last executing test programs:

4.585699788s ago: executing program 0 (id=8495):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

4.162136413s ago: executing program 0 (id=8499):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x18000000}, 0x0, 0x10, &(0x7f0000000040)}, 0x24)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.775501677s ago: executing program 2 (id=8503):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000003c0)=""/144, 0x38, 0x90, 0x1}, 0x20)
syz_clone(0x402200, &(0x7f0000000080)="247cc729cb81ef7911a1fc6f1b4710a362ef2e74563555f55c48204723e67fc186fe7e23422a580500000000000000bb562e975bb2f8b6eb38be2b7f35acb07add67c738b5", 0x45, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000280)="4af92238b5aa2140f9d890f4638efe4ff3008d257293f33c80abc42dc7249bd3888ccbf7c418cc0d17133cf95bd5aa20ab37baec4d8d4c2b92e4fb449f518ed211054de1912a0334ab766eacf9bfb4baa2b3172a0361599bdb61da0e9aff")
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f0000000540)=""/37, 0x25}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f00000005c0)=""/237, 0xed}], 0x4, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x10020)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x181)
write$cgroup_type(r2, &(0x7f0000000140), 0x9)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3.688034868s ago: executing program 1 (id=8504):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2b05fe80000000000000dc8b850f693c66ccfe808100000000000200613a2eb0094401e0", 0x2a}], 0x1}, 0x20000884)

3.49814752s ago: executing program 1 (id=8507):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x300, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.315261212s ago: executing program 4 (id=8509):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

3.314976442s ago: executing program 1 (id=8510):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00006000000061115400000000001800"/40], &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611089000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
recvmsg$kcm(r2, &(0x7f0000000c00)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000800)=""/69, 0x45}, {&(0x7f0000000880)=""/54, 0x36}, {&(0x7f00000008c0)=""/9, 0x9}, {&(0x7f0000000900)=""/208, 0xd0}, {&(0x7f0000000a00)=""/172, 0xac}], 0xa, &(0x7f0000000b80)=""/97, 0x61}, 0x2001)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2.926902076s ago: executing program 4 (id=8511):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)

2.908130807s ago: executing program 2 (id=8512):
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x16016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x7bb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r0, &(0x7f0000000340)="e7a8b55012fb38f882e5a258d319dfbd6fd749952e24f7c57e9314c85a5490b445f5baf2c4a16106a0494766f01563db7710670b6a78655174b90db31066f7ea8b5cb78df88b4688bd4b4265737b88a72828bdc2bfefe9351601bccb6c029fcb139349c3e303706cb0241d93eb5a46a226cef72dff1e04fc04f49024aba09a1aff56844575657918365bf676016e53f13b9f3a92ea73cf51a2d7752c5d0dfe7d0ce77e78387632af1e0ee0b6b95f0d7efaed1499c0123efdedb46f3db8d812423f0982772363f786ff2dd43d479a39c3a8a572850df7f2a8295d733eda45cfd6dda10c4330349f45feeb6cf512177d5b278affa1e6c297f7"}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0x80, 0x0, 0x0, 0x0, 0x40000000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x7}, 0x800, 0x1000000, 0xd2b6, 0x3, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x117}], 0x1}, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1d, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe90, &(0x7f0000000080)=[{&(0x7f0000000140)="600000009f000d090a762d7f089e", 0xfca2}, {&(0x7f0000000480)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

2.839105308s ago: executing program 0 (id=8513):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000001500)={0x0, 0x40, 0x0}, 0x40012020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r3], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0000000000000000000000fa88a8", 0x36}], 0x1}, 0x4000080)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a800", 0x32}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782d7acc56d27d1333000007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0)

2.5995895s ago: executing program 1 (id=8514):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (rerun: 32)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x98}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
close(r1)

1.900337388s ago: executing program 2 (id=8515):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0"], 0x48}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x6)
recvmsg(0xffffffffffffffff, 0x0, 0x10104)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, 0x0, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffe0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001001000001ff0000"], 0x18}, 0x4054)

1.866619279s ago: executing program 4 (id=8516):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0c5053cb1386533, @perf_bp={0x0, 0x2}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000500000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90)

1.841530279s ago: executing program 1 (id=8517):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

1.615065451s ago: executing program 4 (id=8520):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="080000000400000002000000", @ANYRES32], 0x50)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}, 0x10001)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000200000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000200)=""/34, 0x22}], 0x2, &(0x7f0000000280)=""/160, 0xa0}, 0x1)

1.524932872s ago: executing program 3 (id=8521):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

1.499879153s ago: executing program 0 (id=8522):
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(0x0, 0x0)
unlink(&(0x7f0000000200)='./cgroup\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000, 0x106e, 0xa641}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0xe, 0xfe, 0x9, 0x1, 0x0, 0x80000000, 0x32043, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x280, 0x4, @perf_config_ext={0x9, 0x9}, 0x802, 0x3864, 0xd5e6, 0x4, 0xffffffffffffefff, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0xd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8, 0x7000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x80)

1.351685694s ago: executing program 3 (id=8523):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b904201d080420000000ff0002a11800ff000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x62, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x2, <r5=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x401, '\x00', r3, r4, 0x4, 0x5, 0x3}, 0x50)

1.156139527s ago: executing program 3 (id=8524):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00006000000061115400000000001800"/40], &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611089000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
recvmsg$kcm(r2, &(0x7f0000000c00)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000800)=""/69, 0x45}, {&(0x7f0000000880)=""/54, 0x36}, {&(0x7f00000008c0)=""/9, 0x9}, {&(0x7f0000000900)=""/208, 0xd0}, {&(0x7f0000000a00)=""/172, 0xac}], 0xa, &(0x7f0000000b80)=""/97, 0x61}, 0x2001)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

866.96849ms ago: executing program 1 (id=8525):
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x2}, 0x10000, 0x0, 0x0, 0x3, 0xa, 0x0, 0x1, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) (async)
write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x20000000)

795.471391ms ago: executing program 3 (id=8526):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000dfc0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

746.976441ms ago: executing program 2 (id=8527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4) (async)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000240)) (rerun: 32)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

746.638351ms ago: executing program 0 (id=8528):
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @exit, @alu={0x4, 0x1, 0x2, 0x2, 0x0, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000001240)='syzkaller\x00', 0x3, 0x17, &(0x7f0000001280)=""/23, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x0, 0x3, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001340)=[0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x0, 0xc1, 0x0, &(0x7f0000001440)="f75e376a14a9458d526620c7b7d0fb1403f1d503b258cf8209ce32999b3e904347718766e786224d0f876a235738946a9732ca5d5b59fe28432d91960316460b3089ad9984fd751dd3d8cc99c7d9015921c122feeecf3435f7716752006fac73f84a45a2df413621f278f8b75c7b17c3d3c2635e89ed0779327eb718464eb9611435b3b6c88cae97dd94c9315ea4d84f90b0c4f6dc2b71059bdbaedf404c55c2ab7e1bf8fa2b8a67e7f894fb86e988cd5ca4a4afc98f09e76e8dfe228298c203e5", &(0x7f0000001540), 0x9, 0x0, 0xb, 0x2d, &(0x7f0000001580)="321803835eaa376feea0f6", &(0x7f00000015c0)="e3a0d106a561f88f6b563cf022556adc04fc9feb47657192785902113adbc68900cc0d36737c2c164a97da03b2", 0x5, 0x0, 0x7fffffff}, 0x50)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

663.330612ms ago: executing program 4 (id=8529):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x43, &(0x7f0000001080)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="110000000000000000000000010000009b000000000000001100000000000000290000003b000000000029000000000011000000000000000000000001000000000000000000000000000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffe0000002000000000000000000000000000070f3aa9a51a5659c1cfdadc0f40008070000009400010000000000"], 0x48}, 0x0)

547.317953ms ago: executing program 0 (id=8530):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000fc5e1206021f1f00000e000a0010000000028000001294aa", 0x2f}], 0x1}, 0x4840)

463.084945ms ago: executing program 4 (id=8531):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000700), 0x4)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x84882, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x18, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
r7 = socket$kcm(0x29, 0x0, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x11, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xce, &(0x7f0000000540)=""/206, 0x41000, 0x28, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0xf, 0xfffffe57, 0x6}, 0x10, 0xc48c, r3, 0x3, &(0x7f00000006c0)=[r2, r5, r5, r5], &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x3}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x8}], 0x10, 0x3ff}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001540)={r7, r8})
syz_clone(0x408a2400, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000840)="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")

462.845625ms ago: executing program 3 (id=8532):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x604}, 0x21)

118.697668ms ago: executing program 2 (id=8533):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

117.944108ms ago: executing program 3 (id=8534):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r3 = socket$kcm(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x3, <r8=>0x0}, 0x8)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0xba7, 0x18}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r5, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x2a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x3d5, 0x89, &(0x7f00000004c0)=""/137, 0x41000, 0x10, '\x00', r10, @fallback=0x13, r7, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xc, 0x1, 0x40}, 0x10, r8, r1, 0x3, &(0x7f0000000800)=[r0, r0, r0, r0, r0, r9], &(0x7f0000000840)=[{0x3, 0x2, 0x200d, 0x6}, {0x1, 0x5, 0xf, 0xb}, {0x2, 0x5, 0xd, 0x4}], 0x10, 0x2}, 0x94)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$kcm(0xa, 0x6, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r12, 0x10d, 0x2, &(0x7f0000000040)=r13, 0x5)
openat$cgroup_procs(r13, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8970, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

0s ago: executing program 2 (id=8535):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

kernel console output (not intermixed with test programs):

