last executing test programs:

14.089657866s ago: executing program 1 (id=11039):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000000880)=""/108, 0x6c}], 0x2}, 0x10100)

13.958034589s ago: executing program 1 (id=11040):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xd3, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x874, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x4}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xb4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000027c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002800)=[{0x2, 0x2, 0x4, 0x6}, {0x4, 0x5, 0x2, 0x6}, {0x2, 0x3, 0xf, 0x8}, {0x3, 0x5, 0xc, 0x7}], 0x10, 0xb}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

13.733998375s ago: executing program 1 (id=11042):
syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202)

9.275792977s ago: executing program 1 (id=11049):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000000880)=""/108, 0x6c}], 0x2}, 0x10100)

9.220388238s ago: executing program 1 (id=11051):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

7.338431229s ago: executing program 1 (id=11054):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

3.595511892s ago: executing program 3 (id=11073):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x3, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000180), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
mkdir(&(0x7f0000000000)='./file\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0)

3.191066923s ago: executing program 2 (id=11075):
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0)

2.708080436s ago: executing program 2 (id=11077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

2.707671746s ago: executing program 0 (id=11078):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x300, 0xd1, 0x0, 0x3, 0x2, 0x0, 0xc98a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
gettid()
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x48)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x27, 0x6, 0x5, &(0x7f0000001000))
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0)
close(r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<-0||!')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)

2.672500517s ago: executing program 3 (id=11079):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfd, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb02}, 0x0, 0xc8, 0x10003, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfdef)

2.598726739s ago: executing program 3 (id=11080):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

2.55810136s ago: executing program 2 (id=11081):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

2.483785382s ago: executing program 3 (id=11082):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="246ab6c323838c21148f45c44d8061dcd5788b4670a5efbe796b372dcbd3a13e5b7eef41886d8274cb10a03d93", 0x2d}, {&(0x7f0000000940)="b9331ad46cd56d6cc7afd22247ef4dea40da3f87d9b21a93829131315632aa1639b37dea9ef8bedc214f5f88388d731c892348de4a7b6234dec8a5539f0f6a4e2339f13684230ef33a1562ef3124dfb03d22471fa0a0825882b0f8eafa9a66e6dceb6c3b9fd9c1f0cccfebc7e95ce59fab59163f560dfcbf38568f91e93e748c9dc6cb95203d618cc7cb696872489de77d1ae09bdca12973f65f2b06b112bd95bf2888e38deb29eddc40afa6887e9ae785c590378231017f0c0ac48eb53d6dc8dd718444ab76339e71e6295020e6a2457114ca24a98dea2cd7505cd4741a63f7cd0bb4d24f93b2df6ee467af4b8895eb27562772bb7cb67390c46be776198d52f1df8ff287047e8cb61570280b31a8f2c7de0c84241c0bb7df72b44887ad352aa0d70554b440bd387b3999cdcbc0315b1be9c1c9e1cd99226879b7d0f1e7aaeefe81602963a11e086521dc7fc9376dfac93c19bdfc1d288846cce01ba82f5e064c06e373e98d3728132ffb7e89f2299cbb9b8c437ae7fa8ac60fb7fbf20ffb4ebba389f0548a523aa765d76a5295db997422f0da6e84d0f972b489d202be8e9a7b163b23bc3915b31d4759f78ba84294c805b74aed1fdaab4fb385f8e4a80e674c77534fd419b75679c61d6018d0f91d32dd27d9ee3ff56fb079949185a3a5ffe3aa36387648ce4e4efcbc127bdc7080feb366ea05400c267ccfcd1fb43bbd501b51c0a4666c968013705d243c39bf76c4741c0660119a2d413811eca001f97d22f87451a502d2cc996fee0df601da5a94579b29d84162d1c7c0fde74e2c9c07d4a72f326ed08c138e9fa783a49325056deec3e896e516e919065e709787e1262ee41086926989f03718ef280af61a9ee08c8dbd250420baba456051b03308624f39852a3c38c31bda2698ef89652c84710481d36bb6bf30024cb97679bce4ffd2665875fe7d780a0ed4a4baf7e26fcbbdc336dbc33f91976316315492f28e1f7f34415624ae0fa77a3b7b6f54c947b9c063b7a95dd1d9f0ad0958069f8c5c97e4fe73471650cbbd3b1ae107d9238b2319c34513daa0bcc4ad79026e25397230a88696f4d52e2ee9662c75559d4e224216ab8842d567eca38bd7ff1262a9019ce748b9c77d93af0b146b8832d243466b91ec1d1ddf902fa91df643632759f9a865492aeabc8a21d0b52f70486fe318c45dfc19ebaf25431cd7f9871d9c31e517e4fce14bed1471ccff8a2e6aa14079a9043a6835a29e206863eb6176d54020ba76e6e042fde33c9cf354132b12e28f244c110266f8d55b2c9592f78ad734542b06d22de57589bf2452dfcc82aee7b6ae3bec2354922605bed7eff04cea55e8bbd1a0361f68fa68a4c75f94ba46bc8e4aba0b78bb3e1e39d6b731376d7f5018025c49540b34b00b80558474ab9c7a26d1b9d5d8e1cbe6493d72c4ede3c667be073a55e6024cf053d90b06718e1667cd3a3560d18314b0d97d9cec245afeabb56fba6afb5d5c8dbd656aa83717e25cc7347a0e22a70772036085a9fc0ed678432915c8259466adde7da5d908bf3f98daf75bcb332f2ac8b19da0834e24832c3433151da1805845a6568d341ec4565ca8aa8c0002415c8742b3051176cf6b9bbd9ca2788b0e37746bbad852f95777b09ab511110fb88360b4035cf03b6158afe964cb7c44713684e9e9cc3c159b1dfc39c11ac9bac4ca8b73d92bb04f640a8f0de4924b72b5be1b173dd7c617fb4204f4c9475f5d5c2389b422ea27b045ee4f1fde834036b4f4013a13fc4f21c0d2acd48a07de1cbfc2f3e00ecd0efaed678179f837124ad65e44f15812167fe4c635327bcb7030aa42de88b7f03d5a0481a5874d6f76b7f532235853b9175c7924456475d37114592f357d6a6fc2afd7a43ff3ab32ed5538f8d2303e7a66b0d531629b5dec5bdbff3422728cf6a8472df8b2c8827ef1c0095d59b218c915d9eb73a66f4adf9d6076e744e9312e8c47806d58f98ff245c87fd50c93561e8d434912b2064e88bf966a9e661d88", 0x598}], 0x2, 0x0, 0x0, 0x40000090}, 0x0)

2.299786947s ago: executing program 3 (id=11083):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)

2.20350211s ago: executing program 0 (id=11084):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, 0x0, 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000000880)=""/108, 0x6c}], 0x2}, 0x10100)

2.162048121s ago: executing program 3 (id=11085):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffffc7)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x4800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)

1.280082705s ago: executing program 0 (id=11086):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x5, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfdef)

1.250598286s ago: executing program 0 (id=11087):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
sendmsg(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=ANY=[], 0x4f8}, 0x0)

1.205091367s ago: executing program 0 (id=11088):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.09201586s ago: executing program 0 (id=11089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

151.624396ms ago: executing program 2 (id=11090):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

98.189137ms ago: executing program 2 (id=11091):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f00000005c0)=0x80000000000004)

0s ago: executing program 2 (id=11092):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

kernel console output (not intermixed with test programs):

