </TASK>
[ 1094.562129][T19482] CPU: 1 PID: 19482 Comm: syz.0.4797 Not tainted syzkaller #0
[ 1094.569671][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1094.579813][T19482] Call Trace:
[ 1094.583140][T19482]  <TASK>
[ 1094.586110][T19482]  dump_stack_lvl+0x18c/0x250
[ 1094.590885][T19482]  ? show_regs_print_info+0x20/0x20
[ 1094.596142][T19482]  ? load_image+0x400/0x400
[ 1094.600714][T19482]  ? verify_lock_unused+0x140/0x140
[ 1094.605977][T19482]  should_fail_ex+0x39d/0x4d0
[ 1094.610718][T19482]  should_failslab+0x9/0x20
[ 1094.615286][T19482]  slab_pre_alloc_hook+0x59/0x310
[ 1094.620377][T19482]  kmem_cache_alloc+0x5a/0x2d0
[ 1094.625203][T19482]  ? skb_clone+0x1eb/0x370
[ 1094.629763][T19482]  skb_clone+0x1eb/0x370
[ 1094.634055][T19482]  __netlink_deliver_tap+0x41c/0x830
[ 1094.639572][T19482]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1094.644815][T19482]  netlink_deliver_tap+0x19c/0x1b0
[ 1094.649976][T19482]  netlink_unicast+0x72c/0x8d0
[ 1094.654865][T19482]  netlink_sendmsg+0x8d0/0xbf0
[ 1094.659685][T19482]  ? netlink_getsockopt+0x590/0x590
[ 1094.664943][T19482]  ? aa_sock_msg_perm+0x94/0x150
[ 1094.669937][T19482]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1094.675310][T19482]  ? security_socket_sendmsg+0x80/0xa0
[ 1094.680822][T19482]  ? netlink_getsockopt+0x590/0x590
[ 1094.686069][T19482]  ____sys_sendmsg+0x5ba/0x960
[ 1094.690879][T19482]  ? __asan_memset+0x22/0x40
[ 1094.695495][T19482]  ? __sys_sendmsg_sock+0x30/0x30
[ 1094.700541][T19482]  ? __import_iovec+0x3fa/0x850
[ 1094.705469][T19482]  ? import_iovec+0x73/0xa0
[ 1094.710006][T19482]  ___sys_sendmsg+0x2a6/0x360
[ 1094.714706][T19482]  ? get_pid_task+0x20/0x1e0
[ 1094.719321][T19482]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1094.724118][T19482]  ? __lock_acquire+0x7d40/0x7d40
[ 1094.729175][T19482]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1094.734051][T19482]  ? __x64_sys_sendmsg+0x80/0x80
[ 1094.739044][T19482]  ? lockdep_hardirqs_on+0x98/0x150
[ 1094.744293][T19482]  do_syscall_64+0x55/0xa0
[ 1094.748763][T19482]  ? clear_bhb_loop+0x40/0x90
[ 1094.753462][T19482]  ? clear_bhb_loop+0x40/0x90
[ 1094.758161][T19482]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1094.764075][T19482] RIP: 0033:0x7fd70c19acb9
[ 1094.768504][T19482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1094.788130][T19482] RSP: 002b:00007fd70cf8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1094.796582][T19482] RAX: ffffffffffffffda RBX: 00007fd70c416090 RCX: 00007fd70c19acb9
[ 1094.804622][T19482] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007
[ 1094.812647][T19482] RBP: 00007fd70cf8d090 R08: 0000000000000000 R09: 0000000000000000
[ 1094.820661][T19482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1094.828650][T19482] R13: 00007fd70c416128 R14: 00007fd70c416090 R15: 00007fffa47da388
[ 1094.836651][T19482]  </TASK>
[ 1094.848121][T19482] netlink: 'syz.0.4797': attribute type 10 has an invalid length.
[ 1094.878638][T19482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1094.896703][T19482] bridge_slave_1: left allmulticast mode
[ 1094.902432][T19482] bridge_slave_1: left promiscuous mode
[ 1094.908758][T19482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1094.940142][T19482] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1094.957200][T19492] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4800'.
[ 1095.469363][T19505] netlink: 'syz.0.4806': attribute type 10 has an invalid length.
[ 1095.701240][T18484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1095.712851][T18484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1095.723096][T18484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1095.736672][T19511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1095.745752][T19511] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1095.753422][T19511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1096.054651][ T6060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.125860][T19520] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4811'.
[ 1097.806368][ T5780] Bluetooth: hci2: command tx timeout
[ 1098.972789][ T6060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.148708][ T6060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.242664][T19509] chnl_net:caif_netlink_parms(): no params data found
[ 1099.413523][ T6060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.442459][T19544] netlink: 'syz.3.4817': attribute type 10 has an invalid length.
[ 1099.480581][T19509] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1099.488234][T19509] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.495594][T19509] bridge_slave_0: entered allmulticast mode
[ 1099.504478][T19509] bridge_slave_0: entered promiscuous mode
[ 1099.513702][T19509] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.521050][T19509] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.528542][T19509] bridge_slave_1: entered allmulticast mode
[ 1099.536215][T19509] bridge_slave_1: entered promiscuous mode
[ 1099.602732][T19509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1099.650746][T19509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1099.857465][T19509] team0: Port device team_slave_0 added
[ 1099.896579][T19509] team0: Port device team_slave_1 added
[ 1099.904158][ T5780] Bluetooth: hci2: command tx timeout
[ 1100.072584][T19509] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1100.106156][T19509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1100.208807][T19509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1100.242786][T19509] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1100.278369][T19509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1100.345814][T19509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1100.702828][T19509] hsr_slave_0: entered promiscuous mode
[ 1100.714158][T19509] hsr_slave_1: entered promiscuous mode
[ 1101.966499][ T5780] Bluetooth: hci2: command tx timeout
[ 1103.514572][T19565] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4825'.
[ 1103.972708][T19586] netlink: 'syz.0.4828': attribute type 10 has an invalid length.
[ 1104.046887][ T5780] Bluetooth: hci2: command tx timeout
[ 1106.230937][T19611] netlink: 'syz.0.4838': attribute type 10 has an invalid length.
[ 1106.453911][T19618] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4833'.
[ 1106.599417][T19509] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1106.632565][T19509] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1106.661932][T19509] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1106.682843][T19625] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.4837'.
[ 1109.489950][T19509] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1110.026971][T19645] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4843'.
[ 1110.067863][ T6060] hsr_slave_0: left promiscuous mode
[ 1110.093904][ T6060] hsr_slave_1: left promiscuous mode
[ 1110.295465][ T6060] veth1_macvtap: left promiscuous mode
[ 1110.308599][ T6060] veth0_macvtap: left promiscuous mode
[ 1110.325848][ T6060] veth1_vlan: left promiscuous mode
[ 1110.341385][ T6060] veth0_vlan: left promiscuous mode
[ 1111.007291][ T6060] geneve0 (unregistering): left promiscuous mode
[ 1111.039265][ T6060] geneve0 (unregistering): left allmulticast mode
[ 1111.069342][ T6060] ` (unregistering): Port device geneve0 removed
[ 1113.289508][ T6060] team_slave_1 (unregistering): left promiscuous mode
[ 1113.300076][ T6060] team_slave_1 (unregistering): left allmulticast mode
[ 1113.309486][ T6060] ` (unregistering): Port device team_slave_1 removed
[ 1113.372151][ T6060] C (unregistering): left promiscuous mode
[ 1113.378160][ T6060] C (unregistering): left allmulticast mode
[ 1113.386710][ T6060] ` (unregistering): Port device C removed
[ 1113.454825][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1113.469329][ T6060] bond_slave_1 (unregistering): left promiscuous mode
[ 1113.478620][ T6060] bond_slave_1 (unregistering): left allmulticast mode
[ 1113.527025][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1113.542054][ T6060] bond_slave_0 (unregistering): left promiscuous mode
[ 1113.551196][ T6060] bond_slave_0 (unregistering): left allmulticast mode
[ 1113.908996][ T6060] bond0 (unregistering): left allmulticast mode
[ 1113.922450][ T6060] ` (unregistering): Port device bond0 removed
[ 1113.955023][ T6060] bond0 (unregistering): Released all slaves
[ 1114.002347][T19660] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4847'.
[ 1114.016224][T19690] netlink: 'syz.0.4858': attribute type 39 has an invalid length.
[ 1114.700359][T19509] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1114.753178][T19509] 8021q: adding VLAN 0 to HW filter on device team0
[ 1114.778436][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.785706][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1114.808604][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.816027][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1115.518140][T19509] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.720619][T19722] netlink: 'syz.3.4864': attribute type 10 has an invalid length.
[ 1115.755490][T19722] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.792163][T19722] bridge_slave_1: left allmulticast mode
[ 1115.813700][T19722] bridge_slave_1: left promiscuous mode
[ 1115.821965][T19722] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.835683][T19722] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1115.949384][T19729] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4866'.
[ 1115.974034][T19509] veth0_vlan: entered promiscuous mode
[ 1116.019977][T19509] veth1_vlan: entered promiscuous mode
[ 1116.098549][T19509] veth0_macvtap: entered promiscuous mode
[ 1116.120239][T19509] veth1_macvtap: entered promiscuous mode
[ 1116.215651][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.226318][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.242589][T19509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.274966][T19509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.295356][T19509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.317706][T19509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.353065][T19509] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1116.415982][T19509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.462169][T19509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.515089][T19509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.540682][T19509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.587570][T19509] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.625009][T19509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.648643][T19509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.675013][T19509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.699459][T19509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.965982][T11133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1116.993401][T11133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1117.099669][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1117.127828][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1117.335063][T19754] FAULT_INJECTION: forcing a failure.
[ 1117.335063][T19754] name failslab, interval 1, probability 0, space 0, times 0
[ 1117.384758][T19754] CPU: 0 PID: 19754 Comm: syz.3.4872 Not tainted syzkaller #0
[ 1117.392311][T19754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1117.402421][T19754] Call Trace:
[ 1117.405755][T19754]  <TASK>
[ 1117.408725][T19754]  dump_stack_lvl+0x18c/0x250
[ 1117.413491][T19754]  ? show_regs_print_info+0x20/0x20
[ 1117.418760][T19754]  ? load_image+0x400/0x400
[ 1117.423415][T19754]  ? __might_sleep+0xe0/0xe0
[ 1117.428055][T19754]  ? __lock_acquire+0x7d40/0x7d40
[ 1117.433137][T19754]  ? __lock_acquire+0x1273/0x7d40
[ 1117.438324][T19754]  should_fail_ex+0x39d/0x4d0
[ 1117.443078][T19754]  should_failslab+0x9/0x20
[ 1117.447650][T19754]  slab_pre_alloc_hook+0x59/0x310
[ 1117.452751][T19754]  kmem_cache_alloc_node+0x60/0x320
[ 1117.458022][T19754]  ? __alloc_skb+0x103/0x2c0
[ 1117.462672][T19754]  __alloc_skb+0x103/0x2c0
[ 1117.467152][T19754]  alloc_skb_with_frags+0xca/0x7b0
[ 1117.472321][T19754]  ? mark_lock+0x94/0x320
[ 1117.476718][T19754]  ? __lock_acquire+0x1273/0x7d40
[ 1117.481806][T19754]  sock_alloc_send_pskb+0x883/0x9a0
[ 1117.487090][T19754]  ? sock_kzfree_s+0x50/0x50
[ 1117.491746][T19754]  ? verify_lock_unused+0x140/0x140
[ 1117.497189][T19754]  ? dev_get_by_index+0x22/0x2d0
[ 1117.502188][T19754]  ? dev_get_by_index+0x22/0x2d0
[ 1117.507389][T19754]  packet_sendmsg+0x316e/0x4d70
[ 1117.512401][T19754]  ? __might_sleep+0xe0/0xe0
[ 1117.517031][T19754]  ? verify_lock_unused+0x140/0x140
[ 1117.522521][T19754]  ? mark_lock+0x94/0x320
[ 1117.526885][T19754]  ? __lock_acquire+0x1273/0x7d40
[ 1117.531940][T19754]  ? verify_lock_unused+0x140/0x140
[ 1117.537180][T19754]  ? aa_sk_perm+0x83c/0x970
[ 1117.541819][T19754]  ? packet_getsockopt+0xad0/0xad0
[ 1117.546975][T19754]  ? aa_sock_msg_perm+0x94/0x150
[ 1117.551950][T19754]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1117.557269][T19754]  ? security_socket_sendmsg+0x80/0xa0
[ 1117.562766][T19754]  ? packet_getsockopt+0xad0/0xad0
[ 1117.568096][T19754]  ____sys_sendmsg+0x5ba/0x960
[ 1117.572902][T19754]  ? __lock_acquire+0x7d40/0x7d40
[ 1117.577970][T19754]  ? __asan_memset+0x22/0x40
[ 1117.582606][T19754]  ? __sys_sendmsg_sock+0x30/0x30
[ 1117.587666][T19754]  ? __import_iovec+0x3fa/0x850
[ 1117.592562][T19754]  ? import_iovec+0x73/0xa0
[ 1117.597109][T19754]  ___sys_sendmsg+0x2a6/0x360
[ 1117.601815][T19754]  ? get_pid_task+0x20/0x1e0
[ 1117.606525][T19754]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1117.611373][T19754]  ? __lock_acquire+0x7d40/0x7d40
[ 1117.616449][T19754]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1117.621332][T19754]  ? __x64_sys_sendmsg+0x80/0x80
[ 1117.626318][T19754]  ? lockdep_hardirqs_on+0x98/0x150
[ 1117.631645][T19754]  do_syscall_64+0x55/0xa0
[ 1117.636091][T19754]  ? clear_bhb_loop+0x40/0x90
[ 1117.640806][T19754]  ? clear_bhb_loop+0x40/0x90
[ 1117.645555][T19754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1117.651483][T19754] RIP: 0033:0x7f34d759acb9
[ 1117.655926][T19754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1117.675564][T19754] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1117.684003][T19754] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1117.692011][T19754] RDX: 0000000024044085 RSI: 0000200000000040 RDI: 0000000000000003
[ 1117.700105][T19754] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1117.708116][T19754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1117.716113][T19754] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1117.724123][T19754]  </TASK>
[ 1118.553681][T19770] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4876'.
[ 1119.191995][T19781] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4882'.
[ 1119.202503][T19511] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1119.212499][T19511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1119.223041][T19511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1119.235686][T19511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1119.244088][T19511] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1119.266233][T19511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1121.331280][ T5780] Bluetooth: hci0: command tx timeout
[ 1121.865187][T19789] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4883'.
[ 1122.186694][ T6060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.273345][T19802] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4886'.
[ 1122.318091][ T6060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.408348][ T5780] Bluetooth: hci0: command tx timeout
[ 1124.379065][ T6060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.396774][T19805] netlink: 'syz.2.4889': attribute type 10 has an invalid length.
[ 1124.407946][T19805] FAULT_INJECTION: forcing a failure.
[ 1124.407946][T19805] name failslab, interval 1, probability 0, space 0, times 0
[ 1124.429780][T19805] CPU: 0 PID: 19805 Comm: syz.2.4889 Not tainted syzkaller #0
[ 1124.437314][T19805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1124.447410][T19805] Call Trace:
[ 1124.450848][T19805]  <TASK>
[ 1124.453846][T19805]  dump_stack_lvl+0x18c/0x250
[ 1124.458577][T19805]  ? show_regs_print_info+0x20/0x20
[ 1124.463849][T19805]  ? load_image+0x400/0x400
[ 1124.468417][T19805]  ? __might_sleep+0xe0/0xe0
[ 1124.473110][T19805]  ? __lock_acquire+0x7d40/0x7d40
[ 1124.478189][T19805]  should_fail_ex+0x39d/0x4d0
[ 1124.482920][T19805]  should_failslab+0x9/0x20
[ 1124.487471][T19805]  slab_pre_alloc_hook+0x59/0x310
[ 1124.492549][T19805]  ? __lock_acquire+0x7d40/0x7d40
[ 1124.497622][T19805]  ? trace_contention_end+0x39/0xe0
[ 1124.502861][T19805]  ? nf_nat_masq_schedule+0x246/0x560
[ 1124.508286][T19805]  __kmem_cache_alloc_node+0x53/0x250
[ 1124.513709][T19805]  ? nf_nat_masq_schedule+0x246/0x560
[ 1124.519124][T19805]  kmalloc_trace+0x2a/0xe0
[ 1124.523626][T19805]  nf_nat_masq_schedule+0x246/0x560
[ 1124.528868][T19805]  ? mutex_unlock+0x10/0x10
[ 1124.533422][T19805]  ? nf_nat_masq_schedule+0x560/0x560
[ 1124.538851][T19805]  ? masq_device_event+0xd0/0xd0
[ 1124.543849][T19805]  ? nfqnl_rcv_dev_event+0xb1/0x770
[ 1124.549117][T19805]  masq_device_event+0xa2/0xd0
[ 1124.553945][T19805]  notifier_call_chain+0x197/0x380
[ 1124.559222][T19805]  __dev_notify_flags+0x16e/0x310
[ 1124.564308][T19805]  ? __dev_change_flags+0x6a0/0x6a0
[ 1124.569543][T19805]  ? __dev_change_flags+0x4d4/0x6a0
[ 1124.574784][T19805]  ? vprintk_emit+0x53d/0x610
[ 1124.579498][T19805]  ? dev_get_flags+0x1c0/0x1c0
[ 1124.584294][T19805]  ? printk_sprint+0x460/0x460
[ 1124.589182][T19805]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1124.595143][T19805]  ? _raw_spin_unlock+0x40/0x40
[ 1124.600040][T19805]  dev_change_flags+0xe8/0x1a0
[ 1124.604873][T19805]  do_setlink+0xc58/0x4130
[ 1124.609344][T19805]  ? arch_stack_walk+0x160/0x190
[ 1124.614342][T19805]  ? load_image+0x400/0x400
[ 1124.618902][T19805]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 1124.625115][T19805]  ? stack_trace_save+0xaa/0x100
[ 1124.630104][T19805]  ? __nla_validate_parse+0x2522/0x2ea0
[ 1124.635721][T19805]  ? __nla_validate+0x50/0x50
[ 1124.640637][T19805]  ? validate_linkmsg+0x719/0x910
[ 1124.645708][T19805]  rtnl_newlink+0x17da/0x20a0
[ 1124.650445][T19805]  ? rtnl_setlink+0x4e0/0x4e0
[ 1124.655152][T19805]  ? __rwlock_init+0x150/0x150
[ 1124.659971][T19805]  ? do_raw_spin_unlock+0x121/0x230
[ 1124.665228][T19805]  ? __mutex_lock+0x956/0xcc0
[ 1124.669952][T19805]  ? __mutex_lock+0x4f9/0xcc0
[ 1124.674678][T19805]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1124.679831][T19805]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1124.684981][T19805]  ? rtnl_setlink+0x4e0/0x4e0
[ 1124.689704][T19805]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1124.694685][T19805]  ? lockdep_hardirqs_on+0x98/0x150
[ 1124.699939][T19805]  ? rtnetlink_bind+0x80/0x80
[ 1124.704658][T19805]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1124.710870][T19805]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1124.716885][T19805]  ? lock_chain_count+0x20/0x20
[ 1124.721772][T19805]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1124.727259][T19805]  ? lockdep_hardirqs_on+0x98/0x150
[ 1124.732493][T19805]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1124.737895][T19805]  ? _local_bh_enable+0xa0/0xa0
[ 1124.742822][T19805]  ? __dev_queue_xmit+0x26b/0x36b0
[ 1124.747995][T19805]  ? __dev_queue_xmit+0x26b/0x36b0
[ 1124.753140][T19805]  ? __dev_queue_xmit+0x124f/0x36b0
[ 1124.758400][T19805]  ? __dev_queue_xmit+0x26b/0x36b0
[ 1124.763563][T19805]  ? ref_tracker_free+0x690/0x840
[ 1124.768643][T19805]  netlink_rcv_skb+0x241/0x4d0
[ 1124.773444][T19805]  ? rtnetlink_bind+0x80/0x80
[ 1124.778156][T19805]  ? netlink_ack+0x1180/0x1180
[ 1124.783001][T19805]  ? __lock_acquire+0x7d40/0x7d40
[ 1124.788064][T19805]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1124.793298][T19805]  netlink_unicast+0x751/0x8d0
[ 1124.798110][T19805]  netlink_sendmsg+0x8d0/0xbf0
[ 1124.802913][T19805]  ? netlink_getsockopt+0x590/0x590
[ 1124.808232][T19805]  ? aa_sock_msg_perm+0x94/0x150
[ 1124.813207][T19805]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1124.818524][T19805]  ? security_socket_sendmsg+0x80/0xa0
[ 1124.824014][T19805]  ? netlink_getsockopt+0x590/0x590
[ 1124.829244][T19805]  ____sys_sendmsg+0x5ba/0x960
[ 1124.834046][T19805]  ? __asan_memset+0x22/0x40
[ 1124.838671][T19805]  ? __sys_sendmsg_sock+0x30/0x30
[ 1124.843731][T19805]  ? __import_iovec+0x3fa/0x850
[ 1124.848637][T19805]  ? import_iovec+0x73/0xa0
[ 1124.853222][T19805]  ___sys_sendmsg+0x2a6/0x360
[ 1124.857932][T19805]  ? get_pid_task+0x20/0x1e0
[ 1124.862561][T19805]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1124.867375][T19805]  ? __lock_acquire+0x7d40/0x7d40
[ 1124.872481][T19805]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1124.877385][T19805]  ? __x64_sys_sendmsg+0x80/0x80
[ 1124.882490][T19805]  ? lockdep_hardirqs_on+0x98/0x150
[ 1124.887741][T19805]  do_syscall_64+0x55/0xa0
[ 1124.892210][T19805]  ? clear_bhb_loop+0x40/0x90
[ 1124.896940][T19805]  ? clear_bhb_loop+0x40/0x90
[ 1124.901684][T19805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1124.907621][T19805] RIP: 0033:0x7f1a1979acb9
[ 1124.912075][T19805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1124.931710][T19805] RSP: 002b:00007f1a1a60f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1124.940159][T19805] RAX: ffffffffffffffda RBX: 00007f1a19a15fa0 RCX: 00007f1a1979acb9
[ 1124.948244][T19805] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006
[ 1124.956242][T19805] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1124.964246][T19805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1124.972246][T19805] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1124.980344][T19805]  </TASK>
[ 1125.017530][T19805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.028384][T19805] bridge_slave_1: left allmulticast mode
[ 1125.034117][T19805] bridge_slave_1: left promiscuous mode
[ 1125.040581][T19805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.059156][T19805] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1125.255399][ T6060] bond0: (slave netdevsim0): Releasing backup interface
[ 1125.393432][ T6060] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[ 1125.431593][ T6060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.486342][ T5780] Bluetooth: hci0: command tx timeout
[ 1125.515784][T19815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1125.615689][T19783] chnl_net:caif_netlink_parms(): no params data found
[ 1125.895546][T19828] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4894'.