ay have been left with an inconsistent configuration, please check.
[  959.908098][T22803] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  959.944517][T22803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  963.061897][T22801] device hsr_slave_1 left promiscuous mode
[  963.679806][T22838] device pim6reg1 entered promiscuous mode
[  963.946728][T22842] validate_nla: 2 callbacks suppressed
[  963.946844][T22842] netlink: 'syz.1.6345': attribute type 2 has an invalid length.
[  964.091024][T22842] device 0 entered promiscuous mode
[  964.240112][T22851] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6349'.
[  964.390239][T22853] tipc: Started in network mode
[  964.404705][T22853] tipc: Node identity 9215a268, cluster identity 4711
[  964.411645][T22853] tipc: Node number set to 2450891368
[  964.450403][T22859] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.6353'.
[  964.650590][T22862] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6354'.
[  964.808072][T22867] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6354'.
[  965.321896][T22875] device pim6reg1 entered promiscuous mode
[  965.636374][T22880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6361'.
[  965.652713][T22882] netlink: 'syz.4.6362': attribute type 2 has an invalid length.
[  965.741709][T22882] device 2 entered promiscuous mode
[  965.816631][T22891] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6365'.
[  966.009706][T22900] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6368'.
[  966.039405][T22900] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  966.114928][T22900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  966.613565][T22918] netlink: 'syz.0.6372': attribute type 10 has an invalid length.
[  966.709761][T22918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6372'.
[  966.744159][T22918] device team0 entered promiscuous mode
[  966.749918][T22918] device team_slave_0 entered promiscuous mode
[  966.820698][T22918] device team_slave_1 entered promiscuous mode
[  966.835060][T22918] bridge0: port 3(team0) entered blocking state
[  966.862069][T22918] bridge0: port 3(team0) entered disabled state
[  966.924505][T22918] bridge0: port 3(team0) entered blocking state
[  966.930869][T22918] bridge0: port 3(team0) entered forwarding state
[  967.450763][T22926] device pim6reg1 entered promiscuous mode
[  968.107643][T22948] netlink: 'syz.1.6385': attribute type 10 has an invalid length.
[  968.294418][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  968.305282][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  968.314250][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  968.322419][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  968.347886][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  968.355407][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  968.456083][ T4659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.618643][ T4659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.673789][T22971] device bond_slave_1 entered promiscuous mode
[  968.693508][T22965] Ÿë
: port 1(veth0_to_team) entered blocking state
[  968.700221][T22965] Ÿë
: port 1(veth0_to_team) entered disabled state
[  968.732494][T22965] device veth0_to_team entered promiscuous mode
[  968.772569][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  968.872617][ T4659] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.887158][T22966] delete_channel: no stack
[  968.893144][T22966] delete_channel: no stack
[  968.934982][T22981] netlink: 'syz.2.6393': attribute type 2 has an invalid length.
[  968.986660][T22981] netlink: 'syz.2.6393': attribute type 8 has an invalid length.
[  969.031601][T22981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6393'.
[  969.190527][ T4659] device netdevsim0 left promiscuous mode
[  969.226268][ T4659] team0: Port device netdevsim0 removed
[  969.256996][ T4659] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.350257][T22979] device pim6reg1 entered promiscuous mode
[  969.384609][T22989] netlink: 'syz.1.6395': attribute type 7 has an invalid length.
[  969.706144][T22995] netlink: 'syz.3.6397': attribute type 3 has an invalid length.
[  969.714269][T22989] netlink: 'syz.1.6395': attribute type 10 has an invalid length.
[  969.714293][T22989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6395'.
[  969.732226][T22995] netlink: 'syz.3.6397': attribute type 1 has an invalid length.
[  969.740261][T22995] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6397'.
[  969.745244][T22989] bridge0: port 4(veth0_vlan) entered blocking state
[  969.848288][T22989] bridge0: port 4(veth0_vlan) entered disabled state
[  969.874273][T22989] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  969.929445][T22995] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6397'.
[  969.971567][T22995] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[  969.996241][T22995] CPU: 1 PID: 22995 Comm: syz.3.6397 Not tainted syzkaller #0
[  970.003759][T22995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  970.013836][T22995] Call Trace:
[  970.017134][T22995]  <TASK>
[  970.020083][T22995]  dump_stack_lvl+0x188/0x24e
[  970.024798][T22995]  ? show_regs_print_info+0x12/0x12
[  970.030012][T22995]  ? load_image+0x400/0x400
[  970.034525][T22995]  sysfs_warn_dup+0x8a/0xa0
[  970.039028][T22995]  sysfs_do_create_link_sd+0xc0/0x110
[  970.044402][T22995]  device_add+0x7ed/0xfb0
[  970.048737][T22995]  wiphy_register+0x1d9f/0x2ac0
[  970.053609][T22995]  ? cfg80211_event_work+0x40/0x40
[  970.058722][T22995]  ? minstrel_ht_alloc+0x894/0xa20
[  970.063843][T22995]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  970.069915][T22995]  ieee80211_register_hw+0x2d00/0x39f0
[  970.075392][T22995]  ? ieee80211_register_hw+0xf21/0x39f0
[  970.080945][T22995]  ? ieee80211_register_hw+0xf21/0x39f0
[  970.086502][T22995]  ? ieee80211_tasklet_handler+0x20/0x20
[  970.092147][T22995]  ? memset+0x1e/0x40
[  970.096126][T22995]  ? __hrtimer_init+0x186/0x270
[  970.100975][T22995]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  970.106715][T22995]  hwsim_new_radio_nl+0xafa/0xce0
[  970.111759][T22995]  genl_family_rcv_msg_doit+0x22a/0x330
[  970.117304][T22995]  ? end_current_label_crit_section+0x170/0x170
[  970.123550][T22995]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  970.129452][T22995]  ? bpf_lsm_capable+0x5/0x10
[  970.134129][T22995]  ? security_capable+0x85/0xb0
[  970.139001][T22995]  genl_rcv_msg+0x604/0x790
[  970.143528][T22995]  ? genl_bind+0x360/0x360
[  970.147949][T22995]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  970.154393][T22995]  netlink_rcv_skb+0x1fb/0x450
[  970.159162][T22995]  ? genl_bind+0x360/0x360
[  970.163578][T22995]  ? netlink_ack+0x1170/0x1170
[  970.168362][T22995]  ? down_read+0x1a8/0x2d0
[  970.172787][T22995]  genl_rcv+0x24/0x40
[  970.176768][T22995]  netlink_unicast+0x74d/0x8d0
[  970.181545][T22995]  netlink_sendmsg+0x8ad/0xbd0
[  970.186319][T22995]  ? netlink_getsockopt+0x550/0x550
[  970.191527][T22995]  ? aa_sock_msg_perm+0x94/0x150
[  970.196463][T22995]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  970.201742][T22995]  ? security_socket_sendmsg+0x7c/0xa0
[  970.207205][T22995]  ? netlink_getsockopt+0x550/0x550
[  970.212406][T22995]  ____sys_sendmsg+0x5be/0x970
[  970.217183][T22995]  ? __sys_sendmsg_sock+0x30/0x30
[  970.222207][T22995]  ? __import_iovec+0x315/0x500
[  970.227064][T22995]  ? import_iovec+0x6f/0xa0
[  970.231571][T22995]  ___sys_sendmsg+0x2a2/0x360
[  970.236252][T22995]  ? try_to_wake_up+0x67c/0x1080
[  970.241192][T22995]  ? __sys_sendmsg+0x290/0x290
[  970.246256][T22995]  __se_sys_sendmsg+0x1bb/0x2a0
[  970.251112][T22995]  ? __x64_sys_sendmsg+0x80/0x80
[  970.256066][T22995]  ? lockdep_hardirqs_on+0x94/0x140
[  970.261264][T22995]  do_syscall_64+0x4c/0xa0
[  970.265683][T22995]  ? clear_bhb_loop+0x60/0xb0
[  970.270361][T22995]  ? clear_bhb_loop+0x60/0xb0
[  970.275038][T22995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  970.281015][T22995] RIP: 0033:0x7f92b259cdd9
[  970.285423][T22995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  970.305025][T22995] RSP: 002b:00007f92b3405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  970.313437][T22995] RAX: ffffffffffffffda RBX: 00007f92b2815fa0 RCX: 00007f92b259cdd9
[  970.321404][T22995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  970.329388][T22995] RBP: 00007f92b2632d69 R08: 0000000000000000 R09: 0000000000000000
[  970.337356][T22995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  970.345322][T22995] R13: 00007f92b2816038 R14: 00007f92b2815fa0 R15: 00007ffeaa33bc08
[  970.353311][T22995]  </TASK>
[  970.394250][ T4283] Bluetooth: hci3: command 0x0409 tx timeout
[  970.487814][T23006] netlink: 'syz.0.6398': attribute type 25 has an invalid length.
[  970.506203][T23006] netlink: 'syz.0.6398': attribute type 1 has an invalid length.
[  970.526744][T23006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  970.549524][T22956] chnl_net:caif_netlink_parms(): no params data found
[  970.688880][T22956] bridge0: port 1(bridge_slave_0) entered blocking state
[  970.696498][T22956] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.711337][T22956] device bridge_slave_0 entered promiscuous mode
[  970.729009][T22956] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.736535][T22956] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.745157][T22956] device bridge_slave_1 entered promiscuous mode
[  970.770526][T22956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  970.782634][T22956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  970.814116][T22956] team0: Port device team_slave_0 added
[  970.829039][T22956] team0: Port device team_slave_1 added
[  970.851386][T22956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  970.858706][T22956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  970.885217][T22956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  970.898020][T22956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  970.917334][T22956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  970.952525][T22956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  972.473510][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[  972.694230][ T4659] device 0 left promiscuous mode
[  972.762123][T22956] device hsr_slave_0 entered promiscuous mode
[  972.821947][T22956] device hsr_slave_1 entered promiscuous mode
[  972.832959][T22956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  972.865226][T22956] Cannot create hsr debugfs directory
[  973.728483][ T4659] device 1 left promiscuous mode
[  973.814001][ T4659] device 2 left promiscuous mode
[  974.025217][ T4659] tipc: Left network mode
[  974.553515][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[  975.365006][T22956] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  975.517879][T22956] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  975.551882][T22956] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  975.607247][T23088] netlink: 'syz.1.6416': attribute type 9 has an invalid length.
[  975.622610][T23088] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6416'.
[  975.651249][T22956] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  976.354580][T23100] delete_channel: no stack
[  976.361244][T23101] netlink: 'syz.0.6418': attribute type 21 has an invalid length.
[  976.375135][T23101] netlink: 'syz.0.6418': attribute type 6 has an invalid length.
[  976.383398][T23101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6418'.
[  976.463925][T22956] 8021q: adding VLAN 0 to HW filter on device bond0
[  976.531344][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  976.548962][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  976.579919][T22956] 8021q: adding VLAN 0 to HW filter on device team0
[  976.626784][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  976.633561][ T4282] Bluetooth: hci3: command 0x0419 tx timeout
[  976.646951][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  976.735330][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.742527][ T4644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  976.775439][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  976.810751][T23127] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6427'.
[  976.844836][T23126] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6426'.
[  976.875987][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  976.906444][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  976.929278][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.936529][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  976.945774][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  977.004362][T23112] device pim6reg1 entered promiscuous mode
[  977.059598][T23126] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  977.102526][T23126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  977.134249][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  977.156418][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  977.190361][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  977.453732][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  977.470120][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  977.514663][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  977.556993][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  977.614891][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  977.663581][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  977.698846][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  977.887177][T22956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  978.115394][T23161] netlink: 'syz.0.6434': attribute type 7 has an invalid length.
[  978.486961][T23166] netlink: 'syz.0.6434': attribute type 10 has an invalid length.
[  978.517129][T23166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6434'.
[  978.569590][T23166] bridge0: port 4(veth0_vlan) entered blocking state
[  978.598505][T23166] bridge0: port 4(veth0_vlan) entered disabled state
[  978.620638][T23166] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  978.649644][T23177] netlink: 'syz.1.6438': attribute type 13 has an invalid length.
[  978.683082][T23180] netlink: 'syz.3.6439': attribute type 10 has an invalid length.
[  978.691072][T23177] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6438'.
[  978.691104][T23180] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.6439'.
[  978.706843][T23177] erspan0: refused to change device tx_queue_len
[  979.084146][ T4659] device hsr_slave_0 left promiscuous mode
[  979.127037][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  979.163588][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.184065][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  979.191531][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.233595][ T4659] bridge0: port 3(team0) entered disabled state
[  979.246224][ T4659] device bridge_slave_1 left promiscuous mode
[  979.252750][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.263642][ T4659] device bridge_slave_0 left promiscuous mode
[  979.272453][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.321825][ T4659] device veth0_macvtap left promiscuous mode
[  979.328430][ T4659] device veth1_vlan left promiscuous mode
[  979.832853][ T4659] device macvlan0 left promiscuous mode
[  979.849158][ T4659] team0 (unregistering): Port device macvlan0 removed
[  980.307335][ T4659] device team_slave_1 left promiscuous mode
[  980.316505][ T4659] team0 (unregistering): Port device team_slave_1 removed
[  980.362700][ T4659] device team_slave_0 left promiscuous mode
[  980.370762][ T4659] team0 (unregistering): Port device team_slave_0 removed
[  980.867077][T23193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6443'.
[  980.883121][T23198] netlink: 'syz.2.6444': attribute type 25 has an invalid length.
[  980.891913][T23198] netlink: 'syz.2.6444': attribute type 1 has an invalid length.
[  980.899910][T23198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  980.907664][T23199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6445'.
[  980.944644][T23210] netlink: 'syz.3.6447': attribute type 21 has an invalid length.
[  980.952563][T23210] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6447'.
[  980.995106][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  981.002718][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  981.037153][T22956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.104934][T23235] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6449'.
[  981.626143][T23256] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  981.669641][T23256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  981.857494][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  981.870935][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  981.943358][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  981.963898][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  981.976999][T22956] device veth0_vlan entered promiscuous mode
[  981.985310][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  982.024127][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  982.046501][T22956] device veth1_vlan entered promiscuous mode
[  982.054115][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  982.127791][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  982.159925][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  982.229521][T23273] netlink: 'syz.2.6460': attribute type 9 has an invalid length.
[  982.243893][T22956] device veth0_macvtap entered promiscuous mode
[  982.248011][T23273] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6460'.
[  982.273900][T22956] device veth1_macvtap entered promiscuous mode
[  982.346509][T23279] ÿÿÿÿÿÿ: renamed from bond_slave_0
[  982.392409][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.427722][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.439081][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.451041][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.461270][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.472214][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.483306][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.494375][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.520957][T22956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  982.549720][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  982.564118][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  982.585313][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  982.594837][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  982.608171][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  982.619331][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.643957][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  982.667000][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.684521][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  982.700509][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.725654][T22956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  982.736643][T22956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.749534][T22956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.769037][T22956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.801556][T22956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.833391][T22956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.842145][T22956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  982.890586][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  982.916382][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  983.442758][T23300] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6470'.
[  983.483151][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  983.510257][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.551928][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  983.588970][ T4659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  983.612104][ T4659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.644093][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  983.707732][T23317] netlink: 'syz.0.6476': attribute type 27 has an invalid length.
[  983.746203][T23317] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6476'.
[  984.155099][ T4282] Bluetooth: hci4: ISO packet for unknown connection handle 3078
[  984.424716][T23354] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6489'.
[  984.442372][T23354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  984.493657][T23354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  985.130806][T23384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6502'.
[  985.561861][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  985.571427][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  985.580050][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  985.588950][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  985.595938][T23380] netlink: 'syz.1.6499': attribute type 10 has an invalid length.
[  985.612927][T23380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6499'.
[  985.616168][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  985.633697][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  985.640672][T23380] device team0 entered promiscuous mode
[  985.640689][T23380] device team_slave_0 entered promiscuous mode
[  985.640829][T23380] device team_slave_1 entered promiscuous mode
[  985.674169][T23380] bridge0: port 4(team0) entered blocking state
[  985.690785][T23380] bridge0: port 4(team0) entered disabled state
[  985.700763][T23380] bridge0: port 4(team0) entered blocking state
[  985.707158][T23380] bridge0: port 4(team0) entered forwarding state
[  985.732245][T23385] netlink: 'syz.4.6501': attribute type 13 has an invalid length.
[  985.776077][T23385] syz_tun: refused to change device tx_queue_len
[  985.820105][T23385] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  985.886871][T23388] netlink: 'syz.4.6501': attribute type 10 has an invalid length.
[  986.081816][T23388] team0: Port device netdevsim0 added
[  986.501765][T23413] device syzkaller0 entered promiscuous mode
[  986.583636][T23419] netlink: 'syz.2.6511': attribute type 10 has an invalid length.
[  987.178834][ T4638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.212225][T23423] device pim6reg1 entered promiscuous mode
[  987.681127][ T4283] Bluetooth: hci5: command 0x0409 tx timeout
[  988.591036][T23446] netlink: 'syz.1.6521': attribute type 29 has an invalid length.
[  989.625396][ T4638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.647378][T23439] netlink: 'syz.4.6518': attribute type 10 has an invalid length.
[  989.682193][T23394] chnl_net:caif_netlink_parms(): no params data found
[  989.751825][T23446] netlink: 'syz.1.6521': attribute type 29 has an invalid length.
[  989.773457][ T4283] Bluetooth: hci5: command 0x041b tx timeout
[  989.814871][ T4638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.985984][ T4638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.121720][T23394] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.194428][T23394] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.202734][T23394] device bridge_slave_0 entered promiscuous mode
[  990.212327][T23394] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.219784][T23394] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.228301][T23394] device bridge_slave_1 entered promiscuous mode
[  990.338128][T23394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  990.354974][T23472] FAULT_INJECTION: forcing a failure.
[  990.354974][T23472] name failslab, interval 1, probability 0, space 0, times 0
[  990.390787][T23472] CPU: 0 PID: 23472 Comm: syz.0.6528 Not tainted syzkaller #0
[  990.397456][T23394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  990.398281][T23472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  990.417370][T23472] Call Trace:
[  990.420674][T23472]  <TASK>
[  990.423615][T23472]  dump_stack_lvl+0x188/0x24e
[  990.428309][T23472]  ? show_regs_print_info+0x12/0x12
[  990.433519][T23472]  ? load_image+0x400/0x400
[  990.438017][T23472]  ? __might_sleep+0xd0/0xd0
[  990.442602][T23472]  ? __lock_acquire+0x7d10/0x7d10
[  990.447646][T23472]  should_fail_ex+0x399/0x4d0
[  990.452364][T23472]  should_failslab+0x5/0x20
[  990.456902][T23472]  slab_pre_alloc_hook+0x59/0x310
[  990.461961][T23472]  ? tomoyo_encode+0x27e/0x540
[  990.466763][T23472]  __kmem_cache_alloc_node+0x4f/0x260
[  990.468248][T23474] netlink: 'syz.2.6531': attribute type 10 has an invalid length.
[  990.472152][T23472]  ? tomoyo_encode+0x27e/0x540
[  990.472183][T23472]  __kmalloc+0xa0/0x240
[  990.488896][T23472]  tomoyo_encode+0x27e/0x540
[  990.493530][T23472]  tomoyo_realpath_from_path+0x58e/0x5d0
[  990.499205][T23472]  ? tomoyo_path_number_perm+0x205/0x650
[  990.504852][T23472]  tomoyo_path_number_perm+0x22f/0x650
[  990.510319][T23472]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  990.515782][T23472]  ? ksys_write+0x1c0/0x250
[  990.520290][T23472]  ? common_file_perm+0x171/0x1c0
[  990.525358][T23472]  ? __fget_files+0x28/0x4b0
[  990.529952][T23472]  ? __fget_files+0x28/0x4b0
[  990.534561][T23472]  security_file_ioctl+0x6c/0xa0
[  990.539513][T23472]  __se_sys_ioctl+0x48/0x170
[  990.544113][T23472]  do_syscall_64+0x4c/0xa0
[  990.548537][T23472]  ? clear_bhb_loop+0x60/0xb0
[  990.553308][T23472]  ? clear_bhb_loop+0x60/0xb0
[  990.557987][T23472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  990.563879][T23472] RIP: 0033:0x7fc9ed99cdd9
[  990.568295][T23472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  990.587904][T23472] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  990.596321][T23472] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[  990.604295][T23472] RDX: 0000200000001a80 RSI: 0000000000008970 RDI: 0000000000000005
[  990.612264][T23472] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[  990.620232][T23472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.628199][T23472] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[  990.636191][T23472]  </TASK>
[  990.644329][T23472] ERROR: Out of memory at tomoyo_realpath_from_path.
[  990.669945][T23474] team0: Device veth1_macvtap failed to register rx_handler
[  990.741922][ T4638] device 0 left promiscuous mode
[  990.773133][T23394] team0: Port device team_slave_0 added
[  990.795317][T23394] team0: Port device team_slave_1 added
[  990.829139][ T4638] device 1 left promiscuous mode
[  990.882234][T23394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  990.911605][T23394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  990.946116][T23394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  990.959748][T23482] netlink: 'syz.4.6532': attribute type 29 has an invalid length.
[  990.969597][T23479] netlink: 'syz.1.6533': attribute type 3 has an invalid length.
[  990.985914][ T4638] device 2 left promiscuous mode
[  990.991334][T23479] netlink: 'syz.1.6533': attribute type 1 has an invalid length.
[  991.033695][T23483] netlink: 'syz.0.6534': attribute type 25 has an invalid length.
[  991.035662][T23479] __nla_validate_parse: 1 callbacks suppressed
[  991.035784][T23479] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6533'.
[  991.047829][T23483] netlink: 'syz.0.6534': attribute type 1 has an invalid length.
[  991.106272][T23483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  991.142368][T23482] netlink: 'syz.4.6532': attribute type 29 has an invalid length.
[  991.175694][T23394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.188850][T23394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  991.306318][T23394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.389885][ T4638] device 3 left promiscuous mode
[  991.476050][ T4638] device 0 left promiscuous mode
[  991.796203][ T4638] tipc: Left network mode
[  991.843257][ T4283] Bluetooth: hci5: command 0x040f tx timeout
[  992.073070][T23394] device hsr_slave_0 entered promiscuous mode
[  992.157381][T23394] device hsr_slave_1 entered promiscuous mode
[  992.183502][T23394] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  992.220899][T23394] Cannot create hsr debugfs directory
[  992.252285][T23479] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6533'.
[  992.537187][T23479] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  992.646135][T23503] tipc: Started in network mode
[  992.651225][T23503] tipc: Node identity 9215a268, cluster identity 4711
[  992.679587][T23503] tipc: Node number set to 2450891368
[  992.795017][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  992.801366][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  992.951887][T23522] netlink: 'syz.1.6542': attribute type 1 has an invalid length.
