last executing test programs:

5.387055867s ago: executing program 2 (id=5837):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

4.886540419s ago: executing program 3 (id=5839):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xba}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x7400}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x4, 0x0, 0x6, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x105, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x4, 0xf, 0xfa, 0xc6, 0x0, 0xfffffffffffffffc, 0x20200, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8000000000000001, 0x45}, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x101, 0x7ac9, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0xd, r0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

4.802312331s ago: executing program 2 (id=5840):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2004, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000043000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000100)=r2)

4.301678584s ago: executing program 2 (id=5843):
r0 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f0620000002000000062000000a20000000305f5f005f002e71"], 0x0, 0x3a}, 0x28) (async)
recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x30102) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x240282, 0x0)

4.013297101s ago: executing program 2 (id=5848):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pK    \x00'}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r0, @ANYBLOB="be00"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02000000010000035400"/28], 0x50)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b70300002400"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000022560000000000000400000020020000", @ANYBLOB="bb0c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/19], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r7, r10}, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc)

3.739465448s ago: executing program 3 (id=5850):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close(0xffffffffffffffff) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b180008903040000845088fb325f003911050b038da1005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

3.66575357s ago: executing program 0 (id=5851):
sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c7a4fac2c72fa1174fe6d97ee657558fb733b911010bc6964aba2458e4dc249d45a30f8783b3262424f30fbd562f78284a40bc1105ac0522e934cd672d817ad030c1ed38040e10f2878ecde283f7fcd1f47fce70540b51c97fd481fbc0960c0649d76a080ba51950bdc7a9edd96b26c2d710a21e6af02166146cf954c7e73b1f3c8ad41145de1277d9e0dbe1f91336f9f4d37873b2e1c51bc35e29ea3dc349c7c3345071bde48898784eeb08bfc2eea7624249164ef7edc3f834a22ebb", 0xbd}], 0x1}, 0x4000800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000009c0)={0x2, 0x4001, @private=0xa010101}, 0x10, 0x0}, 0x30004040)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000070000000000b0ffffffffff85100000010000009500000000000000180900002020702500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)

3.318815468s ago: executing program 3 (id=5853):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x24000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x1, 0x400000, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x2, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.153985512s ago: executing program 0 (id=5855):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x100000000000000)

3.048126885s ago: executing program 3 (id=5856):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x16, 0x2, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0xffffffffffffff29, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', r4, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1600000002000000000000006eaff2cad38591e3727c1311e2a5cb36f6ac09b57e86adbbbc04f0dc8565ca891837063cd7aedc3c32278ba40c", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x2b, 0x0, 0x108)
socket$kcm(0x10, 0x3, 0x10) (async)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000040)=0x1) (async)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000040)=0x1)

2.701064034s ago: executing program 0 (id=5858):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xba}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x7400}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x4, 0x0, 0x6, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x105, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x4, 0xf, 0xfa, 0xc6, 0x0, 0xfffffffffffffffc, 0x20200, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8000000000000001, 0x45}, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x101, 0x7ac9, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0xd, r0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

2.250716815s ago: executing program 1 (id=5860):
r0 = socket$kcm(0xa, 0x3, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, 0x0, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.025786251s ago: executing program 1 (id=5861):
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x2, 0x2, 0xc}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffba, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000042100a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x100000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4602, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8918, &(0x7f0000000140)={'veth1_to_bridge\x00', @random="0200c139eaf1"})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f043680000000000000002000000000000000000"], 0x50)
r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
close(r7)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.672762949s ago: executing program 1 (id=5862):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf91, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x1ffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041)
setsockopt$sock_attach_bpf(r4, 0x1, 0x9, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0x85050000}, 0xff00)

1.64604021s ago: executing program 0 (id=5863):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2004, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000043000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000100)=r2)

747.093502ms ago: executing program 2 (id=5864):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x24000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x1, 0x400000, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x2, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

745.796032ms ago: executing program 0 (id=5865):
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10004}]}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0xa, 0x2, 0x73)
r3 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, &(0x7f0000000100), 0x4)

532.484147ms ago: executing program 1 (id=5866):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
close(r2)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xea96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef)

316.607583ms ago: executing program 1 (id=5867):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, &(0x7f0000000940)=""/53, 0x1b, 0x35, 0x1, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xc, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000001000000000000000004000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000bf080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7"], 0x0, 0x0, 0x75, &(0x7f0000000bc0)=""/117, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x4, 0x5, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[], 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYBLOB], 0x48)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0x40, 0x0, 0x1, 0x4171, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x8}, 0x1590, 0x7, 0x1, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x410100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c8000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x9, 0x4, 0xfd, 0x0, 0x7, 0x14004, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa23, 0x4, 0x0, 0xd, 0x0, 0x80000001}, r9, 0x5, r5, 0x17443037dc221d7f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d", 0x2d}, {&(0x7f00000001c0)="55a7258beb8595795eb284131421f381bb54367f72b54718f76eb9f3b2da6c5193167678665eee005597c25b2ad9264629b4cdb1f34e32353012d8f30f759130697bc15510321ecabdf1e537bab8b4882d48502700733caaa6419cf090363aac81ca789ea6dddb2cc2e8592a648cf7bd993025dad0da2480dc57c26bfecb0067c34897e4c33fa0363861e8afce2a65ef02160dd067409f0ad5afb33a318b7c34aaa857a27e301ef570237fc5dbc7d52908e2965b50d44c2aa765903c37ff51c29fd5d000", 0xc4}], 0x2}, 0x0)

225.057125ms ago: executing program 3 (id=5868):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

190.351776ms ago: executing program 0 (id=5869):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8040)
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r6 = socket$kcm(0x10, 0x3, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708000180040010000400", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002", 0x2b}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)

54.068979ms ago: executing program 2 (id=5870):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x4f, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a)

46.37229ms ago: executing program 1 (id=5871):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xba}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x7400}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x4, 0x0, 0x6, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x105, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x4, 0xf, 0xfa, 0xc6, 0x0, 0xfffffffffffffffc, 0x20200, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8000000000000001, 0x45}, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x101, 0x7ac9, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0xd, r0, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

0s ago: executing program 3 (id=5872):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c20000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

kernel console output (not intermixed with test programs):