rsing attributes in process `syz.0.9786'.
[ 1392.321995][ T1434] bridge: RTM_NEWNEIGH with invalid state 0x1
[ 1392.355072][ T1436] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1392.530015][ T1441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9788'.
[ 1392.589811][  T495] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15
[ 1393.252417][T16253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1393.263480][T16253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1393.272754][T16253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1393.281780][T16253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1393.290852][T16253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1393.299727][T16253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1393.544338][ T1449] delete_channel: no stack
[ 1393.716895][ T1464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9794'.
[ 1393.728157][ T1467] netlink: 'syz.2.9797': attribute type 3 has an invalid length.
[ 1393.737014][ T1467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9797'.
[ 1393.802053][ T1463] syzkaller0: entered promiscuous mode
[ 1393.808763][ T1463] syzkaller0: entered allmulticast mode
[ 1395.436504][T16253] Bluetooth: hci4: command tx timeout
[ 1395.798778][ T1472] netlink: 'syz.2.9798': attribute type 10 has an invalid length.
[ 1395.932016][ T1479] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1395.976027][ T1458] chnl_net:caif_netlink_parms(): no params data found
[ 1396.133079][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1396.140479][ T1458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1396.149143][ T1458] bridge_slave_0: entered allmulticast mode
[ 1396.157455][ T1458] bridge_slave_0: entered promiscuous mode
[ 1396.166781][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1396.173976][ T1458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1396.181292][ T1458] bridge_slave_1: entered allmulticast mode
[ 1396.189049][ T1458] bridge_slave_1: entered promiscuous mode
[ 1396.227762][ T1488] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1396.264354][ T1458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1396.278006][ T1458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1396.309582][ T1458] team0: Port device team_slave_0 added
[ 1396.320605][ T1458] team0: Port device team_slave_1 added
[ 1396.352382][ T1458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1396.360035][ T1458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1396.386746][ T1458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1396.404939][ T1458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1396.411908][ T1458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1396.438079][ T1458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1396.474439][ T1458] hsr_slave_0: entered promiscuous mode
[ 1396.480794][ T1458] hsr_slave_1: entered promiscuous mode
[ 1396.487314][ T1458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1396.494987][ T1458] Cannot create hsr debugfs directory
[ 1396.621083][ T1458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1396.729760][ T1458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1396.892258][ T1458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1396.951175][ T1495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9804'.
[ 1397.003735][ T1458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1397.140278][ T1496] syzkaller0: entered promiscuous mode
[ 1397.147021][ T1496] syzkaller0: entered allmulticast mode
[ 1397.511639][T16253] Bluetooth: hci4: command tx timeout
[ 1399.393741][ T1458] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1399.417529][ T1458] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1399.433614][ T1458] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1399.466669][ T1458] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1399.517772][ T1504] netlink: 'syz.2.9808': attribute type 10 has an invalid length.
[ 1399.586295][T16253] Bluetooth: hci4: command tx timeout
[ 1399.643993][ T1458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1399.690071][ T1458] 8021q: adding VLAN 0 to HW filter on device team0
[ 1399.704405][  T408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1399.711586][  T408] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1399.762220][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1399.769475][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1399.880272][ T1512] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1400.119746][ T1516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9814'.
[ 1400.332158][ T1458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1400.507410][ T1458] veth0_vlan: entered promiscuous mode
[ 1400.577846][ T1458] veth1_vlan: entered promiscuous mode
[ 1400.846678][ T1458] veth0_macvtap: entered promiscuous mode
[ 1400.935018][ T1529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9816'.
[ 1400.972242][ T1458] veth1_macvtap: entered promiscuous mode
[ 1401.068737][ T1531] netlink: 'syz.2.9818': attribute type 10 has an invalid length.
[ 1401.189742][ T1458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1401.216826][ T1458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1401.264403][ T1458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1401.664918][T16253] Bluetooth: hci4: command tx timeout
[ 1401.811771][ T1534] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9819'.
[ 1401.830121][ T1534] bridge: RTM_NEWNEIGH with invalid state 0x1
[ 1401.852496][ T1458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1401.864027][ T1458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1401.889493][ T1458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1401.926860][ T1458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.936215][ T1458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.946153][ T1458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.955187][ T1458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1402.122600][  T401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1402.151104][  T401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1402.193816][  T396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1402.194452][ T1546] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1402.207178][  T396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1403.164211][ T1548] delete_channel: no stack
[ 1403.285280][ T1555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9824'.
[ 1403.512570][ T1560] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9825'.
[ 1403.763405][ T1567] netlink: 'syz.3.9827': attribute type 10 has an invalid length.
[ 1403.830421][ T1567] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1404.107677][ T1580] FAULT_INJECTION: forcing a failure.
[ 1404.107677][ T1580] name failslab, interval 1, probability 0, space 0, times 0
[ 1404.132763][ T1580] CPU: 0 PID: 1580 Comm: syz.2.9832 Not tainted syzkaller #0
[ 1404.140198][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1404.150289][ T1580] Call Trace:
[ 1404.153578][ T1580]  <TASK>
[ 1404.156519][ T1580]  dump_stack_lvl+0x18c/0x250
[ 1404.161219][ T1580]  ? show_regs_print_info+0x20/0x20
[ 1404.166439][ T1580]  ? load_image+0x420/0x420
[ 1404.170954][ T1580]  ? __lock_acquire+0x7d40/0x7d40
[ 1404.175996][ T1580]  should_fail_ex+0x39d/0x4d0
[ 1404.180694][ T1580]  should_failslab+0x9/0x20
[ 1404.185212][ T1580]  slab_pre_alloc_hook+0x59/0x310
[ 1404.190248][ T1580]  ? ____sys_sendmsg+0x5ba/0x960
[ 1404.195212][ T1580]  ? ___sys_sendmsg+0x2a6/0x360
[ 1404.200061][ T1580]  ? __se_sys_sendmsg+0x1c2/0x2b0
[ 1404.205093][ T1580]  kmem_cache_alloc_node+0x60/0x320
[ 1404.210397][ T1580]  ? alloc_vmap_area+0x1b4/0x1e30
[ 1404.215436][ T1580]  alloc_vmap_area+0x1b4/0x1e30
[ 1404.220315][ T1580]  ? vm_map_ram+0xcb0/0xcb0
[ 1404.224830][ T1580]  ? rcu_is_watching+0x15/0xb0
[ 1404.229611][ T1580]  __get_vm_area_node+0x162/0x370
[ 1404.234646][ T1580]  __vmalloc_node_range+0x36e/0x1330
[ 1404.239953][ T1580]  ? netlink_sendmsg+0x602/0xbf0
[ 1404.244901][ T1580]  ? netlink_insert+0x109f/0x13a0
[ 1404.249951][ T1580]  ? netlink_data_ready+0x10/0x10
[ 1404.254993][ T1580]  ? free_vm_area+0x50/0x50
[ 1404.259517][ T1580]  ? netlink_sendmsg+0x602/0xbf0
[ 1404.264465][ T1580]  vmalloc+0x79/0x90
[ 1404.268370][ T1580]  ? netlink_sendmsg+0x602/0xbf0
[ 1404.273317][ T1580]  netlink_sendmsg+0x602/0xbf0
[ 1404.278097][ T1580]  ? netlink_getsockopt+0x590/0x590
[ 1404.283324][ T1580]  ? aa_sock_msg_perm+0x94/0x150
[ 1404.288279][ T1580]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1404.293570][ T1580]  ? security_socket_sendmsg+0x80/0xa0
[ 1404.299034][ T1580]  ? netlink_getsockopt+0x590/0x590
[ 1404.304249][ T1580]  ____sys_sendmsg+0x5ba/0x960
[ 1404.309048][ T1580]  ? __asan_memset+0x22/0x40
[ 1404.313646][ T1580]  ? __sys_sendmsg_sock+0x30/0x30
[ 1404.318687][ T1580]  ? __import_iovec+0x5f2/0x850
[ 1404.323570][ T1580]  ? import_iovec+0x73/0xa0
[ 1404.328102][ T1580]  ___sys_sendmsg+0x2a6/0x360
[ 1404.332801][ T1580]  ? get_pid_task+0x20/0x1e0
[ 1404.337420][ T1580]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1404.342214][ T1580]  ? __lock_acquire+0x7d40/0x7d40
[ 1404.347276][ T1580]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1404.352140][ T1580]  ? __x64_sys_sendmsg+0x80/0x80
[ 1404.357098][ T1580]  ? lockdep_hardirqs_on+0x98/0x150
[ 1404.362307][ T1580]  do_syscall_64+0x55/0xa0
[ 1404.366726][ T1580]  ? clear_bhb_loop+0x40/0x90
[ 1404.371413][ T1580]  ? clear_bhb_loop+0x40/0x90
[ 1404.376100][ T1580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1404.382012][ T1580] RIP: 0033:0x7f5cd039cdd9
[ 1404.386437][ T1580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1404.406053][ T1580] RSP: 002b:00007f5cd1252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1404.414475][ T1580] RAX: ffffffffffffffda RBX: 00007f5cd0615fa0 RCX: 00007f5cd039cdd9
[ 1404.422459][ T1580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1404.430431][ T1580] RBP: 00007f5cd1252090 R08: 0000000000000000 R09: 0000000000000000
[ 1404.438402][ T1580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1404.446375][ T1580] R13: 00007f5cd0616038 R14: 00007f5cd0615fa0 R15: 00007fff8e14b5a8
[ 1404.454367][ T1580]  </TASK>
[ 1404.464805][ T1580] syz.2.9832: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 1404.487150][ T1580] CPU: 1 PID: 1580 Comm: syz.2.9832 Not tainted syzkaller #0
[ 1404.494574][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1404.504654][ T1580] Call Trace:
[ 1404.507955][ T1580]  <TASK>
[ 1404.510908][ T1580]  dump_stack_lvl+0x18c/0x250
[ 1404.515623][ T1580]  ? show_regs_print_info+0x20/0x20
[ 1404.520852][ T1580]  ? load_image+0x420/0x420
[ 1404.525385][ T1580]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1404.531827][ T1580]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1404.538359][ T1580]  warn_alloc+0x246/0x340
[ 1404.542723][ T1580]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1404.548381][ T1580]  ? zone_watermark_ok_safe+0x230/0x230
[ 1404.553969][ T1580]  ? __get_vm_area_node+0x17b/0x370
[ 1404.559208][ T1580]  ? __get_vm_area_node+0x17b/0x370
[ 1404.564445][ T1580]  __vmalloc_node_range+0x393/0x1330
[ 1404.569761][ T1580]  ? netlink_insert+0x109f/0x13a0
[ 1404.574832][ T1580]  ? netlink_data_ready+0x10/0x10
[ 1404.579893][ T1580]  ? free_vm_area+0x50/0x50
[ 1404.584433][ T1580]  ? netlink_sendmsg+0x602/0xbf0
[ 1404.589403][ T1580]  vmalloc+0x79/0x90
[ 1404.593329][ T1580]  ? netlink_sendmsg+0x602/0xbf0
[ 1404.598296][ T1580]  netlink_sendmsg+0x602/0xbf0
[ 1404.603100][ T1580]  ? netlink_getsockopt+0x590/0x590
[ 1404.608332][ T1580]  ? aa_sock_msg_perm+0x94/0x150
[ 1404.613306][ T1580]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1404.618612][ T1580]  ? security_socket_sendmsg+0x80/0xa0
[ 1404.624094][ T1580]  ? netlink_getsockopt+0x590/0x590
[ 1404.629325][ T1580]  ____sys_sendmsg+0x5ba/0x960
[ 1404.634121][ T1580]  ? __asan_memset+0x22/0x40
[ 1404.638742][ T1580]  ? __sys_sendmsg_sock+0x30/0x30
[ 1404.643794][ T1580]  ? __import_iovec+0x5f2/0x850
[ 1404.648679][ T1580]  ? import_iovec+0x73/0xa0
[ 1404.653209][ T1580]  ___sys_sendmsg+0x2a6/0x360
[ 1404.657907][ T1580]  ? get_pid_task+0x20/0x1e0
[ 1404.662525][ T1580]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1404.667330][ T1580]  ? __lock_acquire+0x7d40/0x7d40
[ 1404.672399][ T1580]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1404.677291][ T1580]  ? __x64_sys_sendmsg+0x80/0x80
[ 1404.682263][ T1580]  ? lockdep_hardirqs_on+0x98/0x150
[ 1404.687489][ T1580]  do_syscall_64+0x55/0xa0
[ 1404.691923][ T1580]  ? clear_bhb_loop+0x40/0x90
[ 1404.696628][ T1580]  ? clear_bhb_loop+0x40/0x90
[ 1404.701339][ T1580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1404.707263][ T1580] RIP: 0033:0x7f5cd039cdd9
[ 1404.711693][ T1580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1404.731324][ T1580] RSP: 002b:00007f5cd1252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1404.739770][ T1580] RAX: ffffffffffffffda RBX: 00007f5cd0615fa0 RCX: 00007f5cd039cdd9
[ 1404.747764][ T1580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1404.755757][ T1580] RBP: 00007f5cd1252090 R08: 0000000000000000 R09: 0000000000000000
[ 1404.763749][ T1580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1404.771743][ T1580] R13: 00007f5cd0616038 R14: 00007f5cd0615fa0 R15: 00007fff8e14b5a8
[ 1404.779750][ T1580]  </TASK>
[ 1404.787227][ T1580] Mem-Info:
[ 1404.790386][ T1580] active_anon:15801 inactive_anon:0 isolated_anon:0
[ 1404.790386][ T1580]  active_file:19935 inactive_file:40481 isolated_file:0
[ 1404.790386][ T1580]  unevictable:768 dirty:483 writeback:0
[ 1404.790386][ T1580]  slab_reclaimable:11345 slab_unreclaimable:102901
[ 1404.790386][ T1580]  mapped:26461 shmem:1361 pagetables:570
[ 1404.790386][ T1580]  sec_pagetables:0 bounce:0
[ 1404.790386][ T1580]  kernel_misc_reclaimable:0
[ 1404.790386][ T1580]  free:1313158 free_pcp:14166 free_cma:0
[ 1404.842231][ T1580] Node 0 active_anon:63204kB inactive_anon:0kB active_file:79740kB inactive_file:161720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107944kB dirty:1932kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11440kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no
[ 1404.877126][ T1580] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1404.907834][ T1580] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1404.942762][ T1580] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1404.952943][ T1580] Node 0 DMA32 free:1343968kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:63268kB inactive_anon:0kB active_file:79740kB inactive_file:160884kB unevictable:1536kB writepending:1928kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:33732kB local_pcp:16596kB free_cma:0kB
[ 1404.986791][ T1580] lowmem_reserve[]: 0 0 0 0 0
[ 1404.998152][ T1580] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1405.027538][ T1583] delete_channel: no stack
[ 1405.040037][ T1580] lowmem_reserve[]: 0 0 0 0 0
[ 1405.045537][ T1580] Node 1 Normal free:3892320kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23404kB local_pcp:10536kB free_cma:0kB
[ 1405.094603][ T1580] lowmem_reserve[]: 0 0 0 0 0
[ 1405.102322][ T1580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1405.130012][ T1580] Node 0 DMA32: 1*4kB (U) 168*8kB (UE) 281*16kB (UME) 451*32kB (UME) 657*64kB (UME) 1123*128kB (UME) 321*256kB (UME) 173*512kB (UM) 64*1024kB (UME) 8*2048kB (ME) 216*4096kB (M) = 1343476kB
[ 1405.152860][ T1580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1405.165364][ T1580] Node 1 Normal: 216*4kB (UME) 54*8kB (UME) 43*16kB (UME) 59*32kB (UME) 17*64kB (UME) 4*128kB (UE) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3892320kB
[ 1405.186209][ T1580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1405.196655][ T1580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1405.212481][ T1580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1405.232279][ T1580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1405.242044][ T1580] 61779 total pagecache pages
[ 1405.251511][ T1580] 0 pages in swap cache
[ 1405.262111][ T1580] Free swap  = 124996kB
[ 1405.269809][ T1580] Total swap = 124996kB
[ 1405.274002][ T1580] 2097051 pages RAM
[ 1405.283770][ T1580] 0 pages HighMem/MovableOnly
[ 1405.291979][ T1580] 416927 pages reserved
[ 1405.296822][ T1580] 0 pages cma reserved
[ 1406.186772][ T1595] team0: Port device team_slave_0 removed
[ 1406.206413][ T1595] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1406.259019][ T1603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9838'.