[  992.986534][T23522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6542'.
[  993.923708][ T4283] Bluetooth: hci5: command 0x0419 tx timeout
[  994.213590][T23548] netlink: 'syz.1.6549': attribute type 21 has an invalid length.
[  994.275175][T23548] netlink: 'syz.1.6549': attribute type 6 has an invalid length.
[  994.359524][T23548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6549'.
[  994.480466][T23394] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  994.861137][T23394] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  994.905990][T23394] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  994.940868][T23394] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  995.284666][T23571] netlink: 'syz.1.6553': attribute type 10 has an invalid length.
[  995.319939][T23571] team0: Device veth1_macvtap failed to register rx_handler
[  995.572023][T23394] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.621425][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  995.635580][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  995.674605][ T4638] device hsr_slave_0 left promiscuous mode
[  995.696621][ T4638] device hsr_slave_1 left promiscuous mode
[  995.733448][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  995.740930][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.789973][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.810609][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  995.831113][ T4638] device batadv0 left promiscuous mode
[  995.837536][ T4638] bridge0: port 3(batadv0) entered disabled state
[  995.857658][ T4638] device bridge_slave_1 left promiscuous mode
[  995.867674][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.903006][ T4638] device bridge_slave_0 left promiscuous mode
[  995.927218][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.048356][ T4638] device veth1_vlan left promiscuous mode
[  996.421021][ T4638] device geneve1 left promiscuous mode
[  996.432035][ T4638] team0 (unregistering): Port device geneve1 removed
[  996.770272][ T4638] device team_slave_1 left promiscuous mode
[  996.777149][ T4638] team0 (unregistering): Port device team_slave_1 removed
[  996.816719][ T4638] device team_slave_0 left promiscuous mode
[  996.824918][ T4638] team0 (unregistering): Port device team_slave_0 removed
[  997.178560][ T4638] device bridge0 left promiscuous mode
[  997.184708][ T4638] team0 (unregistering): Port device bridge0 removed
[  997.298267][T23394] 8021q: adding VLAN 0 to HW filter on device team0
[  997.309031][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6562'.
[  997.324840][T23598] netlink: 'syz.2.6564': attribute type 25 has an invalid length.
[  997.332885][T23598] netlink: 'syz.2.6564': attribute type 1 has an invalid length.
[  997.373465][T23598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  997.383076][T23605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6566'.
[  997.433599][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  997.450037][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  997.494162][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state
[  997.501313][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  997.525955][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  997.535140][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  997.544097][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.551211][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  997.576209][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  997.591983][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  997.612229][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  997.624144][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  997.656185][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  997.684029][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  997.719627][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  997.733526][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  997.761755][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  997.788744][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  997.836655][T23394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  997.848626][T23394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  997.858002][T23620] netlink: 'syz.0.6571': attribute type 12 has an invalid length.
[  997.873575][T23620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6571'.
[  997.914920][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  997.925938][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  997.956957][T23625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  997.983009][T23625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  998.841658][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  998.858315][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  998.937876][T23394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  999.122915][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  999.158665][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  999.324166][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  999.336034][T23660] netlink: 'syz.0.6581': attribute type 3 has an invalid length.
[  999.359459][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  999.397112][T23660] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6581'.
[  999.432858][T23394] device veth0_vlan entered promiscuous mode
[  999.452925][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  999.467504][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  999.492405][T23394] device veth1_vlan entered promiscuous mode
[  999.505828][T23663] netlink: 'syz.4.6582': attribute type 10 has an invalid length.
[  999.531854][T23663] device veth0_macvtap left promiscuous mode
[  999.705648][T23667] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6583'.
[  999.786731][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  999.808586][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  999.829308][T23394] device veth0_macvtap entered promiscuous mode
[  999.862261][T23394] device veth1_macvtap entered promiscuous mode
[  999.907914][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  999.951339][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  999.983365][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1000.006642][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.033535][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1000.054519][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.066405][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1000.084014][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.097014][T23394] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1000.115451][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1000.127074][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1000.163304][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1000.172663][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1000.190317][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1000.239261][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.252657][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1000.266124][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.276247][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1000.287561][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.298174][T23394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1000.324365][T23394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.337190][T23394] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1000.390826][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1000.400382][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1000.420658][T23394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.436634][T23691] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.6588'.
[ 1000.469422][T23394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.509753][T23394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.546258][T23394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.617513][T23691] netlink: zone id is out of range
[ 1000.622729][T23691] netlink: zone id is out of range
[ 1000.671313][T23691] netlink: zone id is out of range
[ 1000.676921][T23691] netlink: zone id is out of range
[ 1000.697444][T23691] netlink: zone id is out of range
[ 1000.702632][T23691] netlink: zone id is out of range
[ 1000.741718][T23691] netlink: zone id is out of range
[ 1000.759005][T23691] netlink: zone id is out of range
[ 1000.775394][T23691] netlink: zone id is out of range
[ 1001.413976][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.421844][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.479954][ T4646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.480246][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1001.495440][ T4646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.564138][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1001.657220][T23711] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6594'.
[ 1001.693730][T23711] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1001.789235][T23719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6596'.
[ 1001.951916][ T4283] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4
[ 1005.204698][T23756] device pim6reg1 entered promiscuous mode
[ 1006.746263][T23779] netlink: 'syz.3.6609': attribute type 28 has an invalid length.
[ 1006.806909][T23779] netlink: 'syz.3.6609': attribute type 29 has an invalid length.
[ 1006.841346][T23779] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6609'.
[ 1007.029965][T23786] netlink: 'syz.2.6612': attribute type 2 has an invalid length.
[ 1007.150568][T23791] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6614'.
[ 1007.177603][T23791] bond0: (slave bond_slave_0): Releasing backup interface
[ 1007.197555][T23791] net_ratelimit: 6 callbacks suppressed
[ 1007.197600][T23791] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1007.232458][T23790] netlink: 'syz.1.6613': attribute type 10 has an invalid length.
[ 1007.241936][T23790] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6613'.
[ 1007.459323][T23805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1007.493512][T23809] netlink: 'syz.0.6620': attribute type 19 has an invalid length.
[ 1007.501576][T23809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6620'.
[ 1007.764877][T23818] device pim6reg1 entered promiscuous mode
[ 1008.540064][T23827] netlink: 'syz.3.6628': attribute type 29 has an invalid length.
[ 1008.754458][T23826] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6627'.
[ 1008.773365][T23826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1008.801455][T23827] netlink: 'syz.3.6628': attribute type 29 has an invalid length.
[ 1008.992554][T23833] netlink: 'syz.0.6629': attribute type 25 has an invalid length.
[ 1009.051627][T23833] netlink: 'syz.0.6629': attribute type 1 has an invalid length.
[ 1009.132982][T23833] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1009.290133][T23836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6631'.
[ 1009.498455][T23847] netlink: 'syz.4.6635': attribute type 12 has an invalid length.
[ 1009.827798][T23860] FAULT_INJECTION: forcing a failure.
[ 1009.827798][T23860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1009.932843][T23860] CPU: 0 PID: 23860 Comm: syz.1.6639 Not tainted syzkaller #0
[ 1009.940372][T23860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1009.950445][T23860] Call Trace:
[ 1009.953738][T23860]  <TASK>
[ 1009.956676][T23860]  dump_stack_lvl+0x188/0x24e
[ 1009.961389][T23860]  ? show_regs_print_info+0x12/0x12
[ 1009.966609][T23860]  ? load_image+0x400/0x400
[ 1009.971130][T23860]  ? __lock_acquire+0x7d10/0x7d10
[ 1009.976185][T23860]  should_fail_ex+0x399/0x4d0
[ 1009.980890][T23860]  _copy_from_user+0x2c/0x170
[ 1009.985592][T23860]  __copy_msghdr+0x3b7/0x580
[ 1009.990218][T23860]  ___sys_sendmsg+0x210/0x360
[ 1009.994922][T23860]  ? __sys_sendmsg+0x290/0x290
[ 1009.999730][T23860]  ? __lock_acquire+0x7d10/0x7d10
[ 1010.004817][T23860]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1010.009702][T23860]  ? __x64_sys_sendmsg+0x80/0x80
[ 1010.014700][T23860]  ? lockdep_hardirqs_on+0x94/0x140
[ 1010.019938][T23860]  do_syscall_64+0x4c/0xa0
[ 1010.024381][T23860]  ? clear_bhb_loop+0x60/0xb0
[ 1010.029083][T23860]  ? clear_bhb_loop+0x60/0xb0
[ 1010.033788][T23860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1010.039705][T23860] RIP: 0033:0x7fea5119cdd9
[ 1010.044139][T23860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1010.063791][T23860] RSP: 002b:00007fea52129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1010.072244][T23860] RAX: ffffffffffffffda RBX: 00007fea51415fa0 RCX: 00007fea5119cdd9
[ 1010.080232][T23860] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1010.088220][T23860] RBP: 00007fea52129090 R08: 0000000000000000 R09: 0000000000000000
[ 1010.096205][T23860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1010.104189][T23860] R13: 00007fea51416038 R14: 00007fea51415fa0 R15: 00007fffd253bc48
[ 1010.112190][T23860]  </TASK>
[ 1010.134069][T23869] device pim6reg1 entered promiscuous mode
[ 1010.275369][T23872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6642'.
[ 1010.692570][T23886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6647'.
[ 1010.744370][T23891] device pim6reg1 entered promiscuous mode
[ 1011.878310][T23895] validate_nla: 2 callbacks suppressed
[ 1011.878330][T23895] netlink: 'syz.1.6649': attribute type 33 has an invalid length.
[ 1011.924823][T23895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6649'.
[ 1011.953980][T23899] netlink: 463 bytes leftover after parsing attributes in process `syz.1.6649'.
[ 1012.217158][T23908] netlink: 'syz.3.6652': attribute type 21 has an invalid length.
[ 1012.266290][T23908] netlink: 'syz.3.6652': attribute type 6 has an invalid length.
[ 1012.323615][T23908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6652'.
[ 1012.366156][T23912] netlink: 'syz.1.6655': attribute type 10 has an invalid length.
[ 1012.411896][T23914] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1013.161975][T23928] netlink: 'syz.1.6658': attribute type 10 has an invalid length.
[ 1013.180245][T23928] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.6658'.
[ 1013.305257][T23929] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.6662'.
[ 1013.530699][T23943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6665'.
[ 1013.744511][T23956] netlink: 'syz.4.6670': attribute type 12 has an invalid length.
[ 1013.769290][T23956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6670'.
[ 1013.864145][T23959] device pim6reg1 entered promiscuous mode
[ 1015.014018][T23977] device syzkaller0 entered promiscuous mode
[ 1015.102456][T23990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6682'.
[ 1017.600440][T23990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6682'.
[ 1017.601414][T23988] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1017.619659][T23988] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1017.620453][T23991] netlink: 'syz.2.6681': attribute type 27 has an invalid length.
[ 1017.639778][T23988] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1017.765623][T23991] bond0: (slave bond_slave_0): Releasing backup interface
[ 1018.191734][T24008] netlink: 'syz.1.6688': attribute type 21 has an invalid length.
[ 1018.201505][T24008] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6688'.
[ 1018.582394][T24024] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6695'.
[ 1018.605620][T24024] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1018.640422][T24024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1018.728685][T24028] netlink: 'syz.3.6697': attribute type 29 has an invalid length.
[ 1018.744239][T24028] netlink: 'syz.3.6697': attribute type 29 has an invalid length.
[ 1019.025532][T24031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6698'.
[ 1019.036204][T24034] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1019.042864][T24034] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1019.381032][T24038] device pim6reg1 entered promiscuous mode
[ 1019.893443][T24053] netlink: 'syz.4.6704': attribute type 21 has an invalid length.
[ 1019.923169][T24053] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6704'.
[ 1020.087315][T24074] netlink: 'syz.0.6711': attribute type 10 has an invalid length.
[ 1020.114442][T24074] team0: Device veth1_macvtap failed to register rx_handler
[ 1020.470518][T24089] device wlan1 entered promiscuous mode
[ 1020.615611][T24093] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6721'.
[ 1020.662099][T24093] bond0: (slave bond_slave_0): Releasing backup interface
[ 1020.703770][T24093] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1021.383517][T24106] netlink: 'syz.3.6725': attribute type 21 has an invalid length.
[ 1021.406025][T24106] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6725'.
[ 1021.432334][T24105] device pim6reg1 entered promiscuous mode
[ 1021.559275][T24110] netlink: 'syz.0.6727': attribute type 10 has an invalid length.
[ 1021.589914][T24110] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6727'.
[ 1021.629809][T24110] device bond0 entered promiscuous mode
[ 1021.642701][T24110] device bond_slave_1 entered promiscuous mode
[ 1021.659626][T24110] bridge0: port 4(bond0) entered blocking state
[ 1021.682062][T24110] bridge0: port 4(bond0) entered disabled state
[ 1021.708473][T24110] bridge0: port 4(bond0) entered blocking state
[ 1021.715052][T24110] bridge0: port 4(bond0) entered forwarding state
[ 1021.906196][T24119] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1021.939778][T24119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1022.139116][T24132] netlink: 'syz.2.6736': attribute type 10 has an invalid length.
[ 1022.147696][T24132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6736'.
[ 1022.191131][T24132] batman_adv: batadv0: Adding interface: ipvlan1
[ 1022.206647][T24138] netlink: 'syz.0.6737': attribute type 29 has an invalid length.
[ 1022.213784][T24132] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.290033][T24132] batman_adv: batadv0: Interface activated: ipvlan1
[ 1022.462679][T24145] FAULT_INJECTION: forcing a failure.
[ 1022.462679][T24145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1022.476121][T24145] CPU: 0 PID: 24145 Comm: syz.4.6738 Not tainted syzkaller #0
[ 1022.483624][T24145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1022.484801][T24148] team0: Device veth1_macvtap failed to register rx_handler
[ 1022.493688][T24145] Call Trace:
[ 1022.493704][T24145]  <TASK>
[ 1022.493714][T24145]  dump_stack_lvl+0x188/0x24e
[ 1022.493754][T24145]  ? show_regs_print_info+0x12/0x12
[ 1022.493782][T24145]  ? load_image+0x400/0x400
[ 1022.493811][T24145]  ? __lock_acquire+0x7d10/0x7d10
[ 1022.526641][T24145]  ? full_name_hash+0x8e/0xe0
[ 1022.531318][T24145]  should_fail_ex+0x399/0x4d0
[ 1022.536007][T24145]  _copy_to_user+0x2c/0x130
[ 1022.540524][T24145]  put_user_ifreq+0x74/0xb0
[ 1022.545030][T24145]  sock_do_ioctl+0x272/0x320
[ 1022.549627][T24145]  ? sock_show_fdinfo+0xb0/0xb0
[ 1022.554501][T24145]  sock_ioctl+0x4d2/0x710
[ 1022.558833][T24145]  ? sock_poll+0x410/0x410
[ 1022.563261][T24145]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1022.568205][T24145]  ? security_file_ioctl+0x7c/0xa0
[ 1022.573328][T24145]  ? sock_poll+0x410/0x410
[ 1022.577750][T24145]  __se_sys_ioctl+0xfa/0x170
[ 1022.582346][T24145]  do_syscall_64+0x4c/0xa0
[ 1022.586769][T24145]  ? clear_bhb_loop+0x60/0xb0
[ 1022.591449][T24145]  ? clear_bhb_loop+0x60/0xb0
[ 1022.596133][T24145]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1022.602029][T24145] RIP: 0033:0x7f2525b9cdd9
[ 1022.606446][T24145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1022.626060][T24145] RSP: 002b:00007f2526acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1022.634476][T24145] RAX: ffffffffffffffda RBX: 00007f2525e15fa0 RCX: 00007f2525b9cdd9
[ 1022.642445][T24145] RDX: 0000200000001a80 RSI: 0000000000008970 RDI: 0000000000000005
[ 1022.650420][T24145] RBP: 00007f2526acc090 R08: 0000000000000000 R09: 0000000000000000
[ 1022.658388][T24145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1022.666367][T24145] R13: 00007f2525e16038 R14: 00007f2525e15fa0 R15: 00007ffc91bea0b8
[ 1022.674372][T24145]  </TASK>
[ 1022.703027][T24149] validate_nla: 2 callbacks suppressed
[ 1022.703041][T24149] netlink: 'syz.0.6739': attribute type 10 has an invalid length.
[ 1022.729987][T24149] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6739'.
[ 1022.813409][T24152] netlink: 'syz.2.6742': attribute type 25 has an invalid length.
[ 1022.821619][T24152] netlink: 'syz.2.6742': attribute type 1 has an invalid length.
[ 1022.830175][T24152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.895361][T24155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6743'.
[ 1022.904960][T24155] device team0 entered promiscuous mode
[ 1022.910646][T24155] device team_slave_0 entered promiscuous mode
[ 1022.919527][T24155] device team_slave_1 entered promiscuous mode
[ 1022.930259][T24155] device netdevsim0 entered promiscuous mode
[ 1023.796886][T24184] netlink: 'syz.3.6756': attribute type 16 has an invalid length.
[ 1023.808255][T24184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6756'.
[ 1024.786282][T24201] device pim6reg1 entered promiscuous mode
[ 1025.527447][T24225] netlink: 'syz.0.6764': attribute type 3 has an invalid length.
[ 1025.556113][T24225] netlink: 'syz.0.6764': attribute type 1 has an invalid length.
[ 1025.584803][T24225] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6764'.
[ 1025.594766][ T4282] Bluetooth: hci2: command 0x0406 tx timeout
[ 1026.092353][T24225] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6764'.
[ 1026.781295][T24225] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1028.121523][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6778'.
[ 1028.231793][T24269] netlink: 'syz.0.6780': attribute type 12 has an invalid length.
[ 1028.253451][T24269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6780'.
[ 1028.330574][T24271] device pim6reg1 entered promiscuous mode
[ 1028.908754][T24281] netlink: 'syz.0.6785': attribute type 25 has an invalid length.
[ 1028.924236][T24281] netlink: 'syz.0.6785': attribute type 1 has an invalid length.
[ 1028.954172][T24281] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1029.383781][T24293] netlink: 'syz.0.6791': attribute type 2 has an invalid length.
[ 1030.549744][T24315] FAULT_INJECTION: forcing a failure.
[ 1030.549744][T24315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1030.746302][T24315] CPU: 0 PID: 24315 Comm: syz.0.6799 Not tainted syzkaller #0
[ 1030.753808][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1030.764327][T24315] Call Trace:
[ 1030.767623][T24315]  <TASK>
[ 1030.770568][T24315]  dump_stack_lvl+0x188/0x24e
[ 1030.775272][T24315]  ? show_regs_print_info+0x12/0x12
[ 1030.780480][T24315]  ? load_image+0x400/0x400
[ 1030.785008][T24315]  ? __lock_acquire+0x7d10/0x7d10
[ 1030.790060][T24315]  ? perf_trace_lock_acquire+0x100/0x3e0
[ 1030.795720][T24315]  should_fail_ex+0x399/0x4d0
[ 1030.800422][T24315]  strncpy_from_user+0x32/0x350
[ 1030.805306][T24315]  bpf_prog_load+0x1f3/0x1560
[ 1030.810030][T24315]  ? map_freeze+0x390/0x390
[ 1030.814556][T24315]  ? __might_fault+0xa6/0x120
[ 1030.819261][T24315]  ? __might_fault+0xa6/0x120
[ 1030.823956][T24315]  ? __might_fault+0xc2/0x120
[ 1030.828658][T24315]  ? __might_fault+0xa6/0x120
[ 1030.833359][T24315]  ? bpf_lsm_bpf+0x5/0x10
[ 1030.837712][T24315]  ? security_bpf+0x7a/0xa0
[ 1030.842238][T24315]  __sys_bpf+0x5b8/0x780
[ 1030.846515][T24315]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1030.851929][T24315]  ? lock_chain_count+0x20/0x20
[ 1030.856816][T24315]  __x64_sys_bpf+0x78/0x90
[ 1030.861266][T24315]  do_syscall_64+0x4c/0xa0
[ 1030.865709][T24315]  ? clear_bhb_loop+0x60/0xb0
[ 1030.870417][T24315]  ? clear_bhb_loop+0x60/0xb0
[ 1030.875127][T24315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1030.881051][T24315] RIP: 0033:0x7fc9ed99cdd9
[ 1030.885497][T24315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1030.905137][T24315] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1030.913586][T24315] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[ 1030.921591][T24315] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[ 1030.929584][T24315] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1030.937581][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1030.945578][T24315] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1030.953601][T24315]  </TASK>
[ 1032.084770][T24348] device pim6reg1 entered promiscuous mode
[ 1033.859867][T24362] device syzkaller0 entered promiscuous mode
[ 1037.635323][T24394] netlink: 'syz.0.6827': attribute type 11 has an invalid length.
[ 1037.682334][T24400] netlink: 'syz.1.6826': attribute type 29 has an invalid length.
[ 1037.695292][T24394] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6827'.
[ 1037.715426][T24400] netlink: 'syz.1.6826': attribute type 29 has an invalid length.
[ 1037.795332][T24403] device pim6reg1 entered promiscuous mode
[ 1037.976226][T24394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.935501][T24410] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6831'.
[ 1038.954441][T24410] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.6831'.
[ 1041.306615][T24448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6842'.
[ 1042.080782][T24465] delete_channel: no stack
[ 1042.338858][T24475] netlink: 'syz.2.6848': attribute type 3 has an invalid length.
[ 1042.488375][T24475] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6848'.
[ 1043.081652][T24489] device syzkaller0 entered promiscuous mode
[ 1043.204766][T24492] FAULT_INJECTION: forcing a failure.
[ 1043.204766][T24492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1043.267240][T24494] device pim6reg1 entered promiscuous mode
[ 1043.274584][T24492] CPU: 0 PID: 24492 Comm: syz.0.6855 Not tainted syzkaller #0
[ 1043.282088][T24492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1043.292166][T24492] Call Trace:
[ 1043.295473][T24492]  <TASK>
[ 1043.298436][T24492]  dump_stack_lvl+0x188/0x24e
[ 1043.303167][T24492]  ? show_regs_print_info+0x12/0x12
[ 1043.308409][T24492]  ? load_image+0x400/0x400
[ 1043.312950][T24492]  ? __lock_acquire+0x7d10/0x7d10
[ 1043.318017][T24492]  ? snprintf+0xe5/0x140
[ 1043.322299][T24492]  should_fail_ex+0x399/0x4d0
[ 1043.327017][T24492]  _copy_to_user+0x2c/0x130
[ 1043.331553][T24492]  simple_read_from_buffer+0xe3/0x150
[ 1043.336965][T24492]  proc_fail_nth_read+0x1a6/0x220
[ 1043.342028][T24492]  ? proc_fault_inject_write+0x310/0x310
[ 1043.347705][T24492]  ? fsnotify_perm+0x248/0x550
[ 1043.352501][T24492]  ? proc_fault_inject_write+0x310/0x310
[ 1043.358166][T24492]  vfs_read+0x2de/0xa00
[ 1043.362370][T24492]  ? kernel_read+0x1e0/0x1e0
[ 1043.367000][T24492]  ? __fget_files+0x28/0x4b0
[ 1043.371637][T24492]  ? __fget_files+0x28/0x4b0
[ 1043.376269][T24492]  ? __fget_files+0x43d/0x4b0
[ 1043.380995][T24492]  ? __fdget_pos+0x2ae/0x360
[ 1043.385616][T24492]  ? ksys_read+0x71/0x250
[ 1043.389970][T24492]  ksys_read+0x14c/0x250
[ 1043.394226][T24492]  ? vfs_write+0xa30/0xa30
[ 1043.398658][T24492]  ? lockdep_hardirqs_on+0x94/0x140
[ 1043.403870][T24492]  do_syscall_64+0x4c/0xa0
[ 1043.408294][T24492]  ? clear_bhb_loop+0x60/0xb0
[ 1043.412971][T24492]  ? clear_bhb_loop+0x60/0xb0
[ 1043.417656][T24492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1043.423554][T24492] RIP: 0033:0x7fc9ed95d60e
[ 1043.427971][T24492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1043.447586][T24492] RSP: 002b:00007fc9ee8c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1043.456005][T24492] RAX: ffffffffffffffda RBX: 00007fc9ee8c76c0 RCX: 00007fc9ed95d60e
[ 1043.463976][T24492] RDX: 000000000000000f RSI: 00007fc9ee8c70a0 RDI: 0000000000000006
[ 1043.472004][T24492] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1043.480044][T24492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1043.488024][T24492] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1043.496045][T24492]  </TASK>
[ 1043.539072][T24500] netlink: 'syz.2.6857': attribute type 10 has an invalid length.
[ 1043.566191][T24500] team0: Device veth1_macvtap failed to register rx_handler
[ 1044.056825][T24514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6861'.
[ 1044.841102][T24543] netlink: 'syz.0.6873': attribute type 16 has an invalid length.
[ 1044.870774][T24543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6873'.
[ 1045.340964][T24563] device pim6reg1 entered promiscuous mode
[ 1045.740907][T24579] FAULT_INJECTION: forcing a failure.
[ 1045.740907][T24579] name failslab, interval 1, probability 0, space 0, times 0