17134]  __folio_alloc+0x10/0x20
[  687.373390][T17134]  vma_alloc_folio+0x474/0x8f0
[  687.378189][T17134]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  687.384027][T17134]  shmem_alloc_folio+0x1a9/0x2a0
[  687.388998][T17134]  ? percpu_counter_add_batch+0x252/0x2a0
[  687.394801][T17134]  ? folio_put+0xd0/0xd0
[  687.399096][T17134]  ? percpu_counter_add_batch+0x25c/0x2a0
[  687.404879][T17134]  ? __vm_enough_memory+0x11a/0x370
[  687.410127][T17134]  ? shmem_inode_acct_block+0x35e/0x460
[  687.415729][T17134]  shmem_alloc_and_acct_folio+0x1cb/0x6c0
[  687.421489][T17134]  ? put_swap_device+0x230/0x230
[  687.426454][T17134]  ? filemap_get_entry+0xce/0x3f0
[  687.431505][T17134]  ? xas_load+0x11d/0x140
[  687.435870][T17134]  ? filemap_get_entry+0xce/0x3f0
[  687.440931][T17134]  ? filemap_get_entry+0xce/0x3f0
[  687.445985][T17134]  ? filemap_get_entry+0x375/0x3f0
[  687.451125][T17134]  ? page_cache_prev_miss+0x390/0x390
[  687.456527][T17134]  ? mark_lock+0x94/0x320
[  687.460895][T17134]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  687.466902][T17134]  ? do_user_addr_fault+0xb43/0x12d0
[  687.472221][T17134]  ? lock_chain_count+0x20/0x20
[  687.477116][T17134]  shmem_get_folio_gfp+0xe1d/0x2b40
[  687.482386][T17134]  shmem_write_begin+0xf2/0x430
[  687.487280][T17134]  generic_perform_write+0x2fe/0x5c0
[  687.492614][T17134]  ? generic_file_direct_write+0x3e0/0x3e0
[  687.498461][T17134]  ? file_update_time+0x192/0x1a0
[  687.503524][T17134]  shmem_file_write_iter+0xfb/0x120
[  687.508757][T17134]  vfs_write+0x474/0x9a0
[  687.513064][T17134]  ? file_end_write+0x250/0x250
[  687.517962][T17134]  ? __fget_files+0x3fc/0x460
[  687.522683][T17134]  ? __fdget_pos+0x2a3/0x330
[  687.527306][T17134]  ? ksys_write+0x74/0x260
[  687.531755][T17134]  ksys_write+0x151/0x260
[  687.536119][T17134]  ? __ia32_sys_read+0x90/0x90
[  687.540923][T17134]  ? lockdep_hardirqs_on+0x98/0x150
[  687.546161][T17134]  do_syscall_64+0x55/0xb0
[  687.550606][T17134]  ? clear_bhb_loop+0x40/0x90
[  687.555337][T17134]  ? clear_bhb_loop+0x40/0x90
[  687.560069][T17134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  687.566004][T17134] RIP: 0033:0x7f6aae99e0d9
[  687.570451][T17134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.590089][T17134] RSP: 002b:00007f6aaf7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  687.598548][T17134] RAX: ffffffffffffffda RBX: 00007f6aaec26090 RCX: 00007f6aae99e0d9
[  687.606543][T17134] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000008
[  687.614534][T17134] RBP: 00007f6aaf7d6090 R08: 0000000000000000 R09: 0000000000000000
[  687.622551][T17134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  687.630546][T17134] R13: 00007f6aaec26128 R14: 00007f6aaec26090 R15: 00007ffc60956728
[  687.638566][T17134]  </TASK>
[  690.351968][T17149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  690.359457][T17149] IPv6: NLM_F_CREATE should be set when creating new route
[  690.367240][T17149] IPv6: NLM_F_CREATE should be set when creating new route
[  690.374946][T17149] IPv6: NLM_F_CREATE should be set when creating new route
[  690.849766][T17159] netlink: 'syz.1.4069': attribute type 10 has an invalid length.
[  693.075051][T17204] netlink: 'syz.3.4088': attribute type 10 has an invalid length.
[  693.357112][T17216] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4093'.
[  693.469523][T17222] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4093'.
[  693.928905][T17228] FAULT_INJECTION: forcing a failure.
[  693.928905][T17228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  693.973775][T17228] CPU: 0 PID: 17228 Comm: syz.3.4097 Not tainted syzkaller #0
[  693.981330][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  693.991435][T17228] Call Trace:
[  693.994780][T17228]  <TASK>
[  693.997759][T17228]  dump_stack_lvl+0x18c/0x250
[  694.002519][T17228]  ? show_regs_print_info+0x20/0x20
[  694.007794][T17228]  ? load_image+0x420/0x420
[  694.012447][T17228]  ? __might_fault+0xaa/0x120
[  694.017202][T17228]  ? __lock_acquire+0x7d80/0x7d80
[  694.022304][T17228]  should_fail_ex+0x394/0x4c0
[  694.027069][T17228]  _copy_from_user+0x2f/0xe0
[  694.031719][T17228]  ___sys_sendmsg+0x1c7/0x360
[  694.036474][T17228]  ? __sys_sendmsg+0x2b0/0x2b0
[  694.041357][T17228]  ? __lock_acquire+0x7d80/0x7d80
[  694.046553][T17228]  __se_sys_sendmsg+0x1d0/0x2c0
[  694.051474][T17228]  ? perf_trace_preemptirq_template+0x269/0x330
[  694.057784][T17228]  ? __x64_sys_sendmsg+0x80/0x80
[  694.062837][T17228]  ? lockdep_hardirqs_on+0x98/0x150
[  694.068120][T17228]  do_syscall_64+0x55/0xb0
[  694.072596][T17228]  ? clear_bhb_loop+0x40/0x90
[  694.077331][T17228]  ? clear_bhb_loop+0x40/0x90
[  694.082081][T17228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.088030][T17228] RIP: 0033:0x7f8ed319e0d9
[  694.092510][T17228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.112165][T17228] RSP: 002b:00007f8ed13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  694.120633][T17228] RAX: ffffffffffffffda RBX: 00007f8ed3425fa0 RCX: 00007f8ed319e0d9
[  694.128661][T17228] RDX: 0000000030000844 RSI: 0000200000001d00 RDI: 0000000000000004
[  694.136701][T17228] RBP: 00007f8ed13f6090 R08: 0000000000000000 R09: 0000000000000000
[  694.144724][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.152741][T17228] R13: 00007f8ed3426038 R14: 00007f8ed3425fa0 R15: 00007ffdeb487988
[  694.160797][T17228]  </TASK>
[  694.963800][T17257] netlink: 'syz.0.4105': attribute type 10 has an invalid length.
[  695.943648][T17301] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4122'.
[  696.478107][T17328] netlink: 'syz.3.4130': attribute type 10 has an invalid length.
[  696.508437][T17328] bridge0: left allmulticast mode
[  696.527137][T17328] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.534386][T17328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  696.546758][T17328] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  697.194130][T17355] netlink: 'syz.3.4143': attribute type 10 has an invalid length.
[  697.381573][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4146'.
[  697.435309][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4146'.
[  697.462645][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4146'.
[  697.493274][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4146'.
[  697.504989][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4146'.
[  697.539365][T17366] netlink: 'syz.3.4146': attribute type 2 has an invalid length.
[  697.554563][T17366] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.4146'.
[  697.943306][T17389] netlink: 'syz.0.4156': attribute type 11 has an invalid length.
[  697.951164][T17389] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4156'.
[  697.991403][T17391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  698.069955][T17394] netlink: 'syz.3.4158': attribute type 33 has an invalid length.
[  698.602433][T17421] netlink: 'syz.3.4168': attribute type 10 has an invalid length.
[  698.701161][T17421] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  699.052705][T17443] __nla_validate_parse: 3 callbacks suppressed
[  699.052721][T17443] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4178'.
[  699.108410][T17446] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4178'.
[  699.380613][T17460] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4183'.
[  699.401199][T17460] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  699.579084][T17473] netlink: 'syz.3.4188': attribute type 19 has an invalid length.
[  700.557247][T17508] netlink: 'syz.3.4199': attribute type 3 has an invalid length.
[  700.581558][T17508] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.4199'.
[  700.674936][T17508] C: renamed from team_slave_0
[  700.726812][T17508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4199'.
[  700.922533][T17519] FAULT_INJECTION: forcing a failure.
[  700.922533][T17519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.935792][T17519] CPU: 1 PID: 17519 Comm: syz.1.4205 Not tainted syzkaller #0
[  700.943278][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  700.953364][T17519] Call Trace:
[  700.956671][T17519]  <TASK>
[  700.959637][T17519]  dump_stack_lvl+0x18c/0x250
[  700.964359][T17519]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  700.970539][T17519]  ? show_regs_print_info+0x20/0x20
[  700.975774][T17519]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  700.981985][T17519]  should_fail_ex+0x394/0x4c0
[  700.986685][T17519]  strncpy_from_user+0x36/0x2f0
[  700.991548][T17519]  ? __local_bh_disable_ip+0x108/0x1a0
[  700.997020][T17519]  strncpy_from_user_nofault+0x71/0x140
[  701.002582][T17519]  bpf_probe_read_user_str+0x2a/0x70
[  701.007877][T17519]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  701.013344][T17519]  bpf_test_run+0x2df/0x870
[  701.017868][T17519]  ? bpf_test_run+0x174/0x870
[  701.022556][T17519]  ? dst_hold+0x70/0x70
[  701.026730][T17519]  ? eth_get_headlen+0x210/0x210
[  701.031681][T17519]  ? slab_build_skb+0x25a/0x3e0
[  701.036540][T17519]  ? convert___skb_to_skb+0x3d/0x590
[  701.041836][T17519]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  701.047236][T17519]  ? cpu_online+0x60/0x60
[  701.051580][T17519]  bpf_prog_test_run+0x31f/0x390
[  701.056541][T17519]  __sys_bpf+0x49d/0x890
[  701.060798][T17519]  ? bpf_link_show_fdinfo+0x390/0x390
[  701.066190][T17519]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  701.072364][T17519]  __x64_sys_bpf+0x7c/0x90
[  701.076807][T17519]  do_syscall_64+0x55/0xb0
[  701.081233][T17519]  ? clear_bhb_loop+0x40/0x90
[  701.085918][T17519]  ? clear_bhb_loop+0x40/0x90
[  701.090607][T17519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  701.096508][T17519] RIP: 0033:0x7f67b879e0d9
[  701.100934][T17519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.120554][T17519] RSP: 002b:00007f67b9676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  701.128978][T17519] RAX: ffffffffffffffda RBX: 00007f67b8a25fa0 RCX: 00007f67b879e0d9
[  701.136983][T17519] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  701.144959][T17519] RBP: 00007f67b9676090 R08: 0000000000000000 R09: 0000000000000000
[  701.152938][T17519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  701.160934][T17519] R13: 00007f67b8a26038 R14: 00007f67b8a25fa0 R15: 00007ffec4c1a338
[  701.168938][T17519]  </TASK>
[  701.314678][T17528] netlink: 'syz.0.4208': attribute type 29 has an invalid length.
[  701.319545][T17530] netlink: 'syz.0.4208': attribute type 29 has an invalid length.
[  702.799298][T17556] delete_channel: no stack
[  702.935793][T17591] validate_nla: 3 callbacks suppressed
[  702.935808][T17591] netlink: 'syz.0.4234': attribute type 7 has an invalid length.
[  702.980441][T17591] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4234'.
[  703.293695][T17603] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4237'.
[  704.337865][T17628] netlink: 'syz.0.4248': attribute type 3 has an invalid length.
[  704.385563][T17628] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4248'.
[  704.426843][T17629] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4248'.
[  705.212348][T17655] syz.0.4257: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  705.281001][T17655] CPU: 1 PID: 17655 Comm: syz.0.4257 Not tainted syzkaller #0
[  705.288630][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  705.298733][T17655] Call Trace:
[  705.302056][T17655]  <TASK>
[  705.305036][T17655]  dump_stack_lvl+0x18c/0x250
[  705.309806][T17655]  ? show_regs_print_info+0x20/0x20
[  705.315082][T17655]  ? load_image+0x420/0x420
[  705.319684][T17655]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  705.326176][T17655]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  705.332761][T17655]  warn_alloc+0x246/0x340
[  705.337152][T17655]  ? stack_trace_save+0xaa/0x100
[  705.342262][T17655]  ? zone_watermark_ok_safe+0x230/0x230
[  705.347931][T17655]  ? kasan_set_track+0x5f/0x70
[  705.352765][T17655]  ? kasan_set_track+0x4e/0x70
[  705.357586][T17655]  ? __kasan_kmalloc+0x8f/0xa0
[  705.362403][T17655]  ? xsk_init_queue+0xad/0x100
[  705.367228][T17655]  ? xsk_setsockopt+0x4c9/0x750
[  705.372157][T17655]  ? do_sock_setsockopt+0x175/0x1a0
[  705.377433][T17655]  ? __x64_sys_setsockopt+0x182/0x200
[  705.382859][T17655]  __vmalloc_node_range+0x129/0x1320
[  705.388245][T17655]  ? free_vm_area+0x50/0x50
[  705.392816][T17655]  vmalloc_user+0x74/0x80
[  705.397188][T17655]  ? xskq_create+0xbf/0x170
[  705.401728][T17655]  xskq_create+0xbf/0x170
[  705.406106][T17655]  xsk_init_queue+0xad/0x100
[  705.410747][T17655]  xsk_setsockopt+0x4c9/0x750
[  705.415505][T17655]  ? xsk_poll+0x670/0x670
[  705.419908][T17655]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  705.426130][T17655]  ? xsk_poll+0x670/0x670
[  705.430496][T17655]  do_sock_setsockopt+0x175/0x1a0
[  705.435592][T17655]  __x64_sys_setsockopt+0x182/0x200
[  705.440850][T17655]  do_syscall_64+0x55/0xb0
[  705.445313][T17655]  ? clear_bhb_loop+0x40/0x90
[  705.450033][T17655]  ? clear_bhb_loop+0x40/0x90
[  705.454754][T17655]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  705.460675][T17655] RIP: 0033:0x7f6aae99e0d9
[  705.465120][T17655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.484760][T17655] RSP: 002b:00007f6aaf7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  705.493221][T17655] RAX: ffffffffffffffda RBX: 00007f6aaec25fa0 RCX: 00007f6aae99e0d9
[  705.501224][T17655] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[  705.509232][T17655] RBP: 00007f6aaea35024 R08: 0000000000000004 R09: 0000000000000000
[  705.517236][T17655] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  705.525238][T17655] R13: 00007f6aaec26038 R14: 00007f6aaec25fa0 R15: 00007ffc60956728
[  705.533286][T17655]  </TASK>
[  705.613388][T17655] Mem-Info:
[  705.619363][T17655] active_anon:6857 inactive_anon:0 isolated_anon:0
[  705.619363][T17655]  active_file:19152 inactive_file:40202 isolated_file:0
[  705.619363][T17655]  unevictable:768 dirty:147 writeback:0
[  705.619363][T17655]  slab_reclaimable:10795 slab_unreclaimable:92430
[  705.619363][T17655]  mapped:24717 shmem:1361 pagetables:541
[  705.619363][T17655]  sec_pagetables:0 bounce:0
[  705.619363][T17655]  kernel_misc_reclaimable:0
[  705.619363][T17655]  free:1332010 free_pcp:10165 free_cma:0
[  705.727232][T17657] netlink: 'syz.1.4256': attribute type 10 has an invalid length.
[  705.781975][T17655] Node 0 active_anon:27528kB inactive_anon:0kB active_file:76608kB inactive_file:160604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98968kB dirty:588kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11020kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no
[  705.838973][T17655] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  705.893109][T17655] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  705.943324][T17655] lowmem_reserve[]: 0 2521 2522 2522 2522
[  705.950972][T17655] Node 0 DMA32 free:1412212kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27456kB inactive_anon:0kB active_file:76608kB inactive_file:159768kB unevictable:1536kB writepending:588kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:19448kB local_pcp:10300kB free_cma:0kB
[  706.013130][T17655] lowmem_reserve[]: 0 0 0 0 0
[  706.018374][T17655] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  706.080903][T17655] lowmem_reserve[]: 0 0 0 0 0
[  706.171327][T17655] Node 1 Normal free:3892152kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:11780kB free_cma:0kB
[  706.213680][T17655] lowmem_reserve[]: 0 0 0 0 0
[  706.218823][T17655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  706.273502][T17655] Node 0 DMA32: 820*4kB (UME) 853*8kB (UM) 1213*16kB (UME) 1080*32kB (UME) 1131*64kB (UME) 989*128kB (UME) 448*256kB (UME) 267*512kB (UME) 128*1024kB (UME) 4*2048kB (UME) 189*4096kB (M) = 1427848kB
[  706.344029][T17655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  706.367492][T17655] Node 1 Normal: 248*4kB (UM) 73*8kB (UME) 47*16kB (UME) 57*32kB (UME) 22*64kB (UME) 8*128kB (UE) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3892152kB
[  706.391150][T17655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  706.403075][T17655] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  706.412588][T17655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  706.422602][T17655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  706.432599][T17655] 60715 total pagecache pages
[  706.437773][T17655] 0 pages in swap cache
[  706.442092][T17655] Free swap  = 124996kB
[  706.447349][T17655] Total swap = 124996kB
[  706.451855][T17655] 2097051 pages RAM
[  706.456421][T17655] 0 pages HighMem/MovableOnly
[  706.462421][T17655] 416955 pages reserved
[  706.467088][T17655] 0 pages cma reserved
[  707.367033][T17693] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4268'.
[  707.682386][T17701] netlink: 'syz.3.4273': attribute type 10 has an invalid length.
[  707.836876][T17701] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.870742][T17701] bond0: (slave bridge0): Releasing backup interface
[  708.335164][T17723] netlink: 'syz.0.4282': attribute type 10 has an invalid length.
[  708.396027][T17723] bridge0: entered allmulticast mode
[  709.327877][T17738] netlink: 'syz.1.4288': attribute type 11 has an invalid length.
[  709.339521][T17738] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4288'.
[  709.419509][T17741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  710.975249][T17792] FAULT_INJECTION: forcing a failure.
[  710.975249][T17792] name failslab, interval 1, probability 0, space 0, times 0
[  711.003120][T17792] CPU: 0 PID: 17792 Comm: syz.3.4307 Not tainted syzkaller #0
[  711.010630][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  711.020712][T17792] Call Trace:
[  711.024013][T17792]  <TASK>
[  711.026971][T17792]  dump_stack_lvl+0x18c/0x250
[  711.031686][T17792]  ? show_regs_print_info+0x20/0x20
[  711.036920][T17792]  ? load_image+0x420/0x420
[  711.041466][T17792]  ? __might_sleep+0xe0/0xe0
[  711.046089][T17792]  ? __lock_acquire+0x7d80/0x7d80
[  711.051153][T17792]  should_fail_ex+0x394/0x4c0
[  711.055879][T17792]  should_failslab+0x9/0x20
[  711.060440][T17792]  slab_pre_alloc_hook+0x59/0x300
[  711.065506][T17792]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  711.071282][T17792]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  711.077041][T17792]  __kmem_cache_alloc_node+0x53/0x250
[  711.082458][T17792]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  711.088196][T17792]  __kmalloc+0xa7/0x240
[  711.092369][T17792]  tomoyo_realpath_from_path+0xe6/0x5c0
[  711.097937][T17792]  ? tomoyo_domain+0xd6/0x120
[  711.102725][T17792]  tomoyo_path_number_perm+0x248/0x5e0
[  711.108199][T17792]  ? tomoyo_path_number_perm+0x217/0x5e0
[  711.113846][T17792]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  711.119327][T17792]  ? ksys_write+0x1d2/0x260
[  711.123878][T17792]  ? __fget_files+0x28/0x460
[  711.128491][T17792]  security_file_ioctl+0x70/0xa0
[  711.133447][T17792]  __se_sys_ioctl+0x48/0x170
[  711.138056][T17792]  do_syscall_64+0x55/0xb0
[  711.142478][T17792]  ? clear_bhb_loop+0x40/0x90
[  711.147161][T17792]  ? clear_bhb_loop+0x40/0x90
[  711.151857][T17792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  711.157756][T17792] RIP: 0033:0x7f8ed319e0d9
[  711.162179][T17792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.181800][T17792] RSP: 002b:00007f8ed13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  711.190242][T17792] RAX: ffffffffffffffda RBX: 00007f8ed3425fa0 RCX: 00007f8ed319e0d9
[  711.198239][T17792] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  711.206239][T17792] RBP: 00007f8ed13f6090 R08: 0000000000000000 R09: 0000000000000000
[  711.214228][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  711.222218][T17792] R13: 00007f8ed3426038 R14: 00007f8ed3425fa0 R15: 00007ffdeb487988
[  711.230258][T17792]  </TASK>
[  711.242686][T17792] ERROR: Out of memory at tomoyo_realpath_from_path.
[  711.561191][T17804] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4311'.
[  711.596438][T17804] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  711.899234][T12165] cgroup: fork rejected by pids controller in /syz0
[  712.682143][T14630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.834852][T14630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.919536][T14630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.015874][T14630] batman_adv: batadv0: Removing interface: netdevsim0
[  713.028457][T14630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.351283][T17846] FAULT_INJECTION: forcing a failure.
[  713.351283][T17846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  713.364909][T17846] CPU: 0 PID: 17846 Comm: syz.2.4327 Not tainted syzkaller #0
[  713.372414][T17846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  713.382526][T17846] Call Trace:
[  713.385836][T17846]  <TASK>
[  713.388820][T17846]  dump_stack_lvl+0x18c/0x250
[  713.393530][T17846]  ? show_regs_print_info+0x20/0x20
[  713.398766][T17846]  ? load_image+0x420/0x420
[  713.403314][T17846]  ? shmem_get_folio_gfp+0x14ae/0x2b40
[  713.408812][T17846]  ? __lock_acquire+0x7d80/0x7d80
[  713.413875][T17846]  ? __rwlock_init+0x150/0x150
[  713.418679][T17846]  should_fail_ex+0x394/0x4c0
[  713.423416][T17846]  copy_page_from_iter_atomic+0x29e/0x13d0
[  713.429261][T17846]  ? shmem_get_folio_gfp+0x2780/0x2b40
[  713.434783][T17846]  ? iov_iter_zero+0x1160/0x1160
[  713.439771][T17846]  ? shmem_write_begin+0x1cf/0x430
[  713.444925][T17846]  generic_perform_write+0x353/0x5c0
[  713.450287][T17846]  ? generic_file_direct_write+0x3e0/0x3e0
[  713.456118][T17846]  ? file_update_time+0x192/0x1a0
[  713.461158][T17846]  shmem_file_write_iter+0xfb/0x120
[  713.466381][T17846]  vfs_write+0x474/0x9a0
[  713.470651][T17846]  ? file_end_write+0x250/0x250
[  713.475537][T17846]  ? __fget_files+0x3fc/0x460
[  713.480263][T17846]  ? __fdget_pos+0x2a3/0x330
[  713.484884][T17846]  ? ksys_write+0x74/0x260
[  713.489324][T17846]  ksys_write+0x151/0x260
[  713.493685][T17846]  ? __ia32_sys_read+0x90/0x90
[  713.498477][T17846]  ? syscall_enter_from_user_mode+0x2e/0x80
[  713.504394][T17846]  do_syscall_64+0x55/0xb0
[  713.508823][T17846]  ? clear_bhb_loop+0x40/0x90
[  713.513514][T17846]  ? clear_bhb_loop+0x40/0x90
[  713.518205][T17846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  713.524109][T17846] RIP: 0033:0x7f0f8239e0d9
[  713.528540][T17846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.548161][T17846] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  713.556588][T17846] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  713.564566][T17846] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000008
[  713.572555][T17846] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  713.580542][T17846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.588527][T17846] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  713.596524][T17846]  </TASK>
[  713.822097][T17856] netlink: 'syz.3.4328': attribute type 33 has an invalid length.
[  713.868407][T17856] netlink: 'syz.3.4328': attribute type 3 has an invalid length.
[  713.903328][T17856] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.4328'.
[  714.085823][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  714.096709][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  714.123566][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  714.132508][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  714.151218][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  714.159455][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  714.375535][T17875] FAULT_INJECTION: forcing a failure.
[  714.375535][T17875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  714.388783][T17875] CPU: 1 PID: 17875 Comm: syz.2.4332 Not tainted syzkaller #0
[  714.396266][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  714.406344][T17875] Call Trace:
[  714.409647][T17875]  <TASK>
[  714.412618][T17875]  dump_stack_lvl+0x18c/0x250
[  714.417325][T17875]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  714.424556][T17875]  ? show_regs_print_info+0x20/0x20
[  714.429804][T17875]  ? load_image+0x420/0x420
[  714.434356][T17875]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  714.439863][T17875]  should_fail_ex+0x394/0x4c0
[  714.444596][T17875]  strncpy_from_user+0x36/0x2f0
[  714.449497][T17875]  ? __local_bh_disable_ip+0x108/0x1a0
[  714.455002][T17875]  strncpy_from_user_nofault+0x71/0x140
[  714.460587][T17875]  bpf_probe_read_user_str+0x2a/0x70
[  714.465900][T17875]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  714.471395][T17875]  bpf_test_run+0x2df/0x870
[  714.475965][T17875]  ? bpf_test_run+0x174/0x870
[  714.480684][T17875]  ? dst_hold+0x70/0x70
[  714.484863][T17875]  ? eth_get_headlen+0x210/0x210
[  714.489822][T17875]  ? slab_build_skb+0x25a/0x3e0
[  714.494693][T17875]  ? convert___skb_to_skb+0x3d/0x590
[  714.500021][T17875]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  714.505440][T17875]  ? cpu_online+0x60/0x60
[  714.509827][T17875]  bpf_prog_test_run+0x31f/0x390
[  714.514817][T17875]  __sys_bpf+0x49d/0x890