[ 1125.977378][T19833] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4895'.
[ 1126.062038][ T6060] bridge0: port 3(ip6gretap0) entered disabled state
[ 1126.218754][ T6060] ip6gretap0 (unregistering): left allmulticast mode
[ 1126.238344][ T6060] ip6gretap0 (unregistering): left promiscuous mode
[ 1126.245105][ T6060] bridge0: port 3(ip6gretap0) entered disabled state
[ 1127.566328][ T5780] Bluetooth: hci0: command tx timeout
[ 1129.148184][T19783] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1129.155403][T19783] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1129.191139][T19783] bridge_slave_0: entered allmulticast mode
[ 1129.205649][T19783] bridge_slave_0: entered promiscuous mode
[ 1129.256878][T19862] bridge_slave_1: entered promiscuous mode
[ 1129.273257][T19783] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1129.283044][T19783] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.292931][T19783] bridge_slave_1: entered allmulticast mode
[ 1129.304019][T19783] bridge_slave_1: entered promiscuous mode
[ 1129.515624][T19783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1129.560989][T19783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1129.798954][T19876] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4903'.
[ 1129.848766][T19783] team0: Port device team_slave_0 added
[ 1130.040013][T19783] team0: Port device team_slave_1 added
[ 1130.249781][T19783] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1130.266295][T19783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1130.296288][T19783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1130.311138][T19884] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4905'.
[ 1130.325802][T19783] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1130.333904][T19783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1130.379573][T19783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1130.847767][T19783] hsr_slave_0: entered promiscuous mode
[ 1130.854478][T19783] hsr_slave_1: entered promiscuous mode
[ 1130.881687][T19783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1130.896289][T19783] Cannot create hsr debugfs directory
[ 1131.987515][T19911] sctp: [Deprecated]: syz.3.4911 (pid 19911) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1131.987515][T19911] Use struct sctp_sack_info instead
[ 1134.603765][ T6060] hsr_slave_0: left promiscuous mode
[ 1134.650109][ T6060] hsr_slave_1: left promiscuous mode
[ 1134.659853][T19919] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4913'.
[ 1134.714239][ T6060] veth1_macvtap: left promiscuous mode
[ 1134.725606][ T6060] veth0_macvtap: left promiscuous mode
[ 1134.736467][ T6060] veth1_vlan: left promiscuous mode
[ 1134.746880][ T6060] veth0_vlan: left promiscuous mode
[ 1135.275042][ T6060] team0 (unregistering): Port device vlan0 removed
[ 1135.603378][ T6060] team0 (unregistering): Port device team_slave_1 removed
[ 1135.660835][ T6060] team0 (unregistering): Port device team_slave_0 removed
[ 1135.715942][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1135.727922][ T6060] bond_slave_1 (unregistering): left promiscuous mode
[ 1135.777610][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1135.790407][ T6060] bond_slave_0 (unregistering): left promiscuous mode
[ 1135.842506][ T6060] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1135.852550][ T6060] bridge_slave_1 (unregistering): left promiscuous mode
[ 1136.137138][ T6060] bond0 (unregistering): Released all slaves
[ 1136.251245][T19914] netlink: 'syz.2.4919': attribute type 39 has an invalid length.
[ 1136.365555][T19925] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4914'.
[ 1136.784726][T19934] netlink: 'syz.0.4917': attribute type 29 has an invalid length.
[ 1136.841991][T19934] netlink: 'syz.0.4917': attribute type 29 has an invalid length.
[ 1137.836393][T19783] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1137.860163][T19783] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1137.891886][T19783] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1137.911578][T19783] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1138.114004][T19962] tap0: tun_chr_ioctl cmd 1074025675
[ 1138.132146][T19962] tap0: persist disabled
[ 1138.174264][T19962] bridge_slave_1: entered promiscuous mode
[ 1138.274114][T19783] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1138.337270][T19783] 8021q: adding VLAN 0 to HW filter on device team0
[ 1138.385095][T11133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1138.392526][T11133] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1138.428401][T19967] netlink: 'syz.3.4924': attribute type 10 has an invalid length.
[ 1138.464218][T11133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1138.471674][T11133] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1138.988039][T19990] netlink: 'syz.3.4928': attribute type 39 has an invalid length.
[ 1139.080931][T19994] FAULT_INJECTION: forcing a failure.
[ 1139.080931][T19994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1139.143921][T19994] CPU: 0 PID: 19994 Comm: syz.0.4929 Not tainted syzkaller #0
[ 1139.151469][T19994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1139.161581][T19994] Call Trace:
[ 1139.164899][T19994]  <TASK>
[ 1139.167869][T19994]  dump_stack_lvl+0x18c/0x250
[ 1139.172614][T19994]  ? show_regs_print_info+0x20/0x20
[ 1139.177864][T19994]  ? load_image+0x400/0x400
[ 1139.182449][T19994]  ? __might_fault+0xaa/0x120
[ 1139.187169][T19994]  ? __lock_acquire+0x7d40/0x7d40
[ 1139.192242][T19994]  should_fail_ex+0x39d/0x4d0
[ 1139.196980][T19994]  _copy_from_iter+0x1d9/0x12e0
[ 1139.201891][T19994]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1139.207228][T19994]  ? __virt_addr_valid+0x18c/0x540
[ 1139.212388][T19994]  ? __lock_acquire+0x7d40/0x7d40
[ 1139.217631][T19994]  ? rcu_is_watching+0x15/0xb0
[ 1139.222451][T19994]  ? copyout_mc+0x70/0x70
[ 1139.226832][T19994]  ? __virt_addr_valid+0x18c/0x540
[ 1139.231994][T19994]  ? __virt_addr_valid+0x18c/0x540
[ 1139.237157][T19994]  ? __virt_addr_valid+0x469/0x540
[ 1139.242323][T19994]  ? __check_object_size+0x506/0xa20
[ 1139.247678][T19994]  netlink_sendmsg+0x76b/0xbf0
[ 1139.252503][T19994]  ? netlink_getsockopt+0x590/0x590
[ 1139.257748][T19994]  ? aa_sock_msg_perm+0x94/0x150
[ 1139.262791][T19994]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1139.268166][T19994]  ? security_socket_sendmsg+0x80/0xa0
[ 1139.273749][T19994]  ? netlink_getsockopt+0x590/0x590
[ 1139.279077][T19994]  ____sys_sendmsg+0x5ba/0x960
[ 1139.283859][T19994]  ? __asan_memset+0x22/0x40
[ 1139.288479][T19994]  ? __sys_sendmsg_sock+0x30/0x30
[ 1139.293560][T19994]  ? __import_iovec+0x5f2/0x850
[ 1139.298499][T19994]  ? import_iovec+0x73/0xa0
[ 1139.303148][T19994]  ___sys_sendmsg+0x2a6/0x360
[ 1139.307876][T19994]  ? get_pid_task+0x20/0x1e0
[ 1139.312526][T19994]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1139.317365][T19994]  ? __lock_acquire+0x7d40/0x7d40
[ 1139.322473][T19994]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1139.327387][T19994]  ? __x64_sys_sendmsg+0x80/0x80
[ 1139.332405][T19994]  ? lockdep_hardirqs_on+0x98/0x150
[ 1139.337666][T19994]  do_syscall_64+0x55/0xa0
[ 1139.342134][T19994]  ? clear_bhb_loop+0x40/0x90
[ 1139.346870][T19994]  ? clear_bhb_loop+0x40/0x90
[ 1139.351613][T19994]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1139.357563][T19994] RIP: 0033:0x7fd70c19acb9
[ 1139.362029][T19994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.381785][T19994] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1139.390703][T19994] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1139.398732][T19994] RDX: 0000000004008000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1139.406764][T19994] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1139.414801][T19994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1139.422828][T19994] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1139.430871][T19994]  </TASK>
[ 1139.614659][T19783] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1139.819313][T19783] veth0_vlan: entered promiscuous mode
[ 1139.853308][T19783] veth1_vlan: entered promiscuous mode
[ 1139.915924][T19783] veth0_macvtap: entered promiscuous mode
[ 1139.928004][T19783] veth1_macvtap: entered promiscuous mode
[ 1139.948390][T19783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.959009][T19783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.969091][T19783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.980026][T19783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.989916][T19783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1140.000426][T19783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.012068][T19783] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1140.032019][T19783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1140.043758][T19783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.063069][T19783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1140.077621][T19783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.096091][T19783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1140.116135][T19783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.127913][T19783] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1140.168341][T19783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.200910][T19783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.230046][T19783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.246292][T19783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.543099][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1140.593363][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1140.717521][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1140.733403][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1141.507932][T20041] netlink: 'syz.2.4934': attribute type 10 has an invalid length.
[ 1142.325948][T20041] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1142.336667][T20041] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1142.357605][T20052] bridge0: port 3(ip6gretap0) entered blocking state
[ 1142.364679][T20052] bridge0: port 3(ip6gretap0) entered disabled state
[ 1142.389867][T20052] ip6gretap0: entered allmulticast mode
[ 1142.405049][T20052] ip6gretap0: entered promiscuous mode
[ 1142.423372][T20052] bridge0: port 3(ip6gretap0) entered blocking state
[ 1142.430411][T20052] bridge0: port 3(ip6gretap0) entered forwarding state
[ 1143.009940][ T5780] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6
[ 1143.771669][T20095] netlink: 'syz.1.4951': attribute type 10 has an invalid length.
[ 1146.641670][T20095] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1146.684982][T20095] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1146.717451][T20098] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4950'.
[ 1146.838370][T20118] FAULT_INJECTION: forcing a failure.
[ 1146.838370][T20118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1146.898797][T20118] CPU: 1 PID: 20118 Comm: syz.2.4953 Not tainted syzkaller #0
[ 1146.906392][T20118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1146.916493][T20118] Call Trace:
[ 1146.919837][T20118]  <TASK>
[ 1146.922803][T20118]  dump_stack_lvl+0x18c/0x250
[ 1146.927551][T20118]  ? show_regs_print_info+0x20/0x20
[ 1146.932799][T20118]  ? load_image+0x400/0x400
[ 1146.937367][T20118]  ? __might_fault+0xaa/0x120
[ 1146.942196][T20118]  ? __lock_acquire+0x7d40/0x7d40
[ 1146.947275][T20118]  should_fail_ex+0x39d/0x4d0
[ 1146.952042][T20118]  _copy_from_iter+0x1d9/0x12e0
[ 1146.956949][T20118]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1146.962288][T20118]  ? __virt_addr_valid+0x18c/0x540
[ 1146.967451][T20118]  ? __lock_acquire+0x7d40/0x7d40
[ 1146.972526][T20118]  ? rcu_is_watching+0x15/0xb0
[ 1146.977437][T20118]  ? copyout_mc+0x70/0x70
[ 1146.981827][T20118]  ? __virt_addr_valid+0x18c/0x540
[ 1146.987166][T20118]  ? __virt_addr_valid+0x18c/0x540
[ 1146.992332][T20118]  ? __virt_addr_valid+0x469/0x540
[ 1146.997494][T20118]  ? __check_object_size+0x506/0xa20
[ 1147.002847][T20118]  netlink_sendmsg+0x76b/0xbf0
[ 1147.007675][T20118]  ? netlink_getsockopt+0x590/0x590
[ 1147.012921][T20118]  ? aa_sock_msg_perm+0x94/0x150
[ 1147.017951][T20118]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1147.023287][T20118]  ? security_socket_sendmsg+0x80/0xa0
[ 1147.028801][T20118]  ? netlink_getsockopt+0x590/0x590
[ 1147.034104][T20118]  ____sys_sendmsg+0x5ba/0x960
[ 1147.038948][T20118]  ? __asan_memset+0x22/0x40
[ 1147.043591][T20118]  ? __sys_sendmsg_sock+0x30/0x30
[ 1147.048706][T20118]  ? __import_iovec+0x5f2/0x850
[ 1147.053619][T20118]  ? import_iovec+0x73/0xa0
[ 1147.058194][T20118]  ___sys_sendmsg+0x2a6/0x360
[ 1147.062921][T20118]  ? get_pid_task+0x20/0x1e0
[ 1147.067572][T20118]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1147.072409][T20118]  ? __lock_acquire+0x7d40/0x7d40
[ 1147.077510][T20118]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1147.082417][T20118]  ? __x64_sys_sendmsg+0x80/0x80
[ 1147.087428][T20118]  ? lockdep_hardirqs_on+0x98/0x150
[ 1147.092689][T20118]  do_syscall_64+0x55/0xa0
[ 1147.097154][T20118]  ? clear_bhb_loop+0x40/0x90
[ 1147.101884][T20118]  ? clear_bhb_loop+0x40/0x90
[ 1147.106809][T20118]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1147.112753][T20118] RIP: 0033:0x7f1a1979acb9
[ 1147.117203][T20118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1147.136844][T20118] RSP: 002b:00007f1a1a60f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1147.145308][T20118] RAX: ffffffffffffffda RBX: 00007f1a19a15fa0 RCX: 00007f1a1979acb9
[ 1147.153307][T20118] RDX: 0000000004008000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1147.161303][T20118] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1147.169323][T20118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1147.177319][T20118] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1147.185332][T20118]  </TASK>
[ 1148.091277][T20147] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4964'.
[ 1148.173146][T20142] netlink: 'syz.3.4962': attribute type 10 has an invalid length.
[ 1151.258057][T20162] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4969'.
[ 1152.028323][T20178] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[ 1152.035464][T20178] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode
[ 1152.044137][T20179] netlink: 'syz.2.4976': attribute type 10 has an invalid length.
[ 1152.070371][T20179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4976'.
[ 1152.085056][T20179] dummy0: entered promiscuous mode
[ 1152.110105][T20179] bridge0: port 2(dummy0) entered blocking state
[ 1152.129303][T20179] bridge0: port 2(dummy0) entered disabled state
[ 1152.135873][T20179] dummy0: entered allmulticast mode
[ 1152.198476][T20179] bridge0: port 2(dummy0) entered blocking state
[ 1152.205062][T20179] bridge0: port 2(dummy0) entered forwarding state
[ 1152.398408][T20185] netlink: 'syz.3.4977': attribute type 10 has an invalid length.
[ 1152.474455][T20189] bridge0: port 3(ip6gretap0) entered blocking state
[ 1152.490836][T20189] bridge0: port 3(ip6gretap0) entered disabled state
[ 1152.501030][T20189] ip6gretap0: entered allmulticast mode
[ 1152.523711][T20189] ip6gretap0: entered promiscuous mode
[ 1152.584730][T20189] bridge0: port 3(ip6gretap0) entered blocking state
[ 1152.591699][T20189] bridge0: port 3(ip6gretap0) entered forwarding state
[ 1152.653808][T20193] FAULT_INJECTION: forcing a failure.
[ 1152.653808][T20193] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.669962][T20193] CPU: 1 PID: 20193 Comm: syz.1.4981 Not tainted syzkaller #0
[ 1152.677484][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1152.687574][T20193] Call Trace:
[ 1152.690902][T20193]  <TASK>
[ 1152.693863][T20193]  dump_stack_lvl+0x18c/0x250
[ 1152.698760][T20193]  ? show_regs_print_info+0x20/0x20
[ 1152.704009][T20193]  ? load_image+0x400/0x400
[ 1152.708571][T20193]  ? __might_sleep+0xe0/0xe0
[ 1152.713217][T20193]  ? __lock_acquire+0x7d40/0x7d40
[ 1152.718279][T20193]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1152.724314][T20193]  should_fail_ex+0x39d/0x4d0
[ 1152.729050][T20193]  should_failslab+0x9/0x20
[ 1152.733601][T20193]  slab_pre_alloc_hook+0x59/0x310
[ 1152.738678][T20193]  ? __sta_info_destroy_part2+0x2cc/0x430
[ 1152.744477][T20193]  __kmem_cache_alloc_node+0x53/0x250
[ 1152.749980][T20193]  ? __sta_info_destroy_part2+0x2cc/0x430
[ 1152.755823][T20193]  kmalloc_trace+0x2a/0xe0
[ 1152.760291][T20193]  __sta_info_destroy_part2+0x2cc/0x430
[ 1152.766308][T20193]  __sta_info_flush+0x3e5/0x4f0
[ 1152.771217][T20193]  ? sta_info_stop+0x40/0x40
[ 1152.775844][T20193]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1152.781246][T20193]  ? _local_bh_enable+0xa0/0xa0
[ 1152.786133][T20193]  ? do_raw_spin_unlock+0x121/0x230
[ 1152.791373][T20193]  ieee80211_ibss_disconnect+0x262/0x700
[ 1152.797044][T20193]  ieee80211_ibss_leave+0x25/0x140
[ 1152.802199][T20193]  __cfg80211_leave_ibss+0x1d2/0x400
[ 1152.807524][T20193]  cfg80211_netdev_notifier_call+0x1f3/0x13f0
[ 1152.813843][T20193]  ? cfg80211_unhold_bss+0xc0/0xc0
[ 1152.818992][T20193]  ? mark_lock+0x94/0x320
[ 1152.823362][T20193]  ? mark_lock+0x94/0x320
[ 1152.827731][T20193]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1152.833844][T20193]  ? lock_chain_count+0x20/0x20
[ 1152.838729][T20193]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1152.844920][T20193]  ? lockdep_hardirqs_on+0x98/0x150
[ 1152.850175][T20193]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1152.856472][T20193]  notifier_call_chain+0x197/0x380
[ 1152.861635][T20193]  __dev_close_many+0x111/0x2b0
[ 1152.866532][T20193]  ? dev_close_many+0x410/0x410
[ 1152.871429][T20193]  __dev_change_flags+0x2dc/0x6a0
[ 1152.876657][T20193]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1152.882858][T20193]  ? dev_get_flags+0x1c0/0x1c0
[ 1152.887665][T20193]  dev_change_flags+0x88/0x1a0
[ 1152.892568][T20193]  dev_ioctl+0x7b4/0x1140
[ 1152.897030][T20193]  sock_do_ioctl+0x239/0x310
[ 1152.901741][T20193]  ? sock_show_fdinfo+0xb0/0xb0
[ 1152.906653][T20193]  sock_ioctl+0x5ba/0x7e0
[ 1152.911108][T20193]  ? sock_poll+0x3e0/0x3e0
[ 1152.915573][T20193]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1152.920544][T20193]  ? security_file_ioctl+0x80/0xa0
[ 1152.925698][T20193]  ? sock_poll+0x3e0/0x3e0
[ 1152.930150][T20193]  __se_sys_ioctl+0xfd/0x170
[ 1152.934784][T20193]  do_syscall_64+0x55/0xa0
[ 1152.939229][T20193]  ? clear_bhb_loop+0x40/0x90
[ 1152.943943][T20193]  ? clear_bhb_loop+0x40/0x90
[ 1152.948657][T20193]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1152.954577][T20193] RIP: 0033:0x7f4a8bb9acb9
[ 1152.959030][T20193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.978669][T20193] RSP: 002b:00007f4a8cb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1152.987111][T20193] RAX: ffffffffffffffda RBX: 00007f4a8be15fa0 RCX: 00007f4a8bb9acb9
[ 1152.995196][T20193] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 000000000000000a
[ 1153.003203][T20193] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1153.011249][T20193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1153.019267][T20193] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1153.027301][T20193]  </TASK>
[ 1153.145700][T20200] FAULT_INJECTION: forcing a failure.