[ 1045.767006][T24579] CPU: 0 PID: 24579 Comm: syz.2.6885 Not tainted syzkaller #0
[ 1045.774514][T24579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1045.784595][T24579] Call Trace:
[ 1045.787893][T24579]  <TASK>
[ 1045.790841][T24579]  dump_stack_lvl+0x188/0x24e
[ 1045.795551][T24579]  ? show_regs_print_info+0x12/0x12
[ 1045.800775][T24579]  ? load_image+0x400/0x400
[ 1045.805286][T24579]  ? __might_sleep+0xd0/0xd0
[ 1045.809875][T24579]  ? __lock_acquire+0x7d10/0x7d10
[ 1045.814907][T24579]  should_fail_ex+0x399/0x4d0
[ 1045.819586][T24579]  should_failslab+0x5/0x20
[ 1045.824086][T24579]  slab_pre_alloc_hook+0x59/0x310
[ 1045.829112][T24579]  ? sock_kmalloc+0x92/0xf0
[ 1045.833615][T24579]  __kmem_cache_alloc_node+0x4f/0x260
[ 1045.838986][T24579]  ? sock_kmalloc+0x92/0xf0
[ 1045.843500][T24579]  __kmalloc+0xa0/0x240
[ 1045.847671][T24579]  sock_kmalloc+0x92/0xf0
[ 1045.852007][T24579]  ____sys_sendmsg+0x1bb/0x970
[ 1045.856791][T24579]  ? __sys_sendmsg_sock+0x30/0x30
[ 1045.861828][T24579]  ? __import_iovec+0x315/0x500
[ 1045.866689][T24579]  ? import_iovec+0x6f/0xa0
[ 1045.871196][T24579]  ___sys_sendmsg+0x2a2/0x360
[ 1045.875883][T24579]  ? __sys_sendmsg+0x290/0x290
[ 1045.880665][T24579]  ? __lock_acquire+0x7d10/0x7d10
[ 1045.885729][T24579]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1045.890597][T24579]  ? __x64_sys_sendmsg+0x80/0x80
[ 1045.895553][T24579]  ? lockdep_hardirqs_on+0x94/0x140
[ 1045.900751][T24579]  do_syscall_64+0x4c/0xa0
[ 1045.905173][T24579]  ? clear_bhb_loop+0x60/0xb0
[ 1045.909860][T24579]  ? clear_bhb_loop+0x60/0xb0
[ 1045.914540][T24579]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1045.920429][T24579] RIP: 0033:0x7fbf3d79cdd9
[ 1045.924848][T24579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1045.944469][T24579] RSP: 002b:00007fbf3e670028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1045.952915][T24579] RAX: ffffffffffffffda RBX: 00007fbf3da15fa0 RCX: 00007fbf3d79cdd9
[ 1045.960894][T24579] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1045.968863][T24579] RBP: 00007fbf3e670090 R08: 0000000000000000 R09: 0000000000000000
[ 1045.976829][T24579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1045.984793][T24579] R13: 00007fbf3da16038 R14: 00007fbf3da15fa0 R15: 00007ffcd5a66348
[ 1045.992777][T24579]  </TASK>
[ 1046.073385][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[ 1046.120248][T24581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6887'.
[ 1046.135969][T24581] tc_dump_action: action bad kind
[ 1046.221737][T24585] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6890'.
[ 1046.299616][T24589] netlink: 'syz.1.6892': attribute type 10 has an invalid length.
[ 1046.449238][T24597] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1047.032602][T24611] netlink: 'syz.3.6900': attribute type 3 has an invalid length.
[ 1047.073439][T24611] netlink: 'syz.3.6900': attribute type 1 has an invalid length.
[ 1047.094244][T24611] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6900'.
[ 1047.210193][T24612] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1047.277632][T24612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1047.570885][T24611] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6900'.
[ 1047.705690][T24611] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1047.878968][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6905'.
[ 1048.079570][T24638] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6908'.
[ 1048.620842][T24650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6913'.
[ 1048.847591][T24657] netlink: 'syz.0.6911': attribute type 21 has an invalid length.
[ 1048.863685][T24657] netlink: 'syz.0.6911': attribute type 6 has an invalid length.
[ 1048.890737][T24657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6911'.
[ 1049.189983][T24662] device pim6reg1 entered promiscuous mode
[ 1049.406701][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6917'.
[ 1049.771254][T24675] tap0: tun_chr_ioctl cmd 1074812117
[ 1050.113020][T24677] netlink: 'syz.2.6920': attribute type 12 has an invalid length.
[ 1050.137695][T24677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6920'.
[ 1050.296859][T24689] netlink: 'syz.1.6926': attribute type 25 has an invalid length.
[ 1050.305553][T24689] netlink: 'syz.1.6926': attribute type 1 has an invalid length.
[ 1050.314456][T24689] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.469462][T24695] netlink: 'syz.2.6929': attribute type 2 has an invalid length.
[ 1051.136232][T24708] netlink: 'syz.4.6936': attribute type 21 has an invalid length.
[ 1051.208436][T24708] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1051.279540][T24722] FAULT_INJECTION: forcing a failure.
[ 1051.279540][T24722] name failslab, interval 1, probability 0, space 0, times 0
[ 1051.294476][ T4283] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[ 1051.361885][T24722] CPU: 0 PID: 24722 Comm: syz.2.6937 Not tainted syzkaller #0
[ 1051.369421][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1051.379491][T24722] Call Trace:
[ 1051.382762][T24722]  <TASK>
[ 1051.385690][T24722]  dump_stack_lvl+0x188/0x24e
[ 1051.390369][T24722]  ? show_regs_print_info+0x12/0x12
[ 1051.395559][T24722]  ? load_image+0x400/0x400
[ 1051.400052][T24722]  ? __might_sleep+0xd0/0xd0
[ 1051.404629][T24722]  ? __lock_acquire+0x7d10/0x7d10
[ 1051.409643][T24722]  ? mark_lock+0x94/0x320
[ 1051.413981][T24722]  should_fail_ex+0x399/0x4d0
[ 1051.418686][T24722]  should_failslab+0x5/0x20
[ 1051.423208][T24722]  slab_pre_alloc_hook+0x59/0x310
[ 1051.428259][T24722]  ? __get_vm_area_node+0x122/0x330
[ 1051.433479][T24722]  __kmem_cache_alloc_node+0x4f/0x260
[ 1051.438876][T24722]  ? __get_vm_area_node+0x122/0x330
[ 1051.444103][T24722]  kmalloc_node_trace+0x22/0xe0
[ 1051.448991][T24722]  __get_vm_area_node+0x122/0x330
[ 1051.454352][T24722]  __vmalloc_node_range+0x357/0x13b0
[ 1051.459700][T24722]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.465318][T24722]  ? free_vm_area+0x50/0x50
[ 1051.469840][T24722]  ? end_current_label_crit_section+0x170/0x170
[ 1051.476110][T24722]  ? __lock_acquire+0x7d10/0x7d10
[ 1051.481168][T24722]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.486741][T24722]  __vmalloc+0x76/0x80
[ 1051.490825][T24722]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.496393][T24722]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.501784][T24722]  ? bpf_lsm_capable+0x5/0x10
[ 1051.506473][T24722]  bpf_prog_alloc+0x1c/0x1b0
[ 1051.511074][T24722]  bpf_prog_load+0x7c9/0x1560
[ 1051.515766][T24722]  ? map_freeze+0x390/0x390
[ 1051.520281][T24722]  ? __might_fault+0xa6/0x120
[ 1051.524974][T24722]  ? __might_fault+0xa6/0x120
[ 1051.529650][T24722]  ? __might_fault+0xc2/0x120
[ 1051.534320][T24722]  ? __might_fault+0xa6/0x120
[ 1051.538995][T24722]  ? bpf_lsm_bpf+0x5/0x10
[ 1051.543323][T24722]  ? security_bpf+0x7a/0xa0
[ 1051.547822][T24722]  __sys_bpf+0x5b8/0x780
[ 1051.552072][T24722]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1051.557458][T24722]  ? lock_chain_count+0x20/0x20
[ 1051.562316][T24722]  __x64_sys_bpf+0x78/0x90
[ 1051.566735][T24722]  do_syscall_64+0x4c/0xa0
[ 1051.571153][T24722]  ? clear_bhb_loop+0x60/0xb0
[ 1051.575825][T24722]  ? clear_bhb_loop+0x60/0xb0
[ 1051.580497][T24722]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1051.586385][T24722] RIP: 0033:0x7fbf3d79cdd9
[ 1051.590799][T24722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1051.610398][T24722] RSP: 002b:00007fbf3e670028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1051.618808][T24722] RAX: ffffffffffffffda RBX: 00007fbf3da15fa0 RCX: 00007fbf3d79cdd9
[ 1051.626773][T24722] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[ 1051.634737][T24722] RBP: 00007fbf3e670090 R08: 0000000000000000 R09: 0000000000000000
[ 1051.642699][T24722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.650661][T24722] R13: 00007fbf3da16038 R14: 00007fbf3da15fa0 R15: 00007ffcd5a66348
[ 1051.658639][T24722]  </TASK>
[ 1051.738862][T24722] syz.2.6937: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 1051.845251][T24722] CPU: 1 PID: 24722 Comm: syz.2.6937 Not tainted syzkaller #0
[ 1051.852784][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1051.862866][T24722] Call Trace:
[ 1051.866166][T24722]  <TASK>
[ 1051.869109][T24722]  dump_stack_lvl+0x188/0x24e
[ 1051.873813][T24722]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1051.880259][T24722]  ? show_regs_print_info+0x12/0x12
[ 1051.885485][T24722]  ? load_image+0x400/0x400
[ 1051.890013][T24722]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1051.896446][T24722]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1051.902965][T24722]  warn_alloc+0x242/0x330
[ 1051.907323][T24722]  ? __get_vm_area_node+0x122/0x330
[ 1051.912538][T24722]  ? zone_watermark_ok_safe+0x270/0x270
[ 1051.918102][T24722]  ? rcu_is_watching+0x11/0xa0
[ 1051.922978][T24722]  ? __get_vm_area_node+0x318/0x330
[ 1051.928222][T24722]  __vmalloc_node_range+0x37c/0x13b0
[ 1051.933564][T24722]  ? free_vm_area+0x50/0x50
[ 1051.938085][T24722]  ? end_current_label_crit_section+0x170/0x170
[ 1051.944343][T24722]  ? __lock_acquire+0x7d10/0x7d10
[ 1051.949390][T24722]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.954960][T24722]  __vmalloc+0x76/0x80
[ 1051.959045][T24722]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.964612][T24722]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1051.970005][T24722]  ? bpf_lsm_capable+0x5/0x10
[ 1051.974701][T24722]  bpf_prog_alloc+0x1c/0x1b0
[ 1051.979321][T24722]  bpf_prog_load+0x7c9/0x1560
[ 1051.984034][T24722]  ? map_freeze+0x390/0x390
[ 1051.988560][T24722]  ? __might_fault+0xa6/0x120
[ 1051.993264][T24722]  ? __might_fault+0xa6/0x120
[ 1051.997950][T24722]  ? __might_fault+0xc2/0x120
[ 1052.002636][T24722]  ? __might_fault+0xa6/0x120
[ 1052.007332][T24722]  ? bpf_lsm_bpf+0x5/0x10
[ 1052.011677][T24722]  ? security_bpf+0x7a/0xa0
[ 1052.016257][T24722]  __sys_bpf+0x5b8/0x780
[ 1052.020522][T24722]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1052.025925][T24722]  ? lock_chain_count+0x20/0x20
[ 1052.030802][T24722]  __x64_sys_bpf+0x78/0x90
[ 1052.035249][T24722]  do_syscall_64+0x4c/0xa0
[ 1052.039684][T24722]  ? clear_bhb_loop+0x60/0xb0
[ 1052.044378][T24722]  ? clear_bhb_loop+0x60/0xb0
[ 1052.049166][T24722]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1052.055075][T24722] RIP: 0033:0x7fbf3d79cdd9
[ 1052.059503][T24722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.079130][T24722] RSP: 002b:00007fbf3e670028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1052.087834][T24722] RAX: ffffffffffffffda RBX: 00007fbf3da15fa0 RCX: 00007fbf3d79cdd9
[ 1052.095823][T24722] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[ 1052.104502][T24722] RBP: 00007fbf3e670090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.112508][T24722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.120497][T24722] R13: 00007fbf3da16038 R14: 00007fbf3da15fa0 R15: 00007ffcd5a66348
[ 1052.128504][T24722]  </TASK>
[ 1052.505998][T24744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1052.528581][T24744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1053.024951][T24722] Mem-Info:
[ 1053.046787][T24722] active_anon:24869 inactive_anon:0 isolated_anon:0
[ 1053.046787][T24722]  active_file:21543 inactive_file:40349 isolated_file:0
[ 1053.046787][T24722]  unevictable:768 dirty:245 writeback:0
[ 1053.046787][T24722]  slab_reclaimable:21400 slab_unreclaimable:95908
[ 1053.046787][T24722]  mapped:39660 shmem:18057 pagetables:742
[ 1053.046787][T24722]  sec_pagetables:0 bounce:0
[ 1053.046787][T24722]  kernel_misc_reclaimable:0
[ 1053.046787][T24722]  free:1303218 free_pcp:7250 free_cma:0
[ 1053.296024][T24767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1053.326365][T24722] Node 0 active_anon:106676kB inactive_anon:0kB active_file:86172kB inactive_file:161196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158640kB dirty:980kB writeback:0kB shmem:77592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10520kB pagetables:2968kB sec_pagetables:0kB all_unreclaimable? no
[ 1053.373243][ T4283] Bluetooth: hci3: command 0x2016 tx timeout
[ 1053.380141][T24767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1053.427484][T24722] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1053.521927][T24722] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1053.664429][T24722] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1053.718074][T24722] Node 0 DMA32 free:1277392kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:119372kB inactive_anon:0kB active_file:86172kB inactive_file:161196kB unevictable:1536kB writepending:664kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:9236kB local_pcp:6660kB free_cma:0kB
[ 1053.841075][T24722] lowmem_reserve[]: 0 0 1 1 1
[ 1053.865655][T24722] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[ 1053.919417][T24722] lowmem_reserve[]: 0 0 0 0 0
[ 1053.963980][T24722] Node 1 Normal free:3899712kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20356kB local_pcp:11104kB free_cma:0kB
[ 1054.026116][T24784] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1054.051497][T24788] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6961'.
[ 1054.075189][T24788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1054.089093][T24722] lowmem_reserve[]: 0 0 0 0 0
[ 1054.097820][T24722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1054.141384][T24788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1054.163193][T24722] Node 0 DMA32: 1715*4kB (UME) 1059*8kB (UE) 642*16kB (UE) 673*32kB (UME) 199*64kB (UE) 202*128kB (UE) 29*256kB (UE) 27*512kB (UME) 12*1024kB (M) 5*2048kB (UME) 276*4096kB (UM) = 1260004kB
[ 1054.190503][T24722] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 1054.232084][T24722] Node 1 Normal: 176*4kB (UE) 60*8kB (UME) 24*16kB (UE) 25*32kB (UME) 20*64kB (UME) 10*128kB (UME) 6*256kB (UME) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 949*4096kB (M) = 3899712kB
[ 1054.253101][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.253149][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.288811][T24722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1054.312156][T24722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1054.406569][T24722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1054.446968][T24722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1054.528874][T24722] 92346 total pagecache pages
[ 1054.548940][T24722] 0 pages in swap cache
[ 1054.560247][T24722] Free swap  = 124996kB
[ 1054.588968][T24722] Total swap = 124996kB
[ 1054.623377][T24722] 2097051 pages RAM
[ 1054.651738][T24722] 0 pages HighMem/MovableOnly
[ 1054.687414][T24722] 415209 pages reserved
[ 1054.743422][T24722] 0 pages cma reserved
[ 1055.329049][T24798] À: port 1(vlan0) entered blocking state
[ 1055.363480][T24798] À: port 1(vlan0) entered disabled state
[ 1055.387516][T24807] delete_channel: no stack
[ 1055.389659][T24798] device vlan0 entered promiscuous mode
[ 1055.579483][T24810] netlink: 'syz.0.6967': attribute type 3 has an invalid length.
[ 1055.666585][T24810] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6967'.
[ 1055.824776][T24796] delete_channel: no stack
[ 1056.657609][T24823] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1056.664478][T24823] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1056.716973][ T4659] wlan1: Trigger new scan to find an IBSS to join
[ 1056.826771][T24828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6973'.
[ 1057.208829][T24837] device syzkaller0 entered promiscuous mode
[ 1057.615619][T24852] netlink: 'syz.3.6984': attribute type 29 has an invalid length.
[ 1059.676837][ T4646] wlan1: Trigger new scan to find an IBSS to join
[ 1061.447085][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[ 1061.745827][T24852] netlink: 'syz.3.6984': attribute type 29 has an invalid length.
[ 1061.773348][T24866] netlink: 'syz.4.6988': attribute type 10 has an invalid length.
[ 1061.781221][T24866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6988'.
[ 1061.833514][T24866] bridge0: port 3(team0) entered blocking state
[ 1061.839988][T24866] bridge0: port 3(team0) entered disabled state
[ 1061.848194][T24866] bridge0: port 3(team0) entered blocking state
[ 1061.854586][T24866] bridge0: port 3(team0) entered forwarding state
[ 1061.903194][T24880] netlink: 'syz.0.6993': attribute type 10 has an invalid length.
[ 1062.219698][T24901] netlink: 'syz.3.7001': attribute type 10 has an invalid length.
[ 1062.230948][T24901] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7001'.
[ 1062.272491][T24901] device bond0 entered promiscuous mode
[ 1062.291123][T24901] device bond_slave_0 entered promiscuous mode
[ 1062.301538][T24901] device bond_slave_1 entered promiscuous mode
[ 1062.320334][T24901] bridge0: port 3(bond0) entered blocking state
[ 1062.329069][T24901] bridge0: port 3(bond0) entered disabled state
[ 1062.350790][T24901] bridge0: port 3(bond0) entered blocking state
[ 1062.359928][T24901] bridge0: port 3(bond0) entered forwarding state
[ 1062.722228][ T4638] wlan1: Trigger new scan to find an IBSS to join
[ 1063.640656][T24938] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1063.689011][T24938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1063.777236][ T4638] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[ 1064.077615][T24945] netlink: 'syz.0.7014': attribute type 10 has an invalid length.
[ 1064.102138][T24945] team0: Device veth1_macvtap failed to register rx_handler
[ 1064.342963][T24954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7016'.
[ 1064.577418][T24960] netlink: 'syz.4.7019': attribute type 2 has an invalid length.
[ 1064.599744][T24960] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7019'.
[ 1064.845382][T24956] device syzkaller0 entered promiscuous mode
[ 1065.424778][T24983] netlink: 'syz.1.7026': attribute type 16 has an invalid length.
[ 1065.438451][T24983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7026'.
[ 1067.351851][T24989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7027'.
[ 1067.435986][T25003] netlink: 'syz.0.7033': attribute type 29 has an invalid length.
[ 1067.462456][T25003] netlink: 'syz.0.7033': attribute type 29 has an invalid length.
[ 1067.563385][T25007] FAULT_INJECTION: forcing a failure.
[ 1067.563385][T25007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1067.590452][T25007] CPU: 1 PID: 25007 Comm: syz.2.7034 Not tainted syzkaller #0
[ 1067.597979][T25007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1067.608034][T25007] Call Trace:
[ 1067.611307][T25007]  <TASK>
[ 1067.614234][T25007]  dump_stack_lvl+0x188/0x24e
[ 1067.618922][T25007]  ? show_regs_print_info+0x12/0x12
[ 1067.624118][T25007]  ? load_image+0x400/0x400
[ 1067.628618][T25007]  ? __lock_acquire+0x7d10/0x7d10
[ 1067.633650][T25007]  should_fail_ex+0x399/0x4d0
[ 1067.638325][T25007]  _copy_from_user+0x2c/0x170
[ 1067.643000][T25007]  ____sys_sendmsg+0x30a/0x970
[ 1067.647777][T25007]  ? __sys_sendmsg_sock+0x30/0x30
[ 1067.652806][T25007]  ? __import_iovec+0x315/0x500
[ 1067.657656][T25007]  ? import_iovec+0x6f/0xa0
[ 1067.662154][T25007]  ___sys_sendmsg+0x2a2/0x360
[ 1067.666839][T25007]  ? __sys_sendmsg+0x290/0x290
[ 1067.671616][T25007]  ? __lock_acquire+0x7d10/0x7d10
[ 1067.676657][T25007]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1067.681511][T25007]  ? __x64_sys_sendmsg+0x80/0x80
[ 1067.686462][T25007]  ? lockdep_hardirqs_on+0x94/0x140
[ 1067.691658][T25007]  do_syscall_64+0x4c/0xa0
[ 1067.696074][T25007]  ? clear_bhb_loop+0x60/0xb0
[ 1067.700750][T25007]  ? clear_bhb_loop+0x60/0xb0
[ 1067.705432][T25007]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1067.711321][T25007] RIP: 0033:0x7fbf3d79cdd9
[ 1067.715733][T25007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.735331][T25007] RSP: 002b:00007fbf3e670028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1067.743742][T25007] RAX: ffffffffffffffda RBX: 00007fbf3da15fa0 RCX: 00007fbf3d79cdd9
[ 1067.751709][T25007] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1067.759675][T25007] RBP: 00007fbf3e670090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.767641][T25007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1067.775604][T25007] R13: 00007fbf3da16038 R14: 00007fbf3da15fa0 R15: 00007ffcd5a66348
[ 1067.783584][T25007]  </TASK>
[ 1067.916656][T25014] netlink: 'syz.3.7039': attribute type 10 has an invalid length.
[ 1068.498518][T25029] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1068.657139][T25031] netlink: 'syz.0.7043': attribute type 25 has an invalid length.
[ 1068.665788][T25031] netlink: 'syz.0.7043': attribute type 1 has an invalid length.
[ 1068.673827][T25031] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1068.732775][T25038] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7045'.
[ 1068.753322][T25038] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1068.790335][T25038] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1068.930918][T25045] netlink: 'syz.2.7049': attribute type 3 has an invalid length.
[ 1068.953890][T25045] netlink: 'syz.2.7049': attribute type 1 has an invalid length.
[ 1068.968184][T25045] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7049'.
[ 1069.255851][T25052] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7049'.
[ 1069.313731][T25052] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1069.331378][T25052] CPU: 1 PID: 25052 Comm: syz.2.7049 Not tainted syzkaller #0
[ 1069.338906][T25052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1069.348984][T25052] Call Trace:
[ 1069.352282][T25052]  <TASK>
[ 1069.355227][T25052]  dump_stack_lvl+0x188/0x24e
[ 1069.359938][T25052]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1069.366126][T25052]  ? show_regs_print_info+0x12/0x12
[ 1069.371357][T25052]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1069.377562][T25052]  sysfs_warn_dup+0x8a/0xa0
[ 1069.382095][T25052]  sysfs_do_create_link_sd+0xc0/0x110
[ 1069.387500][T25052]  device_add+0x7ed/0xfb0
[ 1069.391862][T25052]  wiphy_register+0x1d9f/0x2ac0
[ 1069.396763][T25052]  ? cfg80211_event_work+0x40/0x40
[ 1069.401902][T25052]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1069.408085][T25052]  ? ieee80211_register_hw+0x2b34/0x39f0
[ 1069.413754][T25052]  ieee80211_register_hw+0x2d00/0x39f0
[ 1069.419236][T25052]  ? lockdep_hardirqs_on+0x94/0x140
[ 1069.424442][T25052]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1069.430002][T25052]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1069.435563][T25052]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1069.441244][T25052]  ? memset+0x1e/0x40
[ 1069.445327][T25052]  ? __hrtimer_init+0x186/0x270
[ 1069.450199][T25052]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1069.455953][T25052]  hwsim_new_radio_nl+0xafa/0xce0
[ 1069.460998][T25052]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1069.466548][T25052]  ? end_current_label_crit_section+0x170/0x170
[ 1069.472794][T25052]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1069.478690][T25052]  ? bpf_lsm_capable+0x5/0x10
[ 1069.483369][T25052]  ? security_capable+0x85/0xb0
[ 1069.488230][T25052]  genl_rcv_msg+0x604/0x790
[ 1069.492738][T25052]  ? genl_bind+0x360/0x360
[ 1069.497150][T25052]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1069.503498][T25052]  netlink_rcv_skb+0x1fb/0x450
[ 1069.508268][T25052]  ? genl_bind+0x360/0x360
[ 1069.512681][T25052]  ? netlink_ack+0x1170/0x1170
[ 1069.517458][T25052]  ? down_read+0x1a8/0x2d0
[ 1069.521885][T25052]  genl_rcv+0x24/0x40
[ 1069.525865][T25052]  netlink_unicast+0x74d/0x8d0
[ 1069.530640][T25052]  netlink_sendmsg+0x8ad/0xbd0
[ 1069.535417][T25052]  ? netlink_getsockopt+0x550/0x550
[ 1069.540622][T25052]  ? aa_sock_msg_perm+0x94/0x150
[ 1069.545559][T25052]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1069.550846][T25052]  ? security_socket_sendmsg+0x7c/0xa0
[ 1069.556320][T25052]  ? netlink_getsockopt+0x550/0x550
[ 1069.561526][T25052]  ____sys_sendmsg+0x5be/0x970
[ 1069.566314][T25052]  ? __sys_sendmsg_sock+0x30/0x30
[ 1069.571352][T25052]  ? __import_iovec+0x315/0x500
[ 1069.576205][T25052]  ? import_iovec+0x6f/0xa0
[ 1069.580715][T25052]  ___sys_sendmsg+0x2a2/0x360
[ 1069.585400][T25052]  ? __sys_sendmsg+0x290/0x290
[ 1069.590190][T25052]  ? ktime_get_real_ts64+0x440/0x440
[ 1069.595497][T25052]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1069.600355][T25052]  ? __x64_sys_sendmsg+0x80/0x80
[ 1069.605309][T25052]  ? lockdep_hardirqs_on+0x94/0x140
[ 1069.610508][T25052]  do_syscall_64+0x4c/0xa0
[ 1069.614931][T25052]  ? clear_bhb_loop+0x60/0xb0
[ 1069.619612][T25052]  ? clear_bhb_loop+0x60/0xb0
[ 1069.624288][T25052]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1069.630183][T25052] RIP: 0033:0x7fbf3d79cdd9
[ 1069.634600][T25052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1069.654212][T25052] RSP: 002b:00007fbf3e64f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1069.662639][T25052] RAX: ffffffffffffffda RBX: 00007fbf3da16090 RCX: 00007fbf3d79cdd9
[ 1069.670608][T25052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[ 1069.678593][T25052] RBP: 00007fbf3d832d69 R08: 0000000000000000 R09: 0000000000000000
[ 1069.686559][T25052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1069.694537][T25052] R13: 00007fbf3da16128 R14: 00007fbf3da16090 R15: 00007ffcd5a66348
[ 1069.702521][T25052]  </TASK>
[ 1069.852911][T25063] netlink: 'syz.4.7054': attribute type 21 has an invalid length.
[ 1069.871875][T25063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7054'.
[ 1069.923980][T25064] device pim6reg1 entered promiscuous mode
[ 1069.961377][T25063] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.7054'.
[ 1070.879602][T25086] netlink: 'syz.1.7058': attribute type 21 has an invalid length.
[ 1070.889307][T25086] netlink: 'syz.1.7058': attribute type 6 has an invalid length.
[ 1070.897922][T25086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7058'.
[ 1070.908056][T25076] device syzkaller0 entered promiscuous mode
[ 1071.277598][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7063'.
[ 1071.488078][T25110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7066'.
[ 1072.263513][T25125] delete_channel: no stack
[ 1072.388710][T25130] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7073'.
[ 1073.417178][T25156] tipc: Started in network mode
[ 1073.422116][T25156] tipc: Node identity 9215a268, cluster identity 4711
[ 1073.501338][T25156] tipc: Node number set to 2450891368
[ 1073.565135][T25161] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.7086'.
[ 1074.173254][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7089'.
[ 1077.029310][T25189] validate_nla: 3 callbacks suppressed
[ 1077.029327][T25189] netlink: 'syz.0.7097': attribute type 3 has an invalid length.
[ 1077.062858][T25192] delete_channel: no stack
[ 1077.073491][T25189] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7097'.
[ 1077.137404][T25200] netlink: 'syz.1.7096': attribute type 3 has an invalid length.
[ 1077.166437][T25200] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7096'.
[ 1077.244021][T25203] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1080.263657][T25224] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.7106'.
[ 1080.454475][T25233] delete_channel: no stack
[ 1080.497319][T25238] delete_channel: no stack
[ 1080.521315][T25240] device pim6reg1 entered promiscuous mode
[ 1080.590626][T25242] netlink: 'syz.1.7113': attribute type 3 has an invalid length.
[ 1080.629516][T25242] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7113'.
[ 1081.412278][T25247] device syzkaller0 entered promiscuous mode
[ 1081.705385][T25260] delete_channel: no stack
[ 1081.710424][T25260] delete_channel: no stack
[ 1083.686077][T25252] netlink: 'syz.0.7117': attribute type 10 has an invalid length.
[ 1083.697138][T25252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7117'.
[ 1084.146851][T25294] delete_channel: no stack
[ 1084.249436][T25296] device pim6reg1 entered promiscuous mode
[ 1084.300698][T25297] netlink: 'syz.3.7129': attribute type 3 has an invalid length.
[ 1084.350381][T25297] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7129'.
[ 1085.215007][T25303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7133'.
[ 1085.228282][T25309] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1085.267471][T25309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1085.502765][T25317] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7138'.
[ 1085.523888][T25319] netlink: 'syz.3.7140': attribute type 16 has an invalid length.
[ 1085.548933][T25319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7140'.
[ 1085.826372][T25326] netlink: 'syz.3.7142': attribute type 10 has an invalid length.
[ 1085.874812][T25326] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7142'.
[ 1086.161264][T25338] delete_channel: no stack