[ 1407.126179][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1407.133698][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1407.754883][ T1625] FAULT_INJECTION: forcing a failure.
[ 1407.754883][ T1625] name failslab, interval 1, probability 0, space 0, times 0
[ 1407.787916][ T1625] CPU: 1 PID: 1625 Comm: syz.2.9844 Not tainted syzkaller #0
[ 1407.795364][ T1625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1407.805446][ T1625] Call Trace:
[ 1407.808761][ T1625]  <TASK>
[ 1407.811722][ T1625]  dump_stack_lvl+0x18c/0x250
[ 1407.816438][ T1625]  ? show_regs_print_info+0x20/0x20
[ 1407.821670][ T1625]  ? load_image+0x420/0x420
[ 1407.826227][ T1625]  ? __might_sleep+0xe0/0xe0
[ 1407.830855][ T1625]  ? __lock_acquire+0x7d40/0x7d40
[ 1407.835926][ T1625]  should_fail_ex+0x39d/0x4d0
[ 1407.840648][ T1625]  should_failslab+0x9/0x20
[ 1407.845193][ T1625]  slab_pre_alloc_hook+0x59/0x310
[ 1407.850259][ T1625]  ? __get_vm_area_node+0x125/0x370
[ 1407.855493][ T1625]  __kmem_cache_alloc_node+0x53/0x250
[ 1407.860903][ T1625]  ? __get_vm_area_node+0x125/0x370
[ 1407.866137][ T1625]  kmalloc_node_trace+0x26/0xe0
[ 1407.871033][ T1625]  __get_vm_area_node+0x125/0x370
[ 1407.876104][ T1625]  __vmalloc_node_range+0x36e/0x1330
[ 1407.881429][ T1625]  ? netlink_sendmsg+0x602/0xbf0
[ 1407.886372][ T1625]  ? netlink_insert+0x109f/0x13a0
[ 1407.891436][ T1625]  ? netlink_data_ready+0x10/0x10
[ 1407.896473][ T1625]  ? free_vm_area+0x50/0x50
[ 1407.900979][ T1625]  ? netlink_sendmsg+0x602/0xbf0
[ 1407.905927][ T1625]  vmalloc+0x79/0x90
[ 1407.909843][ T1625]  ? netlink_sendmsg+0x602/0xbf0
[ 1407.914806][ T1625]  netlink_sendmsg+0x602/0xbf0
[ 1407.919594][ T1625]  ? netlink_getsockopt+0x590/0x590
[ 1407.924797][ T1625]  ? aa_sock_msg_perm+0x94/0x150
[ 1407.929732][ T1625]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1407.935021][ T1625]  ? security_socket_sendmsg+0x80/0xa0
[ 1407.940477][ T1625]  sock_write_iter+0x2df/0x420
[ 1407.945237][ T1625]  ? sock_read_iter+0x3e0/0x3e0
[ 1407.950089][ T1625]  ? common_file_perm+0x198/0x1f0
[ 1407.955120][ T1625]  vfs_write+0x46c/0x990
[ 1407.959366][ T1625]  ? file_end_write+0x250/0x250
[ 1407.964213][ T1625]  ? __fget_files+0x43d/0x4b0
[ 1407.968892][ T1625]  ? __fdget_pos+0x1d8/0x330
[ 1407.973476][ T1625]  ? ksys_write+0x75/0x260
[ 1407.977896][ T1625]  ksys_write+0x150/0x260
[ 1407.982224][ T1625]  ? __ia32_sys_read+0x90/0x90
[ 1407.986986][ T1625]  ? lockdep_hardirqs_on+0x98/0x150
[ 1407.992184][ T1625]  do_syscall_64+0x55/0xa0
[ 1407.996592][ T1625]  ? clear_bhb_loop+0x40/0x90
[ 1408.001262][ T1625]  ? clear_bhb_loop+0x40/0x90
[ 1408.005935][ T1625]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1408.011824][ T1625] RIP: 0033:0x7f5cd039cdd9
[ 1408.016236][ T1625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1408.035839][ T1625] RSP: 002b:00007f5cd1252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1408.044255][ T1625] RAX: ffffffffffffffda RBX: 00007f5cd0615fa0 RCX: 00007f5cd039cdd9
[ 1408.052223][ T1625] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003
[ 1408.060187][ T1625] RBP: 00007f5cd1252090 R08: 0000000000000000 R09: 0000000000000000
[ 1408.068150][ T1625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1408.076115][ T1625] R13: 00007f5cd0616038 R14: 00007f5cd0615fa0 R15: 00007fff8e14b5a8
[ 1408.084091][ T1625]  </TASK>
[ 1408.106283][ T1619] delete_channel: no stack
[ 1408.187358][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1408.197921][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1408.243615][ T1605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9839'.
[ 1408.544411][ T1633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9846'.
[ 1408.839065][ T1639] syzkaller0: entered promiscuous mode
[ 1408.854715][ T1639] syzkaller0: entered allmulticast mode
[ 1408.976845][ T1646] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1409.131642][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1409.352203][  T396] tipc: Subscription rejected, illegal request
[ 1411.320532][ T1656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9852'.
[ 1412.219572][ T1665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9856'.
[ 1412.325162][ T1659] delete_channel: no stack
[ 1412.622850][T16253] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[ 1412.716547][ T1681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9860'.
[ 1413.155933][ T1693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9863'.
[ 1413.528447][T16253] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4
[ 1413.559219][ T1699] syzkaller0: entered promiscuous mode
[ 1413.573075][ T1699] syzkaller0: entered allmulticast mode
[ 1413.956875][T16253] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[ 1414.158229][T16253] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[ 1416.049575][ T1716] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1416.419967][ T1732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9876'.
[ 1416.922899][T16253] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[ 1417.047656][T16253] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[ 1417.232905][ T1749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9881'.
[ 1417.589429][T16253] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1417.598276][T16253] Bluetooth: hci3: Injecting HCI hardware error event
[ 1417.607318][T16253] Bluetooth: hci3: hardware error 0x00
[ 1417.693324][ T1757] syzkaller0: entered promiscuous mode
[ 1417.699569][ T1757] syzkaller0: entered allmulticast mode
[ 1417.759475][ T1755] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1419.669176][T16253] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1420.114874][T16253] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[ 1420.382285][ T1783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9895'.
[ 1420.435334][T16253] Bluetooth: hci4: unexpected event 0x0f length: 151 > 4
[ 1420.661978][ T1789] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1420.890727][ T1797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9901'.
[ 1421.105122][T16253] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1421.113973][T16253] Bluetooth: hci0: Injecting HCI hardware error event
[ 1421.122899][T16253] Bluetooth: hci0: hardware error 0x00
[ 1421.153082][  T495] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1421.189317][ T1807] syzkaller0: entered promiscuous mode
[ 1421.195229][ T1807] syzkaller0: entered allmulticast mode
[ 1423.188753][T16253] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1423.283087][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.289688][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.392550][ T1824] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1424.062642][ T1852] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1424.465105][T16253] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1424.475866][T16253] Bluetooth: hci4: Injecting HCI hardware error event
[ 1424.484238][T16253] Bluetooth: hci4: hardware error 0x00
[ 1424.557253][ T1871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9927'.
[ 1424.574306][  T495] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1424.919366][ T1880] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1425.420980][ T1892] netlink: 'syz.2.9936': attribute type 10 has an invalid length.
[ 1425.456719][ T1883] delete_channel: no stack
[ 1425.626502][  T495] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1425.915656][ T1914] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1426.025222][ T1919] netlink: 'syz.2.9947': attribute type 10 has an invalid length.
[ 1426.551043][T16253] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1426.928428][ T1922] delete_channel: no stack
[ 1428.492220][ T1946] syzkaller0: entered promiscuous mode
[ 1428.501472][ T1946] syzkaller0: entered allmulticast mode
[ 1428.542784][ T1951] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1428.836576][ T1958] netlink: 'syz.2.9959': attribute type 10 has an invalid length.
[ 1430.535951][ T1975] delete_channel: no stack
[ 1431.892026][ T1990] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1431.918275][ T1992] netlink: 'syz.1.9971': attribute type 10 has an invalid length.
[ 1432.562904][ T2006] syzkaller0: entered promiscuous mode
[ 1432.578893][ T2006] syzkaller0: entered allmulticast mode
[ 1432.994308][ T2001] delete_channel: no stack
[ 1435.609336][ T2032] netlink: 'syz.3.9982': attribute type 10 has an invalid length.
[ 1435.666748][ T2033] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1435.711556][  T405] hsr_slave_0: left promiscuous mode
[ 1435.718879][  T405] hsr_slave_1: left promiscuous mode
[ 1435.726299][  T405] bridge_slave_1: left allmulticast mode
[ 1435.731999][  T405] bridge_slave_1: left promiscuous mode
[ 1435.739459][  T405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1435.752439][  T405] bridge_slave_0: left allmulticast mode
[ 1435.762441][  T405] bridge_slave_0: left promiscuous mode
[ 1435.769896][  T405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1435.807110][  T405] veth1_vlan: left promiscuous mode
[ 1435.812664][  T405] veth0_vlan: left promiscuous mode
[ 1436.806874][  T405] team0 (unregistering): Port device team_slave_1 removed
[ 1436.852409][  T405] team0 (unregistering): Port device C removed
[ 1436.973587][ T2048] delete_channel: no stack
[ 1437.326027][ T2037] syzkaller0: entered promiscuous mode
[ 1437.331554][ T2037] syzkaller0: entered allmulticast mode
[ 1439.587265][ T2062] syzkaller0: entered promiscuous mode
[ 1439.592807][ T2062] syzkaller0: entered allmulticast mode
[ 1441.889671][ T2070] netlink: 'syz.1.9994': attribute type 10 has an invalid length.
[ 1441.918239][ T2077] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9995'.
[ 1441.932375][ T2080] delete_channel: no stack
[ 1442.147748][ T2089] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1442.330411][ T2096] syzkaller0: entered promiscuous mode
[ 1442.336299][ T2096] syzkaller0: entered allmulticast mode
[ 1442.511076][ T2101] netlink: 'syz.3.10004': attribute type 21 has an invalid length.
[ 1442.528470][ T2101] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10004'.
[ 1442.560653][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1444.308202][ T2107] netlink: 'syz.2.10007': attribute type 10 has an invalid length.
[ 1444.449474][ T2112] syzkaller0: entered promiscuous mode
[ 1444.455732][ T2112] syzkaller0: entered allmulticast mode
[ 1445.243867][ T2109] delete_channel: no stack
[ 1446.379958][ T2120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10011'.
[ 1448.212022][ T2124] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1448.726147][ T2144] netlink: 'syz.2.10018': attribute type 10 has an invalid length.
[ 1448.825898][ T2141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10017'.
[ 1449.279245][ T2158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10021'.
[ 1449.321654][ T2155] netlink: 'syz.0.10020': attribute type 10 has an invalid length.
[ 1449.497502][ T2149] syzkaller0: entered promiscuous mode
[ 1449.503070][ T2149] syzkaller0: entered allmulticast mode
[ 1449.567072][ T2165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10022'.
[ 1451.610646][ T2168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10023'.
[ 1451.729784][ T2171] syzkaller0: entered promiscuous mode
[ 1451.735343][ T2171] syzkaller0: entered allmulticast mode
[ 1453.564435][ T2174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1453.825445][ T2183] netlink: 'syz.0.10028': attribute type 10 has an invalid length.
[ 1453.851899][ T2181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10027'.
[ 1454.616793][ T2198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10040'.
[ 1454.651932][ T2197] netlink: 'syz.3.10031': attribute type 10 has an invalid length.
[ 1454.928815][ T2203] syzkaller0: entered promiscuous mode
[ 1454.935467][ T2203] syzkaller0: entered allmulticast mode
[ 1457.218126][ T2216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10035'.
[ 1457.238913][ T2226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10039'.
[ 1457.501208][ T2229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10041'.
[ 1457.563622][  T405] bond0: (slave ..ãc¤±): Releasing backup interface
[ 1457.671492][ T2232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10042'.
[ 1457.959091][  T405] hsr_slave_0: left promiscuous mode
[ 1457.986528][  T405] hsr_slave_1: left promiscuous mode
[ 1458.007058][  T405] bridge_slave_1: left allmulticast mode
[ 1458.019663][  T405] bridge_slave_1: left promiscuous mode
[ 1458.035515][  T405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1458.060819][  T405] Lè+߬ç³Õ: left promiscuous mode
[ 1458.075137][  T405] bridge0: port 1(Lè+߬ç³Õ) entered disabled state
[ 1458.141239][  T405] veth1_vlan: left promiscuous mode
[ 1458.151768][  T405] veth0_vlan: left promiscuous mode
[ 1458.384827][  T405] team0 (unregistering): Port device geneve1 removed
[ 1458.944093][  T405] team0 (unregistering): Port device team_slave_1 removed
[ 1458.991262][  T405] team0 (unregistering): Port device C removed
[ 1459.037061][  T405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1459.083449][  T405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1459.413835][  T405] bond0 (unregistering): Released all slaves
[ 1459.510646][ T2239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10051'.
[ 1459.833448][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1460.233628][ T2255] syzkaller0: entered promiscuous mode
[ 1460.239522][ T2255] syzkaller0: entered allmulticast mode
[ 1461.493904][ T2266] delete_channel: no stack
[ 1462.732523][ T2259] syzkaller0: entered promiscuous mode
[ 1462.738290][ T2259] syzkaller0: entered allmulticast mode
[ 1462.749596][ T2265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10052'.
[ 1463.642091][ T2270] delete_channel: no stack
[ 1465.012912][ T2279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10055'.
[ 1465.720746][ T2292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10060'.
[ 1466.281965][ T2305] syzkaller0: entered promiscuous mode
[ 1466.314362][ T2305] syzkaller0: entered allmulticast mode
[ 1467.510200][ T2301] delete_channel: no stack
[ 1467.516258][ T2306] delete_channel: no stack
[ 1467.666757][ T2322] FAULT_INJECTION: forcing a failure.
[ 1467.666757][ T2322] name failslab, interval 1, probability 0, space 0, times 0
[ 1467.679939][ T2322] CPU: 0 PID: 2322 Comm: syz.3.10068 Not tainted syzkaller #0
[ 1467.687438][ T2322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1467.697517][ T2322] Call Trace:
[ 1467.700794][ T2322]  <TASK>
[ 1467.703737][ T2322]  dump_stack_lvl+0x18c/0x250
[ 1467.708439][ T2322]  ? show_regs_print_info+0x20/0x20
[ 1467.713685][ T2322]  ? load_image+0x420/0x420
[ 1467.718212][ T2322]  ? __might_sleep+0xe0/0xe0
[ 1467.722806][ T2322]  ? __lock_acquire+0x7d40/0x7d40
[ 1467.727843][ T2322]  ? is_dynamic_key+0x260/0x260
[ 1467.732700][ T2322]  should_fail_ex+0x39d/0x4d0
[ 1467.737390][ T2322]  should_failslab+0x9/0x20
[ 1467.741901][ T2322]  slab_pre_alloc_hook+0x59/0x310
[ 1467.746930][ T2322]  kmem_cache_alloc_node+0x60/0x320
[ 1467.752123][ T2322]  ? __alloc_skb+0x103/0x2c0
[ 1467.756713][ T2322]  __alloc_skb+0x103/0x2c0
[ 1467.761149][ T2322]  __ip6_append_data+0x2abc/0x3c50
[ 1467.766283][ T2322]  ? ip6_mtu+0x7d/0x3f0
[ 1467.770441][ T2322]  ? rawv6_send_hdrinc+0x1640/0x1640
[ 1467.775727][ T2322]  ? ip6_mtu+0x7d/0x3f0
[ 1467.779878][ T2322]  ? ip6_setup_cork+0xfe0/0xfe0
[ 1467.784738][ T2322]  ip6_append_data+0x1b0/0x350
[ 1467.789523][ T2322]  ? rawv6_send_hdrinc+0x1640/0x1640
[ 1467.794827][ T2322]  rawv6_sendmsg+0x1264/0x1770
[ 1467.799616][ T2322]  ? compat_rawv6_ioctl+0x70/0x70
[ 1467.804665][ T2322]  ? aa_sk_perm+0x83c/0x970
[ 1467.809209][ T2322]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 1467.815630][ T2322]  ? inet_sendmsg+0x7c/0x2f0
[ 1467.820218][ T2322]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1467.825508][ T2322]  ? security_socket_sendmsg+0x80/0xa0
[ 1467.830960][ T2322]  ? inet_send_prepare+0x260/0x260
[ 1467.836072][ T2322]  ____sys_sendmsg+0x5ba/0x960
[ 1467.840833][ T2322]  ? __lock_acquire+0x7d40/0x7d40
[ 1467.845868][ T2322]  ? __asan_memset+0x22/0x40
[ 1467.850454][ T2322]  ? __sys_sendmsg_sock+0x30/0x30
[ 1467.855475][ T2322]  ? __import_iovec+0x3fa/0x850
[ 1467.860329][ T2322]  ? import_iovec+0x73/0xa0
[ 1467.864827][ T2322]  ___sys_sendmsg+0x2a6/0x360
[ 1467.869502][ T2322]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1467.874303][ T2322]  ? __lock_acquire+0x7d40/0x7d40
[ 1467.879520][ T2322]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1467.884366][ T2322]  ? __x64_sys_sendmsg+0x80/0x80