[ 1153.145700][T20200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1153.183287][T20200] CPU: 0 PID: 20200 Comm: syz.0.4984 Not tainted syzkaller #0
[ 1153.190885][T20200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1153.200999][T20200] Call Trace:
[ 1153.204316][T20200]  <TASK>
[ 1153.207280][T20200]  dump_stack_lvl+0x18c/0x250
[ 1153.212000][T20200]  ? show_regs_print_info+0x20/0x20
[ 1153.217253][T20200]  ? load_image+0x400/0x400
[ 1153.221798][T20200]  ? __might_fault+0xaa/0x120
[ 1153.226506][T20200]  ? __lock_acquire+0x7d40/0x7d40
[ 1153.231573][T20200]  should_fail_ex+0x39d/0x4d0
[ 1153.236313][T20200]  _copy_from_iter+0x1d9/0x12e0
[ 1153.241206][T20200]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1153.246535][T20200]  ? __virt_addr_valid+0x18c/0x540
[ 1153.251682][T20200]  ? __lock_acquire+0x7d40/0x7d40
[ 1153.256737][T20200]  ? rcu_is_watching+0x15/0xb0
[ 1153.261538][T20200]  ? copyout_mc+0x70/0x70
[ 1153.265902][T20200]  ? __virt_addr_valid+0x18c/0x540
[ 1153.271052][T20200]  ? __virt_addr_valid+0x18c/0x540
[ 1153.276198][T20200]  ? __virt_addr_valid+0x469/0x540
[ 1153.281623][T20200]  ? __check_object_size+0x506/0xa20
[ 1153.286956][T20200]  netlink_sendmsg+0x76b/0xbf0
[ 1153.291765][T20200]  ? netlink_getsockopt+0x590/0x590
[ 1153.297005][T20200]  ? aa_sock_msg_perm+0x94/0x150
[ 1153.301974][T20200]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1153.307294][T20200]  ? security_socket_sendmsg+0x80/0xa0
[ 1153.312783][T20200]  ? netlink_getsockopt+0x590/0x590
[ 1153.318022][T20200]  ____sys_sendmsg+0x5ba/0x960
[ 1153.322834][T20200]  ? __asan_memset+0x22/0x40
[ 1153.327480][T20200]  ? __sys_sendmsg_sock+0x30/0x30
[ 1153.332545][T20200]  ? __import_iovec+0x5f2/0x850
[ 1153.337571][T20200]  ? import_iovec+0x73/0xa0
[ 1153.342131][T20200]  ___sys_sendmsg+0x2a6/0x360
[ 1153.346857][T20200]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1153.351678][T20200]  ? __lock_acquire+0x7d40/0x7d40
[ 1153.356762][T20200]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1153.361658][T20200]  ? __x64_sys_sendmsg+0x80/0x80
[ 1153.366648][T20200]  ? lockdep_hardirqs_on+0x98/0x150
[ 1153.371883][T20200]  do_syscall_64+0x55/0xa0
[ 1153.376351][T20200]  ? clear_bhb_loop+0x40/0x90
[ 1153.381104][T20200]  ? clear_bhb_loop+0x40/0x90
[ 1153.385817][T20200]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1153.391752][T20200] RIP: 0033:0x7fd70c19acb9
[ 1153.396214][T20200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1153.417271][T20200] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1153.425726][T20200] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1153.433729][T20200] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[ 1153.441731][T20200] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1153.449745][T20200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1153.457745][T20200] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1153.465768][T20200]  </TASK>
[ 1153.485670][T20198] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode
[ 1153.494566][T20198] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode
[ 1153.510766][T20197] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4983'.
[ 1153.852997][T20219] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4992'.
[ 1153.864503][T20219] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4992'.
[ 1154.029242][T20224] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4993'.
[ 1154.039546][T20224] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4993'.
[ 1154.055518][T20224] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4993'.
[ 1154.135710][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[ 1154.153281][T20228] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1154.328975][T20231] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4996'.
[ 1155.099287][T20266] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5011'.
[ 1156.344837][T20296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5026'.
[ 1156.440042][T20300] netlink: 'syz.2.5027': attribute type 29 has an invalid length.
[ 1156.462402][T20300] netlink: 'syz.2.5027': attribute type 29 has an invalid length.
[ 1156.603404][T20305] netlink: 'syz.3.5030': attribute type 29 has an invalid length.
[ 1156.619105][T20305] netlink: 'syz.3.5030': attribute type 29 has an invalid length.
[ 1157.564670][T20330] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5038'.
[ 1158.435262][T20360] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5050'.
[ 1158.962896][T20377] FAULT_INJECTION: forcing a failure.
[ 1158.962896][T20377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1158.986292][T20377] CPU: 0 PID: 20377 Comm: syz.1.5057 Not tainted syzkaller #0
[ 1158.993845][T20377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1159.003937][T20377] Call Trace:
[ 1159.007258][T20377]  <TASK>
[ 1159.010231][T20377]  dump_stack_lvl+0x18c/0x250
[ 1159.014945][T20377]  ? show_regs_print_info+0x20/0x20
[ 1159.020178][T20377]  ? load_image+0x400/0x400
[ 1159.024738][T20377]  ? __lock_acquire+0x7d40/0x7d40
[ 1159.029816][T20377]  ? snprintf+0xe9/0x140
[ 1159.034120][T20377]  should_fail_ex+0x39d/0x4d0
[ 1159.038865][T20377]  _copy_to_user+0x2f/0xa0
[ 1159.043321][T20377]  simple_read_from_buffer+0xe7/0x150
[ 1159.048746][T20377]  proc_fail_nth_read+0x1e8/0x260
[ 1159.053841][T20377]  ? proc_fault_inject_write+0x360/0x360
[ 1159.059537][T20377]  ? fsnotify_perm+0x271/0x5e0
[ 1159.064441][T20377]  ? proc_fault_inject_write+0x360/0x360
[ 1159.070118][T20377]  vfs_read+0x28b/0x970
[ 1159.074416][T20377]  ? kernel_read+0x1e0/0x1e0
[ 1159.079042][T20377]  ? __fget_files+0x28/0x4b0
[ 1159.083655][T20377]  ? __fget_files+0x28/0x4b0
[ 1159.088365][T20377]  ? __fget_files+0x43d/0x4b0
[ 1159.093085][T20377]  ? __fdget_pos+0x2a3/0x330
[ 1159.097717][T20377]  ? ksys_read+0x75/0x260
[ 1159.102088][T20377]  ksys_read+0x150/0x260
[ 1159.106373][T20377]  ? vfs_write+0x990/0x990
[ 1159.110822][T20377]  ? lockdep_hardirqs_on+0x98/0x150
[ 1159.116157][T20377]  do_syscall_64+0x55/0xa0
[ 1159.120699][T20377]  ? clear_bhb_loop+0x40/0x90
[ 1159.125441][T20377]  ? clear_bhb_loop+0x40/0x90
[ 1159.130153][T20377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1159.136083][T20377] RIP: 0033:0x7f4a8bb5b58e
[ 1159.140554][T20377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1159.160192][T20377] RSP: 002b:00007f4a8cb29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1159.168676][T20377] RAX: ffffffffffffffda RBX: 00007f4a8cb2a6c0 RCX: 00007f4a8bb5b58e
[ 1159.176681][T20377] RDX: 000000000000000f RSI: 00007f4a8cb2a0a0 RDI: 0000000000000004
[ 1159.184690][T20377] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1159.192685][T20377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1159.200681][T20377] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1159.208697][T20377]  </TASK>
[ 1159.916547][T20390] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5061'.
[ 1161.626652][T20420] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1161.634265][T20420] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1167.358968][T20441] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode
[ 1167.386208][T20441] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode
[ 1167.962737][T20461] FAULT_INJECTION: forcing a failure.
[ 1167.962737][T20461] name failslab, interval 1, probability 0, space 0, times 0
[ 1167.976184][T20461] CPU: 0 PID: 20461 Comm: syz.1.5087 Not tainted syzkaller #0
[ 1167.983713][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1167.993876][T20461] Call Trace:
[ 1167.997206][T20461]  <TASK>
[ 1168.000186][T20461]  dump_stack_lvl+0x18c/0x250
[ 1168.004924][T20461]  ? show_regs_print_info+0x20/0x20
[ 1168.010178][T20461]  ? load_image+0x400/0x400
[ 1168.014781][T20461]  ? __might_sleep+0xe0/0xe0
[ 1168.019537][T20461]  ? __lock_acquire+0x7d40/0x7d40
[ 1168.024646][T20461]  should_fail_ex+0x39d/0x4d0
[ 1168.029400][T20461]  should_failslab+0x9/0x20
[ 1168.033966][T20461]  slab_pre_alloc_hook+0x59/0x310
[ 1168.039065][T20461]  kmem_cache_alloc+0x5a/0x2d0
[ 1168.043894][T20461]  ? skb_clone+0x1eb/0x370
[ 1168.048384][T20461]  skb_clone+0x1eb/0x370
[ 1168.052692][T20461]  ? pfkey_broadcast_one+0x7d/0x340
[ 1168.058130][T20461]  pfkey_broadcast_one+0x9b/0x340
[ 1168.063206][T20461]  ? pfkey_broadcast+0x39c/0x3e0
[ 1168.068210][T20461]  pfkey_broadcast+0x3a9/0x3e0
[ 1168.073035][T20461]  ? pfkey_broadcast+0x48/0x3e0
[ 1168.078040][T20461]  pfkey_sendmsg+0xe92/0x10e0
[ 1168.082786][T20461]  ? pfkey_release+0x320/0x320
[ 1168.087637][T20461]  ? aa_sock_msg_perm+0x94/0x150
[ 1168.092644][T20461]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1168.097989][T20461]  ? security_socket_sendmsg+0x80/0xa0
[ 1168.103502][T20461]  ? pfkey_release+0x320/0x320
[ 1168.108423][T20461]  ____sys_sendmsg+0x5ba/0x960
[ 1168.113263][T20461]  ? __asan_memset+0x22/0x40
[ 1168.118003][T20461]  ? __sys_sendmsg_sock+0x30/0x30
[ 1168.123074][T20461]  ? __import_iovec+0x5f2/0x850
[ 1168.127997][T20461]  ? import_iovec+0x73/0xa0
[ 1168.132655][T20461]  ___sys_sendmsg+0x2a6/0x360
[ 1168.137405][T20461]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1168.142250][T20461]  ? __lock_acquire+0x7d40/0x7d40
[ 1168.147366][T20461]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1168.152276][T20461]  ? __x64_sys_sendmsg+0x80/0x80
[ 1168.157293][T20461]  ? lockdep_hardirqs_on+0x98/0x150
[ 1168.162652][T20461]  do_syscall_64+0x55/0xa0
[ 1168.167230][T20461]  ? clear_bhb_loop+0x40/0x90
[ 1168.171970][T20461]  ? clear_bhb_loop+0x40/0x90
[ 1168.176728][T20461]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1168.182686][T20461] RIP: 0033:0x7f4a8bb9acb9
[ 1168.187264][T20461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1168.206949][T20461] RSP: 002b:00007f4a8cb2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1168.215430][T20461] RAX: ffffffffffffffda RBX: 00007f4a8be15fa0 RCX: 00007f4a8bb9acb9
[ 1168.223723][T20461] RDX: 0000000000000600 RSI: 0000200000003780 RDI: 0000000000000003
[ 1168.231753][T20461] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1168.239783][T20461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1168.247979][T20461] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1168.256108][T20461]  </TASK>
[ 1169.486240][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[ 1173.590574][T20538] FAULT_INJECTION: forcing a failure.
[ 1173.590574][T20538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1173.630654][T20538] CPU: 1 PID: 20538 Comm: syz.3.5114 Not tainted syzkaller #0
[ 1173.638285][T20538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1173.648601][T20538] Call Trace:
[ 1173.651932][T20538]  <TASK>
[ 1173.654912][T20538]  dump_stack_lvl+0x18c/0x250
[ 1173.659652][T20538]  ? show_regs_print_info+0x20/0x20
[ 1173.664936][T20538]  ? load_image+0x400/0x400
[ 1173.669501][T20538]  ? __might_fault+0xaa/0x120
[ 1173.674238][T20538]  ? __lock_acquire+0x7d40/0x7d40
[ 1173.679324][T20538]  should_fail_ex+0x39d/0x4d0
[ 1173.684074][T20538]  _copy_from_user+0x2f/0xe0
[ 1173.688718][T20538]  br_dev_siocdevprivate+0x119/0x1540
[ 1173.694164][T20538]  ? rcu_is_watching+0x15/0xb0
[ 1173.698985][T20538]  ? br_handle_local_finish+0x20/0x20
[ 1173.704423][T20538]  ? trace_contention_end+0x39/0xe0
[ 1173.709676][T20538]  ? __mutex_lock+0x315/0xcc0
[ 1173.714421][T20538]  ? dev_load+0x21/0x1f0
[ 1173.718732][T20538]  ? dev_ioctl+0x83c/0x1140
[ 1173.723299][T20538]  ? __lock_acquire+0x7d40/0x7d40
[ 1173.728380][T20538]  ? mutex_lock_nested+0x20/0x20
[ 1173.733365][T20538]  ? full_name_hash+0x92/0xe0
[ 1173.738106][T20538]  ? dev_ifsioc+0x958/0xc40
[ 1173.742666][T20538]  dev_ioctl+0x84c/0x1140
[ 1173.747052][T20538]  sock_ioctl+0x74c/0x7e0
[ 1173.751446][T20538]  ? sock_poll+0x3e0/0x3e0
[ 1173.755929][T20538]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1173.760909][T20538]  ? security_file_ioctl+0x80/0xa0
[ 1173.766251][T20538]  ? sock_poll+0x3e0/0x3e0
[ 1173.770723][T20538]  __se_sys_ioctl+0xfd/0x170
[ 1173.775377][T20538]  do_syscall_64+0x55/0xa0
[ 1173.779852][T20538]  ? clear_bhb_loop+0x40/0x90
[ 1173.784578][T20538]  ? clear_bhb_loop+0x40/0x90
[ 1173.789309][T20538]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1173.795253][T20538] RIP: 0033:0x7f34d759acb9
[ 1173.799719][T20538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1173.819380][T20538] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1173.827855][T20538] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1173.835874][T20538] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[ 1173.843896][T20538] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1173.851913][T20538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1173.859926][T20538] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1173.867960][T20538]  </TASK>
[ 1174.347309][T20560] netlink: 'syz.0.5122': attribute type 21 has an invalid length.
[ 1174.356265][T20560] netlink: 'syz.0.5122': attribute type 1 has an invalid length.
[ 1174.364606][T20560] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.5122'.
[ 1174.670280][T20572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5126'.
[ 1176.665261][T20623] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1176.671793][T20623] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1177.783395][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.790303][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.159797][T20649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1182.925513][T20688] FAULT_INJECTION: forcing a failure.
[ 1182.925513][T20688] name failslab, interval 1, probability 0, space 0, times 0
[ 1182.956176][T20688] CPU: 0 PID: 20688 Comm: syz.3.5170 Not tainted syzkaller #0
[ 1182.963722][T20688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1182.973903][T20688] Call Trace:
[ 1182.977213][T20688]  <TASK>
[ 1182.980159][T20688]  dump_stack_lvl+0x18c/0x250
[ 1182.984861][T20688]  ? show_regs_print_info+0x20/0x20
[ 1182.990087][T20688]  ? load_image+0x400/0x400
[ 1182.994632][T20688]  ? __might_sleep+0xe0/0xe0
[ 1182.999260][T20688]  ? __lock_acquire+0x7d40/0x7d40
[ 1183.004443][T20688]  should_fail_ex+0x39d/0x4d0
[ 1183.009194][T20688]  should_failslab+0x9/0x20
[ 1183.013754][T20688]  slab_pre_alloc_hook+0x59/0x310
[ 1183.018863][T20688]  ? register_netdevice+0x574/0x1b90
[ 1183.024206][T20688]  __kmem_cache_alloc_node+0x53/0x250
[ 1183.029633][T20688]  ? register_netdevice+0x574/0x1b90
[ 1183.034954][T20688]  kmalloc_trace+0x2a/0xe0
[ 1183.039422][T20688]  register_netdevice+0x574/0x1b90
[ 1183.044665][T20688]  ? __phys_addr+0xba/0x170
[ 1183.049210][T20688]  ? dev_addr_check+0x20/0x240
[ 1183.054030][T20688]  ? netif_stacked_transfer_operstate+0x210/0x210
[ 1183.060573][T20688]  ? dev_addr_mod+0x2b9/0x3b0
[ 1183.065380][T20688]  ? tun_net_initialize+0x158/0x480
[ 1183.070628][T20688]  ? tun_not_capable+0x1f0/0x1f0
[ 1183.075618][T20688]  ? alloc_netdev_mqs+0xc34/0x1040
[ 1183.080782][T20688]  tun_set_iff+0x848/0xed0
[ 1183.085256][T20688]  __tun_chr_ioctl+0x7ee/0x2000
[ 1183.090154][T20688]  ? tun_flow_create+0x310/0x310
[ 1183.095147][T20688]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1183.100120][T20688]  ? security_file_ioctl+0x80/0xa0
[ 1183.105282][T20688]  ? tun_chr_poll+0x630/0x630
[ 1183.110002][T20688]  __se_sys_ioctl+0xfd/0x170
[ 1183.114631][T20688]  do_syscall_64+0x55/0xa0
[ 1183.119077][T20688]  ? clear_bhb_loop+0x40/0x90
[ 1183.123794][T20688]  ? clear_bhb_loop+0x40/0x90
[ 1183.128513][T20688]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1183.134455][T20688] RIP: 0033:0x7f34d759acb9
[ 1183.139020][T20688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1183.158658][T20688] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1183.167108][T20688] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1183.175116][T20688] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000006
[ 1183.183110][T20688] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1183.191107][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1183.199096][T20688] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1183.207202][T20688]  </TASK>
[ 1183.814875][T20713] ip6_vti0: mtu greater than device maximum
[ 1183.831670][T20713] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5180'.
[ 1183.842315][T20713] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1183.856302][T20713] openvswitch: netlink: Message has 1 unknown bytes.
[ 1184.217474][T20719] netlink: 'syz.3.5183': attribute type 10 has an invalid length.
[ 1184.266321][T20719] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5183'.
[ 1185.033339][T20741] netlink: 'syz.3.5192': attribute type 3 has an invalid length.
[ 1185.052377][T20741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5192'.
[ 1185.085215][T20741] sctp: [Deprecated]: syz.3.5192 (pid 20741) Use of int in maxseg socket option.
[ 1185.085215][T20741] Use struct sctp_assoc_value instead
[ 1185.944699][T20758] netlink: 'syz.0.5199': attribute type 3 has an invalid length.
[ 1185.952636][T20758] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5199'.
[ 1186.709588][T20771] netlink: 'syz.1.5203': attribute type 11 has an invalid length.
[ 1186.936530][T20775] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5205'.
[ 1187.304144][T20787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5209'.
[ 1187.896178][T20787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5209'.
[ 1187.942558][T20789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5209'.
[ 1188.026431][T20782] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5208'.
[ 1188.687828][T20803] ip6gretap0: left allmulticast mode
[ 1188.817575][T20803] ip6gretap0: left promiscuous mode
[ 1188.877279][T20803] bridge0: port 3(ip6gretap0) entered disabled state
[ 1189.129674][T20803] bridge_slave_0: left allmulticast mode
[ 1189.146367][T20803] bridge_slave_0: left promiscuous mode
[ 1189.168177][T20803] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1189.246694][T20805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5215'.
[ 1189.354126][T20805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5215'.
[ 1189.369622][T20810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5215'.
[ 1189.379254][T20812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5215'.
[ 1189.389087][T20812] FAULT_INJECTION: forcing a failure.
[ 1189.389087][T20812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1189.414944][T20812] CPU: 1 PID: 20812 Comm: syz.0.5215 Not tainted syzkaller #0
[ 1189.422481][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1189.432591][T20812] Call Trace:
[ 1189.435910][T20812]  <TASK>
[ 1189.438881][T20812]  dump_stack_lvl+0x18c/0x250
[ 1189.443612][T20812]  ? show_regs_print_info+0x20/0x20
[ 1189.448948][T20812]  ? load_image+0x400/0x400
[ 1189.453520][T20812]  ? __might_fault+0xaa/0x120
[ 1189.458258][T20812]  ? __lock_acquire+0x7d40/0x7d40
[ 1189.463383][T20812]  should_fail_ex+0x39d/0x4d0
[ 1189.468136][T20812]  _copy_from_user+0x2f/0xe0
[ 1189.472796][T20812]  kstrtouint_from_user+0xde/0x170
[ 1189.477974][T20812]  ? kstrtol_from_user+0x190/0x190
[ 1189.483179][T20812]  proc_fail_nth_write+0x8f/0x250
[ 1189.488280][T20812]  ? proc_fail_nth_read+0x260/0x260
[ 1189.493560][T20812]  ? proc_fail_nth_read+0x260/0x260
[ 1189.498829][T20812]  vfs_write+0x296/0x990
[ 1189.503137][T20812]  ? file_end_write+0x250/0x250
[ 1189.508053][T20812]  ? __fget_files+0x28/0x4b0
[ 1189.512709][T20812]  ? __fget_files+0x28/0x4b0
[ 1189.517363][T20812]  ? __fget_files+0x43d/0x4b0
[ 1189.522103][T20812]  ? __fdget_pos+0x2a3/0x330
[ 1189.526742][T20812]  ? ksys_write+0x75/0x260
[ 1189.531213][T20812]  ksys_write+0x150/0x260
[ 1189.535614][T20812]  ? __ia32_sys_read+0x90/0x90
[ 1189.540442][T20812]  ? lockdep_hardirqs_on+0x98/0x150
[ 1189.545703][T20812]  do_syscall_64+0x55/0xa0
[ 1189.550163][T20812]  ? clear_bhb_loop+0x40/0x90
[ 1189.554891][T20812]  ? clear_bhb_loop+0x40/0x90
[ 1189.559633][T20812]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1189.565588][T20812] RIP: 0033:0x7fd70c15b58e
[ 1189.570055][T20812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1189.589809][T20812] RSP: 002b:00007fd70a3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1189.598289][T20812] RAX: ffffffffffffffda RBX: 00007fd70a3f66c0 RCX: 00007fd70c15b58e
[ 1189.606318][T20812] RDX: 0000000000000001 RSI: 00007fd70a3f60a0 RDI: 0000000000000004
[ 1189.614356][T20812] RBP: 00007fd70a3f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1189.622391][T20812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1189.630411][T20812] R13: 00007fd70c416218 R14: 00007fd70c416180 R15: 00007fffa47da388
[ 1189.638455][T20812]  </TASK>
[ 1189.775945][T20817] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5218'.