[ 1086.262010][T25341] netlink: 'syz.3.7146': attribute type 3 has an invalid length.
[ 1086.280396][T25341] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7146'.
[ 1086.301729][T25342] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7149'.
[ 1086.794307][T25361] FAULT_INJECTION: forcing a failure.
[ 1086.794307][T25361] name failslab, interval 1, probability 0, space 0, times 0
[ 1086.848848][T25361] CPU: 1 PID: 25361 Comm: syz.4.7155 Not tainted syzkaller #0
[ 1086.856380][T25361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1086.866455][T25361] Call Trace:
[ 1086.869764][T25361]  <TASK>
[ 1086.872717][T25361]  dump_stack_lvl+0x188/0x24e
[ 1086.877432][T25361]  ? show_regs_print_info+0x12/0x12
[ 1086.882660][T25361]  ? load_image+0x400/0x400
[ 1086.887188][T25361]  ? __might_sleep+0xd0/0xd0
[ 1086.891800][T25361]  ? __lock_acquire+0x7d10/0x7d10
[ 1086.896848][T25361]  should_fail_ex+0x399/0x4d0
[ 1086.901549][T25361]  should_failslab+0x5/0x20
[ 1086.906066][T25361]  slab_pre_alloc_hook+0x59/0x310
[ 1086.911110][T25361]  ? ip6_setup_cork+0x1d7/0xfe0
[ 1086.915983][T25361]  __kmem_cache_alloc_node+0x4f/0x260
[ 1086.921375][T25361]  ? ip6_setup_cork+0x1d7/0xfe0
[ 1086.926246][T25361]  kmalloc_trace+0x26/0xe0
[ 1086.930672][T25361]  ip6_setup_cork+0x1d7/0xfe0
[ 1086.935362][T25361]  ip6_append_data+0x29e/0x3e0
[ 1086.940128][T25361]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1086.945002][T25361]  l2tp_ip6_sendmsg+0x1208/0x1670
[ 1086.950058][T25361]  ? l2tp_ip6_destroy_sock+0x50/0x50
[ 1086.955375][T25361]  ? aa_af_perm+0x340/0x340
[ 1086.959884][T25361]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1086.966309][T25361]  ? sock_rps_record_flow+0x19/0x3f0
[ 1086.971592][T25361]  ? inet_sendmsg+0x78/0x2f0
[ 1086.976178][T25361]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1086.981461][T25361]  ? security_socket_sendmsg+0x7c/0xa0
[ 1086.986923][T25361]  ? inet_send_prepare+0x260/0x260
[ 1086.992035][T25361]  ____sys_sendmsg+0x5be/0x970
[ 1086.996809][T25361]  ? __sys_sendmsg_sock+0x30/0x30
[ 1087.001842][T25361]  ? __import_iovec+0x315/0x500
[ 1087.006699][T25361]  ? import_iovec+0x6f/0xa0
[ 1087.011201][T25361]  ___sys_sendmsg+0x2a2/0x360
[ 1087.015890][T25361]  ? __sys_sendmsg+0x290/0x290
[ 1087.020673][T25361]  ? __lock_acquire+0x7d10/0x7d10
[ 1087.025719][T25361]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1087.030580][T25361]  ? __x64_sys_sendmsg+0x80/0x80
[ 1087.035532][T25361]  ? lockdep_hardirqs_on+0x94/0x140
[ 1087.040754][T25361]  do_syscall_64+0x4c/0xa0
[ 1087.045187][T25361]  ? clear_bhb_loop+0x60/0xb0
[ 1087.049872][T25361]  ? clear_bhb_loop+0x60/0xb0
[ 1087.054560][T25361]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1087.060457][T25361] RIP: 0033:0x7f2525b9cdd9
[ 1087.064867][T25361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1087.084481][T25361] RSP: 002b:00007f2526acc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1087.092900][T25361] RAX: ffffffffffffffda RBX: 00007f2525e15fa0 RCX: 00007f2525b9cdd9
[ 1087.100875][T25361] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1087.108840][T25361] RBP: 00007f2526acc090 R08: 0000000000000000 R09: 0000000000000000
[ 1087.116884][T25361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1087.124877][T25361] R13: 00007f2525e16038 R14: 00007f2525e15fa0 R15: 00007ffc91bea0b8
[ 1087.132866][T25361]  </TASK>
[ 1087.395929][T25363] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7156'.
[ 1087.458005][T25365] netlink: 'syz.4.7157': attribute type 10 has an invalid length.
[ 1087.495463][T25365] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7157'.
[ 1087.540879][T25365] device bond0 entered promiscuous mode
[ 1087.582971][T25365] device bond_slave_1 entered promiscuous mode
[ 1087.608485][T25365] bridge0: port 4(bond0) entered blocking state
[ 1087.626193][T25365] bridge0: port 4(bond0) entered disabled state
[ 1087.668979][T25365] bridge0: port 4(bond0) entered blocking state
[ 1087.679014][T25365] bridge0: port 4(bond0) entered forwarding state
[ 1087.721970][T25374] device pim6reg1 entered promiscuous mode
[ 1087.797782][T25380] netlink: 'syz.1.7161': attribute type 10 has an invalid length.
[ 1087.971955][T25391] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1088.438086][T25399] netlink: 'syz.3.7167': attribute type 21 has an invalid length.
[ 1088.480106][T25401] delete_channel: no stack
[ 1088.489775][T25399] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7167'.
[ 1088.523518][T25399] netlink: 'syz.3.7167': attribute type 4 has an invalid length.
[ 1088.541380][T25399] netlink: 'syz.3.7167': attribute type 5 has an invalid length.
[ 1088.568723][T25405] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7168'.
[ 1088.581445][T25399] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7167'.
[ 1089.832489][T25426] validate_nla: 1 callbacks suppressed
[ 1089.832509][T25426] netlink: 'syz.4.7173': attribute type 3 has an invalid length.
[ 1090.101530][T25434] netlink: 'syz.0.7176': attribute type 3 has an invalid length.
[ 1090.130763][T25433] netlink: 'syz.2.7175': attribute type 21 has an invalid length.
[ 1090.201868][T25433] netlink: 'syz.2.7175': attribute type 6 has an invalid length.
[ 1090.426817][T25438] netlink: 'syz.0.7179': attribute type 2 has an invalid length.
[ 1090.780598][T25455] delete_channel: no stack
[ 1090.856247][T25459] device pim6reg1 entered promiscuous mode
[ 1090.915429][T25464] netlink: 'syz.1.7184': attribute type 3 has an invalid length.
[ 1090.928425][T25464] __nla_validate_parse: 3 callbacks suppressed
[ 1090.928442][T25464] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7184'.
[ 1091.304784][T25475] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7189'.
[ 1091.327438][T25474] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7189'.
[ 1091.343445][T25470] netlink: 'syz.2.7187': attribute type 25 has an invalid length.
[ 1091.372335][T25479] netlink: 'syz.3.7188': attribute type 3 has an invalid length.
[ 1091.380392][T25479] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.7188'.
[ 1091.382400][T25470] netlink: 'syz.2.7187': attribute type 1 has an invalid length.
[ 1091.418068][T25470] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1091.491116][T25474] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1091.501371][T25476] @: port 1(veth0_to_team) entered blocking state
[ 1091.508147][T25474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1091.528797][T25474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1091.533556][T25476] @: port 1(veth0_to_team) entered disabled state
[ 1091.625380][T25476] device veth0_to_team entered promiscuous mode
[ 1091.636950][T25475] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1091.662848][T25475] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1091.676806][T25475] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1092.048098][T25498] delete_channel: no stack
[ 1092.121097][T25503] netlink: 'syz.2.7199': attribute type 3 has an invalid length.
[ 1092.139276][T25503] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7199'.
[ 1092.155682][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[ 1092.765696][T25516] team0: Device veth1_macvtap failed to register rx_handler
[ 1092.929996][T25518] Ÿë
: port 2(gretap0) entered blocking state
[ 1092.939899][T25518] Ÿë
: port 2(gretap0) entered disabled state
[ 1092.974316][T25518] device gretap0 entered promiscuous mode
[ 1092.986096][T25527] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.7204'.
[ 1093.138563][T25534] delete_channel: no stack
[ 1093.262116][T25536] team0: Port device netdevsim0 added
[ 1093.287704][T25538] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7211'.
[ 1093.377533][T25542] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7214'.
[ 1093.504547][T25546] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1093.582649][T25551] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7218'.
[ 1093.775189][T25558] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1093.782037][T25558] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1093.811842][ T4644] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1093.991823][T25562] tipc: Started in network mode
[ 1094.007520][T25562] tipc: Node identity 9215a268, cluster identity 4711
[ 1094.021723][T25562] tipc: Node number set to 2450891368
[ 1094.049304][T25566] device pim6reg1 entered promiscuous mode
[ 1094.199272][T25569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7226'.
[ 1094.211052][T25573] delete_channel: no stack
[ 1095.631231][T25607] delete_channel: no stack
[ 1095.721094][T25610] validate_nla: 7 callbacks suppressed
[ 1095.721113][T25610] netlink: 'syz.1.7240': attribute type 3 has an invalid length.
[ 1096.047991][T25623] netlink: 'syz.3.7246': attribute type 10 has an invalid length.
[ 1096.065557][T25623] __nla_validate_parse: 2 callbacks suppressed
[ 1096.065575][T25623] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7246'.
[ 1096.334392][T25632] netlink: 'syz.2.7249': attribute type 29 has an invalid length.
[ 1096.916027][T25632] netlink: 'syz.2.7249': attribute type 29 has an invalid length.
[ 1096.961077][T25642] netlink: 'syz.4.7252': attribute type 10 has an invalid length.
[ 1096.980293][T25642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7252'.
[ 1097.088811][T25638] device pim6reg1 entered promiscuous mode
[ 1097.137147][T25646] delete_channel: no stack
[ 1097.232721][T25652] netlink: 'syz.0.7253': attribute type 3 has an invalid length.
[ 1097.276350][T25652] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7253'.
[ 1097.711935][ T4283] Bluetooth: hci4: ISO packet for unknown connection handle 1
[ 1097.774904][T25655] device syzkaller0 entered promiscuous mode
[ 1099.690930][T25673] netlink: 'syz.4.7262': attribute type 10 has an invalid length.
[ 1099.698887][T25673] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7262'.
[ 1099.845094][T25687] netlink: 'syz.4.7266': attribute type 10 has an invalid length.
[ 1099.864822][T25687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7266'.
[ 1099.973457][T25693] delete_channel: no stack
[ 1100.020516][T25693] netlink: 'syz.1.7269': attribute type 3 has an invalid length.
[ 1100.043175][T25693] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7269'.
[ 1100.065584][T25695] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1100.082700][T25695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1100.214711][T25698] netlink: 'syz.4.7270': attribute type 10 has an invalid length.
[ 1100.886036][T25708] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7275'.
[ 1101.086170][T25723] delete_channel: no stack
[ 1101.095994][T25723] netlink: 'syz.4.7281': attribute type 3 has an invalid length.
[ 1101.113370][T25723] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7281'.
[ 1101.223551][T25725] netlink: 'syz.3.7279': attribute type 10 has an invalid length.
[ 1101.482311][T25725] team0: Port device wlan1 added
[ 1101.495082][T25727] netlink: 'syz.0.7282': attribute type 10 has an invalid length.
[ 1101.503085][T25727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7282'.
[ 1101.794858][T25742] FAULT_INJECTION: forcing a failure.
[ 1101.794858][T25742] name failslab, interval 1, probability 0, space 0, times 0
[ 1101.843595][T25742] CPU: 0 PID: 25742 Comm: syz.0.7287 Not tainted syzkaller #0
[ 1101.851148][T25742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1101.861230][T25742] Call Trace:
[ 1101.864528][T25742]  <TASK>
[ 1101.867479][T25742]  dump_stack_lvl+0x188/0x24e
[ 1101.872195][T25742]  ? show_regs_print_info+0x12/0x12
[ 1101.877431][T25742]  ? load_image+0x400/0x400
[ 1101.881970][T25742]  ? __might_sleep+0xd0/0xd0
[ 1101.886589][T25742]  ? __lock_acquire+0x7d10/0x7d10
[ 1101.891659][T25742]  should_fail_ex+0x399/0x4d0
[ 1101.896361][T25742]  should_failslab+0x5/0x20
[ 1101.900885][T25742]  slab_pre_alloc_hook+0x59/0x310
[ 1101.905938][T25742]  ? ip6_setup_cork+0x50d/0xfe0
[ 1101.910824][T25742]  __kmem_cache_alloc_node+0x4f/0x260
[ 1101.916245][T25742]  ? ip6_setup_cork+0x50d/0xfe0
[ 1101.921233][T25742]  __kmalloc_node_track_caller+0x9e/0x230
[ 1101.926995][T25742]  kmemdup+0x27/0x60
[ 1101.930928][T25742]  ip6_setup_cork+0x50d/0xfe0
[ 1101.935729][T25742]  ip6_append_data+0x29e/0x3e0
[ 1101.940526][T25742]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1101.945405][T25742]  l2tp_ip6_sendmsg+0x1208/0x1670
[ 1101.950474][T25742]  ? l2tp_ip6_destroy_sock+0x50/0x50
[ 1101.955807][T25742]  ? aa_af_perm+0x340/0x340
[ 1101.960332][T25742]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1101.966777][T25742]  ? sock_rps_record_flow+0x19/0x3f0
[ 1101.972086][T25742]  ? inet_sendmsg+0x78/0x2f0
[ 1101.976689][T25742]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1101.981981][T25742]  ? security_socket_sendmsg+0x7c/0xa0
[ 1101.987486][T25742]  ? inet_send_prepare+0x260/0x260
[ 1101.992612][T25742]  ____sys_sendmsg+0x5be/0x970
[ 1101.997411][T25742]  ? __sys_sendmsg_sock+0x30/0x30
[ 1102.002464][T25742]  ? __import_iovec+0x315/0x500
[ 1102.007340][T25742]  ? import_iovec+0x6f/0xa0
[ 1102.011859][T25742]  ___sys_sendmsg+0x2a2/0x360
[ 1102.016585][T25742]  ? __sys_sendmsg+0x290/0x290
[ 1102.021397][T25742]  ? __lock_acquire+0x7d10/0x7d10
[ 1102.026475][T25742]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1102.031376][T25742]  ? __x64_sys_sendmsg+0x80/0x80
[ 1102.036352][T25742]  ? lockdep_hardirqs_on+0x94/0x140
[ 1102.041574][T25742]  do_syscall_64+0x4c/0xa0
[ 1102.046016][T25742]  ? clear_bhb_loop+0x60/0xb0
[ 1102.050715][T25742]  ? clear_bhb_loop+0x60/0xb0
[ 1102.055422][T25742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1102.061338][T25742] RIP: 0033:0x7fc9ed99cdd9
[ 1102.065764][T25742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1102.085466][T25742] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1102.093921][T25742] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[ 1102.101920][T25742] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1102.109911][T25742] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1102.117895][T25742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1102.125888][T25742] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1102.133894][T25742]  </TASK>
[ 1102.261856][T25760] delete_channel: no stack
[ 1102.290602][T25760] netlink: 'syz.0.7293': attribute type 3 has an invalid length.
[ 1102.313104][T25760] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7293'.
[ 1102.397309][T25768] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7297'.
[ 1102.420716][T25768] bridge0: port 4(bond0) entered disabled state
[ 1102.532736][T25768] bridge0: port 4(bond0) entered disabled state
[ 1102.595005][T25768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1102.623849][T25768] device bond_slave_1 left promiscuous mode
[ 1102.638296][T25768] bond0 (unregistering): Released all slaves
[ 1102.920583][T25782] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.7301'.
[ 1103.130284][T25796] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1103.264456][T25800] delete_channel: no stack
[ 1103.272886][T25798] netlink: 'syz.3.7307': attribute type 3 has an invalid length.
[ 1103.303822][T25798] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7307'.
[ 1103.343663][T25802] netlink: 'syz.1.7309': attribute type 25 has an invalid length.
[ 1103.373419][T25802] netlink: 'syz.1.7309': attribute type 1 has an invalid length.
[ 1103.381249][T25802] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1103.389859][T25806] netlink: 'syz.2.7308': attribute type 3 has an invalid length.
[ 1103.403343][T25806] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7308'.
[ 1103.718879][T25813] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7314'.
[ 1103.757829][T25813] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1103.802887][T25813] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1104.151122][T25824] netlink: 'syz.3.7318': attribute type 10 has an invalid length.
[ 1104.944132][T25840] __sock_release: fasync list not empty!
[ 1105.013631][T25843] delete_channel: no stack
[ 1105.102006][T25846] netlink: 'syz.1.7325': attribute type 3 has an invalid length.
[ 1105.170024][T25846] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7325'.
[ 1105.219037][T25853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7327'.
[ 1105.989745][T25873] device pim6reg1 entered promiscuous mode
[ 1106.446372][T25892] delete_channel: no stack
[ 1106.490017][T25887] validate_nla: 1 callbacks suppressed
[ 1106.490037][T25887] netlink: 'syz.0.7338': attribute type 21 has an invalid length.
[ 1106.517943][T25887] netlink: 'syz.0.7338': attribute type 6 has an invalid length.
[ 1106.530410][T25894] netlink: 'syz.2.7341': attribute type 3 has an invalid length.
[ 1106.539701][T25894] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7341'.
[ 1106.544850][T25887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7338'.
[ 1106.573475][T25895] netlink: 'syz.3.7342': attribute type 12 has an invalid length.
[ 1106.581320][T25895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7342'.
[ 1106.756275][T25901] netlink: 'syz.0.7345': attribute type 25 has an invalid length.
[ 1106.792458][T25901] netlink: 'syz.0.7345': attribute type 1 has an invalid length.
[ 1106.809179][T25901] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1106.930062][T25903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7346'.
[ 1107.561610][T25923] netlink: 'syz.3.7351': attribute type 39 has an invalid length.
[ 1108.177723][T25930] delete_channel: no stack
[ 1108.239573][T25932] device wlan1 entered promiscuous mode
[ 1108.601891][T25942] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.7359'.
[ 1108.916627][T25960] syz.2.7365[25960] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1108.930236][T25959] netlink: 'syz.3.7368': attribute type 3 has an invalid length.
[ 1108.991894][T25959] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7368'.
[ 1109.476540][T25970] delete_channel: no stack
[ 1109.482183][T25966] netlink: 'syz.0.7369': attribute type 10 has an invalid length.
[ 1109.603174][T25966] device wlan1 entered promiscuous mode
[ 1109.629936][T25966] team0: Port device wlan1 added
[ 1109.660069][T25968] netlink: 'syz.4.7370': attribute type 7 has an invalid length.
[ 1110.101045][T25986] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1110.126720][T25986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1110.149441][T25979] device pim6reg1 entered promiscuous mode
[ 1110.597865][T25996] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1111.289162][T26007] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1111.296243][T26007] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1111.483900][T26010] delete_channel: no stack
[ 1111.943280][T26032] bridge0: port 4(team0) entered disabled state
[ 1111.949980][T26032] bridge0: port 3(bond0) entered disabled state
[ 1111.956650][T26032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.964325][T26032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.066217][T26035] validate_nla: 2 callbacks suppressed
[ 1112.066237][T26035] netlink: 'syz.2.7392': attribute type 10 has an invalid length.
[ 1112.397317][T26035] device wlan1 left promiscuous mode
[ 1112.449662][T26035] device wlan1 entered promiscuous mode
[ 1112.484059][T26035] team0: Port device wlan1 added
[ 1112.502599][T26037] netlink: 'syz.0.7394': attribute type 10 has an invalid length.
[ 1112.519100][T26037] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7394'.
[ 1112.583030][T26045] device pim6reg1 entered promiscuous mode
[ 1112.633507][ T4282] Bluetooth: hci5: command 0x0406 tx timeout
[ 1113.399121][T26060] delete_channel: no stack
[ 1113.825991][T26073] netlink: 'syz.0.7406': attribute type 21 has an invalid length.
[ 1113.845485][T26073] netlink: 'syz.0.7406': attribute type 4 has an invalid length.
[ 1114.206957][T26090] netlink: 'syz.3.7409': attribute type 10 has an invalid length.
[ 1114.263700][T26090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7409'.
[ 1114.342264][T26090] device team0 entered promiscuous mode
[ 1114.410717][T26090] device team_slave_0 entered promiscuous mode
[ 1114.420840][T26090] device team_slave_1 entered promiscuous mode
[ 1114.432342][T26090] device netdevsim0 entered promiscuous mode
[ 1114.452550][T26090] device wlan1 entered promiscuous mode
[ 1114.468294][T26090] bridge0: port 4(team0) entered blocking state
[ 1114.488875][T26090] bridge0: port 4(team0) entered disabled state
[ 1114.504746][T26090] bridge0: port 4(team0) entered blocking state
[ 1114.511195][T26090] bridge0: port 4(team0) entered forwarding state
[ 1114.537430][T26092] netlink: 'syz.1.7422': attribute type 10 has an invalid length.
[ 1114.708381][T26102] delete_channel: no stack
[ 1115.684340][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.690752][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.728377][T26137] device syzkaller0 entered promiscuous mode
[ 1115.758723][T26141] netlink: 'syz.3.7426': attribute type 10 has an invalid length.
[ 1115.771090][T26141] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7426'.
[ 1116.120329][T26156] netlink: 'syz.4.7431': attribute type 3 has an invalid length.
[ 1116.140277][T26156] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.7431'.
[ 1117.663888][T26140] device pim6reg1 entered promiscuous mode
[ 1117.890801][T26163] delete_channel: no stack
[ 1118.031522][T26166] netlink: 'syz.0.7434': attribute type 10 has an invalid length.
[ 1118.049704][T26166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7434'.
[ 1118.212399][T26174] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1118.237267][T26174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1118.247528][T26180] netlink: 'syz.0.7439': attribute type 16 has an invalid length.
[ 1118.267310][T26180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7439'.
[ 1118.268978][T26177] netlink: 'syz.2.7438': attribute type 10 has an invalid length.
[ 1118.470194][T26186] netlink: 'syz.3.7443': attribute type 1 has an invalid length.
[ 1118.488593][T26186] netlink: 'syz.3.7443': attribute type 4 has an invalid length.
[ 1118.507281][T26186] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7443'.
[ 1118.757256][T26195] delete_channel: no stack
[ 1119.467171][T26218] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1119.545044][T26220] netlink: 'syz.4.7457': attribute type 6 has an invalid length.
[ 1119.583085][T26223] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7458'.
[ 1119.661215][T26231] delete_channel: no stack
[ 1120.258814][T26256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7470'.
[ 1120.285182][T26253] device pim6reg1 entered promiscuous mode
[ 1120.349312][T26262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7471'.
[ 1120.839173][T26277] delete_channel: no stack
[ 1120.959702][T26286] netlink: 'syz.0.7479': attribute type 10 has an invalid length.
[ 1121.101975][T26292] netlink: 'syz.3.7482': attribute type 4 has an invalid length.
[ 1121.112320][T26294] netlink: 'syz.0.7483': attribute type 12 has an invalid length.
[ 1121.120676][T26294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7483'.
[ 1121.121186][T26292] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.7482'.
[ 1121.167508][T26295] ref_ctr_offset mismatch. inode: 0x37b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[ 1121.416490][T26299] netlink: 'syz.0.7484': attribute type 21 has an invalid length.
[ 1121.430879][T26299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7484'.
[ 1123.433613][T26307] validate_nla: 1 callbacks suppressed
[ 1123.433631][T26307] netlink: 'syz.3.7487': attribute type 25 has an invalid length.
[ 1123.448932][T26307] netlink: 'syz.3.7487': attribute type 1 has an invalid length.
[ 1123.473524][T26307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1123.689546][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7491'.
[ 1123.722828][T26311] delete_channel: no stack
[ 1123.815584][T26322] IPv6: Can't replace route, no match found
[ 1123.925890][T26328] netlink: 'syz.2.7496': attribute type 10 has an invalid length.
[ 1123.973130][T26328] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7496'.
[ 1124.008373][T26332] netlink: 'syz.4.7498': attribute type 3 has an invalid length.
[ 1124.018850][T26332] netlink: 'syz.4.7498': attribute type 1 has an invalid length.
[ 1124.041433][T26332] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7498'.
[ 1124.064623][T26326] netlink: 'syz.3.7495': attribute type 13 has an invalid length.
[ 1124.072872][T26326] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7495'.
[ 1124.172464][T26326] erspan0: refused to change device tx_queue_len
[ 1124.294595][T26332] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7498'.
[ 1124.362618][T26332] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1125.164299][T26344] device pim6reg1 entered promiscuous mode
[ 1125.488650][T26356] delete_channel: no stack
[ 1125.554822][ T4638] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1126.169184][T26377] netlink: 'syz.0.7514': attribute type 1 has an invalid length.
[ 1126.184536][T26377] netlink: 'syz.0.7514': attribute type 4 has an invalid length.
[ 1126.201719][T26377] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7514'.
[ 1126.375853][T26381] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7515'.
[ 1126.415427][T26381] netlink: 'syz.3.7515': attribute type 1 has an invalid length.
[ 1126.651332][T26386] netlink: 'syz.2.7517': attribute type 10 has an invalid length.
[ 1126.680036][T26386] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7517'.
[ 1126.707023][T26386] bridge0: port 4(veth0_vlan) entered blocking state
[ 1126.724382][T26386] bridge0: port 4(veth0_vlan) entered disabled state
[ 1126.760865][T26386] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1127.369629][T26402] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1127.429875][T26404] device veth1_macvtap left promiscuous mode
[ 1127.485423][T26404] device veth1_macvtap entered promiscuous mode
[ 1127.501589][T26409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7525'.
[ 1127.513998][T26404] team0: Port device veth1_macvtap added
[ 1127.520427][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1127.550933][T26411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1127.589272][T26411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.688508][T26405] delete_channel: no stack
[ 1127.866553][T26419] device pim6reg1 entered promiscuous mode
[ 1128.019060][T26424] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1128.025956][T26424] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1129.192647][T26441] validate_nla: 1 callbacks suppressed
[ 1129.192717][T26441] netlink: 'syz.2.7537': attribute type 10 has an invalid length.
[ 1129.211741][T26439] netlink: 'syz.0.7536': attribute type 21 has an invalid length.
[ 1129.223554][T26441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7537'.
[ 1129.238789][T26441] device ipvlan1 entered promiscuous mode
[ 1129.361908][T26441] batman_adv: batadv0: Interface deactivated: ipvlan1
[ 1129.379569][T26441] batman_adv: batadv0: Removing interface: ipvlan1
[ 1129.580821][T26441] bridge0: port 4(ipvlan1) entered blocking state
[ 1129.593395][T26441] bridge0: port 4(ipvlan1) entered disabled state
[ 1129.925286][T26441] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1129.946630][T26446] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7537'.
[ 1130.041534][T26452] delete_channel: no stack
[ 1130.538088][T26475] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7546'.
[ 1130.616706][T26475] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1130.644213][T26475] CPU: 0 PID: 26475 Comm: syz.3.7546 Not tainted syzkaller #0
[ 1130.651745][T26475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1130.661835][T26475] Call Trace:
[ 1130.665126][T26475]  <TASK>
[ 1130.668080][T26475]  dump_stack_lvl+0x188/0x24e
[ 1130.672797][T26475]  ? show_regs_print_info+0x12/0x12
[ 1130.678022][T26475]  ? load_image+0x400/0x400
[ 1130.682531][T26475]  sysfs_warn_dup+0x8a/0xa0
[ 1130.687040][T26475]  sysfs_do_create_link_sd+0xc0/0x110
[ 1130.692461][T26475]  device_add+0x7ed/0xfb0
[ 1130.696836][T26475]  wiphy_register+0x1d9f/0x2ac0
[ 1130.701741][T26475]  ? cfg80211_event_work+0x40/0x40
[ 1130.706874][T26475]  ? minstrel_ht_alloc+0x894/0xa20
[ 1130.712031][T26475]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1130.718121][T26475]  ieee80211_register_hw+0x2d00/0x39f0
[ 1130.723607][T26475]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1130.729162][T26475]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1130.734726][T26475]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1130.740366][T26475]  ? lockdep_hardirqs_on+0x94/0x140
[ 1130.745566][T26475]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1130.751740][T26475]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1130.757488][T26475]  hwsim_new_radio_nl+0xafa/0xce0