[ 1467.889313][ T2322]  ? lockdep_hardirqs_on+0x98/0x150
[ 1467.894516][ T2322]  do_syscall_64+0x55/0xa0
[ 1467.898930][ T2322]  ? clear_bhb_loop+0x40/0x90
[ 1467.903601][ T2322]  ? clear_bhb_loop+0x40/0x90
[ 1467.908274][ T2322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1467.914196][ T2322] RIP: 0033:0x7fd433d9cdd9
[ 1467.918609][ T2322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1467.938246][ T2322] RSP: 002b:00007fd434ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1467.946667][ T2322] RAX: ffffffffffffffda RBX: 00007fd434015fa0 RCX: 00007fd433d9cdd9
[ 1467.954654][ T2322] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[ 1467.962617][ T2322] RBP: 00007fd434ce4090 R08: 0000000000000000 R09: 0000000000000000
[ 1467.970579][ T2322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1467.978544][ T2322] R13: 00007fd434016038 R14: 00007fd434015fa0 R15: 00007ffcde7212f8
[ 1467.986552][ T2322]  </TASK>
[ 1470.066059][ T2323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10070'.
[ 1470.091521][ T2330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10073'.
[ 1470.364288][  T405] hsr_slave_0: left promiscuous mode
[ 1470.376360][  T405] bridge_slave_1: left allmulticast mode
[ 1470.382063][  T405] bridge_slave_1: left promiscuous mode
[ 1470.390408][  T405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1470.401124][  T405] bridge_slave_0: left allmulticast mode
[ 1470.407042][  T405] bridge_slave_0: left promiscuous mode
[ 1470.412830][  T405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1470.441795][  T405] veth1_macvtap: left allmulticast mode
[ 1470.449445][  T405] veth1_vlan: left promiscuous mode
[ 1470.455440][  T405] veth0_vlan: left promiscuous mode
[ 1471.176238][  T405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1471.223362][  T405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1471.558392][  T405] bond0 (unregistering): Released all slaves
[ 1471.651236][ T2335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10075'.
[ 1471.690444][ T2341] syzkaller0: entered promiscuous mode
[ 1471.700798][ T2341] syzkaller0: entered allmulticast mode
[ 1473.897443][ T2346] delete_channel: no stack
[ 1474.099089][ T2354] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1474.340657][ T2358] syzkaller0: entered promiscuous mode
[ 1474.346454][ T2358] syzkaller0: entered allmulticast mode
[ 1475.335002][ T2359] delete_channel: no stack
[ 1476.558038][  T495] Bluetooth: hci2: command 0x0406 tx timeout
[ 1478.341724][ T2374] syzkaller0: entered promiscuous mode
[ 1478.347503][ T2374] syzkaller0: entered allmulticast mode
[ 1478.415110][ T2385] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1480.648550][ T2395] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1481.162257][ T2412] syzkaller0: entered promiscuous mode
[ 1481.174914][ T2412] syzkaller0: entered allmulticast mode
[ 1481.378496][ T2405] delete_channel: no stack
[ 1482.202963][ T2435] FAULT_INJECTION: forcing a failure.
[ 1482.202963][ T2435] name failslab, interval 1, probability 0, space 0, times 0
[ 1482.216725][ T2435] CPU: 0 PID: 2435 Comm: syz.1.10102 Not tainted syzkaller #0
[ 1482.224265][ T2435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1482.234356][ T2435] Call Trace:
[ 1482.237658][ T2435]  <TASK>
[ 1482.240593][ T2435]  dump_stack_lvl+0x18c/0x250
[ 1482.245292][ T2435]  ? show_regs_print_info+0x20/0x20
[ 1482.250511][ T2435]  ? load_image+0x420/0x420
[ 1482.255029][ T2435]  ? __might_sleep+0xe0/0xe0
[ 1482.259635][ T2435]  ? __lock_acquire+0x7d40/0x7d40
[ 1482.264696][ T2435]  should_fail_ex+0x39d/0x4d0
[ 1482.269393][ T2435]  should_failslab+0x9/0x20
[ 1482.273922][ T2435]  slab_pre_alloc_hook+0x59/0x310
[ 1482.278985][ T2435]  ? __lock_acquire+0x7d40/0x7d40
[ 1482.284022][ T2435]  ? kvmalloc_node+0x70/0x180
[ 1482.288714][ T2435]  ? kvmalloc_node+0x70/0x180
[ 1482.293401][ T2435]  __kmem_cache_alloc_node+0x53/0x250
[ 1482.298784][ T2435]  ? __schedule_delayed_monitor_work+0x200/0x200
[ 1482.305132][ T2435]  ? kvmalloc_node+0x70/0x180
[ 1482.309819][ T2435]  __kmalloc_node+0xa4/0x230
[ 1482.314436][ T2435]  kvmalloc_node+0x70/0x180
[ 1482.318958][ T2435]  bpf_test_run_xdp_live+0x1c2/0x1b20
[ 1482.324373][ T2435]  ? 0xffffffffa00044c0
[ 1482.328543][ T2435]  ? 0xffffffffa00044c0
[ 1482.332713][ T2435]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[ 1482.338618][ T2435]  ? 0xffffffffa00044c0
[ 1482.342802][ T2435]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1482.348429][ T2435]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1482.354687][ T2435]  ? _copy_from_user+0xa5/0xe0
[ 1482.359472][ T2435]  ? bpf_test_init+0x119/0x140
[ 1482.364247][ T2435]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1482.369719][ T2435]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[ 1482.375133][ T2435]  ? dev_put+0x80/0x80
[ 1482.379245][ T2435]  ? dev_put+0x80/0x80
[ 1482.383330][ T2435]  bpf_prog_test_run+0x321/0x390
[ 1482.388288][ T2435]  __sys_bpf+0x49d/0x890
[ 1482.392548][ T2435]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1482.397958][ T2435]  ? lock_chain_count+0x20/0x20
[ 1482.402817][ T2435]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1482.408826][ T2435]  __x64_sys_bpf+0x7c/0x90
[ 1482.413256][ T2435]  do_syscall_64+0x55/0xa0
[ 1482.417685][ T2435]  ? clear_bhb_loop+0x40/0x90
[ 1482.422378][ T2435]  ? clear_bhb_loop+0x40/0x90
[ 1482.427070][ T2435]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1482.432976][ T2435] RIP: 0033:0x7f83c1d9cdd9
[ 1482.437402][ T2435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1482.457015][ T2435] RSP: 002b:00007f83c2b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1482.465441][ T2435] RAX: ffffffffffffffda RBX: 00007f83c2015fa0 RCX: 00007f83c1d9cdd9
[ 1482.473422][ T2435] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1482.481400][ T2435] RBP: 00007f83c2b84090 R08: 0000000000000000 R09: 0000000000000000
[ 1482.489377][ T2435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1482.497353][ T2435] R13: 00007f83c2016038 R14: 00007f83c2015fa0 R15: 00007ffee7c417c8
[ 1482.505366][ T2435]  </TASK>
[ 1484.083715][ T2423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10098'.
[ 1484.093503][ T2427] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1484.111071][ T2439] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1484.268717][ T2443] syzkaller0: entered promiscuous mode
[ 1484.274265][ T2443] syzkaller0: entered allmulticast mode
[ 1484.724149][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.747355][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1486.240002][ T2448] syzkaller0: entered promiscuous mode
[ 1486.245640][ T2448] syzkaller0: entered allmulticast mode
[ 1488.443076][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1488.450780][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1488.463614][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1488.473681][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1488.483230][ T2460] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1488.490809][ T2460] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1489.332244][ T2485] delete_channel: no stack
[ 1489.592614][ T2490] syzkaller0: entered promiscuous mode
[ 1489.604589][ T2490] syzkaller0: entered allmulticast mode
[ 1492.042265][ T2497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10118'.
[ 1492.051848][ T2504] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1492.236723][ T2518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10121'.
[ 1495.241927][ T2540] syzkaller0: entered promiscuous mode
[ 1495.248557][ T2540] syzkaller0: entered allmulticast mode
[ 1495.321275][ T2551] syzkaller0: entered promiscuous mode
[ 1495.327014][ T2551] syzkaller0: entered allmulticast mode
[ 1499.044608][ T2555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10132'.
[ 1499.208433][ T2569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10137'.
[ 1499.848901][ T2584] netlink: 'syz.3.10141': attribute type 10 has an invalid length.
[ 1502.427632][ T2601] syzkaller0: entered promiscuous mode
[ 1502.433211][ T2601] syzkaller0: entered allmulticast mode
[ 1504.162232][ T2600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10146'.
[ 1504.171797][ T2600] hsr_slave_0: left promiscuous mode
[ 1504.178025][ T2600] hsr_slave_1: left promiscuous mode
[ 1504.317451][ T2603] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1504.561100][ T2621] netlink: 'syz.0.10150': attribute type 10 has an invalid length.
[ 1505.035445][ T2633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10163'.
[ 1505.073973][ T2637] bond0: entered promiscuous mode
[ 1505.080265][ T2637] bond_slave_0: entered promiscuous mode
[ 1505.114459][ T2637] bond_slave_1: entered promiscuous mode
[ 1505.147623][ T2637] mac80211_hwsim hwsim383 wlan1: entered promiscuous mode
[ 1505.179406][ T2637] bond0: entered allmulticast mode
[ 1505.213492][ T2637] bond_slave_0: entered allmulticast mode
[ 1505.230519][ T2637] bond_slave_1: entered allmulticast mode
[ 1505.254118][ T2637] mac80211_hwsim hwsim383 wlan1: entered allmulticast mode
[ 1505.622277][ T2634] syzkaller0: entered promiscuous mode
[ 1505.650908][ T2634] syzkaller0: entered allmulticast mode
[ 1509.913342][ T2653] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1510.179678][ T2679] bond0: entered promiscuous mode
[ 1510.185338][ T2679] bond_slave_0: entered promiscuous mode
[ 1510.192016][ T2679] bond_slave_1: entered promiscuous mode
[ 1510.199028][ T2679] mac80211_hwsim hwsim387 wlan1: entered promiscuous mode
[ 1510.207829][ T2679] bond0: entered allmulticast mode
[ 1510.213170][ T2679] bond_slave_0: entered allmulticast mode
[ 1510.231971][ T2679] bond_slave_1: entered allmulticast mode
[ 1510.251617][ T2679] mac80211_hwsim hwsim387 wlan1: entered allmulticast mode
[ 1510.309183][ T2673] syzkaller0: entered promiscuous mode
[ 1510.316219][ T2673] syzkaller0: entered allmulticast mode
[ 1510.531817][ T2685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10168'.
[ 1515.545181][ T2705] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1515.563780][ T2703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10174'.
[ 1515.573932][ T2703] hsr_slave_0: left promiscuous mode
[ 1515.581868][ T2703] hsr_slave_1: left promiscuous mode
[ 1515.839001][ T2715] syzkaller0: entered promiscuous mode
[ 1515.845958][ T2715] syzkaller0: entered allmulticast mode
[ 1515.942390][ T2719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10176'.
[ 1517.840221][  T405] bond0: (slave wlan1): Releasing backup interface
[ 1518.046173][  T405] hsr_slave_1: left promiscuous mode
[ 1518.064950][  T405] team0: left allmulticast mode
[ 1518.075986][  T405] team_slave_1: left allmulticast mode
[ 1518.081522][  T405] team0: left promiscuous mode
[ 1518.094611][  T405] team_slave_1: left promiscuous mode
[ 1518.105075][  T405] bridge0: port 3(team0) entered disabled state
[ 1518.130849][  T405] bridge_slave_1: left allmulticast mode
[ 1518.141498][  T405] bridge_slave_1: left promiscuous mode
[ 1518.158645][  T405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1518.189592][  T405] bridge_slave_0: left allmulticast mode
[ 1518.196754][  T405] bridge_slave_0: left promiscuous mode
[ 1518.209599][  T405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.721638][  T405] team0 (unregistering): Port device team_slave_1 removed
[ 1518.831518][  T405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1518.903631][  T405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1519.212661][  T405] bond0 (unregistering): Released all slaves
[ 1519.308690][ T2736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10188'.
[ 1519.729333][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1519.896543][ T2755] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1520.162665][ T2761] syzkaller0: entered promiscuous mode
[ 1520.178958][ T2761] syzkaller0: entered allmulticast mode
[ 1522.799062][ T2784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10194'.
[ 1522.809325][ T2793] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1522.984818][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1523.191832][ T2803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10202'.
[ 1523.749028][ T2842] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1524.228850][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1524.538706][ T2860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10216'.
[ 1524.985029][ T2869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10218'.
[ 1525.168871][ T2868] netlink: 'syz.3.10220': attribute type 19 has an invalid length.
[ 1525.224629][ T2868] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10220'.
[ 1525.420416][ T2880] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1525.611554][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1525.766078][ T2892] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.10228'.
[ 1525.800276][ T2895] FAULT_INJECTION: forcing a failure.
[ 1525.800276][ T2895] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1525.813933][ T2895] CPU: 0 PID: 2895 Comm: syz.3.10229 Not tainted syzkaller #0
[ 1525.821434][ T2895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1525.831514][ T2895] Call Trace:
[ 1525.834818][ T2895]  <TASK>
[ 1525.837764][ T2895]  dump_stack_lvl+0x18c/0x250
[ 1525.842481][ T2895]  ? show_regs_print_info+0x20/0x20
[ 1525.847718][ T2895]  ? load_image+0x420/0x420
[ 1525.852262][ T2895]  ? __lock_acquire+0x7d40/0x7d40
[ 1525.857333][ T2895]  should_fail_ex+0x39d/0x4d0
[ 1525.862048][ T2895]  prepare_alloc_pages+0x1e2/0x5f0
[ 1525.867179][ T2895]  __alloc_pages+0x134/0x460
[ 1525.871813][ T2895]  ? zone_statistics+0x170/0x170
[ 1525.876761][ T2895]  ? __mod_lruvec_page_state+0xa5/0x410
[ 1525.882317][ T2895]  ? do_raw_spin_unlock+0x121/0x230
[ 1525.887551][ T2895]  ? __pmd_alloc+0x68b/0x8b0
[ 1525.892166][ T2895]  pte_alloc_one+0x84/0x530
[ 1525.896673][ T2895]  ? pfn_modify_allowed+0x560/0x560
[ 1525.901884][ T2895]  ? hugepage_vma_check+0x488/0x5a0
[ 1525.907093][ T2895]  handle_mm_fault+0x31b3/0x4c00
[ 1525.912027][ T2895]  ? handle_mm_fault+0xe7/0x4c00
[ 1525.916978][ T2895]  ? numa_migrate_prep+0x350/0x350
[ 1525.922097][ T2895]  ? lock_mm_and_find_vma+0x9c/0x2f0
[ 1525.927375][ T2895]  do_user_addr_fault+0x730/0x12c0
[ 1525.932514][ T2895]  exc_page_fault+0x64/0x100
[ 1525.937126][ T2895]  asm_exc_page_fault+0x26/0x30
[ 1525.941991][ T2895] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 1525.947799][ T2895] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[ 1525.967414][ T2895] RSP: 0018:ffffc90004db7b90 EFLAGS: 00050202
[ 1525.973479][ T2895] RAX: ffffffff842a2a01 RBX: 0000000000000018 RCX: 0000000000000018
[ 1525.981445][ T2895] RDX: 0000000000000001 RSI: 000000110c230020 RDI: ffffc90004db7c20
[ 1525.989412][ T2895] RBP: ffffc90004db7d88 R08: ffffc90004db7c37 R09: 1ffff920009b6f86
[ 1525.997376][ T2895] R10: dffffc0000000000 R11: fffff520009b6f87 R12: 000000110c230038
[ 1526.005343][ T2895] R13: 1ffff11008466995 R14: ffffc90004db7c20 R15: 000000110c230020
[ 1526.013322][ T2895]  ? _copy_from_user+0x11/0xe0
[ 1526.018182][ T2895]  _copy_from_user+0x8b/0xe0
[ 1526.022771][ T2895]  ipip6_tunnel_siocdevprivate+0x5ff/0x16f0
[ 1526.028657][ T2895]  ? do_raw_spin_unlock+0x121/0x230
[ 1526.033852][ T2895]  ? sit_tunnel_xmit+0x2010/0x2010
[ 1526.038965][ T2895]  ? __mutex_lock+0x956/0xcc0
[ 1526.043635][ T2895]  ? __mutex_lock+0x4f9/0xcc0
[ 1526.048307][ T2895]  ? dev_ioctl+0x83c/0x1140
[ 1526.052811][ T2895]  ? mutex_lock_nested+0x20/0x20
[ 1526.057743][ T2895]  ? full_name_hash+0x92/0xe0
[ 1526.062443][ T2895]  ? dev_ifsioc+0x958/0xc40
[ 1526.066944][ T2895]  dev_ioctl+0x84c/0x1140
[ 1526.071281][ T2895]  sock_ioctl+0x74c/0x7e0
[ 1526.075612][ T2895]  ? sock_poll+0x3e0/0x3e0
[ 1526.080033][ T2895]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1526.084986][ T2895]  ? security_file_ioctl+0x80/0xa0
[ 1526.090099][ T2895]  ? sock_poll+0x3e0/0x3e0
[ 1526.094514][ T2895]  __se_sys_ioctl+0xfd/0x170
[ 1526.099102][ T2895]  do_syscall_64+0x55/0xa0
[ 1526.103510][ T2895]  ? clear_bhb_loop+0x40/0x90
[ 1526.108220][ T2895]  ? clear_bhb_loop+0x40/0x90
[ 1526.112893][ T2895]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1526.118791][ T2895] RIP: 0033:0x7fd433d9cdd9
[ 1526.123201][ T2895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1526.142804][ T2895] RSP: 002b:00007fd434ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1526.151221][ T2895] RAX: ffffffffffffffda RBX: 00007fd434015fa0 RCX: 00007fd433d9cdd9
[ 1526.159204][ T2895] RDX: 0000200000000900 RSI: 00000000000089fb RDI: 0000000000000004