[ 1189.877403][T20824] FAULT_INJECTION: forcing a failure.
[ 1189.877403][T20824] name failslab, interval 1, probability 0, space 0, times 0
[ 1189.890765][T20824] CPU: 1 PID: 20824 Comm: syz.0.5220 Not tainted syzkaller #0
[ 1189.898295][T20824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1189.908505][T20824] Call Trace:
[ 1189.911835][T20824]  <TASK>
[ 1189.914820][T20824]  dump_stack_lvl+0x18c/0x250
[ 1189.919597][T20824]  ? show_regs_print_info+0x20/0x20
[ 1189.924845][T20824]  ? load_image+0x400/0x400
[ 1189.929425][T20824]  should_fail_ex+0x39d/0x4d0
[ 1189.934190][T20824]  should_failslab+0x9/0x20
[ 1189.938763][T20824]  slab_pre_alloc_hook+0x59/0x310
[ 1189.943879][T20824]  kmem_cache_alloc_node+0x60/0x320
[ 1189.949155][T20824]  ? __alloc_skb+0x103/0x2c0
[ 1189.953822][T20824]  __alloc_skb+0x103/0x2c0
[ 1189.958326][T20824]  fdb_notify+0xa6/0x160
[ 1189.962648][T20824]  fdb_add_local+0x155/0x250
[ 1189.967484][T20824]  ? br_fdb_add_local+0x2a/0x50
[ 1189.972420][T20824]  br_fdb_add_local+0x3a/0x50
[ 1189.977173][T20824]  __vlan_add+0x67f/0x26b0
[ 1189.981642][T20824]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1189.987581][T20824]  ? _raw_spin_unlock+0x40/0x40
[ 1189.992520][T20824]  ? pcpu_alloc+0x11db/0x1860
[ 1189.997280][T20824]  ? br_vlan_add+0x950/0x950
[ 1190.001966][T20824]  br_vlan_add+0x431/0x950
[ 1190.006468][T20824]  __vlan_add+0x485/0x26b0
[ 1190.011005][T20824]  ? br_vlan_add+0x950/0x950
[ 1190.015666][T20824]  nbp_vlan_add+0x262/0x3c0
[ 1190.020239][T20824]  br_vlan_info+0x101/0x460
[ 1190.024823][T20824]  ? br_process_vlan_info+0x8a0/0x8a0
[ 1190.030259][T20824]  ? perf_swevent_event+0x114/0x630
[ 1190.035551][T20824]  br_process_vlan_info+0x316/0x8a0
[ 1190.040920][T20824]  ? br_getlink+0x180/0x180
[ 1190.045481][T20824]  ? __lock_acquire+0x1347/0x7d40
[ 1190.050581][T20824]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1190.056479][T20824]  br_afspec+0x399/0x5f0
[ 1190.060821][T20824]  ? br_setport+0x1680/0x1680
[ 1190.065590][T20824]  br_setlink+0x2dc/0x8b0
[ 1190.069998][T20824]  ? br_vlan_info+0x460/0x460
[ 1190.074821][T20824]  ? trace_contention_end+0x39/0xe0
[ 1190.080089][T20824]  ? __mutex_lock+0x315/0xcc0
[ 1190.084831][T20824]  ? mutex_is_locked+0x12/0x40
[ 1190.089680][T20824]  rtnl_bridge_setlink+0x5b7/0x7d0
[ 1190.094875][T20824]  ? rtnl_bridge_dellink+0x6f0/0x6f0
[ 1190.100237][T20824]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1190.105506][T20824]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1190.110689][T20824]  ? rtnl_bridge_dellink+0x6f0/0x6f0
[ 1190.116040][T20824]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1190.121074][T20824]  ? rtnetlink_bind+0x80/0x80
[ 1190.125900][T20824]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1190.131756][T20824]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1190.137858][T20824]  ? __dev_queue_xmit+0x26b/0x36b0
[ 1190.143050][T20824]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1190.148825][T20824]  ? perf_trace_lock+0x304/0x3b0
[ 1190.153833][T20824]  netlink_rcv_skb+0x241/0x4d0
[ 1190.158646][T20824]  ? rtnetlink_bind+0x80/0x80
[ 1190.163389][T20824]  ? netlink_ack+0x1180/0x1180
[ 1190.168229][T20824]  ? __lock_acquire+0x7d40/0x7d40
[ 1190.173423][T20824]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1190.178675][T20824]  netlink_unicast+0x751/0x8d0
[ 1190.183536][T20824]  netlink_sendmsg+0x8d0/0xbf0
[ 1190.188482][T20824]  ? perf_trace_lock+0x304/0x3b0
[ 1190.193530][T20824]  ? netlink_getsockopt+0x590/0x590
[ 1190.198798][T20824]  ? aa_sock_msg_perm+0x94/0x150
[ 1190.203966][T20824]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1190.209306][T20824]  ? security_socket_sendmsg+0x80/0xa0
[ 1190.214836][T20824]  ? netlink_getsockopt+0x590/0x590
[ 1190.220101][T20824]  ____sys_sendmsg+0x5ba/0x960
[ 1190.224947][T20824]  ? __asan_memset+0x22/0x40
[ 1190.229606][T20824]  ? __sys_sendmsg_sock+0x30/0x30
[ 1190.234684][T20824]  ? __import_iovec+0x5f2/0x850
[ 1190.239623][T20824]  ? import_iovec+0x73/0xa0
[ 1190.244209][T20824]  ___sys_sendmsg+0x2a6/0x360
[ 1190.248978][T20824]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1190.253858][T20824]  ? __lock_acquire+0x7d40/0x7d40
[ 1190.259006][T20824]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1190.263924][T20824]  ? __x64_sys_sendmsg+0x80/0x80
[ 1190.268959][T20824]  ? lockdep_hardirqs_on+0x98/0x150
[ 1190.274213][T20824]  do_syscall_64+0x55/0xa0
[ 1190.278766][T20824]  ? clear_bhb_loop+0x40/0x90
[ 1190.283518][T20824]  ? clear_bhb_loop+0x40/0x90
[ 1190.288302][T20824]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.294336][T20824] RIP: 0033:0x7fd70c19acb9
[ 1190.298790][T20824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1190.318470][T20824] RSP: 002b:00007fd70cf8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1190.327001][T20824] RAX: ffffffffffffffda RBX: 00007fd70c416090 RCX: 00007fd70c19acb9
[ 1190.335024][T20824] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[ 1190.343047][T20824] RBP: 00007fd70cf8d090 R08: 0000000000000000 R09: 0000000000000000
[ 1190.351200][T20824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1190.359335][T20824] R13: 00007fd70c416128 R14: 00007fd70c416090 R15: 00007fffa47da388
[ 1190.367424][T20824]  </TASK>
[ 1190.385459][T20824] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5220'.
[ 1193.619463][T20845] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5229'.
[ 1193.637691][T20845] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5229'.
[ 1193.705829][T20845] netlink: 'syz.3.5229': attribute type 10 has an invalid length.
[ 1193.754737][T20845] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5229'.
[ 1194.161294][T20850] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5230'.
[ 1197.558653][T20872] C: renamed from team_slave_0 (while UP)
[ 1197.568132][T20872] netlink: 'syz.2.5239': attribute type 2 has an invalid length.
[ 1197.582980][T20872] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5239'.
[ 1197.594698][T20872] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1198.254610][T20892] FAULT_INJECTION: forcing a failure.
[ 1198.254610][T20892] name failslab, interval 1, probability 0, space 0, times 0
[ 1198.275069][T20892] CPU: 1 PID: 20892 Comm: syz.3.5245 Not tainted syzkaller #0
[ 1198.282707][T20892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1198.292813][T20892] Call Trace:
[ 1198.296231][T20892]  <TASK>
[ 1198.299209][T20892]  dump_stack_lvl+0x18c/0x250
[ 1198.303941][T20892]  ? show_regs_print_info+0x20/0x20
[ 1198.309187][T20892]  ? load_image+0x400/0x400
[ 1198.313744][T20892]  ? __might_sleep+0xe0/0xe0
[ 1198.318386][T20892]  ? __lock_acquire+0x7d40/0x7d40
[ 1198.323467][T20892]  should_fail_ex+0x39d/0x4d0
[ 1198.328200][T20892]  should_failslab+0x9/0x20
[ 1198.332748][T20892]  slab_pre_alloc_hook+0x59/0x310
[ 1198.337831][T20892]  ? __lock_acquire+0x7d40/0x7d40
[ 1198.343075][T20892]  kmem_cache_alloc_node+0x60/0x320
[ 1198.348323][T20892]  ? __alloc_skb+0x103/0x2c0
[ 1198.352960][T20892]  __alloc_skb+0x103/0x2c0
[ 1198.357433][T20892]  netlink_sendmsg+0x66a/0xbf0
[ 1198.362347][T20892]  ? netlink_getsockopt+0x590/0x590
[ 1198.367624][T20892]  ? aa_sock_msg_perm+0x94/0x150
[ 1198.372696][T20892]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1198.378026][T20892]  ? security_socket_sendmsg+0x80/0xa0
[ 1198.383524][T20892]  ? netlink_getsockopt+0x590/0x590
[ 1198.388796][T20892]  ____sys_sendmsg+0x5ba/0x960
[ 1198.393647][T20892]  ? __asan_memset+0x22/0x40
[ 1198.398303][T20892]  ? __sys_sendmsg_sock+0x30/0x30
[ 1198.403389][T20892]  ? __import_iovec+0x5f2/0x850
[ 1198.408308][T20892]  ? import_iovec+0x73/0xa0
[ 1198.412864][T20892]  ___sys_sendmsg+0x2a6/0x360
[ 1198.417598][T20892]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1198.422450][T20892]  ? __lock_acquire+0x7d40/0x7d40
[ 1198.427651][T20892]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1198.432548][T20892]  ? __x64_sys_sendmsg+0x80/0x80
[ 1198.437584][T20892]  ? lockdep_hardirqs_on+0x98/0x150
[ 1198.442833][T20892]  do_syscall_64+0x55/0xa0
[ 1198.447286][T20892]  ? clear_bhb_loop+0x40/0x90
[ 1198.452026][T20892]  ? clear_bhb_loop+0x40/0x90
[ 1198.456766][T20892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1198.462702][T20892] RIP: 0033:0x7f34d759acb9
[ 1198.467162][T20892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1198.486899][T20892] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1198.495450][T20892] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1198.503461][T20892] RDX: 0000000000040000 RSI: 0000200000000580 RDI: 0000000000000004
[ 1198.511472][T20892] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1198.519494][T20892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1198.527546][T20892] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1198.535625][T20892]  </TASK>
[ 1198.562356][T20890] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5244'.
[ 1199.787644][T20906] netlink: 'syz.3.5251': attribute type 39 has an invalid length.
[ 1199.877915][T20911] netlink: 'syz.2.5250': attribute type 13 has an invalid length.
[ 1199.904616][T20913] FAULT_INJECTION: forcing a failure.
[ 1199.904616][T20913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1199.946306][T20911] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5250'.
[ 1199.946380][T20913] CPU: 1 PID: 20913 Comm: syz.1.5253 Not tainted syzkaller #0
[ 1199.962971][T20913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1199.973072][T20913] Call Trace:
[ 1199.976383][T20913]  <TASK>
[ 1199.979348][T20913]  dump_stack_lvl+0x18c/0x250
[ 1199.984062][T20913]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1199.990252][T20913]  ? show_regs_print_info+0x20/0x20
[ 1199.995481][T20913]  ? load_image+0x400/0x400
[ 1200.000122][T20913]  should_fail_ex+0x39d/0x4d0
[ 1200.004866][T20913]  _copy_from_user+0x2f/0xe0
[ 1200.009504][T20913]  __sys_bpf+0x23e/0x890
[ 1200.013787][T20913]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1200.019386][T20913]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1200.025606][T20913]  __x64_sys_bpf+0x7c/0x90
[ 1200.030056][T20913]  do_syscall_64+0x55/0xa0
[ 1200.034512][T20913]  ? clear_bhb_loop+0x40/0x90
[ 1200.039228][T20913]  ? clear_bhb_loop+0x40/0x90
[ 1200.044026][T20913]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1200.049984][T20913] RIP: 0033:0x7f4a8bb9acb9
[ 1200.054495][T20913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1200.074134][T20913] RSP: 002b:00007f4a8cb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1200.082598][T20913] RAX: ffffffffffffffda RBX: 00007f4a8be15fa0 RCX: 00007f4a8bb9acb9
[ 1200.090597][T20913] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 1200.098713][T20913] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1200.106796][T20913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1200.114879][T20913] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1200.122904][T20913]  </TASK>
[ 1200.160926][T20911] : renamed from syz_tun (while UP)
[ 1200.199355][T20911] : refused to change device tx_queue_len
[ 1200.214045][T20911] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1200.312239][T20922] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.5256'.
[ 1200.323621][T20921] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.5256'.
[ 1200.333491][T20921] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[ 1200.341827][T20922] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[ 1200.370880][T20919] C: renamed from team_slave_0 (while UP)
[ 1200.381125][T20919] netlink: 'syz.0.5255': attribute type 2 has an invalid length.
[ 1200.389184][T20919] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5255'.
[ 1200.399072][T20919] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1200.762391][T20930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5257'.
[ 1201.915709][T20933] delete_channel: no stack
[ 1201.925131][T20933] delete_channel: no stack
[ 1202.205251][T20952] FAULT_INJECTION: forcing a failure.
[ 1202.205251][T20952] name failslab, interval 1, probability 0, space 0, times 0
[ 1202.223004][T20952] CPU: 0 PID: 20952 Comm: syz.1.5265 Not tainted syzkaller #0
[ 1202.230581][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1202.240709][T20952] Call Trace:
[ 1202.244045][T20952]  <TASK>
[ 1202.247020][T20952]  dump_stack_lvl+0x18c/0x250
[ 1202.251748][T20952]  ? show_regs_print_info+0x20/0x20
[ 1202.256997][T20952]  ? load_image+0x400/0x400
[ 1202.261574][T20952]  ? __might_sleep+0xe0/0xe0
[ 1202.266300][T20952]  ? __lock_acquire+0x7d40/0x7d40
[ 1202.271636][T20952]  ? __fget_files+0x28/0x4b0
[ 1202.276313][T20952]  should_fail_ex+0x39d/0x4d0
[ 1202.281043][T20952]  should_failslab+0x9/0x20
[ 1202.285567][T20952]  slab_pre_alloc_hook+0x59/0x310
[ 1202.290617][T20952]  kmem_cache_alloc+0x5a/0x2d0
[ 1202.295400][T20952]  ? getname_flags+0xbb/0x500
[ 1202.300096][T20952]  getname_flags+0xbb/0x500
[ 1202.304614][T20952]  ? syscall_enter_from_user_mode+0x25/0x80
[ 1202.310537][T20952]  __x64_sys_unlink+0x3c/0x50
[ 1202.315263][T20952]  do_syscall_64+0x55/0xa0
[ 1202.319692][T20952]  ? clear_bhb_loop+0x40/0x90
[ 1202.324403][T20952]  ? clear_bhb_loop+0x40/0x90
[ 1202.329126][T20952]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1202.335044][T20952] RIP: 0033:0x7f4a8bb9acb9
[ 1202.339487][T20952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.359295][T20952] RSP: 002b:00007f4a8cb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 1202.367734][T20952] RAX: ffffffffffffffda RBX: 00007f4a8be15fa0 RCX: 00007f4a8bb9acb9
[ 1202.375778][T20952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[ 1202.384144][T20952] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1202.392264][T20952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1202.400301][T20952] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1202.408352][T20952]  </TASK>
[ 1202.925630][T20960] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5267'.
[ 1203.391393][T20969] C: renamed from team_slave_0 (while UP)
[ 1203.522746][T20969] netlink: 'syz.1.5270': attribute type 2 has an invalid length.
[ 1203.537756][T20969] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5270'.
[ 1203.602502][T20969] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1203.701293][T20977] netlink: 'syz.2.5271': attribute type 5 has an invalid length.
[ 1203.711874][T20977] netlink: 'syz.2.5271': attribute type 1 has an invalid length.
[ 1203.728091][T20977] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.5271'.
[ 1205.982483][T21014] netlink: 'syz.3.5283': attribute type 27 has an invalid length.
[ 1206.009296][T21014] netlink: 'syz.3.5283': attribute type 3 has an invalid length.
[ 1206.038592][T21014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5283'.
[ 1206.682409][T21025] FAULT_INJECTION: forcing a failure.
[ 1206.682409][T21025] name failslab, interval 1, probability 0, space 0, times 0
[ 1206.696772][T21025] CPU: 1 PID: 21025 Comm: syz.3.5285 Not tainted syzkaller #0
[ 1206.704304][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1206.714410][T21025] Call Trace:
[ 1206.717738][T21025]  <TASK>
[ 1206.720719][T21025]  dump_stack_lvl+0x18c/0x250
[ 1206.725450][T21025]  ? show_regs_print_info+0x20/0x20
[ 1206.730699][T21025]  ? load_image+0x400/0x400
[ 1206.735245][T21025]  ? __lock_acquire+0x7d40/0x7d40
[ 1206.740309][T21025]  ? __lock_acquire+0x1273/0x7d40
[ 1206.745452][T21025]  should_fail_ex+0x39d/0x4d0
[ 1206.750258][T21025]  should_failslab+0x9/0x20
[ 1206.754798][T21025]  slab_pre_alloc_hook+0x59/0x310
[ 1206.759864][T21025]  ? fib_create_info+0xa61/0x2460
[ 1206.764918][T21025]  ? fib_create_info+0xa61/0x2460
[ 1206.769972][T21025]  __kmem_cache_alloc_node+0x53/0x250
[ 1206.775384][T21025]  ? fib_create_info+0xa61/0x2460
[ 1206.780432][T21025]  __kmalloc+0xa4/0x230
[ 1206.784624][T21025]  fib_create_info+0xa61/0x2460
[ 1206.789511][T21025]  ? trace_event_raw_event_lock+0x250/0x250
[ 1206.795466][T21025]  fib_table_insert+0xc6/0x1b20
[ 1206.800358][T21025]  ? l3mdev_fib_table+0x18/0x160
[ 1206.805327][T21025]  ? apparmor_capable+0x137/0x1a0
[ 1206.810410][T21025]  ? __might_fault+0xaa/0x120
[ 1206.815110][T21025]  ? full_name_hash+0x92/0xe0
[ 1206.819914][T21025]  ? l3mdev_fib_table+0x18/0x160
[ 1206.824877][T21025]  ? fib_new_table+0x10a/0x2d0
[ 1206.829671][T21025]  ip_rt_ioctl+0x4dc/0x11b0
[ 1206.834204][T21025]  ? fib_validate_source+0x1320/0x1320
[ 1206.840061][T21025]  ? __might_fault+0xc6/0x120
[ 1206.844776][T21025]  ? __might_fault+0xaa/0x120
[ 1206.849505][T21025]  inet_ioctl+0x49e/0x560
[ 1206.853883][T21025]  ? tomoyo_path_number_perm+0x217/0x620
[ 1206.859639][T21025]  ? inet_shutdown+0x370/0x370
[ 1206.864457][T21025]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1206.870118][T21025]  ? tomoyo_path_number_perm+0x500/0x620
[ 1206.875785][T21025]  ? __kmem_cache_free+0xba/0x1e0
[ 1206.880864][T21025]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1206.886365][T21025]  sock_do_ioctl+0xfc/0x310
[ 1206.890906][T21025]  ? sock_show_fdinfo+0xb0/0xb0
[ 1206.895805][T21025]  sock_ioctl+0x5ba/0x7e0
[ 1206.900178][T21025]  ? sock_poll+0x3e0/0x3e0
[ 1206.904644][T21025]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1206.909612][T21025]  ? security_file_ioctl+0x80/0xa0
[ 1206.914769][T21025]  ? sock_poll+0x3e0/0x3e0
[ 1206.919221][T21025]  __se_sys_ioctl+0xfd/0x170
[ 1206.923850][T21025]  do_syscall_64+0x55/0xa0
[ 1206.928295][T21025]  ? clear_bhb_loop+0x40/0x90
[ 1206.933000][T21025]  ? clear_bhb_loop+0x40/0x90
[ 1206.937723][T21025]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1206.943645][T21025] RIP: 0033:0x7f34d759acb9
[ 1206.948088][T21025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1206.967723][T21025] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1206.976175][T21025] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1206.984183][T21025] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003
[ 1206.992185][T21025] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1207.000186][T21025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1207.008185][T21025] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1207.016205][T21025]  </TASK>
[ 1207.408024][T21038] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5290'.