[ 1130.762553][T26475]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1130.768122][T26475]  ? end_current_label_crit_section+0x170/0x170
[ 1130.774384][T26475]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1130.780298][T26475]  ? bpf_lsm_capable+0x5/0x10
[ 1130.784989][T26475]  ? security_capable+0x85/0xb0
[ 1130.789854][T26475]  genl_rcv_msg+0x604/0x790
[ 1130.794376][T26475]  ? genl_bind+0x360/0x360
[ 1130.798800][T26475]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1130.805150][T26475]  netlink_rcv_skb+0x1fb/0x450
[ 1130.809927][T26475]  ? genl_bind+0x360/0x360
[ 1130.814346][T26475]  ? netlink_ack+0x1170/0x1170
[ 1130.819128][T26475]  ? down_read+0x1a8/0x2d0
[ 1130.823557][T26475]  genl_rcv+0x24/0x40
[ 1130.827541][T26475]  netlink_unicast+0x74d/0x8d0
[ 1130.832326][T26475]  netlink_sendmsg+0x8ad/0xbd0
[ 1130.837110][T26475]  ? netlink_getsockopt+0x550/0x550
[ 1130.842320][T26475]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1130.848481][T26475]  ? aa_sock_msg_perm+0x94/0x150
[ 1130.853424][T26475]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1130.858709][T26475]  ? security_socket_sendmsg+0x7c/0xa0
[ 1130.864182][T26475]  ? netlink_getsockopt+0x550/0x550
[ 1130.869385][T26475]  ____sys_sendmsg+0x5be/0x970
[ 1130.874169][T26475]  ? __sanitizer_cov_trace_cmp8+0x32/0x80
[ 1130.879893][T26475]  ? __sys_sendmsg_sock+0x30/0x30
[ 1130.884923][T26475]  ? __import_iovec+0x315/0x500
[ 1130.889789][T26475]  ? import_iovec+0x6f/0xa0
[ 1130.894296][T26475]  ___sys_sendmsg+0x2a2/0x360
[ 1130.898988][T26475]  ? __sys_sendmsg+0x290/0x290
[ 1130.903813][T26475]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1130.908676][T26475]  ? __x64_sys_sendmsg+0x80/0x80
[ 1130.913661][T26475]  ? lockdep_hardirqs_on+0x94/0x140
[ 1130.918876][T26475]  do_syscall_64+0x4c/0xa0
[ 1130.923305][T26475]  ? clear_bhb_loop+0x60/0xb0
[ 1130.927991][T26475]  ? clear_bhb_loop+0x60/0xb0
[ 1130.932674][T26475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1130.938570][T26475] RIP: 0033:0x7fbeaf19cdd9
[ 1130.942986][T26475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1130.962598][T26475] RSP: 002b:00007fbeaffd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1130.971016][T26475] RAX: ffffffffffffffda RBX: 00007fbeaf416090 RCX: 00007fbeaf19cdd9
[ 1130.978990][T26475] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1130.986967][T26475] RBP: 00007fbeaf232d69 R08: 0000000000000000 R09: 0000000000000000
[ 1130.994956][T26475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1131.002967][T26475] R13: 00007fbeaf416128 R14: 00007fbeaf416090 R15: 00007ffdf9642b48
[ 1131.010991][T26475]  </TASK>
[ 1131.069331][T26484] device pim6reg1 entered promiscuous mode
[ 1131.231608][T26487] netlink: 'syz.1.7551': attribute type 10 has an invalid length.
[ 1131.258573][T26487] device hsr0 entered promiscuous mode
[ 1131.322847][T26487] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1131.374616][T26487] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1131.396818][T26487] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1131.439659][T26487] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1131.727610][T26500] netlink: 'syz.4.7556': attribute type 10 has an invalid length.
[ 1131.961679][T26506] netlink: 'syz.3.7557': attribute type 10 has an invalid length.
[ 1132.013421][T26506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7557'.
[ 1132.232458][T26519] netlink: 'syz.3.7563': attribute type 29 has an invalid length.
[ 1132.261134][T26519] netlink: 'syz.3.7563': attribute type 29 has an invalid length.
[ 1132.586806][T26527] netlink: 'syz.2.7567': attribute type 1 has an invalid length.
[ 1132.595479][T26527] netlink: 'syz.2.7567': attribute type 4 has an invalid length.
[ 1132.632856][T26527] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7567'.
[ 1132.889424][T26532] netlink: 'syz.2.7569': attribute type 10 has an invalid length.
[ 1132.905063][T26532] device hsr0 entered promiscuous mode
[ 1132.954447][T26532] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1132.969979][T26532] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1132.988982][T26532] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1133.009845][T26532] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1133.071816][T26536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7570'.
[ 1133.145706][T26540] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.7571'.
[ 1133.210846][T26545] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7572'.
[ 1133.368844][T26545] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7572'.
[ 1133.409886][T26545] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1133.428823][T26545] CPU: 0 PID: 26545 Comm: syz.2.7572 Not tainted syzkaller #0
[ 1133.436354][T26545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1133.446429][T26545] Call Trace:
[ 1133.449723][T26545]  <TASK>
[ 1133.452671][T26545]  dump_stack_lvl+0x188/0x24e
[ 1133.457372][T26545]  ? show_regs_print_info+0x12/0x12
[ 1133.462590][T26545]  ? load_image+0x400/0x400
[ 1133.467112][T26545]  sysfs_warn_dup+0x8a/0xa0
[ 1133.471621][T26545]  sysfs_do_create_link_sd+0xc0/0x110
[ 1133.476999][T26545]  device_add+0x7ed/0xfb0
[ 1133.481338][T26545]  wiphy_register+0x1d9f/0x2ac0
[ 1133.486207][T26545]  ? cfg80211_event_work+0x40/0x40
[ 1133.491326][T26545]  ? minstrel_ht_alloc+0x894/0xa20
[ 1133.496450][T26545]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1133.502520][T26545]  ieee80211_register_hw+0x2d00/0x39f0
[ 1133.507997][T26545]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1133.513547][T26545]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1133.519101][T26545]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1133.524747][T26545]  ? memset+0x1e/0x40
[ 1133.528729][T26545]  ? __hrtimer_init+0x186/0x270
[ 1133.533585][T26545]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1133.539326][T26545]  hwsim_new_radio_nl+0xafa/0xce0
[ 1133.544371][T26545]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1133.549919][T26545]  ? end_current_label_crit_section+0x170/0x170
[ 1133.556159][T26545]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1133.562056][T26545]  ? bpf_lsm_capable+0x5/0x10
[ 1133.566733][T26545]  ? security_capable+0x85/0xb0
[ 1133.571587][T26545]  genl_rcv_msg+0x604/0x790
[ 1133.576101][T26545]  ? genl_bind+0x360/0x360
[ 1133.580512][T26545]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1133.586858][T26545]  netlink_rcv_skb+0x1fb/0x450
[ 1133.591633][T26545]  ? genl_bind+0x360/0x360
[ 1133.596045][T26545]  ? netlink_ack+0x1170/0x1170
[ 1133.600819][T26545]  ? down_read+0x1a8/0x2d0
[ 1133.605241][T26545]  genl_rcv+0x24/0x40
[ 1133.609220][T26545]  netlink_unicast+0x74d/0x8d0
[ 1133.613994][T26545]  netlink_sendmsg+0x8ad/0xbd0
[ 1133.618770][T26545]  ? netlink_getsockopt+0x550/0x550
[ 1133.623981][T26545]  ? aa_sock_msg_perm+0x94/0x150
[ 1133.628917][T26545]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1133.634201][T26545]  ? security_socket_sendmsg+0x7c/0xa0
[ 1133.639666][T26545]  ? netlink_getsockopt+0x550/0x550
[ 1133.644875][T26545]  ____sys_sendmsg+0x5be/0x970
[ 1133.649650][T26545]  ? __sys_sendmsg_sock+0x30/0x30
[ 1133.654680][T26545]  ? __import_iovec+0x315/0x500
[ 1133.659541][T26545]  ? import_iovec+0x6f/0xa0
[ 1133.664046][T26545]  ___sys_sendmsg+0x2a2/0x360
[ 1133.668732][T26545]  ? __sys_sendmsg+0x290/0x290
[ 1133.673543][T26545]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1133.678404][T26545]  ? __x64_sys_sendmsg+0x80/0x80
[ 1133.683362][T26545]  ? lockdep_hardirqs_on+0x94/0x140
[ 1133.688581][T26545]  do_syscall_64+0x4c/0xa0
[ 1133.692998][T26545]  ? clear_bhb_loop+0x60/0xb0
[ 1133.697688][T26545]  ? clear_bhb_loop+0x60/0xb0
[ 1133.702365][T26545]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1133.708258][T26545] RIP: 0033:0x7fbf3d79cdd9
[ 1133.712672][T26545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1133.732278][T26545] RSP: 002b:00007fbf3e670028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1133.740693][T26545] RAX: ffffffffffffffda RBX: 00007fbf3da15fa0 RCX: 00007fbf3d79cdd9
[ 1133.748663][T26545] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[ 1133.756899][T26545] RBP: 00007fbf3d832d69 R08: 0000000000000000 R09: 0000000000000000
[ 1133.764867][T26545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1133.772833][T26545] R13: 00007fbf3da16038 R14: 00007fbf3da15fa0 R15: 00007ffcd5a66348
[ 1133.780847][T26545]  </TASK>
[ 1133.905322][T26549] device hsr0 entered promiscuous mode
[ 1133.939810][T26549] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1134.034593][T26549] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1134.139303][T26549] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1134.192904][T26549] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1134.503012][T26572] device pim6reg1 entered promiscuous mode
[ 1134.670335][T26581] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1134.701012][T26581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1134.762210][T26584] validate_nla: 8 callbacks suppressed
[ 1134.762228][T26584] netlink: 'syz.3.7584': attribute type 10 has an invalid length.
[ 1134.829840][T26584] device veth1_macvtap left promiscuous mode
[ 1134.855804][T26584] team0: Port device veth1_macvtap removed
[ 1135.504027][T26612] device pim6reg1 entered promiscuous mode
[ 1135.639652][T26614] device syzkaller0 entered promiscuous mode
[ 1136.007166][T26632] FAULT_INJECTION: forcing a failure.
[ 1136.007166][T26632] name failslab, interval 1, probability 0, space 0, times 0
[ 1136.021149][T26632] CPU: 1 PID: 26632 Comm: syz.1.7603 Not tainted syzkaller #0
[ 1136.028656][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1136.038823][T26632] Call Trace:
[ 1136.042120][T26632]  <TASK>
[ 1136.045079][T26632]  dump_stack_lvl+0x188/0x24e
[ 1136.049790][T26632]  ? show_regs_print_info+0x12/0x12
[ 1136.055016][T26632]  ? load_image+0x400/0x400
[ 1136.059547][T26632]  ? __might_sleep+0xd0/0xd0
[ 1136.064155][T26632]  ? __lock_acquire+0x7d10/0x7d10
[ 1136.069218][T26632]  should_fail_ex+0x399/0x4d0
[ 1136.073922][T26632]  should_failslab+0x5/0x20
[ 1136.078444][T26632]  slab_pre_alloc_hook+0x59/0x310
[ 1136.083485][T26632]  kmem_cache_alloc_node+0x5a/0x320
[ 1136.088693][T26632]  ? __alloc_skb+0xfc/0x7e0
[ 1136.093208][T26632]  __alloc_skb+0xfc/0x7e0
[ 1136.097549][T26632]  alloc_skb_with_frags+0xa7/0x710
[ 1136.102664][T26632]  ? mark_lock+0x94/0x320
[ 1136.106998][T26632]  ? __lock_acquire+0x12f4/0x7d10
[ 1136.112026][T26632]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1136.117238][T26632]  ? sock_kzfree_s+0x50/0x50
[ 1136.121824][T26632]  ? __kasan_kmalloc+0x8e/0xa0
[ 1136.126587][T26632]  ? verify_lock_unused+0x140/0x140
[ 1136.131790][T26632]  ? ip6_append_data+0x29e/0x3e0
[ 1136.136752][T26632]  ? l2tp_ip6_sendmsg+0x1208/0x1670
[ 1136.141964][T26632]  ? ____sys_sendmsg+0x5be/0x970
[ 1136.146913][T26632]  ? perf_trace_lock+0xf8/0x390
[ 1136.151778][T26632]  __ip6_append_data+0x2ae9/0x3d40
[ 1136.156921][T26632]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1136.161776][T26632]  ? ip6_mtu+0x79/0x3f0
[ 1136.165929][T26632]  ? ip6_setup_cork+0xfe0/0xfe0
[ 1136.170781][T26632]  ? ip6_setup_cork+0xa30/0xfe0
[ 1136.175636][T26632]  ip6_append_data+0x1ea/0x3e0
[ 1136.180402][T26632]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1136.185252][T26632]  l2tp_ip6_sendmsg+0x1208/0x1670
[ 1136.190290][T26632]  ? l2tp_ip6_destroy_sock+0x50/0x50
[ 1136.195588][T26632]  ? aa_af_perm+0x340/0x340
[ 1136.200086][T26632]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1136.206501][T26632]  ? sock_rps_record_flow+0x19/0x3f0
[ 1136.211786][T26632]  ? inet_sendmsg+0x78/0x2f0
[ 1136.216369][T26632]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1136.221647][T26632]  ? security_socket_sendmsg+0x7c/0xa0
[ 1136.227105][T26632]  ? inet_send_prepare+0x260/0x260
[ 1136.232207][T26632]  ____sys_sendmsg+0x5be/0x970
[ 1136.236978][T26632]  ? __sys_sendmsg_sock+0x30/0x30
[ 1136.242000][T26632]  ? __import_iovec+0x315/0x500
[ 1136.246853][T26632]  ? import_iovec+0x6f/0xa0
[ 1136.251357][T26632]  ___sys_sendmsg+0x2a2/0x360
[ 1136.256039][T26632]  ? __sys_sendmsg+0x290/0x290
[ 1136.260826][T26632]  ? __lock_acquire+0x7d10/0x7d10
[ 1136.265868][T26632]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1136.270722][T26632]  ? __x64_sys_sendmsg+0x80/0x80
[ 1136.275673][T26632]  ? lockdep_hardirqs_on+0x94/0x140
[ 1136.280871][T26632]  do_syscall_64+0x4c/0xa0
[ 1136.285285][T26632]  ? clear_bhb_loop+0x60/0xb0
[ 1136.289958][T26632]  ? clear_bhb_loop+0x60/0xb0
[ 1136.294630][T26632]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1136.300527][T26632] RIP: 0033:0x7fea5119cdd9
[ 1136.304942][T26632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1136.324543][T26632] RSP: 002b:00007fea52129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1136.332962][T26632] RAX: ffffffffffffffda RBX: 00007fea51415fa0 RCX: 00007fea5119cdd9
[ 1136.340931][T26632] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1136.348896][T26632] RBP: 00007fea52129090 R08: 0000000000000000 R09: 0000000000000000
[ 1136.356860][T26632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1136.364825][T26632] R13: 00007fea51416038 R14: 00007fea51415fa0 R15: 00007fffd253bc48
[ 1136.373348][T26632]  </TASK>
[ 1138.494003][T26656] netlink: 'syz.4.7612': attribute type 25 has an invalid length.
[ 1138.506509][T26656] netlink: 'syz.4.7612': attribute type 1 has an invalid length.
[ 1138.523412][T26656] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1138.663893][T26659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7614'.
[ 1138.715128][ T4282] Bluetooth: hci2: unexpected event 0x3d length: 15 > 14
[ 1138.906899][T26672] netlink: 'syz.1.7620': attribute type 10 has an invalid length.
[ 1138.934435][T26670] netlink: 'syz.2.7619': attribute type 1 has an invalid length.
[ 1138.966163][T26670] netlink: 'syz.2.7619': attribute type 4 has an invalid length.
[ 1138.993881][T26670] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7619'.
[ 1139.271054][T26684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7623'.
[ 1139.289096][T26684] bond0: (slave bond_slave_0): Releasing backup interface
[ 1139.298732][T26684] device bond_slave_0 left promiscuous mode
[ 1139.355813][T26684] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1139.552251][T26695] netlink: 'syz.4.7628': attribute type 2 has an invalid length.
[ 1139.698625][T26697] netlink: 'syz.0.7627': attribute type 21 has an invalid length.
[ 1139.721966][T26704] netlink: 'syz.3.7630': attribute type 29 has an invalid length.
[ 1139.733692][T26697] netlink: 'syz.0.7627': attribute type 6 has an invalid length.
[ 1139.742709][T26697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7627'.
[ 1139.804821][T26708] device pim6reg1 entered promiscuous mode
[ 1140.227286][T26715] validate_nla: 1 callbacks suppressed
[ 1140.227303][T26715] netlink: 'syz.0.7635': attribute type 1 has an invalid length.
[ 1140.249056][T26717] netlink: 'syz.4.7636': attribute type 21 has an invalid length.
[ 1140.257421][T26715] netlink: 'syz.0.7635': attribute type 4 has an invalid length.
[ 1140.284137][T26715] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7635'.
[ 1140.845608][T26739] netlink: 'syz.3.7644': attribute type 21 has an invalid length.
[ 1140.937121][T26743] netlink: 'syz.4.7645': attribute type 3 has an invalid length.
[ 1140.946368][T26743] netlink: 'syz.4.7645': attribute type 1 has an invalid length.
[ 1140.956241][T26743] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7645'.
[ 1141.158759][T26743] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7645'.
[ 1141.198171][T26743] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1141.220935][T26743] CPU: 0 PID: 26743 Comm: syz.4.7645 Not tainted syzkaller #0
[ 1141.228438][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1141.238492][T26743] Call Trace:
[ 1141.241767][T26743]  <TASK>
[ 1141.244711][T26743]  dump_stack_lvl+0x188/0x24e
[ 1141.249425][T26743]  ? show_regs_print_info+0x12/0x12
[ 1141.255439][T26743]  ? load_image+0x400/0x400
[ 1141.259967][T26743]  sysfs_warn_dup+0x8a/0xa0
[ 1141.264474][T26743]  sysfs_do_create_link_sd+0xc0/0x110
[ 1141.269861][T26743]  device_add+0x7ed/0xfb0
[ 1141.274208][T26743]  wiphy_register+0x1d9f/0x2ac0
[ 1141.279090][T26743]  ? cfg80211_event_work+0x40/0x40
[ 1141.284217][T26743]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1141.290288][T26743]  ieee80211_register_hw+0x2d00/0x39f0
[ 1141.295767][T26743]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1141.301319][T26743]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1141.306882][T26743]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1141.312532][T26743]  ? memset+0x1e/0x40
[ 1141.316513][T26743]  ? __hrtimer_init+0x186/0x270
[ 1141.321366][T26743]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1141.327108][T26743]  hwsim_new_radio_nl+0xafa/0xce0
[ 1141.332153][T26743]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1141.337701][T26743]  ? end_current_label_crit_section+0x170/0x170
[ 1141.343949][T26743]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1141.349848][T26743]  ? bpf_lsm_capable+0x5/0x10
[ 1141.354527][T26743]  ? security_capable+0x85/0xb0
[ 1141.359388][T26743]  genl_rcv_msg+0x604/0x790
[ 1141.363900][T26743]  ? genl_bind+0x360/0x360
[ 1141.368311][T26743]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1141.374659][T26743]  netlink_rcv_skb+0x1fb/0x450
[ 1141.379431][T26743]  ? genl_bind+0x360/0x360
[ 1141.383846][T26743]  ? netlink_ack+0x1170/0x1170
[ 1141.388624][T26743]  ? down_read+0x1a8/0x2d0
[ 1141.393058][T26743]  genl_rcv+0x24/0x40
[ 1141.397037][T26743]  netlink_unicast+0x74d/0x8d0
[ 1141.401825][T26743]  netlink_sendmsg+0x8ad/0xbd0
[ 1141.406605][T26743]  ? netlink_getsockopt+0x550/0x550
[ 1141.411817][T26743]  ? aa_sock_msg_perm+0x94/0x150
[ 1141.416780][T26743]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1141.422069][T26743]  ? security_socket_sendmsg+0x7c/0xa0
[ 1141.427536][T26743]  ? netlink_getsockopt+0x550/0x550
[ 1141.432742][T26743]  ____sys_sendmsg+0x5be/0x970
[ 1141.437525][T26743]  ? __sys_sendmsg_sock+0x30/0x30
[ 1141.442553][T26743]  ? __import_iovec+0x315/0x500
[ 1141.447433][T26743]  ? import_iovec+0x6f/0xa0
[ 1141.451970][T26743]  ___sys_sendmsg+0x2a2/0x360
[ 1141.456676][T26743]  ? __sys_sendmsg+0x290/0x290
[ 1141.461506][T26743]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1141.466376][T26743]  ? __x64_sys_sendmsg+0x80/0x80
[ 1141.471336][T26743]  ? lockdep_hardirqs_on+0x94/0x140
[ 1141.476548][T26743]  do_syscall_64+0x4c/0xa0
[ 1141.480972][T26743]  ? clear_bhb_loop+0x60/0xb0
[ 1141.485656][T26743]  ? clear_bhb_loop+0x60/0xb0
[ 1141.490336][T26743]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1141.496230][T26743] RIP: 0033:0x7f2525b9cdd9
[ 1141.500646][T26743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1141.520254][T26743] RSP: 002b:00007f2526acc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1141.528671][T26743] RAX: ffffffffffffffda RBX: 00007f2525e15fa0 RCX: 00007f2525b9cdd9
[ 1141.536647][T26743] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[ 1141.544617][T26743] RBP: 00007f2525c32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1141.552584][T26743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1141.560563][T26743] R13: 00007f2525e16038 R14: 00007f2525e15fa0 R15: 00007ffc91bea0b8
[ 1141.568557][T26743]  </TASK>
[ 1141.670854][T26751] netlink: 'syz.0.7647': attribute type 3 has an invalid length.
[ 1141.696885][T26751] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7647'.
[ 1141.886535][T26758] netlink: 'syz.4.7651': attribute type 1 has an invalid length.
[ 1141.905994][T26758] netlink: 'syz.4.7651': attribute type 4 has an invalid length.
[ 1141.924053][T26758] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7651'.
[ 1142.370291][T26774] FAULT_INJECTION: forcing a failure.
[ 1142.370291][T26774] name failslab, interval 1, probability 0, space 0, times 0
[ 1142.390832][T26774] CPU: 1 PID: 26774 Comm: syz.4.7657 Not tainted syzkaller #0
[ 1142.398355][T26774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1142.408434][T26774] Call Trace:
[ 1142.411725][T26774]  <TASK>
[ 1142.414667][T26774]  dump_stack_lvl+0x188/0x24e
[ 1142.419638][T26774]  ? show_regs_print_info+0x12/0x12
[ 1142.424870][T26774]  ? load_image+0x400/0x400
[ 1142.429402][T26774]  ? __might_sleep+0xd0/0xd0
[ 1142.434015][T26774]  ? __lock_acquire+0x7d10/0x7d10
[ 1142.439066][T26774]  ? aa_file_perm+0x3ea/0xf00
[ 1142.443768][T26774]  should_fail_ex+0x399/0x4d0
[ 1142.448471][T26774]  should_failslab+0x5/0x20
[ 1142.452988][T26774]  slab_pre_alloc_hook+0x59/0x310
[ 1142.458042][T26774]  ? kernfs_fop_write_iter+0x155/0x520
[ 1142.463521][T26774]  __kmem_cache_alloc_node+0x4f/0x260
[ 1142.468927][T26774]  ? kernfs_fop_write_iter+0x155/0x520
[ 1142.474414][T26774]  __kmalloc+0xa0/0x240
[ 1142.478606][T26774]  kernfs_fop_write_iter+0x155/0x520
[ 1142.483945][T26774]  vfs_write+0x4b1/0xa30
[ 1142.488223][T26774]  ? file_end_write+0x250/0x250
[ 1142.493104][T26774]  ? __fget_files+0x43d/0x4b0
[ 1142.497812][T26774]  ? __fdget_pos+0x2ae/0x360
[ 1142.502424][T26774]  ? ksys_write+0x71/0x250
[ 1142.506871][T26774]  ksys_write+0x14c/0x250
[ 1142.511234][T26774]  ? __ia32_sys_read+0x80/0x80
[ 1142.516031][T26774]  ? lockdep_hardirqs_on+0x94/0x140
[ 1142.521258][T26774]  do_syscall_64+0x4c/0xa0
[ 1142.525696][T26774]  ? clear_bhb_loop+0x60/0xb0
[ 1142.530392][T26774]  ? clear_bhb_loop+0x60/0xb0
[ 1142.535097][T26774]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1142.541012][T26774] RIP: 0033:0x7f2525b9cdd9
[ 1142.545445][T26774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1142.565075][T26774] RSP: 002b:00007f2526acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1142.573519][T26774] RAX: ffffffffffffffda RBX: 00007f2525e15fa0 RCX: 00007f2525b9cdd9
[ 1142.581513][T26774] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007
[ 1142.589503][T26774] RBP: 00007f2526acc090 R08: 0000000000000000 R09: 0000000000000000
[ 1142.597504][T26774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1142.605579][T26774] R13: 00007f2525e16038 R14: 00007f2525e15fa0 R15: 00007ffc91bea0b8
[ 1142.613685][T26774]  </TASK>
[ 1142.915569][T26780] device pim6reg1 entered promiscuous mode
[ 1143.071177][T26786] delete_channel: no stack
[ 1143.392999][T26792] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1143.517016][T26794] netlink: 'syz.2.7663': attribute type 21 has an invalid length.
[ 1143.901922][T26815] delete_channel: no stack
[ 1144.452363][T26831] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7677'.
[ 1145.076536][T26838] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7678'.
[ 1145.322230][T26841] validate_nla: 7 callbacks suppressed
[ 1145.322248][T26841] netlink: 'syz.1.7680': attribute type 21 has an invalid length.
[ 1145.394527][T26854] delete_channel: no stack
[ 1145.652756][T26862] netlink: 'syz.0.7688': attribute type 1 has an invalid length.
[ 1145.700542][T26862] netlink: 'syz.0.7688': attribute type 4 has an invalid length.
[ 1145.724030][T26862] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7688'.
[ 1147.445389][T26869] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7691'.
[ 1147.459178][T26869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1147.648674][T26878] netlink: 'syz.4.7695': attribute type 1 has an invalid length.
[ 1147.670014][T26878] netlink: 'syz.4.7695': attribute type 4 has an invalid length.
[ 1147.695009][T26878] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7695'.
[ 1147.777387][T26884] device pim6reg1 entered promiscuous mode
[ 1148.757064][T26897] delete_channel: no stack
[ 1148.831015][T26902] netlink: 'syz.0.7703': attribute type 29 has an invalid length.
[ 1148.841756][T26902] netlink: 'syz.0.7703': attribute type 29 has an invalid length.
[ 1149.073875][T26909] device syzkaller0 entered promiscuous mode
[ 1149.116609][T26909] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.7706'.
[ 1149.142189][T26909] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7706'.
[ 1149.416978][ T4282] Bluetooth: Frame is too long (len 149, expected len 4)
[ 1149.860054][T26934] delete_channel: no stack
[ 1150.122732][T26940] netlink: 'syz.3.7716': attribute type 16 has an invalid length.
[ 1150.133391][T26940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7716'.
[ 1151.408596][T26945] netlink: 'syz.3.7719': attribute type 10 has an invalid length.
[ 1151.619705][T26954] device pim6reg1 entered promiscuous mode
[ 1151.675816][T26958] delete_channel: no stack
[ 1151.826329][T26959] netlink: 'syz.0.7723': attribute type 21 has an invalid length.
[ 1152.565382][T26988] netlink: 'syz.0.7731': attribute type 21 has an invalid length.
[ 1152.573813][T26988] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7731'.
[ 1153.258400][T27004] delete_channel: no stack
[ 1153.277252][T27006] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7738'.
[ 1153.334343][T27003] netlink: 'syz.1.7737': attribute type 21 has an invalid length.
[ 1153.598058][T27015] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.7742'.
[ 1153.623642][T27012] device syzkaller0 entered promiscuous mode
[ 1153.640367][T27017] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7744'.
[ 1155.805053][T27023] netlink: 'syz.1.7745': attribute type 10 has an invalid length.
[ 1155.825571][T27040] netlink: 'syz.0.7750': attribute type 2 has an invalid length.
[ 1155.896877][T27043] netlink: 'syz.2.7751': attribute type 21 has an invalid length.
[ 1155.923443][T27043] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7751'.
[ 1155.973307][T27046] delete_channel: no stack
[ 1156.003879][T27048] netlink: 'syz.4.7754': attribute type 29 has an invalid length.
[ 1156.016076][T27048] netlink: 'syz.4.7754': attribute type 29 has an invalid length.
[ 1156.181527][ T4282] Bluetooth: hci5: ACL packet for unknown connection handle 0
[ 1156.581261][ T4632] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1156.913912][T27074] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7764'.
[ 1156.957907][T27078] delete_channel: no stack
[ 1156.968906][T27076] device pim6reg1 entered promiscuous mode
[ 1157.874279][T27108] netlink: 'syz.1.7774': attribute type 21 has an invalid length.
[ 1157.907663][T27108] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7774'.
[ 1158.083122][T27118] delete_channel: no stack
[ 1158.740909][T27138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7787'.
[ 1158.748627][T27140] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1158.884414][T27144] netlink: 'syz.1.7790': attribute type 10 has an invalid length.
[ 1158.895412][T27146] delete_channel: no stack
[ 1158.911822][T27148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1158.934640][T27148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1159.046254][T27150] netlink: 'syz.0.7794': attribute type 21 has an invalid length.
[ 1159.075295][T27150] netlink: 60583 bytes leftover after parsing attributes in process `syz.0.7794'.
[ 1159.356823][T27163] device pim6reg1 entered promiscuous mode
[ 1160.043100][T27175] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7801'.
[ 1160.065837][T27175] device team_slave_0 left promiscuous mode
[ 1160.122153][T27175] team0: Port device team_slave_0 removed
[ 1160.130044][T27175] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1160.165695][T27179] tipc: Started in network mode
[ 1160.171091][T27179] tipc: Node identity 9215a268, cluster identity 4711
[ 1160.201576][T27179] tipc: Node number set to 2450891368
[ 1160.251971][T27184] netlink: 'syz.4.7805': attribute type 2 has an invalid length.
[ 1160.439998][T27190] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.7808'.
[ 1160.755933][T27204] delete_channel: no stack
[ 1161.155656][T27221] netlink: 'syz.4.7822': attribute type 29 has an invalid length.
[ 1161.190120][T27221] netlink: 'syz.4.7822': attribute type 29 has an invalid length.
[ 1161.434500][T27226] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.7823'.
[ 1161.483472][T27226] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7823'.
[ 1161.632662][T27234] netlink: 'syz.4.7827': attribute type 1 has an invalid length.
[ 1161.644005][T27236] delete_channel: no stack
[ 1161.662450][T27234] netlink: 'syz.4.7827': attribute type 4 has an invalid length.
[ 1161.703920][T27234] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7827'.
[ 1162.094218][T27249] device pim6reg1 entered promiscuous mode
[ 1162.279281][T27256] netlink: 'syz.0.7836': attribute type 16 has an invalid length.
[ 1162.289645][T27256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7836'.
[ 1162.434197][T27254] netlink: 'syz.2.7835': attribute type 21 has an invalid length.