[ 1526.167168][ T2895] RBP: 00007fd434ce4090 R08: 0000000000000000 R09: 0000000000000000
[ 1526.175134][ T2895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1526.183098][ T2895] R13: 00007fd434016038 R14: 00007fd434015fa0 R15: 00007ffcde7212f8
[ 1526.191094][ T2895]  </TASK>
[ 1526.257888][T16253] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4
[ 1526.778431][ T2907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10233'.
[ 1527.094343][ T2908] syzkaller0: entered promiscuous mode
[ 1527.101626][ T2908] syzkaller0: entered allmulticast mode
[ 1527.292641][ T2923] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1529.663941][T16253] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[ 1530.132329][ T2951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10247'.
[ 1530.310205][T16253] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1530.328962][T16253] Bluetooth: hci2: Injecting HCI hardware error event
[ 1530.339501][  T495] Bluetooth: hci2: hardware error 0x00
[ 1530.365862][ T2962] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1530.409452][ T2965] FAULT_INJECTION: forcing a failure.
[ 1530.409452][ T2965] name failslab, interval 1, probability 0, space 0, times 0
[ 1530.422182][ T2965] CPU: 1 PID: 2965 Comm: syz.1.10253 Not tainted syzkaller #0
[ 1530.429648][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1530.439699][ T2965] Call Trace:
[ 1530.442971][ T2965]  <TASK>
[ 1530.445896][ T2965]  dump_stack_lvl+0x18c/0x250
[ 1530.450577][ T2965]  ? show_regs_print_info+0x20/0x20
[ 1530.455791][ T2965]  ? load_image+0x420/0x420
[ 1530.460297][ T2965]  should_fail_ex+0x39d/0x4d0
[ 1530.464973][ T2965]  should_failslab+0x9/0x20
[ 1530.469470][ T2965]  slab_pre_alloc_hook+0x59/0x310
[ 1530.474499][ T2965]  ? verify_lock_unused+0x140/0x140
[ 1530.479702][ T2965]  kmem_cache_alloc+0x5a/0x2d0
[ 1530.484461][ T2965]  ? skb_clone+0x1eb/0x370
[ 1530.488878][ T2965]  skb_clone+0x1eb/0x370
[ 1530.493112][ T2965]  bpf_clone_redirect+0x167/0x4a0
[ 1530.498139][ T2965]  bpf_prog_bf17f61a12bc632f+0x5e/0x63
[ 1530.503591][ T2965]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1530.509577][ T2965]  ? lock_chain_count+0x20/0x20
[ 1530.514428][ T2965]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 1530.520665][ T2965]  ? lockdep_softirqs_on+0x580/0x580
[ 1530.525943][ T2965]  ? ktime_get+0x7f/0x280
[ 1530.530265][ T2965]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 1530.536500][ T2965]  ? ktime_get_real_ts64+0x440/0x440
[ 1530.541777][ T2965]  ? __x64_sys_bpf+0x7c/0x90
[ 1530.546366][ T2965]  ? __local_bh_disable_ip+0x108/0x1a0
[ 1530.551821][ T2965]  ? __cant_sleep+0x220/0x220
[ 1530.556496][ T2965]  ? read_tsc+0x9/0x20
[ 1530.560555][ T2965]  ? ktime_get+0x24b/0x280
[ 1530.564965][ T2965]  ? bpf_test_run+0x174/0x870
[ 1530.569664][ T2965]  bpf_test_run+0x2df/0x870
[ 1530.574169][ T2965]  ? bpf_test_run+0x174/0x870
[ 1530.578839][ T2965]  ? convert___skb_to_skb+0x590/0x590
[ 1530.584206][ T2965]  ? eth_get_headlen+0x210/0x210
[ 1530.589143][ T2965]  ? slab_build_skb+0x25f/0x3f0
[ 1530.593980][ T2965]  ? convert___skb_to_skb+0x3d/0x590
[ 1530.599258][ T2965]  bpf_prog_test_run_skb+0xad2/0x12b0
[ 1530.604638][ T2965]  ? cpu_online+0x60/0x60
[ 1530.608959][ T2965]  bpf_prog_test_run+0x321/0x390
[ 1530.613893][ T2965]  __sys_bpf+0x49d/0x890
[ 1530.618214][ T2965]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1530.623585][ T2965]  ? lock_chain_count+0x20/0x20
[ 1530.628438][ T2965]  __x64_sys_bpf+0x7c/0x90
[ 1530.632851][ T2965]  do_syscall_64+0x55/0xa0
[ 1530.637275][ T2965]  ? clear_bhb_loop+0x40/0x90
[ 1530.641967][ T2965]  ? clear_bhb_loop+0x40/0x90
[ 1530.646648][ T2965]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1530.652539][ T2965] RIP: 0033:0x7f83c1d9cdd9
[ 1530.656952][ T2965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1530.676557][ T2965] RSP: 002b:00007f83c2b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1530.684964][ T2965] RAX: ffffffffffffffda RBX: 00007f83c2015fa0 RCX: 00007f83c1d9cdd9
[ 1530.692929][ T2965] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1530.700894][ T2965] RBP: 00007f83c2b84090 R08: 0000000000000000 R09: 0000000000000000
[ 1530.708867][ T2965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1530.716837][ T2965] R13: 00007f83c2016038 R14: 00007f83c2015fa0 R15: 00007ffee7c417c8
[ 1530.724826][ T2965]  </TASK>
[ 1531.346548][ T2988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10260'.
[ 1531.675149][ T3004] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1531.695295][ T3002] netlink: 'syz.2.10263': attribute type 19 has an invalid length.
[ 1531.703658][ T3002] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10263'.
[ 1532.276633][ T3032] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1532.420239][ T3036] netlink: 'syz.0.10280': attribute type 19 has an invalid length.
[ 1532.432904][ T3036] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10280'.
[ 1532.464915][  T495] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1532.921096][ T3051] syzkaller0: entered promiscuous mode
[ 1532.934667][ T3051] syzkaller0: entered allmulticast mode
[ 1532.968993][ T3056] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1536.008275][ T3064] netlink: 'syz.1.10291': attribute type 19 has an invalid length.
[ 1536.036673][ T3064] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10291'.
[ 1536.317535][ T3084] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1537.342473][ T3124] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1537.555309][ T3137] FAULT_INJECTION: forcing a failure.
[ 1537.555309][ T3137] name failslab, interval 1, probability 0, space 0, times 0
[ 1537.568058][ T3137] CPU: 1 PID: 3137 Comm: syz.1.10318 Not tainted syzkaller #0
[ 1537.575548][ T3137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1537.585632][ T3137] Call Trace:
[ 1537.589025][ T3137]  <TASK>
[ 1537.591975][ T3137]  dump_stack_lvl+0x18c/0x250
[ 1537.596671][ T3137]  ? show_regs_print_info+0x20/0x20
[ 1537.601872][ T3137]  ? load_image+0x420/0x420
[ 1537.606381][ T3137]  should_fail_ex+0x39d/0x4d0
[ 1537.611075][ T3137]  should_failslab+0x9/0x20
[ 1537.615605][ T3137]  slab_pre_alloc_hook+0x59/0x310
[ 1537.620636][ T3137]  ? nf_ct_ext_add+0x1ab/0x440
[ 1537.625432][ T3137]  ? nf_ct_ext_add+0x1ab/0x440
[ 1537.630220][ T3137]  __kmem_cache_alloc_node+0x53/0x250
[ 1537.635628][ T3137]  ? nf_ct_ext_add+0x1ab/0x440
[ 1537.640418][ T3137]  __kmalloc_node_track_caller+0xa2/0x230
[ 1537.646177][ T3137]  krealloc+0x86/0x120
[ 1537.650283][ T3137]  nf_ct_ext_add+0x1ab/0x440
[ 1537.654911][ T3137]  init_conntrack+0x69c/0xf10
[ 1537.659627][ T3137]  ? early_drop+0x7f0/0x7f0
[ 1537.664161][ T3137]  ? nf_conntrack_find_get+0x650/0x650
[ 1537.669647][ T3137]  ? __siphash_unaligned+0x22e/0x3a0
[ 1537.674976][ T3137]  nf_conntrack_in+0xc06/0x15c0
[ 1537.679881][ T3137]  ? nf_ct_pernet+0x270/0x270
[ 1537.684591][ T3137]  ? ip6t_do_table+0x1d9/0x1510
[ 1537.689058][ T3139] syzkaller0: entered promiscuous mode
[ 1537.689452][ T3137]  ? ip6t_alloc_initial_table+0x640/0x640
[ 1537.695154][ T3139] syzkaller0: entered allmulticast mode
[ 1537.700625][ T3137]  ? ipv6_defrag+0x2d6/0x3a0
[ 1537.710785][ T3137]  ? ipv6_conntrack_in+0x20/0x20
[ 1537.715743][ T3137]  nf_hook_slow+0xbd/0x200
[ 1537.720194][ T3137]  __ip6_local_out+0x784/0x8a0
[ 1537.724987][ T3137]  ? __ip6_local_out+0x60c/0x8a0
[ 1537.729962][ T3137]  ? ip6_dst_hoplimit+0x350/0x350
[ 1537.735008][ T3137]  ? __ip6_local_out+0x8a0/0x8a0
[ 1537.739953][ T3137]  ? read_lock_is_recursive+0x20/0x20
[ 1537.745336][ T3137]  ? csum_partial+0x241/0x2c0
[ 1537.750104][ T3137]  ip6_local_out+0x2a/0x130
[ 1537.754623][ T3137]  ? ip6_send_skb+0x10f/0x380
[ 1537.759316][ T3137]  ip6_send_skb+0x1d5/0x380
[ 1537.763826][ T3137]  ping_v6_sendmsg+0xf2e/0x11f0
[ 1537.768681][ T3137]  ? ping_v6_pre_connect+0x30/0x30
[ 1537.773800][ T3137]  ? inet_sendmsg+0x14b/0x2f0
[ 1537.778485][ T3137]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1537.783856][ T3137]  ? lockdep_hardirqs_on+0x98/0x150
[ 1537.789056][ T3137]  ? _local_bh_enable+0xa0/0xa0
[ 1537.793903][ T3137]  ? do_raw_spin_unlock+0x121/0x230
[ 1537.799109][ T3137]  ? inet_sendmsg+0x14b/0x2f0
[ 1537.803815][ T3137]  ? inet_sendmsg+0x14b/0x2f0
[ 1537.808504][ T3137]  ? inet_send_prepare+0x260/0x260
[ 1537.813649][ T3137]  ____sys_sendmsg+0x5ba/0x960
[ 1537.818419][ T3137]  ? __lock_acquire+0x7d40/0x7d40
[ 1537.823447][ T3137]  ? __asan_memset+0x22/0x40
[ 1537.828035][ T3137]  ? __sys_sendmsg_sock+0x30/0x30
[ 1537.833053][ T3137]  ? __import_iovec+0x5f2/0x850
[ 1537.837907][ T3137]  ? import_iovec+0x73/0xa0
[ 1537.842433][ T3137]  ___sys_sendmsg+0x2a6/0x360
[ 1537.847122][ T3137]  ? get_pid_task+0x20/0x1e0
[ 1537.851727][ T3137]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1537.856524][ T3137]  ? __lock_acquire+0x7d40/0x7d40
[ 1537.861581][ T3137]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1537.866440][ T3137]  ? __x64_sys_sendmsg+0x80/0x80
[ 1537.871393][ T3137]  ? lockdep_hardirqs_on+0x98/0x150
[ 1537.876595][ T3137]  do_syscall_64+0x55/0xa0
[ 1537.881016][ T3137]  ? clear_bhb_loop+0x40/0x90
[ 1537.885708][ T3137]  ? clear_bhb_loop+0x40/0x90
[ 1537.890399][ T3137]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1537.896298][ T3137] RIP: 0033:0x7f83c1d9cdd9
[ 1537.900716][ T3137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1537.920325][ T3137] RSP: 002b:00007f83c2b84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1537.928745][ T3137] RAX: ffffffffffffffda RBX: 00007f83c2015fa0 RCX: 00007f83c1d9cdd9
[ 1537.936719][ T3137] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1537.944690][ T3137] RBP: 00007f83c2b84090 R08: 0000000000000000 R09: 0000000000000000
[ 1537.952660][ T3137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1537.960625][ T3137] R13: 00007f83c2016038 R14: 00007f83c2015fa0 R15: 00007ffee7c417c8
[ 1537.968615][ T3137]  </TASK>
[ 1540.029436][ T3155] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1540.261470][ T3164] FAULT_INJECTION: forcing a failure.
[ 1540.261470][ T3164] name failslab, interval 1, probability 0, space 0, times 0
[ 1540.278143][ T3164] CPU: 0 PID: 3164 Comm: syz.2.10327 Not tainted syzkaller #0
[ 1540.285695][ T3164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1540.295809][ T3164] Call Trace:
[ 1540.299112][ T3164]  <TASK>
[ 1540.302064][ T3164]  dump_stack_lvl+0x18c/0x250
[ 1540.306799][ T3164]  ? show_regs_print_info+0x20/0x20
[ 1540.312131][ T3164]  ? load_image+0x420/0x420
[ 1540.316673][ T3164]  ? __might_sleep+0xe0/0xe0
[ 1540.321289][ T3164]  ? __lock_acquire+0x7d40/0x7d40
[ 1540.326353][ T3164]  should_fail_ex+0x39d/0x4d0
[ 1540.331170][ T3164]  should_failslab+0x9/0x20
[ 1540.335717][ T3164]  slab_pre_alloc_hook+0x59/0x310
[ 1540.340795][ T3164]  ? __lock_acquire+0x7d40/0x7d40
[ 1540.345887][ T3164]  kmem_cache_alloc_node+0x60/0x320
[ 1540.351113][ T3164]  ? __alloc_skb+0x103/0x2c0
[ 1540.355753][ T3164]  __alloc_skb+0x103/0x2c0
[ 1540.360205][ T3164]  netlink_sendmsg+0x66a/0xbf0
[ 1540.364999][ T3164]  ? lockdep_hardirqs_on+0x98/0x150
[ 1540.370245][ T3164]  ? netlink_getsockopt+0x590/0x590
[ 1540.375484][ T3164]  ? aa_sock_msg_perm+0x94/0x150
[ 1540.380455][ T3164]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1540.385766][ T3164]  ? security_socket_sendmsg+0x80/0xa0
[ 1540.391247][ T3164]  ? netlink_getsockopt+0x590/0x590
[ 1540.396481][ T3164]  ____sys_sendmsg+0x5ba/0x960
[ 1540.401291][ T3164]  ? __asan_memset+0x22/0x40
[ 1540.405915][ T3164]  ? __sys_sendmsg_sock+0x30/0x30
[ 1540.410959][ T3164]  ? __import_iovec+0x5f2/0x850
[ 1540.415863][ T3164]  ? import_iovec+0x73/0xa0
[ 1540.420397][ T3164]  ___sys_sendmsg+0x2a6/0x360
[ 1540.425116][ T3164]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1540.430039][ T3164]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1540.434921][ T3164]  ? __x64_sys_sendmsg+0x80/0x80
[ 1540.439930][ T3164]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1540.445857][ T3164]  do_syscall_64+0x55/0xa0
[ 1540.450291][ T3164]  ? clear_bhb_loop+0x40/0x90
[ 1540.454988][ T3164]  ? clear_bhb_loop+0x40/0x90
[ 1540.459691][ T3164]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1540.465624][ T3164] RIP: 0033:0x7f5cd039cdd9
[ 1540.470085][ T3164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1540.489737][ T3164] RSP: 002b:00007f5cd1252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1540.498186][ T3164] RAX: ffffffffffffffda RBX: 00007f5cd0615fa0 RCX: 00007f5cd039cdd9
[ 1540.506179][ T3164] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 000000000000000e
[ 1540.514166][ T3164] RBP: 00007f5cd1252090 R08: 0000000000000000 R09: 0000000000000000
[ 1540.522159][ T3164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1540.530416][ T3164] R13: 00007f5cd0616038 R14: 00007f5cd0615fa0 R15: 00007fff8e14b5a8
[ 1540.538462][ T3164]  </TASK>
[ 1540.980558][ T3182] syzkaller0: entered promiscuous mode
[ 1540.986570][ T3182] syzkaller0: entered allmulticast mode
[ 1541.000435][ T3184] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1543.479067][ T3186] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1543.852866][ T3226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10348'.
[ 1544.209869][ T3242] syzkaller0: entered promiscuous mode
[ 1544.215573][ T3242] syzkaller0: entered allmulticast mode
[ 1546.155593][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.163848][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.568276][ T3247] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1546.590209][ T3254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1546.597629][ T3254] IPv6: NLM_F_CREATE should be set when creating new route
[ 1546.605067][ T3254] IPv6: NLM_F_CREATE should be set when creating new route
[ 1546.612318][ T3254] IPv6: NLM_F_CREATE should be set when creating new route
[ 1546.639574][ T3262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10361'.
[ 1546.860703][ T3269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10362'.
[ 1547.325213][ T3287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10371'.
[ 1547.582431][ T3298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10373'.
[ 1548.038207][ T3315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10381'.
[ 1548.413870][ T3328] netlink: 'syz.2.10386': attribute type 13 has an invalid length.
[ 1548.427436][ T3328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10386'.
[ 1548.441591][ T3328] syz_tun: refused to change device tx_queue_len
[ 1548.454880][ T3328] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1548.499557][ T3326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10383'.
[ 1548.561329][ T3329] netlink: 'syz.2.10386': attribute type 10 has an invalid length.
[ 1548.578978][ T3329] FAULT_INJECTION: forcing a failure.
[ 1548.578978][ T3329] name failslab, interval 1, probability 0, space 0, times 0
[ 1548.615144][ T3329] CPU: 0 PID: 3329 Comm: syz.2.10386 Not tainted syzkaller #0
[ 1548.622725][ T3329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1548.633035][ T3329] Call Trace:
[ 1548.636390][ T3329]  <TASK>
[ 1548.639384][ T3329]  dump_stack_lvl+0x18c/0x250
[ 1548.644165][ T3329]  ? trace_event_raw_event_lock+0x250/0x250
[ 1548.650200][ T3329]  ? show_regs_print_info+0x20/0x20
[ 1548.655494][ T3329]  ? load_image+0x420/0x420
[ 1548.660173][ T3329]  should_fail_ex+0x39d/0x4d0
[ 1548.664972][ T3329]  should_failslab+0x9/0x20
[ 1548.669610][ T3329]  slab_pre_alloc_hook+0x59/0x310
[ 1548.674749][ T3329]  kmem_cache_alloc_node+0x60/0x320
[ 1548.680030][ T3329]  ? __alloc_skb+0x103/0x2c0
[ 1548.684754][ T3329]  __alloc_skb+0x103/0x2c0
[ 1548.689272][ T3329]  rtmsg_ifinfo_build_skb+0x8c/0x260
[ 1548.694692][ T3329]  rtmsg_ifinfo+0x8c/0x1a0
[ 1548.699231][ T3329]  __dev_notify_flags+0xf3/0x310
[ 1548.704281][ T3329]  ? __dev_change_flags+0x6a0/0x6a0
[ 1548.709561][ T3329]  ? __dev_change_flags+0x4d4/0x6a0
[ 1548.714871][ T3329]  ? vprintk_emit+0x53d/0x610
[ 1548.719634][ T3329]  ? dev_get_flags+0x1c0/0x1c0
[ 1548.724487][ T3329]  ? printk_sprint+0x460/0x460
[ 1548.729326][ T3329]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1548.735278][ T3329]  ? _raw_spin_unlock+0x40/0x40
[ 1548.740172][ T3329]  dev_change_flags+0xe8/0x1a0
[ 1548.745035][ T3329]  do_setlink+0xc58/0x4130
[ 1548.749552][ T3329]  ? arch_stack_walk+0x160/0x190
[ 1548.754611][ T3329]  ? load_image+0x420/0x420
[ 1548.759245][ T3329]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 1548.765484][ T3329]  ? stack_trace_save+0xaa/0x100
[ 1548.770550][ T3329]  ? __nla_validate_parse+0x2522/0x2ea0
[ 1548.776176][ T3329]  ? ___slab_alloc+0x10d9/0x12f0
[ 1548.781335][ T3329]  ? __nla_validate+0x50/0x50