[ 1208.208704][T21050] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1208.235395][T21050] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5294'.
[ 1208.347828][T21051] netlink: 'syz.1.5294': attribute type 1 has an invalid length.
[ 1208.388222][T21051] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.5294'.
[ 1208.601594][T21056] netlink: 'syz.2.5296': attribute type 33 has an invalid length.
[ 1208.609946][T21056] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5296'.
[ 1208.636394][T21053] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5303'.
[ 1210.034722][T21088] netlink: 'syz.0.5306': attribute type 17 has an invalid length.
[ 1210.070047][T21088] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.5306'.
[ 1210.280761][T21093] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5309'.
[ 1213.573277][T21119] netlink: 'syz.3.5317': attribute type 13 has an invalid length.
[ 1213.601860][T21119] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5317'.
[ 1213.635842][T21119] : renamed from syz_tun (while UP)
[ 1213.659985][T21119] : refused to change device tx_queue_len
[ 1213.665901][T21119] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1213.779895][T21127] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5320'.
[ 1213.848356][T21129] FAULT_INJECTION: forcing a failure.
[ 1213.848356][T21129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1213.896864][T21129] CPU: 1 PID: 21129 Comm: syz.1.5321 Not tainted syzkaller #0
[ 1213.904497][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1213.914872][T21129] Call Trace:
[ 1213.918236][T21129]  <TASK>
[ 1213.921218][T21129]  dump_stack_lvl+0x18c/0x250
[ 1213.925949][T21129]  ? show_regs_print_info+0x20/0x20
[ 1213.931195][T21129]  ? load_image+0x400/0x400
[ 1213.935764][T21129]  ? __lock_acquire+0x7d40/0x7d40
[ 1213.940852][T21129]  should_fail_ex+0x39d/0x4d0
[ 1213.945595][T21129]  _copy_from_user+0x2f/0xe0
[ 1213.950249][T21129]  __copy_msghdr+0x3bb/0x580
[ 1213.954951][T21129]  ___sys_sendmsg+0x214/0x360
[ 1213.959709][T21129]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1213.964556][T21129]  ? __lock_acquire+0x7d40/0x7d40
[ 1213.969709][T21129]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1213.974617][T21129]  ? __x64_sys_sendmsg+0x80/0x80
[ 1213.979615][T21129]  ? lockdep_hardirqs_on+0x98/0x150
[ 1213.984855][T21129]  do_syscall_64+0x55/0xa0
[ 1213.989305][T21129]  ? clear_bhb_loop+0x40/0x90
[ 1213.994018][T21129]  ? clear_bhb_loop+0x40/0x90
[ 1213.998727][T21129]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1214.004663][T21129] RIP: 0033:0x7f4a8bb9acb9
[ 1214.009116][T21129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1214.028759][T21129] RSP: 002b:00007f4a8cb2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1214.037210][T21129] RAX: ffffffffffffffda RBX: 00007f4a8be15fa0 RCX: 00007f4a8bb9acb9
[ 1214.045215][T21129] RDX: 0000000000004000 RSI: 0000200000000500 RDI: 0000000000000008
[ 1214.053219][T21129] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1214.061219][T21129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1214.069239][T21129] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1214.077297][T21129]  </TASK>
[ 1214.227715][T21133] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5322'.
[ 1220.691144][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[ 1221.914828][T21186] FAULT_INJECTION: forcing a failure.
[ 1221.914828][T21186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1221.956160][T21186] CPU: 1 PID: 21186 Comm: syz.2.5343 Not tainted syzkaller #0
[ 1221.963763][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1221.973929][T21186] Call Trace:
[ 1221.977310][T21186]  <TASK>
[ 1221.980349][T21186]  dump_stack_lvl+0x18c/0x250
[ 1221.985173][T21186]  ? show_regs_print_info+0x20/0x20
[ 1221.990496][T21186]  ? load_image+0x400/0x400
[ 1221.995156][T21186]  ? __might_fault+0xaa/0x120
[ 1222.000044][T21186]  ? __lock_acquire+0x7d40/0x7d40
[ 1222.005213][T21186]  should_fail_ex+0x39d/0x4d0
[ 1222.010055][T21186]  _copy_from_user+0x2f/0xe0
[ 1222.014794][T21186]  ___sys_sendmsg+0x1c7/0x360
[ 1222.019584][T21186]  ? get_pid_task+0x20/0x1e0
[ 1222.024338][T21186]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1222.029457][T21186]  ? __lock_acquire+0x7d40/0x7d40
[ 1222.034768][T21186]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1222.039742][T21186]  ? __x64_sys_sendmsg+0x80/0x80
[ 1222.044846][T21186]  ? lockdep_hardirqs_on+0x98/0x150
[ 1222.050150][T21186]  do_syscall_64+0x55/0xa0
[ 1222.054723][T21186]  ? clear_bhb_loop+0x40/0x90
[ 1222.059521][T21186]  ? clear_bhb_loop+0x40/0x90
[ 1222.064305][T21186]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1222.070273][T21186] RIP: 0033:0x7f1a1979acb9
[ 1222.074766][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1222.094523][T21186] RSP: 002b:00007f1a1a60f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1222.103019][T21186] RAX: ffffffffffffffda RBX: 00007f1a19a15fa0 RCX: 00007f1a1979acb9
[ 1222.111062][T21186] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[ 1222.119103][T21186] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1222.127135][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1222.135172][T21186] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1222.143388][T21186]  </TASK>
[ 1222.181701][T21190] -1: renamed from syzkaller0
[ 1223.294342][T21200] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5348'.
[ 1225.111727][T21204] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 1228.474524][T21222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5357'.
[ 1228.491937][T21224] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5359'.
[ 1228.502054][T21222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5357'.
[ 1228.530276][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5357'.
[ 1228.739368][T21222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5357'.
[ 1229.657995][T21243] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5364'.
[ 1229.749567][T21245] syzkaller0: entered allmulticast mode
[ 1231.796468][T21245] syzkaller0: entered promiscuous mode
[ 1231.808750][T21245] syzkaller0: left allmulticast mode
[ 1231.988970][T21250] syz.3.5368[21250] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1231.989219][T21250] syz.3.5368[21250] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1232.017358][T21250] syz.3.5368[21250] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1232.031042][T21250] syz.3.5368[21250] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1232.553764][T21262] netlink: 'syz.1.5372': attribute type 10 has an invalid length.
[ 1232.583246][T21262] netlink: 'syz.1.5372': attribute type 10 has an invalid length.
[ 1232.592886][T21262] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.5372'.
[ 1232.626346][T21262] openvswitch: netlink: Message has 4 unknown bytes.
[ 1232.879237][T21272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1232.904894][T21272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1232.925872][T21267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1234.190782][T21284] __nla_validate_parse: 1 callbacks suppressed
[ 1234.190827][T21284] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5378'.
[ 1236.610044][T21320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5388'.
[ 1236.654076][T21320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5388'.
[ 1236.715354][T21311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5388'.
[ 1236.862097][T21311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5388'.
[ 1236.985673][T21326] netlink: 'syz.0.5394': attribute type 41 has an invalid length.
[ 1237.185399][T21331] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5396'.
[ 1239.094539][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.103947][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.525503][T21358] netlink: 'syz.0.5406': attribute type 10 has an invalid length.
[ 1240.584395][T21358] 8021q: adding VLAN 0 to HW filter on device team0
[ 1240.637134][T21358] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1240.932494][T21369] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5410'.
[ 1241.011902][T21375] FAULT_INJECTION: forcing a failure.
[ 1241.011902][T21375] name failslab, interval 1, probability 0, space 0, times 0
[ 1241.037702][T21375] CPU: 0 PID: 21375 Comm: syz.0.5412 Not tainted syzkaller #0
[ 1241.045247][T21375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1241.055361][T21375] Call Trace:
[ 1241.058699][T21375]  <TASK>
[ 1241.061676][T21375]  dump_stack_lvl+0x18c/0x250
[ 1241.066413][T21375]  ? show_regs_print_info+0x20/0x20
[ 1241.071750][T21375]  ? load_image+0x400/0x400
[ 1241.076316][T21375]  ? __might_sleep+0xe0/0xe0
[ 1241.081311][T21375]  ? __lock_acquire+0x7d40/0x7d40
[ 1241.086478][T21375]  should_fail_ex+0x39d/0x4d0
[ 1241.091218][T21375]  should_failslab+0x9/0x20
[ 1241.095785][T21375]  slab_pre_alloc_hook+0x59/0x310
[ 1241.100887][T21375]  kmem_cache_alloc_node+0x60/0x320
[ 1241.106143][T21375]  ? __alloc_skb+0x103/0x2c0
[ 1241.110788][T21375]  __alloc_skb+0x103/0x2c0
[ 1241.115270][T21375]  pfkey_sendmsg+0x1a8/0x10e0
[ 1241.120009][T21375]  ? __might_sleep+0xe0/0xe0
[ 1241.124666][T21375]  ? mark_lock+0x94/0x320
[ 1241.129061][T21375]  ? __lock_acquire+0x1273/0x7d40
[ 1241.134138][T21375]  ? pfkey_release+0x320/0x320
[ 1241.138973][T21375]  ? aa_sk_perm+0x83c/0x970
[ 1241.143556][T21375]  ? aa_af_perm+0x330/0x330
[ 1241.148145][T21375]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 1241.154616][T21375]  ? aa_sock_msg_perm+0x94/0x150
[ 1241.159614][T21375]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1241.164952][T21375]  ? security_socket_sendmsg+0x80/0xa0
[ 1241.170468][T21375]  ? pfkey_release+0x320/0x320
[ 1241.175288][T21375]  ____sys_sendmsg+0x5ba/0x960
[ 1241.180117][T21375]  ? __asan_memset+0x22/0x40
[ 1241.184761][T21375]  ? __sys_sendmsg_sock+0x30/0x30
[ 1241.189829][T21375]  ? __import_iovec+0x5f2/0x850
[ 1241.194742][T21375]  ? import_iovec+0x73/0xa0
[ 1241.199306][T21375]  ___sys_sendmsg+0x2a6/0x360
[ 1241.204036][T21375]  ? get_pid_task+0x20/0x1e0
[ 1241.208689][T21375]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1241.213524][T21375]  ? __lock_acquire+0x7d40/0x7d40
[ 1241.218621][T21375]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1241.223544][T21375]  ? __x64_sys_sendmsg+0x80/0x80
[ 1241.228560][T21375]  ? lockdep_hardirqs_on+0x98/0x150
[ 1241.233818][T21375]  do_syscall_64+0x55/0xa0
[ 1241.238280][T21375]  ? clear_bhb_loop+0x40/0x90
[ 1241.243010][T21375]  ? clear_bhb_loop+0x40/0x90
[ 1241.247740][T21375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1241.253693][T21375] RIP: 0033:0x7fd70c19acb9
[ 1241.258151][T21375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1241.277809][T21375] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1241.286370][T21375] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1241.294391][T21375] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004
[ 1241.302431][T21375] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1241.310457][T21375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1241.318475][T21375] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1241.326511][T21375]  </TASK>
[ 1241.673434][T21389] netlink: 'syz.1.5418': attribute type 10 has an invalid length.
[ 1241.757485][T21389] 8021q: adding VLAN 0 to HW filter on device team0
[ 1241.787230][T21389] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1242.011393][T21401] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5422'.
[ 1244.862876][T21433] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5434'.
[ 1244.912700][T21435] netlink: 'syz.3.5435': attribute type 10 has an invalid length.
[ 1245.019541][T21435] 8021q: adding VLAN 0 to HW filter on device team0
[ 1245.115251][T21435] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1245.363892][T21441] netlink: 'syz.2.5438': attribute type 29 has an invalid length.
[ 1245.390813][T21441] netlink: 'syz.2.5438': attribute type 29 has an invalid length.
[ 1245.432952][T21441] netlink: 'syz.2.5438': attribute type 29 has an invalid length.
[ 1246.450339][T19511] Bluetooth: hci0: command 0x0406 tx timeout
[ 1247.625868][T21468] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5446'.
[ 1249.799526][T21470] netlink: 'syz.0.5447': attribute type 10 has an invalid length.
[ 1249.822706][T21470] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.5447'.
[ 1249.838870][T21470] openvswitch: netlink: Flow key attr not present in new flow.
[ 1250.784316][T21477] netlink: 'syz.1.5449': attribute type 10 has an invalid length.
[ 1250.796627][T21477] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5449'.
[ 1252.235183][T21493] netlink: 'syz.0.5464': attribute type 10 has an invalid length.
[ 1252.262488][T21493] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.5464'.
[ 1252.285749][T21493] openvswitch: netlink: Flow key attr not present in new flow.
[ 1253.661636][T21506] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5459'.
[ 1255.890949][T21522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5468'.
[ 1268.928042][T21543] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5474'.
[ 1270.158182][T21563] netlink: 'syz.2.5481': attribute type 1 has an invalid length.
[ 1270.187510][T21563] netlink: 'syz.2.5481': attribute type 4 has an invalid length.
[ 1270.215089][T21563] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5481'.
[ 1270.677955][T21575] FAULT_INJECTION: forcing a failure.
[ 1270.677955][T21575] name failslab, interval 1, probability 0, space 0, times 0
[ 1270.692456][T21575] CPU: 0 PID: 21575 Comm: syz.0.5485 Not tainted syzkaller #0
[ 1270.700063][T21575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1270.710175][T21575] Call Trace:
[ 1270.713506][T21575]  <TASK>
[ 1270.716503][T21575]  dump_stack_lvl+0x18c/0x250
[ 1270.721238][T21575]  ? show_regs_print_info+0x20/0x20
[ 1270.725274][T21569] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5482'.
[ 1270.726553][T21575]  ? load_image+0x400/0x400
[ 1270.726592][T21575]  ? __might_sleep+0xe0/0xe0
[ 1270.738835][T21569] bond_slave_0: entered promiscuous mode
[ 1270.740137][T21575]  ? __lock_acquire+0x7d40/0x7d40
[ 1270.740174][T21575]  should_fail_ex+0x39d/0x4d0
[ 1270.744970][T21569] bond_slave_1: entered promiscuous mode
[ 1270.750553][T21575]  should_failslab+0x9/0x20
[ 1270.750585][T21575]  slab_pre_alloc_hook+0x59/0x310
[ 1270.750618][T21575]  ? ethnl_default_start+0x166/0x560
[ 1270.756647][T21569] team_slave_0: entered promiscuous mode
[ 1270.760326][T21575]  ? ethnl_default_start+0x166/0x560
[ 1270.760353][T21575]  __kmem_cache_alloc_node+0x53/0x250
[ 1270.766392][T21569] team_slave_1: entered promiscuous mode
[ 1270.770777][T21575]  ? ethnl_default_start+0x166/0x560
[ 1270.808528][T21575]  __kmalloc+0xa4/0x230
[ 1270.812760][T21575]  ethnl_default_start+0x166/0x560
[ 1270.817933][T21575]  genl_start+0x4b6/0x6b0
[ 1270.822358][T21575]  __netlink_dump_start+0x4a9/0x810
[ 1270.827618][T21575]  genl_family_rcv_msg_dumpit+0x214/0x310
[ 1270.833394][T21575]  ? genl_rcv_msg+0x7a0/0x7a0
[ 1270.838122][T21575]  ? genl_get_cmd+0x692/0x920
[ 1270.842849][T21575]  ? genl_family_rcv_msg_doit+0x310/0x310
[ 1270.848605][T21575]  ? genl_start+0x6b0/0x6b0
[ 1270.853125][T21575]  ? genl_dumpit+0x1a0/0x1a0
[ 1270.857737][T21575]  genl_rcv_msg+0x5e5/0x7a0
[ 1270.862267][T21575]  ? genl_bind+0x360/0x360
[ 1270.866696][T21575]  ? ethnl_default_doit+0xb80/0xb80
[ 1270.871906][T21575]  ? ethnl_default_start+0x560/0x560
[ 1270.877302][T21575]  ? ethnl_default_dumpit+0x8a0/0x8a0
[ 1270.882736][T21575]  netlink_rcv_skb+0x241/0x4d0
[ 1270.887553][T21575]  ? genl_bind+0x360/0x360
[ 1270.892024][T21575]  ? netlink_ack+0x1180/0x1180
[ 1270.896856][T21575]  ? __lock_acquire+0x7d40/0x7d40
[ 1270.901942][T21575]  ? down_read+0x1ac/0x2e0
[ 1270.906416][T21575]  genl_rcv+0x28/0x40
[ 1270.910450][T21575]  netlink_unicast+0x751/0x8d0
[ 1270.915296][T21575]  netlink_sendmsg+0x8d0/0xbf0
[ 1270.920101][T21575]  ? lockdep_hardirqs_on+0x98/0x150
[ 1270.925356][T21575]  ? netlink_getsockopt+0x590/0x590
[ 1270.930586][T21575]  ? aa_sock_msg_perm+0x94/0x150
[ 1270.935654][T21575]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1270.940967][T21575]  ? security_socket_sendmsg+0x80/0xa0
[ 1270.946542][T21575]  ? netlink_getsockopt+0x590/0x590
[ 1270.951866][T21575]  ____sys_sendmsg+0x5ba/0x960
[ 1270.956687][T21575]  ? __asan_memset+0x22/0x40
[ 1270.961312][T21575]  ? __sys_sendmsg_sock+0x30/0x30
[ 1270.966362][T21575]  ? __import_iovec+0x3fa/0x850
[ 1270.971256][T21575]  ? import_iovec+0x73/0xa0
[ 1270.975809][T21575]  ___sys_sendmsg+0x2a6/0x360
[ 1270.980521][T21575]  ? get_pid_task+0x20/0x1e0
[ 1270.985147][T21575]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1270.989959][T21575]  ? __lock_acquire+0x7d40/0x7d40
[ 1270.995050][T21575]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1270.999933][T21575]  ? __x64_sys_sendmsg+0x80/0x80
[ 1271.004920][T21575]  do_syscall_64+0x55/0xa0
[ 1271.009382][T21575]  ? clear_bhb_loop+0x40/0x90
[ 1271.014089][T21575]  ? clear_bhb_loop+0x40/0x90
[ 1271.018804][T21575]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1271.024756][T21575] RIP: 0033:0x7fd70c19acb9
[ 1271.029222][T21575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1271.048885][T21575] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1271.057445][T21575] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1271.065462][T21575] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000007
[ 1271.073471][T21575] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1271.081483][T21575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1271.089485][T21575] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1271.097504][T21575]  </TASK>
[ 1271.200868][T21577] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5486'.
[ 1271.369791][T21589] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5491'.
[ 1272.746755][T21607] syzkaller0: entered promiscuous mode
[ 1272.752307][T21607] syzkaller0: entered allmulticast mode
[ 1272.875422][T21612] netlink: 'syz.0.5500': attribute type 10 has an invalid length.
[ 1272.883578][T21612] netlink: 'syz.0.5500': attribute type 10 has an invalid length.
[ 1272.891826][T21612] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.5500'.
[ 1272.913941][T21612] openvswitch: netlink: Message has 4 unknown bytes.
[ 1273.957810][T21623] FAULT_INJECTION: forcing a failure.
[ 1273.957810][T21623] name failslab, interval 1, probability 0, space 0, times 0
[ 1273.983742][T21623] CPU: 1 PID: 21623 Comm: syz.3.5504 Not tainted syzkaller #0
[ 1273.991283][T21623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1274.001387][T21623] Call Trace:
[ 1274.004701][T21623]  <TASK>
[ 1274.007650][T21623]  dump_stack_lvl+0x18c/0x250
[ 1274.012350][T21623]  ? show_regs_print_info+0x20/0x20
[ 1274.017572][T21623]  ? load_image+0x400/0x400
[ 1274.022114][T21623]  ? __might_sleep+0xe0/0xe0
[ 1274.026740][T21623]  ? __lock_acquire+0x7d40/0x7d40
[ 1274.031798][T21623]  should_fail_ex+0x39d/0x4d0
[ 1274.036527][T21623]  should_failslab+0x9/0x20
[ 1274.041052][T21623]  slab_pre_alloc_hook+0x59/0x310
[ 1274.046114][T21623]  ? tomoyo_encode+0x28b/0x540
[ 1274.050936][T21623]  ? tomoyo_encode+0x28b/0x540
[ 1274.055756][T21623]  __kmem_cache_alloc_node+0x53/0x250
[ 1274.061181][T21623]  ? tomoyo_encode+0x28b/0x540
[ 1274.065960][T21623]  __kmalloc+0xa4/0x230
[ 1274.070185][T21623]  tomoyo_encode+0x28b/0x540
[ 1274.074797][T21623]  tomoyo_realpath_from_path+0x592/0x5d0
[ 1274.080467][T21623]  tomoyo_path_number_perm+0x248/0x620
[ 1274.085961][T21623]  ? tomoyo_path_number_perm+0x217/0x620
[ 1274.091665][T21623]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1274.097301][T21623]  ? ksys_write+0x1c4/0x260
[ 1274.101959][T21623]  ? __fget_files+0x28/0x4b0
[ 1274.106582][T21623]  ? __fget_files+0x28/0x4b0
[ 1274.111229][T21623]  security_file_ioctl+0x70/0xa0
[ 1274.116239][T21623]  __se_sys_ioctl+0x48/0x170
[ 1274.121298][T21623]  do_syscall_64+0x55/0xa0
[ 1274.125725][T21623]  ? clear_bhb_loop+0x40/0x90
[ 1274.130429][T21623]  ? clear_bhb_loop+0x40/0x90
[ 1274.135133][T21623]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1274.141050][T21623] RIP: 0033:0x7f34d759acb9
[ 1274.145510][T21623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1274.165242][T21623] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1274.173709][T21623] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1274.181847][T21623] RDX: 0000000000000000 RSI: 0000000000008916 RDI: 0000000000000003
[ 1274.189867][T21623] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1274.197858][T21623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1274.205840][T21623] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1274.213851][T21623]  </TASK>
[ 1274.233886][T21623] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1276.360578][T21626] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5503'.