[  714.519110][T17875]  ? bpf_link_show_fdinfo+0x390/0x390
[  714.524535][T17875]  ? lock_chain_count+0x20/0x20
[  714.529450][T17875]  __x64_sys_bpf+0x7c/0x90
[  714.533896][T17875]  do_syscall_64+0x55/0xb0
[  714.538330][T17875]  ? clear_bhb_loop+0x40/0x90
[  714.543032][T17875]  ? clear_bhb_loop+0x40/0x90
[  714.547741][T17875]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  714.553659][T17875] RIP: 0033:0x7f0f8239e0d9
[  714.558085][T17875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.577786][T17875] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  714.586212][T17875] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  714.594194][T17875] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  714.602172][T17875] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  714.610164][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  714.618148][T17875] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  714.626138][T17875]  </TASK>
[  715.469639][T17861] chnl_net:caif_netlink_parms(): no params data found
[  715.974188][T17861] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.981356][T17861] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.996609][T17861] bridge_slave_0: entered allmulticast mode
[  716.017404][T17861] bridge_slave_0: entered promiscuous mode
[  716.028198][T17861] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.041661][T17861] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.063135][T17861] bridge_slave_1: entered allmulticast mode
[  716.083284][T17861] bridge_slave_1: entered promiscuous mode
[  716.250858][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.265965][T15138] Bluetooth: hci3: command tx timeout
[  716.292237][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  716.696021][T17861] team0: Port device team_slave_0 added
[  716.755803][T14630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.781913][T14630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.876478][T14630] veth1_macvtap: left promiscuous mode
[  716.882218][T14630] veth0_macvtap: left promiscuous mode
[  716.893306][T14630] veth1_vlan: left promiscuous mode
[  716.898747][T14630] veth0_vlan: left promiscuous mode
[  718.346887][T15138] Bluetooth: hci3: command tx timeout
[  718.386790][T17861] team0: Port device team_slave_1 added
[  718.573660][T17861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  718.589367][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.659216][T17861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.693678][T17861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.700651][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.768204][T17861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  719.025982][T17861] hsr_slave_0: entered promiscuous mode
[  719.089865][T17861] hsr_slave_1: entered promiscuous mode
[  719.125778][T17861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  719.138835][T17861] Cannot create hsr debugfs directory
[  719.406132][T18018] netlink: 'syz.2.4369': attribute type 10 has an invalid length.
[  719.845164][T18022] netlink: 'syz.2.4370': attribute type 10 has an invalid length.
[  719.892345][T18019] 
€Â0: renamed from pim6reg1
[  720.292754][T18035] FAULT_INJECTION: forcing a failure.
[  720.292754][T18035] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  720.310368][T18035] CPU: 1 PID: 18035 Comm: syz.2.4373 Not tainted syzkaller #0
[  720.317868][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  720.327940][T18035] Call Trace:
[  720.331253][T18035]  <TASK>
[  720.334207][T18035]  dump_stack_lvl+0x18c/0x250
[  720.338902][T18035]  ? show_regs_print_info+0x20/0x20
[  720.344111][T18035]  ? load_image+0x420/0x420
[  720.348644][T18035]  ? __might_fault+0xaa/0x120
[  720.353352][T18035]  ? __lock_acquire+0x7d80/0x7d80
[  720.358491][T18035]  should_fail_ex+0x394/0x4c0
[  720.363190][T18035]  _copy_from_user+0x2f/0xe0
[  720.367795][T18035]  ____sys_sendmsg+0x329/0x980
[  720.372575][T18035]  ? __sys_sendmsg_sock+0x30/0x30
[  720.377609][T18035]  ? __import_iovec+0x3fa/0x850
[  720.382482][T18035]  ? import_iovec+0x73/0xa0
[  720.387009][T18035]  ___sys_sendmsg+0x2a6/0x360
[  720.391702][T18035]  ? get_pid_task+0x20/0x1e0
[  720.396315][T18035]  ? __sys_sendmsg+0x2b0/0x2b0
[  720.401106][T18035]  ? __lock_acquire+0x7d80/0x7d80
[  720.406163][T18035]  __se_sys_sendmsg+0x1d0/0x2c0
[  720.411043][T18035]  ? __x64_sys_sendmsg+0x80/0x80
[  720.416003][T18035]  ? lockdep_hardirqs_on+0x98/0x150
[  720.421215][T18035]  do_syscall_64+0x55/0xb0
[  720.425640][T18035]  ? clear_bhb_loop+0x40/0x90
[  720.430340][T18035]  ? clear_bhb_loop+0x40/0x90
[  720.435033][T18035]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  720.440958][T18035] RIP: 0033:0x7f0f8239e0d9
[  720.445395][T18035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.465020][T18035] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  720.473446][T18035] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  720.481426][T18035] RDX: 0000000030000844 RSI: 0000200000001d00 RDI: 0000000000000004
[  720.489414][T18035] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  720.497404][T18035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  720.505393][T18035] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  720.513388][T18035]  </TASK>
[  720.541618][T15138] Bluetooth: hci3: command tx timeout
[  721.040835][T17861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  721.065892][T17861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  721.082531][T17861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  721.114213][T17861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  721.267846][T17861] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.318489][T17861] 8021q: adding VLAN 0 to HW filter on device team0
[  721.345500][T14618] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.352669][T14618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.371168][T14618] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.378323][T14618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  721.830810][T17861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  721.946124][T17861] veth0_vlan: entered promiscuous mode
[  721.967614][T17861] veth1_vlan: entered promiscuous mode
[  722.052116][T17861] veth0_macvtap: entered promiscuous mode
[  722.086908][T17861] veth1_macvtap: entered promiscuous mode
[  722.127504][T17861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  722.160449][T17861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.171216][T17861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.204017][T17861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.237791][T17861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.268004][T17861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.309078][T17861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.340863][T17861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  722.474561][T17861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.496769][T17861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.506115][T17861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.515156][T17861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  722.583394][T15138] Bluetooth: hci3: command tx timeout
[  722.703413][T14620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.717920][T14620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.805982][T14618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.863140][T14618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.144838][T18120] netlink: 'syz.0.4322': attribute type 10 has an invalid length.
[  723.437555][T18120] team0: Device wg1 is of different type
[  723.687184][T18129] netlink: 'syz.3.4393': attribute type 12 has an invalid length.
[  723.743253][T18129] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.4393'.
[  723.929244][T18139] netlink: 'syz.0.4395': attribute type 10 has an invalid length.
[  723.960308][T18139] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.968000][T18139] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.364524][T18154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  724.819721][T18179] netlink: 'syz.2.4408': attribute type 21 has an invalid length.
[  724.847312][T18179] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4408'.
[  725.102580][T18196] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4413'.
[  725.116560][T18200] netlink: 'syz.0.4414': attribute type 10 has an invalid length.
[  726.057159][T18242] FAULT_INJECTION: forcing a failure.
[  726.057159][T18242] name failslab, interval 1, probability 0, space 0, times 0
[  726.123938][T18242] CPU: 0 PID: 18242 Comm: syz.1.4429 Not tainted syzkaller #0
[  726.131456][T18242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.141544][T18242] Call Trace:
[  726.144847][T18242]  <TASK>
[  726.147818][T18242]  dump_stack_lvl+0x18c/0x250
[  726.152545][T18242]  ? show_regs_print_info+0x20/0x20
[  726.157844][T18242]  ? load_image+0x420/0x420
[  726.162400][T18242]  ? __might_sleep+0xe0/0xe0
[  726.167030][T18242]  ? __lock_acquire+0x7d80/0x7d80
[  726.172090][T18242]  should_fail_ex+0x394/0x4c0
[  726.176819][T18242]  should_failslab+0x9/0x20
[  726.181361][T18242]  slab_pre_alloc_hook+0x59/0x300
[  726.186422][T18242]  ? tomoyo_encode+0x2ad/0x570
[  726.191229][T18242]  ? tomoyo_encode+0x2ad/0x570
[  726.196039][T18242]  __kmem_cache_alloc_node+0x53/0x250
[  726.201453][T18242]  ? tomoyo_encode+0x2ad/0x570
[  726.206254][T18242]  __kmalloc+0xa7/0x240
[  726.210445][T18242]  tomoyo_encode+0x2ad/0x570
[  726.215089][T18242]  tomoyo_realpath_from_path+0x57c/0x5c0
[  726.220753][T18242]  ? tomoyo_domain+0xd6/0x120
[  726.225461][T18242]  tomoyo_path_number_perm+0x248/0x5e0
[  726.230944][T18242]  ? tomoyo_path_number_perm+0x217/0x5e0
[  726.236599][T18242]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  726.242076][T18242]  ? ksys_write+0x1d2/0x260
[  726.246620][T18242]  ? __fget_files+0x28/0x460
[  726.251233][T18242]  security_file_ioctl+0x70/0xa0
[  726.256193][T18242]  __se_sys_ioctl+0x48/0x170
[  726.260835][T18242]  do_syscall_64+0x55/0xb0
[  726.265277][T18242]  ? clear_bhb_loop+0x40/0x90
[  726.269983][T18242]  ? clear_bhb_loop+0x40/0x90
[  726.274703][T18242]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.280614][T18242] RIP: 0033:0x7f67b879e0d9
[  726.285046][T18242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.304667][T18242] RSP: 002b:00007f67b9676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.313176][T18242] RAX: ffffffffffffffda RBX: 00007f67b8a25fa0 RCX: 00007f67b879e0d9
[  726.321156][T18242] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  726.329143][T18242] RBP: 00007f67b9676090 R08: 0000000000000000 R09: 0000000000000000
[  726.337135][T18242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.345203][T18242] R13: 00007f67b8a26038 R14: 00007f67b8a25fa0 R15: 00007ffec4c1a338
[  726.353191][T18242]  </TASK>
[  726.363375][T18242] ERROR: Out of memory at tomoyo_realpath_from_path.
[  726.394176][T18249] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4431'.
[  726.411344][T18249] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  727.475224][T18291] netlink: 'syz.2.4442': attribute type 1 has an invalid length.
[  727.500935][T18291] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4442'.
[  727.939844][T18307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4447'.
[  728.213916][T18307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  728.240968][T18320] FAULT_INJECTION: forcing a failure.
[  728.240968][T18320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.254331][T18320] CPU: 0 PID: 18320 Comm: syz.3.4452 Not tainted syzkaller #0
[  728.261829][T18320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  728.271911][T18320] Call Trace:
[  728.275224][T18320]  <TASK>
[  728.278156][T18320]  dump_stack_lvl+0x18c/0x250
[  728.282840][T18320]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  728.288574][T18320]  ? show_regs_print_info+0x20/0x20
[  728.293827][T18320]  ? load_image+0x420/0x420
[  728.298373][T18320]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  728.303881][T18320]  should_fail_ex+0x394/0x4c0
[  728.308597][T18320]  strncpy_from_user+0x36/0x2f0
[  728.313507][T18320]  ? __local_bh_disable_ip+0x108/0x1a0
[  728.319010][T18320]  strncpy_from_user_nofault+0x71/0x140
[  728.324625][T18320]  bpf_probe_read_user_str+0x2a/0x70
[  728.329949][T18320]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  728.335450][T18320]  bpf_test_run+0x2df/0x870
[  728.340010][T18320]  ? bpf_test_run+0x174/0x870
[  728.344727][T18320]  ? dst_hold+0x70/0x70
[  728.348917][T18320]  ? eth_get_headlen+0x210/0x210
[  728.353884][T18320]  ? slab_build_skb+0x25a/0x3e0
[  728.358766][T18320]  ? convert___skb_to_skb+0x3d/0x590
[  728.364099][T18320]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  728.369551][T18320]  ? cpu_online+0x60/0x60
[  728.373927][T18320]  bpf_prog_test_run+0x31f/0x390
[  728.378911][T18320]  __sys_bpf+0x49d/0x890
[  728.383237][T18320]  ? bpf_link_show_fdinfo+0x390/0x390
[  728.388659][T18320]  ? lock_chain_count+0x20/0x20
[  728.393543][T18320]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  728.399577][T18320]  __x64_sys_bpf+0x7c/0x90
[  728.404031][T18320]  do_syscall_64+0x55/0xb0
[  728.408463][T18320]  ? clear_bhb_loop+0x40/0x90
[  728.413170][T18320]  ? clear_bhb_loop+0x40/0x90
[  728.417868][T18320]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  728.423775][T18320] RIP: 0033:0x7f8ed319e0d9
[  728.428203][T18320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.447819][T18320] RSP: 002b:00007f8ed13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  728.456253][T18320] RAX: ffffffffffffffda RBX: 00007f8ed3425fa0 RCX: 00007f8ed319e0d9
[  728.464249][T18320] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  728.472231][T18320] RBP: 00007f8ed13f6090 R08: 0000000000000000 R09: 0000000000000000
[  728.480229][T18320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  728.488239][T18320] R13: 00007f8ed3426038 R14: 00007f8ed3425fa0 R15: 00007ffdeb487988
[  728.496234][T18320]  </TASK>
[  728.627334][T18307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  728.684870][T18307] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  728.711737][T18307] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  728.722561][T18307] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  728.735525][T18307] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.742937][T18307] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.756777][T15138] Bluetooth: hci2: Dropping invalid advertising data
[  728.764831][T15138] Bluetooth: hci2: Malformed LE Event: 0x02
[  728.776519][T18307] bond0 (unregistering): Released all slaves
[  728.797912][T18316] netlink: 'syz.0.4451': attribute type 21 has an invalid length.
[  728.807313][T18316] netlink: 'syz.0.4451': attribute type 13 has an invalid length.
[  728.817040][T18316] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.4451'.
[  728.831133][T18321] netlink: 'syz.0.4451': attribute type 19 has an invalid length.
[  728.858872][T18321] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4451'.
[  729.124415][T18340] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4457'.
[  729.556163][T18375] FAULT_INJECTION: forcing a failure.
[  729.556163][T18375] name failslab, interval 1, probability 0, space 0, times 0
[  729.580252][T18375] CPU: 0 PID: 18375 Comm: syz.2.4467 Not tainted syzkaller #0
[  729.587763][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  729.597846][T18375] Call Trace:
[  729.601148][T18375]  <TASK>
[  729.604103][T18375]  dump_stack_lvl+0x18c/0x250
[  729.608820][T18375]  ? show_regs_print_info+0x20/0x20
[  729.614050][T18375]  ? load_image+0x420/0x420
[  729.618594][T18375]  ? __might_sleep+0xe0/0xe0
[  729.623219][T18375]  ? __lock_acquire+0x7d80/0x7d80
[  729.628284][T18375]  should_fail_ex+0x394/0x4c0
[  729.633002][T18375]  should_failslab+0x9/0x20
[  729.637551][T18375]  slab_pre_alloc_hook+0x59/0x300
[  729.642622][T18375]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  729.648390][T18375]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  729.654153][T18375]  __kmem_cache_alloc_node+0x53/0x250
[  729.659584][T18375]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  729.665488][T18375]  __kmalloc+0xa7/0x240
[  729.669696][T18375]  tomoyo_realpath_from_path+0xe6/0x5c0
[  729.675293][T18375]  ? tomoyo_domain+0xd6/0x120
[  729.680023][T18375]  tomoyo_path_number_perm+0x248/0x5e0
[  729.685539][T18375]  ? tomoyo_path_number_perm+0x217/0x5e0
[  729.691229][T18375]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  729.696732][T18375]  ? ksys_write+0x1d2/0x260
[  729.701303][T18375]  ? __fget_files+0x28/0x460
[  729.705957][T18375]  security_file_ioctl+0x70/0xa0
[  729.710972][T18375]  __se_sys_ioctl+0x48/0x170
[  729.715611][T18375]  do_syscall_64+0x55/0xb0
[  729.720067][T18375]  ? clear_bhb_loop+0x40/0x90
[  729.724782][T18375]  ? clear_bhb_loop+0x40/0x90
[  729.729500][T18375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  729.735459][T18375] RIP: 0033:0x7f0f8239e0d9
[  729.739906][T18375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.759557][T18375] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  729.768014][T18375] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  729.776016][T18375] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004
[  729.784014][T18375] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  729.792013][T18375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.800012][T18375] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  729.808046][T18375]  </TASK>
[  729.827449][T18375] ERROR: Out of memory at tomoyo_realpath_from_path.
[  730.005001][T18372] IPv6: Can't replace route, no match found
[  730.462874][T18400] syz.1.4473: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  730.533229][T18400] CPU: 0 PID: 18400 Comm: syz.1.4473 Not tainted syzkaller #0
[  730.540805][T18400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  730.550913][T18400] Call Trace:
[  730.554245][T18400]  <TASK>
[  730.557240][T18400]  dump_stack_lvl+0x18c/0x250
[  730.562004][T18400]  ? show_regs_print_info+0x20/0x20
[  730.567266][T18400]  ? load_image+0x420/0x420
[  730.571857][T18400]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  730.578345][T18400]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  730.584911][T18400]  warn_alloc+0x246/0x340
[  730.589300][T18400]  ? stack_trace_save+0xaa/0x100
[  730.594314][T18400]  ? zone_watermark_ok_safe+0x230/0x230
[  730.599933][T18400]  ? kasan_set_track+0x5f/0x70
[  730.604753][T18400]  ? kasan_set_track+0x4e/0x70
[  730.609562][T18400]  ? __kasan_kmalloc+0x8f/0xa0
[  730.614366][T18400]  ? xsk_init_queue+0xad/0x100
[  730.619190][T18400]  ? xsk_setsockopt+0x4c9/0x750
[  730.624095][T18400]  ? do_sock_setsockopt+0x175/0x1a0
[  730.629349][T18400]  ? __x64_sys_setsockopt+0x182/0x200
[  730.634789][T18400]  __vmalloc_node_range+0x129/0x1320
[  730.640242][T18400]  ? free_vm_area+0x50/0x50
[  730.644833][T18400]  vmalloc_user+0x74/0x80
[  730.649210][T18400]  ? xskq_create+0xbf/0x170
[  730.653772][T18400]  xskq_create+0xbf/0x170
[  730.658170][T18400]  xsk_init_queue+0xad/0x100
[  730.662825][T18400]  xsk_setsockopt+0x4c9/0x750
[  730.667559][T18400]  ? xsk_poll+0x670/0x670
[  730.671957][T18400]  ? __fget_files+0x28/0x460
[  730.676619][T18400]  ? aa_sock_opt_perm+0x74/0x100
[  730.681600][T18400]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  730.687181][T18400]  ? security_socket_setsockopt+0x7e/0xa0
[  730.693039][T18400]  ? xsk_poll+0x670/0x670
[  730.697425][T18400]  do_sock_setsockopt+0x175/0x1a0
[  730.702508][T18400]  ? __fdget+0x180/0x210
[  730.706819][T18400]  __x64_sys_setsockopt+0x182/0x200
[  730.712081][T18400]  do_syscall_64+0x55/0xb0
[  730.716529][T18400]  ? clear_bhb_loop+0x40/0x90
[  730.721245][T18400]  ? clear_bhb_loop+0x40/0x90
[  730.725978][T18400]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  730.731911][T18400] RIP: 0033:0x7f67b879e0d9
[  730.736364][T18400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  730.756014][T18400] RSP: 002b:00007f67b9676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  730.764484][T18400] RAX: ffffffffffffffda RBX: 00007f67b8a25fa0 RCX: 00007f67b879e0d9
[  730.772499][T18400] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  730.780509][T18400] RBP: 00007f67b8835024 R08: 0000000000004a00 R09: 0000000000000000
[  730.788530][T18400] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  730.796550][T18400] R13: 00007f67b8a26038 R14: 00007f67b8a25fa0 R15: 00007ffec4c1a338
[  730.804619][T18400]  </TASK>
[  730.857836][T18400] Mem-Info:
[  730.861022][T18400] active_anon:6871 inactive_anon:0 isolated_anon:0
[  730.861022][T18400]  active_file:19152 inactive_file:40214 isolated_file:0
[  730.861022][T18400]  unevictable:768 dirty:208 writeback:0
[  730.861022][T18400]  slab_reclaimable:10690 slab_unreclaimable:91921
[  730.861022][T18400]  mapped:24751 shmem:1361 pagetables:532
[  730.861022][T18400]  sec_pagetables:0 bounce:0
[  730.861022][T18400]  kernel_misc_reclaimable:0
[  730.861022][T18400]  free:1337248 free_pcp:13477 free_cma:0
[  730.987595][T18400] Node 0 active_anon:27496kB inactive_anon:0kB active_file:76608kB inactive_file:160652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99020kB dirty:840kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11140kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no
[  731.055785][T18400] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  731.143832][T18400] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  731.215949][T18400] lowmem_reserve[]: 0 2521 2522 2522 2522
[  731.231961][T18400] Node 0 DMA32 free:1441480kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27660kB inactive_anon:0kB active_file:76608kB inactive_file:159816kB unevictable:1536kB writepending:836kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:31104kB local_pcp:14284kB free_cma:0kB
[  731.284802][T18400] lowmem_reserve[]: 0 0 0 0 0
[  731.296919][T18400] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  731.363163][T18400] lowmem_reserve[]: 0 0 0 0 0
[  731.368024][T18400] Node 1 Normal free:3892152kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:11780kB free_cma:0kB
[  731.420915][T18400] lowmem_reserve[]: 0 0 0 0 0
[  731.427021][T18400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  731.483707][T18400] Node 0 DMA32: 0*4kB 137*8kB (UM) 1014*16kB (UME) 1649*32kB (UME) 1252*64kB (UME) 972*128kB (UME) 450*256kB (UME) 270*512kB (UME) 128*1024kB (UME) 4*2048kB (UME) 189*4096kB (M) = 1441480kB
[  731.546827][T18418] netlink: 'syz.0.4478': attribute type 9 has an invalid length.
[  731.582321][T18400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  731.613450][T18400] Node 1 Normal: 248*4kB (UM) 73*8kB (UME) 47*16kB (UME) 57*32kB (UME) 22*64kB 
[  731.613576][T18418] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4478'.
[  731.646561][T18400] (UME) 8*128kB (UE) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3892152kB
[  731.678722][T18400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  731.773616][T18400] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  731.782958][T18400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  731.799406][T18400] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  731.808794][T18400] 60728 total pagecache pages
[  731.854341][T18400] 0 pages in swap cache
[  731.859440][T18400] Free swap  = 124996kB
[  731.877427][T18400] Total swap = 124996kB
[  731.890539][T18400] 2097051 pages RAM
[  731.908237][T18422] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4479'.
[  731.923083][T18400] 0 pages HighMem/MovableOnly
[  731.927799][T18400] 416955 pages reserved
[  731.931990][T18400] 0 pages cma reserved
[  732.195051][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  732.218842][T18431] netlink: 'syz.2.4481': attribute type 2 has an invalid length.
[  732.237293][T18431] netlink: 'syz.2.4481': attribute type 8 has an invalid length.
[  732.282937][T18431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4481'.
[  732.725786][T18449] netlink: 'syz.3.4488': attribute type 10 has an invalid length.
[  732.817381][T18449] bond0: (slave wlan1): Releasing backup interface
[  732.828905][T18451] netlink: 'syz.0.4489': attribute type 10 has an invalid length.
[  732.838895][T18451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.874697][T18451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  732.896934][T18451] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  732.925052][T18445] vcan0: entered allmulticast mode
[  732.947303][T18458] netlink: 'syz.1.4487': attribute type 10 has an invalid length.
[  732.957126][T18458] veth0_macvtap: left promiscuous mode
[  733.430310][T18471] netlink: 'syz.2.4494': attribute type 3 has an invalid length.
[  733.448912][T18471] netlink: 'syz.2.4494': attribute type 1 has an invalid length.
[  733.462378][T18471] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.4494'.
[  733.560745][T18471] netlink: 'syz.2.4494': attribute type 19 has an invalid length.