[ 1162.442231][T27254] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7835'.
[ 1162.459429][T27254] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7835'.
[ 1162.473232][T27258] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7837'.
[ 1162.500338][T27260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7838'.
[ 1162.623157][T27263] delete_channel: no stack
[ 1162.999689][T27276] FAULT_INJECTION: forcing a failure.
[ 1162.999689][T27276] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1163.030341][T27276] CPU: 1 PID: 27276 Comm: syz.0.7845 Not tainted syzkaller #0
[ 1163.037884][T27276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1163.047959][T27276] Call Trace:
[ 1163.051294][T27276]  <TASK>
[ 1163.054240][T27276]  dump_stack_lvl+0x188/0x24e
[ 1163.058947][T27276]  ? show_regs_print_info+0x12/0x12
[ 1163.064168][T27276]  ? load_image+0x400/0x400
[ 1163.068697][T27276]  ? __lock_acquire+0x7d10/0x7d10
[ 1163.073781][T27276]  should_fail_ex+0x399/0x4d0
[ 1163.078490][T27276]  _copy_from_user+0x2c/0x170
[ 1163.083190][T27276]  __sys_bpf+0x2ea/0x780
[ 1163.087479][T27276]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1163.092934][T27276]  ? lock_chain_count+0x20/0x20
[ 1163.097836][T27276]  __x64_sys_bpf+0x78/0x90
[ 1163.102301][T27276]  do_syscall_64+0x4c/0xa0
[ 1163.106741][T27276]  ? clear_bhb_loop+0x60/0xb0
[ 1163.111434][T27276]  ? clear_bhb_loop+0x60/0xb0
[ 1163.116129][T27276]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1163.122036][T27276] RIP: 0033:0x7fc9ed99cdd9
[ 1163.126465][T27276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1163.146090][T27276] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1163.154521][T27276] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[ 1163.162504][T27276] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1163.170486][T27276] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1163.178468][T27276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1163.186445][T27276] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1163.194465][T27276]  </TASK>
[ 1163.308985][T27274] validate_nla: 4 callbacks suppressed
[ 1163.309007][T27274] netlink: 'syz.2.7844': attribute type 2 has an invalid length.
[ 1163.336894][T27274] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7844'.
[ 1163.859906][T27287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1164.009887][T27290] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.7849'.
[ 1164.051755][T27292] device pim6reg1 entered promiscuous mode
[ 1164.069072][T27295] delete_channel: no stack
[ 1164.250806][T27302] netlink: 'syz.0.7853': attribute type 16 has an invalid length.
[ 1164.497500][T27302] netlink: 'syz.0.7853': attribute type 10 has an invalid length.
[ 1164.598186][T27302] device macvlan0 entered promiscuous mode
[ 1164.618585][T27302] team0: Port device macvlan0 added
[ 1164.698154][T27316] netlink: 'syz.3.7860': attribute type 21 has an invalid length.
[ 1164.814707][T27320] FAULT_INJECTION: forcing a failure.
[ 1164.814707][T27320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1164.846967][T27320] CPU: 0 PID: 27320 Comm: syz.0.7862 Not tainted syzkaller #0
[ 1164.854507][T27320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1164.864596][T27320] Call Trace:
[ 1164.867890][T27320]  <TASK>
[ 1164.870832][T27320]  dump_stack_lvl+0x188/0x24e
[ 1164.875547][T27320]  ? show_regs_print_info+0x12/0x12
[ 1164.880776][T27320]  ? load_image+0x400/0x400
[ 1164.885302][T27320]  ? __lock_acquire+0x7d10/0x7d10
[ 1164.890354][T27320]  should_fail_ex+0x399/0x4d0
[ 1164.895056][T27320]  _copy_from_user+0x2c/0x170
[ 1164.899759][T27320]  csum_and_copy_from_iter+0x493/0x1350
[ 1164.905318][T27320]  ? alloc_skb_with_frags+0x674/0x710
[ 1164.910725][T27320]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[ 1164.916403][T27320]  ip_generic_getfrag+0x150/0x2e0
[ 1164.921456][T27320]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1164.926338][T27320]  ? perf_trace_lock+0xf8/0x390
[ 1164.931214][T27320]  ? skb_put+0x117/0x210
[ 1164.935487][T27320]  __ip6_append_data+0x300b/0x3d40
[ 1164.940658][T27320]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1164.945545][T27320]  ? ip6_mtu+0x79/0x3f0
[ 1164.949727][T27320]  ? ip6_setup_cork+0xfe0/0xfe0
[ 1164.954619][T27320]  ? ip6_setup_cork+0xa30/0xfe0
[ 1164.959492][T27320]  ip6_append_data+0x1ea/0x3e0
[ 1164.964266][T27320]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1164.969127][T27320]  l2tp_ip6_sendmsg+0x1208/0x1670
[ 1164.974165][T27320]  ? l2tp_ip6_destroy_sock+0x50/0x50
[ 1164.979467][T27320]  ? aa_af_perm+0x340/0x340
[ 1164.983973][T27320]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1164.990389][T27320]  ? sock_rps_record_flow+0x19/0x3f0
[ 1164.995675][T27320]  ? inet_sendmsg+0x78/0x2f0
[ 1165.000260][T27320]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1165.005551][T27320]  ? security_socket_sendmsg+0x7c/0xa0
[ 1165.011024][T27320]  ? inet_send_prepare+0x260/0x260
[ 1165.016131][T27320]  ____sys_sendmsg+0x5be/0x970
[ 1165.020915][T27320]  ? __sys_sendmsg_sock+0x30/0x30
[ 1165.025941][T27320]  ? __import_iovec+0x315/0x500
[ 1165.030798][T27320]  ? import_iovec+0x6f/0xa0
[ 1165.035386][T27320]  ___sys_sendmsg+0x2a2/0x360
[ 1165.040068][T27320]  ? __sys_sendmsg+0x290/0x290
[ 1165.044853][T27320]  ? __lock_acquire+0x7d10/0x7d10
[ 1165.049899][T27320]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1165.054758][T27320]  ? __x64_sys_sendmsg+0x80/0x80
[ 1165.059706][T27320]  ? lockdep_hardirqs_on+0x94/0x140
[ 1165.064905][T27320]  do_syscall_64+0x4c/0xa0
[ 1165.069326][T27320]  ? clear_bhb_loop+0x60/0xb0
[ 1165.074006][T27320]  ? clear_bhb_loop+0x60/0xb0
[ 1165.078684][T27320]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1165.084575][T27320] RIP: 0033:0x7fc9ed99cdd9
[ 1165.088985][T27320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1165.108587][T27320] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1165.117001][T27320] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[ 1165.124973][T27320] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1165.132960][T27320] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1165.140946][T27320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1165.148943][T27320] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1165.156947][T27320]  </TASK>
[ 1165.401744][T27331] netlink: 'syz.1.7866': attribute type 1 has an invalid length.
[ 1165.430848][T27331] netlink: 'syz.1.7866': attribute type 4 has an invalid length.
[ 1165.645923][T27340] netlink: 'syz.1.7870': attribute type 25 has an invalid length.
[ 1165.661054][T27340] netlink: 'syz.1.7870': attribute type 1 has an invalid length.
[ 1165.669782][T27340] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1166.766925][T27352] __nla_validate_parse: 4 callbacks suppressed
[ 1166.766944][T27352] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.7874'.
[ 1166.786968][T27355] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1166.815629][T27349] netlink: 'syz.1.7875': attribute type 21 has an invalid length.
[ 1166.835223][T27359] netlink: 'syz.3.7878': attribute type 10 has an invalid length.
[ 1166.856501][T27359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7878'.
[ 1167.079415][T27367] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7881'.
[ 1167.200008][T27370] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.7882'.
[ 1167.383366][T27378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7890'.
[ 1167.771176][T27391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7887'.
[ 1169.451604][T27386] validate_nla: 7 callbacks suppressed
[ 1169.451623][T27386] netlink: 'syz.0.7888': attribute type 29 has an invalid length.
[ 1169.484662][T27391] netlink: 'syz.2.7887': attribute type 10 has an invalid length.
[ 1169.512922][T27391] device macvlan0 entered promiscuous mode
[ 1169.549427][T27391] team0: Port device macvlan0 added
[ 1169.795851][T27402] netlink: 'syz.3.7893': attribute type 21 has an invalid length.
[ 1169.968480][T27414] netlink: 'syz.1.7895': attribute type 1 has an invalid length.
[ 1170.044019][T27414] netlink: 'syz.1.7895': attribute type 4 has an invalid length.
[ 1170.081100][T27414] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7895'.
[ 1170.211233][T27416] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7897'.
[ 1170.240699][T27416] netlink: zone id is out of range
[ 1170.252621][T27416] netlink: zone id is out of range
[ 1170.259789][T27416] netlink: zone id is out of range
[ 1170.276806][T27416] netlink: get zone limit has 8 unknown bytes
[ 1171.128819][T27443] netlink: 'syz.1.7907': attribute type 16 has an invalid length.
[ 1171.175419][T27443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7907'.
[ 1171.199018][T27445] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1171.452936][T27443] netlink: 'syz.1.7907': attribute type 10 has an invalid length.
[ 1171.483150][T27443] device macvlan0 entered promiscuous mode
[ 1171.498066][T27456] netlink: 'syz.3.7912': attribute type 21 has an invalid length.
[ 1171.508064][T27443] team0: Port device macvlan0 added
[ 1171.603133][T27460] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7913'.
[ 1171.997460][T27467] FAULT_INJECTION: forcing a failure.
[ 1171.997460][T27467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1172.034306][T27467] CPU: 1 PID: 27467 Comm: syz.0.7916 Not tainted syzkaller #0
[ 1172.041843][T27467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1172.051921][T27467] Call Trace:
[ 1172.055205][T27467]  <TASK>
[ 1172.058139][T27467]  dump_stack_lvl+0x188/0x24e
[ 1172.062830][T27467]  ? show_regs_print_info+0x12/0x12
[ 1172.068042][T27467]  ? load_image+0x400/0x400
[ 1172.072554][T27467]  ? __lock_acquire+0x7d10/0x7d10
[ 1172.077590][T27467]  ? snprintf+0xe5/0x140
[ 1172.081839][T27467]  should_fail_ex+0x399/0x4d0
[ 1172.086524][T27467]  _copy_to_user+0x2c/0x130
[ 1172.091038][T27467]  simple_read_from_buffer+0xe3/0x150
[ 1172.096435][T27467]  proc_fail_nth_read+0x1a6/0x220
[ 1172.101492][T27467]  ? proc_fault_inject_write+0x310/0x310
[ 1172.107155][T27467]  ? fsnotify_perm+0x248/0x550
[ 1172.111940][T27467]  ? proc_fault_inject_write+0x310/0x310
[ 1172.117585][T27467]  vfs_read+0x2de/0xa00
[ 1172.121764][T27467]  ? kernel_read+0x1e0/0x1e0
[ 1172.126368][T27467]  ? __fget_files+0x28/0x4b0
[ 1172.131079][T27467]  ? __fget_files+0x28/0x4b0
[ 1172.135672][T27467]  ? __fget_files+0x43d/0x4b0
[ 1172.140363][T27467]  ? __fdget_pos+0x2ae/0x360
[ 1172.144959][T27467]  ? ksys_read+0x71/0x250
[ 1172.149313][T27467]  ksys_read+0x14c/0x250
[ 1172.153569][T27467]  ? vfs_write+0xa30/0xa30
[ 1172.157993][T27467]  ? lockdep_hardirqs_on+0x94/0x140
[ 1172.163199][T27467]  do_syscall_64+0x4c/0xa0
[ 1172.167627][T27467]  ? clear_bhb_loop+0x60/0xb0
[ 1172.172329][T27467]  ? clear_bhb_loop+0x60/0xb0
[ 1172.177041][T27467]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1172.182961][T27467] RIP: 0033:0x7fc9ed95d60e
[ 1172.187384][T27467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1172.206990][T27467] RSP: 002b:00007fc9ee8c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1172.215412][T27467] RAX: ffffffffffffffda RBX: 00007fc9ee8c76c0 RCX: 00007fc9ed95d60e
[ 1172.223384][T27467] RDX: 000000000000000f RSI: 00007fc9ee8c70a0 RDI: 0000000000000008
[ 1172.231355][T27467] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1172.239326][T27467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1172.247302][T27467] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1172.255305][T27467]  </TASK>
[ 1172.546249][T27464] tun0: tun_chr_ioctl cmd 1074025675
[ 1172.562816][T27464] tun0: persist enabled
[ 1172.584436][T27464] tun0: tun_chr_ioctl cmd 1074025675
[ 1172.590232][T27464] tun0: persist enabled
[ 1172.624712][T27476] netlink: 'syz.2.7918': attribute type 10 has an invalid length.
[ 1172.632929][T27476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7918'.
[ 1172.642698][T27476] device dummy0 entered promiscuous mode
[ 1172.650130][T27476] bridge0: port 4(dummy0) entered blocking state
[ 1172.657529][T27476] bridge0: port 4(dummy0) entered disabled state
[ 1172.671335][T27476] bridge0: port 4(dummy0) entered blocking state
[ 1172.677973][T27476] bridge0: port 4(dummy0) entered forwarding state
[ 1172.960434][T27478] netlink: 'syz.0.7919': attribute type 3 has an invalid length.
[ 1172.983550][T27478] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7919'.
[ 1173.109526][T27490] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1173.174610][T27490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1173.345314][T27478] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7919'.
[ 1173.380782][T27478] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1173.396172][T27478] CPU: 1 PID: 27478 Comm: syz.0.7919 Not tainted syzkaller #0
[ 1173.403703][T27478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1173.413785][T27478] Call Trace:
[ 1173.417088][T27478]  <TASK>
[ 1173.420041][T27478]  dump_stack_lvl+0x188/0x24e
[ 1173.424756][T27478]  ? show_regs_print_info+0x12/0x12
[ 1173.429991][T27478]  ? load_image+0x400/0x400
[ 1173.434549][T27478]  sysfs_warn_dup+0x8a/0xa0
[ 1173.439087][T27478]  sysfs_do_create_link_sd+0xc0/0x110
[ 1173.444496][T27478]  device_add+0x7ed/0xfb0
[ 1173.448868][T27478]  wiphy_register+0x1d9f/0x2ac0
[ 1173.453774][T27478]  ? cfg80211_event_work+0x40/0x40
[ 1173.459546][T27478]  ? minstrel_ht_alloc+0x894/0xa20
[ 1173.465228][T27478]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1173.471327][T27478]  ieee80211_register_hw+0x2d00/0x39f0
[ 1173.476833][T27478]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1173.482417][T27478]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1173.488011][T27478]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1173.493693][T27478]  ? memset+0x1e/0x40
[ 1173.497702][T27478]  ? __hrtimer_init+0x186/0x270
[ 1173.502587][T27478]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1173.508352][T27478]  hwsim_new_radio_nl+0xafa/0xce0
[ 1173.513397][T27478]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1173.518942][T27478]  ? end_current_label_crit_section+0x170/0x170
[ 1173.525188][T27478]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1173.531092][T27478]  ? bpf_lsm_capable+0x5/0x10
[ 1173.535948][T27478]  ? security_capable+0x85/0xb0
[ 1173.540809][T27478]  genl_rcv_msg+0x604/0x790
[ 1173.545336][T27478]  ? genl_bind+0x360/0x360
[ 1173.549779][T27478]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1173.556160][T27478]  netlink_rcv_skb+0x1fb/0x450
[ 1173.560942][T27478]  ? genl_bind+0x360/0x360
[ 1173.565363][T27478]  ? netlink_ack+0x1170/0x1170
[ 1173.570156][T27478]  ? down_read+0x1a8/0x2d0
[ 1173.574602][T27478]  genl_rcv+0x24/0x40
[ 1173.578599][T27478]  netlink_unicast+0x74d/0x8d0
[ 1173.583396][T27478]  netlink_sendmsg+0x8ad/0xbd0
[ 1173.588182][T27478]  ? netlink_getsockopt+0x550/0x550
[ 1173.593392][T27478]  ? aa_sock_msg_perm+0x94/0x150
[ 1173.598332][T27478]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1173.603622][T27478]  ? security_socket_sendmsg+0x7c/0xa0
[ 1173.609111][T27478]  ? netlink_getsockopt+0x550/0x550
[ 1173.614320][T27478]  ____sys_sendmsg+0x5be/0x970
[ 1173.619100][T27478]  ? __sys_sendmsg_sock+0x30/0x30
[ 1173.624126][T27478]  ? __import_iovec+0x315/0x500
[ 1173.628986][T27478]  ? import_iovec+0x6f/0xa0
[ 1173.633491][T27478]  ___sys_sendmsg+0x2a2/0x360
[ 1173.638175][T27478]  ? try_to_wake_up+0x67c/0x1080
[ 1173.643119][T27478]  ? __sys_sendmsg+0x290/0x290
[ 1173.647936][T27478]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1173.652790][T27478]  ? ct_nmi_exit+0x145/0x1c0
[ 1173.657387][T27478]  ? __x64_sys_sendmsg+0x80/0x80
[ 1173.662349][T27478]  ? lockdep_hardirqs_on+0x94/0x140
[ 1173.667552][T27478]  do_syscall_64+0x4c/0xa0
[ 1173.671981][T27478]  ? clear_bhb_loop+0x60/0xb0
[ 1173.676665][T27478]  ? clear_bhb_loop+0x60/0xb0
[ 1173.681347][T27478]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1173.687240][T27478] RIP: 0033:0x7fc9ed99cdd9
[ 1173.691658][T27478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1173.711273][T27478] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1173.719693][T27478] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[ 1173.727663][T27478] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[ 1173.735635][T27478] RBP: 00007fc9eda32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1173.743614][T27478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1173.751583][T27478] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1173.759568][T27478]  </TASK>
[ 1174.105561][T27515] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1174.112117][T27515] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1174.130906][T27516] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7929'.
[ 1175.700803][T27518] IPv6: pim6reg1: Disabled Multicast RS
[ 1176.333796][T27541] validate_nla: 3 callbacks suppressed
[ 1176.333815][T27541] netlink: 'syz.4.7938': attribute type 1 has an invalid length.
[ 1176.811131][T27553] netlink: 'syz.0.7944': attribute type 10 has an invalid length.
[ 1176.956715][T27556] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7945'.
[ 1177.125280][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.133689][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.677466][T27579] netlink: 'syz.0.7954': attribute type 16 has an invalid length.
[ 1177.706545][T27579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7954'.
[ 1178.024667][T27589] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7959'.
[ 1178.164575][T27594] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7960'.
[ 1178.434950][T27606] FAULT_INJECTION: forcing a failure.
[ 1178.434950][T27606] name failslab, interval 1, probability 0, space 0, times 0
[ 1178.495950][T27606] CPU: 1 PID: 27606 Comm: syz.4.7964 Not tainted syzkaller #0
[ 1178.503574][T27606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1178.513649][T27606] Call Trace:
[ 1178.516944][T27606]  <TASK>
[ 1178.519888][T27606]  dump_stack_lvl+0x188/0x24e
[ 1178.524599][T27606]  ? show_regs_print_info+0x12/0x12
[ 1178.529829][T27606]  ? load_image+0x400/0x400
[ 1178.534362][T27606]  ? __might_sleep+0xd0/0xd0
[ 1178.538978][T27606]  ? __lock_acquire+0x7d10/0x7d10
[ 1178.544035][T27606]  should_fail_ex+0x399/0x4d0
[ 1178.548738][T27606]  should_failslab+0x5/0x20
[ 1178.553253][T27606]  slab_pre_alloc_hook+0x59/0x310
[ 1178.558296][T27606]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1178.563920][T27606]  __kmem_cache_alloc_node+0x4f/0x260
[ 1178.569334][T27606]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1178.574900][T27606]  __kmalloc+0xa0/0x240
[ 1178.579085][T27606]  bpf_prog_test_run_skb+0x234/0x12a0
[ 1178.584472][T27606]  ? __fget_files+0x28/0x4b0
[ 1178.589073][T27606]  ? __fget_files+0x28/0x4b0
[ 1178.593674][T27606]  ? __fget_files+0x43d/0x4b0
[ 1178.598375][T27606]  ? cpu_online+0xa0/0xa0
[ 1178.602710][T27606]  bpf_prog_test_run+0x31e/0x390
[ 1178.607655][T27606]  __sys_bpf+0x62b/0x780
[ 1178.611908][T27606]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1178.617293][T27606]  ? lock_chain_count+0x20/0x20
[ 1178.622142][T27606]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1178.628132][T27606]  __x64_sys_bpf+0x78/0x90
[ 1178.632552][T27606]  do_syscall_64+0x4c/0xa0
[ 1178.636970][T27606]  ? clear_bhb_loop+0x60/0xb0
[ 1178.641646][T27606]  ? clear_bhb_loop+0x60/0xb0
[ 1178.646327][T27606]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1178.652219][T27606] RIP: 0033:0x7f2525b9cdd9
[ 1178.656637][T27606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1178.676241][T27606] RSP: 002b:00007f2526acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1178.684655][T27606] RAX: ffffffffffffffda RBX: 00007f2525e15fa0 RCX: 00007f2525b9cdd9
[ 1178.692626][T27606] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1178.700594][T27606] RBP: 00007f2526acc090 R08: 0000000000000000 R09: 0000000000000000
[ 1178.708562][T27606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1178.716542][T27606] R13: 00007f2525e16038 R14: 00007f2525e15fa0 R15: 00007ffc91bea0b8
[ 1178.724538][T27606]  </TASK>
[ 1179.294793][T27627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1179.506377][T27639] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7975'.
[ 1179.821210][T27647] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7976'.
[ 1180.383150][T27672] delete_channel: no stack
[ 1180.859411][T27678] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7990'.
[ 1181.088977][T27682] netlink: 'syz.2.7992': attribute type 1 has an invalid length.
[ 1181.123088][T27682] netlink: 'syz.2.7992': attribute type 4 has an invalid length.
[ 1181.151506][T27682] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7992'.
[ 1181.494495][T27695] netlink: 'syz.4.7996': attribute type 25 has an invalid length.
[ 1181.502691][T27695] netlink: 'syz.4.7996': attribute type 1 has an invalid length.
[ 1181.510794][T27695] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1181.519467][T27699] delete_channel: no stack
[ 1181.778033][T27711] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8002'.
[ 1181.801963][T27712] netlink: 'syz.3.8003': attribute type 10 has an invalid length.
[ 1181.817646][T27712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8003'.
[ 1181.888920][T27716] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1182.041603][T27722] netlink: 'syz.0.8008': attribute type 10 has an invalid length.
[ 1182.172504][T27730] netlink: 'syz.2.8011': attribute type 15 has an invalid length.
[ 1182.224556][T27730] netlink: 'syz.2.8011': attribute type 7 has an invalid length.
[ 1182.790021][T27742] netlink: 'syz.0.8012': attribute type 21 has an invalid length.
[ 1182.844903][T27742] netlink: 'syz.0.8012': attribute type 6 has an invalid length.
[ 1182.911061][T27742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8012'.
[ 1183.135270][T27753] netlink: 'syz.4.8017': attribute type 2 has an invalid length.
[ 1183.179359][T27755] netlink: 'syz.1.8016': attribute type 12 has an invalid length.
[ 1183.199104][T27755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8016'.
[ 1183.467827][T27770] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1183.652729][T27775] bridge0: port 4(team0) entered blocking state
[ 1183.659438][T27775] bridge0: port 4(team0) entered forwarding state
[ 1183.666591][T27775] bridge0: port 3(bond0) entered blocking state
[ 1183.673292][T27775] bridge0: port 3(bond0) entered forwarding state
[ 1183.680493][T27775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.687973][T27775] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1183.696019][T27775] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.703529][T27775] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1183.900013][T27775] bridge0: port 4(team0) entered disabled state
[ 1183.907732][T27775] bridge0: port 3(bond0) entered disabled state
[ 1183.914721][T27775] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.922486][T27775] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.287205][T27783] device syzkaller0 entered promiscuous mode
[ 1184.788362][T27804] delete_channel: no stack
[ 1186.788485][T27792] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8029'.
[ 1186.954231][T27836] delete_channel: no stack
[ 1187.003625][T27839] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8046'.
[ 1187.062511][T27840] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8048'.
[ 1187.430530][T27853] validate_nla: 5 callbacks suppressed
[ 1187.430547][T27853] netlink: 'syz.0.8053': attribute type 1 has an invalid length.
[ 1187.491943][T27853] netlink: 'syz.0.8053': attribute type 4 has an invalid length.
[ 1187.521483][T27853] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8053'.
[ 1187.560972][T27855] netlink: 'syz.4.8054': attribute type 1 has an invalid length.
[ 1187.574557][T27855] netlink: 'syz.4.8054': attribute type 4 has an invalid length.
[ 1187.586260][T27855] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8054'.
[ 1187.843823][T27863] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8057'.
[ 1188.098613][T27868] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8059'.
[ 1188.148991][T27868] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1188.253650][T27871] delete_channel: no stack
[ 1188.260359][T27868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1188.603839][T27883] device pim6reg1 entered promiscuous mode
[ 1188.804645][T27890] netlink: 'syz.2.8062': attribute type 10 has an invalid length.
[ 1188.854841][T27890] bridge0: port 4(dummy0) entered disabled state
[ 1188.861977][T27890] bridge0: port 3(team0) entered disabled state
[ 1188.870001][T27890] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1188.877980][T27890] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1189.062121][T27890] bridge0: port 4(dummy0) entered blocking state
[ 1189.069020][T27890] bridge0: port 4(dummy0) entered forwarding state
[ 1189.076524][T27890] bridge0: port 3(team0) entered blocking state
[ 1189.083298][T27890] bridge0: port 3(team0) entered forwarding state
[ 1189.090641][T27890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.098190][T27890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1189.106522][T27890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.114309][T27890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1189.378494][T27890] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1189.402184][T27892] netlink: 'syz.1.8066': attribute type 1 has an invalid length.
[ 1189.418377][T27892] netlink: 'syz.1.8066': attribute type 4 has an invalid length.
[ 1189.440976][T27892] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8066'.
[ 1189.475413][T27904] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8070'.
[ 1189.518341][T27904] bond0: (slave bond_slave_0): Releasing backup interface
[ 1189.541258][T27904] device bond_slave_0 left promiscuous mode
[ 1189.584961][T27904] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1189.807362][T27911] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8072'.
[ 1190.032601][T27916] delete_channel: no stack
[ 1190.563063][T27938] netlink: 'syz.0.8082': attribute type 1 has an invalid length.
[ 1190.603653][T27938] netlink: 'syz.0.8082': attribute type 4 has an invalid length.
[ 1190.611474][T27938] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8082'.
[ 1190.681354][T27936] netlink: 'syz.3.8081': attribute type 10 has an invalid length.
[ 1191.899877][T27963] device pim6reg1 entered promiscuous mode
[ 1192.046423][T27961] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8091'.
[ 1192.680822][T27977] netlink: 'syz.3.8097': attribute type 1 has an invalid length.
[ 1192.701489][T27977] netlink: 'syz.3.8097': attribute type 4 has an invalid length.
[ 1192.729867][T27977] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8097'.
[ 1193.871149][T27994] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8101'.
[ 1194.095112][T28004] FAULT_INJECTION: forcing a failure.
[ 1194.095112][T28004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1194.109107][T28004] CPU: 1 PID: 28004 Comm: syz.1.8106 Not tainted syzkaller #0
[ 1194.116603][T28004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1194.126680][T28004] Call Trace:
[ 1194.129972][T28004]  <TASK>
[ 1194.132915][T28004]  dump_stack_lvl+0x188/0x24e
[ 1194.137621][T28004]  ? show_regs_print_info+0x12/0x12
[ 1194.142846][T28004]  ? load_image+0x400/0x400
[ 1194.147380][T28004]  ? __lock_acquire+0x7d10/0x7d10
[ 1194.152430][T28004]  should_fail_ex+0x399/0x4d0
[ 1194.157127][T28004]  _copy_from_user+0x2c/0x170
[ 1194.161826][T28004]  bpf_prog_test_run_skb+0x262/0x12a0
[ 1194.167223][T28004]  ? __fget_files+0x28/0x4b0
[ 1194.171829][T28004]  ? __fget_files+0x28/0x4b0
[ 1194.176446][T28004]  ? __fget_files+0x43d/0x4b0
[ 1194.181154][T28004]  ? cpu_online+0xa0/0xa0
[ 1194.185501][T28004]  bpf_prog_test_run+0x31e/0x390
[ 1194.190468][T28004]  __sys_bpf+0x62b/0x780
[ 1194.194737][T28004]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1194.200147][T28004]  ? lock_chain_count+0x20/0x20
[ 1194.205027][T28004]  __x64_sys_bpf+0x78/0x90
[ 1194.209465][T28004]  do_syscall_64+0x4c/0xa0
[ 1194.213900][T28004]  ? clear_bhb_loop+0x60/0xb0
[ 1194.218576][T28004]  ? clear_bhb_loop+0x60/0xb0
[ 1194.223253][T28004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1194.229147][T28004] RIP: 0033:0x7fea5119cdd9
[ 1194.233558][T28004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1194.253156][T28004] RSP: 002b:00007fea52129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1194.261566][T28004] RAX: ffffffffffffffda RBX: 00007fea51415fa0 RCX: 00007fea5119cdd9
[ 1194.269537][T28004] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1194.277501][T28004] RBP: 00007fea52129090 R08: 0000000000000000 R09: 0000000000000000