[ 1276.369931][T21626] bond_slave_0: entered promiscuous mode
[ 1276.375647][T21626] bond_slave_1: entered promiscuous mode
[ 1276.381455][T21626] C: entered promiscuous mode
[ 1276.386241][T21626] team_slave_1: entered promiscuous mode
[ 1277.283271][T21659] netlink: 'syz.3.5515': attribute type 10 has an invalid length.
[ 1277.316173][T21659] netlink: 'syz.3.5515': attribute type 10 has an invalid length.
[ 1277.324081][T21659] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.5515'.
[ 1277.352915][T21659] openvswitch: netlink: Message has 4 unknown bytes.
[ 1277.426841][T21666] sit0: entered promiscuous mode
[ 1277.439685][T21666] sit0: entered allmulticast mode
[ 1277.701370][T21681] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5525'.
[ 1278.750923][T21697] netlink: 'syz.3.5530': attribute type 10 has an invalid length.
[ 1278.786618][T21697] netlink: 'syz.3.5530': attribute type 10 has an invalid length.
[ 1278.794539][T21697] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.5530'.
[ 1278.833301][T21697] openvswitch: netlink: Message has 4 unknown bytes.
[ 1279.703060][T21718] netlink: 'syz.2.5539': attribute type 9 has an invalid length.
[ 1279.736269][T21718] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5539'.
[ 1279.882076][T21725] netlink: 'syz.0.5541': attribute type 10 has an invalid length.
[ 1279.910679][T21725] netlink: 'syz.0.5541': attribute type 10 has an invalid length.
[ 1279.926233][T21725] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.5541'.
[ 1279.940343][T21725] openvswitch: netlink: Message has 4 unknown bytes.
[ 1280.923515][T21745] netlink: 'syz.0.5549': attribute type 9 has an invalid length.
[ 1280.952081][T21745] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5549'.
[ 1281.067235][T21755] pim6reg1: entered promiscuous mode
[ 1281.072721][T21755] pim6reg1: entered allmulticast mode
[ 1281.119361][T21757] FAULT_INJECTION: forcing a failure.
[ 1281.119361][T21757] name failslab, interval 1, probability 0, space 0, times 0
[ 1281.142239][T21757] CPU: 1 PID: 21757 Comm: syz.2.5552 Not tainted syzkaller #0
[ 1281.149805][T21757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1281.159902][T21757] Call Trace:
[ 1281.163223][T21757]  <TASK>
[ 1281.166222][T21757]  dump_stack_lvl+0x18c/0x250
[ 1281.170963][T21757]  ? show_regs_print_info+0x20/0x20
[ 1281.176208][T21757]  ? load_image+0x400/0x400
[ 1281.180765][T21757]  ? verify_lock_unused+0x140/0x140
[ 1281.186043][T21757]  ? perf_trace_lock_acquire+0x104/0x410
[ 1281.191915][T21757]  should_fail_ex+0x39d/0x4d0
[ 1281.196659][T21757]  should_failslab+0x9/0x20
[ 1281.201201][T21757]  slab_pre_alloc_hook+0x59/0x310
[ 1281.206278][T21757]  kmem_cache_alloc+0x5a/0x2d0
[ 1281.211086][T21757]  ? skb_clone+0x1eb/0x370
[ 1281.215548][T21757]  skb_clone+0x1eb/0x370
[ 1281.219841][T21757]  __netlink_deliver_tap+0x41c/0x830
[ 1281.225187][T21757]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1281.230439][T21757]  netlink_deliver_tap+0x19c/0x1b0
[ 1281.235595][T21757]  netlink_unicast+0x72c/0x8d0
[ 1281.240429][T21757]  netlink_sendmsg+0x8d0/0xbf0
[ 1281.245496][T21757]  ? perf_trace_lock+0x304/0x3b0
[ 1281.250490][T21757]  ? netlink_getsockopt+0x590/0x590
[ 1281.255761][T21757]  ? aa_sock_msg_perm+0x94/0x150
[ 1281.260766][T21757]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1281.266103][T21757]  ? security_socket_sendmsg+0x80/0xa0
[ 1281.271598][T21757]  ? netlink_getsockopt+0x590/0x590
[ 1281.276858][T21757]  ____sys_sendmsg+0x5ba/0x960
[ 1281.281677][T21757]  ? __asan_memset+0x22/0x40
[ 1281.286309][T21757]  ? __sys_sendmsg_sock+0x30/0x30
[ 1281.291366][T21757]  ? __import_iovec+0x5f2/0x850
[ 1281.296283][T21757]  ? import_iovec+0x73/0xa0
[ 1281.300843][T21757]  ___sys_sendmsg+0x2a6/0x360
[ 1281.305574][T21757]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1281.310471][T21757]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1281.315370][T21757]  ? __x64_sys_sendmsg+0x80/0x80
[ 1281.320469][T21757]  ? lockdep_hardirqs_on+0x98/0x150
[ 1281.325712][T21757]  do_syscall_64+0x55/0xa0
[ 1281.330169][T21757]  ? clear_bhb_loop+0x40/0x90
[ 1281.334887][T21757]  ? clear_bhb_loop+0x40/0x90
[ 1281.339703][T21757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1281.345644][T21757] RIP: 0033:0x7f1a1979acb9
[ 1281.350104][T21757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1281.369839][T21757] RSP: 002b:00007f1a1a60f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1281.378472][T21757] RAX: ffffffffffffffda RBX: 00007f1a19a15fa0 RCX: 00007f1a1979acb9
[ 1281.386528][T21757] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a
[ 1281.394640][T21757] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1281.402649][T21757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1281.410659][T21757] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1281.418699][T21757]  </TASK>
[ 1281.494495][T21757] netlink: 'syz.2.5552': attribute type 10 has an invalid length.
[ 1281.510712][T21757] bridge0: port 3(ip6gretap0) entered disabled state
[ 1281.520605][T21757] bridge0: port 2(dummy0) entered disabled state
[ 1281.528412][T21757] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1281.624215][T21757] bridge0: port 3(ip6gretap0) entered blocking state
[ 1281.631961][T21757] bridge0: port 3(ip6gretap0) entered forwarding state
[ 1281.642504][T21757] bridge0: port 2(dummy0) entered blocking state
[ 1281.650529][T21757] bridge0: port 2(dummy0) entered forwarding state
[ 1281.660620][T21757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1281.669307][T21757] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1281.748549][T21757] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1282.083353][T21748] netlink: 'syz.0.5549': attribute type 9 has an invalid length.
[ 1282.096784][T21748] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5549'.
[ 1282.214006][T21764] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5554'.
[ 1282.232195][T21764] openvswitch: netlink: Message has 4 unknown bytes.
[ 1282.372871][T21771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5557'.
[ 1282.384781][T21771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5557'.
[ 1282.400686][T21771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5557'.
[ 1282.410975][T21771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5557'.
[ 1282.471834][T21773] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5558'.
[ 1282.486338][T21773] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1282.494082][T21773] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1282.515505][T21773] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1282.524720][T21773] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1282.605229][T21773] bond0: (slave batadv0): Releasing backup interface
[ 1282.685687][T21778] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5560'.
[ 1282.822665][T21780] validate_nla: 2 callbacks suppressed
[ 1282.822686][T21780] netlink: 'syz.2.5561': attribute type 1 has an invalid length.
[ 1283.835211][T21803] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5570'.
[ 1283.868481][T21804] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5571'.
[ 1284.139623][T21814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1284.176779][T21814] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1284.195449][T21814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1284.218125][T21814] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1284.336561][T21814] bond0: (slave batadv0): Releasing backup interface
[ 1284.356599][T21819] netlink: 'syz.3.5576': attribute type 10 has an invalid length.
[ 1285.764112][T21842] netlink: 'syz.1.5584': attribute type 1 has an invalid length.
[ 1285.915709][T21851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1285.928805][T21851] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1285.939112][T21855] netlink: 'syz.1.5589': attribute type 3 has an invalid length.
[ 1285.949543][T21851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1285.970043][T21851] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1286.052853][T21851] bond0: (slave batadv0): Releasing backup interface
[ 1286.072946][T21854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1286.081889][T21854] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1286.098164][T21854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1286.115892][T21854] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1286.196243][T21854] bond0: (slave batadv0): Releasing backup interface
[ 1286.458270][T21870] netlink: 'syz.3.5596': attribute type 10 has an invalid length.
[ 1286.516222][T21870] netlink: 'syz.3.5596': attribute type 10 has an invalid length.
[ 1286.552085][T21870] openvswitch: netlink: Message has 4 unknown bytes.
[ 1287.123069][T21888] netlink: 'syz.0.5604': attribute type 13 has an invalid length.
[ 1287.131428][T21888] __nla_validate_parse: 6 callbacks suppressed
[ 1287.131446][T21888] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.5604'.
[ 1287.542379][T21901] netlink: 'syz.2.5608': attribute type 10 has an invalid length.
[ 1287.560678][T21901] netlink: 'syz.2.5608': attribute type 10 has an invalid length.
[ 1287.622545][T21901] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5608'.
[ 1287.632687][T21901] openvswitch: netlink: Message has 4 unknown bytes.
[ 1287.721524][T21905] bond0: entered promiscuous mode
[ 1287.737307][T21905] bond_slave_0: entered promiscuous mode
[ 1287.749250][T21905] bond_slave_1: entered promiscuous mode
[ 1287.755355][T21905] team0: entered promiscuous mode
[ 1287.761358][T21905] C: entered promiscuous mode
[ 1287.766686][T21905] team_slave_1: entered promiscuous mode
[ 1288.027505][T21914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5613'.
[ 1288.374468][T21922] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5616'.
[ 1288.505912][T21928] netlink: 'syz.1.5618': attribute type 10 has an invalid length.
[ 1288.514207][T21928] netlink: 'syz.1.5618': attribute type 10 has an invalid length.
[ 1288.522221][T21928] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.5618'.
[ 1288.531978][T21928] openvswitch: netlink: Message has 4 unknown bytes.
[ 1288.998119][T21942] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5624'.
[ 1289.202405][T21942] netlink: 'syz.3.5624': attribute type 10 has an invalid length.
[ 1289.453411][T21952] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5627'.
[ 1289.565390][T21955] FAULT_INJECTION: forcing a failure.
[ 1289.565390][T21955] name failslab, interval 1, probability 0, space 0, times 0
[ 1289.581070][T21955] CPU: 1 PID: 21955 Comm: syz.0.5628 Not tainted syzkaller #0
[ 1289.588600][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1289.598689][T21955] Call Trace:
[ 1289.602003][T21955]  <TASK>
[ 1289.604958][T21955]  dump_stack_lvl+0x18c/0x250
[ 1289.609680][T21955]  ? show_regs_print_info+0x20/0x20
[ 1289.614917][T21955]  ? load_image+0x400/0x400
[ 1289.619543][T21955]  ? __might_sleep+0xe0/0xe0
[ 1289.624251][T21955]  ? __lock_acquire+0x7d40/0x7d40
[ 1289.629311][T21955]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1289.635322][T21955]  should_fail_ex+0x39d/0x4d0
[ 1289.640041][T21955]  should_failslab+0x9/0x20
[ 1289.644579][T21955]  slab_pre_alloc_hook+0x59/0x310
[ 1289.649647][T21955]  ? lockdep_hardirqs_on+0x98/0x150
[ 1289.654874][T21955]  ? bpf_prog_test_run_skb+0x238/0x12b0
[ 1289.660456][T21955]  ? bpf_prog_test_run_skb+0x238/0x12b0
[ 1289.666121][T21955]  __kmem_cache_alloc_node+0x53/0x250
[ 1289.671539][T21955]  ? bpf_prog_test_run_skb+0x238/0x12b0
[ 1289.677114][T21955]  __kmalloc+0xa4/0x230
[ 1289.681311][T21955]  bpf_prog_test_run_skb+0x238/0x12b0
[ 1289.686715][T21955]  ? __fget_files+0x28/0x4b0
[ 1289.691332][T21955]  ? __fget_files+0x28/0x4b0
[ 1289.695955][T21955]  ? __fget_files+0x43d/0x4b0
[ 1289.700676][T21955]  ? cpu_online+0x60/0x60
[ 1289.705040][T21955]  bpf_prog_test_run+0x321/0x390
[ 1289.710185][T21955]  __sys_bpf+0x49d/0x890
[ 1289.714461][T21955]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1289.719873][T21955]  ? lock_chain_count+0x20/0x20
[ 1289.724937][T21955]  __x64_sys_bpf+0x7c/0x90
[ 1289.729389][T21955]  do_syscall_64+0x55/0xa0
[ 1289.733842][T21955]  ? clear_bhb_loop+0x40/0x90
[ 1289.738643][T21955]  ? clear_bhb_loop+0x40/0x90
[ 1289.743352][T21955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1289.749280][T21955] RIP: 0033:0x7fd70c19acb9
[ 1289.753722][T21955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1289.773353][T21955] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1289.781796][T21955] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1289.789800][T21955] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 1289.797794][T21955] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1289.805788][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1289.813786][T21955] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1289.821799][T21955]  </TASK>
[ 1289.838573][T21956] FAULT_INJECTION: forcing a failure.
[ 1289.838573][T21956] name failslab, interval 1, probability 0, space 0, times 0
[ 1289.854395][T21956] CPU: 1 PID: 21956 Comm: syz.1.5629 Not tainted syzkaller #0
[ 1289.861917][T21956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1289.872031][T21956] Call Trace:
[ 1289.875365][T21956]  <TASK>
[ 1289.878334][T21956]  dump_stack_lvl+0x18c/0x250
[ 1289.883068][T21956]  ? show_regs_print_info+0x20/0x20
[ 1289.888310][T21956]  ? load_image+0x400/0x400
[ 1289.892857][T21956]  ? __might_sleep+0xe0/0xe0
[ 1289.897496][T21956]  ? __lock_acquire+0x7d40/0x7d40
[ 1289.902659][T21956]  ? mark_lock+0x94/0x320
[ 1289.907102][T21956]  should_fail_ex+0x39d/0x4d0
[ 1289.911868][T21956]  should_failslab+0x9/0x20
[ 1289.916443][T21956]  slab_pre_alloc_hook+0x59/0x310
[ 1289.921574][T21956]  kmem_cache_alloc+0x5a/0x2d0
[ 1289.926392][T21956]  ? __kernfs_new_node+0xe5/0x810
[ 1289.931477][T21956]  __kernfs_new_node+0xe5/0x810
[ 1289.936386][T21956]  ? verify_lock_unused+0x140/0x140
[ 1289.941640][T21956]  ? kernfs_new_node+0x260/0x260
[ 1289.946653][T21956]  ? kernfs_create_dir_ns+0x112/0x120
[ 1289.952095][T21956]  ? sysfs_create_dir_ns+0x130/0x2a0
[ 1289.957455][T21956]  ? sysfs_create_dir_ns+0x16b/0x2a0
[ 1289.962827][T21956]  kernfs_new_node+0x14c/0x260
[ 1289.967651][T21956]  __kernfs_create_file+0x4b/0x2e0
[ 1289.972818][T21956]  sysfs_add_file_mode_ns+0x238/0x300
[ 1289.978233][T21956]  sysfs_create_file_ns+0x12c/0x1b0
[ 1289.983503][T21956]  ? sysfs_add_bin_file_mode_ns+0x220/0x220
[ 1289.989460][T21956]  ? __dev_fwnode+0x50/0x80
[ 1289.994033][T21956]  device_add+0x4e6/0xc20
[ 1289.998421][T21956]  ? device_initialize+0x24b/0x440
[ 1290.003597][T21956]  netdev_register_kobject+0x188/0x320
[ 1290.009125][T21956]  register_netdevice+0x12ef/0x1b90
[ 1290.014394][T21956]  ? netif_stacked_transfer_operstate+0x210/0x210
[ 1290.020861][T21956]  ? __lock_acquire+0x7d40/0x7d40
[ 1290.025954][T21956]  ? net_generic+0x1e/0x240
[ 1290.030521][T21956]  ip6_tnl_create2+0x80/0x140
[ 1290.035256][T21956]  ip6_tnl_locate+0x735/0x830
[ 1290.040014][T21956]  ? ip6_tnl_parm_from_user+0x340/0x340
[ 1290.045618][T21956]  ? __might_fault+0xaa/0x120
[ 1290.050346][T21956]  ? __might_fault+0xc6/0x120
[ 1290.055074][T21956]  ? __might_fault+0xaa/0x120
[ 1290.059804][T21956]  ? ip6_tnl_siocdevprivate+0x5eb/0xab0
[ 1290.065415][T21956]  ip6_tnl_siocdevprivate+0x619/0xab0
[ 1290.067245][T21958] netlink: 'syz.0.5630': attribute type 10 has an invalid length.
[ 1290.070851][T21956]  ? ip6_tnl_start_xmit+0x11c0/0x11c0
[ 1290.079332][T21958] netlink: 'syz.0.5630': attribute type 10 has an invalid length.
[ 1290.084063][T21956]  ? dev_ioctl+0x83c/0x1140
[ 1290.092439][T21958] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.5630'.
[ 1290.096381][T21956]  ? __lock_acquire+0x7d40/0x7d40
[ 1290.096425][T21956]  ? dev_ifsioc+0x958/0xc40
[ 1290.115341][T21956]  dev_ioctl+0x84c/0x1140
[ 1290.117242][T21958] openvswitch: netlink: Message has 4 unknown bytes.
[ 1290.119745][T21956]  sock_ioctl+0x74c/0x7e0
[ 1290.119781][T21956]  ? sock_poll+0x3e0/0x3e0
[ 1290.135287][T21956]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1290.140270][T21956]  ? security_file_ioctl+0x80/0xa0
[ 1290.145450][T21956]  ? sock_poll+0x3e0/0x3e0
[ 1290.149923][T21956]  __se_sys_ioctl+0xfd/0x170
[ 1290.154658][T21956]  do_syscall_64+0x55/0xa0
[ 1290.159121][T21956]  ? clear_bhb_loop+0x40/0x90
[ 1290.163849][T21956]  ? clear_bhb_loop+0x40/0x90
[ 1290.168589][T21956]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1290.174530][T21956] RIP: 0033:0x7f4a8bb9acb9
[ 1290.178993][T21956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1290.198645][T21956] RSP: 002b:00007f4a8cb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1290.207124][T21956] RAX: ffffffffffffffda RBX: 00007f4a8be15fa0 RCX: 00007f4a8bb9acb9
[ 1290.215143][T21956] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005
[ 1290.223184][T21956] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1290.231201][T21956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1290.239219][T21956] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1290.247254][T21956]  </TASK>
[ 1291.845797][T21985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5638'.
[ 1291.868159][T21985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5638'.
[ 1291.900807][T21987] netlink: 'syz.2.5640': attribute type 10 has an invalid length.
[ 1291.909119][T21987] netlink: 'syz.2.5640': attribute type 10 has an invalid length.
[ 1291.917207][T21987] openvswitch: netlink: Message has 4 unknown bytes.
[ 1292.320963][T21989] netlink: 'syz.1.5641': attribute type 3 has an invalid length.
[ 1292.329608][T21989] __nla_validate_parse: 4 callbacks suppressed
[ 1292.329645][T21989] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5641'.
[ 1292.345253][T21989] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1292.366638][T21999] FAULT_INJECTION: forcing a failure.