[ 1548.786181][ T3329]  ? validate_linkmsg+0x719/0x910
[ 1548.791265][ T3329]  rtnl_newlink+0x17da/0x20a0
[ 1548.796087][ T3329]  ? rtnl_newlink+0x4b1/0x20a0
[ 1548.801054][ T3329]  ? rtnl_setlink+0x4e0/0x4e0
[ 1548.805815][ T3329]  ? __rwlock_init+0x150/0x150
[ 1548.810673][ T3329]  ? do_raw_spin_unlock+0x121/0x230
[ 1548.815936][ T3329]  ? __mutex_lock+0x956/0xcc0
[ 1548.820633][ T3329]  ? __mutex_lock+0x4f9/0xcc0
[ 1548.825393][ T3329]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1548.830529][ T3329]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1548.835680][ T3329]  ? rtnl_setlink+0x4e0/0x4e0
[ 1548.840401][ T3329]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1548.845412][ T3329]  ? rtnetlink_bind+0x80/0x80
[ 1548.850172][ T3329]  ? trace_call_bpf+0xc3/0x6c0
[ 1548.855014][ T3329]  ? trace_call_bpf+0xc3/0x6c0
[ 1548.859821][ T3329]  ? __lock_acquire+0x7d40/0x7d40
[ 1548.864876][ T3329]  ? mark_lock+0x94/0x320
[ 1548.869260][ T3329]  ? trace_call_bpf+0xc3/0x6c0
[ 1548.874056][ T3329]  ? trace_call_bpf+0xc3/0x6c0
[ 1548.878857][ T3329]  ? trace_call_bpf+0x5e9/0x6c0
[ 1548.883730][ T3329]  ? trace_call_bpf+0xc3/0x6c0
[ 1548.888540][ T3329]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 1548.894723][ T3329]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1548.900591][ T3329]  ? perf_trace_lock+0x304/0x3b0
[ 1548.905583][ T3329]  netlink_rcv_skb+0x241/0x4d0
[ 1548.910382][ T3329]  ? rtnetlink_bind+0x80/0x80
[ 1548.915086][ T3329]  ? netlink_ack+0x1180/0x1180
[ 1548.919913][ T3329]  ? __lock_acquire+0x7d40/0x7d40
[ 1548.925000][ T3329]  ? net_generic+0x1e/0x240
[ 1548.929569][ T3329]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1548.934837][ T3329]  netlink_unicast+0x751/0x8d0
[ 1548.939657][ T3329]  netlink_sendmsg+0x8d0/0xbf0
[ 1548.944471][ T3329]  ? perf_trace_lock+0x304/0x3b0
[ 1548.949476][ T3329]  ? netlink_getsockopt+0x590/0x590
[ 1548.954749][ T3329]  ? aa_sock_msg_perm+0x94/0x150
[ 1548.959740][ T3329]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1548.965044][ T3329]  ? security_socket_sendmsg+0x80/0xa0
[ 1548.970549][ T3329]  ? netlink_getsockopt+0x590/0x590
[ 1548.975791][ T3329]  ____sys_sendmsg+0x5ba/0x960
[ 1548.980620][ T3329]  ? __asan_memset+0x22/0x40
[ 1548.985259][ T3329]  ? __sys_sendmsg_sock+0x30/0x30
[ 1548.990302][ T3329]  ? __import_iovec+0x3fa/0x850
[ 1548.995199][ T3329]  ? import_iovec+0x73/0xa0
[ 1548.999767][ T3329]  ___sys_sendmsg+0x2a6/0x360
[ 1549.004515][ T3329]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1549.009389][ T3329]  ? __lock_acquire+0x7d40/0x7d40
[ 1549.014598][ T3329]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1549.019510][ T3329]  ? __x64_sys_sendmsg+0x80/0x80
[ 1549.024593][ T3329]  ? lockdep_hardirqs_on+0x98/0x150
[ 1549.029895][ T3329]  do_syscall_64+0x55/0xa0
[ 1549.034356][ T3329]  ? clear_bhb_loop+0x40/0x90
[ 1549.039052][ T3329]  ? clear_bhb_loop+0x40/0x90
[ 1549.043760][ T3329]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1549.049672][ T3329] RIP: 0033:0x7f5cd039cdd9
[ 1549.054108][ T3329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1549.073740][ T3329] RSP: 002b:00007f5cd1231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1549.082218][ T3329] RAX: ffffffffffffffda RBX: 00007f5cd0616090 RCX: 00007f5cd039cdd9
[ 1549.090236][ T3329] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 000000000000000b
[ 1549.098232][ T3329] RBP: 00007f5cd1231090 R08: 0000000000000000 R09: 0000000000000000
[ 1549.106248][ T3329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1549.114258][ T3329] R13: 00007f5cd0616128 R14: 00007f5cd0616090 R15: 00007fff8e14b5a8
[ 1549.122292][ T3329]  </TASK>
[ 1549.157282][ T3329] team0: Port device netdevsim0 added
[ 1549.177018][ T3334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10387'.
[ 1549.525392][ T3348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10391'.
[ 1550.076841][ T3371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10397'.
[ 1550.416354][ T3385] syzkaller0: entered promiscuous mode
[ 1550.421912][ T3385] syzkaller0: entered allmulticast mode
[ 1553.163492][ T3399] netlink: 'syz.0.10407': attribute type 1 has an invalid length.
[ 1553.171528][ T3399] netlink: 'syz.0.10407': attribute type 4 has an invalid length.
[ 1553.179391][ T3399] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10407'.
[ 1553.654390][ T3411] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1553.678315][ T3415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10411'.
[ 1553.935625][ T3422] FAULT_INJECTION: forcing a failure.
[ 1553.935625][ T3422] name failslab, interval 1, probability 0, space 0, times 0
[ 1553.994608][ T3422] CPU: 0 PID: 3422 Comm: syz.3.10415 Not tainted syzkaller #0
[ 1554.002121][ T3422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1554.012196][ T3422] Call Trace:
[ 1554.015498][ T3422]  <TASK>
[ 1554.018444][ T3422]  dump_stack_lvl+0x18c/0x250
[ 1554.023146][ T3422]  ? show_regs_print_info+0x20/0x20
[ 1554.028346][ T3422]  ? load_image+0x420/0x420
[ 1554.032861][ T3422]  ? __might_sleep+0xe0/0xe0
[ 1554.037449][ T3422]  ? __lock_acquire+0x7d40/0x7d40
[ 1554.042475][ T3422]  should_fail_ex+0x39d/0x4d0
[ 1554.047154][ T3422]  should_failslab+0x9/0x20
[ 1554.051673][ T3422]  slab_pre_alloc_hook+0x59/0x310
[ 1554.056719][ T3422]  ? __get_vm_area_node+0x125/0x370
[ 1554.061936][ T3422]  __kmem_cache_alloc_node+0x53/0x250
[ 1554.067307][ T3422]  ? __get_vm_area_node+0x125/0x370
[ 1554.072495][ T3422]  kmalloc_node_trace+0x26/0xe0
[ 1554.077343][ T3422]  __get_vm_area_node+0x125/0x370
[ 1554.082371][ T3422]  __vmalloc_node_range+0x36e/0x1330
[ 1554.087648][ T3422]  ? netlink_sendmsg+0x602/0xbf0
[ 1554.092578][ T3422]  ? netlink_insert+0x109f/0x13a0
[ 1554.097609][ T3422]  ? netlink_data_ready+0x10/0x10
[ 1554.102629][ T3422]  ? free_vm_area+0x50/0x50
[ 1554.107130][ T3422]  ? netlink_sendmsg+0x602/0xbf0
[ 1554.112067][ T3422]  vmalloc+0x79/0x90
[ 1554.115974][ T3422]  ? netlink_sendmsg+0x602/0xbf0
[ 1554.120918][ T3422]  netlink_sendmsg+0x602/0xbf0
[ 1554.125692][ T3422]  ? netlink_getsockopt+0x590/0x590
[ 1554.130893][ T3422]  ? aa_sock_msg_perm+0x94/0x150
[ 1554.135828][ T3422]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1554.141107][ T3422]  ? security_socket_sendmsg+0x80/0xa0
[ 1554.146558][ T3422]  sock_write_iter+0x2df/0x420
[ 1554.151318][ T3422]  ? sock_read_iter+0x3e0/0x3e0
[ 1554.156171][ T3422]  ? common_file_perm+0x198/0x1f0
[ 1554.161210][ T3422]  vfs_write+0x46c/0x990
[ 1554.165449][ T3422]  ? file_end_write+0x250/0x250
[ 1554.170325][ T3422]  ? __fget_files+0x43d/0x4b0
[ 1554.175104][ T3422]  ? __fdget_pos+0x1d8/0x330
[ 1554.179685][ T3422]  ? ksys_write+0x75/0x260
[ 1554.184092][ T3422]  ksys_write+0x150/0x260
[ 1554.188420][ T3422]  ? __ia32_sys_read+0x90/0x90
[ 1554.193192][ T3422]  ? lockdep_hardirqs_on+0x98/0x150
[ 1554.198384][ T3422]  do_syscall_64+0x55/0xa0
[ 1554.202790][ T3422]  ? clear_bhb_loop+0x40/0x90
[ 1554.207544][ T3422]  ? clear_bhb_loop+0x40/0x90
[ 1554.212212][ T3422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1554.218105][ T3422] RIP: 0033:0x7fd433d9cdd9
[ 1554.222526][ T3422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1554.242140][ T3422] RSP: 002b:00007fd434ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1554.250552][ T3422] RAX: ffffffffffffffda RBX: 00007fd434015fa0 RCX: 00007fd433d9cdd9
[ 1554.258514][ T3422] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003
[ 1554.266479][ T3422] RBP: 00007fd434ce4090 R08: 0000000000000000 R09: 0000000000000000
[ 1554.274441][ T3422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1554.282411][ T3422] R13: 00007fd434016038 R14: 00007fd434015fa0 R15: 00007ffcde7212f8
[ 1554.290388][ T3422]  </TASK>
[ 1554.295497][ T3422] warn_alloc: 1 callbacks suppressed
[ 1554.295511][ T3422] syz.3.10415: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1554.342305][ T3422] CPU: 1 PID: 3422 Comm: syz.3.10415 Not tainted syzkaller #0
[ 1554.349820][ T3422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1554.359881][ T3422] Call Trace:
[ 1554.363173][ T3422]  <TASK>
[ 1554.366136][ T3422]  dump_stack_lvl+0x18c/0x250
[ 1554.370842][ T3422]  ? show_regs_print_info+0x20/0x20
[ 1554.376061][ T3422]  ? load_image+0x420/0x420
[ 1554.380561][ T3422]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1554.386971][ T3422]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1554.393474][ T3422]  warn_alloc+0x246/0x340
[ 1554.397819][ T3422]  ? zone_watermark_ok_safe+0x230/0x230
[ 1554.403386][ T3422]  ? __get_vm_area_node+0x356/0x370
[ 1554.408583][ T3422]  __vmalloc_node_range+0x393/0x1330
[ 1554.413858][ T3422]  ? netlink_insert+0x109f/0x13a0
[ 1554.418885][ T3422]  ? netlink_data_ready+0x10/0x10
[ 1554.423904][ T3422]  ? free_vm_area+0x50/0x50
[ 1554.428400][ T3422]  ? netlink_sendmsg+0x602/0xbf0
[ 1554.433356][ T3422]  vmalloc+0x79/0x90
[ 1554.437258][ T3422]  ? netlink_sendmsg+0x602/0xbf0
[ 1554.442194][ T3422]  netlink_sendmsg+0x602/0xbf0
[ 1554.446970][ T3422]  ? netlink_getsockopt+0x590/0x590
[ 1554.452171][ T3422]  ? aa_sock_msg_perm+0x94/0x150
[ 1554.457102][ T3422]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1554.462382][ T3422]  ? security_socket_sendmsg+0x80/0xa0
[ 1554.467834][ T3422]  sock_write_iter+0x2df/0x420
[ 1554.472595][ T3422]  ? sock_read_iter+0x3e0/0x3e0
[ 1554.477467][ T3422]  ? common_file_perm+0x198/0x1f0
[ 1554.482499][ T3422]  vfs_write+0x46c/0x990
[ 1554.486740][ T3422]  ? file_end_write+0x250/0x250
[ 1554.491586][ T3422]  ? __fget_files+0x43d/0x4b0
[ 1554.496264][ T3422]  ? __fdget_pos+0x1d8/0x330
[ 1554.500847][ T3422]  ? ksys_write+0x75/0x260
[ 1554.505259][ T3422]  ksys_write+0x150/0x260
[ 1554.509588][ T3422]  ? __ia32_sys_read+0x90/0x90
[ 1554.514348][ T3422]  ? lockdep_hardirqs_on+0x98/0x150
[ 1554.519540][ T3422]  do_syscall_64+0x55/0xa0
[ 1554.523947][ T3422]  ? clear_bhb_loop+0x40/0x90
[ 1554.528615][ T3422]  ? clear_bhb_loop+0x40/0x90
[ 1554.533290][ T3422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1554.539181][ T3422] RIP: 0033:0x7fd433d9cdd9
[ 1554.543587][ T3422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1554.563185][ T3422] RSP: 002b:00007fd434ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1554.571593][ T3422] RAX: ffffffffffffffda RBX: 00007fd434015fa0 RCX: 00007fd433d9cdd9
[ 1554.579555][ T3422] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003
[ 1554.587540][ T3422] RBP: 00007fd434ce4090 R08: 0000000000000000 R09: 0000000000000000
[ 1554.595524][ T3422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1554.603499][ T3422] R13: 00007fd434016038 R14: 00007fd434015fa0 R15: 00007ffcde7212f8
[ 1554.611480][ T3422]  </TASK>
[ 1554.624799][ T3422] Mem-Info:
[ 1554.628018][ T3422] active_anon:15800 inactive_anon:0 isolated_anon:0
[ 1554.628018][ T3422]  active_file:19935 inactive_file:40537 isolated_file:0
[ 1554.628018][ T3422]  unevictable:768 dirty:206 writeback:0
[ 1554.628018][ T3422]  slab_reclaimable:11227 slab_unreclaimable:94420
[ 1554.628018][ T3422]  mapped:25514 shmem:1361 pagetables:538
[ 1554.628018][ T3422]  sec_pagetables:0 bounce:0
[ 1554.628018][ T3422]  kernel_misc_reclaimable:0
[ 1554.628018][ T3422]  free:1323880 free_pcp:13806 free_cma:0
[ 1554.718730][ T3422] Node 0 active_anon:63100kB inactive_anon:0kB active_file:79740kB inactive_file:161944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101856kB dirty:824kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10688kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no
[ 1554.788654][ T3422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1554.821675][ T3422] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1554.849294][ T3422] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1554.856167][ T3422] Node 0 DMA32 free:1387840kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:63164kB inactive_anon:0kB active_file:79740kB inactive_file:161108kB unevictable:1536kB writepending:824kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:32176kB local_pcp:18868kB free_cma:0kB
[ 1554.956059][ T3422] lowmem_reserve[]: 0 0 0 0 0
[ 1554.961076][ T3422] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1554.991540][ T3422] lowmem_reserve[]: 0 0 0 0 0
[ 1554.996594][ T3422] Node 1 Normal free:3892320kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23404kB local_pcp:10536kB free_cma:0kB
[ 1555.026510][ T3422] lowmem_reserve[]: 0 0 0 0 0
[ 1555.031303][ T3422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 
[ 1555.031511][ T3433] netlink: 'syz.0.10419': attribute type 1 has an invalid length.
[ 1555.031518][ T3422] 3*4096kB (M) = 15360kB
[ 1555.054565][ T3422] Node 0 DMA32: 4*4kB (UE) 222*8kB (UME) 636*16kB (UME) 1148*32kB (UME) 658*64kB (UME) 1153*128kB (UME) 326*256kB (UME) 158*512kB (UM) 66*1024kB (UME) 12*2048kB (UME) 218*4096kB (UM) = 1387840kB
[ 1555.074210][ T3422] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1555.079346][ T3433] netlink: 'syz.0.10419': attribute type 4 has an invalid length.
[ 1555.108955][ T3422] Node 1 Normal: 216*4kB (UME) 54*8kB (UME) 43*16kB (UME) 59*32kB (UME) 17*64kB (UME) 4*128kB (UE) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3892320kB
[ 1555.135199][ T3422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1555.145536][ T3422] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1555.147754][ T3433] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10419'.
[ 1555.174689][ T3422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1555.174716][ T3422] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1555.174736][ T3422] 61833 total pagecache pages
[ 1555.174748][ T3422] 0 pages in swap cache
[ 1555.174759][ T3422] Free swap  = 124996kB
[ 1555.174771][ T3422] Total swap = 124996kB
[ 1555.174785][ T3422] 2097051 pages RAM
[ 1555.174796][ T3422] 0 pages HighMem/MovableOnly
[ 1555.174808][ T3422] 416927 pages reserved
[ 1555.174820][ T3422] 0 pages cma reserved
[ 1555.596490][ T3447] netlink: 'syz.1.10424': attribute type 2 has an invalid length.
[ 1555.604407][ T3447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10424'.
[ 1555.674955][ T3449] netlink: 'syz.3.10425': attribute type 10 has an invalid length.
[ 1555.687950][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1555.695750][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1555.718102][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1555.725444][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1555.732983][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1555.740256][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1555.761251][ T3449] bridge0: entered promiscuous mode
[ 1555.774808][ T3449] bridge0: entered allmulticast mode
[ 1555.781910][ T3449] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1555.807430][ T3451] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1555.837184][ T3454] C: renamed from team_slave_0
[ 1555.864044][ T3454] netlink: 'syz.3.10425': attribute type 1 has an invalid length.
[ 1555.885007][ T3454] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10425'.
[ 1555.908796][ T3454] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1555.956884][ T3456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10427'.
[ 1557.932041][ T3479] netlink: 'syz.3.10435': attribute type 1 has an invalid length.
[ 1557.940082][ T3479] netlink: 'syz.3.10435': attribute type 4 has an invalid length.
[ 1557.948301][ T3479] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10435'.
[ 1558.011940][ T3484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10443'.
[ 1558.528909][ T3492] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1558.679296][ T3498] netlink: 'syz.2.10440': attribute type 2 has an invalid length.
[ 1558.723472][ T3498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10440'.
[ 1559.021401][ T3507] netlink: 'syz.1.10445': attribute type 1 has an invalid length.
[ 1559.075350][ T3507] netlink: 'syz.1.10445': attribute type 4 has an invalid length.
[ 1559.083630][ T3507] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10445'.
[ 1559.386207][ T3509] syzkaller0: entered promiscuous mode
[ 1559.400800][ T3509] syzkaller0: entered allmulticast mode
[ 1561.787835][ T3540] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1562.387283][ T3560] netlink: 'syz.2.10458': attribute type 1 has an invalid length.
[ 1562.395673][ T3560] netlink: 'syz.2.10458': attribute type 4 has an invalid length.
[ 1562.403913][ T3560] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10458'.
[ 1562.749895][ T3579] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10465'.
[ 1562.770802][ T3579] bridge_slave_1: default FDB implementation only supports local addresses