[  733.570876][T18471] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4494'.
[  733.604146][T18479] netlink: 'syz.3.4497': attribute type 21 has an invalid length.
[  733.623498][T18478] delete_channel: no stack
[  734.263522][T18490] tap0: tun_chr_ioctl cmd 35111
[  734.519956][T18491] vcan0: entered allmulticast mode
[  734.577017][T18491] veth0_macvtap: left promiscuous mode
[  736.324128][T18530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  736.528593][T18545] FAULT_INJECTION: forcing a failure.
[  736.528593][T18545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  736.550887][T18539] vcan0: entered allmulticast mode
[  736.610653][T18545] CPU: 1 PID: 18545 Comm: syz.3.4522 Not tainted syzkaller #0
[  736.618257][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  736.628355][T18545] Call Trace:
[  736.631670][T18545]  <TASK>
[  736.634623][T18545]  dump_stack_lvl+0x18c/0x250
[  736.639350][T18545]  ? show_regs_print_info+0x20/0x20
[  736.644593][T18545]  ? load_image+0x420/0x420
[  736.649160][T18545]  ? __might_fault+0xaa/0x120
[  736.653878][T18545]  ? __lock_acquire+0x7d80/0x7d80
[  736.658943][T18545]  should_fail_ex+0x394/0x4c0
[  736.663702][T18545]  _copy_from_user+0x2f/0xe0
[  736.668359][T18545]  __sys_bpf+0x23e/0x890
[  736.672640][T18545]  ? bpf_link_show_fdinfo+0x390/0x390
[  736.678066][T18545]  ? lock_chain_count+0x20/0x20
[  736.682973][T18545]  __x64_sys_bpf+0x7c/0x90
[  736.687459][T18545]  do_syscall_64+0x55/0xb0
[  736.691913][T18545]  ? clear_bhb_loop+0x40/0x90
[  736.696625][T18545]  ? clear_bhb_loop+0x40/0x90
[  736.701333][T18545]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.707252][T18545] RIP: 0033:0x7f8ed319e0d9
[  736.711697][T18545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.731328][T18545] RSP: 002b:00007f8ed13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  736.739786][T18545] RAX: ffffffffffffffda RBX: 00007f8ed3425fa0 RCX: 00007f8ed319e0d9
[  736.747800][T18545] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005
[  736.755799][T18545] RBP: 00007f8ed13f6090 R08: 0000000000000000 R09: 0000000000000000
[  736.763803][T18545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  736.771803][T18545] R13: 00007f8ed3426038 R14: 00007f8ed3425fa0 R15: 00007ffdeb487988
[  736.779827][T18545]  </TASK>
[  736.786054][T18539] validate_nla: 3 callbacks suppressed
[  736.786095][T18539] netlink: 'syz.0.4519': attribute type 10 has an invalid length.
[  736.836446][T18539] veth0_macvtap: left promiscuous mode
[  737.561405][T18570] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.4532'.
[  737.588571][T18570] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  737.722590][T18571] netlink: 'syz.1.4531': attribute type 9 has an invalid length.
[  737.768167][T18571] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4531'.
[  738.216211][T18576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  738.582046][T18602] FAULT_INJECTION: forcing a failure.
[  738.582046][T18602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.635294][T18597] vcan0: entered allmulticast mode
[  738.694200][T18602] CPU: 0 PID: 18602 Comm: syz.1.4540 Not tainted syzkaller #0
[  738.701715][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  738.708439][T18597] netlink: 'syz.2.4539': attribute type 10 has an invalid length.
[  738.711783][T18602] Call Trace:
[  738.711800][T18602]  <TASK>
[  738.711810][T18602]  dump_stack_lvl+0x18c/0x250
[  738.711842][T18602]  ? show_regs_print_info+0x20/0x20
[  738.711866][T18602]  ? load_image+0x420/0x420
[  738.711899][T18602]  ? __might_fault+0xaa/0x120
[  738.745088][T18602]  ? __lock_acquire+0x7d80/0x7d80
[  738.750170][T18602]  should_fail_ex+0x394/0x4c0
[  738.754923][T18602]  _copy_from_user+0x2f/0xe0
[  738.759557][T18602]  dev_ifconf+0xdc/0x300
[  738.763966][T18602]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  738.769160][T18602]  sock_ioctl+0x1e1/0x7e0
[  738.773540][T18602]  ? sock_poll+0x3e0/0x3e0
[  738.778006][T18602]  ? bpf_lsm_file_ioctl+0x9/0x10
[  738.782974][T18602]  ? security_file_ioctl+0x80/0xa0
[  738.788160][T18602]  ? sock_poll+0x3e0/0x3e0
[  738.792604][T18602]  __se_sys_ioctl+0xfd/0x170
[  738.797229][T18602]  do_syscall_64+0x55/0xb0
[  738.801674][T18602]  ? clear_bhb_loop+0x40/0x90
[  738.806395][T18602]  ? clear_bhb_loop+0x40/0x90
[  738.811128][T18602]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.817063][T18602] RIP: 0033:0x7f67b879e0d9
[  738.821509][T18602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.841145][T18602] RSP: 002b:00007f67b9676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  738.849601][T18602] RAX: ffffffffffffffda RBX: 00007f67b8a25fa0 RCX: 00007f67b879e0d9
[  738.857612][T18602] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  738.865640][T18602] RBP: 00007f67b9676090 R08: 0000000000000000 R09: 0000000000000000
[  738.873642][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  738.881639][T18602] R13: 00007f67b8a26038 R14: 00007f67b8a25fa0 R15: 00007ffec4c1a338
[  738.889665][T18602]  </TASK>
[  738.955390][T18605] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4542'.
[  738.996943][T18605] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  739.625356][T18622] netlink: 'syz.2.4549': attribute type 9 has an invalid length.
[  739.662253][T18622] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4549'.
[  740.103601][T18632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  740.460462][T18647] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4556'.
[  744.248291][T18676] FAULT_INJECTION: forcing a failure.
[  744.248291][T18676] name failslab, interval 1, probability 0, space 0, times 0
[  744.261198][T18676] CPU: 1 PID: 18676 Comm: syz.2.4568 Not tainted syzkaller #0
[  744.268760][T18676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  744.278856][T18676] Call Trace:
[  744.282169][T18676]  <TASK>
[  744.285138][T18676]  dump_stack_lvl+0x18c/0x250
[  744.289870][T18676]  ? show_regs_print_info+0x20/0x20
[  744.295110][T18676]  ? load_image+0x420/0x420
[  744.299669][T18676]  ? __might_sleep+0xe0/0xe0
[  744.304300][T18676]  ? __lock_acquire+0x7d80/0x7d80
[  744.309377][T18676]  should_fail_ex+0x394/0x4c0
[  744.314118][T18676]  should_failslab+0x9/0x20
[  744.318664][T18676]  slab_pre_alloc_hook+0x59/0x300
[  744.323717][T18676]  ? tomoyo_encode+0x2ad/0x570
[  744.328546][T18676]  ? tomoyo_encode+0x2ad/0x570
[  744.333358][T18676]  __kmem_cache_alloc_node+0x53/0x250
[  744.338811][T18676]  ? tomoyo_encode+0x2ad/0x570
[  744.343620][T18676]  __kmalloc+0xa7/0x240
[  744.347832][T18676]  tomoyo_encode+0x2ad/0x570
[  744.352477][T18676]  tomoyo_realpath_from_path+0x57c/0x5c0
[  744.358155][T18676]  ? tomoyo_domain+0xd6/0x120
[  744.362880][T18676]  tomoyo_path_number_perm+0x248/0x5e0
[  744.368360][T18676]  ? tomoyo_path_number_perm+0x217/0x5e0
[  744.374037][T18676]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  744.379534][T18676]  ? ksys_write+0x1d2/0x260
[  744.384100][T18676]  ? __fget_files+0x28/0x460
[  744.388749][T18676]  security_file_ioctl+0x70/0xa0
[  744.393715][T18676]  __se_sys_ioctl+0x48/0x170
[  744.398353][T18676]  do_syscall_64+0x55/0xb0
[  744.402796][T18676]  ? clear_bhb_loop+0x40/0x90
[  744.407488][T18676]  ? clear_bhb_loop+0x40/0x90
[  744.412201][T18676]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.418140][T18676] RIP: 0033:0x7f0f8239e0d9
[  744.422586][T18676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.442206][T18676] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  744.450643][T18676] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  744.458659][T18676] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004
[  744.466642][T18676] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  744.474637][T18676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.482624][T18676] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  744.490614][T18676]  </TASK>
[  744.502765][T18676] ERROR: Out of memory at tomoyo_realpath_from_path.
[  745.921697][T18686] netlink: 'syz.2.4573': attribute type 5 has an invalid length.
[  745.980150][T18687] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4571'.
[  746.240693][T18698] netlink: 'syz.1.4576': attribute type 10 has an invalid length.
[  746.490099][T18703] netlink: 'syz.1.4578': attribute type 3 has an invalid length.
[  746.537829][T18703] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4578'.
[  747.358377][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  747.365077][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  750.303189][T18726] netlink: 'syz.1.4586': attribute type 10 has an invalid length.
[  752.384168][T18759] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4597'.
[  754.162201][T18772] netlink: 'syz.2.4600': attribute type 153 has an invalid length.
[  754.183491][T18772] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4600'.
[  754.879874][T18795] netlink: 'syz.2.4607': attribute type 21 has an invalid length.
[  754.897032][T18795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4607'.
[  757.762336][T18818] netlink: 'syz.2.4612': attribute type 11 has an invalid length.
[  757.770441][T18818] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4612'.
[  758.765737][T18842] netlink: 'syz.0.4621': attribute type 21 has an invalid length.
[  758.792560][T18842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4621'.
[  758.896873][T18858] netlink: 'syz.2.4626': attribute type 10 has an invalid length.
[  759.839233][T18867] netlink: 'syz.2.4629': attribute type 21 has an invalid length.
[  759.946123][T18867] IPv6: NLM_F_CREATE should be specified when creating new route
[  759.970866][T18867] IPv6: Can't replace route, no match found
[  760.140525][T18867] netlink: 'syz.2.4629': attribute type 1 has an invalid length.
[  762.606916][T18891] syzkaller0: entered promiscuous mode
[  762.612498][T18891] syzkaller0: entered allmulticast mode
[  762.620845][T18896] netlink: 'syz.1.4637': attribute type 39 has an invalid length.
[  764.735317][T18924] netlink: 'syz.1.4643': attribute type 21 has an invalid length.
[  764.755176][T18924] IPv6: NLM_F_CREATE should be specified when creating new route
[  764.782136][T18924] IPv6: Can't replace route, no match found
[  764.802525][T18926] netlink: 'syz.2.4644': attribute type 5 has an invalid length.
[  764.832598][T18927] netlink: 'syz.1.4643': attribute type 1 has an invalid length.
[  764.842463][T18912] netlink: 'syz.3.4639': attribute type 21 has an invalid length.
[  764.856747][T18912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4639'.
[  764.945517][T18929] netlink: 'syz.0.4645': attribute type 10 has an invalid length.
[  767.786567][T18975] netlink: 'syz.0.4667': attribute type 10 has an invalid length.
[  767.822348][T18975] team0: Device wg1 is of different type
[  767.915883][T18981] FAULT_INJECTION: forcing a failure.
[  767.915883][T18981] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  767.952664][T18981] CPU: 1 PID: 18981 Comm: syz.3.4662 Not tainted syzkaller #0
[  767.960203][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  767.970328][T18981] Call Trace:
[  767.973645][T18981]  <TASK>
[  767.976609][T18981]  dump_stack_lvl+0x18c/0x250
[  767.981322][T18981]  ? show_regs_print_info+0x20/0x20
[  767.986553][T18981]  ? load_image+0x420/0x420
[  767.991104][T18981]  ? __lock_acquire+0x7d80/0x7d80
[  767.996159][T18981]  ? verify_lock_unused+0x140/0x140
[  768.001398][T18981]  should_fail_ex+0x394/0x4c0
[  768.006120][T18981]  prepare_alloc_pages+0x1e1/0x5b0
[  768.011269][T18981]  __alloc_pages+0x134/0x460
[  768.015891][T18981]  ? zone_statistics+0x170/0x170
[  768.020858][T18981]  ? mt_find+0x169/0x640
[  768.025131][T18981]  ? handle_mm_fault+0xe6/0x4a50
[  768.030108][T18981]  ? __lock_acquire+0x7d80/0x7d80
[  768.035183][T18981]  __folio_alloc+0x10/0x20
[  768.039638][T18981]  vma_alloc_folio+0x474/0x8f0
[  768.044449][T18981]  ? handle_mm_fault+0xe6/0x4a50
[  768.049467][T18981]  handle_mm_fault+0x1ab6/0x4a50
[  768.054475][T18981]  ? handle_mm_fault+0xe6/0x4a50
[  768.059487][T18981]  ? numa_migrate_prep+0x350/0x350
[  768.064635][T18981]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  768.069946][T18981]  do_user_addr_fault+0x736/0x12d0
[  768.075097][T18981]  exc_page_fault+0x64/0x100
[  768.079744][T18981]  asm_exc_page_fault+0x26/0x30
[  768.084627][T18981] RIP: 0010:rep_movs_alternative+0x33/0x90
[  768.090462][T18981] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[  768.110181][T18981] RSP: 0018:ffffc90003297bb0 EFLAGS: 00050202
[  768.116292][T18981] RAX: 000000306c6e7574 RBX: 0000000000000028 RCX: 0000000000000028
[  768.124272][T18981] RDX: 0000000000000000 RSI: ffffc90003297c40 RDI: 0000200000002500
[  768.132269][T18981] RBP: ffffc90003297cf0 R08: ffffc90003297c67 R09: 1ffff92000652f8c
[  768.140276][T18981] R10: dffffc0000000000 R11: fffff52000652f8d R12: 0000200000002528
[  768.148274][T18981] R13: 00000000004c501f R14: 0000200000002500 R15: ffffc90003297c40
[  768.156269][T18981]  _copy_to_user+0x85/0xa0
[  768.160704][T18981]  inet_gifconf+0x338/0x500
[  768.165304][T18981]  ? inet_make_mask+0x70/0x70
[  768.170017][T18981]  ? __might_fault+0xaa/0x120
[  768.174720][T18981]  ? __might_fault+0xc6/0x120
[  768.179418][T18981]  ? __might_fault+0xaa/0x120
[  768.184129][T18981]  dev_ifconf+0x206/0x300
[  768.188487][T18981]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  768.193627][T18981]  sock_ioctl+0x1e1/0x7e0
[  768.197983][T18981]  ? sock_poll+0x3e0/0x3e0
[  768.202433][T18981]  ? bpf_lsm_file_ioctl+0x9/0x10
[  768.207386][T18981]  ? security_file_ioctl+0x80/0xa0
[  768.212518][T18981]  ? sock_poll+0x3e0/0x3e0
[  768.216950][T18981]  __se_sys_ioctl+0xfd/0x170
[  768.221568][T18981]  do_syscall_64+0x55/0xb0
[  768.226019][T18981]  ? clear_bhb_loop+0x40/0x90
[  768.230716][T18981]  ? clear_bhb_loop+0x40/0x90
[  768.235410][T18981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  768.241317][T18981] RIP: 0033:0x7f8ed319e0d9
[  768.245760][T18981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.265398][T18981] RSP: 002b:00007f8ed13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  768.273835][T18981] RAX: ffffffffffffffda RBX: 00007f8ed3425fa0 RCX: 00007f8ed319e0d9
[  768.281826][T18981] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  768.289815][T18981] RBP: 00007f8ed13f6090 R08: 0000000000000000 R09: 0000000000000000
[  768.297806][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.305800][T18981] R13: 00007f8ed3426038 R14: 00007f8ed3425fa0 R15: 00007ffdeb487988
[  768.313807][T18981]  </TASK>
[  768.605731][T18994] netlink: 'syz.3.4669': attribute type 10 has an invalid length.
[  768.634568][T18979] netlink: 'syz.1.4659': attribute type 21 has an invalid length.
[  768.669137][T18979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4659'.
[  768.742136][T18998] netlink: 'syz.0.4668': attribute type 21 has an invalid length.
[  768.768954][T18998] IPv6: NLM_F_CREATE should be specified when creating new route
[  768.777564][T18998] IPv6: Can't replace route, no match found
[  768.836116][T19002] netlink: 'syz.0.4668': attribute type 1 has an invalid length.
[  768.937663][T19007] netlink: 'syz.3.4671': attribute type 21 has an invalid length.
[  768.960703][T19007] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4671'.
[  769.657940][T19010] sit0: entered allmulticast mode
[  769.697171][T19013] sit0: entered promiscuous mode
[  770.814678][T19055] FAULT_INJECTION: forcing a failure.
[  770.814678][T19055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  770.827963][T19055] CPU: 1 PID: 19055 Comm: syz.1.4689 Not tainted syzkaller #0
[  770.835453][T19055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  770.845535][T19055] Call Trace:
[  770.848845][T19055]  <TASK>
[  770.851802][T19055]  dump_stack_lvl+0x18c/0x250
[  770.856567][T19055]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  770.863841][T19055]  ? show_regs_print_info+0x20/0x20
[  770.869104][T19055]  ? load_image+0x420/0x420
[  770.873667][T19055]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  770.879184][T19055]  should_fail_ex+0x394/0x4c0
[  770.883913][T19055]  strncpy_from_user+0x36/0x2f0
[  770.888797][T19055]  ? __local_bh_disable_ip+0x108/0x1a0
[  770.894306][T19055]  strncpy_from_user_nofault+0x71/0x140
[  770.899885][T19055]  bpf_probe_read_user_str+0x2a/0x70
[  770.905202][T19055]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  770.910676][T19055]  bpf_test_run+0x2df/0x870
[  770.915224][T19055]  ? bpf_test_run+0x174/0x870
[  770.919929][T19055]  ? dst_hold+0x70/0x70
[  770.924111][T19055]  ? eth_get_headlen+0x210/0x210
[  770.929085][T19055]  ? slab_build_skb+0x25a/0x3e0
[  770.933968][T19055]  ? convert___skb_to_skb+0x3d/0x590
[  770.939317][T19055]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  770.944726][T19055]  ? cpu_online+0x60/0x60
[  770.949089][T19055]  bpf_prog_test_run+0x31f/0x390
[  770.954398][T19055]  __sys_bpf+0x49d/0x890
[  770.958651][T19055]  ? bpf_link_show_fdinfo+0x390/0x390
[  770.964046][T19055]  ? lock_chain_count+0x20/0x20
[  770.970488][T19055]  __x64_sys_bpf+0x7c/0x90
[  770.974954][T19055]  do_syscall_64+0x55/0xb0
[  770.979392][T19055]  ? clear_bhb_loop+0x40/0x90
[  770.984094][T19055]  ? clear_bhb_loop+0x40/0x90
[  770.988802][T19055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  770.994715][T19055] RIP: 0033:0x7f67b879e0d9
[  770.999155][T19055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.018778][T19055] RSP: 002b:00007f67b9676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  771.027215][T19055] RAX: ffffffffffffffda RBX: 00007f67b8a25fa0 RCX: 00007f67b879e0d9
[  771.035205][T19055] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  771.043201][T19055] RBP: 00007f67b9676090 R08: 0000000000000000 R09: 0000000000000000
[  771.051360][T19055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  771.059343][T19055] R13: 00007f67b8a26038 R14: 00007f67b8a25fa0 R15: 00007ffec4c1a338
[  771.067362][T19055]  </TASK>
[  771.265288][T19057] netlink: 'syz.3.4690': attribute type 10 has an invalid length.
[  771.274369][T19057] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4690'.
[  771.286272][T19057] hsr0: entered promiscuous mode
[  771.297532][T19057] bridge0: port 2(hsr0) entered blocking state
[  771.305652][T19057] bridge0: port 2(hsr0) entered disabled state
[  771.314143][T19057] hsr0: entered allmulticast mode
[  771.320506][T19057] hsr_slave_0: entered allmulticast mode
[  771.330278][T19057] hsr_slave_1: entered allmulticast mode
[  771.592918][T19063] netlink: 'syz.2.4693': attribute type 1 has an invalid length.
[  771.642797][T19063] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4693'.
[  771.931876][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4699'.
[  771.948669][T19076] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4699'.
[  772.027208][T19084] bridge0: port 2(batadv0) entered blocking state
[  772.033963][T19084] bridge0: port 2(batadv0) entered disabled state
[  772.053426][T19084] batadv0: entered allmulticast mode
[  772.070496][T19084] batadv0: entered promiscuous mode
[  772.110489][T14608] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  772.119876][T14608] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  772.906618][T19121] netlink: 'syz.3.4712': attribute type 10 has an invalid length.
[  773.174449][T19126] netlink: 'syz.3.4715': attribute type 11 has an invalid length.
[  773.182861][T19126] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4715'.
[  774.732918][T19153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  777.174441][T19163] netlink: 'syz.3.4728': attribute type 10 has an invalid length.
[  777.297672][T19162] netlink: 'syz.1.4730': attribute type 10 has an invalid length.
[  777.313171][T19162] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4730'.
[  777.328728][T19162] hsr0: entered promiscuous mode
[  777.336914][T19162] bridge0: port 3(hsr0) entered blocking state
[  777.345238][T19162] bridge0: port 3(hsr0) entered disabled state
[  777.352356][T19162] hsr0: entered allmulticast mode
[  777.359783][T19162] hsr_slave_0: entered allmulticast mode
[  777.367352][T19162] hsr_slave_1: entered allmulticast mode
[  777.554691][T19177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  777.961781][T19193] netlink: 'syz.1.4741': attribute type 10 has an invalid length.
[  777.980505][T19197] netlink: 'syz.0.4743': attribute type 4 has an invalid length.
[  777.990260][T19193] macvlan0: entered promiscuous mode
[  777.996881][T19197] netlink: 'syz.0.4743': attribute type 16 has an invalid length.
[  777.996898][T19197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4743'.
[  778.025911][T19193] macvlan0: entered allmulticast mode
[  778.395151][T19207] netlink: 'syz.2.4745': attribute type 10 has an invalid length.
[  778.404411][T19207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4745'.
[  778.417752][T19207] hsr0: entered promiscuous mode
[  778.432390][T19207] bridge0: port 3(hsr0) entered blocking state
[  778.440749][T19207] bridge0: port 3(hsr0) entered disabled state
[  778.460702][T19207] hsr0: entered allmulticast mode
[  778.474094][T19207] hsr_slave_0: entered allmulticast mode
[  778.481699][T19207] hsr_slave_1: entered allmulticast mode
[  779.593816][T19223] FAULT_INJECTION: forcing a failure.
[  779.593816][T19223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  779.613086][T19223] CPU: 0 PID: 19223 Comm: syz.2.4752 Not tainted syzkaller #0
[  779.620684][T19223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  779.630772][T19223] Call Trace:
[  779.634079][T19223]  <TASK>
[  779.637048][T19223]  dump_stack_lvl+0x18c/0x250
[  779.641770][T19223]  ? show_regs_print_info+0x20/0x20
[  779.647006][T19223]  ? load_image+0x420/0x420
[  779.651583][T19223]  ? __might_fault+0xaa/0x120
[  779.656316][T19223]  ? __lock_acquire+0x7d80/0x7d80
[  779.661402][T19223]  should_fail_ex+0x394/0x4c0
[  779.666136][T19223]  _copy_to_user+0x2f/0xa0
[  779.670603][T19223]  inet_gifconf+0x338/0x500
[  779.675165][T19223]  ? inet_make_mask+0x70/0x70
[  779.679899][T19223]  ? __might_fault+0xaa/0x120
[  779.684627][T19223]  ? __might_fault+0xc6/0x120
[  779.689351][T19223]  ? __might_fault+0xaa/0x120
[  779.694081][T19223]  dev_ifconf+0x206/0x300
[  779.698461][T19223]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  779.703639][T19223]  sock_ioctl+0x1e1/0x7e0
[  779.708021][T19223]  ? sock_poll+0x3e0/0x3e0
[  779.712483][T19223]  ? bpf_lsm_file_ioctl+0x9/0x10
[  779.717454][T19223]  ? security_file_ioctl+0x80/0xa0
[  779.722602][T19223]  ? sock_poll+0x3e0/0x3e0
[  779.727058][T19223]  __se_sys_ioctl+0xfd/0x170
[  779.731691][T19223]  do_syscall_64+0x55/0xb0
[  779.736142][T19223]  ? clear_bhb_loop+0x40/0x90
[  779.740856][T19223]  ? clear_bhb_loop+0x40/0x90
[  779.745568][T19223]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  779.751493][T19223] RIP: 0033:0x7f0f8239e0d9
[  779.755941][T19223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  779.775583][T19223] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  779.784036][T19223] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  779.792046][T19223] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  779.800061][T19223] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  779.808072][T19223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  779.816069][T19223] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  779.824095][T19223]  </TASK>
[  779.972127][T19225] netlink: 'syz.3.4754': attribute type 10 has an invalid length.
[  782.305067][T19225] macvlan0: entered promiscuous mode
[  782.310527][T19225] macvlan0: entered allmulticast mode
[  782.376287][T19225] veth1_vlan: entered allmulticast mode
[  782.388742][T19225] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  782.416580][T19233] netlink: 'syz.1.4756': attribute type 10 has an invalid length.
[  786.816782][T19243] netlink: 'syz.0.4758': attribute type 10 has an invalid length.
[  786.856439][T19243] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4758'.
[  786.893297][T19243] hsr0: entered promiscuous mode
[  786.901850][T19243] bridge0: port 3(hsr0) entered blocking state
[  786.924161][T19243] bridge0: port 3(hsr0) entered disabled state
[  786.939406][T19243] hsr0: entered allmulticast mode
[  786.961234][T19243] hsr_slave_0: entered allmulticast mode
[  786.985863][T19243] hsr_slave_1: entered allmulticast mode
[  787.122911][T19251] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  787.133549][T19251] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  787.703935][T19274] netlink: 'syz.2.4773': attribute type 11 has an invalid length.
[  787.723443][T19274] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4773'.
[  787.800193][T19274] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4773'.
[  787.912620][T19282] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  787.927638][T19282] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  788.236364][T19295] netlink: 'syz.3.4783': attribute type 10 has an invalid length.
[  788.537273][T19298] delete_channel: no stack
[  788.709399][T19308] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4787'.