[ 1292.366638][T21999] name failslab, interval 1, probability 0, space 0, times 0
[ 1292.380437][T21999] CPU: 0 PID: 21999 Comm: syz.2.5646 Not tainted syzkaller #0
[ 1292.388021][T21999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1292.398400][T21999] Call Trace:
[ 1292.401712][T21999]  <TASK>
[ 1292.404657][T21999]  dump_stack_lvl+0x18c/0x250
[ 1292.409371][T21999]  ? show_regs_print_info+0x20/0x20
[ 1292.414687][T21999]  ? load_image+0x400/0x400
[ 1292.419233][T21999]  ? __might_sleep+0xe0/0xe0
[ 1292.423852][T21999]  ? __lock_acquire+0x7d40/0x7d40
[ 1292.428918][T21999]  should_fail_ex+0x39d/0x4d0
[ 1292.433662][T21999]  should_failslab+0x9/0x20
[ 1292.438220][T21999]  slab_pre_alloc_hook+0x59/0x310
[ 1292.443313][T21999]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1292.449261][T21999]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1292.455013][T21999]  __kmem_cache_alloc_node+0x53/0x250
[ 1292.460513][T21999]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1292.466266][T21999]  __kmalloc+0xa4/0x230
[ 1292.470471][T21999]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1292.476063][T21999]  tomoyo_path_number_perm+0x248/0x620
[ 1292.481559][T21999]  ? tomoyo_path_number_perm+0x217/0x620
[ 1292.487226][T21999]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1292.492731][T21999]  ? ksys_write+0x1c4/0x260
[ 1292.497297][T21999]  ? __fget_files+0x28/0x4b0
[ 1292.501914][T21999]  ? __fget_files+0x28/0x4b0
[ 1292.506550][T21999]  security_file_ioctl+0x70/0xa0
[ 1292.511529][T21999]  __se_sys_ioctl+0x48/0x170
[ 1292.516160][T21999]  do_syscall_64+0x55/0xa0
[ 1292.520602][T21999]  ? clear_bhb_loop+0x40/0x90
[ 1292.525334][T21999]  ? clear_bhb_loop+0x40/0x90
[ 1292.530065][T21999]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1292.536014][T21999] RIP: 0033:0x7f1a1979acb9
[ 1292.540479][T21999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1292.560300][T21999] RSP: 002b:00007f1a1a60f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1292.568756][T21999] RAX: ffffffffffffffda RBX: 00007f1a19a15fa0 RCX: 00007f1a1979acb9
[ 1292.576783][T21999] RDX: 0000000000000000 RSI: 00000000400454ce RDI: 0000000000000003
[ 1292.584789][T21999] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1292.592812][T21999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1292.600841][T21999] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1292.608875][T21999]  </TASK>
[ 1292.617533][T21999] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1292.813867][T22004] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5647'.
[ 1293.897808][T22010] netlink: 'syz.0.5651': attribute type 10 has an invalid length.
[ 1293.905823][T22010] netlink: 'syz.0.5651': attribute type 10 has an invalid length.
[ 1293.915130][T22010] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.5651'.
[ 1293.953980][T22010] openvswitch: netlink: Message has 4 unknown bytes.
[ 1293.989656][T22012] FAULT_INJECTION: forcing a failure.
[ 1293.989656][T22012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1294.003319][T22012] CPU: 1 PID: 22012 Comm: syz.1.5652 Not tainted syzkaller #0
[ 1294.010939][T22012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1294.021144][T22012] Call Trace:
[ 1294.024489][T22012]  <TASK>
[ 1294.027498][T22012]  dump_stack_lvl+0x18c/0x250
[ 1294.032249][T22012]  ? show_regs_print_info+0x20/0x20
[ 1294.037513][T22012]  ? load_image+0x400/0x400
[ 1294.042086][T22012]  ? __lock_acquire+0x7d40/0x7d40
[ 1294.047175][T22012]  ? snprintf+0xe9/0x140
[ 1294.051495][T22012]  should_fail_ex+0x39d/0x4d0
[ 1294.056250][T22012]  _copy_to_user+0x2f/0xa0
[ 1294.060735][T22012]  simple_read_from_buffer+0xe7/0x150
[ 1294.066190][T22012]  proc_fail_nth_read+0x1e8/0x260
[ 1294.071271][T22012]  ? proc_fault_inject_write+0x360/0x360
[ 1294.076974][T22012]  ? fsnotify_perm+0x271/0x5e0
[ 1294.081806][T22012]  ? proc_fault_inject_write+0x360/0x360
[ 1294.087524][T22012]  vfs_read+0x28b/0x970
[ 1294.091766][T22012]  ? kernel_read+0x1e0/0x1e0
[ 1294.096434][T22012]  ? __fget_files+0x28/0x4b0
[ 1294.101179][T22012]  ? __fget_files+0x28/0x4b0
[ 1294.105833][T22012]  ? __fget_files+0x43d/0x4b0
[ 1294.110599][T22012]  ? __fdget_pos+0x2a3/0x330
[ 1294.115249][T22012]  ? ksys_read+0x75/0x260
[ 1294.119652][T22012]  ksys_read+0x150/0x260
[ 1294.123961][T22012]  ? vfs_write+0x990/0x990
[ 1294.128451][T22012]  ? lockdep_hardirqs_on+0x98/0x150
[ 1294.133730][T22012]  do_syscall_64+0x55/0xa0
[ 1294.138195][T22012]  ? clear_bhb_loop+0x40/0x90
[ 1294.142929][T22012]  ? clear_bhb_loop+0x40/0x90
[ 1294.147672][T22012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1294.153625][T22012] RIP: 0033:0x7f4a8bb5b58e
[ 1294.158103][T22012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1294.177782][T22012] RSP: 002b:00007f4a8cb29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1294.186274][T22012] RAX: ffffffffffffffda RBX: 00007f4a8cb2a6c0 RCX: 00007f4a8bb5b58e
[ 1294.194402][T22012] RDX: 000000000000000f RSI: 00007f4a8cb2a0a0 RDI: 0000000000000008
[ 1294.202447][T22012] RBP: 00007f4a8cb2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1294.210464][T22012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1294.218494][T22012] R13: 00007f4a8be16038 R14: 00007f4a8be15fa0 R15: 00007ffcfe28bc48
[ 1294.226534][T22012]  </TASK>
[ 1294.284022][T22014] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5653'.
[ 1294.447305][T22017] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5654'.
[ 1297.842700][T22019] netlink: 'syz.0.5655': attribute type 1 has an invalid length.
[ 1297.975278][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5663'.
[ 1298.113262][T22040] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5666'.
[ 1299.144929][T22067] delete_channel: no stack
[ 1299.159304][T22067] delete_channel: no stack
[ 1299.638109][T22072] netlink: 'syz.0.5676': attribute type 2 has an invalid length.
[ 1299.692722][T22072] netlink: 'syz.0.5676': attribute type 4 has an invalid length.
[ 1299.726166][T22072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5676'.
[ 1299.733529][T22071] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5675'.
[ 1300.540146][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.556135][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.121461][T22103] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5687'.
[ 1301.294929][T22105] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5688'.
[ 1302.931944][T22147] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5701'.
[ 1303.999528][T22163] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5707'.
[ 1304.820420][T22183] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5713'.
[ 1306.513535][T22219] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5727'.
[ 1306.878707][T22222] netlink: 'syz.3.5728': attribute type 10 has an invalid length.
[ 1306.896638][T22222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5728'.
[ 1306.990431][T22233] netlink: 'syz.2.5732': attribute type 10 has an invalid length.
[ 1307.008658][T22233] netlink: 'syz.2.5732': attribute type 10 has an invalid length.
[ 1307.022422][T22233] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5732'.
[ 1307.041581][T22233] openvswitch: netlink: Message has 4 unknown bytes.
[ 1307.402107][T22241] netlink: 'syz.2.5735': attribute type 10 has an invalid length.
[ 1307.416212][T22241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5735'.
[ 1308.031077][T22253] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5739'.
[ 1308.756846][T22263] FAULT_INJECTION: forcing a failure.
[ 1308.756846][T22263] name failslab, interval 1, probability 0, space 0, times 0
[ 1308.770113][T22263] CPU: 0 PID: 22263 Comm: syz.3.5743 Not tainted syzkaller #0
[ 1308.777812][T22263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1308.788105][T22263] Call Trace:
[ 1308.791450][T22263]  <TASK>
[ 1308.794524][T22263]  dump_stack_lvl+0x18c/0x250
[ 1308.799314][T22263]  ? show_regs_print_info+0x20/0x20
[ 1308.804659][T22263]  ? load_image+0x400/0x400
[ 1308.809227][T22263]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1308.815296][T22263]  ? lock_chain_count+0x20/0x20
[ 1308.820211][T22263]  should_fail_ex+0x39d/0x4d0
[ 1308.824963][T22263]  should_failslab+0x9/0x20
[ 1308.829531][T22263]  slab_pre_alloc_hook+0x59/0x310
[ 1308.834625][T22263]  ? __alloc_skb+0x138/0x2c0
[ 1308.839272][T22263]  kmem_cache_alloc_node+0x60/0x320
[ 1308.844539][T22263]  ? __alloc_skb+0x103/0x2c0
[ 1308.849194][T22263]  __alloc_skb+0x103/0x2c0
[ 1308.853669][T22263]  skb_segment+0xee2/0x3f50
[ 1308.858294][T22263]  udp6_ufo_fragment+0x9b7/0xf40
[ 1308.863353][T22263]  ? udpv6_offload_exit+0x20/0x20
[ 1308.868431][T22263]  ? __lock_acquire+0x1273/0x7d40
[ 1308.873510][T22263]  ipv6_gso_segment+0xb8b/0x2140
[ 1308.878529][T22263]  ? inet6_del_offload+0x50/0x50
[ 1308.883524][T22263]  ? __lock_acquire+0x7d40/0x7d40
[ 1308.888594][T22263]  ? inet6_del_offload+0x50/0x50
[ 1308.893577][T22263]  skb_mac_gso_segment+0x320/0x640
[ 1308.898740][T22263]  ? skb_mac_gso_segment+0x185/0x640
[ 1308.904079][T22263]  ? skb_eth_gso_segment+0x270/0x270
[ 1308.909420][T22263]  nsh_gso_segment+0x4c7/0xc60
[ 1308.914344][T22263]  ? nsh_pop+0x570/0x570
[ 1308.918630][T22263]  skb_mac_gso_segment+0x320/0x640
[ 1308.923793][T22263]  ? skb_mac_gso_segment+0x185/0x640
[ 1308.929139][T22263]  ? skb_eth_gso_segment+0x270/0x270
[ 1308.934489][T22263]  __skb_gso_segment+0x302/0x4a0
[ 1308.939477][T22263]  validate_xmit_skb+0x565/0xf60
[ 1308.944462][T22263]  ? up_read+0x20/0x20
[ 1308.948586][T22263]  ? validate_xmit_skb_list+0x120/0x120
[ 1308.954195][T22263]  validate_xmit_skb_list+0x84/0x120
[ 1308.959541][T22263]  sch_direct_xmit+0xe0/0x4c0
[ 1308.964288][T22263]  ? read_lock_is_recursive+0x20/0x20
[ 1308.969705][T22263]  ? rcu_read_lock_bh_held+0x7a/0x100
[ 1308.975126][T22263]  ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0
[ 1308.981158][T22263]  ? __lock_acquire+0x7c50/0x7d40
[ 1308.986253][T22263]  __dev_queue_xmit+0x179c/0x36b0
[ 1308.991342][T22263]  ? __dev_queue_xmit+0x26b/0x36b0
[ 1308.996518][T22263]  ? netdev_core_pick_tx+0x340/0x340
[ 1309.001851][T22263]  ? virtio_net_hdr_to_skb+0xa45/0x1510
[ 1309.007598][T22263]  ? packet_extra_vlan_len_allowed+0x200/0x200
[ 1309.013808][T22263]  ? skb_copy_datagram_from_iter+0x62e/0x6e0
[ 1309.019846][T22263]  ? packet_xmit+0x66/0x330
[ 1309.024409][T22263]  ? packet_sendmsg+0x3a7b/0x4d70
[ 1309.029530][T22263]  packet_sendmsg+0x3b7a/0x4d70
[ 1309.034451][T22263]  ? verify_lock_unused+0x140/0x140
[ 1309.039690][T22263]  ? mark_lock+0x94/0x320
[ 1309.044064][T22263]  ? __lock_acquire+0x1273/0x7d40
[ 1309.049130][T22263]  ? verify_lock_unused+0x140/0x140
[ 1309.054371][T22263]  ? aa_sk_perm+0x83c/0x970
[ 1309.058931][T22263]  ? packet_getsockopt+0xad0/0xad0
[ 1309.064086][T22263]  ? aa_sock_msg_perm+0x94/0x150
[ 1309.069074][T22263]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1309.074401][T22263]  ? security_socket_sendmsg+0x80/0xa0
[ 1309.079900][T22263]  ? packet_getsockopt+0xad0/0xad0
[ 1309.085069][T22263]  ____sys_sendmsg+0x5ba/0x960
[ 1309.089999][T22263]  ? __lock_acquire+0x7d40/0x7d40
[ 1309.095091][T22263]  ? __asan_memset+0x22/0x40
[ 1309.099743][T22263]  ? __sys_sendmsg_sock+0x30/0x30
[ 1309.104817][T22263]  ? __import_iovec+0x3fa/0x850
[ 1309.109730][T22263]  ? import_iovec+0x73/0xa0
[ 1309.114291][T22263]  ___sys_sendmsg+0x2a6/0x360
[ 1309.119021][T22263]  ? get_pid_task+0x20/0x1e0
[ 1309.123676][T22263]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1309.128514][T22263]  ? __lock_acquire+0x7d40/0x7d40
[ 1309.133606][T22263]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1309.138515][T22263]  ? __x64_sys_sendmsg+0x80/0x80
[ 1309.143513][T22263]  ? lockdep_hardirqs_on+0x98/0x150
[ 1309.148814][T22263]  do_syscall_64+0x55/0xa0
[ 1309.153294][T22263]  ? clear_bhb_loop+0x40/0x90
[ 1309.158023][T22263]  ? clear_bhb_loop+0x40/0x90
[ 1309.162747][T22263]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1309.168731][T22263] RIP: 0033:0x7f34d759acb9
[ 1309.173197][T22263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1309.192851][T22263] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1309.201316][T22263] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1309.209322][T22263] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1309.217336][T22263] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1309.225344][T22263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1309.233367][T22263] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1309.241406][T22263]  </TASK>
[ 1309.398428][T22264] netlink: 'syz.0.5742': attribute type 10 has an invalid length.
[ 1309.416473][T22264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5742'.
[ 1309.516784][T22264] ipvlan1: entered promiscuous mode
[ 1309.532039][T22264] ipvlan1: entered allmulticast mode
[ 1309.551177][T22264] veth0_vlan: entered allmulticast mode
[ 1309.647068][T22264] bridge0: port 2(ipvlan1) entered blocking state
[ 1309.653893][T22264] bridge0: port 2(ipvlan1) entered disabled state
[ 1309.664309][T22264] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1309.708510][T22273] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5745'.
[ 1311.794317][T22311] netlink: 'syz.0.5759': attribute type 10 has an invalid length.
[ 1311.806060][T22311] netlink: 'syz.0.5759': attribute type 10 has an invalid length.
[ 1311.814078][T22311] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.5759'.
[ 1311.823774][T22311] openvswitch: netlink: Message has 4 unknown bytes.
[ 1312.015213][T22317] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5762'.
[ 1313.179440][T22340] netlink: 'syz.3.5770': attribute type 10 has an invalid length.
[ 1313.619479][T22340] bond_slave_0: left promiscuous mode
[ 1313.631393][T22340] bond_slave_1: left promiscuous mode
[ 1313.651741][T22340] team_slave_0: left promiscuous mode
[ 1313.664878][T22340] team_slave_1: left promiscuous mode
[ 1313.682260][T22340] bond0: entered promiscuous mode
[ 1313.689942][T22340] bond_slave_0: entered promiscuous mode
[ 1313.714018][T22340] bond_slave_1: entered promiscuous mode
[ 1313.745470][T22340] team0: entered promiscuous mode
[ 1313.753275][T22340] team_slave_0: entered promiscuous mode
[ 1313.775749][T22340] team_slave_1: entered promiscuous mode
[ 1314.316962][T22362] FAULT_INJECTION: forcing a failure.
[ 1314.316962][T22362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1314.366037][T22362] CPU: 0 PID: 22362 Comm: syz.2.5779 Not tainted syzkaller #0
[ 1314.373675][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1314.383797][T22362] Call Trace:
[ 1314.387126][T22362]  <TASK>
[ 1314.390102][T22362]  dump_stack_lvl+0x18c/0x250
[ 1314.394840][T22362]  ? show_regs_print_info+0x20/0x20
[ 1314.400093][T22362]  ? load_image+0x400/0x400
[ 1314.404657][T22362]  ? __might_fault+0xaa/0x120
[ 1314.409373][T22362]  ? __lock_acquire+0x7d40/0x7d40
[ 1314.414446][T22362]  should_fail_ex+0x39d/0x4d0
[ 1314.419163][T22362]  _copy_from_user+0x2f/0xe0
[ 1314.423787][T22362]  __sys_bpf+0x23e/0x890
[ 1314.428084][T22362]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1314.433500][T22362]  ? lock_chain_count+0x20/0x20
[ 1314.438384][T22362]  __x64_sys_bpf+0x7c/0x90
[ 1314.443174][T22362]  do_syscall_64+0x55/0xa0
[ 1314.447617][T22362]  ? clear_bhb_loop+0x40/0x90
[ 1314.452325][T22362]  ? clear_bhb_loop+0x40/0x90
[ 1314.457035][T22362]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1314.462980][T22362] RIP: 0033:0x7f1a1979acb9
[ 1314.467517][T22362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1314.487169][T22362] RSP: 002b:00007f1a1a5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1314.495617][T22362] RAX: ffffffffffffffda RBX: 00007f1a19a16090 RCX: 00007f1a1979acb9
[ 1314.503620][T22362] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002
[ 1314.511629][T22362] RBP: 00007f1a1a5ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1314.519746][T22362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1314.527749][T22362] R13: 00007f1a19a16128 R14: 00007f1a19a16090 R15: 00007ffd6fac3938
[ 1314.535786][T22362]  </TASK>
[ 1315.159007][T22367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1316.049036][T22394] FAULT_INJECTION: forcing a failure.
[ 1316.049036][T22394] name failslab, interval 1, probability 0, space 0, times 0
[ 1316.072003][T22394] CPU: 1 PID: 22394 Comm: syz.0.5791 Not tainted syzkaller #0
[ 1316.079646][T22394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1316.089748][T22394] Call Trace:
[ 1316.093073][T22394]  <TASK>
[ 1316.096047][T22394]  dump_stack_lvl+0x18c/0x250
[ 1316.100782][T22394]  ? show_regs_print_info+0x20/0x20
[ 1316.106033][T22394]  ? load_image+0x400/0x400
[ 1316.110615][T22394]  should_fail_ex+0x39d/0x4d0
[ 1316.115358][T22394]  should_failslab+0x9/0x20
[ 1316.119921][T22394]  slab_pre_alloc_hook+0x59/0x310
[ 1316.125009][T22394]  ? ___neigh_create+0x6d2/0x2440
[ 1316.130097][T22394]  ? ___neigh_create+0x6d2/0x2440
[ 1316.135182][T22394]  __kmem_cache_alloc_node+0x53/0x250
[ 1316.140619][T22394]  ? ___neigh_create+0x6d2/0x2440
[ 1316.145814][T22394]  __kmalloc+0xa4/0x230
[ 1316.150015][T22394]  ___neigh_create+0x6d2/0x2440
[ 1316.154926][T22394]  ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0
[ 1316.160782][T22394]  ip6_finish_output2+0x1581/0x1630
[ 1316.166027][T22394]  ? ip6_finish_output2+0x645/0x1630
[ 1316.171435][T22394]  ? ip6_mtu+0x7d/0x3f0
[ 1316.175659][T22394]  ? nf_hook+0x390/0x390
[ 1316.179937][T22394]  ? ip6_finish_output+0x57b/0x820
[ 1316.185085][T22394]  ? ip6_send_skb+0x10f/0x380
[ 1316.189809][T22394]  ip6_send_skb+0x1d5/0x380
[ 1316.194361][T22394]  rawv6_push_pending_frames+0x6ee/0x8d0
[ 1316.200049][T22394]  ? raw6_getfrag+0x3a0/0x3a0
[ 1316.204856][T22394]  ? rawv6_send_hdrinc+0x1640/0x1640
[ 1316.210181][T22394]  rawv6_sendmsg+0x131b/0x1770
[ 1316.215005][T22394]  ? compat_rawv6_ioctl+0x70/0x70
[ 1316.220073][T22394]  ? aa_sk_perm+0x83c/0x970
[ 1316.224634][T22394]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 1316.231168][T22394]  ? inet_sendmsg+0x7c/0x2f0
[ 1316.235800][T22394]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1316.241197][T22394]  ? security_socket_sendmsg+0x80/0xa0
[ 1316.246683][T22394]  ? inet_send_prepare+0x260/0x260
[ 1316.251828][T22394]  ____sys_sendmsg+0x5ba/0x960
[ 1316.256661][T22394]  ? __lock_acquire+0x7d40/0x7d40
[ 1316.261715][T22394]  ? __asan_memset+0x22/0x40
[ 1316.266335][T22394]  ? __sys_sendmsg_sock+0x30/0x30
[ 1316.271387][T22394]  ? __import_iovec+0x5f2/0x850
[ 1316.276279][T22394]  ? import_iovec+0x73/0xa0
[ 1316.280826][T22394]  ___sys_sendmsg+0x2a6/0x360
[ 1316.285549][T22394]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1316.290375][T22394]  ? __lock_acquire+0x7d40/0x7d40
[ 1316.295453][T22394]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1316.300344][T22394]  ? __x64_sys_sendmsg+0x80/0x80
[ 1316.305326][T22394]  ? lockdep_hardirqs_on+0x98/0x150
[ 1316.310584][T22394]  do_syscall_64+0x55/0xa0
[ 1316.315117][T22394]  ? clear_bhb_loop+0x40/0x90
[ 1316.319933][T22394]  ? clear_bhb_loop+0x40/0x90
[ 1316.324642][T22394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1316.330567][T22394] RIP: 0033:0x7fd70c19acb9
[ 1316.335011][T22394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1316.354821][T22394] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1316.363366][T22394] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1316.371386][T22394] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1316.379396][T22394] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1316.387395][T22394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1316.395400][T22394] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1316.403428][T22394]  </TASK>
[ 1316.736974][T22402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1317.140094][T22416] netlink: 'syz.2.5799': attribute type 10 has an invalid length.