[ 1562.801827][ T3581] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1563.062615][ T3592] syzkaller0: entered promiscuous mode
[ 1563.068750][ T3592] syzkaller0: entered allmulticast mode
[ 1565.178706][ T3609] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1565.866969][ T3638] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10491'.
[ 1565.894779][ T3641] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1567.839353][ T3675] syzkaller0: entered promiscuous mode
[ 1567.845411][ T3675] syzkaller0: entered allmulticast mode
[ 1567.925186][ T3674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10502'.
[ 1567.949543][ T3679] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10504'.
[ 1570.934546][ T3708] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10513'.
[ 1571.111208][ T3713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10515'.
[ 1573.112417][ T3725] FAULT_INJECTION: forcing a failure.
[ 1573.112417][ T3725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1573.129675][ T3725] CPU: 0 PID: 3725 Comm: syz.0.10520 Not tainted syzkaller #0
[ 1573.137171][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1573.147223][ T3725] Call Trace:
[ 1573.150496][ T3725]  <TASK>
[ 1573.153419][ T3725]  dump_stack_lvl+0x18c/0x250
[ 1573.158102][ T3725]  ? show_regs_print_info+0x20/0x20
[ 1573.163301][ T3725]  ? load_image+0x420/0x420
[ 1573.167805][ T3725]  ? __might_fault+0xaa/0x120
[ 1573.172475][ T3725]  ? __lock_acquire+0x7d40/0x7d40
[ 1573.177499][ T3725]  should_fail_ex+0x39d/0x4d0
[ 1573.182185][ T3725]  _copy_to_iter+0x1ce/0x1120
[ 1573.186872][ T3725]  ? __virt_addr_valid+0x18c/0x540
[ 1573.191979][ T3725]  ? iov_iter_init+0x1e0/0x1e0
[ 1573.196738][ T3725]  ? __virt_addr_valid+0x18c/0x540
[ 1573.201849][ T3725]  ? __virt_addr_valid+0x469/0x540
[ 1573.206958][ T3725]  ? __phys_addr_symbol+0x2f/0x70
[ 1573.211976][ T3725]  ? __check_object_size+0x506/0xa20
[ 1573.217259][ T3725]  __skb_datagram_iter+0xdb/0x780
[ 1573.222281][ T3725]  ? skb_copy_datagram_iter+0x200/0x200
[ 1573.227826][ T3725]  __skb_datagram_iter+0x561/0x780
[ 1573.232936][ T3725]  ? skb_copy_datagram_iter+0x200/0x200
[ 1573.238482][ T3725]  skb_copy_datagram_iter+0xb1/0x200
[ 1573.243773][ T3725]  tipc_recvmsg+0x7cc/0x1400
[ 1573.248375][ T3725]  ? tipc_send_packet+0x90/0x90
[ 1573.253223][ T3725]  ? aa_sock_msg_perm+0x94/0x150
[ 1573.258160][ T3725]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1573.263439][ T3725]  ? security_socket_recvmsg+0x89/0xb0
[ 1573.268888][ T3725]  ? tipc_send_packet+0x90/0x90
[ 1573.273733][ T3725]  ____sys_recvmsg+0x2ce/0x5e0
[ 1573.278506][ T3725]  ? __sys_recvmsg_sock+0x50/0x50
[ 1573.283536][ T3725]  ? import_iovec+0x73/0xa0
[ 1573.288035][ T3725]  ___sys_recvmsg+0x216/0x590
[ 1573.292713][ T3725]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1573.297477][ T3725]  ? ksys_write+0x1c4/0x260
[ 1573.301985][ T3725]  ? __fget_files+0x43d/0x4b0
[ 1573.306677][ T3725]  __x64_sys_recvmsg+0x20c/0x2e0
[ 1573.311619][ T3725]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1573.317860][ T3725]  ? ___sys_recvmsg+0x590/0x590
[ 1573.322714][ T3725]  ? lockdep_hardirqs_on+0x98/0x150
[ 1573.327914][ T3725]  do_syscall_64+0x55/0xa0
[ 1573.332321][ T3725]  ? clear_bhb_loop+0x40/0x90
[ 1573.336998][ T3725]  ? clear_bhb_loop+0x40/0x90
[ 1573.341671][ T3725]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1573.347564][ T3725] RIP: 0033:0x7eff73f9cdd9
[ 1573.351978][ T3725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1573.371579][ T3725] RSP: 002b:00007eff74d9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1573.379987][ T3725] RAX: ffffffffffffffda RBX: 00007eff74215fa0 RCX: 00007eff73f9cdd9
[ 1573.387954][ T3725] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000008
[ 1573.395923][ T3725] RBP: 00007eff74d9c090 R08: 0000000000000000 R09: 0000000000000000
[ 1573.403894][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1573.411861][ T3725] R13: 00007eff74216038 R14: 00007eff74215fa0 R15: 00007ffd85aa2258
[ 1573.419844][ T3725]  </TASK>
[ 1574.027824][ T3746] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.10528'.
[ 1574.053170][ T3746] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.10528'.
[ 1574.199989][ T3752] C: renamed from team_slave_0
[ 1574.242138][ T3752] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10530'.
[ 1574.649380][ T3776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10537'.
[ 1575.098223][ T3787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10542'.
[ 1575.213939][ T3789] netlink: 'syz.2.10544': attribute type 10 has an invalid length.
[ 1575.457947][ T3799] netlink: 'syz.1.10555': attribute type 10 has an invalid length.
[ 1578.468234][ T3811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10551'.
[ 1578.993957][ T3838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10559'.
[ 1579.093525][ T3845] netlink: 'syz.2.10561': attribute type 10 has an invalid length.
[ 1579.325388][ T3853] syzkaller0: entered promiscuous mode
[ 1579.332735][ T3853] syzkaller0: entered allmulticast mode
[ 1583.943242][ T3873] netlink: 'syz.2.10573': attribute type 10 has an invalid length.
[ 1584.036355][ T3876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10571'.
[ 1584.721373][ T3897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10579'.
[ 1584.825424][ T3901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10582'.
[ 1584.918551][ T3907] netlink: 'syz.1.10584': attribute type 10 has an invalid length.
[ 1585.795584][ T3928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10590'.
[ 1586.283246][ T3940] netlink: 'syz.3.10595': attribute type 10 has an invalid length.
[ 1586.449878][ T3947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10597'.
[ 1586.474209][ T3949] FAULT_INJECTION: forcing a failure.
[ 1586.474209][ T3949] name failslab, interval 1, probability 0, space 0, times 0
[ 1586.509147][ T3949] CPU: 1 PID: 3949 Comm: syz.3.10599 Not tainted syzkaller #0
[ 1586.516688][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1586.526786][ T3949] Call Trace:
[ 1586.530097][ T3949]  <TASK>
[ 1586.533061][ T3949]  dump_stack_lvl+0x18c/0x250
[ 1586.537801][ T3949]  ? show_regs_print_info+0x20/0x20
[ 1586.543030][ T3949]  ? load_image+0x420/0x420
[ 1586.547543][ T3949]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1586.553273][ T3949]  should_fail_ex+0x39d/0x4d0
[ 1586.557984][ T3949]  should_failslab+0x9/0x20
[ 1586.562526][ T3949]  slab_pre_alloc_hook+0x59/0x310
[ 1586.567599][ T3949]  ? tipc_net+0x45/0x270
[ 1586.571865][ T3949]  ? tipc_conn_alloc+0x57/0x4a0
[ 1586.576740][ T3949]  __kmem_cache_alloc_node+0x53/0x250
[ 1586.582161][ T3949]  ? tipc_conn_alloc+0x57/0x4a0
[ 1586.587045][ T3949]  kmalloc_trace+0x2a/0xe0
[ 1586.591507][ T3949]  tipc_conn_alloc+0x57/0x4a0
[ 1586.596244][ T3949]  tipc_topsrv_kern_subscr+0xf9/0x250
[ 1586.601679][ T3949]  ? conn_put+0x310/0x310
[ 1586.606044][ T3949]  ? __asan_memset+0x22/0x40
[ 1586.610655][ T3949]  tipc_group_create+0x364/0x500
[ 1586.615626][ T3949]  tipc_sk_join+0x253/0x6a0
[ 1586.620145][ T3949]  ? lockdep_hardirqs_on+0x98/0x150
[ 1586.625355][ T3949]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1586.630753][ T3949]  ? __tipc_sendstream+0x1270/0x1270
[ 1586.636087][ T3949]  tipc_setsockopt+0x73f/0x990
[ 1586.640904][ T3949]  ? tipc_shutdown+0x4d0/0x4d0
[ 1586.645682][ T3949]  ? __fget_files+0x28/0x4b0
[ 1586.650294][ T3949]  ? __fget_files+0x28/0x4b0
[ 1586.654896][ T3949]  ? aa_sock_opt_perm+0x74/0x100
[ 1586.659847][ T3949]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1586.665439][ T3949]  ? security_socket_setsockopt+0x7e/0xa0
[ 1586.671180][ T3949]  ? tipc_shutdown+0x4d0/0x4d0
[ 1586.675961][ T3949]  do_sock_setsockopt+0x175/0x1a0
[ 1586.680994][ T3949]  ? __fdget+0x180/0x210
[ 1586.685246][ T3949]  __x64_sys_setsockopt+0x182/0x200
[ 1586.690466][ T3949]  do_syscall_64+0x55/0xa0
[ 1586.694906][ T3949]  ? clear_bhb_loop+0x40/0x90
[ 1586.699594][ T3949]  ? clear_bhb_loop+0x40/0x90
[ 1586.704279][ T3949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1586.710174][ T3949] RIP: 0033:0x7fd433d9cdd9
[ 1586.714594][ T3949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1586.734404][ T3949] RSP: 002b:00007fd434ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1586.742842][ T3949] RAX: ffffffffffffffda RBX: 00007fd434015fa0 RCX: 00007fd433d9cdd9
[ 1586.750849][ T3949] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[ 1586.758854][ T3949] RBP: 00007fd434ce4090 R08: 0000000000000043 R09: 0000000000000000
[ 1586.766841][ T3949] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001
[ 1586.774821][ T3949] R13: 00007fd434016038 R14: 00007fd434015fa0 R15: 00007ffcde7212f8
[ 1586.782836][ T3949]  </TASK>
[ 1586.945023][ T3954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10600'.
[ 1587.431768][ T3973] netlink: 'syz.0.10607': attribute type 10 has an invalid length.
[ 1587.624984][ T3976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10606'.
[ 1587.786825][ T3984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10611'.
[ 1588.744771][ T4004] netlink: 'syz.2.10619': attribute type 10 has an invalid length.
[ 1588.938723][ T4012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10622'.
[ 1589.292860][ T4022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10624'.
[ 1589.634865][ T4028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10626'.
[ 1589.811114][ T4034] netlink: 'syz.2.10629': attribute type 10 has an invalid length.
[ 1589.865172][ T4035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10628'.
[ 1590.172687][ T4048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10634'.
[ 1590.578012][ T4063] netlink: 'syz.0.10640': attribute type 10 has an invalid length.
[ 1590.854873][ T4077] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10647'.
[ 1590.881694][ T4079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10648'.
[ 1590.912154][ T4076] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10646'.
[ 1591.275348][ T4092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10658'.
[ 1591.405670][ T4102] netlink: 'syz.2.10652': attribute type 10 has an invalid length.
[ 1591.563305][ T4109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10659'.
[ 1592.112689][ T4116] syzkaller0: entered promiscuous mode
[ 1592.118574][ T4116] syzkaller0: entered allmulticast mode
[ 1592.251835][ T4131] netlink: 'syz.1.10668': attribute type 10 has an invalid length.
[ 1594.036458][ T4132] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10667'.
[ 1594.433717][ T4158] netlink: 'syz.1.10678': attribute type 10 has an invalid length.
[ 1594.821101][ T4169] __nla_validate_parse: 1 callbacks suppressed
[ 1594.821121][ T4169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10682'.
[ 1594.974960][ T4161] syzkaller0: entered promiscuous mode
[ 1594.980826][ T4161] syzkaller0: entered allmulticast mode
[ 1596.961912][ T4177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10685'.
[ 1597.166320][ T4183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10687'.
[ 1597.246233][ T4187] netlink: 'syz.0.10690': attribute type 10 has an invalid length.
[ 1597.511663][ T4192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10692'.
[ 1598.777139][ T4220] netlink: 'syz.3.10701': attribute type 10 has an invalid length.
[ 1599.115721][ T4234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10706'.
[ 1599.195617][ T4235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10705'.
[ 1599.859338][ T4256] netlink: 'syz.1.10713': attribute type 10 has an invalid length.
[ 1600.755091][ T4208] delete_channel: no stack
[ 1600.778863][ T4282] netlink: 'syz.2.10724': attribute type 10 has an invalid length.
[ 1601.195914][ T4295] syzkaller0: entered promiscuous mode
[ 1601.214603][ T4295] syzkaller0: entered allmulticast mode
[ 1601.253968][ T4298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10725'.
[ 1603.529078][ T4316] netlink: 'syz.3.10737': attribute type 10 has an invalid length.
[ 1604.849653][ T4338] netlink: 'syz.2.10746': attribute type 10 has an invalid length.
[ 1604.865354][ T4338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10746'.
[ 1604.911349][ T4338] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1604.962380][ T4341] netlink: 'syz.0.10749': attribute type 10 has an invalid length.
[ 1605.653214][ T4334] delete_channel: no stack
[ 1605.723556][ T4374] netlink: 'syz.0.10760': attribute type 10 has an invalid length.
[ 1607.598022][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.604576][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.113888][ T4399] netlink: 'syz.1.10772': attribute type 10 has an invalid length.
[ 1608.197678][ T4405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10773'.
[ 1608.374834][ T4412] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10778'.
[ 1608.483741][ T4412] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.10778'.
[ 1608.623622][ T4420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10780'.
[ 1608.707171][ T4424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10781'.
[ 1609.176544][ T4431] netlink: 'syz.1.10783': attribute type 10 has an invalid length.
[ 1609.327845][ T4438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10786'.
[ 1609.364098][ T4441] netlink: 'syz.3.10788': attribute type 10 has an invalid length.
[ 1609.374909][ T4441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10788'.
[ 1609.405905][ T4441] FAULT_INJECTION: forcing a failure.
[ 1609.405905][ T4441] name failslab, interval 1, probability 0, space 0, times 0
[ 1609.428575][ T4441] CPU: 1 PID: 4441 Comm: syz.3.10788 Not tainted syzkaller #0
[ 1609.436099][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1609.446167][ T4441] Call Trace:
[ 1609.449446][ T4441]  <TASK>
[ 1609.452376][ T4441]  dump_stack_lvl+0x18c/0x250
[ 1609.457057][ T4441]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1609.463211][ T4441]  ? show_regs_print_info+0x20/0x20
[ 1609.468409][ T4441]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1609.474569][ T4441]  ? dump_stack+0x9/0x20
[ 1609.478809][ T4441]  should_fail_ex+0x39d/0x4d0
[ 1609.483499][ T4441]  should_failslab+0x9/0x20
[ 1609.488005][ T4441]  slab_pre_alloc_hook+0x59/0x310
[ 1609.493030][ T4441]  ? qdisc_alloc+0x94/0xa50
[ 1609.497528][ T4441]  ? qdisc_alloc+0x94/0xa50
[ 1609.502028][ T4441]  __kmem_cache_alloc_node+0x53/0x250
[ 1609.507403][ T4441]  ? qdisc_alloc+0x94/0xa50
[ 1609.511900][ T4441]  __kmalloc_node+0xa4/0x230
[ 1609.516507][ T4441]  qdisc_alloc+0x94/0xa50
[ 1609.520837][ T4441]  qdisc_create_dflt+0x63/0x430
[ 1609.525688][ T4441]  mq_init+0x2e2/0x680
[ 1609.529766][ T4441]  ? trace_net_dev_xmit_timeout+0x1c0/0x1c0
[ 1609.535658][ T4441]  ? qdisc_alloc+0x777/0xa50
[ 1609.540249][ T4441]  qdisc_create_dflt+0x11e/0x430
[ 1609.545180][ T4441]  ? dev_activate+0x1ab/0x11a0
[ 1609.549941][ T4441]  dev_activate+0x1d0/0x11a0
[ 1609.554539][ T4441]  __dev_open+0x347/0x430
[ 1609.558885][ T4441]  ? dev_open+0x190/0x190
[ 1609.563219][ T4441]  __dev_change_flags+0x211/0x6a0
[ 1609.568248][ T4441]  ? dev_get_flags+0x1c0/0x1c0
[ 1609.573012][ T4441]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.578209][ T4441]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1609.584365][ T4441]  dev_change_flags+0x88/0x1a0
[ 1609.589132][ T4441]  do_setlink+0xc58/0x4130
[ 1609.593559][ T4441]  ? load_image+0x420/0x420
[ 1609.598058][ T4441]  ? __lock_acquire+0x1273/0x7d40
[ 1609.603084][ T4441]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 1609.609232][ T4441]  ? rcu_is_watching+0x15/0xb0
[ 1609.613992][ T4441]  ? do_trace_netlink_extack+0x7e/0x1a0
[ 1609.619559][ T4441]  ? __nla_validate_parse+0x262c/0x2ea0
[ 1609.625118][ T4441]  ? mark_lock+0x94/0x320
[ 1609.629456][ T4441]  ? __nla_validate+0x50/0x50
[ 1609.634133][ T4441]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1609.640111][ T4441]  ? lock_chain_count+0x20/0x20
[ 1609.644978][ T4441]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1609.651130][ T4441]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.656332][ T4441]  ? validate_linkmsg+0x719/0x910
[ 1609.661354][ T4441]  rtnl_setlink+0x3d9/0x4e0
[ 1609.665858][ T4441]  ? rtnl_dump_ifinfo+0x13c0/0x13c0
[ 1609.671071][ T4441]  ? __lock_acquire+0x1273/0x7d40
[ 1609.676162][ T4441]  ? mutex_lock_nested+0x20/0x20
[ 1609.681109][ T4441]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1609.686228][ T4441]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1609.691335][ T4441]  ? rtnl_dump_ifinfo+0x13c0/0x13c0
[ 1609.696530][ T4441]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1609.701484][ T4441]  ? rtnetlink_bind+0x80/0x80
[ 1609.706157][ T4441]  ? mark_lock+0x94/0x320