[  789.105350][T19320] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode
[  789.140196][T19320] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  789.963815][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  789.985173][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  789.995880][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  790.008944][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  790.017431][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  790.025772][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  790.167264][T19341] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4797'.
[  790.186417][T19341] netlink: zone id is out of range
[  790.191714][T19341] netlink: zone id is out of range
[  790.213232][T19341] netlink: zone id is out of range
[  790.227612][T19341] netlink: zone id is out of range
[  790.233438][T19341] netlink: zone id is out of range
[  790.242341][T19341] netlink: zone id is out of range
[  790.249186][T19341] netlink: zone id is out of range
[  790.259485][T19341] netlink: zone id is out of range
[  790.273162][T19341] netlink: zone id is out of range
[  790.293132][T19341] netlink: zone id is out of range
[  790.372487][T14620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.536459][T14620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.646610][T14620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.775598][T14620] batman_adv: batadv0: Removing interface: netdevsim0
[  790.796443][T19353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  790.809620][T14620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.159459][T19365] netlink: 'syz.3.4809': attribute type 10 has an invalid length.
[  791.326967][T19334] chnl_net:caif_netlink_parms(): no params data found
[  792.099706][T19334] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.106872][T15138] Bluetooth: hci0: command tx timeout
[  792.143330][T19334] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.150540][T19334] bridge_slave_0: entered allmulticast mode
[  792.204163][T19334] bridge_slave_0: entered promiscuous mode
[  792.250321][T19334] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.283404][T19334] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.290669][T19334] bridge_slave_1: entered allmulticast mode
[  792.330649][T19334] bridge_slave_1: entered promiscuous mode
[  793.146377][T19334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.187046][T19334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  793.596385][T19334] team0: Port device team_slave_0 added
[  793.626321][T19334] team0: Port device team_slave_1 added
[  793.727552][T19334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  793.763136][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.843142][T19334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  793.909998][T19334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  793.943471][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  794.023946][T19334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.198419][T15138] Bluetooth: hci0: command tx timeout
[  796.263268][T15138] Bluetooth: hci0: command tx timeout
[  797.157907][T19334] hsr_slave_0: entered promiscuous mode
[  797.203495][T19334] hsr_slave_1: entered promiscuous mode
[  797.246680][T19334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  797.266019][T19334] Cannot create hsr debugfs directory
[  797.572951][T19455] FAULT_INJECTION: forcing a failure.
[  797.572951][T19455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.586703][T19455] CPU: 0 PID: 19455 Comm: syz.2.4833 Not tainted syzkaller #0
[  797.594198][T19455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  797.604289][T19455] Call Trace:
[  797.607605][T19455]  <TASK>
[  797.610567][T19455]  dump_stack_lvl+0x18c/0x250
[  797.615283][T19455]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  797.621041][T19455]  ? show_regs_print_info+0x20/0x20
[  797.626270][T19455]  ? load_image+0x420/0x420
[  797.630817][T19455]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  797.636313][T19455]  should_fail_ex+0x394/0x4c0
[  797.641037][T19455]  strncpy_from_user+0x36/0x2f0
[  797.645942][T19455]  ? __local_bh_disable_ip+0x108/0x1a0
[  797.651454][T19455]  strncpy_from_user_nofault+0x71/0x140
[  797.657039][T19455]  bpf_probe_read_user_str+0x2a/0x70
[  797.662352][T19455]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  797.667852][T19455]  bpf_test_run+0x2df/0x870
[  797.672421][T19455]  ? bpf_test_run+0x174/0x870
[  797.677153][T19455]  ? dst_hold+0x70/0x70
[  797.681352][T19455]  ? eth_get_headlen+0x210/0x210
[  797.686329][T19455]  ? slab_build_skb+0x25a/0x3e0
[  797.691210][T19455]  ? convert___skb_to_skb+0x3d/0x590
[  797.696529][T19455]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  797.701962][T19455]  ? cpu_online+0x60/0x60
[  797.706344][T19455]  bpf_prog_test_run+0x31f/0x390
[  797.711327][T19455]  __sys_bpf+0x49d/0x890
[  797.715621][T19455]  ? bpf_link_show_fdinfo+0x390/0x390
[  797.721069][T19455]  ? lock_chain_count+0x20/0x20
[  797.725975][T19455]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  797.732001][T19455]  __x64_sys_bpf+0x7c/0x90
[  797.736459][T19455]  do_syscall_64+0x55/0xb0
[  797.740906][T19455]  ? clear_bhb_loop+0x40/0x90
[  797.745604][T19455]  ? clear_bhb_loop+0x40/0x90
[  797.750350][T19455]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  797.756292][T19455] RIP: 0033:0x7f0f8239e0d9
[  797.760754][T19455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.780392][T19455] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  797.788836][T19455] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  797.796829][T19455] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  797.804825][T19455] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  797.812825][T19455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  797.820815][T19455] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  797.828819][T19455]  </TASK>
[  798.343370][T15138] Bluetooth: hci0: command tx timeout
[  798.611447][T19468] FAULT_INJECTION: forcing a failure.
[  798.611447][T19468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  798.676345][T19468] CPU: 1 PID: 19468 Comm: syz.2.4829 Not tainted syzkaller #0
[  798.683869][T19468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  798.693947][T19468] Call Trace:
[  798.697247][T19468]  <TASK>
[  798.700208][T19468]  dump_stack_lvl+0x18c/0x250
[  798.704950][T19468]  ? show_regs_print_info+0x20/0x20
[  798.710192][T19468]  ? load_image+0x420/0x420
[  798.714769][T19468]  ? __might_fault+0xaa/0x120
[  798.719488][T19468]  ? __lock_acquire+0x7d80/0x7d80
[  798.724567][T19468]  should_fail_ex+0x394/0x4c0
[  798.729296][T19468]  _copy_to_user+0x2f/0xa0
[  798.733763][T19468]  inet_gifconf+0x338/0x500
[  798.738315][T19468]  ? inet_make_mask+0x70/0x70
[  798.743023][T19468]  ? __might_fault+0xaa/0x120
[  798.747748][T19468]  ? __might_fault+0xc6/0x120
[  798.752488][T19468]  ? __might_fault+0xaa/0x120
[  798.757192][T19468]  dev_ifconf+0x206/0x300
[  798.761545][T19468]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  798.766685][T19468]  sock_ioctl+0x1e1/0x7e0
[  798.771031][T19468]  ? sock_poll+0x3e0/0x3e0
[  798.775467][T19468]  ? bpf_lsm_file_ioctl+0x9/0x10
[  798.780422][T19468]  ? security_file_ioctl+0x80/0xa0
[  798.785560][T19468]  ? sock_poll+0x3e0/0x3e0
[  798.790002][T19468]  __se_sys_ioctl+0xfd/0x170
[  798.794627][T19468]  do_syscall_64+0x55/0xb0
[  798.799078][T19468]  ? clear_bhb_loop+0x40/0x90
[  798.803790][T19468]  ? clear_bhb_loop+0x40/0x90
[  798.808480][T19468]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.814396][T19468] RIP: 0033:0x7f0f8239e0d9
[  798.818836][T19468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.838456][T19468] RSP: 002b:00007f0f832e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  798.846888][T19468] RAX: ffffffffffffffda RBX: 00007f0f82625fa0 RCX: 00007f0f8239e0d9
[  798.854875][T19468] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  798.862869][T19468] RBP: 00007f0f832e0090 R08: 0000000000000000 R09: 0000000000000000
[  798.870868][T19468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.878871][T19468] R13: 00007f0f82626038 R14: 00007f0f82625fa0 R15: 00007ffcc6ba90e8
[  798.886883][T19468]  </TASK>
[  799.892906][T14620] hsr_slave_0: left promiscuous mode
[  799.902820][T14620] hsr_slave_1: left promiscuous mode
[  799.932398][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  799.953127][T14620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  799.971369][T14620] batman_adv: batadv0: Interface deactivated: vlan1
[  799.979722][T14620] batman_adv: batadv0: Removing interface: vlan1
[  799.989910][T14620] hsr0: left allmulticast mode
[  799.996835][T14620] bridge0: port 3(hsr0) entered disabled state
[  800.006492][T14620] batadv0: left allmulticast mode
[  800.011653][T14620] batadv0: left promiscuous mode
[  800.017641][T14620] bridge0: port 2(batadv0) entered disabled state
[  800.028238][T14620] bridge_slave_0: left promiscuous mode
[  800.034381][T14620] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.059211][T14620] veth1_macvtap: left promiscuous mode
[  800.065314][T14620] veth1_vlan: left promiscuous mode
[  800.070917][T14620] veth0_vlan: left promiscuous mode
[  801.012533][T19502] netlink: 'syz.2.4839': attribute type 10 has an invalid length.
[  801.205552][T19505] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4840'.
[  801.272412][T19334] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  801.308008][T19334] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  801.321021][T19334] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  801.366078][T19509] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4841'.
[  801.389882][T19334] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  801.685090][T19334] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.811201][T19334] 8021q: adding VLAN 0 to HW filter on device team0
[  801.903575][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.910853][ T7915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  801.971949][T14608] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.979173][T14608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.680340][T19334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  802.822809][T19553] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4853'.
[  802.975782][T19334] veth0_vlan: entered promiscuous mode
[  803.149497][T19334] veth1_vlan: entered promiscuous mode
[  803.411410][T19566] syzkaller0: entered promiscuous mode
[  803.473260][T19566] syzkaller0: entered allmulticast mode
[  803.494711][T19334] veth0_macvtap: entered promiscuous mode
[  803.582611][T19575] netlink: 'syz.2.4857': attribute type 10 has an invalid length.
[  803.746372][T19575] hsr0: left allmulticast mode
[  803.751353][T19575] hsr_slave_0: left allmulticast mode
[  803.776902][T19575] hsr_slave_1: left allmulticast mode
[  803.788379][T19575] bridge0: port 3(hsr0) entered disabled state
[  806.694387][T19584] netlink: 'syz.3.4858': attribute type 10 has an invalid length.
[  806.710003][T19334] veth1_macvtap: entered promiscuous mode
[  806.802862][T19334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  806.838138][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.859325][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.886093][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.917659][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.931542][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.948060][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.968867][T19334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  807.051983][T19334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  807.069369][T19334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  807.079518][T19334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  807.094811][T19334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  807.617512][T14608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.693138][T14608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.775327][T19627] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  807.973959][T14608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.033773][T14608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  808.322138][T19621] delete_channel: no stack
[  808.358701][T19646] FAULT_INJECTION: forcing a failure.
[  808.358701][T19646] name failslab, interval 1, probability 0, space 0, times 0
[  808.397337][T19646] CPU: 1 PID: 19646 Comm: syz.0.4868 Not tainted syzkaller #0
[  808.404876][T19646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  808.414968][T19646] Call Trace:
[  808.418303][T19646]  <TASK>
[  808.421269][T19646]  dump_stack_lvl+0x18c/0x250
[  808.425994][T19646]  ? show_regs_print_info+0x20/0x20
[  808.431299][T19646]  ? load_image+0x420/0x420
[  808.435859][T19646]  ? __might_sleep+0xe0/0xe0
[  808.440494][T19646]  ? __lock_acquire+0x7d80/0x7d80
[  808.445561][T19646]  should_fail_ex+0x394/0x4c0
[  808.450299][T19646]  should_failslab+0x9/0x20
[  808.454856][T19646]  slab_pre_alloc_hook+0x59/0x300
[  808.459940][T19646]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  808.465728][T19646]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  808.471530][T19646]  __kmem_cache_alloc_node+0x53/0x250
[  808.476950][T19646]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  808.482713][T19646]  __kmalloc+0xa7/0x240
[  808.486929][T19646]  tomoyo_realpath_from_path+0xe6/0x5c0
[  808.492525][T19646]  ? tomoyo_domain+0xd6/0x120
[  808.497282][T19646]  tomoyo_path_number_perm+0x248/0x5e0
[  808.502789][T19646]  ? tomoyo_path_number_perm+0x217/0x5e0
[  808.508455][T19646]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  808.513972][T19646]  ? ksys_write+0x1d2/0x260
[  808.518565][T19646]  ? __fget_files+0x28/0x460
[  808.523242][T19646]  security_file_ioctl+0x70/0xa0
[  808.528255][T19646]  __se_sys_ioctl+0x48/0x170
[  808.532917][T19646]  do_syscall_64+0x55/0xb0
[  808.537378][T19646]  ? clear_bhb_loop+0x40/0x90
[  808.542098][T19646]  ? clear_bhb_loop+0x40/0x90
[  808.546818][T19646]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  808.552749][T19646] RIP: 0033:0x7efc1a99e0d9
[  808.557195][T19646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  808.576832][T19646] RSP: 002b:00007efc1b8b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  808.585290][T19646] RAX: ffffffffffffffda RBX: 00007efc1ac25fa0 RCX: 00007efc1a99e0d9
[  808.593303][T19646] RDX: 0000200000000140 RSI: 0000000000008918 RDI: 0000000000000005
[  808.601320][T19646] RBP: 00007efc1b8b8090 R08: 0000000000000000 R09: 0000000000000000
[  808.609332][T19646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  808.617342][T19646] R13: 00007efc1ac26038 R14: 00007efc1ac25fa0 R15: 00007ffce62cb178
[  808.625416][T19646]  </TASK>
[  808.664175][T19646] ERROR: Out of memory at tomoyo_realpath_from_path.
[  808.747589][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  808.763143][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  809.403363][T19677] net_ratelimit: 88 callbacks suppressed
[  809.403382][T19677] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  809.778774][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  809.788996][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  809.800766][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  809.815987][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  809.827857][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  809.837836][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  809.945924][T14614] wlan1: Trigger new scan to find an IBSS to join
[  810.010774][T14619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.073137][T19702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  810.176206][T14619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.228033][T19704] sit0: entered allmulticast mode
[  810.383541][T14619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.413455][T19715] netlink: 'syz.1.4886': attribute type 10 has an invalid length.
[  810.427168][T19715] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.434898][T19715] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.569540][T14619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.790105][T19692] chnl_net:caif_netlink_parms(): no params data found
[  810.996800][T19692] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.004561][T19692] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.033243][T19692] bridge_slave_0: entered allmulticast mode
[  811.051872][T19692] bridge_slave_0: entered promiscuous mode
[  811.094984][T19692] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.113567][T19692] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.120794][T19692] bridge_slave_1: entered allmulticast mode
[  811.147464][T19692] bridge_slave_1: entered promiscuous mode
[  811.412023][T19692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  811.555577][T19692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.777287][T19692] team0: Port device team_slave_0 added
[  811.866335][T15138] Bluetooth: hci2: command tx timeout
[  811.884188][T19692] team0: Port device team_slave_1 added
[  811.976108][T19770] netlink: 'syz.2.4902': attribute type 3 has an invalid length.
[  811.993187][T19770] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.4902'.
[  812.139884][T19692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  812.163058][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.227368][T19692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  812.353815][T19692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  812.379309][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.419709][T19692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  813.089695][T19790] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  813.201355][T19692] hsr_slave_0: entered promiscuous mode
[  813.220188][T19692] hsr_slave_1: entered promiscuous mode
[  813.246584][T19798] FAULT_INJECTION: forcing a failure.
[  813.246584][T19798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.259900][T19798] CPU: 0 PID: 19798 Comm: syz.1.4910 Not tainted syzkaller #0
[  813.267421][T19798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  813.277512][T19798] Call Trace:
[  813.280916][T19798]  <TASK>
[  813.283891][T19798]  dump_stack_lvl+0x18c/0x250
[  813.288619][T19798]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  813.295856][T19798]  ? show_regs_print_info+0x20/0x20
[  813.301102][T19798]  ? load_image+0x420/0x420
[  813.305651][T19798]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  813.311138][T19798]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  813.317332][T19798]  should_fail_ex+0x394/0x4c0
[  813.322124][T19798]  strncpy_from_user+0x36/0x2f0
[  813.327017][T19798]  ? __local_bh_disable_ip+0x108/0x1a0
[  813.332513][T19798]  strncpy_from_user_nofault+0x71/0x140
[  813.338109][T19798]  bpf_probe_read_user_str+0x2a/0x70
[  813.343431][T19798]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  813.348948][T19798]  bpf_test_run+0x2df/0x870
[  813.353499][T19798]  ? lock_chain_count+0x20/0x20
[  813.358387][T19798]  ? bpf_test_run+0x174/0x870
[  813.363108][T19798]  ? dst_hold+0x70/0x70
[  813.367311][T19798]  ? bpf_prog_test_run_skb+0xd79/0x18f0
[  813.372900][T19798]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  813.378331][T19798]  ? cpu_online+0x60/0x60
[  813.382704][T19798]  bpf_prog_test_run+0x31f/0x390
[  813.387685][T19798]  __sys_bpf+0x49d/0x890
[  813.391945][T19798]  ? bpf_link_show_fdinfo+0x390/0x390
[  813.397352][T19798]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  813.403532][T19798]  __x64_sys_bpf+0x7c/0x90
[  813.407972][T19798]  do_syscall_64+0x55/0xb0
[  813.412404][T19798]  ? clear_bhb_loop+0x40/0x90
[  813.417098][T19798]  ? clear_bhb_loop+0x40/0x90
[  813.421792][T19798]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  813.427699][T19798] RIP: 0033:0x7f2551b9e0d9
[  813.432218][T19798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.451848][T19798] RSP: 002b:00007f25529e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  813.460292][T19798] RAX: ffffffffffffffda RBX: 00007f2551e25fa0 RCX: 00007f2551b9e0d9
[  813.468334][T19798] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  813.476337][T19798] RBP: 00007f25529e3090 R08: 0000000000000000 R09: 0000000000000000
[  813.484329][T19798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  813.492323][T19798] R13: 00007f2551e26038 R14: 00007f2551e25fa0 R15: 00007ffc40772b98
[  813.500355][T19798]  </TASK>
[  813.785322][T19811] FAULT_INJECTION: forcing a failure.
[  813.785322][T19811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.811925][T19811] CPU: 0 PID: 19811 Comm: syz.1.4915 Not tainted syzkaller #0
[  813.819474][T19811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  813.829569][T19811] Call Trace:
[  813.832881][T19811]  <TASK>
[  813.835848][T19811]  dump_stack_lvl+0x18c/0x250
[  813.840567][T19811]  ? show_regs_print_info+0x20/0x20
[  813.845802][T19811]  ? load_image+0x420/0x420
[  813.850367][T19811]  ? __might_fault+0xaa/0x120
[  813.855086][T19811]  ? __lock_acquire+0x7d80/0x7d80
[  813.860151][T19811]  should_fail_ex+0x394/0x4c0
[  813.864870][T19811]  _copy_to_user+0x2f/0xa0
[  813.869322][T19811]  inet_gifconf+0x338/0x500
[  813.873867][T19811]  ? inet_make_mask+0x70/0x70
[  813.878572][T19811]  ? __might_fault+0xaa/0x120
[  813.883272][T19811]  ? __might_fault+0xc6/0x120
[  813.887962][T19811]  ? __might_fault+0xaa/0x120
[  813.892656][T19811]  dev_ifconf+0x206/0x300
[  813.897003][T19811]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  813.902140][T19811]  sock_ioctl+0x1e1/0x7e0
[  813.906509][T19811]  ? sock_poll+0x3e0/0x3e0
[  813.910948][T19811]  ? bpf_lsm_file_ioctl+0x9/0x10
[  813.915903][T19811]  ? security_file_ioctl+0x80/0xa0
[  813.921033][T19811]  ? sock_poll+0x3e0/0x3e0
[  813.925467][T19811]  __se_sys_ioctl+0xfd/0x170
[  813.930088][T19811]  do_syscall_64+0x55/0xb0
[  813.934537][T19811]  ? clear_bhb_loop+0x40/0x90
[  813.939239][T19811]  ? clear_bhb_loop+0x40/0x90
[  813.943949][T19811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  813.949859][T19811] RIP: 0033:0x7f2551b9e0d9
[  813.954295][T19811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.973918][T19811] RSP: 002b:00007f25529e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  813.982355][T19811] RAX: ffffffffffffffda RBX: 00007f2551e25fa0 RCX: 00007f2551b9e0d9
[  813.990441][T19811] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  813.998457][T19811] RBP: 00007f25529e3090 R08: 0000000000000000 R09: 0000000000000000
[  814.006451][T19811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  814.014451][T19811] R13: 00007f2551e26038 R14: 00007f2551e25fa0 R15: 00007ffc40772b98
[  814.022475][T19811]  </TASK>
[  814.044942][T15138] Bluetooth: hci2: command tx timeout
[  814.939236][T19831] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  814.983348][ T7915] wlan1: Trigger new scan to find an IBSS to join
[  815.094724][T14619] hsr_slave_0: left promiscuous mode
[  815.119005][T14619] hsr_slave_1: left promiscuous mode
[  815.170432][T14619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  815.200598][T14619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.254361][T14619] hsr0: left allmulticast mode
[  815.259377][T14619] bridge0: port 2(hsr0) entered disabled state
[  815.325184][T14619] bridge_slave_0: left allmulticast mode
[  815.330894][T14619] bridge_slave_0: left promiscuous mode
[  815.357580][T14619] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.478796][T14619] veth1_macvtap: left promiscuous mode
[  815.502273][T14619] veth1_vlan: left allmulticast mode
[  815.510291][T14619] veth1_vlan: left promiscuous mode
[  815.528511][T14619] veth0_vlan: left promiscuous mode
[  815.921461][ T7915] wlan1: Creating new IBSS network, BSSID 9a:53:21:b9:2d:6a
[  816.037814][T14619] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  816.103300][T15138] Bluetooth: hci2: command tx timeout
[  816.305036][T14619] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  816.409374][T14619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  816.455374][T14619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  816.495622][T14619] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  816.737444][T14619] bond0 (unregistering): Released all slaves
[  816.845103][T19856] veth1_to_bond: entered allmulticast mode
[  816.865355][T19855] netlink: 'syz.0.4927': attribute type 27 has an invalid length.
[  816.984781][T14618] wlan1: Trigger new scan to find an IBSS to join
[  816.986880][T14608] wlan1: Trigger new scan to find an IBSS to join
[  817.533744][T19692] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  817.554627][T19692] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  817.591150][T19692] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  817.626830][T19692] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  818.057862][T19692] 8021q: adding VLAN 0 to HW filter on device bond0