[ 1317.943462][T22416] bond0: entered promiscuous mode
[ 1317.988560][T22416] bond_slave_0: entered promiscuous mode
[ 1318.000167][T22416] bond_slave_1: entered promiscuous mode
[ 1318.008882][T22416] bridge_slave_1: entered promiscuous mode
[ 1318.020202][T22416] bridge0: entered promiscuous mode
[ 1318.193829][T22428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5806'.
[ 1318.213753][T22428] FAULT_INJECTION: forcing a failure.
[ 1318.213753][T22428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1318.244841][T22428] CPU: 1 PID: 22428 Comm: syz.2.5806 Not tainted syzkaller #0
[ 1318.250125][T22429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1318.252388][T22428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1318.252437][T22428] Call Trace:
[ 1318.252452][T22428]  <TASK>
[ 1318.252467][T22428]  dump_stack_lvl+0x18c/0x250
[ 1318.283336][T22428]  ? show_regs_print_info+0x20/0x20
[ 1318.288599][T22428]  ? load_image+0x400/0x400
[ 1318.293188][T22428]  ? __lock_acquire+0x7d40/0x7d40
[ 1318.298273][T22428]  ? snprintf+0xe9/0x140
[ 1318.302582][T22428]  should_fail_ex+0x39d/0x4d0
[ 1318.307328][T22428]  _copy_to_user+0x2f/0xa0
[ 1318.311857][T22428]  simple_read_from_buffer+0xe7/0x150
[ 1318.317284][T22428]  proc_fail_nth_read+0x1e8/0x260
[ 1318.322442][T22428]  ? proc_fault_inject_write+0x360/0x360
[ 1318.328146][T22428]  ? fsnotify_perm+0x271/0x5e0
[ 1318.333075][T22428]  ? proc_fault_inject_write+0x360/0x360
[ 1318.338752][T22428]  vfs_read+0x28b/0x970
[ 1318.343158][T22428]  ? kernel_read+0x1e0/0x1e0
[ 1318.347986][T22428]  ? __fget_files+0x28/0x4b0
[ 1318.352643][T22428]  ? __fget_files+0x28/0x4b0
[ 1318.357285][T22428]  ? __fget_files+0x43d/0x4b0
[ 1318.362013][T22428]  ? __fdget_pos+0x2a3/0x330
[ 1318.366643][T22428]  ? ksys_read+0x75/0x260
[ 1318.371009][T22428]  ksys_read+0x150/0x260
[ 1318.375295][T22428]  ? vfs_write+0x990/0x990
[ 1318.379896][T22428]  ? lockdep_hardirqs_on+0x98/0x150
[ 1318.385195][T22428]  do_syscall_64+0x55/0xa0
[ 1318.389683][T22428]  ? clear_bhb_loop+0x40/0x90
[ 1318.394423][T22428]  ? clear_bhb_loop+0x40/0x90
[ 1318.399149][T22428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1318.405087][T22428] RIP: 0033:0x7f1a1975b58e
[ 1318.409651][T22428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1318.429470][T22428] RSP: 002b:00007f1a1a60efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1318.437921][T22428] RAX: ffffffffffffffda RBX: 00007f1a1a60f6c0 RCX: 00007f1a1975b58e
[ 1318.445929][T22428] RDX: 000000000000000f RSI: 00007f1a1a60f0a0 RDI: 0000000000000004
[ 1318.453952][T22428] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1318.461952][T22428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1318.469954][T22428] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1318.477978][T22428]  </TASK>
[ 1318.823578][T22445] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5810'.
[ 1319.878175][T22455] netlink: 'syz.1.5817': attribute type 10 has an invalid length.
[ 1320.001766][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5819'.
[ 1320.024591][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5819'.
[ 1320.035236][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5819'.
[ 1320.060525][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5819'.
[ 1320.077860][T22463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5819'.
[ 1320.381715][T22476] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5827'.
[ 1320.406085][T22476] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5827'.
[ 1320.426351][T22475] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5827'.
[ 1320.575378][T22483] netlink: 'syz.0.5828': attribute type 10 has an invalid length.
[ 1320.750477][T22483] dummy0: entered promiscuous mode
[ 1320.767254][T22483] team0: Port device dummy0 added
[ 1321.278390][T22500] FAULT_INJECTION: forcing a failure.
[ 1321.278390][T22500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1321.295426][T22500] CPU: 0 PID: 22500 Comm: syz.2.5834 Not tainted syzkaller #0
[ 1321.302977][T22500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1321.313173][T22500] Call Trace:
[ 1321.316506][T22500]  <TASK>
[ 1321.319479][T22500]  dump_stack_lvl+0x18c/0x250
[ 1321.324231][T22500]  ? show_regs_print_info+0x20/0x20
[ 1321.329490][T22500]  ? load_image+0x400/0x400
[ 1321.334068][T22500]  ? __might_fault+0xaa/0x120
[ 1321.338811][T22500]  should_fail_ex+0x39d/0x4d0
[ 1321.343559][T22500]  copyin+0x1a/0x90
[ 1321.347519][T22500]  _copy_from_iter+0x54f/0x12e0
[ 1321.352465][T22500]  ? copyout_mc+0x70/0x70
[ 1321.356857][T22500]  ? __check_object_size+0x1da/0xa20
[ 1321.362209][T22500]  ? __check_object_size+0x1e7/0xa20
[ 1321.367567][T22500]  ? __check_object_size+0x506/0xa20
[ 1321.372931][T22500]  skb_copy_datagram_from_iter+0xf4/0x6e0
[ 1321.378716][T22500]  ? dev_get_by_index+0x22/0x2d0
[ 1321.383717][T22500]  ? skb_put+0x11b/0x210
[ 1321.388022][T22500]  packet_sendmsg+0x3566/0x4d70
[ 1321.392959][T22500]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1321.399004][T22500]  ? lock_chain_count+0x20/0x20
[ 1321.403938][T22500]  ? perf_event_output_forward+0x330/0x3e0
[ 1321.409805][T22500]  ? aa_sk_perm+0x83c/0x970
[ 1321.414382][T22500]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1321.420646][T22500]  ? lockdep_hardirqs_on+0x98/0x150
[ 1321.425905][T22500]  ? packet_getsockopt+0xad0/0xad0
[ 1321.431171][T22500]  ? aa_sock_msg_perm+0x94/0x150
[ 1321.436178][T22500]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1321.441529][T22500]  ? security_socket_sendmsg+0x80/0xa0
[ 1321.447045][T22500]  ? packet_getsockopt+0xad0/0xad0
[ 1321.452301][T22500]  ____sys_sendmsg+0x5ba/0x960
[ 1321.457125][T22500]  ? __lock_acquire+0x7d40/0x7d40
[ 1321.462210][T22500]  ? __asan_memset+0x22/0x40
[ 1321.466849][T22500]  ? __sys_sendmsg_sock+0x30/0x30
[ 1321.471924][T22500]  ? __import_iovec+0x3fa/0x850
[ 1321.476850][T22500]  ? import_iovec+0x73/0xa0
[ 1321.481430][T22500]  ___sys_sendmsg+0x2a6/0x360
[ 1321.486214][T22500]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1321.491094][T22500]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1321.496008][T22500]  ? __x64_sys_sendmsg+0x80/0x80
[ 1321.501021][T22500]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1321.507160][T22500]  do_syscall_64+0x55/0xa0
[ 1321.511636][T22500]  ? clear_bhb_loop+0x40/0x90
[ 1321.516384][T22500]  ? clear_bhb_loop+0x40/0x90
[ 1321.521130][T22500]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1321.527083][T22500] RIP: 0033:0x7f1a1979acb9
[ 1321.531550][T22500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1321.551221][T22500] RSP: 002b:00007f1a1a60f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1321.559697][T22500] RAX: ffffffffffffffda RBX: 00007f1a19a15fa0 RCX: 00007f1a1979acb9
[ 1321.567821][T22500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1321.575853][T22500] RBP: 00007f1a1a60f090 R08: 0000000000000000 R09: 0000000000000000
[ 1321.583884][T22500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1321.592003][T22500] R13: 00007f1a19a16038 R14: 00007f1a19a15fa0 R15: 00007ffd6fac3938
[ 1321.600031][T22500]  </TASK>
[ 1322.345899][T22516] netlink: 'syz.0.5839': attribute type 10 has an invalid length.
[ 1322.367419][T22516] netlink: 'syz.0.5839': attribute type 10 has an invalid length.
[ 1322.386246][T22516] openvswitch: netlink: Message has 4 unknown bytes.
[ 1323.388971][T22539] __nla_validate_parse: 3 callbacks suppressed
[ 1323.388991][T22539] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5846'.
[ 1323.539014][T22545] FAULT_INJECTION: forcing a failure.
[ 1323.539014][T22545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1323.552702][T22545] CPU: 1 PID: 22545 Comm: syz.3.5849 Not tainted syzkaller #0
[ 1323.560322][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1323.570466][T22545] Call Trace:
[ 1323.573791][T22545]  <TASK>
[ 1323.576772][T22545]  dump_stack_lvl+0x18c/0x250
[ 1323.581512][T22545]  ? show_regs_print_info+0x20/0x20
[ 1323.586767][T22545]  ? load_image+0x400/0x400
[ 1323.591330][T22545]  ? __might_fault+0xaa/0x120
[ 1323.596056][T22545]  ? __lock_acquire+0x7d40/0x7d40
[ 1323.601147][T22545]  should_fail_ex+0x39d/0x4d0
[ 1323.605891][T22545]  _copy_from_user+0x2f/0xe0
[ 1323.610536][T22545]  ___sys_sendmsg+0x1c7/0x360
[ 1323.615279][T22545]  ? get_pid_task+0x20/0x1e0
[ 1323.619929][T22545]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1323.624803][T22545]  ? __lock_acquire+0x7d40/0x7d40
[ 1323.629901][T22545]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1323.634804][T22545]  ? __x64_sys_sendmsg+0x80/0x80
[ 1323.639810][T22545]  ? lockdep_hardirqs_on+0x98/0x150
[ 1323.645072][T22545]  do_syscall_64+0x55/0xa0
[ 1323.649545][T22545]  ? clear_bhb_loop+0x40/0x90
[ 1323.654282][T22545]  ? clear_bhb_loop+0x40/0x90
[ 1323.659027][T22545]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1323.664968][T22545] RIP: 0033:0x7f34d759acb9
[ 1323.669424][T22545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1323.689587][T22545] RSP: 002b:00007f34d845f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1323.698033][T22545] RAX: ffffffffffffffda RBX: 00007f34d7815fa0 RCX: 00007f34d759acb9
[ 1323.706051][T22545] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004
[ 1323.714056][T22545] RBP: 00007f34d845f090 R08: 0000000000000000 R09: 0000000000000000
[ 1323.722068][T22545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1323.730068][T22545] R13: 00007f34d7816038 R14: 00007f34d7815fa0 R15: 00007fff79d66d78
[ 1323.738169][T22545]  </TASK>
[ 1323.812685][T22548] netlink: 'syz.1.5851': attribute type 10 has an invalid length.
[ 1323.846059][T22548] netlink: 'syz.1.5851': attribute type 10 has an invalid length.
[ 1323.853964][T22548] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.5851'.
[ 1323.896122][T22548] openvswitch: netlink: Message has 4 unknown bytes.
[ 1324.062010][T22559] netlink: 'syz.1.5863': attribute type 10 has an invalid length.
[ 1324.070458][T22559] netlink: 'syz.1.5863': attribute type 10 has an invalid length.
[ 1324.081364][T22559] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.5863'.
[ 1324.099649][T22559] openvswitch: netlink: Message has 4 unknown bytes.
[ 1324.215438][T22562] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5856'.
[ 1325.510107][T22585] netlink: 'syz.2.5865': attribute type 10 has an invalid length.
[ 1325.518539][T22585] netlink: 'syz.2.5865': attribute type 10 has an invalid length.
[ 1325.526561][T22585] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5865'.
[ 1325.536005][T22585] openvswitch: netlink: Message has 4 unknown bytes.
[ 1325.622271][T22587] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5866'.
[ 1325.921344][T22576] syzkaller0: entered promiscuous mode
[ 1325.926995][T22576] syzkaller0: entered allmulticast mode
[ 1328.085114][T22591] netlink: 'syz.3.5869': attribute type 10 has an invalid length.
[ 1328.093249][T22591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5869'.
[ 1328.103685][T22591] team0: entered allmulticast mode
[ 1328.109021][T22591] team_slave_0: entered allmulticast mode
[ 1328.114811][T22591] team_slave_1: entered allmulticast mode
[ 1328.122538][T22591] bond0: (slave team0): Releasing backup interface
[ 1328.134912][T22591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1328.173141][T22604] bridge0: port 3(ip6gretap0) entered disabled state
[ 1328.180204][T22604] bridge0: port 2(dummy0) entered disabled state
[ 1328.186807][T22604] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1328.194721][T22604] bridge0: entered allmulticast mode
[ 1328.615496][T22617] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5873'.
[ 1328.804576][T22622] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5878'.
[ 1329.612357][T22626] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5880'.
[ 1329.825469][T22635] FAULT_INJECTION: forcing a failure.
[ 1329.825469][T22635] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1329.842215][T22635] CPU: 1 PID: 22635 Comm: syz.0.5882 Not tainted syzkaller #0
[ 1329.849790][T22635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1329.859915][T22635] Call Trace:
[ 1329.863248][T22635]  <TASK>
[ 1329.866262][T22635]  dump_stack_lvl+0x18c/0x250
[ 1329.871001][T22635]  ? show_regs_print_info+0x20/0x20
[ 1329.876260][T22635]  ? load_image+0x400/0x400
[ 1329.880832][T22635]  ? __might_fault+0xaa/0x120
[ 1329.885567][T22635]  ? __lock_acquire+0x7d40/0x7d40
[ 1329.890633][T22635]  ? __sys_bpf+0x21/0x890
[ 1329.895006][T22635]  should_fail_ex+0x39d/0x4d0
[ 1329.899748][T22635]  _copy_from_user+0x2f/0xe0
[ 1329.904396][T22635]  __sys_bpf+0x23e/0x890
[ 1329.908700][T22635]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1329.914144][T22635]  ? lock_chain_count+0x20/0x20
[ 1329.919052][T22635]  __x64_sys_bpf+0x7c/0x90
[ 1329.923610][T22635]  do_syscall_64+0x55/0xa0
[ 1329.928072][T22635]  ? clear_bhb_loop+0x40/0x90
[ 1329.932798][T22635]  ? clear_bhb_loop+0x40/0x90
[ 1329.937535][T22635]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1329.943487][T22635] RIP: 0033:0x7fd70c19acb9
[ 1329.947952][T22635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1329.967699][T22635] RSP: 002b:00007fd70cfae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1329.976171][T22635] RAX: ffffffffffffffda RBX: 00007fd70c415fa0 RCX: 00007fd70c19acb9
[ 1329.984199][T22635] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 1329.992200][T22635] RBP: 00007fd70cfae090 R08: 0000000000000000 R09: 0000000000000000
[ 1330.000197][T22635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1330.000215][T22635] R13: 00007fd70c416038 R14: 00007fd70c415fa0 R15: 00007fffa47da388
[ 1330.000247][T22635]  </TASK>
[ 1330.696858][T22654] GPL: port 1(erspan0) entered blocking state
[ 1330.704705][T22654] GPL: port 1(erspan0) entered disabled state
[ 1330.711846][T22654] erspan0: entered allmulticast mode
[ 1330.718851][T22654] erspan0: entered promiscuous mode
[ 1330.818904][T22657] GPL: port 1(erspan0) entered blocking state
[ 1330.825209][T22657] GPL: port 1(erspan0) entered forwarding state
[ 1331.071165][T22668] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5893'.
[ 1331.762971][T22689] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5902'.
[ 1331.919437][T22693] netlink: 'syz.0.5904': attribute type 21 has an invalid length.
[ 1331.937069][T22693] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5904'.
[ 1333.162314][ T5780] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14
[ 1334.602643][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.798709][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.914846][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.998895][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1335.203369][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[ 1335.249946][   T12] ip6gretap0 (unregistering): left allmulticast mode
[ 1335.266220][   T12] ip6gretap0 (unregistering): left promiscuous mode
[ 1335.273012][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[ 1336.477155][   T12] hsr_slave_0: left promiscuous mode
[ 1336.483586][   T12] hsr_slave_1: left promiscuous mode
[ 1336.493445][   T12] bridge_slave_0: left allmulticast mode
[ 1336.501332][   T12] bridge_slave_0: left promiscuous mode
[ 1336.507259][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1336.537782][   T12] veth1_macvtap: left promiscuous mode
[ 1336.543424][   T12] veth0_macvtap: left promiscuous mode
[ 1336.549693][   T12] veth1_vlan: left promiscuous mode
[ 1336.555214][   T12] veth0_vlan: left promiscuous mode
[ 1337.266449][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1337.313512][   T12] team0 (unregistering): Port device C removed
[ 1337.360689][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1337.415228][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1337.466981][   T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1337.710173][   T12] team0 (unregistering): Port device dummy0 removed
[ 1337.740735][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1337.776560][   T12] bond0 (unregistering): Released all slaves
[ 1338.230605][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.312149][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.396962][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.481612][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.674518][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.781597][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.858201][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.939887][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.132166][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.233487][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.313207][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.399947][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.685928][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[ 1339.773430][   T12] ip6gretap0 (unregistering): left allmulticast mode
[ 1339.780320][   T12] ip6gretap0 (unregistering): left promiscuous mode
[ 1339.789183][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[ 1339.831633][   T12] ip6gretap0 (unregistering): left allmulticast mode
[ 1339.838497][   T12] ip6gretap0 (unregistering): left promiscuous mode
[ 1339.845153][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[ 1340.468218][   T12] GPL: port 1(erspan0) entered disabled state
[ 1340.514024][   T12] erspan0 (unregistering): left allmulticast mode
[ 1340.521027][   T12] erspan0 (unregistering): left promiscuous mode
[ 1340.529550][   T12] GPL: port 1(erspan0) entered disabled state
[ 1341.605855][   T12] hsr_slave_0: left promiscuous mode
[ 1341.613999][   T12] hsr_slave_1: left promiscuous mode
[ 1341.624656][   T12] hsr_slave_0: left promiscuous mode
[ 1341.630944][   T12] hsr_slave_1: left promiscuous mode
[ 1341.642924][   T12] bridge0: port 2(dummy0) entered disabled state
[ 1341.651718][   T12] bridge_slave_0: left allmulticast mode
[ 1341.657591][   T12] bridge_slave_0: left promiscuous mode
[ 1341.663387][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1341.682320][   T12] hsr_slave_0: left promiscuous mode
[ 1341.689222][   T12] hsr_slave_1: left promiscuous mode
[ 1341.695212][   T12] bridge_slave_1: left allmulticast mode
[ 1341.700990][   T12] bridge_slave_1: left promiscuous mode
[ 1341.707846][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.718508][   T12] bridge_slave_0: left allmulticast mode
[ 1341.724203][   T12] bridge_slave_0: left promiscuous mode
[ 1341.732584][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1341.772958][   T12] veth1_macvtap: left promiscuous mode
[ 1341.778797][   T12] veth0_macvtap: left promiscuous mode
[ 1341.785449][   T12] veth1_macvtap: left promiscuous mode
[ 1341.792448][   T12] veth0_macvtap: left promiscuous mode
[ 1341.798103][   T12] veth1_vlan: left promiscuous mode
[ 1341.803403][   T12] veth0_vlan: left promiscuous mode
[ 1341.810017][   T12] veth1_macvtap: left promiscuous mode
[ 1341.815552][   T12] veth0_macvtap: left promiscuous mode
[ 1342.397683][   T12] team_slave_1 (unregistering): left promiscuous mode
[ 1342.404789][   T12] team_slave_1 (unregistering): left allmulticast mode
[ 1342.415214][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1342.469677][   T12] team_slave_0 (unregistering): left promiscuous mode
[ 1342.478679][   T12] team_slave_0 (unregistering): left allmulticast mode
[ 1342.487669][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1342.532410][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1342.543300][   T12] bond_slave_1 (unregistering): left promiscuous mode
[ 1342.591817][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1342.600774][   T12] bond_slave_0 (unregistering): left promiscuous mode
[ 1342.648918][   T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1342.919698][   T12] bond0 (unregistering): Released all slaves
[ 1343.460492][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1343.511036][   T12] team0 (unregistering): Port device C removed
[ 1343.557693][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1343.566641][   T12] bond_slave_1 (unregistering): left promiscuous mode
[ 1343.615141][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1343.624222][   T12] bond_slave_0 (unregistering): left promiscuous mode
[ 1343.675917][   T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1343.684999][   T12] bridge_slave_1 (unregistering): left promiscuous mode