[ 1194.285464][T28004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1194.293425][T28004] R13: 00007fea51416038 R14: 00007fea51415fa0 R15: 00007fffd253bc48
[ 1194.301410][T28004]  </TASK>
[ 1194.670465][T28010] netlink: 'syz.3.8108': attribute type 10 has an invalid length.
[ 1194.713725][T28010] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8108'.
[ 1194.746275][T28012] netlink: 'syz.2.8110': attribute type 1 has an invalid length.
[ 1194.776791][T28012] netlink: 'syz.2.8110': attribute type 4 has an invalid length.
[ 1194.804953][T28012] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8110'.
[ 1195.286937][T28032] netlink: 'syz.4.8114': attribute type 1 has an invalid length.
[ 1195.319360][T28032] netlink: 'syz.4.8114': attribute type 4 has an invalid length.
[ 1195.351299][T28033] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.8113'.
[ 1195.381378][T28032] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8114'.
[ 1195.409992][T28033] openvswitch: netlink: Key type 386 is out of range max 32
[ 1195.510559][T28037] device pim6reg1 entered promiscuous mode
[ 1196.945864][T28057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1197.088955][T28064] netlink: 'syz.3.8122': attribute type 1 has an invalid length.
[ 1197.107192][T28064] netlink: 'syz.3.8122': attribute type 4 has an invalid length.
[ 1197.201171][T28064] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8122'.
[ 1197.365583][T28065] netlink: 'syz.2.8124': attribute type 10 has an invalid length.
[ 1197.407768][T28065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8124'.
[ 1197.656489][T28068] bridge0: port 4(bond0) entered disabled state
[ 1197.663695][T28068] bridge0: port 3(team0) entered disabled state
[ 1197.671289][T28068] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1197.679645][T28068] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1197.802973][T28068] bridge0: port 4(bond0) entered blocking state
[ 1197.809736][T28068] bridge0: port 4(bond0) entered forwarding state
[ 1197.817146][T28068] bridge0: port 3(team0) entered blocking state
[ 1197.823916][T28068] bridge0: port 3(team0) entered forwarding state
[ 1197.831114][T28068] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1197.838763][T28068] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1197.846831][T28068] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1197.854502][T28068] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1198.090500][T28068] bridge0: port 4(bond0) entered disabled state
[ 1198.097037][T28068] bridge0: port 3(team0) entered disabled state
[ 1198.103498][T28068] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.110689][T28068] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.494211][T28103] validate_nla: 1 callbacks suppressed
[ 1198.494229][T28103] netlink: 'syz.0.8136': attribute type 1 has an invalid length.
[ 1198.526590][T28103] netlink: 'syz.0.8136': attribute type 4 has an invalid length.
[ 1198.547625][T28103] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8136'.
[ 1198.630680][T28101] device pim6reg1 entered promiscuous mode
[ 1199.416419][T28114] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.8138'.
[ 1199.461844][T28112] device pim6reg1 entered promiscuous mode
[ 1200.252237][T28144] netlink: 'syz.1.8146': attribute type 25 has an invalid length.
[ 1200.261555][T28144] netlink: 'syz.1.8146': attribute type 1 has an invalid length.
[ 1200.273060][T28144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1200.536664][T28151] netlink: 'syz.1.8149': attribute type 1 has an invalid length.
[ 1200.583315][T28151] netlink: 'syz.1.8149': attribute type 4 has an invalid length.
[ 1200.591133][T28151] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8149'.
[ 1201.179178][T28170] device pim6reg1 entered promiscuous mode
[ 1201.492494][T28173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8156'.
[ 1201.833180][T28175] netlink: 'syz.1.8158': attribute type 16 has an invalid length.
[ 1201.842693][T28175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8158'.
[ 1201.894666][T28182] netlink: 'syz.1.8158': attribute type 10 has an invalid length.
[ 1202.084328][T28187] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8161'.
[ 1202.102333][T28181] netlink: 'syz.4.8160': attribute type 21 has an invalid length.
[ 1202.124061][T28181] netlink: 'syz.4.8160': attribute type 6 has an invalid length.
[ 1202.132152][T28181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8160'.
[ 1202.598997][T28199] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.8164'.
[ 1203.112959][T28216] ÿÿÿÿÿÿ: renamed from bond_slave_0
[ 1203.798934][T28236] device pim6reg1 entered promiscuous mode
[ 1203.978671][T28247] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8181'.
[ 1204.253509][T28254] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.8184'.
[ 1204.368134][T28259] validate_nla: 1 callbacks suppressed
[ 1204.368393][T28259] netlink: 'syz.4.8186': attribute type 10 has an invalid length.
[ 1204.397278][T28257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8185'.
[ 1204.594046][T28267] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8189'.
[ 1204.606499][T28269] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1204.649109][T28265] netlink: 'syz.3.8188': attribute type 16 has an invalid length.
[ 1204.649923][T28269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1204.657893][T28265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8188'.
[ 1204.703528][T28276] netlink: 'syz.3.8188': attribute type 10 has an invalid length.
[ 1205.067892][T28284] device syzkaller0 entered promiscuous mode
[ 1207.222420][T28315] netlink: 'syz.2.8206': attribute type 16 has an invalid length.
[ 1207.230683][T28315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8206'.
[ 1207.926142][T28291] netlink: 'syz.0.8198': attribute type 10 has an invalid length.
[ 1207.935140][T28307] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1207.944908][T28315] netlink: 'syz.2.8206': attribute type 10 has an invalid length.
[ 1207.953439][T28307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1207.978753][T28307] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1208.401680][T28334] ÿÿÿÿÿÿ: renamed from bond_slave_0
[ 1208.491984][T28340] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8213'.
[ 1208.793912][T28339] device pim6reg1 entered promiscuous mode
[ 1209.378095][T28365] delete_channel: no stack
[ 1210.157143][T28383] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8228'.
[ 1211.147839][T28397] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8232'.
[ 1211.394323][T28403] delete_channel: no stack
[ 1211.409377][T28402] netlink: 'syz.2.8234': attribute type 10 has an invalid length.
[ 1213.148655][T28429] device pim6reg1 entered promiscuous mode
[ 1213.774980][T28452] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8250'.
[ 1214.676521][T28463] netlink: 'syz.3.8258': attribute type 10 has an invalid length.
[ 1214.733268][T28459] netlink: 'syz.4.8256': attribute type 10 has an invalid length.
[ 1214.762927][T28459] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8256'.
[ 1216.014089][T28479] device pim6reg1 entered promiscuous mode
[ 1216.881149][T28506] FAULT_INJECTION: forcing a failure.
[ 1216.881149][T28506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1216.953505][T28506] CPU: 1 PID: 28506 Comm: syz.3.8272 Not tainted syzkaller #0
[ 1216.961054][T28506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1216.971132][T28506] Call Trace:
[ 1216.974420][T28506]  <TASK>
[ 1216.977353][T28506]  dump_stack_lvl+0x188/0x24e
[ 1216.982044][T28506]  ? show_regs_print_info+0x12/0x12
[ 1216.987253][T28506]  ? load_image+0x400/0x400
[ 1216.991765][T28506]  ? __lock_acquire+0x7d10/0x7d10
[ 1216.996805][T28506]  should_fail_ex+0x399/0x4d0
[ 1217.001489][T28506]  _copy_from_user+0x2c/0x170
[ 1217.006175][T28506]  csum_and_copy_from_iter+0x493/0x1350
[ 1217.011741][T28506]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[ 1217.017387][T28506]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1217.023023][T28506]  ip_generic_getfrag+0x150/0x2e0
[ 1217.028169][T28506]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1217.033130][T28506]  ? skb_put+0x117/0x210
[ 1217.037388][T28506]  __ip6_append_data+0x300b/0x3d40
[ 1217.042533][T28506]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1217.047400][T28506]  ? ip6_setup_cork+0xfe0/0xfe0
[ 1217.052256][T28506]  ? ip6_setup_cork+0xa30/0xfe0
[ 1217.057118][T28506]  ip6_append_data+0x1ea/0x3e0
[ 1217.061891][T28506]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1217.066748][T28506]  l2tp_ip6_sendmsg+0x1208/0x1670
[ 1217.071788][T28506]  ? l2tp_ip6_destroy_sock+0x50/0x50
[ 1217.077092][T28506]  ? aa_af_perm+0x340/0x340
[ 1217.081605][T28506]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1217.088032][T28506]  ? sock_rps_record_flow+0x19/0x3f0
[ 1217.093323][T28506]  ? inet_sendmsg+0x78/0x2f0
[ 1217.097911][T28506]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1217.103370][T28506]  ? security_socket_sendmsg+0x7c/0xa0
[ 1217.108845][T28506]  ? inet_send_prepare+0x260/0x260
[ 1217.113967][T28506]  ____sys_sendmsg+0x5be/0x970
[ 1217.118762][T28506]  ? __sys_sendmsg_sock+0x30/0x30
[ 1217.123792][T28506]  ? __import_iovec+0x315/0x500
[ 1217.128661][T28506]  ? import_iovec+0x6f/0xa0
[ 1217.133165][T28506]  ___sys_sendmsg+0x2a2/0x360
[ 1217.137851][T28506]  ? __sys_sendmsg+0x290/0x290
[ 1217.142636][T28506]  ? __lock_acquire+0x7d10/0x7d10
[ 1217.147685][T28506]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1217.152545][T28506]  ? __x64_sys_sendmsg+0x80/0x80
[ 1217.157503][T28506]  ? lockdep_hardirqs_on+0x94/0x140
[ 1217.162706][T28506]  do_syscall_64+0x4c/0xa0
[ 1217.167128][T28506]  ? clear_bhb_loop+0x60/0xb0
[ 1217.171809][T28506]  ? clear_bhb_loop+0x60/0xb0
[ 1217.176491][T28506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1217.182385][T28506] RIP: 0033:0x7fbeaf19cdd9
[ 1217.186801][T28506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1217.206412][T28506] RSP: 002b:00007fbeafff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1217.214831][T28506] RAX: ffffffffffffffda RBX: 00007fbeaf415fa0 RCX: 00007fbeaf19cdd9
[ 1217.222800][T28506] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1217.230772][T28506] RBP: 00007fbeafff2090 R08: 0000000000000000 R09: 0000000000000000
[ 1217.238741][T28506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1217.246710][T28506] R13: 00007fbeaf416038 R14: 00007fbeaf415fa0 R15: 00007ffdf9642b48
[ 1217.254693][T28506]  </TASK>
[ 1217.382204][T28511] netlink: 'syz.0.8273': attribute type 21 has an invalid length.
[ 1217.392840][T28508] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8268'.
[ 1217.987458][T28535] netlink: 'syz.0.8279': attribute type 25 has an invalid length.
[ 1218.007254][T28535] netlink: 'syz.0.8279': attribute type 1 has an invalid length.
[ 1218.046107][T28535] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1218.309346][T28526] device pim6reg1 entered promiscuous mode
[ 1218.548648][T28544] netlink: 'syz.2.8285': attribute type 1 has an invalid length.
[ 1218.691295][T28544] netlink: 'syz.2.8285': attribute type 4 has an invalid length.
[ 1218.725148][T28544] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8285'.
[ 1218.844942][T28550] netlink: 'syz.0.8288': attribute type 10 has an invalid length.
[ 1218.910256][T28553] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8289'.
[ 1219.163055][T28566] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8294'.
[ 1219.719506][T28572] netlink: 'syz.0.8297': attribute type 21 has an invalid length.
[ 1219.740549][T28572] netlink: 'syz.0.8297': attribute type 6 has an invalid length.
[ 1219.750402][T28572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8297'.
[ 1219.899444][T28580] netlink: 'syz.3.8300': attribute type 2 has an invalid length.
[ 1219.971928][T28584] netlink: 'syz.4.8299': attribute type 10 has an invalid length.
[ 1220.081444][T28584] team0: Device hsr_slave_0 failed to register rx_handler
[ 1220.145981][T28588] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8301'.
[ 1220.160066][T28586] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1220.502113][T28610] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8306'.
[ 1220.722385][T28621] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1221.831241][T28633] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8319'.
[ 1221.986323][T28632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8318'.
[ 1222.003667][T28632] device batadv0 entered promiscuous mode
[ 1222.010405][T28632] bridge0: port 5(batadv0) entered blocking state
[ 1222.128897][T28632] bridge0: port 5(batadv0) entered disabled state
[ 1222.182669][ T4661] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1222.192196][ T4661] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1222.248908][T28640] team0: Device hsr_slave_0 failed to register rx_handler
[ 1222.728555][T28650] validate_nla: 11 callbacks suppressed
[ 1222.728575][T28650] netlink: 'syz.3.8324': attribute type 10 has an invalid length.
[ 1222.773699][T28657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8326'.
[ 1222.883144][T28659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1222.916572][T28659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1222.959148][T28663] netlink: 'syz.4.8330': attribute type 1 has an invalid length.
[ 1222.968971][T28663] netlink: 'syz.4.8330': attribute type 4 has an invalid length.
[ 1222.981524][T28663] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8330'.
[ 1224.200934][T28694] device syzkaller0 entered promiscuous mode
[ 1224.262114][T28702] netlink: 'syz.2.8342': attribute type 1 has an invalid length.
[ 1224.308196][T28702] netlink: 'syz.2.8342': attribute type 4 has an invalid length.
[ 1224.316365][T28702] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8342'.
[ 1224.560627][T28718] netlink: 'syz.1.8349': attribute type 29 has an invalid length.
[ 1226.367862][T28718] netlink: 'syz.1.8349': attribute type 29 has an invalid length.
[ 1226.443760][T28721] netlink: 'syz.2.8348': attribute type 2 has an invalid length.
[ 1226.522121][T28729] netlink: 'syz.1.8352': attribute type 3 has an invalid length.
[ 1226.536693][T28729] netlink: 'syz.1.8352': attribute type 1 has an invalid length.
[ 1226.547770][T28729] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.8352'.
[ 1226.881814][T28729] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8352'.
[ 1227.107887][T28729] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1227.117841][T28729] CPU: 0 PID: 28729 Comm: syz.1.8352 Not tainted syzkaller #0
[ 1227.125353][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1227.135440][T28729] Call Trace:
[ 1227.138738][T28729]  <TASK>
[ 1227.141689][T28729]  dump_stack_lvl+0x188/0x24e
[ 1227.146400][T28729]  ? show_regs_print_info+0x12/0x12
[ 1227.151610][T28729]  ? load_image+0x400/0x400
[ 1227.156129][T28729]  sysfs_warn_dup+0x8a/0xa0
[ 1227.160642][T28729]  sysfs_do_create_link_sd+0xc0/0x110
[ 1227.166019][T28729]  device_add+0x7ed/0xfb0
[ 1227.170357][T28729]  wiphy_register+0x1d9f/0x2ac0
[ 1227.175264][T28729]  ? cfg80211_event_work+0x40/0x40
[ 1227.180383][T28729]  ? minstrel_ht_alloc+0x894/0xa20
[ 1227.185508][T28729]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1227.191600][T28729]  ieee80211_register_hw+0x2d00/0x39f0
[ 1227.197080][T28729]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1227.202634][T28729]  ? ieee80211_register_hw+0xf21/0x39f0
[ 1227.208193][T28729]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1227.213841][T28729]  ? memset+0x1e/0x40
[ 1227.217824][T28729]  ? __hrtimer_init+0x186/0x270
[ 1227.222679][T28729]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1227.228422][T28729]  hwsim_new_radio_nl+0xafa/0xce0
[ 1227.233463][T28729]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1227.239012][T28729]  ? end_current_label_crit_section+0x170/0x170
[ 1227.245262][T28729]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1227.251164][T28729]  ? bpf_lsm_capable+0x5/0x10
[ 1227.255843][T28729]  ? security_capable+0x85/0xb0
[ 1227.260700][T28729]  genl_rcv_msg+0x604/0x790
[ 1227.265217][T28729]  ? genl_bind+0x360/0x360
[ 1227.269630][T28729]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1227.275978][T28729]  netlink_rcv_skb+0x1fb/0x450
[ 1227.280758][T28729]  ? genl_bind+0x360/0x360
[ 1227.285184][T28729]  ? netlink_ack+0x1170/0x1170
[ 1227.289966][T28729]  ? down_read+0x1a8/0x2d0
[ 1227.294394][T28729]  genl_rcv+0x24/0x40
[ 1227.298376][T28729]  netlink_unicast+0x74d/0x8d0
[ 1227.303181][T28729]  netlink_sendmsg+0x8ad/0xbd0
[ 1227.307988][T28729]  ? netlink_getsockopt+0x550/0x550
[ 1227.313223][T28729]  ? aa_sock_msg_perm+0x94/0x150
[ 1227.318201][T28729]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1227.323499][T28729]  ? security_socket_sendmsg+0x7c/0xa0
[ 1227.329000][T28729]  ? netlink_getsockopt+0x550/0x550
[ 1227.334223][T28729]  ____sys_sendmsg+0x5be/0x970
[ 1227.339018][T28729]  ? __sys_sendmsg_sock+0x30/0x30
[ 1227.344061][T28729]  ? __import_iovec+0x315/0x500
[ 1227.348925][T28729]  ? import_iovec+0x6f/0xa0
[ 1227.353439][T28729]  ___sys_sendmsg+0x2a2/0x360
[ 1227.358129][T28729]  ? try_to_wake_up+0x67c/0x1080
[ 1227.363076][T28729]  ? __sys_sendmsg+0x290/0x290
[ 1227.367886][T28729]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1227.372744][T28729]  ? ct_nmi_exit+0x145/0x1c0
[ 1227.377342][T28729]  ? __x64_sys_sendmsg+0x80/0x80
[ 1227.382303][T28729]  ? lockdep_hardirqs_on+0x94/0x140
[ 1227.387517][T28729]  do_syscall_64+0x4c/0xa0
[ 1227.391951][T28729]  ? clear_bhb_loop+0x60/0xb0
[ 1227.396637][T28729]  ? clear_bhb_loop+0x60/0xb0
[ 1227.401336][T28729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1227.407240][T28729] RIP: 0033:0x7fea5119cdd9
[ 1227.411677][T28729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1227.431298][T28729] RSP: 002b:00007fea52129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1227.439722][T28729] RAX: ffffffffffffffda RBX: 00007fea51415fa0 RCX: 00007fea5119cdd9
[ 1227.447713][T28729] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[ 1227.455708][T28729] RBP: 00007fea51232d69 R08: 0000000000000000 R09: 0000000000000000
[ 1227.463703][T28729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1227.471699][T28729] R13: 00007fea51416038 R14: 00007fea51415fa0 R15: 00007fffd253bc48
[ 1227.479704][T28729]  </TASK>
[ 1227.668600][T28742] team0: Device hsr_slave_0 failed to register rx_handler
[ 1227.675793][T28748] delete_channel: no stack
[ 1227.758238][T28746] validate_nla: 1 callbacks suppressed
[ 1227.758259][T28746] netlink: 'syz.0.8358': attribute type 1 has an invalid length.
[ 1227.781009][T28746] netlink: 'syz.0.8358': attribute type 4 has an invalid length.
[ 1227.803513][T28746] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8358'.
[ 1227.812956][T28744] netlink: 'syz.4.8356': attribute type 10 has an invalid length.
[ 1227.848154][T28753] netlink: 'syz.1.8359': attribute type 9 has an invalid length.
[ 1227.977018][T28757] delete_channel: no stack
[ 1227.988887][T28757] FAULT_INJECTION: forcing a failure.
[ 1227.988887][T28757] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1228.032794][T28757] CPU: 0 PID: 28757 Comm: syz.0.8360 Not tainted syzkaller #0
[ 1228.040330][T28757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1228.050416][T28757] Call Trace:
[ 1228.053716][T28757]  <TASK>
[ 1228.056665][T28757]  dump_stack_lvl+0x188/0x24e
[ 1228.061374][T28757]  ? show_regs_print_info+0x12/0x12
[ 1228.066601][T28757]  ? load_image+0x400/0x400
[ 1228.071135][T28757]  ? __lock_acquire+0x7d10/0x7d10
[ 1228.076191][T28757]  should_fail_ex+0x399/0x4d0
[ 1228.080891][T28757]  _copy_from_user+0x2c/0x170
[ 1228.085597][T28757]  __sys_bpf+0x2ea/0x780
[ 1228.089870][T28757]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1228.095285][T28757]  ? lock_chain_count+0x20/0x20
[ 1228.100176][T28757]  __x64_sys_bpf+0x78/0x90
[ 1228.104620][T28757]  do_syscall_64+0x4c/0xa0
[ 1228.109065][T28757]  ? clear_bhb_loop+0x60/0xb0
[ 1228.113768][T28757]  ? clear_bhb_loop+0x60/0xb0
[ 1228.118472][T28757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1228.124382][T28757] RIP: 0033:0x7fc9ed99cdd9
[ 1228.128804][T28757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1228.148424][T28757] RSP: 002b:00007fc9ee8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1228.156840][T28757] RAX: ffffffffffffffda RBX: 00007fc9edc15fa0 RCX: 00007fc9ed99cdd9
[ 1228.164827][T28757] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1228.172795][T28757] RBP: 00007fc9ee8c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1228.180763][T28757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1228.188733][T28757] R13: 00007fc9edc16038 R14: 00007fc9edc15fa0 R15: 00007ffe75eade78
[ 1228.196715][T28757]  </TASK>
[ 1229.055252][T28778] ref_ctr_offset mismatch. inode: 0x7fe offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[ 1229.107961][T28784] FAULT_INJECTION: forcing a failure.
[ 1229.107961][T28784] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.190631][T28784] CPU: 0 PID: 28784 Comm: syz.1.8369 Not tainted syzkaller #0
[ 1229.198171][T28784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1229.208252][T28784] Call Trace:
[ 1229.211547][T28784]  <TASK>
[ 1229.214494][T28784]  dump_stack_lvl+0x188/0x24e
[ 1229.219188][T28784]  ? show_regs_print_info+0x12/0x12
[ 1229.224389][T28784]  ? load_image+0x400/0x400
[ 1229.228892][T28784]  ? __might_sleep+0xd0/0xd0
[ 1229.233478][T28784]  ? __lock_acquire+0x7d10/0x7d10
[ 1229.238504][T28784]  should_fail_ex+0x399/0x4d0
[ 1229.243179][T28784]  should_failslab+0x5/0x20
[ 1229.247682][T28784]  slab_pre_alloc_hook+0x59/0x310
[ 1229.252707][T28784]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1229.258509][T28784]  __kmem_cache_alloc_node+0x4f/0x260
[ 1229.263883][T28784]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1229.269686][T28784]  kmalloc_trace+0x26/0xe0
[ 1229.274111][T28784]  apparmor_sk_alloc_security+0x74/0x100
[ 1229.279739][T28784]  security_sk_alloc+0x6a/0xa0
[ 1229.284502][T28784]  sk_prot_alloc+0x101/0x210
[ 1229.289103][T28784]  ? sk_alloc+0x20/0x340
[ 1229.293348][T28784]  sk_alloc+0x36/0x340
[ 1229.297414][T28784]  ? bpf_ctx_init+0x163/0x1a0
[ 1229.302088][T28784]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[ 1229.307643][T28784]  bpf_prog_test_run_skb+0x35e/0x12a0
[ 1229.313014][T28784]  ? __fget_files+0x28/0x4b0
[ 1229.317606][T28784]  ? __fget_files+0x43d/0x4b0
[ 1229.322291][T28784]  ? cpu_online+0xa0/0xa0
[ 1229.326618][T28784]  bpf_prog_test_run+0x31e/0x390
[ 1229.331565][T28784]  __sys_bpf+0x62b/0x780
[ 1229.335812][T28784]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1229.341198][T28784]  ? lock_chain_count+0x20/0x20
[ 1229.346055][T28784]  __x64_sys_bpf+0x78/0x90
[ 1229.350475][T28784]  do_syscall_64+0x4c/0xa0
[ 1229.354891][T28784]  ? clear_bhb_loop+0x60/0xb0
[ 1229.359576][T28784]  ? clear_bhb_loop+0x60/0xb0
[ 1229.364254][T28784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1229.370146][T28784] RIP: 0033:0x7fea5119cdd9
[ 1229.374557][T28784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1229.394161][T28784] RSP: 002b:00007fea52129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1229.402570][T28784] RAX: ffffffffffffffda RBX: 00007fea51415fa0 RCX: 00007fea5119cdd9
[ 1229.410540][T28784] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1229.418507][T28784] RBP: 00007fea52129090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.426472][T28784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.434435][T28784] R13: 00007fea51416038 R14: 00007fea51415fa0 R15: 00007fffd253bc48
[ 1229.442419][T28784]  </TASK>
[ 1229.572391][T28791] netlink: 'syz.0.8371': attribute type 1 has an invalid length.
[ 1229.604273][T28791] netlink: 'syz.0.8371': attribute type 4 has an invalid length.
[ 1229.612072][T28791] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8371'.
[ 1229.905652][T28800] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1229.941708][T28800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1230.329720][T28812] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.8380'.
[ 1230.491529][T28816] bridge0: port 3(bond0) entered disabled state
[ 1230.511047][T28816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1230.536617][T28816] device bond_slave_1 left promiscuous mode
[ 1230.584415][T28816] bond0 (unregistering): Released all slaves
[ 1230.831835][T28828] netlink: 'syz.0.8386': attribute type 1 has an invalid length.
[ 1230.874776][T28828] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.8386'.
[ 1231.374674][T28849] FAULT_INJECTION: forcing a failure.
[ 1231.374674][T28849] name failslab, interval 1, probability 0, space 0, times 0
[ 1231.442136][T28849] CPU: 0 PID: 28849 Comm: syz.4.8395 Not tainted syzkaller #0
[ 1231.449671][T28849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1231.459751][T28849] Call Trace:
[ 1231.463036][T28849]  <TASK>
[ 1231.465965][T28849]  dump_stack_lvl+0x188/0x24e
[ 1231.470651][T28849]  ? show_regs_print_info+0x12/0x12
[ 1231.475859][T28849]  ? load_image+0x400/0x400
[ 1231.480369][T28849]  ? __might_sleep+0xd0/0xd0
[ 1231.484952][T28849]  ? __lock_acquire+0x7d10/0x7d10
[ 1231.489979][T28849]  should_fail_ex+0x399/0x4d0
[ 1231.494655][T28849]  should_failslab+0x5/0x20
[ 1231.499150][T28849]  slab_pre_alloc_hook+0x59/0x310
[ 1231.504181][T28849]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1231.509811][T28849]  kmem_cache_alloc_node+0x5a/0x320
[ 1231.515003][T28849]  ? __alloc_skb+0xfc/0x7e0
[ 1231.519510][T28849]  __alloc_skb+0xfc/0x7e0
[ 1231.523846][T28849]  __ip6_append_data+0x2bb8/0x3d40
[ 1231.528990][T28849]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1231.533848][T28849]  ? ip6_setup_cork+0xfe0/0xfe0
[ 1231.538713][T28849]  ? ip6_setup_cork+0xa30/0xfe0
[ 1231.543571][T28849]  ip6_append_data+0x1ea/0x3e0
[ 1231.548342][T28849]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1231.553192][T28849]  l2tp_ip6_sendmsg+0x1208/0x1670
[ 1231.558234][T28849]  ? l2tp_ip6_destroy_sock+0x50/0x50
[ 1231.563537][T28849]  ? aa_af_perm+0x340/0x340
[ 1231.568036][T28849]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1231.574471][T28849]  ? sock_rps_record_flow+0x19/0x3f0
[ 1231.579752][T28849]  ? inet_sendmsg+0x78/0x2f0
[ 1231.584332][T28849]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1231.589613][T28849]  ? security_socket_sendmsg+0x7c/0xa0
[ 1231.595082][T28849]  ? inet_send_prepare+0x260/0x260
[ 1231.600187][T28849]  ____sys_sendmsg+0x5be/0x970
[ 1231.604971][T28849]  ? __sys_sendmsg_sock+0x30/0x30
[ 1231.609994][T28849]  ? __import_iovec+0x315/0x500
[ 1231.614848][T28849]  ? import_iovec+0x6f/0xa0
[ 1231.619354][T28849]  ___sys_sendmsg+0x2a2/0x360
[ 1231.624040][T28849]  ? __sys_sendmsg+0x290/0x290
[ 1231.628849][T28849]  ? __lock_acquire+0x7d10/0x7d10
[ 1231.633909][T28849]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1231.638820][T28849]  ? __x64_sys_sendmsg+0x80/0x80
[ 1231.643780][T28849]  ? lockdep_hardirqs_on+0x94/0x140
[ 1231.648986][T28849]  do_syscall_64+0x4c/0xa0
[ 1231.653408][T28849]  ? clear_bhb_loop+0x60/0xb0
[ 1231.658084][T28849]  ? clear_bhb_loop+0x60/0xb0
[ 1231.662768][T28849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1231.668661][T28849] RIP: 0033:0x7f2525b9cdd9
[ 1231.673071][T28849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1231.692691][T28849] RSP: 002b:00007f2526acc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1231.701119][T28849] RAX: ffffffffffffffda RBX: 00007f2525e15fa0 RCX: 00007f2525b9cdd9
[ 1231.709091][T28849] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[ 1231.717064][T28849] RBP: 00007f2526acc090 R08: 0000000000000000 R09: 0000000000000000
[ 1231.725029][T28849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1231.732994][T28849] R13: 00007f2525e16038 R14: 00007f2525e15fa0 R15: 00007ffc91bea0b8
[ 1231.740976][T28849]  </TASK>
[ 1232.550256][T28871] netlink: 'syz.3.8402': attribute type 1 has an invalid length.
[ 1232.588774][T28871] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.8402'.
[ 1233.233607][T28882] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8404'.
[ 1233.399874][T28885] netlink: 'syz.4.8407': attribute type 10 has an invalid length.
[ 1233.439376][T28885] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8407'.
[ 1233.479100][T28889] netlink: 'syz.2.8411': attribute type 10 has an invalid length.
[ 1233.675788][T28899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8412'.
[ 1233.853155][T28903] netlink: 'syz.0.8414': attribute type 1 has an invalid length.
[ 1233.893330][T28903] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.8414'.
[ 1234.098693][T28912] netlink: 'syz.3.8417': attribute type 12 has an invalid length.
[ 1234.129879][T28912] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8417'.
serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.