[  818.176661][T19692] 8021q: adding VLAN 0 to HW filter on device team0
[  818.194603][T15138] Bluetooth: hci2: command tx timeout
[  818.226505][T14617] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.233873][T14617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  818.268428][T14617] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.275711][T14617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  818.550071][T19902] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4939'.
[  819.098855][T19692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  819.180903][T19692] veth0_vlan: entered promiscuous mode
[  819.216722][T19692] veth1_vlan: entered promiscuous mode
[  819.331517][T19692] veth0_macvtap: entered promiscuous mode
[  819.369006][T19692] veth1_macvtap: entered promiscuous mode
[  819.391684][T19692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.402511][T19692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.414957][T19692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  819.426356][T19692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  819.443314][T19692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.473564][T19692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  819.484655][T19692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.513167][T19692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  819.541822][T19692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.579883][T19692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  819.620585][T19692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.648598][T19692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.668100][T19692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.682252][T19692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.794395][T19937] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4946'.
[  819.921987][T14618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.965168][T14618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.028824][T19937] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4946'.
[  820.075598][T14617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.087525][T14617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.473160][T19968] netlink: 'syz.3.4953': attribute type 10 has an invalid length.
[  821.201112][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  821.211065][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  821.225001][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  821.247883][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  821.269013][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  821.276512][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  821.646725][T14620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.871259][T14620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.949093][T14619] wlan1: Trigger new scan to find an IBSS to join
[  821.956020][T14618] wlan1: Trigger new scan to find an IBSS to join
[  821.967240][T14620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.087797][T14620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.257068][T20023] FAULT_INJECTION: forcing a failure.
[  822.257068][T20023] name failslab, interval 1, probability 0, space 0, times 0
[  822.272315][T20023] CPU: 0 PID: 20023 Comm: syz.1.4963 Not tainted syzkaller #0
[  822.279835][T20023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  822.289927][T20023] Call Trace:
[  822.293240][T20023]  <TASK>
[  822.296193][T20023]  dump_stack_lvl+0x18c/0x250
[  822.300909][T20023]  ? show_regs_print_info+0x20/0x20
[  822.306160][T20023]  ? load_image+0x420/0x420
[  822.310722][T20023]  ? __might_sleep+0xe0/0xe0
[  822.315362][T20023]  ? __lock_acquire+0x7d80/0x7d80
[  822.320432][T20023]  should_fail_ex+0x394/0x4c0
[  822.325165][T20023]  should_failslab+0x9/0x20
[  822.329807][T20023]  slab_pre_alloc_hook+0x59/0x300
[  822.334927][T20023]  ? tomoyo_encode+0x2ad/0x570
[  822.339770][T20023]  ? tomoyo_encode+0x2ad/0x570
[  822.344591][T20023]  __kmem_cache_alloc_node+0x53/0x250
[  822.350015][T20023]  ? tomoyo_encode+0x2ad/0x570
[  822.354830][T20023]  __kmalloc+0xa7/0x240
[  822.359064][T20023]  tomoyo_encode+0x2ad/0x570
[  822.363737][T20023]  tomoyo_realpath_from_path+0x57c/0x5c0
[  822.369428][T20023]  ? tomoyo_domain+0xd6/0x120
[  822.374171][T20023]  tomoyo_path_number_perm+0x248/0x5e0
[  822.379693][T20023]  ? tomoyo_path_number_perm+0x217/0x5e0
[  822.385374][T20023]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  822.390888][T20023]  ? ksys_write+0x1d2/0x260
[  822.395476][T20023]  ? __fget_files+0x28/0x460
[  822.400131][T20023]  security_file_ioctl+0x70/0xa0
[  822.405121][T20023]  __se_sys_ioctl+0x48/0x170
[  822.409791][T20023]  do_syscall_64+0x55/0xb0
[  822.414305][T20023]  ? clear_bhb_loop+0x40/0x90
[  822.419048][T20023]  ? clear_bhb_loop+0x40/0x90
[  822.423783][T20023]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  822.429719][T20023] RIP: 0033:0x7f2551b9e0d9
[  822.434175][T20023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  822.453824][T20023] RSP: 002b:00007f25529e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  822.462321][T20023] RAX: ffffffffffffffda RBX: 00007f2551e25fa0 RCX: 00007f2551b9e0d9
[  822.470352][T20023] RDX: 0000200000000140 RSI: 0000000000008918 RDI: 0000000000000005
[  822.478353][T20023] RBP: 00007f25529e3090 R08: 0000000000000000 R09: 0000000000000000
[  822.486357][T20023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  822.494357][T20023] R13: 00007f2551e26038 R14: 00007f2551e25fa0 R15: 00007ffc40772b98
[  822.502381][T20023]  </TASK>
[  822.540731][T20023] ERROR: Out of memory at tomoyo_realpath_from_path.
[  822.688027][T19987] chnl_net:caif_netlink_parms(): no params data found
[  822.894308][T20036] netlink: 'syz.3.4965': attribute type 27 has an invalid length.
[  822.902514][T20036] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.4965'.
[  823.038513][T14618] wlan1: Creating new IBSS network, BSSID f2:10:3f:79:8e:66
[  823.048289][T14617] wlan1: Creating new IBSS network, BSSID 12:df:0a:82:76:96
[  823.199219][T19987] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.212844][T20046] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  823.243590][T19987] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.250886][T19987] bridge_slave_0: entered allmulticast mode
[  823.286356][T19987] bridge_slave_0: entered promiscuous mode
[  823.303410][ T5781] Bluetooth: hci4: command tx timeout
[  823.335403][T19987] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.373155][T19987] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.381160][T19987] bridge_slave_1: entered allmulticast mode
[  823.389571][T19987] bridge_slave_1: entered promiscuous mode
[  823.497105][T19987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.577518][T19987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.644684][T20061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.762974][T19987] team0: Port device team_slave_0 added
[  823.790573][T19987] team0: Port device team_slave_1 added
[  824.027813][T20080] netlink: 'syz.0.4976': attribute type 10 has an invalid length.
[  824.123220][T19987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  824.153691][T19987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  824.245899][T19987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  824.270942][T19987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  824.296805][T19987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  824.337750][T19987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  824.552578][T20091] IPv6: Can't replace route, no match found
[  824.812363][T19987] hsr_slave_0: entered promiscuous mode
[  824.835021][T19987] hsr_slave_1: entered promiscuous mode
[  824.853684][T19987] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  824.870550][T19987] Cannot create hsr debugfs directory
[  824.947411][T20105] veth1_to_bond: entered allmulticast mode
[  825.172762][T20107] tap0: tun_chr_ioctl cmd 35111
[  825.408493][ T5781] Bluetooth: hci4: command tx timeout
[  825.905217][T20138] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4993'.
[  825.956281][T20138] team0: Port device team_slave_0 removed
[  825.983711][T20138] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  826.199010][T14620] hsr_slave_0: left promiscuous mode
[  826.240802][T14620] hsr_slave_1: left promiscuous mode
[  826.256221][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  826.290532][T14620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  826.309516][T14620] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  826.323089][T14620] batman_adv: batadv0: Removing interface: virt_wifi0
[  826.331430][T14620] bridge_slave_1: left allmulticast mode
[  826.338536][T14620] bridge_slave_1: left promiscuous mode
[  826.345561][T14620] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.374336][T14620] bridge_slave_0: left allmulticast mode
[  826.380066][T14620] bridge_slave_0: left promiscuous mode
[  826.391270][T14620] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.428263][T20156] FAULT_INJECTION: forcing a failure.
[  826.428263][T20156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  826.441565][T20156] CPU: 1 PID: 20156 Comm: syz.0.4998 Not tainted syzkaller #0
[  826.449069][T20156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  826.459174][T20156] Call Trace:
[  826.462492][T20156]  <TASK>
[  826.465461][T20156]  dump_stack_lvl+0x18c/0x250
[  826.470206][T20156]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  826.477479][T20156]  ? show_regs_print_info+0x20/0x20
[  826.482759][T20156]  ? load_image+0x420/0x420
[  826.487296][T20156]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  826.492787][T20156]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  826.498965][T20156]  should_fail_ex+0x394/0x4c0
[  826.503675][T20156]  strncpy_from_user+0x36/0x2f0
[  826.508572][T20156]  ? __local_bh_disable_ip+0x108/0x1a0
[  826.514088][T20156]  strncpy_from_user_nofault+0x71/0x140
[  826.519661][T20156]  ? bpf_test_run+0x174/0x870
[  826.524368][T20156]  bpf_probe_read_user_str+0x2a/0x70
[  826.529678][T20156]  ? bpf_test_run+0x174/0x870
[  826.534387][T20156]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  826.539891][T20156]  bpf_test_run+0x4fa/0x870
[  826.544449][T20156]  ? bpf_test_run+0x174/0x870
[  826.549213][T20156]  ? dst_hold+0x70/0x70
[  826.553415][T20156]  ? eth_get_headlen+0x210/0x210
[  826.558386][T20156]  ? slab_build_skb+0x25a/0x3e0
[  826.563266][T20156]  ? convert___skb_to_skb+0x3d/0x590
[  826.568586][T20156]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  826.574007][T20156]  ? cpu_online+0x60/0x60
[  826.578367][T20156]  bpf_prog_test_run+0x31f/0x390
[  826.583345][T20156]  __sys_bpf+0x49d/0x890
[  826.587658][T20156]  ? bpf_link_show_fdinfo+0x390/0x390
[  826.593064][T20156]  ? lock_chain_count+0x20/0x20
[  826.597933][T20156]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  826.603944][T20156]  __x64_sys_bpf+0x7c/0x90
[  826.608385][T20156]  do_syscall_64+0x55/0xb0
[  826.612913][T20156]  ? clear_bhb_loop+0x40/0x90
[  826.617700][T20156]  ? clear_bhb_loop+0x40/0x90
[  826.622404][T20156]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  826.628357][T20156] RIP: 0033:0x7efc1a99e0d9
[  826.632798][T20156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.652424][T20156] RSP: 002b:00007efc1b8b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  826.660873][T20156] RAX: ffffffffffffffda RBX: 00007efc1ac25fa0 RCX: 00007efc1a99e0d9
[  826.668877][T20156] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  826.676874][T20156] RBP: 00007efc1b8b8090 R08: 0000000000000000 R09: 0000000000000000
[  826.684885][T20156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  826.692877][T20156] R13: 00007efc1ac26038 R14: 00007efc1ac25fa0 R15: 00007ffce62cb178
[  826.700903][T20156]  </TASK>
[  826.962073][T14620] veth1_macvtap: left promiscuous mode
[  826.967987][T14620] veth1_vlan: left promiscuous mode
[  826.973982][T14620] veth0_vlan: left promiscuous mode
[  827.463199][ T5781] Bluetooth: hci4: command tx timeout
[  828.539520][T20166] FAULT_INJECTION: forcing a failure.
[  828.539520][T20166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  828.583442][T20166] CPU: 1 PID: 20166 Comm: syz.0.5001 Not tainted syzkaller #0
[  828.590963][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  828.601045][T20166] Call Trace:
[  828.604354][T20166]  <TASK>
[  828.607305][T20166]  dump_stack_lvl+0x18c/0x250
[  828.612015][T20166]  ? show_regs_print_info+0x20/0x20
[  828.617239][T20166]  ? load_image+0x420/0x420
[  828.621818][T20166]  ? __might_fault+0xaa/0x120
[  828.626528][T20166]  ? __lock_acquire+0x7d80/0x7d80
[  828.631586][T20166]  should_fail_ex+0x394/0x4c0
[  828.636308][T20166]  _copy_to_user+0x2f/0xa0
[  828.640756][T20166]  inet_gifconf+0x338/0x500
[  828.645296][T20166]  ? inet_make_mask+0x70/0x70
[  828.650018][T20166]  ? __might_fault+0xaa/0x120
[  828.654743][T20166]  ? __might_fault+0xc6/0x120
[  828.659448][T20166]  ? __might_fault+0xaa/0x120
[  828.664180][T20166]  dev_ifconf+0x206/0x300
[  828.668566][T20166]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  828.673739][T20166]  sock_ioctl+0x1e1/0x7e0
[  828.678100][T20166]  ? sock_poll+0x3e0/0x3e0
[  828.682559][T20166]  ? bpf_lsm_file_ioctl+0x9/0x10
[  828.687511][T20166]  ? security_file_ioctl+0x80/0xa0
[  828.692661][T20166]  ? sock_poll+0x3e0/0x3e0
[  828.697101][T20166]  __se_sys_ioctl+0xfd/0x170
[  828.701735][T20166]  do_syscall_64+0x55/0xb0
[  828.706188][T20166]  ? clear_bhb_loop+0x40/0x90
[  828.710897][T20166]  ? clear_bhb_loop+0x40/0x90
[  828.715607][T20166]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  828.721537][T20166] RIP: 0033:0x7efc1a99e0d9
[  828.725984][T20166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  828.745624][T20166] RSP: 002b:00007efc1b8b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  828.754066][T20166] RAX: ffffffffffffffda RBX: 00007efc1ac25fa0 RCX: 00007efc1a99e0d9
[  828.762091][T20166] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  828.770191][T20166] RBP: 00007efc1b8b8090 R08: 0000000000000000 R09: 0000000000000000
[  828.778204][T20166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  828.786212][T20166] R13: 00007efc1ac26038 R14: 00007efc1ac25fa0 R15: 00007ffce62cb178
[  828.794225][T20166]  </TASK>
[  828.994420][T20173] netlink: 'syz.0.5004': attribute type 9 has an invalid length.
[  829.002250][T20173] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5004'.
[  829.291334][T20186] netlink: 'syz.0.5009': attribute type 10 has an invalid length.
[  829.557740][ T5781] Bluetooth: hci4: command tx timeout
[  829.567266][T19987] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  829.618701][T19987] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  829.631548][T19987] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  829.643206][T19987] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  829.860117][T19987] 8021q: adding VLAN 0 to HW filter on device bond0
[  829.920711][T20201] veth1_to_bond: entered allmulticast mode
[  829.990445][T19987] 8021q: adding VLAN 0 to HW filter on device team0
[  830.009502][T14609] bridge0: port 1(bridge_slave_0) entered blocking state
[  830.016701][T14609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  830.039009][T14609] bridge0: port 2(bridge_slave_1) entered blocking state
[  830.046226][T14609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  830.138548][T19987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  830.721479][T19987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.934777][T19987] veth0_vlan: entered promiscuous mode
[  830.980380][T19987] veth1_vlan: entered promiscuous mode
[  831.132262][T19987] veth0_macvtap: entered promiscuous mode
[  831.165959][T19987] veth1_macvtap: entered promiscuous mode
[  831.191909][T20248] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5025'.
[  831.241135][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.313071][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.329353][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.354026][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.368056][T19987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  831.378988][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  831.390638][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.408868][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  831.439751][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.457953][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  831.472047][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.488406][T19987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  831.542253][T19987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  831.571246][T19987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  831.583215][T19987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  831.606997][T19987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  831.807620][T14609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.850071][T14609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.902409][T20271] netlink: 'syz.0.5031': attribute type 10 has an invalid length.
[  831.917084][T20271] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5031'.
[  831.929519][T20270] netlink: 'syz.0.5031': attribute type 10 has an invalid length.
[  831.944545][T20270] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5031'.
[  832.057181][T14620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  832.103716][T14620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.456154][T20292] netlink: 'syz.2.4951': attribute type 10 has an invalid length.
[  832.513265][T20292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.690452][T20292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.752055][T20292] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  832.806985][T20300] netlink: 'syz.0.5036': attribute type 10 has an invalid length.
[  832.878206][T20300] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  832.892641][T20300] mac80211_hwsim hwsim33 wlan1: left allmulticast mode
[  833.607265][T20323] FAULT_INJECTION: forcing a failure.
[  833.607265][T20323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  833.658859][T20323] CPU: 0 PID: 20323 Comm: syz.3.5043 Not tainted syzkaller #0
[  833.666393][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  833.676467][T20323] Call Trace:
[  833.679769][T20323]  <TASK>
[  833.682719][T20323]  dump_stack_lvl+0x18c/0x250
[  833.687509][T20323]  ? show_regs_print_info+0x20/0x20
[  833.692717][T20323]  ? load_image+0x420/0x420
[  833.697245][T20323]  ? __might_fault+0xaa/0x120
[  833.701933][T20323]  ? __lock_acquire+0x7d80/0x7d80
[  833.706982][T20323]  should_fail_ex+0x394/0x4c0
[  833.711706][T20323]  _copy_from_user+0x2f/0xe0
[  833.716335][T20323]  get_user_ifreq+0x6b/0x180
[  833.720958][T20323]  inet_ioctl+0x3ed/0x560
[  833.725316][T20323]  ? tomoyo_path_number_perm+0x217/0x5e0
[  833.730974][T20323]  ? inet_shutdown+0x370/0x370
[  833.735761][T20323]  ? slab_free_freelist_hook+0x130/0x1a0
[  833.741420][T20323]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[  833.747078][T20323]  ? __kmem_cache_free+0xba/0x1f0
[  833.752141][T20323]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  833.757638][T20323]  sock_do_ioctl+0xfc/0x310
[  833.762162][T20323]  ? sock_show_fdinfo+0xb0/0xb0
[  833.767043][T20323]  sock_ioctl+0x5be/0x7e0
[  833.771399][T20323]  ? sock_poll+0x3e0/0x3e0
[  833.775840][T20323]  ? bpf_lsm_file_ioctl+0x9/0x10
[  833.780791][T20323]  ? security_file_ioctl+0x80/0xa0
[  833.785928][T20323]  ? sock_poll+0x3e0/0x3e0
[  833.790378][T20323]  __se_sys_ioctl+0xfd/0x170
[  833.794994][T20323]  do_syscall_64+0x55/0xb0
[  833.799428][T20323]  ? clear_bhb_loop+0x40/0x90
[  833.804133][T20323]  ? clear_bhb_loop+0x40/0x90
[  833.808834][T20323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  833.814743][T20323] RIP: 0033:0x7f714c19e0d9
[  833.819191][T20323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  833.838813][T20323] RSP: 002b:00007f714d052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  833.847253][T20323] RAX: ffffffffffffffda RBX: 00007f714c425fa0 RCX: 00007f714c19e0d9
[  833.855246][T20323] RDX: 0000200000000140 RSI: 0000000000008918 RDI: 0000000000000005
[  833.863233][T20323] RBP: 00007f714d052090 R08: 0000000000000000 R09: 0000000000000000
[  833.871225][T20323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  833.879220][T20323] R13: 00007f714c426038 R14: 00007f714c425fa0 R15: 00007fffd50a7178
[  833.887241][T20323]  </TASK>
[  834.173513][T20333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  834.196250][T20335] netlink: 'syz.3.5048': attribute type 10 has an invalid length.
[  834.209036][T20335] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.216822][T20335] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.620292][T20348] syzkaller0: entered promiscuous mode
[  834.633111][T20348] syzkaller0: entered allmulticast mode
[  834.826350][T20348] netlink: 'syz.3.5052': attribute type 3 has an invalid length.
[  834.842693][T20348] netlink: 'syz.3.5052': attribute type 1 has an invalid length.
[  834.863440][T20348] netlink: 'syz.3.5052': attribute type 1 has an invalid length.
[  834.896521][T20348] netlink: 'syz.3.5052': attribute type 2 has an invalid length.
[  834.935384][T20348] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.5052'.
[  836.427023][T15138] Bluetooth: hci3: command 0x0406 tx timeout
[  837.150764][T20365] netlink: 'syz.1.5059': attribute type 10 has an invalid length.
[  837.172778][T20365] team0: Port device wlan1 added
[  837.211935][T20374] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5061'.
[  837.485645][T20394] netlink: 'syz.2.5068': attribute type 46 has an invalid length.
[  837.501612][T20396] FAULT_INJECTION: forcing a failure.
[  837.501612][T20396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  837.514872][T20396] CPU: 1 PID: 20396 Comm: syz.0.5069 Not tainted syzkaller #0
[  837.522353][T20396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  837.532458][T20396] Call Trace:
[  837.535758][T20396]  <TASK>
[  837.538703][T20396]  dump_stack_lvl+0x18c/0x250
[  837.543404][T20396]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  837.549596][T20396]  ? show_regs_print_info+0x20/0x20
[  837.554824][T20396]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  837.561017][T20396]  should_fail_ex+0x394/0x4c0
[  837.565721][T20396]  strncpy_from_user+0x36/0x2f0
[  837.570599][T20396]  ? __local_bh_disable_ip+0x108/0x1a0
[  837.576079][T20396]  strncpy_from_user_nofault+0x71/0x140
[  837.581667][T20396]  bpf_probe_read_user_str+0x2a/0x70
[  837.586979][T20396]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  837.592452][T20396]  bpf_test_run+0x2df/0x870
[  837.596984][T20396]  ? bpf_test_run+0x174/0x870
[  837.601690][T20396]  ? dst_hold+0x70/0x70
[  837.605890][T20396]  ? eth_get_headlen+0x210/0x210
[  837.610846][T20396]  ? slab_build_skb+0x25a/0x3e0
[  837.615830][T20396]  ? convert___skb_to_skb+0x3d/0x590
[  837.621135][T20396]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  837.626538][T20396]  ? cpu_online+0x60/0x60
[  837.630886][T20396]  bpf_prog_test_run+0x31f/0x390
[  837.635847][T20396]  __sys_bpf+0x49d/0x890
[  837.640112][T20396]  ? bpf_link_show_fdinfo+0x390/0x390
[  837.645516][T20396]  ? lock_chain_count+0x20/0x20
[  837.650424][T20396]  __x64_sys_bpf+0x7c/0x90
[  837.654871][T20396]  do_syscall_64+0x55/0xb0
[  837.659317][T20396]  ? clear_bhb_loop+0x40/0x90
[  837.664025][T20396]  ? clear_bhb_loop+0x40/0x90
[  837.668734][T20396]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  837.674649][T20396] RIP: 0033:0x7efc1a99e0d9
[  837.679087][T20396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  837.698746][T20396] RSP: 002b:00007efc1b8b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  837.707177][T20396] RAX: ffffffffffffffda RBX: 00007efc1ac25fa0 RCX: 00007efc1a99e0d9
[  837.715167][T20396] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  837.723148][T20396] RBP: 00007efc1b8b8090 R08: 0000000000000000 R09: 0000000000000000
[  837.731141][T20396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  837.739180][T20396] R13: 00007efc1ac26038 R14: 00007efc1ac25fa0 R15: 00007ffce62cb178
[  837.747181][T20396]  </TASK>
[  837.764566][T20398] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5068'.
[  839.222653][T20428] FAULT_INJECTION: forcing a failure.
[  839.222653][T20428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  839.251410][T20428] CPU: 0 PID: 20428 Comm: syz.3.5078 Not tainted syzkaller #0
[  839.259033][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  839.269170][T20428] Call Trace:
[  839.272498][T20428]  <TASK>
[  839.275487][T20428]  dump_stack_lvl+0x18c/0x250
[  839.280233][T20428]  ? show_regs_print_info+0x20/0x20
[  839.285484][T20428]  ? load_image+0x420/0x420
[  839.290064][T20428]  ? __might_fault+0xaa/0x120
[  839.294791][T20428]  ? __lock_acquire+0x7d80/0x7d80
[  839.299884][T20428]  should_fail_ex+0x394/0x4c0