[ 1609.710489][ T4441]  ? __lock_acquire+0x1273/0x7d40
[ 1609.715514][ T4441]  ? __kernel_text_address+0xd/0x30
[ 1609.720719][ T4441]  ? mark_lock+0x94/0x320
[ 1609.725050][ T4441]  ? mark_lock+0x94/0x320
[ 1609.729375][ T4441]  ? __lock_acquire+0x1273/0x7d40
[ 1609.734407][ T4441]  ? kmalloc_reserve+0x95/0x240
[ 1609.739260][ T4441]  ? verify_lock_unused+0x140/0x140
[ 1609.744472][ T4441]  ? verify_lock_unused+0x140/0x140
[ 1609.749697][ T4441]  netlink_rcv_skb+0x241/0x4d0
[ 1609.754471][ T4441]  ? rtnetlink_bind+0x80/0x80
[ 1609.759146][ T4441]  ? netlink_ack+0x1180/0x1180
[ 1609.763922][ T4441]  ? __lock_acquire+0x7d40/0x7d40
[ 1609.768945][ T4441]  ? net_generic+0x1e/0x240
[ 1609.773452][ T4441]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1609.778658][ T4441]  netlink_unicast+0x751/0x8d0
[ 1609.783447][ T4441]  netlink_sendmsg+0x8d0/0xbf0
[ 1609.788209][ T4441]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.793412][ T4441]  ? netlink_getsockopt+0x590/0x590
[ 1609.798657][ T4441]  ? aa_sock_msg_perm+0x94/0x150
[ 1609.803614][ T4441]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1609.808937][ T4441]  ? security_socket_sendmsg+0x80/0xa0
[ 1609.814405][ T4441]  ? netlink_getsockopt+0x590/0x590
[ 1609.819628][ T4441]  ____sys_sendmsg+0x5ba/0x960
[ 1609.824399][ T4441]  ? __asan_memset+0x22/0x40
[ 1609.829001][ T4441]  ? __sys_sendmsg_sock+0x30/0x30
[ 1609.834022][ T4441]  ? __import_iovec+0x5f2/0x850
[ 1609.838873][ T4441]  ? import_iovec+0x73/0xa0
[ 1609.843371][ T4441]  ___sys_sendmsg+0x2a6/0x360
[ 1609.848052][ T4441]  ? get_pid_task+0x20/0x1e0
[ 1609.852646][ T4441]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1609.857448][ T4441]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1609.862300][ T4441]  ? __x64_sys_sendmsg+0x80/0x80
[ 1609.867257][ T4441]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.872464][ T4441]  do_syscall_64+0x55/0xa0
[ 1609.876873][ T4441]  ? clear_bhb_loop+0x40/0x90
[ 1609.881551][ T4441]  ? clear_bhb_loop+0x40/0x90
[ 1609.886254][ T4441]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1609.892145][ T4441] RIP: 0033:0x7fd433d9cdd9
[ 1609.896567][ T4441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1609.916175][ T4441] RSP: 002b:00007fd434ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1609.924594][ T4441] RAX: ffffffffffffffda RBX: 00007fd434015fa0 RCX: 00007fd433d9cdd9
[ 1609.932601][ T4441] RDX: 00000000240000c0 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1609.940565][ T4441] RBP: 00007fd434ce4090 R08: 0000000000000000 R09: 0000000000000000
[ 1609.948534][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1609.956500][ T4441] R13: 00007fd434016038 R14: 00007fd434015fa0 R15: 00007ffcde7212f8
[ 1609.964484][ T4441]  </TASK>
[ 1610.006808][ T4441] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1610.022800][ T4441] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1610.245540][ T4457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10794'.
[ 1610.322359][ T4459] netlink: 'syz.1.10795': attribute type 10 has an invalid length.
[ 1610.356751][ T4461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1610.457825][ T4468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10798'.
[ 1610.882137][ T4491] netlink: 'syz.0.10807': attribute type 10 has an invalid length.
[ 1610.977956][ T4494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10810'.
[ 1611.283060][ T4505] syzkaller0: entered promiscuous mode
[ 1611.289788][ T4505] syzkaller0: entered allmulticast mode
[ 1611.299393][ T4507] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1613.792929][ T4524] netlink: 'syz.3.10820': attribute type 10 has an invalid length.
[ 1613.891762][ T4529] __nla_validate_parse: 2 callbacks suppressed
[ 1613.891777][ T4529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10822'.
[ 1614.104328][ T4535] syzkaller0: entered promiscuous mode
[ 1614.116310][ T4535] syzkaller0: entered allmulticast mode
[ 1616.671708][ T4537] syzkaller0: entered promiscuous mode
[ 1616.677352][ T4537] syzkaller0: entered allmulticast mode
[ 1618.419118][ T4548] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1618.440758][ T4553] netlink: 'syz.1.10832': attribute type 10 has an invalid length.
[ 1618.490479][ T4556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10833'.
[ 1619.091772][ T4576] netlink: 'syz.2.10842': attribute type 10 has an invalid length.
[ 1619.139083][ T4579] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1619.301242][ T4581] syzkaller0: entered promiscuous mode
[ 1619.307844][ T4581] syzkaller0: entered allmulticast mode
[ 1619.357810][ T4591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10847'.
[ 1621.335839][ T4598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10848'.
[ 1621.355519][ T4608] netlink: 'syz.0.10853': attribute type 10 has an invalid length.
[ 1621.491178][ T4613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1621.536980][ T4617] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10857'.
[ 1621.837561][ T4628] netlink: 'syz.0.10863': attribute type 10 has an invalid length.
[ 1622.091774][ T4636] syzkaller0: entered promiscuous mode
[ 1622.098773][ T4636] syzkaller0: entered allmulticast mode
[ 1623.873002][ T4641] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1624.066001][ T4648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10870'.
[ 1624.191008][ T4656] netlink: 'syz.2.10874': attribute type 10 has an invalid length.
[ 1624.396764][ T4660] syzkaller0: entered promiscuous mode
[ 1624.402419][ T4660] syzkaller0: entered allmulticast mode
[ 1624.411034][ T4666] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1626.172898][ T4672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10878'.
[ 1626.182383][ T4673] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10879'.
[ 1626.505664][ T4684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10888'.
[ 1626.734634][ T4695] netlink: 'syz.0.10885': attribute type 10 has an invalid length.
[ 1627.023635][ T4706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10890'.
[ 1627.080586][ T4701] syzkaller0: entered promiscuous mode
[ 1627.097763][ T4701] syzkaller0: entered allmulticast mode
[ 1627.112730][ T4710] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1631.843279][ T4726] netlink: 'syz.2.10897': attribute type 10 has an invalid length.
[ 1631.951788][ T4732] netlink: 'syz.1.10906': attribute type 10 has an invalid length.
[ 1632.133532][ T4733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10898'.
[ 1632.377938][ T4745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10903'.
[ 1632.410589][ T4745] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.10903'.
[ 1632.612399][ T4752] FAULT_INJECTION: forcing a failure.
[ 1632.612399][ T4752] name failslab, interval 1, probability 0, space 0, times 0
[ 1632.630757][ T4752] CPU: 1 PID: 4752 Comm: syz.1.10905 Not tainted syzkaller #0
[ 1632.638261][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1632.648348][ T4752] Call Trace:
[ 1632.651654][ T4752]  <TASK>
[ 1632.654605][ T4752]  dump_stack_lvl+0x18c/0x250
[ 1632.659322][ T4752]  ? show_regs_print_info+0x20/0x20
[ 1632.664555][ T4752]  ? load_image+0x420/0x420
[ 1632.669087][ T4752]  ? __might_sleep+0xe0/0xe0
[ 1632.672148][ T4747] syzkaller0: entered promiscuous mode
[ 1632.673682][ T4752]  ? __lock_acquire+0x7d40/0x7d40
[ 1632.679321][ T4747] syzkaller0: entered allmulticast mode
[ 1632.684151][ T4752]  should_fail_ex+0x39d/0x4d0
[ 1632.694412][ T4752]  should_failslab+0x9/0x20
[ 1632.698928][ T4752]  slab_pre_alloc_hook+0x59/0x310
[ 1632.703954][ T4752]  ? get_callchain_buffers+0x1a2/0x360
[ 1632.709412][ T4752]  ? get_callchain_buffers+0x1a2/0x360
[ 1632.714869][ T4752]  __kmem_cache_alloc_node+0x53/0x250
[ 1632.720259][ T4752]  ? get_callchain_buffers+0x1a2/0x360
[ 1632.725715][ T4752]  __kmalloc_node+0xa4/0x230
[ 1632.730317][ T4752]  get_callchain_buffers+0x1a2/0x360
[ 1632.735605][ T4752]  ? perf_try_init_event+0x25f/0x3c0
[ 1632.740912][ T4752]  perf_event_alloc+0x1bfd/0x21b0
[ 1632.745926][ T4752]  ? perf_event_alloc+0xc06/0x21b0
[ 1632.751033][ T4752]  ? find_lively_task_by_vpid+0x19/0x290
[ 1632.756668][ T4752]  __se_sys_perf_event_open+0x740/0x1c50
[ 1632.762297][ T4752]  ? lock_chain_count+0x20/0x20
[ 1632.767140][ T4752]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1632.772784][ T4752]  ? __x64_sys_perf_event_open+0x7d/0xc0
[ 1632.778433][ T4752]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1632.784068][ T4752]  do_syscall_64+0x55/0xa0
[ 1632.788479][ T4752]  ? clear_bhb_loop+0x40/0x90
[ 1632.793159][ T4752]  ? clear_bhb_loop+0x40/0x90
[ 1632.797833][ T4752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1632.803723][ T4752] RIP: 0033:0x7f83c1d9cdd9
[ 1632.808130][ T4752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1632.827739][ T4752] RSP: 002b:00007f83c2b84028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1632.836149][ T4752] RAX: ffffffffffffffda RBX: 00007f83c2015fa0 RCX: 00007f83c1d9cdd9
[ 1632.844111][ T4752] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000004c0
[ 1632.852070][ T4752] RBP: 00007f83c2b84090 R08: 0000000000000001 R09: 0000000000000000
[ 1632.860062][ T4752] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 1632.868039][ T4752] R13: 00007f83c2016038 R14: 00007f83c2015fa0 R15: 00007ffee7c417c8
[ 1632.876023][ T4752]  </TASK>
[ 1635.088456][ T4759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10909'.
[ 1635.117941][ T4778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10916'.
[ 1635.373214][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10922'.
[ 1635.395078][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10922'.
[ 1635.410795][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10922'.
[ 1635.973174][ T4826] sctp: [Deprecated]: syz.0.10939 (pid 4826) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1635.973174][ T4826] Use struct sctp_sack_info instead
[ 1636.968264][ T4855] sit0: entered allmulticast mode
[ 1637.405336][ T4861] sit0: entered promiscuous mode
[ 1638.588449][ T4887] syzkaller0: entered promiscuous mode
[ 1638.594624][ T4887] syzkaller0: entered allmulticast mode
[ 1642.881129][ T4903] bridge0: port 3(ip6gretap0) entered blocking state
[ 1642.888231][ T4903] bridge0: port 3(ip6gretap0) entered disabled state
[ 1642.895273][ T4903] ip6gretap0: entered allmulticast mode
[ 1642.901661][ T4903] ip6gretap0: entered promiscuous mode
[ 1642.907733][ T4903] bridge0: port 3(ip6gretap0) entered blocking state
[ 1642.914725][ T4903] bridge0: port 3(ip6gretap0) entered forwarding state
[ 1642.923562][ T4906] ip6gretap0: left allmulticast mode
[ 1642.930098][ T4906] ip6gretap0: left promiscuous mode
[ 1642.936899][ T4906] bridge0: port 3(ip6gretap0) entered disabled state
[ 1643.359181][ T4922] syzkaller0: entered promiscuous mode
[ 1643.375407][ T4922] syzkaller0: entered allmulticast mode
[ 1647.537919][ T4959] wg2: entered promiscuous mode
[ 1647.567617][ T4959] wg2: entered allmulticast mode
[ 1647.678794][ T4961] Ð6±ÿ: renamed from team_slave_1 (while UP)
[ 1648.156772][ T4972] sit0: entered allmulticast mode
[ 1648.713662][ T4968] sit0: entered promiscuous mode
[ 1650.034659][ T4986] macsec0: entered promiscuous mode
[ 1650.041656][ T4986] macsec0: entered allmulticast mode
[ 1650.047965][ T4986] veth1_macvtap: entered allmulticast mode
[ 1650.266008][ T4998] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[ 1650.295590][ T4997] syzkaller0: entered promiscuous mode
[ 1650.311368][ T4997] syzkaller0: entered allmulticast mode
[ 1650.427500][ T5000] syzkaller0: entered promiscuous mode
[ 1650.433038][ T5000] syzkaller0: entered allmulticast mode
[ 1650.466309][  T407] syzkaller0: tun_net_xmit 70
[ 1650.527450][ T4994] syzkaller0: tun_net_xmit 126
[ 1651.122768][ T5006] syzkaller0: entered promiscuous mode
[ 1651.171900][ T5006] syzkaller0: entered allmulticast mode
[ 1654.087951][ T5029] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1654.095373][ T5029] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1654.104757][ T5029] bridge0: entered allmulticast mode
[ 1655.942019][ T5038] syzkaller0: entered promiscuous mode
[ 1656.037348][ T5038] syzkaller0: entered allmulticast mode
[ 1659.526165][ T5047] syzkaller0: entered promiscuous mode
[ 1659.531814][ T5047] syzkaller0: entered allmulticast mode
[ 1663.111280][ T5086] syzkaller0: entered promiscuous mode
[ 1663.117200][ T5086] syzkaller0: entered allmulticast mode
[ 1666.841075][ T5094] syzkaller0: entered promiscuous mode
[ 1666.846677][ T5094] syzkaller0: entered allmulticast mode
[ 1668.604229][ T5110] syzkaller0: entered promiscuous mode
[ 1668.609897][ T5110] syzkaller0: entered allmulticast mode
[ 1669.326233][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.332604][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1675.061592][ T5159] syzkaller0: entered promiscuous mode
[ 1678.269337][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1678.517175][ T5184] syzkaller0: entered promiscuous mode
[ 1678.524565][ T5184] syzkaller0: entered allmulticast mode
[ 1680.580091][ T5199] syzkaller0: entered promiscuous mode
[ 1680.634694][ T5199] syzkaller0: entered allmulticast mode
[ 1680.826880][ T5202] syzkaller0: entered promiscuous mode
[ 1680.833316][ T5202] syzkaller0: entered allmulticast mode
[ 1682.678491][  T407] syzkaller0: tun_net_xmit 70
[ 1685.219432][ T5260] syzkaller0: entered promiscuous mode
[ 1685.245144][ T5260] syzkaller0: entered allmulticast mode
[ 1687.509474][ T5280] syzkaller0: entered promiscuous mode
[ 1687.524557][ T5280] syzkaller0: entered allmulticast mode
[ 1687.672980][ T5291] 
[ 1687.681712][ T5291] =============================
[ 1687.686936][ T5291] WARNING: suspicious RCU usage
[ 1687.692110][ T5291] syzkaller #0 Not tainted
[ 1687.696866][ T5291] -----------------------------
[ 1687.701706][ T5291] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1687.710362][ T5291] 
[ 1687.710362][ T5291] other info that might help us debug this:
[ 1687.710362][ T5291] 
[ 1687.720761][ T5291] 
[ 1687.720761][ T5291] rcu_scheduler_active = 2, debug_locks = 1
[ 1687.728933][ T5291] 1 lock held by syz.2.11092/5291:
[ 1687.734047][ T5291]  #0: ffffffff8d1322c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[ 1687.744643][ T5291] 
[ 1687.744643][ T5291] stack backtrace:
[ 1687.750560][ T5291] CPU: 0 PID: 5291 Comm: syz.2.11092 Not tainted syzkaller #0
[ 1687.758030][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1687.768120][ T5291] Call Trace:
[ 1687.771413][ T5291]  <TASK>
[ 1687.774360][ T5291]  dump_stack_lvl+0x18c/0x250
[ 1687.779052][ T5291]  ? show_regs_print_info+0x20/0x20
[ 1687.784269][ T5291]  ? load_image+0x420/0x420
[ 1687.788778][ T5291]  lockdep_rcu_suspicious+0x1e1/0x300
[ 1687.794152][ T5291]  get_callchain_entry+0x2a9/0x3c0
[ 1687.799261][ T5291]  get_perf_callchain+0xc6/0x510
[ 1687.804201][ T5291]  ? put_callchain_entry+0xb0/0xb0
[ 1687.809455][ T5291]  __bpf_get_stack+0x2e4/0x540
[ 1687.814228][ T5291]  ? stack_map_get_build_id_offset+0x720/0x720
[ 1687.820383][ T5291]  ? __cant_sleep+0x220/0x220
[ 1687.825061][ T5291]  ? bpf_prog_14d9fb3786f83342+0x45/0x49
[ 1687.830690][ T5291]  bpf_get_stack_raw_tp+0x1a9/0x210
[ 1687.835896][ T5291]  bpf_prog_14d9fb3786f83342+0x45/0x49
[ 1687.841354][ T5291]  bpf_prog_run_pin_on_cpu+0x64/0x150
[ 1687.846746][ T5291]  bpf_prog_test_run_syscall+0x317/0x4a0
[ 1687.852390][ T5291]  ? sock_gen_cookie+0x60/0x60
[ 1687.857159][ T5291]  ? sock_gen_cookie+0x60/0x60
[ 1687.861927][ T5291]  bpf_prog_test_run+0x321/0x390
[ 1687.866869][ T5291]  __sys_bpf+0x49d/0x890
[ 1687.871109][ T5291]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1687.876494][ T5291]  ? lock_chain_count+0x20/0x20
[ 1687.881349][ T5291]  __x64_sys_bpf+0x7c/0x90
[ 1687.885769][ T5291]  do_syscall_64+0x55/0xa0
[ 1687.890181][ T5291]  ? clear_bhb_loop+0x40/0x90
[ 1687.894855][ T5291]  ? clear_bhb_loop+0x40/0x90
[ 1687.899532][ T5291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1687.905427][ T5291] RIP: 0033:0x7f5cd039cdd9
[ 1687.909844][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1687.929445][ T5291] RSP: 002b:00007f5cd1252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1687.937858][ T5291] RAX: ffffffffffffffda RBX: 00007f5cd0615fa0 RCX: 00007f5cd039cdd9
[ 1687.945825][ T5291] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1687.953788][ T5291] RBP: 00007f5cd0432d69 R08: 0000000000000000 R09: 0000000000000000
[ 1687.961757][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1687.969732][ T5291] R13: 00007f5cd0616038 R14: 00007f5cd0615fa0 R15: 00007fff8e14b5a8
[ 1687.977718][ T5291]  </TASK>