[  839.304618][T20428]  _copy_to_user+0x2f/0xa0
[  839.309066][T20428]  inet_gifconf+0x338/0x500
[  839.313615][T20428]  ? inet_make_mask+0x70/0x70
[  839.318311][T20428]  ? __might_fault+0xaa/0x120
[  839.323005][T20428]  ? __might_fault+0xc6/0x120
[  839.327689][T20428]  ? __might_fault+0xaa/0x120
[  839.332382][T20428]  dev_ifconf+0x206/0x300
[  839.336728][T20428]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  839.341875][T20428]  sock_ioctl+0x1e1/0x7e0
[  839.346230][T20428]  ? sock_poll+0x3e0/0x3e0
[  839.350668][T20428]  ? bpf_lsm_file_ioctl+0x9/0x10
[  839.355638][T20428]  ? security_file_ioctl+0x80/0xa0
[  839.360795][T20428]  ? sock_poll+0x3e0/0x3e0
[  839.365231][T20428]  __se_sys_ioctl+0xfd/0x170
[  839.369851][T20428]  do_syscall_64+0x55/0xb0
[  839.374284][T20428]  ? clear_bhb_loop+0x40/0x90
[  839.379002][T20428]  ? clear_bhb_loop+0x40/0x90
[  839.383701][T20428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  839.389610][T20428] RIP: 0033:0x7f714c19e0d9
[  839.394042][T20428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  839.413674][T20428] RSP: 002b:00007f714d052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  839.422096][T20428] RAX: ffffffffffffffda RBX: 00007f714c425fa0 RCX: 00007f714c19e0d9
[  839.430083][T20428] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  839.438076][T20428] RBP: 00007f714d052090 R08: 0000000000000000 R09: 0000000000000000
[  839.446054][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  839.454033][T20428] R13: 00007f714c426038 R14: 00007f714c425fa0 R15: 00007fffd50a7178
[  839.462024][T20428]  </TASK>
[  839.475783][T20431] sock: sock_timestamping_bind_phc: sock not bind to device
[  839.559362][T20430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5080'.
[  839.618459][T20430] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.778113][T20430] bridge_slave_0 (unregistering): left allmulticast mode
[  839.819200][T20430] bridge_slave_0 (unregistering): left promiscuous mode
[  839.831259][T20430] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.953146][T14620] wlan1: Trigger new scan to find an IBSS to join
[  839.995453][T20443] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  840.041654][T20443] syzkaller0: entered promiscuous mode
[  840.053289][T20443] syzkaller0: entered allmulticast mode
[  841.276743][T20464] netlink: 'syz.3.5089': attribute type 8 has an invalid length.
[  841.303969][T20464] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5089'.
[  842.983554][T14620] wlan1: Trigger new scan to find an IBSS to join
[  844.220534][T20432] delete_channel: no stack
[  844.711692][T20507] sock: sock_timestamping_bind_phc: sock not bind to device
[  844.724132][T20507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5105'.
[  844.964904][T20507] bridge_slave_0 (unregistering): left allmulticast mode
[  845.014255][T20507] bridge_slave_0 (unregistering): left promiscuous mode
[  845.041921][T20507] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.953060][T14617] wlan1: Trigger new scan to find an IBSS to join
[  847.347390][T14608] wlan1: Creating new IBSS network, BSSID be:99:9d:d8:7c:af
[  847.393198][T20541] netlink: 'syz.3.5116': attribute type 10 has an invalid length.
[  847.401177][T20541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  847.426814][T20541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  847.617437][T20541] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  847.648255][T20543] netlink: 'syz.0.5118': attribute type 10 has an invalid length.
[  847.795031][T20548] netlink: 'syz.2.5119': attribute type 11 has an invalid length.
[  847.813903][T20548] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5119'.
[  848.157475][T20564] sock: sock_timestamping_bind_phc: sock not bind to device
[  848.203711][T20564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5123'.
[  848.455652][T20564] bridge_slave_0 (unregistering): left allmulticast mode
[  848.462757][T20564] bridge_slave_0 (unregistering): left promiscuous mode
[  848.496592][T20564] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.852322][T20586] FAULT_INJECTION: forcing a failure.
[  849.852322][T20586] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  849.871787][T20586] CPU: 1 PID: 20586 Comm: syz.2.5132 Not tainted syzkaller #0
[  849.879295][T20586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  849.889387][T20586] Call Trace:
[  849.892687][T20586]  <TASK>
[  849.895641][T20586]  dump_stack_lvl+0x18c/0x250
[  849.900370][T20586]  ? show_regs_print_info+0x20/0x20
[  849.905602][T20586]  ? load_image+0x420/0x420
[  849.910133][T20586]  ? __lock_acquire+0x7d80/0x7d80
[  849.915180][T20586]  ? mark_lock+0x94/0x320
[  849.919538][T20586]  should_fail_ex+0x394/0x4c0
[  849.924259][T20586]  prepare_alloc_pages+0x1e1/0x5b0
[  849.929396][T20586]  __alloc_pages+0x134/0x460
[  849.934011][T20586]  ? zone_statistics+0x170/0x170
[  849.938969][T20586]  ? do_wp_page+0x820/0x34d0
[  849.943601][T20586]  ? do_wp_page+0xf58/0x34d0
[  849.948215][T20586]  ? __lock_acquire+0x7d80/0x7d80
[  849.953287][T20586]  __folio_alloc+0x10/0x20
[  849.957741][T20586]  vma_alloc_folio+0x474/0x8f0
[  849.962535][T20586]  do_wp_page+0x11bc/0x34d0
[  849.967059][T20586]  ? folio_put+0xd0/0xd0
[  849.971310][T20586]  ? do_raw_spin_lock+0x11f/0x2b0
[  849.976353][T20586]  ? __rwlock_init+0x150/0x150
[  849.981135][T20586]  handle_mm_fault+0x1306/0x4a50
[  849.986085][T20586]  ? handle_mm_fault+0xe6/0x4a50
[  849.991046][T20586]  ? lock_vma_under_rcu+0x52c/0x660
[  849.996264][T20586]  ? numa_migrate_prep+0x350/0x350
[  850.001395][T20586]  ? lock_vma_under_rcu+0xe5/0x660
[  850.006536][T20586]  ? do_user_addr_fault+0x1cb/0x12d0
[  850.011835][T20586]  do_user_addr_fault+0xad2/0x12d0
[  850.016974][T20586]  ? rcu_is_watching+0x15/0xb0
[  850.021785][T20586]  exc_page_fault+0x64/0x100
[  850.026413][T20586]  asm_exc_page_fault+0x26/0x30
[  850.031302][T20586] RIP: 0033:0x7f2b85159214
[  850.035738][T20586] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae a4 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[  850.055361][T20586] RSP: 002b:00007f2b86131000 EFLAGS: 00010246
[  850.061463][T20586] RAX: 0000000000000000 RBX: 00007f2b861316c0 RCX: 0000000000000000
[  850.069453][T20586] RDX: 000000000000000f RSI: 00007f2b861310a0 RDI: 0000000000000006
[  850.077442][T20586] RBP: 00007f2b86131090 R08: 0000000000000000 R09: 0000000000000000
[  850.085428][T20586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.093427][T20586] R13: 00007f2b85426038 R14: 00007f2b85425fa0 R15: 00007ffc88885038
[  850.101438][T20586]  </TASK>
[  850.115471][T20586] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  850.317499][T20594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  850.453200][T20601] netlink: 'syz.0.5139': attribute type 10 has an invalid length.
[  850.957728][T20621] sock: sock_timestamping_bind_phc: sock not bind to device
[  850.981003][T20621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5147'.
[  851.197323][T20621] bridge_slave_0 (unregistering): left allmulticast mode
[  851.210738][T20621] bridge_slave_0 (unregistering): left promiscuous mode
[  851.219001][T20621] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.502392][T20639] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5155'.
[  851.546735][T20639] team0: Port device team_slave_0 removed
[  851.557214][T20639] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  854.744829][T20704] FAULT_INJECTION: forcing a failure.
[  854.744829][T20704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  854.765636][T20704] CPU: 0 PID: 20704 Comm: syz.0.5181 Not tainted syzkaller #0
[  854.773176][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  854.783286][T20704] Call Trace:
[  854.786613][T20704]  <TASK>
[  854.789604][T20704]  dump_stack_lvl+0x18c/0x250
[  854.794362][T20704]  ? show_regs_print_info+0x20/0x20
[  854.799635][T20704]  ? load_image+0x420/0x420
[  854.804226][T20704]  ? __might_fault+0xaa/0x120
[  854.808971][T20704]  ? __lock_acquire+0x7d80/0x7d80
[  854.814070][T20704]  should_fail_ex+0x394/0x4c0
[  854.818835][T20704]  _copy_to_user+0x2f/0xa0
[  854.823312][T20704]  inet_gifconf+0x338/0x500
[  854.827895][T20704]  ? inet_make_mask+0x70/0x70
[  854.832641][T20704]  ? __might_fault+0xaa/0x120
[  854.837399][T20704]  ? __might_fault+0xc6/0x120
[  854.842132][T20704]  ? __might_fault+0xaa/0x120
[  854.846911][T20704]  dev_ifconf+0x206/0x300
[  854.851325][T20704]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  854.856544][T20704]  sock_ioctl+0x1e1/0x7e0
[  854.860941][T20704]  ? sock_poll+0x3e0/0x3e0
[  854.865538][T20704]  ? bpf_lsm_file_ioctl+0x9/0x10
[  854.870535][T20704]  ? security_file_ioctl+0x80/0xa0
[  854.875704][T20704]  ? sock_poll+0x3e0/0x3e0
[  854.880191][T20704]  __se_sys_ioctl+0xfd/0x170
[  854.884906][T20704]  do_syscall_64+0x55/0xb0
[  854.889378][T20704]  ? clear_bhb_loop+0x40/0x90
[  854.894115][T20704]  ? clear_bhb_loop+0x40/0x90
[  854.898859][T20704]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  854.904814][T20704] RIP: 0033:0x7efc1a99e0d9
[  854.909287][T20704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.928960][T20704] RSP: 002b:00007efc1b8b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  854.937448][T20704] RAX: ffffffffffffffda RBX: 00007efc1ac25fa0 RCX: 00007efc1a99e0d9
[  854.945480][T20704] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  854.953502][T20704] RBP: 00007efc1b8b8090 R08: 0000000000000000 R09: 0000000000000000
[  854.961606][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  854.969638][T20704] R13: 00007efc1ac26038 R14: 00007efc1ac25fa0 R15: 00007ffce62cb178
[  854.977736][T20704]  </TASK>
[  855.762024][T20738] netlink: 'syz.3.5196': attribute type 10 has an invalid length.
[  856.770863][T20756] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5201'.
[  857.269139][T20760] tap0: tun_chr_ioctl cmd 1074025677
[  857.280520][T20760] tap0: linktype set to 804
[  857.962198][T20787] delete_channel: no stack
[  857.966938][T20787] delete_channel: no stack
[  858.878224][T20798] netlink: 'syz.1.5218': attribute type 10 has an invalid length.
[  859.044978][T20798] team0: Device ipvlan1 failed to register rx_handler
[  859.219393][T20798] syz.1.5218 (20798) used greatest stack depth: 18920 bytes left
[  859.527928][T20823] netlink: 'syz.1.5227': attribute type 10 has an invalid length.
[  859.550187][T20823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  859.589999][T20823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  859.632436][T20823] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  859.648946][T20831] netlink: 'syz.0.5229': attribute type 10 has an invalid length.
[  859.659724][T20833] netlink: 'syz.2.5230': attribute type 11 has an invalid length.
[  859.681820][T20834] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5228'.
[  859.719012][T20834] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present!
[  860.239342][T20866] netlink: 'syz.3.5242': attribute type 10 has an invalid length.
[  860.247906][T20863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  861.209158][T20913] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5260'.
[  861.218854][T20913] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  865.680620][T20964] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5281'.
[  865.711308][T20964] bridge_slave_1: default FDB implementation only supports local addresses
[  866.406001][T20967] netlink: 'syz.3.5282': attribute type 10 has an invalid length.
[  866.438608][T20967] team0: Device ipvlan1 failed to register rx_handler
[  866.638679][T20967] syz.3.5282 (20967) used greatest stack depth: 18728 bytes left
[  866.640023][T20973] netlink: 'syz.2.5284': attribute type 10 has an invalid length.
[  866.878122][T20973] team0: Port device wlan1 added
[  867.235283][T20995] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.5290'.
[  867.297643][T20998] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5293'.
[  867.323249][T20999] netlink: 'syz.0.5292': attribute type 10 has an invalid length.
[  867.445450][T21002] FAULT_INJECTION: forcing a failure.
[  867.445450][T21002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  867.458696][T21002] CPU: 1 PID: 21002 Comm: syz.3.5294 Not tainted syzkaller #0
[  867.466194][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  867.476274][T21002] Call Trace:
[  867.479589][T21002]  <TASK>
[  867.482558][T21002]  dump_stack_lvl+0x18c/0x250
[  867.487273][T21002]  ? show_regs_print_info+0x20/0x20
[  867.492506][T21002]  ? load_image+0x420/0x420
[  867.497059][T21002]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  867.502600][T21002]  should_fail_ex+0x394/0x4c0
[  867.507377][T21002]  strncpy_from_user+0x36/0x2f0
[  867.512280][T21002]  ? __local_bh_disable_ip+0x108/0x1a0
[  867.517812][T21002]  strncpy_from_user_nofault+0x71/0x140
[  867.523413][T21002]  bpf_probe_read_user_str+0x2a/0x70
[  867.528745][T21002]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  867.534237][T21002]  bpf_test_run+0x2df/0x870
[  867.541131][T21002]  ? bpf_test_run+0x174/0x870
[  867.545849][T21002]  ? dst_hold+0x70/0x70
[  867.550057][T21002]  ? eth_get_headlen+0x210/0x210
[  867.555046][T21002]  ? slab_build_skb+0x25a/0x3e0
[  867.559933][T21002]  ? convert___skb_to_skb+0x3d/0x590
[  867.565260][T21002]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  867.570661][T21002]  ? cpu_online+0x60/0x60
[  867.575008][T21002]  bpf_prog_test_run+0x31f/0x390
[  867.579972][T21002]  __sys_bpf+0x49d/0x890
[  867.584235][T21002]  ? bpf_link_show_fdinfo+0x390/0x390
[  867.589639][T21002]  ? lock_chain_count+0x20/0x20
[  867.594517][T21002]  __x64_sys_bpf+0x7c/0x90
[  867.598947][T21002]  do_syscall_64+0x55/0xb0
[  867.603387][T21002]  ? clear_bhb_loop+0x40/0x90
[  867.608081][T21002]  ? clear_bhb_loop+0x40/0x90
[  867.612766][T21002]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  867.618689][T21002] RIP: 0033:0x7f714c19e0d9
[  867.623124][T21002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.642748][T21002] RSP: 002b:00007f714d052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  867.651198][T21002] RAX: ffffffffffffffda RBX: 00007f714c425fa0 RCX: 00007f714c19e0d9
[  867.659221][T21002] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  867.667232][T21002] RBP: 00007f714d052090 R08: 0000000000000000 R09: 0000000000000000
[  867.675225][T21002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  867.683212][T21002] R13: 00007f714c426038 R14: 00007f714c425fa0 R15: 00007fffd50a7178
[  867.691216][T21002]  </TASK>
[  868.602917][T21011] netlink: 'syz.2.5298': attribute type 10 has an invalid length.
[  868.655379][T21011] team0: Device ipvlan1 failed to register rx_handler
[  870.197705][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  870.208049][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  871.761623][T21041] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5306'.
[  872.281927][T21054] netlink: 'syz.2.5312': attribute type 10 has an invalid length.
[  872.311209][T21054] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.372275][T21056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  873.270110][T21080] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5323'.
[  873.299736][T21080] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  873.794473][T21103] netlink: 'syz.0.5332': attribute type 10 has an invalid length.
[  873.871650][T21103] team0: Device hsr_slave_0 failed to register rx_handler
[  874.272427][T21119] netlink: 'syz.3.5338': attribute type 10 has an invalid length.
[  874.305756][T21119] team0: Device nlmon0 is of different type
[  875.848098][T21173] FAULT_INJECTION: forcing a failure.
[  875.848098][T21173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  875.937807][T21173] CPU: 1 PID: 21173 Comm: syz.2.5359 Not tainted syzkaller #0
[  875.945336][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  875.955422][T21173] Call Trace:
[  875.958734][T21173]  <TASK>
[  875.961694][T21173]  dump_stack_lvl+0x18c/0x250
[  875.966413][T21173]  ? show_regs_print_info+0x20/0x20
[  875.971650][T21173]  ? load_image+0x420/0x420
[  875.976200][T21173]  ? __might_fault+0xaa/0x120
[  875.980917][T21173]  ? __lock_acquire+0x7d80/0x7d80
[  875.985982][T21173]  should_fail_ex+0x394/0x4c0
[  875.990710][T21173]  _copy_to_user+0x2f/0xa0
[  875.995179][T21173]  inet_gifconf+0x338/0x500
[  875.999741][T21173]  ? inet_make_mask+0x70/0x70
[  876.004478][T21173]  ? __might_fault+0xaa/0x120
[  876.009195][T21173]  ? __might_fault+0xc6/0x120
[  876.013946][T21173]  ? __might_fault+0xaa/0x120
[  876.018669][T21173]  dev_ifconf+0x206/0x300
[  876.023046][T21173]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  876.028211][T21173]  sock_ioctl+0x1e1/0x7e0
[  876.032583][T21173]  ? sock_poll+0x3e0/0x3e0
[  876.037052][T21173]  ? bpf_lsm_file_ioctl+0x9/0x10
[  876.042016][T21173]  ? security_file_ioctl+0x80/0xa0
[  876.047172][T21173]  ? sock_poll+0x3e0/0x3e0
[  876.051622][T21173]  __se_sys_ioctl+0xfd/0x170
[  876.056257][T21173]  do_syscall_64+0x55/0xb0
[  876.060718][T21173]  ? clear_bhb_loop+0x40/0x90
[  876.065443][T21173]  ? clear_bhb_loop+0x40/0x90
[  876.070162][T21173]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  876.076100][T21173] RIP: 0033:0x7f2b8519e0d9
[  876.080546][T21173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  876.100195][T21173] RSP: 002b:00007f2b86131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  876.108672][T21173] RAX: ffffffffffffffda RBX: 00007f2b85425fa0 RCX: 00007f2b8519e0d9
[  876.116672][T21173] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  876.124675][T21173] RBP: 00007f2b86131090 R08: 0000000000000000 R09: 0000000000000000
[  876.132714][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  876.140729][T21173] R13: 00007f2b85426038 R14: 00007f2b85425fa0 R15: 00007ffc88885038
[  876.148753][T21173]  </TASK>
[  876.564186][T21184] netlink: 'syz.2.5364': attribute type 10 has an invalid length.
[  877.366260][T14619] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  879.539263][T21184] team0: Port device geneve1 added
[  879.564155][T21194] tun0: tun_chr_ioctl cmd 1074025678
[  879.580226][T21194] tun0: group set to 0
[  879.613215][T21195] netlink: 'syz.3.5367': attribute type 21 has an invalid length.
[  879.636742][T21196] netlink: 'syz.3.5367': attribute type 39 has an invalid length.
[  879.854749][T21204] netlink: 'syz.2.5370': attribute type 10 has an invalid length.
[  879.862899][T21204] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5370'.
[  879.975239][T21210] FAULT_INJECTION: forcing a failure.
[  879.975239][T21210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  879.988725][T21210] CPU: 0 PID: 21210 Comm: syz.0.5373 Not tainted syzkaller #0
[  879.996234][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  880.006326][T21210] Call Trace:
[  880.009622][T21210]  <TASK>
[  880.012577][T21210]  dump_stack_lvl+0x18c/0x250
[  880.017271][T21210]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  880.024512][T21210]  ? show_regs_print_info+0x20/0x20
[  880.029736][T21210]  ? load_image+0x420/0x420
[  880.034266][T21210]  ? __bpf_ringbuf_reserve+0x47a/0x5c0
[  880.039747][T21210]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  880.045934][T21210]  should_fail_ex+0x394/0x4c0
[  880.050632][T21210]  strncpy_from_user+0x36/0x2f0
[  880.055500][T21210]  ? __local_bh_disable_ip+0x108/0x1a0
[  880.060977][T21210]  strncpy_from_user_nofault+0x71/0x140
[  880.066548][T21210]  bpf_probe_read_user_str+0x2a/0x70
[  880.071861][T21210]  bpf_prog_0c70681b89b9d13a+0x68/0x6c
[  880.077333][T21210]  bpf_test_run+0x2df/0x870
[  880.081868][T21210]  ? bpf_test_run+0x174/0x870
[  880.086570][T21210]  ? dst_hold+0x70/0x70
[  880.090746][T21210]  ? eth_get_headlen+0x210/0x210
[  880.095703][T21210]  ? slab_build_skb+0x25a/0x3e0
[  880.100585][T21210]  ? convert___skb_to_skb+0x3d/0x590
[  880.105902][T21210]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  880.111307][T21210]  ? cpu_online+0x60/0x60
[  880.115661][T21210]  bpf_prog_test_run+0x31f/0x390
[  880.120618][T21210]  __sys_bpf+0x49d/0x890
[  880.124885][T21210]  ? bpf_link_show_fdinfo+0x390/0x390
[  880.130320][T21210]  ? lock_chain_count+0x20/0x20
[  880.135190][T21210]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  880.141193][T21210]  __x64_sys_bpf+0x7c/0x90
[  880.145621][T21210]  do_syscall_64+0x55/0xb0
[  880.150053][T21210]  ? clear_bhb_loop+0x40/0x90
[  880.154757][T21210]  ? clear_bhb_loop+0x40/0x90
[  880.159468][T21210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  880.165389][T21210] RIP: 0033:0x7efc1a99e0d9
[  880.169822][T21210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  880.189457][T21210] RSP: 002b:00007efc1b8b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  880.197905][T21210] RAX: ffffffffffffffda RBX: 00007efc1ac25fa0 RCX: 00007efc1a99e0d9
[  880.205898][T21210] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  880.213890][T21210] RBP: 00007efc1b8b8090 R08: 0000000000000000 R09: 0000000000000000
[  880.221889][T21210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  880.229875][T21210] R13: 00007efc1ac26038 R14: 00007efc1ac25fa0 R15: 00007ffce62cb178
[  880.237884][T21210]  </TASK>
[  880.516646][T21223] netlink: 'syz.2.5378': attribute type 11 has an invalid length.
[  880.525351][T21223] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5378'.
[  880.625948][T21229] netlink: 'syz.2.5381': attribute type 10 has an invalid length.
[  883.498686][T21229] team0: Port device wlan1 removed
[  883.510779][T21228] netlink: 'syz.0.5380': attribute type 21 has an invalid length.
[  883.572971][T21228] netlink: 'syz.0.5380': attribute type 6 has an invalid length.
[  883.607405][T21228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5380'.
[  883.645872][T21232] netlink: 'syz.0.5380': attribute type 10 has an invalid length.
[  883.679556][T21232] team0: Port device virt_wifi0 added
[  883.699650][T21244] netlink: 'syz.3.5384': attribute type 10 has an invalid length.
[  883.747221][T21244] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.5384'.
[  883.771034][T21247] netlink: 'syz.3.5384': attribute type 10 has an invalid length.
[  883.791791][T21247] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.5384'.
[  884.077256][T21266] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5393'.
[  884.110758][T21266] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  884.468007][T21275] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5395'.
[  887.362158][T21284] netlink: 'syz.2.5398': attribute type 29 has an invalid length.
[  887.392700][T21284] netlink: 'syz.2.5398': attribute type 29 has an invalid length.
[  888.044542][T21302] veth1_to_bond: entered allmulticast mode
[  891.715825][T21342] netlink: 'syz.2.5420': attribute type 21 has an invalid length.
[  891.743368][T21342] netlink: 'syz.2.5420': attribute type 6 has an invalid length.
[  891.761431][T21342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5420'.
[  891.957808][T21346] netlink: 'syz.2.5420': attribute type 10 has an invalid length.
[  891.999698][T21346] team0: Port device virt_wifi0 added
[  892.081784][T21354] netlink: 'syz.0.5423': attribute type 21 has an invalid length.
[  892.107961][T21354] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5423'.
[  892.486564][T21362] netlink: 'syz.3.5427': attribute type 1 has an invalid length.
[  892.496201][T21362] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5427'.
[  892.560671][T21362] netlink: 'syz.3.5427': attribute type 10 has an invalid length.
[  892.574451][T21362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5427'.
[  892.593641][T21362] team0: entered promiscuous mode
[  892.600539][T21362] team_slave_0: entered promiscuous mode
[  892.614669][T21362] team_slave_1: entered promiscuous mode
[  892.622387][T21362] team0: entered allmulticast mode
[  892.631464][T21362] team_slave_0: entered allmulticast mode
[  892.645850][T21362] team_slave_1: entered allmulticast mode
[  892.659504][T21362] bridge0: port 1(team0) entered blocking state
[  892.671038][T21362] bridge0: port 1(team0) entered disabled state
[  895.517392][T21384] netlink: 'syz.1.5435': attribute type 21 has an invalid length.
[  895.603391][T21384] netlink: 'syz.1.5435': attribute type 6 has an invalid length.
[  895.611451][T21384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5435'.
[  895.869712][T21386] netlink: 'syz.2.5436': attribute type 1 has an invalid length.
[  895.921274][T21386] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5436'.
[  896.728955][T21387] netlink: 'syz.1.5435': attribute type 10 has an invalid length.
[  896.739980][T21387] team0: Port device virt_wifi0 added
[  896.948188][T21398] netlink: 'syz.2.5440': attribute type 1 has an invalid length.
[  896.983359][T21398] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.5440'.
[  897.250949][T21398] netlink: 'syz.2.5440': attribute type 10 has an invalid length.
[  897.275000][T21398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5440'.
[  897.319832][T21398] team0: entered promiscuous mode
[  897.346862][T21398] team_slave_1: entered promiscuous mode
[  897.388617][T21398] geneve1: entered promiscuous mode
[  897.422719][T21398] virt_wifi0: entered promiscuous mode
[  897.469474][T21398] team0: entered allmulticast mode
[  897.497603][T21398] team_slave_1: entered allmulticast mode
[  897.508561][T21398] geneve1: entered allmulticast mode
[  897.526848][T21398] virt_wifi0: entered allmulticast mode
[  897.579622][T21398] bridge0: port 1(team0) entered blocking state
[  897.610502][T21398] bridge0: port 1(team0) entered disabled state
[  897.852639][T21402] netlink: 'syz.1.5441': attribute type 21 has an invalid length.
[  897.868384][T21402] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5441'.
[  899.889235][T21406] sit0: entered allmulticast mode
[  900.100510][T21421] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5446'.
[  900.171928][T21421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5446'.
[  900.294787][T21421] sctp: [Deprecated]: syz.1.5446 (pid 21421) Use of int in max_burst socket option deprecated.
[  900.294787][T21421] Use struct sctp_assoc_value instead
[  900.394567][T21428] netlink: 'syz.0.5449': attribute type 1 has an invalid length.
[  900.433362][T21428] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5449'.
[  901.006505][T21444] netlink: 'syz.0.5454': attribute type 1 has an invalid length.
[  901.095507][T21444] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5454'.
[  901.389563][T21444] netlink: 'syz.0.5454': attribute type 10 has an invalid length.
[  901.441824][T21444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5454'.
[  901.501707][T21444] team0: entered promiscuous mode
[  901.538353][T21444] team_slave_0: entered promiscuous mode
[  901.567860][T21444] team_slave_1: entered promiscuous mode
[  901.604320][T21444] virt_wifi0: entered promiscuous mode
[  901.644390][T21444] team0: entered allmulticast mode
[  901.650077][T21444] team_slave_0: entered allmulticast mode
[  901.678193][T21444] team_slave_1: entered allmulticast mode
[  901.697546][T21444] virt_wifi0: entered allmulticast mode
[  901.717464][T21444] bridge0: port 1(team0) entered blocking state
[  901.737321][T21444] bridge0: port 1(team0) entered disabled state
[  904.208442][T21460] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5460'.
[  904.262274][T21460] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5460'.
[  904.301957][T21460] sctp: [Deprecated]: syz.2.5460 (pid 21460) Use of int in max_burst socket option deprecated.
[  904.301957][T21460] Use struct sctp_assoc_value instead
[  904.551828][T21473] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5473'.
[  904.627537][T21473] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5473'.
[  904.732362][T21478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5464'.
[  904.759518][T21479] netlink: 'syz.1.5465': attribute type 1 has an invalid length.
[  904.777559][T21478] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5464'.
[  904.828761][T21473] sctp: [Deprecated]: syz.0.5473 (pid 21473) Use of int in max_burst socket option deprecated.
[  904.828761][T21473] Use struct sctp_assoc_value instead
[  904.833267][T21479] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.5465'.
[  905.246922][T21479] netlink: 'syz.1.5465': attribute type 10 has an invalid length.
[  905.280486][T21479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5465'.
[  905.306156][T21479] team0: entered promiscuous mode
[  905.311437][T21479] team_slave_1: entered promiscuous mode
[  905.332702][T21479] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode
[  905.375313][T21479] virt_wifi0: entered promiscuous mode
[  905.385959][T21479] team0: entered allmulticast mode
[  905.391365][T21479] team_slave_1: entered allmulticast mode
[  905.431009][T21479] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode
[  905.459785][T21479] virt_wifi0: entered allmulticast mode
[  905.486514][T21479] bridge0: port 1(team0) entered blocking state
[  905.530228][T21479] bridge0: port 1(team0) entered disabled state
[  908.598521][T21493] netlink: 'syz.0.5471': attribute type 39 has an invalid length.
[  909.149429][T21507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5477'.
[  909.268982][T21507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5477'.
[  909.632088][T21515] netlink: 'syz.0.5480': attribute type 21 has an invalid length.
[  909.640368][T21515] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5480'.
[  909.969611][T21521] netlink: 'syz.3.5483': attribute type 10 has an invalid length.
[  912.721881][T21529] netlink: 'syz.1.5485': attribute type 10 has an invalid length.
[  912.836143][T21536] netlink: 'syz.3.5486': attribute type 10 has an invalid length.
[  913.164548][T21547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5489'.
[  913.174030][T21547] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5489'.
[  913.225710][T21533] Bluetooth: hci0: command 0x0406 tx timeout
[  913.442814][T21555] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5492'.
[  913.457958][T21555] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  913.639801][T21563] netlink: 'syz.0.5495': attribute type 21 has an invalid length.
[  913.648087][T21563] IPv6: NLM_F_CREATE should be specified when creating new route
[  913.673547][T21563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  913.680809][T21563] IPv6: NLM_F_CREATE should be set when creating new route
[  913.688149][T21563] IPv6: NLM_F_CREATE should be set when creating new route
[  913.695433][T21563] IPv6: NLM_F_CREATE should be set when creating new route
[  913.724770][T21566] netlink: 'syz.0.5495': attribute type 21 has an invalid length.
[  913.732780][T21566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  914.291487][T21590] netlink: 'syz.0.5503': attribute type 1 has an invalid length.
[  914.349574][T21590] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.5503'.
[  914.988301][T21611] FAULT_INJECTION: forcing a failure.
[  914.988301][T21611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  915.023994][T21611] CPU: 0 PID: 21611 Comm: syz.3.5511 Not tainted syzkaller #0
[  915.031555][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  915.041651][T21611] Call Trace:
[  915.044965][T21611]  <TASK>
[  915.047962][T21611]  dump_stack_lvl+0x18c/0x250
[  915.052712][T21611]  ? show_regs_print_info+0x20/0x20
[  915.057963][T21611]  ? load_image+0x420/0x420
[  915.062524][T21611]  ? __might_fault+0xaa/0x120
[  915.067246][T21611]  ? __lock_acquire+0x7d80/0x7d80
[  915.072323][T21611]  should_fail_ex+0x394/0x4c0
[  915.077049][T21611]  _copy_to_user+0x2f/0xa0
[  915.081508][T21611]  inet_gifconf+0x338/0x500
[  915.086069][T21611]  ? inet_make_mask+0x70/0x70
[  915.090791][T21611]  ? __might_fault+0xaa/0x120
[  915.095502][T21611]  ? __might_fault+0xc6/0x120
[  915.100220][T21611]  ? __might_fault+0xaa/0x120
[  915.104962][T21611]  dev_ifconf+0x206/0x300
[  915.109343][T21611]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  915.114528][T21611]  sock_ioctl+0x1e1/0x7e0
[  915.118902][T21611]  ? sock_poll+0x3e0/0x3e0
[  915.123363][T21611]  ? bpf_lsm_file_ioctl+0x9/0x10
[  915.128359][T21611]  ? security_file_ioctl+0x80/0xa0
[  915.133532][T21611]  ? sock_poll+0x3e0/0x3e0
[  915.137990][T21611]  __se_sys_ioctl+0xfd/0x170
[  915.142617][T21611]  do_syscall_64+0x55/0xb0
[  915.147065][T21611]  ? clear_bhb_loop+0x40/0x90
[  915.151783][T21611]  ? clear_bhb_loop+0x40/0x90
[  915.156505][T21611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  915.162426][T21611] RIP: 0033:0x7f714c19e0d9
[  915.166870][T21611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  915.186507][T21611] RSP: 002b:00007f714d031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  915.194955][T21611] RAX: ffffffffffffffda RBX: 00007f714c426090 RCX: 00007f714c19e0d9
[  915.202954][T21611] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  915.210951][T21611] RBP: 00007f714d031090 R08: 0000000000000000 R09: 0000000000000000
[  915.218951][T21611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  915.226953][T21611] R13: 00007f714c426128 R14: 00007f714c426090 R15: 00007fffd50a7178
[  915.234968][T21611]  </TASK>
[  915.759009][T21625] netlink: 'syz.3.5517': attribute type 10 has an invalid length.
[  915.882886][T21625] bridge_slave_1: left allmulticast mode
[  915.892293][T21625] bridge_slave_1: left promiscuous mode
[  915.908054][T21625] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.034694][T21625] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  917.431635][T21654] netlink: 'syz.1.5529': attribute type 10 has an invalid length.
[  917.929225][T21687] netlink: 'syz.0.5543': attribute type 11 has an invalid length.
[  917.938362][T21688] netlink: 'syz.1.5538': attribute type 29 has an invalid length.
[  917.946634][T21687] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5543'.
[  917.969767][T21688] netlink: 'syz.1.5538': attribute type 29 has an invalid length.
[  918.057977][T21685] syzkaller0: entered promiscuous mode
[  918.065751][T21685] syzkaller0: entered allmulticast mode
[  918.076002][T21677] netlink: 'syz.1.5538': attribute type 29 has an invalid length.
[  920.527366][T21718] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5554'.
[  920.542202][T21718] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.5554'.
[  920.564558][T21718] tipc: Started in network mode
[  920.578698][T21718] tipc: Node identity b, cluster identity 73
[  920.586964][T21718] tipc: Node number set to 11
[  923.758155][T21743] netlink: 'syz.2.5564': attribute type 10 has an invalid length.
[  923.774270][T21741] netlink: 'syz.0.5562': attribute type 10 has an invalid length.
[  927.648321][T21785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  927.655987][T21785] IPv6: NLM_F_CREATE should be set when creating new route
[  927.663972][T21785] IPv6: NLM_F_CREATE should be set when creating new route
[  927.671641][T21785] IPv6: NLM_F_CREATE should be set when creating new route
[  927.733566][T21785] netlink: 'syz.0.5580': attribute type 9 has an invalid length.
[  927.762214][T21785] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5580'.
[  928.603136][T21792] netlink: 'syz.0.5580': attribute type 9 has an invalid length.
[  928.627175][T21792] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5580'.
[  929.298912][T21828] netlink: 'syz.0.5596': attribute type 39 has an invalid length.
[  929.880554][T21828] hsr_slave_1 (unregistering): left promiscuous mode
[  930.678616][T21851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  931.063889][T21867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5609'.
[  931.302376][T21867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5609'.
[  931.632220][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  931.638959][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  931.692324][T21858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5609'.
[  931.708080][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5609'.
[  931.926205][T21879] netlink: 'syz.3.5613': attribute type 29 has an invalid length.
[  931.950531][T21879] netlink: 'syz.3.5613': attribute type 29 has an invalid length.
[  931.992400][T21879] netlink: 'syz.3.5613': attribute type 29 has an invalid length.
[  932.016775][T21879] netlink: 'syz.3.5613': attribute type 1 has an invalid length.
[  932.097135][T21878] netlink: 'syz.0.5615': attribute type 10 has an invalid length.
[  932.503748][T21897] sctp: [Deprecated]: syz.3.5619 (pid 21897) Use of int in maxseg socket option.
[  932.503748][T21897] Use struct sctp_assoc_value instead
[  933.703123][T21533] Bluetooth: hci2: command 0x0406 tx timeout
[  939.278014][T21955] FAULT_INJECTION: forcing a failure.
[  939.278014][T21955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  939.351606][T21955] CPU: 1 PID: 21955 Comm: syz.2.5641 Not tainted syzkaller #0
[  939.359128][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  939.369253][T21955] Call Trace:
[  939.372558][T21955]  <TASK>
[  939.375591][T21955]  dump_stack_lvl+0x18c/0x250
[  939.380299][T21955]  ? show_regs_print_info+0x20/0x20
[  939.385538][T21955]  ? load_image+0x420/0x420
[  939.390078][T21955]  ? __might_fault+0xaa/0x120
[  939.394808][T21955]  ? __lock_acquire+0x7d80/0x7d80
[  939.399862][T21955]  should_fail_ex+0x394/0x4c0
[  939.404570][T21955]  _copy_to_user+0x2f/0xa0
[  939.409014][T21955]  inet_gifconf+0x338/0x500
[  939.413550][T21955]  ? inet_make_mask+0x70/0x70
[  939.418253][T21955]  ? __might_fault+0xaa/0x120
[  939.422953][T21955]  ? __might_fault+0xc6/0x120
[  939.427648][T21955]  ? __might_fault+0xaa/0x120
[  939.432357][T21955]  dev_ifconf+0x206/0x300
[  939.436730][T21955]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  939.441868][T21955]  sock_ioctl+0x1e1/0x7e0
[  939.446220][T21955]  ? sock_poll+0x3e0/0x3e0
[  939.450656][T21955]  ? bpf_lsm_file_ioctl+0x9/0x10
[  939.455608][T21955]  ? security_file_ioctl+0x80/0xa0
[  939.460766][T21955]  ? sock_poll+0x3e0/0x3e0
[  939.465208][T21955]  __se_sys_ioctl+0xfd/0x170
[  939.469822][T21955]  do_syscall_64+0x55/0xb0
[  939.474260][T21955]  ? clear_bhb_loop+0x40/0x90
[  939.478954][T21955]  ? clear_bhb_loop+0x40/0x90
[  939.483653][T21955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  939.489572][T21955] RIP: 0033:0x7f2b8519e0d9
[  939.494013][T21955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.513637][T21955] RSP: 002b:00007f2b86131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  939.522062][T21955] RAX: ffffffffffffffda RBX: 00007f2b85425fa0 RCX: 00007f2b8519e0d9
[  939.530050][T21955] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  939.538039][T21955] RBP: 00007f2b86131090 R08: 0000000000000000 R09: 0000000000000000
[  939.546026][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  939.554006][T21955] R13: 00007f2b85426038 R14: 00007f2b85425fa0 R15: 00007ffc88885038
[  939.561999][T21955]  </TASK>
[  939.769079][T21958] netlink: 'syz.2.5642': attribute type 10 has an invalid length.
[  939.823732][T21958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5642'.
[  939.850268][T21958] bond0: entered promiscuous mode
[  939.859704][T21958] bond_slave_0: entered promiscuous mode
[  939.865918][T21958] bond_slave_1: entered promiscuous mode
[  939.871831][T21958] batadv_slave_0: entered promiscuous mode
[  939.882704][T21958] bridge0: port 3(bond0) entered blocking state
[  939.889525][T21958] bridge0: port 3(bond0) entered disabled state
[  939.902412][T21958] bond0: entered allmulticast mode
[  939.907942][T21958] bond_slave_0: entered allmulticast mode
[  939.914095][T21958] bond_slave_1: entered allmulticast mode
[  939.919924][T21958] batadv_slave_0: entered allmulticast mode
[  940.110761][T21973] netlink: 'syz.1.5647': attribute type 39 has an invalid length.
[  943.180793][T21973] hsr_slave_1 (unregistering): left promiscuous mode
[  943.501873][T22000] netlink: 'syz.0.5658': attribute type 21 has an invalid length.
[  943.524289][T22000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5658'.
[  943.556178][T22003] netlink: 'syz.3.5659': attribute type 11 has an invalid length.
[  943.567065][T22003] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5659'.
[  943.944230][ T5781] Bluetooth: hci4: command 0x0406 tx timeout
[  948.263685][T22065] netlink: 'syz.0.5678': attribute type 10 has an invalid length.
[  948.271892][T22065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5678'.
[  948.298122][T22065] bridge0: port 4(bond0) entered blocking state
[  948.313625][T22065] bridge0: port 4(bond0) entered disabled state
[  948.320903][T22065] bond0: entered allmulticast mode
[  948.344160][T22065] bond_slave_0: entered allmulticast mode
[  948.353478][T22065] bond_slave_1: entered allmulticast mode
[  948.375286][T22065] batadv_slave_0: entered allmulticast mode
[  948.400496][T22065] bond0: entered promiscuous mode
[  948.406392][T22065] bond_slave_0: entered promiscuous mode
[  948.413947][T22065] bond_slave_1: entered promiscuous mode
[  948.421445][T22065] batadv_slave_0: entered promiscuous mode
[  952.391586][T22094] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5689'.
[  952.587319][T22099] netlink: 'syz.2.5691': attribute type 10 has an invalid length.
[  952.610705][T22099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5691'.
[  960.054667][T22162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5713'.
[  961.230930][T22181] netlink: 'syz.0.5720': attribute type 10 has an invalid length.
[  961.436765][T22185] netlink: 'syz.1.5721': attribute type 10 has an invalid length.
[  961.688632][T22196] FAULT_INJECTION: forcing a failure.
[  961.688632][T22196] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  961.711346][T22196] CPU: 1 PID: 22196 Comm: syz.3.5726 Not tainted syzkaller #0
[  961.718857][T22196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  961.728942][T22196] Call Trace:
[  961.732247][T22196]  <TASK>
[  961.735213][T22196]  dump_stack_lvl+0x18c/0x250
[  961.739932][T22196]  ? show_regs_print_info+0x20/0x20
[  961.745155][T22196]  ? load_image+0x420/0x420
[  961.749688][T22196]  ? __might_fault+0xaa/0x120
[  961.754385][T22196]  ? __lock_acquire+0x7d80/0x7d80
[  961.759437][T22196]  should_fail_ex+0x394/0x4c0
[  961.764143][T22196]  _copy_to_user+0x2f/0xa0
[  961.768569][T22196]  inet_gifconf+0x338/0x500
[  961.773095][T22196]  ? inet_make_mask+0x70/0x70
[  961.777797][T22196]  ? __might_fault+0xaa/0x120
[  961.782479][T22196]  ? __might_fault+0xc6/0x120
[  961.787168][T22196]  ? __might_fault+0xaa/0x120
[  961.791870][T22196]  dev_ifconf+0x206/0x300
[  961.796220][T22196]  ? sock_diag_rcv_msg+0x5f0/0x5f0
[  961.801360][T22196]  sock_ioctl+0x1e1/0x7e0
[  961.805706][T22196]  ? sock_poll+0x3e0/0x3e0
[  961.810147][T22196]  ? bpf_lsm_file_ioctl+0x9/0x10
[  961.815103][T22196]  ? security_file_ioctl+0x80/0xa0
[  961.820234][T22196]  ? sock_poll+0x3e0/0x3e0
[  961.824687][T22196]  __se_sys_ioctl+0xfd/0x170
[  961.829300][T22196]  do_syscall_64+0x55/0xb0
[  961.833738][T22196]  ? clear_bhb_loop+0x40/0x90
[  961.838451][T22196]  ? clear_bhb_loop+0x40/0x90
[  961.843146][T22196]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  961.849141][T22196] RIP: 0033:0x7f714c19e0d9
[  961.853588][T22196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  961.873292][T22196] RSP: 002b:00007f714d052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  961.881718][T22196] RAX: ffffffffffffffda RBX: 00007f714c425fa0 RCX: 00007f714c19e0d9
[  961.889713][T22196] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000004
[  961.897699][T22196] RBP: 00007f714d052090 R08: 0000000000000000 R09: 0000000000000000
[  961.905682][T22196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  961.913657][T22196] R13: 00007f714c426038 R14: 00007f714c425fa0 R15: 00007fffd50a7178
[  961.921655][T22196]  </TASK>
[  964.605902][T22217] netlink: 'syz.3.5733': attribute type 10 has an invalid length.
[  964.911006][T22234] netlink: 'syz.0.5740': attribute type 1 has an invalid length.
[  964.943791][T22234] netlink: 'syz.0.5740': attribute type 4 has an invalid length.
[  964.968888][T22234] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5740'.
[  965.355502][T22242] wlan0: mtu less than device minimum
[  966.139592][T22258] netlink: 'syz.3.5749': attribute type 11 has an invalid length.
[  966.151582][T22258] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5749'.
[  966.339196][T22262] netlink: 'syz.2.5751': attribute type 1 has an invalid length.
[  966.391737][T22262] netlink: 'syz.2.5751': attribute type 4 has an invalid length.
[  966.400823][T22268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.401204][T22262] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5751'.
[  966.707217][T22282] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5761'.
[  966.740427][T22282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  967.449341][T22310] netlink: 'syz.0.5771': attribute type 10 has an invalid length.
[  967.504282][T22310] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  967.520756][T22310] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  967.547318][T22310] team0: Port device wlan1 added
[  967.560116][T22303] netlink: 'syz.1.5768': attribute type 10 has an invalid length.
[  967.578642][T22309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  970.776829][T22333] syzkaller0: entered promiscuous mode
[  970.790350][T22333] syzkaller0: entered allmulticast mode
[  975.457776][T22379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.040512][T22380] netlink: 'syz.2.5795': attribute type 10 has an invalid length.
[  977.058929][T22380] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode
[  977.083175][T22380] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[  977.109135][T22380] team0: Port device wlan1 added
[  977.133207][T22382] netlink: 'syz.3.5796': attribute type 21 has an invalid length.
[  977.155158][T22383] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5796'.
[  977.190994][T22383] bridge_slave_1: default FDB implementation only supports local addresses
[  977.386766][T22391] sctp: [Deprecated]: syz.2.5799 (pid 22391) Use of int in maxseg socket option.
[  977.386766][T22391] Use struct sctp_assoc_value instead
[  980.952420][T22436] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.5814'.
[  980.988859][T14618] wlan1: Trigger new scan to find an IBSS to join
[  980.997150][T22428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  981.017118][T22435] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.5814'.
[  981.027640][T22436] netlink: zone id is out of range
[  981.044560][T22437] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5814'.
[  981.064602][T22435] netlink: zone id is out of range
[  981.327661][T22443] netlink: 'syz.0.5816': attribute type 10 has an invalid length.
[  982.158659][T22453] syzkaller0: entered promiscuous mode
[  982.199733][T22453] syzkaller0: entered allmulticast mode
[  982.228681][T22454] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5818'.
Stopping sshd: stopped /usr/sbin/sshd (pid 5532)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5513)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5434)
Stopping network: [  984.529426][T14618] wlan1: Creating new IBSS network, BSSID 8a:6b:23:48:27:16
[  986.349399][T22472] netlink: 'syz.0.5819': attribute type 10 has an invalid length.
[  986.365877][T22472] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  986.373841][T22472] mac80211_hwsim hwsim33 wlan1: left allmulticast mode
[  986.382616][T22472] team0: Port device wlan1 removed
[  986.390181][T22476] netlink: 'syz.1.5821': attribute type 10 has an invalid length.
OK
Stopping iptables: OK
Stopping system message bus: done
Stopping klogd: OK
Stopping acpid: [  990.363379][T22546] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5833'.
OK
Stopping syslogd: stopped /sbin/syslogd (pid 5122)
OK
[  991.580889][T22578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5843'.
[  992.019316][T22594] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5848'.
umount: can't remount debugfs read-only
[  992.051070][T22591] netlink: 'syz.2.5848': attribute type 28 has an invalid length.
[  992.081121][T22591] netlink: 'syz.2.5848': attribute type 29 has an invalid length.
[  992.111204][T22591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5848'.
[  992.199300][T22600] netlink: 'syz.3.5850': attribute type 21 has an invalid length.
[  992.228245][T22600] IPv6: NLM_F_CREATE should be specified when creating new route
[  992.237541][T22600] IPv6: Can't replace route, no match found
[  992.679387][T22610] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5855'.
[  992.724321][T22610] team_slave_0: left promiscuous mode
[  992.748056][T22610] team_slave_0: left allmulticast mode
[  992.845412][T22610] team0: Port device team_slave_0 removed
[  992.884461][T22610] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  993.080728][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  993.088790][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  993.420364][T22625] netlink: 'syz.1.5859': attribute type 10 has an invalid length.
[  993.893332][T22631] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5861'.
[  995.692839][T22654] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.5869'.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
[  995.753026][T22654] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5869'.
umount: can't remount /dev/root read-only
[  995.795028][T22654] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.5869'.
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.0.41 closed by remote host.
[  996.664534][T14618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.789902][T14618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.886195][T14618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
[  996.998509][T14618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Requesting system poweroff
[  998.020098][T22660] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  998.037618][T22660] ACPI: PM: Preparing to enter system sleep state S5
[  998.045779][T22660] kvm: exiting hardware virtualization
[  998.051459][T22660] reboot: Power down
serialport: VM disconnected.